./Ultimate.py --spec ../../sv-benchmarks/c/properties/termination.prp --file ../../sv-benchmarks/c/product-lines/elevator_spec3_product09.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for termination Using default analysis Version 9ad7fb26 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_57542290-c927-4871-afb3-936ffa40b3e4/bin/uautomizer-tBqnrhUYjU/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_57542290-c927-4871-afb3-936ffa40b3e4/bin/uautomizer-tBqnrhUYjU/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_57542290-c927-4871-afb3-936ffa40b3e4/bin/uautomizer-tBqnrhUYjU/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_57542290-c927-4871-afb3-936ffa40b3e4/bin/uautomizer-tBqnrhUYjU/config/AutomizerTermination.xml -i ../../sv-benchmarks/c/product-lines/elevator_spec3_product09.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_57542290-c927-4871-afb3-936ffa40b3e4/bin/uautomizer-tBqnrhUYjU/config/svcomp-Termination-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_57542290-c927-4871-afb3-936ffa40b3e4/bin/uautomizer-tBqnrhUYjU --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(F end) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 67b10dcf95f436cfd8f02a55d7d1d272656f1382a4eb6ab4ad3bba992e95e024 --- Real Ultimate output --- This is Ultimate 0.2.1-dev-9ad7fb2 [2021-11-02 22:08:08,222 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-11-02 22:08:08,225 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-11-02 22:08:08,260 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-11-02 22:08:08,261 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-11-02 22:08:08,262 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-11-02 22:08:08,265 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-11-02 22:08:08,267 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-11-02 22:08:08,270 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-11-02 22:08:08,271 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-11-02 22:08:08,273 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-11-02 22:08:08,275 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-11-02 22:08:08,276 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-11-02 22:08:08,277 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-11-02 22:08:08,279 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-11-02 22:08:08,281 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-11-02 22:08:08,283 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-11-02 22:08:08,293 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-11-02 22:08:08,295 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-11-02 22:08:08,301 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-11-02 22:08:08,306 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-11-02 22:08:08,309 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-11-02 22:08:08,311 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-11-02 22:08:08,313 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-11-02 22:08:08,317 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-11-02 22:08:08,323 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-11-02 22:08:08,325 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-11-02 22:08:08,326 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-11-02 22:08:08,329 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-11-02 22:08:08,331 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-11-02 22:08:08,332 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-11-02 22:08:08,333 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-11-02 22:08:08,335 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-11-02 22:08:08,336 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-11-02 22:08:08,337 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-11-02 22:08:08,338 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-11-02 22:08:08,339 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-11-02 22:08:08,339 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-11-02 22:08:08,339 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-11-02 22:08:08,340 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-11-02 22:08:08,341 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-11-02 22:08:08,342 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_57542290-c927-4871-afb3-936ffa40b3e4/bin/uautomizer-tBqnrhUYjU/config/svcomp-Termination-32bit-Automizer_Default.epf [2021-11-02 22:08:08,387 INFO L113 SettingsManager]: Loading preferences was successful [2021-11-02 22:08:08,387 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-11-02 22:08:08,388 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-11-02 22:08:08,388 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-11-02 22:08:08,389 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-11-02 22:08:08,389 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-11-02 22:08:08,390 INFO L138 SettingsManager]: * Use SBE=true [2021-11-02 22:08:08,390 INFO L136 SettingsManager]: Preferences of BuchiAutomizer differ from their defaults: [2021-11-02 22:08:08,390 INFO L138 SettingsManager]: * NCSB implementation=INTSET_LAZY3 [2021-11-02 22:08:08,390 INFO L138 SettingsManager]: * Use old map elimination=false [2021-11-02 22:08:08,390 INFO L138 SettingsManager]: * Use external solver (rank synthesis)=false [2021-11-02 22:08:08,391 INFO L138 SettingsManager]: * Use only trivial implications for array writes=true [2021-11-02 22:08:08,391 INFO L138 SettingsManager]: * Rank analysis=LINEAR_WITH_GUESSES [2021-11-02 22:08:08,391 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-11-02 22:08:08,391 INFO L138 SettingsManager]: * sizeof long=4 [2021-11-02 22:08:08,391 INFO L138 SettingsManager]: * Check unreachability of error function in SV-COMP mode=false [2021-11-02 22:08:08,392 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-11-02 22:08:08,392 INFO L138 SettingsManager]: * sizeof POINTER=4 [2021-11-02 22:08:08,392 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-11-02 22:08:08,392 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=ASSUME [2021-11-02 22:08:08,392 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=ASSUME [2021-11-02 22:08:08,393 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=ASSUME [2021-11-02 22:08:08,393 INFO L138 SettingsManager]: * sizeof long double=12 [2021-11-02 22:08:08,393 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-11-02 22:08:08,393 INFO L138 SettingsManager]: * Assume nondeterminstic values are in range=false [2021-11-02 22:08:08,393 INFO L138 SettingsManager]: * Use constant arrays=true [2021-11-02 22:08:08,394 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=ASSUME [2021-11-02 22:08:08,394 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-11-02 22:08:08,394 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-11-02 22:08:08,394 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-11-02 22:08:08,395 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2021-11-02 22:08:08,395 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-11-02 22:08:08,396 INFO L136 SettingsManager]: Preferences of IcfgTransformer differ from their defaults: [2021-11-02 22:08:08,396 INFO L138 SettingsManager]: * TransformationType=MODULO_NEIGHBOR WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_57542290-c927-4871-afb3-936ffa40b3e4/bin/uautomizer-tBqnrhUYjU/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_57542290-c927-4871-afb3-936ffa40b3e4/bin/uautomizer-tBqnrhUYjU Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(F end) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 67b10dcf95f436cfd8f02a55d7d1d272656f1382a4eb6ab4ad3bba992e95e024 [2021-11-02 22:08:08,719 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-11-02 22:08:08,752 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-11-02 22:08:08,755 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-11-02 22:08:08,756 INFO L271 PluginConnector]: Initializing CDTParser... [2021-11-02 22:08:08,759 INFO L275 PluginConnector]: CDTParser initialized [2021-11-02 22:08:08,760 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_57542290-c927-4871-afb3-936ffa40b3e4/bin/uautomizer-tBqnrhUYjU/../../sv-benchmarks/c/product-lines/elevator_spec3_product09.cil.c [2021-11-02 22:08:08,878 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_57542290-c927-4871-afb3-936ffa40b3e4/bin/uautomizer-tBqnrhUYjU/data/dd10ab98c/6cdfdd590dbf4f8e94df99afa8192ec1/FLAGc435d8b90 [2021-11-02 22:08:09,591 INFO L306 CDTParser]: Found 1 translation units. [2021-11-02 22:08:09,592 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_57542290-c927-4871-afb3-936ffa40b3e4/sv-benchmarks/c/product-lines/elevator_spec3_product09.cil.c [2021-11-02 22:08:09,647 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_57542290-c927-4871-afb3-936ffa40b3e4/bin/uautomizer-tBqnrhUYjU/data/dd10ab98c/6cdfdd590dbf4f8e94df99afa8192ec1/FLAGc435d8b90 [2021-11-02 22:08:09,794 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_57542290-c927-4871-afb3-936ffa40b3e4/bin/uautomizer-tBqnrhUYjU/data/dd10ab98c/6cdfdd590dbf4f8e94df99afa8192ec1 [2021-11-02 22:08:09,798 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-11-02 22:08:09,802 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-11-02 22:08:09,804 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-11-02 22:08:09,804 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-11-02 22:08:09,808 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-11-02 22:08:09,810 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 02.11 10:08:09" (1/1) ... [2021-11-02 22:08:09,813 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@2fc59571 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 10:08:09, skipping insertion in model container [2021-11-02 22:08:09,813 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 02.11 10:08:09" (1/1) ... [2021-11-02 22:08:09,822 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-11-02 22:08:09,930 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-11-02 22:08:10,278 WARN L228 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_57542290-c927-4871-afb3-936ffa40b3e4/sv-benchmarks/c/product-lines/elevator_spec3_product09.cil.c[21710,21723] [2021-11-02 22:08:10,628 INFO L206 PostProcessor]: Analyzing one entry point: main [2021-11-02 22:08:10,643 INFO L203 MainTranslator]: Completed pre-run [2021-11-02 22:08:10,686 WARN L228 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_57542290-c927-4871-afb3-936ffa40b3e4/sv-benchmarks/c/product-lines/elevator_spec3_product09.cil.c[21710,21723] [2021-11-02 22:08:10,808 INFO L206 PostProcessor]: Analyzing one entry point: main [2021-11-02 22:08:10,866 INFO L208 MainTranslator]: Completed translation [2021-11-02 22:08:10,867 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 10:08:10 WrapperNode [2021-11-02 22:08:10,867 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-11-02 22:08:10,869 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-11-02 22:08:10,869 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-11-02 22:08:10,869 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-11-02 22:08:10,880 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 10:08:10" (1/1) ... [2021-11-02 22:08:10,959 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 10:08:10" (1/1) ... [2021-11-02 22:08:11,413 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-11-02 22:08:11,414 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-11-02 22:08:11,414 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-11-02 22:08:11,415 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-11-02 22:08:11,427 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 10:08:10" (1/1) ... [2021-11-02 22:08:11,427 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 10:08:10" (1/1) ... [2021-11-02 22:08:11,489 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 10:08:10" (1/1) ... [2021-11-02 22:08:11,491 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 10:08:10" (1/1) ... [2021-11-02 22:08:11,720 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 10:08:10" (1/1) ... [2021-11-02 22:08:12,004 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 10:08:10" (1/1) ... [2021-11-02 22:08:12,059 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 10:08:10" (1/1) ... [2021-11-02 22:08:12,168 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-11-02 22:08:12,170 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-11-02 22:08:12,171 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-11-02 22:08:12,171 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-11-02 22:08:12,174 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 10:08:10" (1/1) ... [2021-11-02 22:08:12,216 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-11-02 22:08:12,232 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_57542290-c927-4871-afb3-936ffa40b3e4/bin/uautomizer-tBqnrhUYjU/z3 [2021-11-02 22:08:12,267 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_57542290-c927-4871-afb3-936ffa40b3e4/bin/uautomizer-tBqnrhUYjU/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-11-02 22:08:12,286 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_57542290-c927-4871-afb3-936ffa40b3e4/bin/uautomizer-tBqnrhUYjU/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (1)] Waiting until timeout for monitored process [2021-11-02 22:08:12,355 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2021-11-02 22:08:12,355 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-11-02 22:08:12,370 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-11-02 22:08:12,370 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-11-02 22:08:23,839 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-11-02 22:08:23,840 INFO L299 CfgBuilder]: Removed 1227 assume(true) statements. [2021-11-02 22:08:23,851 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 02.11 10:08:23 BoogieIcfgContainer [2021-11-02 22:08:23,852 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-11-02 22:08:23,853 INFO L113 PluginConnector]: ------------------------BuchiAutomizer---------------------------- [2021-11-02 22:08:23,853 INFO L271 PluginConnector]: Initializing BuchiAutomizer... [2021-11-02 22:08:23,858 INFO L275 PluginConnector]: BuchiAutomizer initialized [2021-11-02 22:08:23,859 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2021-11-02 22:08:23,859 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "CDTParser AST 02.11 10:08:09" (1/3) ... [2021-11-02 22:08:23,861 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@445cabb0 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 02.11 10:08:23, skipping insertion in model container [2021-11-02 22:08:23,861 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2021-11-02 22:08:23,861 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 10:08:10" (2/3) ... [2021-11-02 22:08:23,862 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@445cabb0 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 02.11 10:08:23, skipping insertion in model container [2021-11-02 22:08:23,862 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2021-11-02 22:08:23,862 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 02.11 10:08:23" (3/3) ... [2021-11-02 22:08:23,866 INFO L389 chiAutomizerObserver]: Analyzing ICFG elevator_spec3_product09.cil.c [2021-11-02 22:08:23,932 INFO L359 BuchiCegarLoop]: Interprodecural is true [2021-11-02 22:08:23,932 INFO L360 BuchiCegarLoop]: Hoare is false [2021-11-02 22:08:23,933 INFO L361 BuchiCegarLoop]: Compute interpolants for ForwardPredicates [2021-11-02 22:08:23,933 INFO L362 BuchiCegarLoop]: Backedges is STRAIGHT_LINE [2021-11-02 22:08:23,933 INFO L363 BuchiCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2021-11-02 22:08:23,933 INFO L364 BuchiCegarLoop]: Difference is false [2021-11-02 22:08:23,933 INFO L365 BuchiCegarLoop]: Minimize is MINIMIZE_SEVPA [2021-11-02 22:08:23,934 INFO L368 BuchiCegarLoop]: ======== Iteration 0==of CEGAR loop == BuchiCegarLoop======== [2021-11-02 22:08:24,186 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 5853 states, 5852 states have (on average 1.8984962406015038) internal successors, (11110), 5852 states have internal predecessors, (11110), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:08:24,429 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1188 [2021-11-02 22:08:24,430 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-11-02 22:08:24,430 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-11-02 22:08:24,469 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-02 22:08:24,470 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-02 22:08:24,470 INFO L425 BuchiCegarLoop]: ======== Iteration 1============ [2021-11-02 22:08:24,495 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 5853 states, 5852 states have (on average 1.8984962406015038) internal successors, (11110), 5852 states have internal predecessors, (11110), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:08:24,622 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1188 [2021-11-02 22:08:24,623 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-11-02 22:08:24,624 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-11-02 22:08:24,637 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-02 22:08:24,638 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-02 22:08:24,667 INFO L791 eck$LassoCheckResult]: Stem: 3652#ULTIMATE.startENTRYtrue #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(2);call write~init~int(48, #t~string4.base, #t~string4.offset, 1);call write~init~int(0, #t~string4.base, 1 + #t~string4.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(31);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(12);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(10);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string59.base, #t~string59.offset, 1);call write~init~int(95, #t~string59.base, 1 + #t~string59.offset, 1);call write~init~int(93, #t~string59.base, 2 + #t~string59.offset, 1);call write~init~int(0, #t~string59.base, 3 + #t~string59.offset, 1);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string61.base, #t~string61.offset, 1);call write~init~int(93, #t~string61.base, 1 + #t~string61.offset, 1);call write~init~int(32, #t~string61.base, 2 + #t~string61.offset, 1);call write~init~int(0, #t~string61.base, 3 + #t~string61.offset, 1);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string63.base, #t~string63.offset, 1);call write~init~int(97, #t~string63.base, 1 + #t~string63.offset, 1);call write~init~int(116, #t~string63.base, 2 + #t~string63.offset, 1);call write~init~int(32, #t~string63.base, 3 + #t~string63.offset, 1);call write~init~int(0, #t~string63.base, 4 + #t~string63.offset, 1);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string65.base, #t~string65.offset, 1);call write~init~int(105, #t~string65.base, 1 + #t~string65.offset, 1);call write~init~int(0, #t~string65.base, 2 + #t~string65.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(10);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string69.base, #t~string69.offset, 1);call write~init~int(112, #t~string69.base, 1 + #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 2 + #t~string69.offset, 1);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string71.base, #t~string71.offset, 1);call write~init~int(111, #t~string71.base, 1 + #t~string71.offset, 1);call write~init~int(119, #t~string71.base, 2 + #t~string71.offset, 1);call write~init~int(110, #t~string71.base, 3 + #t~string71.offset, 1);call write~init~int(0, #t~string71.base, 4 + #t~string71.offset, 1);call #t~string73.base, #t~string73.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string73.base, #t~string73.offset, 1);call write~init~int(73, #t~string73.base, 1 + #t~string73.offset, 1);call write~init~int(76, #t~string73.base, 2 + #t~string73.offset, 1);call write~init~int(95, #t~string73.base, 3 + #t~string73.offset, 1);call write~init~int(112, #t~string73.base, 4 + #t~string73.offset, 1);call write~init~int(58, #t~string73.base, 5 + #t~string73.offset, 1);call write~init~int(0, #t~string73.base, 6 + #t~string73.offset, 1);call #t~string75.base, #t~string75.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string75.base, #t~string75.offset, 1);call write~init~int(37, #t~string75.base, 1 + #t~string75.offset, 1);call write~init~int(105, #t~string75.base, 2 + #t~string75.offset, 1);call write~init~int(0, #t~string75.base, 3 + #t~string75.offset, 1);call #t~string77.base, #t~string77.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string77.base, #t~string77.offset, 1);call write~init~int(37, #t~string77.base, 1 + #t~string77.offset, 1);call write~init~int(105, #t~string77.base, 2 + #t~string77.offset, 1);call write~init~int(0, #t~string77.base, 3 + #t~string77.offset, 1);call #t~string79.base, #t~string79.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string79.base, #t~string79.offset, 1);call write~init~int(37, #t~string79.base, 1 + #t~string79.offset, 1);call write~init~int(105, #t~string79.base, 2 + #t~string79.offset, 1);call write~init~int(0, #t~string79.base, 3 + #t~string79.offset, 1);call #t~string81.base, #t~string81.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string81.base, #t~string81.offset, 1);call write~init~int(37, #t~string81.base, 1 + #t~string81.offset, 1);call write~init~int(105, #t~string81.base, 2 + #t~string81.offset, 1);call write~init~int(0, #t~string81.base, 3 + #t~string81.offset, 1);call #t~string83.base, #t~string83.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string83.base, #t~string83.offset, 1);call write~init~int(37, #t~string83.base, 1 + #t~string83.offset, 1);call write~init~int(105, #t~string83.base, 2 + #t~string83.offset, 1);call write~init~int(0, #t~string83.base, 3 + #t~string83.offset, 1);call #t~string85.base, #t~string85.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string85.base, #t~string85.offset, 1);call write~init~int(70, #t~string85.base, 1 + #t~string85.offset, 1);call write~init~int(95, #t~string85.base, 2 + #t~string85.offset, 1);call write~init~int(112, #t~string85.base, 3 + #t~string85.offset, 1);call write~init~int(58, #t~string85.base, 4 + #t~string85.offset, 1);call write~init~int(0, #t~string85.base, 5 + #t~string85.offset, 1);call #t~string88.base, #t~string88.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string88.base, #t~string88.offset, 1);call write~init~int(37, #t~string88.base, 1 + #t~string88.offset, 1);call write~init~int(105, #t~string88.base, 2 + #t~string88.offset, 1);call write~init~int(0, #t~string88.base, 3 + #t~string88.offset, 1);call #t~string91.base, #t~string91.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string91.base, #t~string91.offset, 1);call write~init~int(37, #t~string91.base, 1 + #t~string91.offset, 1);call write~init~int(105, #t~string91.base, 2 + #t~string91.offset, 1);call write~init~int(0, #t~string91.base, 3 + #t~string91.offset, 1);call #t~string94.base, #t~string94.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string94.base, #t~string94.offset, 1);call write~init~int(37, #t~string94.base, 1 + #t~string94.offset, 1);call write~init~int(105, #t~string94.base, 2 + #t~string94.offset, 1);call write~init~int(0, #t~string94.base, 3 + #t~string94.offset, 1);call #t~string97.base, #t~string97.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string97.base, #t~string97.offset, 1);call write~init~int(37, #t~string97.base, 1 + #t~string97.offset, 1);call write~init~int(105, #t~string97.base, 2 + #t~string97.offset, 1);call write~init~int(0, #t~string97.base, 3 + #t~string97.offset, 1);call #t~string100.base, #t~string100.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string100.base, #t~string100.offset, 1);call write~init~int(37, #t~string100.base, 1 + #t~string100.offset, 1);call write~init~int(105, #t~string100.base, 2 + #t~string100.offset, 1);call write~init~int(0, #t~string100.base, 3 + #t~string100.offset, 1);call #t~string102.base, #t~string102.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string102.base, #t~string102.offset, 1);call write~init~int(0, #t~string102.base, 1 + #t~string102.offset, 1);call #t~string151.base, #t~string151.offset := #Ultimate.allocOnStack(30);call #t~string152.base, #t~string152.offset := #Ultimate.allocOnStack(9);call #t~string153.base, #t~string153.offset := #Ultimate.allocOnStack(21);call #t~string154.base, #t~string154.offset := #Ultimate.allocOnStack(30);call #t~string155.base, #t~string155.offset := #Ultimate.allocOnStack(9);call #t~string156.base, #t~string156.offset := #Ultimate.allocOnStack(21);call #t~string160.base, #t~string160.offset := #Ultimate.allocOnStack(30);call #t~string161.base, #t~string161.offset := #Ultimate.allocOnStack(9);call #t~string162.base, #t~string162.offset := #Ultimate.allocOnStack(25);call #t~string163.base, #t~string163.offset := #Ultimate.allocOnStack(30);call #t~string164.base, #t~string164.offset := #Ultimate.allocOnStack(9);call #t~string165.base, #t~string165.offset := #Ultimate.allocOnStack(25);~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 5725#L-1true havoc main_#res;havoc main_#t~ret118, main_~retValue_acc~22, main_~tmp~19;havoc main_~retValue_acc~22;havoc main_~tmp~19; 1068#L2430true havoc valid_product_#res;havoc valid_product_~retValue_acc~20;havoc valid_product_~retValue_acc~20;valid_product_~retValue_acc~20 := 1;valid_product_#res := valid_product_~retValue_acc~20; 2071#L2438true main_#t~ret118 := valid_product_#res;main_~tmp~19 := main_#t~ret118;havoc main_#t~ret118; 839#L2777true assume 0 != main_~tmp~19; 2930#L2754true ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 1572#L247true havoc bobCall_#t~ret106, bobCall_~tmp~11;havoc bobCall_~tmp~11;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 3166#L878true assume 0 == getOrigin_~person;getOrigin_~retValue_acc~4 := 4;getOrigin_#res := getOrigin_~retValue_acc~4; 3256#L903true bobCall_#t~ret106 := getOrigin_#res;bobCall_~tmp~11 := bobCall_#t~ret106;havoc bobCall_#t~ret106;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 4784#L525true assume 0 == initPersonOnFloor_~floor; 4728#L526true assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 2082#L633-1true callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 906#L317true assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 3559#L329-2true havoc timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_#t~ret53, timeShift_#t~ret54, timeShift_#t~ret55, timeShift_#t~ret56, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 992#L1184true __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 5742#L1236true __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 3275#L2814true assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 1374#L2815true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 635#L1201true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 197#L1222true __utac_acc__Specification3_spec__1_#t~ret121 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret121;havoc __utac_acc__Specification3_spec__1_#t~ret121; 486#L2819true assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 21#L2920true havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret32, stopRequestedAtCurrentFloor_#t~ret33, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 4098#L254true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1629#L281true stopRequestedAtCurrentFloor_#t~ret32 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret32;havoc stopRequestedAtCurrentFloor_#t~ret32; 116#L1797true assume 0 != stopRequestedAtCurrentFloor_~tmp___0~4;stopRequestedAtCurrentFloor_~retValue_acc~16 := 1;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 1782#L1809true timeShift_#t~ret46 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 4202#L1948true assume !(0 != timeShift_~tmp___9~2); 3157#L2039true assume !(1 == ~doorState~0); 5810#L2039-2true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_#t~ret24, stopRequestedInDirection_#t~ret25, stopRequestedInDirection_#t~ret26, stopRequestedInDirection_#t~ret27, stopRequestedInDirection_#t~ret28, stopRequestedInDirection_#t~ret29, stopRequestedInDirection_#t~ret30, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1880#L1388true assume !(1 == stopRequestedInDirection_~dir); 4688#L1557true assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 1558#L1710true timeShift_#t~ret53 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret53;havoc timeShift_#t~ret53; 436#L2047true assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret31, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 1484#L1764true assume !(1 == ~currentHeading~0); 4989#L1774true assume !(0 == ~currentFloorID~0); 2714#L1774-2true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 4676#L1780-5true havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 1503#L2945true assume !(-1 == ~expectedDirection~0); 675#L2957true assume !(1 == ~expectedDirection~0); 5791#L2958true havoc timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_#t~ret53, timeShift_#t~ret54, timeShift_#t~ret55, timeShift_#t~ret56, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 3104#L1184-1true __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 3551#L1236-3true __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 5161#L2814-1true assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 5268#L2876-1true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 3351#L1201-16true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 2483#L1222-16true __utac_acc__Specification3_spec__1_#t~ret126 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret126;havoc __utac_acc__Specification3_spec__1_#t~ret126; 3840#L2880-2true assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 4633#L2920-1true havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret32, stopRequestedAtCurrentFloor_#t~ret33, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1750#L254-21true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 4431#L281-21true stopRequestedAtCurrentFloor_#t~ret32 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret32;havoc stopRequestedAtCurrentFloor_#t~ret32; 5171#L1797-1true assume 0 != stopRequestedAtCurrentFloor_~tmp___0~4;stopRequestedAtCurrentFloor_~retValue_acc~16 := 1;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 2239#L1809-1true timeShift_#t~ret46 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 3163#L1948-1true assume !(0 != timeShift_~tmp___9~2); 3945#L2039-3true assume !(1 == ~doorState~0); 4539#L2039-5true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_#t~ret24, stopRequestedInDirection_#t~ret25, stopRequestedInDirection_#t~ret26, stopRequestedInDirection_#t~ret27, stopRequestedInDirection_#t~ret28, stopRequestedInDirection_#t~ret29, stopRequestedInDirection_#t~ret30, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 2939#L1388-2true assume !(1 == stopRequestedInDirection_~dir); 941#L1557-2true assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 4522#L1710-2true timeShift_#t~ret53 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret53;havoc timeShift_#t~ret53; 2334#L2047-1true assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret31, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 4832#L1764-3true assume !(1 == ~currentHeading~0); 5490#L1774-9true assume !(0 == ~currentFloorID~0); 737#L1774-11true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 3227#L1780-11true havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 2726#L2945-1true assume !(-1 == ~expectedDirection~0); 1448#L2957-1true assume !(1 == ~expectedDirection~0); 5079#L2958-1true havoc timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_#t~ret53, timeShift_#t~ret54, timeShift_#t~ret55, timeShift_#t~ret56, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 1990#L1184-2true __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 3918#L1236-6true __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 995#L2814-2true assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 3386#L2876-2true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 528#L1201-27true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 4319#L1222-27true __utac_acc__Specification3_spec__1_#t~ret126 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret126;havoc __utac_acc__Specification3_spec__1_#t~ret126; 3063#L2880-4true assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 3790#L2920-2true havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret32, stopRequestedAtCurrentFloor_#t~ret33, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1532#L254-42true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 2785#L281-42true stopRequestedAtCurrentFloor_#t~ret32 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret32;havoc stopRequestedAtCurrentFloor_#t~ret32; 5077#L1797-2true assume 0 != stopRequestedAtCurrentFloor_~tmp___0~4;stopRequestedAtCurrentFloor_~retValue_acc~16 := 1;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 4934#L1809-2true timeShift_#t~ret46 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 4243#L1948-2true assume !(0 != timeShift_~tmp___9~2); 158#L2039-6true assume !(1 == ~doorState~0); 1224#L2039-8true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_#t~ret24, stopRequestedInDirection_#t~ret25, stopRequestedInDirection_#t~ret26, stopRequestedInDirection_#t~ret27, stopRequestedInDirection_#t~ret28, stopRequestedInDirection_#t~ret29, stopRequestedInDirection_#t~ret30, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 3264#L1388-4true assume !(1 == stopRequestedInDirection_~dir); 4348#L1557-4true assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 4320#L1710-4true timeShift_#t~ret53 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret53;havoc timeShift_#t~ret53; 770#L2047-2true assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret31, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 5054#L1764-6true assume !(1 == ~currentHeading~0); 1923#L1774-18true assume !(0 == ~currentFloorID~0); 729#L1774-20true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 4782#L1780-17true havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 4711#L2945-2true assume !(-1 == ~expectedDirection~0); 4563#L2957-2true assume !(1 == ~expectedDirection~0); 3493#L2958-2true havoc bobCall_#t~ret106, bobCall_~tmp~11;havoc bobCall_~tmp~11;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 5580#L878-1true assume 0 == getOrigin_~person;getOrigin_~retValue_acc~4 := 4;getOrigin_#res := getOrigin_~retValue_acc~4; 2881#L903-1true bobCall_#t~ret106 := getOrigin_#res;bobCall_~tmp~11 := bobCall_#t~ret106;havoc bobCall_#t~ret106;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 5158#L525-1true assume 0 == initPersonOnFloor_~floor; 2135#L526-2true assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 4238#L633-3true callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 5535#L317-2true assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 5224#L329-5true havoc cleanup_#t~ret112, cleanup_#t~ret113, cleanup_~i~3, cleanup_~tmp~17, cleanup_~tmp___0~8, cleanup_~__cil_tmp4~0;havoc cleanup_~i~3;havoc cleanup_~tmp~17;havoc cleanup_~tmp___0~8;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_#t~ret53, timeShift_#t~ret54, timeShift_#t~ret55, timeShift_#t~ret56, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 5340#L1184-3true __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 2474#L1236-9true __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 578#L2814-3true assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 535#L2815-3true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 696#L1201-33true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 2519#L1222-33true __utac_acc__Specification3_spec__1_#t~ret121 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret121;havoc __utac_acc__Specification3_spec__1_#t~ret121; 257#L2819-6true assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 311#L2920-3true havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret32, stopRequestedAtCurrentFloor_#t~ret33, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 3364#L254-63true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 2603#L281-63true stopRequestedAtCurrentFloor_#t~ret32 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret32;havoc stopRequestedAtCurrentFloor_#t~ret32; 765#L1797-3true assume 0 != stopRequestedAtCurrentFloor_~tmp___0~4;stopRequestedAtCurrentFloor_~retValue_acc~16 := 1;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 1544#L1809-3true timeShift_#t~ret46 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 1240#L1948-3true assume !(0 != timeShift_~tmp___9~2); 2122#L2039-9true assume !(1 == ~doorState~0); 5276#L2039-11true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_#t~ret24, stopRequestedInDirection_#t~ret25, stopRequestedInDirection_#t~ret26, stopRequestedInDirection_#t~ret27, stopRequestedInDirection_#t~ret28, stopRequestedInDirection_#t~ret29, stopRequestedInDirection_#t~ret30, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 3237#L1388-6true assume !(1 == stopRequestedInDirection_~dir); 206#L1557-6true assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 5435#L1710-6true timeShift_#t~ret53 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret53;havoc timeShift_#t~ret53; 2822#L2047-3true assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret31, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 2688#L1764-9true assume !(1 == ~currentHeading~0); 5086#L1774-27true assume !(0 == ~currentFloorID~0); 348#L1774-29true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 4191#L1780-23true havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 762#L2945-3true assume !(-1 == ~expectedDirection~0); 3708#L2957-3true assume !(1 == ~expectedDirection~0); 1918#L2958-3true cleanup_~i~3 := 0; 2476#L2586-2true [2021-11-02 22:08:24,670 INFO L793 eck$LassoCheckResult]: Loop: 2476#L2586-2true assume !false; 3225#L2587true cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 505#L2590true assume cleanup_~i~3 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~6;havoc isBlocked_~retValue_acc~6;isBlocked_~retValue_acc~6 := 0;isBlocked_#res := isBlocked_~retValue_acc~6; 388#L1035true cleanup_#t~ret112 := isBlocked_#res;cleanup_~tmp___0~8 := cleanup_#t~ret112;havoc cleanup_#t~ret112; 1950#L2594true assume 1 != cleanup_~tmp___0~8; 2229#L2594-1true havoc isIdle_#res;havoc isIdle_#t~ret19, isIdle_~retValue_acc~13, isIdle_~tmp~4;havoc isIdle_~retValue_acc~13;havoc isIdle_~tmp~4;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret14, anyStopRequested_#t~ret15, anyStopRequested_#t~ret16, anyStopRequested_#t~ret17, anyStopRequested_#t~ret18, anyStopRequested_~retValue_acc~12, anyStopRequested_~tmp~3, anyStopRequested_~tmp___0~2, anyStopRequested_~tmp___1~2, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~12;havoc anyStopRequested_~tmp~3;havoc anyStopRequested_~tmp___0~2;havoc anyStopRequested_~tmp___1~2;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 5159#L254-84true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 4709#L281-84true anyStopRequested_#t~ret14 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret14;havoc anyStopRequested_#t~ret14; 5003#L1292true assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~12 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~12; 4746#L1356true isIdle_#t~ret19 := anyStopRequested_#res;isIdle_~tmp~4 := isIdle_#t~ret19;havoc isIdle_#t~ret19;isIdle_~retValue_acc~13 := (if 0 == isIdle_~tmp~4 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~13; 1141#L1369true cleanup_#t~ret113 := isIdle_#res;cleanup_~tmp~17 := cleanup_#t~ret113;havoc cleanup_#t~ret113; 2926#L2606true assume !(0 != cleanup_~tmp~17);havoc timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_#t~ret53, timeShift_#t~ret54, timeShift_#t~ret55, timeShift_#t~ret56, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 4548#L1184-4true __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 133#L1236-12true __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 5164#L2814-4true assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 2109#L2815-4true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 5798#L1201-44true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 3902#L1222-44true __utac_acc__Specification3_spec__1_#t~ret121 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret121;havoc __utac_acc__Specification3_spec__1_#t~ret121; 1343#L2819-8true assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 3428#L2920-4true havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret32, stopRequestedAtCurrentFloor_#t~ret33, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 499#L254-89true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 2917#L281-89true stopRequestedAtCurrentFloor_#t~ret32 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret32;havoc stopRequestedAtCurrentFloor_#t~ret32; 3815#L1797-4true assume 0 != stopRequestedAtCurrentFloor_~tmp___0~4;stopRequestedAtCurrentFloor_~retValue_acc~16 := 1;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 258#L1809-4true timeShift_#t~ret46 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 5252#L1948-4true assume !(0 != timeShift_~tmp___9~2); 4645#L2039-12true assume 1 == ~doorState~0;~doorState~0 := 0; 4306#L2039-14true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_#t~ret24, stopRequestedInDirection_#t~ret25, stopRequestedInDirection_#t~ret26, stopRequestedInDirection_#t~ret27, stopRequestedInDirection_#t~ret28, stopRequestedInDirection_#t~ret29, stopRequestedInDirection_#t~ret30, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 5562#L1388-8true assume !(1 == stopRequestedInDirection_~dir); 4318#L1557-8true assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 880#L1710-8true timeShift_#t~ret53 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret53;havoc timeShift_#t~ret53; 5248#L2047-4true assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret31, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 4477#L1764-12true assume !(1 == ~currentHeading~0); 5640#L1774-36true assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 4070#L1774-38true assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1649#L1780-29true havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 4898#L2945-4true assume !(-1 == ~expectedDirection~0); 4314#L2957-4true assume !(1 == ~expectedDirection~0); 1113#L2958-4true cleanup_~i~3 := 1 + cleanup_~i~3; 2476#L2586-2true [2021-11-02 22:08:24,680 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-02 22:08:24,682 INFO L85 PathProgramCache]: Analyzing trace with hash -568130459, now seen corresponding path program 1 times [2021-11-02 22:08:24,694 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-02 22:08:24,695 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1486062711] [2021-11-02 22:08:24,696 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-02 22:08:24,697 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-02 22:08:25,069 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-02 22:08:25,366 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-02 22:08:25,366 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-02 22:08:25,367 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1486062711] [2021-11-02 22:08:25,369 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1486062711] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-02 22:08:25,369 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-02 22:08:25,369 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-11-02 22:08:25,372 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1514480987] [2021-11-02 22:08:25,387 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-11-02 22:08:25,390 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-02 22:08:25,391 INFO L85 PathProgramCache]: Analyzing trace with hash -1158197810, now seen corresponding path program 1 times [2021-11-02 22:08:25,391 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-02 22:08:25,392 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1010636803] [2021-11-02 22:08:25,392 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-02 22:08:25,393 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-02 22:08:25,422 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-02 22:08:25,495 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-02 22:08:25,496 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-02 22:08:25,496 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1010636803] [2021-11-02 22:08:25,496 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1010636803] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-02 22:08:25,497 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-02 22:08:25,497 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-11-02 22:08:25,497 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [645634692] [2021-11-02 22:08:25,499 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-11-02 22:08:25,500 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-02 22:08:25,518 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-11-02 22:08:25,519 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-11-02 22:08:25,542 INFO L87 Difference]: Start difference. First operand has 5853 states, 5852 states have (on average 1.8984962406015038) internal successors, (11110), 5852 states have internal predecessors, (11110), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 6 states, 6 states have (on average 6.333333333333333) internal successors, (38), 6 states have internal predecessors, (38), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:08:32,922 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-02 22:08:32,923 INFO L93 Difference]: Finished difference Result 14697 states and 27598 transitions. [2021-11-02 22:08:32,924 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2021-11-02 22:08:32,925 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 14697 states and 27598 transitions. [2021-11-02 22:08:33,131 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 3397 [2021-11-02 22:08:33,280 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 14697 states to 14627 states and 27517 transitions. [2021-11-02 22:08:33,281 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 14627 [2021-11-02 22:08:33,302 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 14627 [2021-11-02 22:08:33,302 INFO L73 IsDeterministic]: Start isDeterministic. Operand 14627 states and 27517 transitions. [2021-11-02 22:08:33,342 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-11-02 22:08:33,342 INFO L681 BuchiCegarLoop]: Abstraction has 14627 states and 27517 transitions. [2021-11-02 22:08:33,377 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 14627 states and 27517 transitions. [2021-11-02 22:08:33,645 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 14627 to 9729. [2021-11-02 22:08:33,678 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9729 states, 9729 states have (on average 1.8826189742008428) internal successors, (18316), 9728 states have internal predecessors, (18316), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:08:33,731 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9729 states to 9729 states and 18316 transitions. [2021-11-02 22:08:33,732 INFO L704 BuchiCegarLoop]: Abstraction has 9729 states and 18316 transitions. [2021-11-02 22:08:33,733 INFO L587 BuchiCegarLoop]: Abstraction has 9729 states and 18316 transitions. [2021-11-02 22:08:33,733 INFO L425 BuchiCegarLoop]: ======== Iteration 2============ [2021-11-02 22:08:33,734 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 9729 states and 18316 transitions. [2021-11-02 22:08:33,790 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 2181 [2021-11-02 22:08:33,792 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-11-02 22:08:33,792 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-11-02 22:08:33,804 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-02 22:08:33,805 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-02 22:08:33,806 INFO L791 eck$LassoCheckResult]: Stem: 25830#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(2);call write~init~int(48, #t~string4.base, #t~string4.offset, 1);call write~init~int(0, #t~string4.base, 1 + #t~string4.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(31);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(12);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(10);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string59.base, #t~string59.offset, 1);call write~init~int(95, #t~string59.base, 1 + #t~string59.offset, 1);call write~init~int(93, #t~string59.base, 2 + #t~string59.offset, 1);call write~init~int(0, #t~string59.base, 3 + #t~string59.offset, 1);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string61.base, #t~string61.offset, 1);call write~init~int(93, #t~string61.base, 1 + #t~string61.offset, 1);call write~init~int(32, #t~string61.base, 2 + #t~string61.offset, 1);call write~init~int(0, #t~string61.base, 3 + #t~string61.offset, 1);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string63.base, #t~string63.offset, 1);call write~init~int(97, #t~string63.base, 1 + #t~string63.offset, 1);call write~init~int(116, #t~string63.base, 2 + #t~string63.offset, 1);call write~init~int(32, #t~string63.base, 3 + #t~string63.offset, 1);call write~init~int(0, #t~string63.base, 4 + #t~string63.offset, 1);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string65.base, #t~string65.offset, 1);call write~init~int(105, #t~string65.base, 1 + #t~string65.offset, 1);call write~init~int(0, #t~string65.base, 2 + #t~string65.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(10);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string69.base, #t~string69.offset, 1);call write~init~int(112, #t~string69.base, 1 + #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 2 + #t~string69.offset, 1);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string71.base, #t~string71.offset, 1);call write~init~int(111, #t~string71.base, 1 + #t~string71.offset, 1);call write~init~int(119, #t~string71.base, 2 + #t~string71.offset, 1);call write~init~int(110, #t~string71.base, 3 + #t~string71.offset, 1);call write~init~int(0, #t~string71.base, 4 + #t~string71.offset, 1);call #t~string73.base, #t~string73.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string73.base, #t~string73.offset, 1);call write~init~int(73, #t~string73.base, 1 + #t~string73.offset, 1);call write~init~int(76, #t~string73.base, 2 + #t~string73.offset, 1);call write~init~int(95, #t~string73.base, 3 + #t~string73.offset, 1);call write~init~int(112, #t~string73.base, 4 + #t~string73.offset, 1);call write~init~int(58, #t~string73.base, 5 + #t~string73.offset, 1);call write~init~int(0, #t~string73.base, 6 + #t~string73.offset, 1);call #t~string75.base, #t~string75.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string75.base, #t~string75.offset, 1);call write~init~int(37, #t~string75.base, 1 + #t~string75.offset, 1);call write~init~int(105, #t~string75.base, 2 + #t~string75.offset, 1);call write~init~int(0, #t~string75.base, 3 + #t~string75.offset, 1);call #t~string77.base, #t~string77.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string77.base, #t~string77.offset, 1);call write~init~int(37, #t~string77.base, 1 + #t~string77.offset, 1);call write~init~int(105, #t~string77.base, 2 + #t~string77.offset, 1);call write~init~int(0, #t~string77.base, 3 + #t~string77.offset, 1);call #t~string79.base, #t~string79.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string79.base, #t~string79.offset, 1);call write~init~int(37, #t~string79.base, 1 + #t~string79.offset, 1);call write~init~int(105, #t~string79.base, 2 + #t~string79.offset, 1);call write~init~int(0, #t~string79.base, 3 + #t~string79.offset, 1);call #t~string81.base, #t~string81.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string81.base, #t~string81.offset, 1);call write~init~int(37, #t~string81.base, 1 + #t~string81.offset, 1);call write~init~int(105, #t~string81.base, 2 + #t~string81.offset, 1);call write~init~int(0, #t~string81.base, 3 + #t~string81.offset, 1);call #t~string83.base, #t~string83.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string83.base, #t~string83.offset, 1);call write~init~int(37, #t~string83.base, 1 + #t~string83.offset, 1);call write~init~int(105, #t~string83.base, 2 + #t~string83.offset, 1);call write~init~int(0, #t~string83.base, 3 + #t~string83.offset, 1);call #t~string85.base, #t~string85.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string85.base, #t~string85.offset, 1);call write~init~int(70, #t~string85.base, 1 + #t~string85.offset, 1);call write~init~int(95, #t~string85.base, 2 + #t~string85.offset, 1);call write~init~int(112, #t~string85.base, 3 + #t~string85.offset, 1);call write~init~int(58, #t~string85.base, 4 + #t~string85.offset, 1);call write~init~int(0, #t~string85.base, 5 + #t~string85.offset, 1);call #t~string88.base, #t~string88.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string88.base, #t~string88.offset, 1);call write~init~int(37, #t~string88.base, 1 + #t~string88.offset, 1);call write~init~int(105, #t~string88.base, 2 + #t~string88.offset, 1);call write~init~int(0, #t~string88.base, 3 + #t~string88.offset, 1);call #t~string91.base, #t~string91.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string91.base, #t~string91.offset, 1);call write~init~int(37, #t~string91.base, 1 + #t~string91.offset, 1);call write~init~int(105, #t~string91.base, 2 + #t~string91.offset, 1);call write~init~int(0, #t~string91.base, 3 + #t~string91.offset, 1);call #t~string94.base, #t~string94.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string94.base, #t~string94.offset, 1);call write~init~int(37, #t~string94.base, 1 + #t~string94.offset, 1);call write~init~int(105, #t~string94.base, 2 + #t~string94.offset, 1);call write~init~int(0, #t~string94.base, 3 + #t~string94.offset, 1);call #t~string97.base, #t~string97.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string97.base, #t~string97.offset, 1);call write~init~int(37, #t~string97.base, 1 + #t~string97.offset, 1);call write~init~int(105, #t~string97.base, 2 + #t~string97.offset, 1);call write~init~int(0, #t~string97.base, 3 + #t~string97.offset, 1);call #t~string100.base, #t~string100.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string100.base, #t~string100.offset, 1);call write~init~int(37, #t~string100.base, 1 + #t~string100.offset, 1);call write~init~int(105, #t~string100.base, 2 + #t~string100.offset, 1);call write~init~int(0, #t~string100.base, 3 + #t~string100.offset, 1);call #t~string102.base, #t~string102.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string102.base, #t~string102.offset, 1);call write~init~int(0, #t~string102.base, 1 + #t~string102.offset, 1);call #t~string151.base, #t~string151.offset := #Ultimate.allocOnStack(30);call #t~string152.base, #t~string152.offset := #Ultimate.allocOnStack(9);call #t~string153.base, #t~string153.offset := #Ultimate.allocOnStack(21);call #t~string154.base, #t~string154.offset := #Ultimate.allocOnStack(30);call #t~string155.base, #t~string155.offset := #Ultimate.allocOnStack(9);call #t~string156.base, #t~string156.offset := #Ultimate.allocOnStack(21);call #t~string160.base, #t~string160.offset := #Ultimate.allocOnStack(30);call #t~string161.base, #t~string161.offset := #Ultimate.allocOnStack(9);call #t~string162.base, #t~string162.offset := #Ultimate.allocOnStack(25);call #t~string163.base, #t~string163.offset := #Ultimate.allocOnStack(30);call #t~string164.base, #t~string164.offset := #Ultimate.allocOnStack(9);call #t~string165.base, #t~string165.offset := #Ultimate.allocOnStack(25);~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 25831#L-1 havoc main_#res;havoc main_#t~ret118, main_~retValue_acc~22, main_~tmp~19;havoc main_~retValue_acc~22;havoc main_~tmp~19; 22816#L2430 havoc valid_product_#res;havoc valid_product_~retValue_acc~20;havoc valid_product_~retValue_acc~20;valid_product_~retValue_acc~20 := 1;valid_product_#res := valid_product_~retValue_acc~20; 22817#L2438 main_#t~ret118 := valid_product_#res;main_~tmp~19 := main_#t~ret118;havoc main_#t~ret118; 22408#L2777 assume 0 != main_~tmp~19; 22409#L2754 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 23631#L247 havoc bobCall_#t~ret106, bobCall_~tmp~11;havoc bobCall_~tmp~11;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 23632#L878 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~4 := 4;getOrigin_#res := getOrigin_~retValue_acc~4; 21800#L903 bobCall_#t~ret106 := getOrigin_#res;bobCall_~tmp~11 := bobCall_#t~ret106;havoc bobCall_#t~ret106;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 25516#L525 assume 0 == initPersonOnFloor_~floor; 26395#L526 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 20583#L633-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 22533#L317 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 22534#L329-2 havoc timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_#t~ret53, timeShift_#t~ret54, timeShift_#t~ret55, timeShift_#t~ret56, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 22679#L1184 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 22680#L1236 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 25536#L2814 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 23328#L2815 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 22032#L1201 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 21084#L1222 __utac_acc__Specification3_spec__1_#t~ret121 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret121;havoc __utac_acc__Specification3_spec__1_#t~ret121; 21085#L2819 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 20633#L2920 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret32, stopRequestedAtCurrentFloor_#t~ret33, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 20634#L254 assume !(0 == isFloorCalling_~floorID); 25733#L258 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 21433#L281 stopRequestedAtCurrentFloor_#t~ret32 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret32;havoc stopRequestedAtCurrentFloor_#t~ret32; 20888#L1797 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~4;stopRequestedAtCurrentFloor_~retValue_acc~16 := 1;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 20889#L1809 timeShift_#t~ret46 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 23925#L1948 assume !(0 != timeShift_~tmp___9~2); 25438#L2039 assume !(1 == ~doorState~0); 25439#L2039-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_#t~ret24, stopRequestedInDirection_#t~ret25, stopRequestedInDirection_#t~ret26, stopRequestedInDirection_#t~ret27, stopRequestedInDirection_#t~ret28, stopRequestedInDirection_#t~ret29, stopRequestedInDirection_#t~ret30, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 24057#L1388 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 22115#L828 stopRequestedInDirection_#t~ret20 := isTopFloor_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 21494#L1392 assume 0 != stopRequestedInDirection_~tmp~5;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 20980#L1710 timeShift_#t~ret53 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret53;havoc timeShift_#t~ret53; 21626#L2047 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret31, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 21628#L1764 assume !(1 == ~currentHeading~0); 23503#L1774 assume !(0 == ~currentFloorID~0); 25023#L1774-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 24427#L1780-5 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 23532#L2945 assume !(-1 == ~expectedDirection~0); 22104#L2957 assume !(1 == ~expectedDirection~0); 22105#L2958 havoc timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_#t~ret53, timeShift_#t~ret54, timeShift_#t~ret55, timeShift_#t~ret56, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 25381#L1184-1 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 25382#L1236-3 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 25768#L2814-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 26532#L2876-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 26557#L2886-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 21310#L2897-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 21312#L2908-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 24116#L2919-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 23982#L2920-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret32, stopRequestedAtCurrentFloor_#t~ret33, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 26356#L254-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 21503#L281-21 stopRequestedAtCurrentFloor_#t~ret32 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret32;havoc stopRequestedAtCurrentFloor_#t~ret32; 26262#L1797-1 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~4;stopRequestedAtCurrentFloor_~retValue_acc~16 := 1;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 23941#L1809-1 timeShift_#t~ret46 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 24518#L1948-1 assume !(0 != timeShift_~tmp___9~2); 25445#L2039-3 assume !(1 == ~doorState~0); 26023#L2039-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_#t~ret24, stopRequestedInDirection_#t~ret25, stopRequestedInDirection_#t~ret26, stopRequestedInDirection_#t~ret27, stopRequestedInDirection_#t~ret28, stopRequestedInDirection_#t~ret29, stopRequestedInDirection_#t~ret30, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 25233#L1388-2 assume !(1 == stopRequestedInDirection_~dir); 25234#L1557-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 21368#L1710-2 timeShift_#t~ret53 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret53;havoc timeShift_#t~ret53; 24620#L2047-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret31, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 24622#L1764-3 assume !(1 == ~currentHeading~0); 26439#L1774-9 assume !(0 == ~currentFloorID~0); 21431#L1774-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 20603#L1780-11 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 25034#L2945-1 assume !(-1 == ~expectedDirection~0); 23442#L2957-1 assume !(1 == ~expectedDirection~0); 20998#L2958-1 havoc timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_#t~ret53, timeShift_#t~ret54, timeShift_#t~ret55, timeShift_#t~ret56, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 24206#L1184-2 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 24207#L1236-6 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 22684#L2814-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 22685#L2876-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 29222#L2886-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 29221#L2897-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 29220#L2908-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 29196#L2919-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 25925#L2920-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret32, stopRequestedAtCurrentFloor_#t~ret33, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 23581#L254-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 20853#L281-42 stopRequestedAtCurrentFloor_#t~ret32 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret32;havoc stopRequestedAtCurrentFloor_#t~ret32; 25092#L1797-2 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~4;stopRequestedAtCurrentFloor_~retValue_acc~16 := 1;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 26229#L1809-2 timeShift_#t~ret46 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 26176#L1948-2 assume !(0 != timeShift_~tmp___9~2); 20990#L2039-6 assume !(1 == ~doorState~0); 20991#L2039-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_#t~ret24, stopRequestedInDirection_#t~ret25, stopRequestedInDirection_#t~ret26, stopRequestedInDirection_#t~ret27, stopRequestedInDirection_#t~ret28, stopRequestedInDirection_#t~ret29, stopRequestedInDirection_#t~ret30, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 23083#L1388-4 assume !(1 == stopRequestedInDirection_~dir); 25524#L1557-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 20715#L1710-4 timeShift_#t~ret53 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret53;havoc timeShift_#t~ret53; 22287#L2047-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret31, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 22289#L1764-6 assume !(1 == ~currentHeading~0); 26499#L1774-18 assume !(0 == ~currentFloorID~0); 22209#L1774-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 22210#L1780-17 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 26390#L2945-2 assume !(-1 == ~expectedDirection~0); 26319#L2957-2 assume !(1 == ~expectedDirection~0); 20710#L2958-2 havoc bobCall_#t~ret106, bobCall_~tmp~11;havoc bobCall_~tmp~11;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 25714#L878-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~4 := 4;getOrigin_#res := getOrigin_~retValue_acc~4; 22824#L903-1 bobCall_#t~ret106 := getOrigin_#res;bobCall_~tmp~11 := bobCall_#t~ret106;havoc bobCall_#t~ret106;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 25176#L525-1 assume 0 == initPersonOnFloor_~floor; 24380#L526-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 20702#L633-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 26173#L317-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 21167#L329-5 havoc cleanup_#t~ret112, cleanup_#t~ret113, cleanup_~i~3, cleanup_~tmp~17, cleanup_~tmp___0~8, cleanup_~__cil_tmp4~0;havoc cleanup_~i~3;havoc cleanup_~tmp~17;havoc cleanup_~tmp___0~8;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_#t~ret53, timeShift_#t~ret54, timeShift_#t~ret55, timeShift_#t~ret56, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 26546#L1184-3 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 24771#L1236-9 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 21920#L2814-3 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 21834#L2815-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0); 21836#L2825-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 1;buttonForFloorIsPressed_#in~floorID := 1;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 21639#L1201-34 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 20643#L1222-34 __utac_acc__Specification3_spec__1_#t~ret122 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___3~5 := __utac_acc__Specification3_spec__1_#t~ret122;havoc __utac_acc__Specification3_spec__1_#t~ret122; 25418#L2830-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___3~5;~expectedDirection~0 := 1; 21342#L2920-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret32, stopRequestedAtCurrentFloor_#t~ret33, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 21343#L254-63 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 23314#L281-63 stopRequestedAtCurrentFloor_#t~ret32 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret32;havoc stopRequestedAtCurrentFloor_#t~ret32; 22278#L1797-3 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~4;stopRequestedAtCurrentFloor_~retValue_acc~16 := 1;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 22279#L1809-3 timeShift_#t~ret46 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 23105#L1948-3 assume !(0 != timeShift_~tmp___9~2); 23107#L2039-9 assume !(1 == ~doorState~0); 24360#L2039-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_#t~ret24, stopRequestedInDirection_#t~ret25, stopRequestedInDirection_#t~ret26, stopRequestedInDirection_#t~ret27, stopRequestedInDirection_#t~ret28, stopRequestedInDirection_#t~ret29, stopRequestedInDirection_#t~ret30, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 25500#L1388-6 assume !(1 == stopRequestedInDirection_~dir); 25501#L1557-6 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 30139#L1710-6 timeShift_#t~ret53 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret53;havoc timeShift_#t~ret53; 30137#L2047-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret31, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 24994#L1764-9 assume !(1 == ~currentHeading~0); 24995#L1774-27 assume !(0 == ~currentFloorID~0); 21426#L1774-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 21427#L1780-23 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 22272#L2945-3 assume !(-1 == ~expectedDirection~0); 22028#L2957-3 assume !(1 == ~expectedDirection~0); 20983#L2958-3 cleanup_~i~3 := 0; 22899#L2586-2 [2021-11-02 22:08:33,807 INFO L793 eck$LassoCheckResult]: Loop: 22899#L2586-2 assume !false; 24775#L2587 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 21772#L2590 assume cleanup_~i~3 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~6;havoc isBlocked_~retValue_acc~6;isBlocked_~retValue_acc~6 := 0;isBlocked_#res := isBlocked_~retValue_acc~6; 21520#L1035 cleanup_#t~ret112 := isBlocked_#res;cleanup_~tmp___0~8 := cleanup_#t~ret112;havoc cleanup_#t~ret112; 21521#L2594 assume 1 != cleanup_~tmp___0~8; 24152#L2594-1 havoc isIdle_#res;havoc isIdle_#t~ret19, isIdle_~retValue_acc~13, isIdle_~tmp~4;havoc isIdle_~retValue_acc~13;havoc isIdle_~tmp~4;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret14, anyStopRequested_#t~ret15, anyStopRequested_#t~ret16, anyStopRequested_#t~ret17, anyStopRequested_#t~ret18, anyStopRequested_~retValue_acc~12, anyStopRequested_~tmp~3, anyStopRequested_~tmp___0~2, anyStopRequested_~tmp___1~2, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~12;havoc anyStopRequested_~tmp~3;havoc anyStopRequested_~tmp___0~2;havoc anyStopRequested_~tmp___1~2;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 24506#L254-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 22493#L281-84 anyStopRequested_#t~ret14 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret14;havoc anyStopRequested_#t~ret14; 26388#L1292 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~12 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~12; 21947#L1356 isIdle_#t~ret19 := anyStopRequested_#res;isIdle_~tmp~4 := isIdle_#t~ret19;havoc isIdle_#t~ret19;isIdle_~retValue_acc~13 := (if 0 == isIdle_~tmp~4 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~13; 22943#L1369 cleanup_#t~ret113 := isIdle_#res;cleanup_~tmp~17 := cleanup_#t~ret113;havoc cleanup_#t~ret113; 22944#L2606 assume !(0 != cleanup_~tmp~17);havoc timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_#t~ret53, timeShift_#t~ret54, timeShift_#t~ret55, timeShift_#t~ret56, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 25221#L1184-4 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 20931#L1236-12 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 20932#L2814-4 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 24345#L2815-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0); 23596#L2825-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 1;buttonForFloorIsPressed_#in~floorID := 1;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 23597#L1201-45 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 23014#L1222-45 __utac_acc__Specification3_spec__1_#t~ret122 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___3~5 := __utac_acc__Specification3_spec__1_#t~ret122;havoc __utac_acc__Specification3_spec__1_#t~ret122; 22234#L2830-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___3~5;~expectedDirection~0 := 1; 20673#L2920-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret32, stopRequestedAtCurrentFloor_#t~ret33, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 25657#L254-89 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 23605#L281-89 stopRequestedAtCurrentFloor_#t~ret32 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret32;havoc stopRequestedAtCurrentFloor_#t~ret32; 25215#L1797-4 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~4;stopRequestedAtCurrentFloor_~retValue_acc~16 := 1;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 21229#L1809-4 timeShift_#t~ret46 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 21230#L1948-4 assume !(0 != timeShift_~tmp___9~2); 26362#L2039-12 assume 1 == ~doorState~0;~doorState~0 := 0; 26201#L2039-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_#t~ret24, stopRequestedInDirection_#t~ret25, stopRequestedInDirection_#t~ret26, stopRequestedInDirection_#t~ret27, stopRequestedInDirection_#t~ret28, stopRequestedInDirection_#t~ret29, stopRequestedInDirection_#t~ret30, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 26202#L1388-8 assume !(1 == stopRequestedInDirection_~dir); 26615#L1557-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 30057#L1710-8 timeShift_#t~ret53 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret53;havoc timeShift_#t~ret53; 30054#L2047-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret31, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 30055#L1764-12 assume !(1 == ~currentHeading~0); 30179#L1774-36 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 24680#L1774-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 20869#L1780-29 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 23735#L2945-4 assume !(-1 == ~expectedDirection~0); 23996#L2957-4 assume !(1 == ~expectedDirection~0); 22898#L2958-4 cleanup_~i~3 := 1 + cleanup_~i~3; 22899#L2586-2 [2021-11-02 22:08:33,809 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-02 22:08:33,809 INFO L85 PathProgramCache]: Analyzing trace with hash -2119866386, now seen corresponding path program 1 times [2021-11-02 22:08:33,810 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-02 22:08:33,810 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [906924156] [2021-11-02 22:08:33,811 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-02 22:08:33,812 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-02 22:08:33,897 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-02 22:08:34,005 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-02 22:08:34,008 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-02 22:08:34,008 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [906924156] [2021-11-02 22:08:34,008 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [906924156] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-02 22:08:34,008 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-02 22:08:34,009 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-11-02 22:08:34,009 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1381515138] [2021-11-02 22:08:34,010 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-11-02 22:08:34,012 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-02 22:08:34,012 INFO L85 PathProgramCache]: Analyzing trace with hash -348227913, now seen corresponding path program 1 times [2021-11-02 22:08:34,013 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-02 22:08:34,014 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1028633742] [2021-11-02 22:08:34,015 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-02 22:08:34,016 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-02 22:08:34,026 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-02 22:08:34,063 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-02 22:08:34,063 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-02 22:08:34,063 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1028633742] [2021-11-02 22:08:34,063 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1028633742] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-02 22:08:34,064 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-02 22:08:34,064 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-11-02 22:08:34,064 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [832966340] [2021-11-02 22:08:34,064 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-11-02 22:08:34,064 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-02 22:08:34,065 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-11-02 22:08:34,065 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-11-02 22:08:34,066 INFO L87 Difference]: Start difference. First operand 9729 states and 18316 transitions. cyclomatic complexity: 8588 Second operand has 5 states, 5 states have (on average 7.8) internal successors, (39), 5 states have internal predecessors, (39), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:08:35,490 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-02 22:08:35,490 INFO L93 Difference]: Finished difference Result 18914 states and 35540 transitions. [2021-11-02 22:08:35,491 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-11-02 22:08:35,491 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 18914 states and 35540 transitions. [2021-11-02 22:08:35,755 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 4255 [2021-11-02 22:08:35,867 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 18914 states to 18914 states and 35540 transitions. [2021-11-02 22:08:35,867 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 18914 [2021-11-02 22:08:35,896 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 18914 [2021-11-02 22:08:35,896 INFO L73 IsDeterministic]: Start isDeterministic. Operand 18914 states and 35540 transitions. [2021-11-02 22:08:35,924 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-11-02 22:08:35,924 INFO L681 BuchiCegarLoop]: Abstraction has 18914 states and 35540 transitions. [2021-11-02 22:08:35,945 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 18914 states and 35540 transitions. [2021-11-02 22:08:36,194 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 18914 to 9729. [2021-11-02 22:08:36,213 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9729 states, 9729 states have (on average 1.8768629869462432) internal successors, (18260), 9728 states have internal predecessors, (18260), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:08:36,245 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9729 states to 9729 states and 18260 transitions. [2021-11-02 22:08:36,245 INFO L704 BuchiCegarLoop]: Abstraction has 9729 states and 18260 transitions. [2021-11-02 22:08:36,245 INFO L587 BuchiCegarLoop]: Abstraction has 9729 states and 18260 transitions. [2021-11-02 22:08:36,245 INFO L425 BuchiCegarLoop]: ======== Iteration 3============ [2021-11-02 22:08:36,246 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 9729 states and 18260 transitions. [2021-11-02 22:08:36,296 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 2181 [2021-11-02 22:08:36,297 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-11-02 22:08:36,297 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-11-02 22:08:36,306 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-02 22:08:36,307 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-02 22:08:36,309 INFO L791 eck$LassoCheckResult]: Stem: 54466#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(2);call write~init~int(48, #t~string4.base, #t~string4.offset, 1);call write~init~int(0, #t~string4.base, 1 + #t~string4.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(31);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(12);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(10);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string59.base, #t~string59.offset, 1);call write~init~int(95, #t~string59.base, 1 + #t~string59.offset, 1);call write~init~int(93, #t~string59.base, 2 + #t~string59.offset, 1);call write~init~int(0, #t~string59.base, 3 + #t~string59.offset, 1);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string61.base, #t~string61.offset, 1);call write~init~int(93, #t~string61.base, 1 + #t~string61.offset, 1);call write~init~int(32, #t~string61.base, 2 + #t~string61.offset, 1);call write~init~int(0, #t~string61.base, 3 + #t~string61.offset, 1);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string63.base, #t~string63.offset, 1);call write~init~int(97, #t~string63.base, 1 + #t~string63.offset, 1);call write~init~int(116, #t~string63.base, 2 + #t~string63.offset, 1);call write~init~int(32, #t~string63.base, 3 + #t~string63.offset, 1);call write~init~int(0, #t~string63.base, 4 + #t~string63.offset, 1);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string65.base, #t~string65.offset, 1);call write~init~int(105, #t~string65.base, 1 + #t~string65.offset, 1);call write~init~int(0, #t~string65.base, 2 + #t~string65.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(10);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string69.base, #t~string69.offset, 1);call write~init~int(112, #t~string69.base, 1 + #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 2 + #t~string69.offset, 1);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string71.base, #t~string71.offset, 1);call write~init~int(111, #t~string71.base, 1 + #t~string71.offset, 1);call write~init~int(119, #t~string71.base, 2 + #t~string71.offset, 1);call write~init~int(110, #t~string71.base, 3 + #t~string71.offset, 1);call write~init~int(0, #t~string71.base, 4 + #t~string71.offset, 1);call #t~string73.base, #t~string73.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string73.base, #t~string73.offset, 1);call write~init~int(73, #t~string73.base, 1 + #t~string73.offset, 1);call write~init~int(76, #t~string73.base, 2 + #t~string73.offset, 1);call write~init~int(95, #t~string73.base, 3 + #t~string73.offset, 1);call write~init~int(112, #t~string73.base, 4 + #t~string73.offset, 1);call write~init~int(58, #t~string73.base, 5 + #t~string73.offset, 1);call write~init~int(0, #t~string73.base, 6 + #t~string73.offset, 1);call #t~string75.base, #t~string75.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string75.base, #t~string75.offset, 1);call write~init~int(37, #t~string75.base, 1 + #t~string75.offset, 1);call write~init~int(105, #t~string75.base, 2 + #t~string75.offset, 1);call write~init~int(0, #t~string75.base, 3 + #t~string75.offset, 1);call #t~string77.base, #t~string77.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string77.base, #t~string77.offset, 1);call write~init~int(37, #t~string77.base, 1 + #t~string77.offset, 1);call write~init~int(105, #t~string77.base, 2 + #t~string77.offset, 1);call write~init~int(0, #t~string77.base, 3 + #t~string77.offset, 1);call #t~string79.base, #t~string79.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string79.base, #t~string79.offset, 1);call write~init~int(37, #t~string79.base, 1 + #t~string79.offset, 1);call write~init~int(105, #t~string79.base, 2 + #t~string79.offset, 1);call write~init~int(0, #t~string79.base, 3 + #t~string79.offset, 1);call #t~string81.base, #t~string81.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string81.base, #t~string81.offset, 1);call write~init~int(37, #t~string81.base, 1 + #t~string81.offset, 1);call write~init~int(105, #t~string81.base, 2 + #t~string81.offset, 1);call write~init~int(0, #t~string81.base, 3 + #t~string81.offset, 1);call #t~string83.base, #t~string83.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string83.base, #t~string83.offset, 1);call write~init~int(37, #t~string83.base, 1 + #t~string83.offset, 1);call write~init~int(105, #t~string83.base, 2 + #t~string83.offset, 1);call write~init~int(0, #t~string83.base, 3 + #t~string83.offset, 1);call #t~string85.base, #t~string85.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string85.base, #t~string85.offset, 1);call write~init~int(70, #t~string85.base, 1 + #t~string85.offset, 1);call write~init~int(95, #t~string85.base, 2 + #t~string85.offset, 1);call write~init~int(112, #t~string85.base, 3 + #t~string85.offset, 1);call write~init~int(58, #t~string85.base, 4 + #t~string85.offset, 1);call write~init~int(0, #t~string85.base, 5 + #t~string85.offset, 1);call #t~string88.base, #t~string88.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string88.base, #t~string88.offset, 1);call write~init~int(37, #t~string88.base, 1 + #t~string88.offset, 1);call write~init~int(105, #t~string88.base, 2 + #t~string88.offset, 1);call write~init~int(0, #t~string88.base, 3 + #t~string88.offset, 1);call #t~string91.base, #t~string91.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string91.base, #t~string91.offset, 1);call write~init~int(37, #t~string91.base, 1 + #t~string91.offset, 1);call write~init~int(105, #t~string91.base, 2 + #t~string91.offset, 1);call write~init~int(0, #t~string91.base, 3 + #t~string91.offset, 1);call #t~string94.base, #t~string94.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string94.base, #t~string94.offset, 1);call write~init~int(37, #t~string94.base, 1 + #t~string94.offset, 1);call write~init~int(105, #t~string94.base, 2 + #t~string94.offset, 1);call write~init~int(0, #t~string94.base, 3 + #t~string94.offset, 1);call #t~string97.base, #t~string97.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string97.base, #t~string97.offset, 1);call write~init~int(37, #t~string97.base, 1 + #t~string97.offset, 1);call write~init~int(105, #t~string97.base, 2 + #t~string97.offset, 1);call write~init~int(0, #t~string97.base, 3 + #t~string97.offset, 1);call #t~string100.base, #t~string100.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string100.base, #t~string100.offset, 1);call write~init~int(37, #t~string100.base, 1 + #t~string100.offset, 1);call write~init~int(105, #t~string100.base, 2 + #t~string100.offset, 1);call write~init~int(0, #t~string100.base, 3 + #t~string100.offset, 1);call #t~string102.base, #t~string102.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string102.base, #t~string102.offset, 1);call write~init~int(0, #t~string102.base, 1 + #t~string102.offset, 1);call #t~string151.base, #t~string151.offset := #Ultimate.allocOnStack(30);call #t~string152.base, #t~string152.offset := #Ultimate.allocOnStack(9);call #t~string153.base, #t~string153.offset := #Ultimate.allocOnStack(21);call #t~string154.base, #t~string154.offset := #Ultimate.allocOnStack(30);call #t~string155.base, #t~string155.offset := #Ultimate.allocOnStack(9);call #t~string156.base, #t~string156.offset := #Ultimate.allocOnStack(21);call #t~string160.base, #t~string160.offset := #Ultimate.allocOnStack(30);call #t~string161.base, #t~string161.offset := #Ultimate.allocOnStack(9);call #t~string162.base, #t~string162.offset := #Ultimate.allocOnStack(25);call #t~string163.base, #t~string163.offset := #Ultimate.allocOnStack(30);call #t~string164.base, #t~string164.offset := #Ultimate.allocOnStack(9);call #t~string165.base, #t~string165.offset := #Ultimate.allocOnStack(25);~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 54467#L-1 havoc main_#res;havoc main_#t~ret118, main_~retValue_acc~22, main_~tmp~19;havoc main_~retValue_acc~22;havoc main_~tmp~19; 51466#L2430 havoc valid_product_#res;havoc valid_product_~retValue_acc~20;havoc valid_product_~retValue_acc~20;valid_product_~retValue_acc~20 := 1;valid_product_#res := valid_product_~retValue_acc~20; 51467#L2438 main_#t~ret118 := valid_product_#res;main_~tmp~19 := main_#t~ret118;havoc main_#t~ret118; 51057#L2777 assume 0 != main_~tmp~19; 51058#L2754 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 52275#L247 havoc bobCall_#t~ret106, bobCall_~tmp~11;havoc bobCall_~tmp~11;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 52276#L878 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~4 := 4;getOrigin_#res := getOrigin_~retValue_acc~4; 50455#L903 bobCall_#t~ret106 := getOrigin_#res;bobCall_~tmp~11 := bobCall_#t~ret106;havoc bobCall_#t~ret106;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 54161#L525 assume 0 == initPersonOnFloor_~floor; 55010#L526 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 49244#L633-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 51182#L317 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 51183#L329-2 havoc timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_#t~ret53, timeShift_#t~ret54, timeShift_#t~ret55, timeShift_#t~ret56, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 51331#L1184 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 51332#L1236 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 54180#L2814 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 51976#L2815 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 50688#L1201 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 49746#L1222 __utac_acc__Specification3_spec__1_#t~ret121 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret121;havoc __utac_acc__Specification3_spec__1_#t~ret121; 49747#L2819 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 49300#L2920 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret32, stopRequestedAtCurrentFloor_#t~ret33, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 49301#L254 assume !(0 == isFloorCalling_~floorID); 54371#L258 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 50088#L281 stopRequestedAtCurrentFloor_#t~ret32 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret32;havoc stopRequestedAtCurrentFloor_#t~ret32; 49551#L1797 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~4;stopRequestedAtCurrentFloor_~retValue_acc~16 := 1;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 49552#L1809 timeShift_#t~ret46 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 52573#L1948 assume !(0 != timeShift_~tmp___9~2); 54087#L2039 assume !(1 == ~doorState~0); 54088#L2039-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_#t~ret24, stopRequestedInDirection_#t~ret25, stopRequestedInDirection_#t~ret26, stopRequestedInDirection_#t~ret27, stopRequestedInDirection_#t~ret28, stopRequestedInDirection_#t~ret29, stopRequestedInDirection_#t~ret30, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 52703#L1388 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 50769#L828 stopRequestedInDirection_#t~ret20 := isTopFloor_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 50149#L1392 assume 0 != stopRequestedInDirection_~tmp~5;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 49641#L1710 timeShift_#t~ret53 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret53;havoc timeShift_#t~ret53; 50288#L2047 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret31, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 50290#L1764 assume !(1 == ~currentHeading~0); 52153#L1774 assume !(0 == ~currentFloorID~0); 53673#L1774-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 53074#L1780-5 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 52179#L2945 assume !(-1 == ~expectedDirection~0); 50758#L2957 assume !(1 == ~expectedDirection~0); 50759#L2958 havoc timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_#t~ret53, timeShift_#t~ret54, timeShift_#t~ret55, timeShift_#t~ret56, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 54027#L1184-1 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 54028#L1236-3 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 54406#L2814-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 55141#L2876-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 55169#L2886-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 49967#L2897-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 49969#L2908-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 52762#L2919-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 52631#L2920-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret32, stopRequestedAtCurrentFloor_#t~ret33, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 52535#L254-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 50158#L281-21 stopRequestedAtCurrentFloor_#t~ret32 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret32;havoc stopRequestedAtCurrentFloor_#t~ret32; 54879#L1797-1 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~4;stopRequestedAtCurrentFloor_~retValue_acc~16 := 1;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 52589#L1809-1 timeShift_#t~ret46 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 53168#L1948-1 assume !(0 != timeShift_~tmp___9~2); 54094#L2039-3 assume !(1 == ~doorState~0); 54646#L2039-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_#t~ret24, stopRequestedInDirection_#t~ret25, stopRequestedInDirection_#t~ret26, stopRequestedInDirection_#t~ret27, stopRequestedInDirection_#t~ret28, stopRequestedInDirection_#t~ret29, stopRequestedInDirection_#t~ret30, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 53881#L1388-2 assume !(1 == stopRequestedInDirection_~dir); 53882#L1557-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 50024#L1710-2 timeShift_#t~ret53 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret53;havoc timeShift_#t~ret53; 53266#L2047-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret31, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 53267#L1764-3 assume !(1 == ~currentHeading~0); 57379#L1774-9 assume !(0 == ~currentFloorID~0); 50086#L1774-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 49264#L1780-11 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 53683#L2945-1 assume !(-1 == ~expectedDirection~0); 52089#L2957-1 assume !(1 == ~expectedDirection~0); 49657#L2958-1 havoc timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_#t~ret53, timeShift_#t~ret54, timeShift_#t~ret55, timeShift_#t~ret56, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 52850#L1184-2 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 52851#L1236-6 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 51333#L2814-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 51334#L2876-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 53523#L2886-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 53525#L2897-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 53588#L2908-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 53590#L2919-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 51400#L2920-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret32, stopRequestedAtCurrentFloor_#t~ret33, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 52228#L254-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 49513#L281-42 stopRequestedAtCurrentFloor_#t~ret32 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret32;havoc stopRequestedAtCurrentFloor_#t~ret32; 53741#L1797-2 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~4;stopRequestedAtCurrentFloor_~retValue_acc~16 := 1;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 54847#L1809-2 timeShift_#t~ret46 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 54791#L1948-2 assume !(0 != timeShift_~tmp___9~2); 54792#L2039-6 assume !(1 == ~doorState~0); 57484#L2039-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_#t~ret24, stopRequestedInDirection_#t~ret25, stopRequestedInDirection_#t~ret26, stopRequestedInDirection_#t~ret27, stopRequestedInDirection_#t~ret28, stopRequestedInDirection_#t~ret29, stopRequestedInDirection_#t~ret30, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 57480#L1388-4 assume !(1 == stopRequestedInDirection_~dir); 57429#L1557-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 57428#L1710-4 timeShift_#t~ret53 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret53;havoc timeShift_#t~ret53; 57426#L2047-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret31, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 57427#L1764-6 assume !(1 == ~currentHeading~0); 57378#L1774-18 assume !(0 == ~currentFloorID~0); 50863#L1774-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 50864#L1780-17 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 55002#L2945-2 assume !(-1 == ~expectedDirection~0); 54935#L2957-2 assume !(1 == ~expectedDirection~0); 49371#L2958-2 havoc bobCall_#t~ret106, bobCall_~tmp~11;havoc bobCall_~tmp~11;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 54352#L878-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~4 := 4;getOrigin_#res := getOrigin_~retValue_acc~4; 51474#L903-1 bobCall_#t~ret106 := getOrigin_#res;bobCall_~tmp~11 := bobCall_#t~ret106;havoc bobCall_#t~ret106;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 53820#L525-1 assume 0 == initPersonOnFloor_~floor; 53025#L526-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 49363#L633-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 54788#L317-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 49825#L329-5 havoc cleanup_#t~ret112, cleanup_#t~ret113, cleanup_~i~3, cleanup_~tmp~17, cleanup_~tmp___0~8, cleanup_~__cil_tmp4~0;havoc cleanup_~i~3;havoc cleanup_~tmp~17;havoc cleanup_~tmp___0~8;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_#t~ret53, timeShift_#t~ret54, timeShift_#t~ret55, timeShift_#t~ret56, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 55154#L1184-3 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 55181#L1236-9 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 55519#L2814-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 49384#L2876-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 49386#L2886-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 50784#L2897-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 54186#L2908-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 55219#L2919-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 55484#L2920-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret32, stopRequestedAtCurrentFloor_#t~ret33, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 55478#L254-63 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 55466#L281-63 stopRequestedAtCurrentFloor_#t~ret32 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret32;havoc stopRequestedAtCurrentFloor_#t~ret32; 55457#L1797-3 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~4;stopRequestedAtCurrentFloor_~retValue_acc~16 := 1;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 55442#L1809-3 timeShift_#t~ret46 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 55435#L1948-3 assume !(0 != timeShift_~tmp___9~2); 55432#L2039-9 assume !(1 == ~doorState~0); 55431#L2039-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_#t~ret24, stopRequestedInDirection_#t~ret25, stopRequestedInDirection_#t~ret26, stopRequestedInDirection_#t~ret27, stopRequestedInDirection_#t~ret28, stopRequestedInDirection_#t~ret29, stopRequestedInDirection_#t~ret30, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 55419#L1388-6 assume !(1 == stopRequestedInDirection_~dir); 55366#L1557-6 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 55356#L1710-6 timeShift_#t~ret53 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret53;havoc timeShift_#t~ret53; 55353#L2047-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret31, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 55354#L1764-9 assume !(1 == ~currentHeading~0); 57374#L1774-27 assume !(0 == ~currentFloorID~0); 50081#L1774-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 50082#L1780-23 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 50924#L2945-3 assume !(-1 == ~expectedDirection~0); 50682#L2957-3 assume !(1 == ~expectedDirection~0); 49639#L2958-3 cleanup_~i~3 := 0; 51546#L2586-2 [2021-11-02 22:08:36,310 INFO L793 eck$LassoCheckResult]: Loop: 51546#L2586-2 assume !false; 53420#L2587 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 50426#L2590 assume cleanup_~i~3 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~6;havoc isBlocked_~retValue_acc~6;isBlocked_~retValue_acc~6 := 0;isBlocked_#res := isBlocked_~retValue_acc~6; 50427#L1035 cleanup_#t~ret112 := isBlocked_#res;cleanup_~tmp___0~8 := cleanup_#t~ret112;havoc cleanup_#t~ret112; 57372#L2594 assume 1 != cleanup_~tmp___0~8; 56047#L2594-1 havoc isIdle_#res;havoc isIdle_#t~ret19, isIdle_~retValue_acc~13, isIdle_~tmp~4;havoc isIdle_~retValue_acc~13;havoc isIdle_~tmp~4;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret14, anyStopRequested_#t~ret15, anyStopRequested_#t~ret16, anyStopRequested_#t~ret17, anyStopRequested_#t~ret18, anyStopRequested_~retValue_acc~12, anyStopRequested_~tmp~3, anyStopRequested_~tmp___0~2, anyStopRequested_~tmp___1~2, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~12;havoc anyStopRequested_~tmp~3;havoc anyStopRequested_~tmp___0~2;havoc anyStopRequested_~tmp___1~2;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 56035#L254-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 56030#L281-84 anyStopRequested_#t~ret14 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret14;havoc anyStopRequested_#t~ret14; 55097#L1292 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~12 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~12; 50602#L1356 isIdle_#t~ret19 := anyStopRequested_#res;isIdle_~tmp~4 := isIdle_#t~ret19;havoc isIdle_#t~ret19;isIdle_~retValue_acc~13 := (if 0 == isIdle_~tmp~4 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~13; 51592#L1369 cleanup_#t~ret113 := isIdle_#res;cleanup_~tmp~17 := cleanup_#t~ret113;havoc cleanup_#t~ret113; 51593#L2606 assume !(0 != cleanup_~tmp~17);havoc timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_#t~ret53, timeShift_#t~ret54, timeShift_#t~ret55, timeShift_#t~ret56, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 53867#L1184-4 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 49590#L1236-12 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 49591#L2814-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 54191#L2876-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 54192#L2886-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 55030#L2897-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 50247#L2908-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 49332#L2919-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 49334#L2920-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret32, stopRequestedAtCurrentFloor_#t~ret33, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 50413#L254-89 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 50414#L281-89 stopRequestedAtCurrentFloor_#t~ret32 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret32;havoc stopRequestedAtCurrentFloor_#t~ret32; 53860#L1797-4 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~4;stopRequestedAtCurrentFloor_~retValue_acc~16 := 1;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 49887#L1809-4 timeShift_#t~ret46 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 49888#L1948-4 assume !(0 != timeShift_~tmp___9~2); 54974#L2039-12 assume 1 == ~doorState~0;~doorState~0 := 0; 54822#L2039-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_#t~ret24, stopRequestedInDirection_#t~ret25, stopRequestedInDirection_#t~ret26, stopRequestedInDirection_#t~ret27, stopRequestedInDirection_#t~ret28, stopRequestedInDirection_#t~ret29, stopRequestedInDirection_#t~ret30, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 54823#L1388-8 assume !(1 == stopRequestedInDirection_~dir); 55218#L1557-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 50497#L1710-8 timeShift_#t~ret53 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret53;havoc timeShift_#t~ret53; 51132#L2047-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret31, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 55160#L1764-12 assume !(1 == ~currentHeading~0); 57500#L1774-36 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 53323#L1774-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 51095#L1780-29 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 55073#L2945-4 assume !(-1 == ~expectedDirection~0); 52644#L2957-4 assume !(1 == ~expectedDirection~0); 51545#L2958-4 cleanup_~i~3 := 1 + cleanup_~i~3; 51546#L2586-2 [2021-11-02 22:08:36,311 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-02 22:08:36,311 INFO L85 PathProgramCache]: Analyzing trace with hash -927505754, now seen corresponding path program 1 times [2021-11-02 22:08:36,312 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-02 22:08:36,312 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1606319320] [2021-11-02 22:08:36,312 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-02 22:08:36,313 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-02 22:08:36,348 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-02 22:08:36,407 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-02 22:08:36,408 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-02 22:08:36,408 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1606319320] [2021-11-02 22:08:36,408 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1606319320] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-02 22:08:36,409 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-02 22:08:36,409 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-11-02 22:08:36,409 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [288397869] [2021-11-02 22:08:36,410 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-11-02 22:08:36,411 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-02 22:08:36,411 INFO L85 PathProgramCache]: Analyzing trace with hash 844132719, now seen corresponding path program 1 times [2021-11-02 22:08:36,411 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-02 22:08:36,412 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [868161563] [2021-11-02 22:08:36,412 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-02 22:08:36,412 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-02 22:08:36,427 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-02 22:08:36,466 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-02 22:08:36,466 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-02 22:08:36,467 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [868161563] [2021-11-02 22:08:36,467 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [868161563] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-02 22:08:36,467 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-02 22:08:36,468 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-11-02 22:08:36,470 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [965028809] [2021-11-02 22:08:36,471 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-11-02 22:08:36,471 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-02 22:08:36,472 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-11-02 22:08:36,472 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-11-02 22:08:36,472 INFO L87 Difference]: Start difference. First operand 9729 states and 18260 transitions. cyclomatic complexity: 8532 Second operand has 6 states, 6 states have (on average 6.5) internal successors, (39), 6 states have internal predecessors, (39), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:08:37,055 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-02 22:08:37,055 INFO L93 Difference]: Finished difference Result 17431 states and 32810 transitions. [2021-11-02 22:08:37,058 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2021-11-02 22:08:37,058 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 17431 states and 32810 transitions. [2021-11-02 22:08:37,175 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 3994 [2021-11-02 22:08:37,257 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 17431 states to 17431 states and 32810 transitions. [2021-11-02 22:08:37,257 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 17431 [2021-11-02 22:08:37,275 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 17431 [2021-11-02 22:08:37,275 INFO L73 IsDeterministic]: Start isDeterministic. Operand 17431 states and 32810 transitions. [2021-11-02 22:08:37,305 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-11-02 22:08:37,305 INFO L681 BuchiCegarLoop]: Abstraction has 17431 states and 32810 transitions. [2021-11-02 22:08:37,327 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 17431 states and 32810 transitions. [2021-11-02 22:08:37,528 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 17431 to 9747. [2021-11-02 22:08:37,543 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9747 states, 9747 states have (on average 1.875243664717349) internal successors, (18278), 9746 states have internal predecessors, (18278), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:08:37,570 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9747 states to 9747 states and 18278 transitions. [2021-11-02 22:08:37,571 INFO L704 BuchiCegarLoop]: Abstraction has 9747 states and 18278 transitions. [2021-11-02 22:08:37,571 INFO L587 BuchiCegarLoop]: Abstraction has 9747 states and 18278 transitions. [2021-11-02 22:08:37,571 INFO L425 BuchiCegarLoop]: ======== Iteration 4============ [2021-11-02 22:08:37,571 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 9747 states and 18278 transitions. [2021-11-02 22:08:37,637 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 2185 [2021-11-02 22:08:37,638 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-11-02 22:08:37,638 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-11-02 22:08:37,642 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-02 22:08:37,643 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-02 22:08:37,643 INFO L791 eck$LassoCheckResult]: Stem: 81654#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(2);call write~init~int(48, #t~string4.base, #t~string4.offset, 1);call write~init~int(0, #t~string4.base, 1 + #t~string4.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(31);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(12);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(10);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string59.base, #t~string59.offset, 1);call write~init~int(95, #t~string59.base, 1 + #t~string59.offset, 1);call write~init~int(93, #t~string59.base, 2 + #t~string59.offset, 1);call write~init~int(0, #t~string59.base, 3 + #t~string59.offset, 1);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string61.base, #t~string61.offset, 1);call write~init~int(93, #t~string61.base, 1 + #t~string61.offset, 1);call write~init~int(32, #t~string61.base, 2 + #t~string61.offset, 1);call write~init~int(0, #t~string61.base, 3 + #t~string61.offset, 1);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string63.base, #t~string63.offset, 1);call write~init~int(97, #t~string63.base, 1 + #t~string63.offset, 1);call write~init~int(116, #t~string63.base, 2 + #t~string63.offset, 1);call write~init~int(32, #t~string63.base, 3 + #t~string63.offset, 1);call write~init~int(0, #t~string63.base, 4 + #t~string63.offset, 1);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string65.base, #t~string65.offset, 1);call write~init~int(105, #t~string65.base, 1 + #t~string65.offset, 1);call write~init~int(0, #t~string65.base, 2 + #t~string65.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(10);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string69.base, #t~string69.offset, 1);call write~init~int(112, #t~string69.base, 1 + #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 2 + #t~string69.offset, 1);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string71.base, #t~string71.offset, 1);call write~init~int(111, #t~string71.base, 1 + #t~string71.offset, 1);call write~init~int(119, #t~string71.base, 2 + #t~string71.offset, 1);call write~init~int(110, #t~string71.base, 3 + #t~string71.offset, 1);call write~init~int(0, #t~string71.base, 4 + #t~string71.offset, 1);call #t~string73.base, #t~string73.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string73.base, #t~string73.offset, 1);call write~init~int(73, #t~string73.base, 1 + #t~string73.offset, 1);call write~init~int(76, #t~string73.base, 2 + #t~string73.offset, 1);call write~init~int(95, #t~string73.base, 3 + #t~string73.offset, 1);call write~init~int(112, #t~string73.base, 4 + #t~string73.offset, 1);call write~init~int(58, #t~string73.base, 5 + #t~string73.offset, 1);call write~init~int(0, #t~string73.base, 6 + #t~string73.offset, 1);call #t~string75.base, #t~string75.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string75.base, #t~string75.offset, 1);call write~init~int(37, #t~string75.base, 1 + #t~string75.offset, 1);call write~init~int(105, #t~string75.base, 2 + #t~string75.offset, 1);call write~init~int(0, #t~string75.base, 3 + #t~string75.offset, 1);call #t~string77.base, #t~string77.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string77.base, #t~string77.offset, 1);call write~init~int(37, #t~string77.base, 1 + #t~string77.offset, 1);call write~init~int(105, #t~string77.base, 2 + #t~string77.offset, 1);call write~init~int(0, #t~string77.base, 3 + #t~string77.offset, 1);call #t~string79.base, #t~string79.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string79.base, #t~string79.offset, 1);call write~init~int(37, #t~string79.base, 1 + #t~string79.offset, 1);call write~init~int(105, #t~string79.base, 2 + #t~string79.offset, 1);call write~init~int(0, #t~string79.base, 3 + #t~string79.offset, 1);call #t~string81.base, #t~string81.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string81.base, #t~string81.offset, 1);call write~init~int(37, #t~string81.base, 1 + #t~string81.offset, 1);call write~init~int(105, #t~string81.base, 2 + #t~string81.offset, 1);call write~init~int(0, #t~string81.base, 3 + #t~string81.offset, 1);call #t~string83.base, #t~string83.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string83.base, #t~string83.offset, 1);call write~init~int(37, #t~string83.base, 1 + #t~string83.offset, 1);call write~init~int(105, #t~string83.base, 2 + #t~string83.offset, 1);call write~init~int(0, #t~string83.base, 3 + #t~string83.offset, 1);call #t~string85.base, #t~string85.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string85.base, #t~string85.offset, 1);call write~init~int(70, #t~string85.base, 1 + #t~string85.offset, 1);call write~init~int(95, #t~string85.base, 2 + #t~string85.offset, 1);call write~init~int(112, #t~string85.base, 3 + #t~string85.offset, 1);call write~init~int(58, #t~string85.base, 4 + #t~string85.offset, 1);call write~init~int(0, #t~string85.base, 5 + #t~string85.offset, 1);call #t~string88.base, #t~string88.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string88.base, #t~string88.offset, 1);call write~init~int(37, #t~string88.base, 1 + #t~string88.offset, 1);call write~init~int(105, #t~string88.base, 2 + #t~string88.offset, 1);call write~init~int(0, #t~string88.base, 3 + #t~string88.offset, 1);call #t~string91.base, #t~string91.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string91.base, #t~string91.offset, 1);call write~init~int(37, #t~string91.base, 1 + #t~string91.offset, 1);call write~init~int(105, #t~string91.base, 2 + #t~string91.offset, 1);call write~init~int(0, #t~string91.base, 3 + #t~string91.offset, 1);call #t~string94.base, #t~string94.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string94.base, #t~string94.offset, 1);call write~init~int(37, #t~string94.base, 1 + #t~string94.offset, 1);call write~init~int(105, #t~string94.base, 2 + #t~string94.offset, 1);call write~init~int(0, #t~string94.base, 3 + #t~string94.offset, 1);call #t~string97.base, #t~string97.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string97.base, #t~string97.offset, 1);call write~init~int(37, #t~string97.base, 1 + #t~string97.offset, 1);call write~init~int(105, #t~string97.base, 2 + #t~string97.offset, 1);call write~init~int(0, #t~string97.base, 3 + #t~string97.offset, 1);call #t~string100.base, #t~string100.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string100.base, #t~string100.offset, 1);call write~init~int(37, #t~string100.base, 1 + #t~string100.offset, 1);call write~init~int(105, #t~string100.base, 2 + #t~string100.offset, 1);call write~init~int(0, #t~string100.base, 3 + #t~string100.offset, 1);call #t~string102.base, #t~string102.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string102.base, #t~string102.offset, 1);call write~init~int(0, #t~string102.base, 1 + #t~string102.offset, 1);call #t~string151.base, #t~string151.offset := #Ultimate.allocOnStack(30);call #t~string152.base, #t~string152.offset := #Ultimate.allocOnStack(9);call #t~string153.base, #t~string153.offset := #Ultimate.allocOnStack(21);call #t~string154.base, #t~string154.offset := #Ultimate.allocOnStack(30);call #t~string155.base, #t~string155.offset := #Ultimate.allocOnStack(9);call #t~string156.base, #t~string156.offset := #Ultimate.allocOnStack(21);call #t~string160.base, #t~string160.offset := #Ultimate.allocOnStack(30);call #t~string161.base, #t~string161.offset := #Ultimate.allocOnStack(9);call #t~string162.base, #t~string162.offset := #Ultimate.allocOnStack(25);call #t~string163.base, #t~string163.offset := #Ultimate.allocOnStack(30);call #t~string164.base, #t~string164.offset := #Ultimate.allocOnStack(9);call #t~string165.base, #t~string165.offset := #Ultimate.allocOnStack(25);~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 81655#L-1 havoc main_#res;havoc main_#t~ret118, main_~retValue_acc~22, main_~tmp~19;havoc main_~retValue_acc~22;havoc main_~tmp~19; 78657#L2430 havoc valid_product_#res;havoc valid_product_~retValue_acc~20;havoc valid_product_~retValue_acc~20;valid_product_~retValue_acc~20 := 1;valid_product_#res := valid_product_~retValue_acc~20; 78658#L2438 main_#t~ret118 := valid_product_#res;main_~tmp~19 := main_#t~ret118;havoc main_#t~ret118; 78250#L2777 assume 0 != main_~tmp~19; 78251#L2754 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 79470#L247 havoc bobCall_#t~ret106, bobCall_~tmp~11;havoc bobCall_~tmp~11;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 79471#L878 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~4 := 4;getOrigin_#res := getOrigin_~retValue_acc~4; 77647#L903 bobCall_#t~ret106 := getOrigin_#res;bobCall_~tmp~11 := bobCall_#t~ret106;havoc bobCall_#t~ret106;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 81344#L525 assume 0 == initPersonOnFloor_~floor; 82202#L526 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 76434#L633-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 78375#L317 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 78376#L329-2 havoc timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_#t~ret53, timeShift_#t~ret54, timeShift_#t~ret55, timeShift_#t~ret56, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 78523#L1184 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 78524#L1236 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 81363#L2814 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 79169#L2815 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 77880#L1201 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 76936#L1222 __utac_acc__Specification3_spec__1_#t~ret121 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret121;havoc __utac_acc__Specification3_spec__1_#t~ret121; 76937#L2819 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 76487#L2920 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret32, stopRequestedAtCurrentFloor_#t~ret33, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 76488#L254 assume !(0 == isFloorCalling_~floorID); 81557#L258 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 77280#L281 stopRequestedAtCurrentFloor_#t~ret32 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret32;havoc stopRequestedAtCurrentFloor_#t~ret32; 76738#L1797 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 76740#L1201-10 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 79546#L1222-10 stopRequestedAtCurrentFloor_#t~ret33 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret33;havoc stopRequestedAtCurrentFloor_#t~ret33; 77354#L1804 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 77355#L1809 timeShift_#t~ret46 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 82618#L1948 assume !(0 != timeShift_~tmp___9~2); 81266#L2039 assume !(1 == ~doorState~0); 81267#L2039-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_#t~ret24, stopRequestedInDirection_#t~ret25, stopRequestedInDirection_#t~ret26, stopRequestedInDirection_#t~ret27, stopRequestedInDirection_#t~ret28, stopRequestedInDirection_#t~ret29, stopRequestedInDirection_#t~ret30, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 79893#L1388 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 77960#L828 stopRequestedInDirection_#t~ret20 := isTopFloor_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 77340#L1392 assume 0 != stopRequestedInDirection_~tmp~5;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 76832#L1710 timeShift_#t~ret53 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret53;havoc timeShift_#t~ret53; 77482#L2047 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret31, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 77484#L1764 assume !(1 == ~currentHeading~0); 79346#L1774 assume !(0 == ~currentFloorID~0); 80854#L1774-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 80257#L1780-5 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 82830#L2945 assume !(-1 == ~expectedDirection~0); 82825#L2957 assume !(1 == ~expectedDirection~0); 82819#L2958 havoc timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_#t~ret53, timeShift_#t~ret54, timeShift_#t~ret55, timeShift_#t~ret56, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 82817#L1184-1 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 82799#L1236-3 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 82797#L2814-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 82796#L2876-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 82792#L2886-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 82787#L2897-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 82785#L2908-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 82780#L2919-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 82777#L2920-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret32, stopRequestedAtCurrentFloor_#t~ret33, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 82775#L254-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 82074#L281-21 stopRequestedAtCurrentFloor_#t~ret32 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret32;havoc stopRequestedAtCurrentFloor_#t~ret32; 82075#L1797-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 79657#L1201-21 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 78716#L1222-21 stopRequestedAtCurrentFloor_#t~ret33 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret33;havoc stopRequestedAtCurrentFloor_#t~ret33; 82608#L1804-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 82607#L1809-1 timeShift_#t~ret46 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 82573#L1948-1 assume !(0 != timeShift_~tmp___9~2); 82534#L2039-3 assume !(1 == ~doorState~0); 82529#L2039-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_#t~ret24, stopRequestedInDirection_#t~ret25, stopRequestedInDirection_#t~ret26, stopRequestedInDirection_#t~ret27, stopRequestedInDirection_#t~ret28, stopRequestedInDirection_#t~ret29, stopRequestedInDirection_#t~ret30, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 82527#L1388-2 assume !(1 == stopRequestedInDirection_~dir); 82496#L1557-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 82476#L1710-2 timeShift_#t~ret53 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret53;havoc timeShift_#t~ret53; 82474#L2047-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret31, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 82475#L1764-3 assume !(1 == ~currentHeading~0); 82616#L1774-9 assume !(0 == ~currentFloorID~0); 77278#L1774-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 76454#L1780-11 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 80864#L2945-1 assume !(-1 == ~expectedDirection~0); 79282#L2957-1 assume !(1 == ~expectedDirection~0); 76848#L2958-1 havoc timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_#t~ret53, timeShift_#t~ret54, timeShift_#t~ret55, timeShift_#t~ret56, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 82869#L1184-2 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 82868#L1236-6 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 82865#L2814-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 82866#L2876-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 82871#L2886-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 82849#L2897-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 82841#L2908-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 82834#L2919-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 82828#L2920-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret32, stopRequestedAtCurrentFloor_#t~ret33, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 82823#L254-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 82818#L281-42 stopRequestedAtCurrentFloor_#t~ret32 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret32;havoc stopRequestedAtCurrentFloor_#t~ret32; 82816#L1797-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 82773#L1201-32 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 82769#L1222-32 stopRequestedAtCurrentFloor_#t~ret33 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret33;havoc stopRequestedAtCurrentFloor_#t~ret33; 82040#L1804-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 82042#L1809-2 timeShift_#t~ret46 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 82959#L1948-2 assume !(0 != timeShift_~tmp___9~2); 76843#L2039-6 assume !(1 == ~doorState~0); 76844#L2039-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_#t~ret24, stopRequestedInDirection_#t~ret25, stopRequestedInDirection_#t~ret26, stopRequestedInDirection_#t~ret27, stopRequestedInDirection_#t~ret28, stopRequestedInDirection_#t~ret29, stopRequestedInDirection_#t~ret30, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 78927#L1388-4 assume !(1 == stopRequestedInDirection_~dir); 81351#L1557-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 76569#L1710-4 timeShift_#t~ret53 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret53;havoc timeShift_#t~ret53; 82676#L2047-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret31, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 82677#L1764-6 assume !(1 == ~currentHeading~0); 82615#L1774-18 assume !(0 == ~currentFloorID~0); 78055#L1774-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 78056#L1780-17 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 83364#L2945-2 assume !(-1 == ~expectedDirection~0); 83361#L2957-2 assume !(1 == ~expectedDirection~0); 83360#L2958-2 havoc bobCall_#t~ret106, bobCall_~tmp~11;havoc bobCall_~tmp~11;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 83358#L878-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~4 := 4;getOrigin_#res := getOrigin_~retValue_acc~4; 83353#L903-1 bobCall_#t~ret106 := getOrigin_#res;bobCall_~tmp~11 := bobCall_#t~ret106;havoc bobCall_#t~ret106;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 83352#L525-1 assume 0 == initPersonOnFloor_~floor; 83334#L526-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 83317#L633-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 83312#L317-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 83091#L329-5 havoc cleanup_#t~ret112, cleanup_#t~ret113, cleanup_~i~3, cleanup_~tmp~17, cleanup_~tmp___0~8, cleanup_~__cil_tmp4~0;havoc cleanup_~i~3;havoc cleanup_~tmp~17;havoc cleanup_~tmp___0~8;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_#t~ret53, timeShift_#t~ret54, timeShift_#t~ret55, timeShift_#t~ret56, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 83090#L1184-3 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 83089#L1236-9 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 83088#L2814-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 83086#L2876-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 83080#L2886-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 83075#L2897-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 83061#L2908-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 83055#L2919-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 83049#L2920-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret32, stopRequestedAtCurrentFloor_#t~ret33, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 83048#L254-63 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 83043#L281-63 stopRequestedAtCurrentFloor_#t~ret32 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret32;havoc stopRequestedAtCurrentFloor_#t~ret32; 83042#L1797-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 80481#L1201-43 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 77170#L1222-43 stopRequestedAtCurrentFloor_#t~ret33 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret33;havoc stopRequestedAtCurrentFloor_#t~ret33; 79899#L1804-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 82874#L1809-3 timeShift_#t~ret46 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 82875#L1948-3 assume !(0 != timeShift_~tmp___9~2); 80189#L2039-9 assume !(1 == ~doorState~0); 80190#L2039-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_#t~ret24, stopRequestedInDirection_#t~ret25, stopRequestedInDirection_#t~ret26, stopRequestedInDirection_#t~ret27, stopRequestedInDirection_#t~ret28, stopRequestedInDirection_#t~ret29, stopRequestedInDirection_#t~ret30, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 81328#L1388-6 assume !(1 == stopRequestedInDirection_~dir); 81329#L1557-6 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 77275#L1710-6 timeShift_#t~ret53 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret53;havoc timeShift_#t~ret53; 82393#L2047-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret31, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 80825#L1764-9 assume !(1 == ~currentHeading~0); 80826#L1774-27 assume !(0 == ~currentFloorID~0); 77272#L1774-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 77273#L1780-23 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 78116#L2945-3 assume !(-1 == ~expectedDirection~0); 77873#L2957-3 assume !(1 == ~expectedDirection~0); 79939#L2958-3 cleanup_~i~3 := 0; 78739#L2586-2 [2021-11-02 22:08:37,644 INFO L793 eck$LassoCheckResult]: Loop: 78739#L2586-2 assume !false; 80604#L2587 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 77619#L2590 assume cleanup_~i~3 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~6;havoc isBlocked_~retValue_acc~6;isBlocked_~retValue_acc~6 := 0;isBlocked_#res := isBlocked_~retValue_acc~6; 77367#L1035 cleanup_#t~ret112 := isBlocked_#res;cleanup_~tmp___0~8 := cleanup_#t~ret112;havoc cleanup_#t~ret112; 77368#L2594 assume 1 != cleanup_~tmp___0~8; 79983#L2594-1 havoc isIdle_#res;havoc isIdle_#t~ret19, isIdle_~retValue_acc~13, isIdle_~tmp~4;havoc isIdle_~retValue_acc~13;havoc isIdle_~tmp~4;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret14, anyStopRequested_#t~ret15, anyStopRequested_#t~ret16, anyStopRequested_#t~ret17, anyStopRequested_#t~ret18, anyStopRequested_~retValue_acc~12, anyStopRequested_~tmp~3, anyStopRequested_~tmp___0~2, anyStopRequested_~tmp___1~2, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~12;havoc anyStopRequested_~tmp~3;havoc anyStopRequested_~tmp___0~2;havoc anyStopRequested_~tmp___1~2;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 80335#L254-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 78335#L281-84 anyStopRequested_#t~ret14 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret14;havoc anyStopRequested_#t~ret14; 82194#L1292 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~12 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~12; 77792#L1356 isIdle_#t~ret19 := anyStopRequested_#res;isIdle_~tmp~4 := isIdle_#t~ret19;havoc isIdle_#t~ret19;isIdle_~retValue_acc~13 := (if 0 == isIdle_~tmp~4 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~13; 78785#L1369 cleanup_#t~ret113 := isIdle_#res;cleanup_~tmp~17 := cleanup_#t~ret113;havoc cleanup_#t~ret113; 78786#L2606 assume !(0 != cleanup_~tmp~17);havoc timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_#t~ret53, timeShift_#t~ret54, timeShift_#t~ret55, timeShift_#t~ret56, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 82916#L1184-4 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 82915#L1236-12 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 82913#L2814-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 82911#L2876-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 82908#L2886-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 82897#L2897-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 82886#L2908-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 82878#L2919-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 82760#L2920-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret32, stopRequestedAtCurrentFloor_#t~ret33, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 82759#L254-89 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 82754#L281-89 stopRequestedAtCurrentFloor_#t~ret32 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret32;havoc stopRequestedAtCurrentFloor_#t~ret32; 82753#L1797-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 82752#L1201-54 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 82747#L1222-54 stopRequestedAtCurrentFloor_#t~ret33 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret33;havoc stopRequestedAtCurrentFloor_#t~ret33; 82745#L1804-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 82743#L1809-4 timeShift_#t~ret46 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 82739#L1948-4 assume !(0 != timeShift_~tmp___9~2); 82720#L2039-12 assume 1 == ~doorState~0;~doorState~0 := 0; 82719#L2039-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_#t~ret24, stopRequestedInDirection_#t~ret25, stopRequestedInDirection_#t~ret26, stopRequestedInDirection_#t~ret27, stopRequestedInDirection_#t~ret28, stopRequestedInDirection_#t~ret29, stopRequestedInDirection_#t~ret30, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 82708#L1388-8 assume !(1 == stopRequestedInDirection_~dir); 82691#L1557-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 82686#L1710-8 timeShift_#t~ret53 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret53;havoc timeShift_#t~ret53; 82684#L2047-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret31, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 82683#L1764-12 assume !(1 == ~currentHeading~0); 82682#L1774-36 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 80508#L1774-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 78286#L1780-29 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 84656#L2945-4 assume !(-1 == ~expectedDirection~0); 84654#L2957-4 assume !(1 == ~expectedDirection~0); 78738#L2958-4 cleanup_~i~3 := 1 + cleanup_~i~3; 78739#L2586-2 [2021-11-02 22:08:37,645 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-02 22:08:37,645 INFO L85 PathProgramCache]: Analyzing trace with hash -239744925, now seen corresponding path program 1 times [2021-11-02 22:08:37,646 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-02 22:08:37,646 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [267555124] [2021-11-02 22:08:37,646 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-02 22:08:37,646 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-02 22:08:37,685 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-02 22:08:37,761 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-02 22:08:37,761 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-02 22:08:37,762 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [267555124] [2021-11-02 22:08:37,762 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [267555124] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-02 22:08:37,762 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-02 22:08:37,762 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-11-02 22:08:37,763 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [123945142] [2021-11-02 22:08:37,763 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-11-02 22:08:37,764 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-02 22:08:37,764 INFO L85 PathProgramCache]: Analyzing trace with hash -1648622076, now seen corresponding path program 1 times [2021-11-02 22:08:37,764 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-02 22:08:37,764 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1520318306] [2021-11-02 22:08:37,764 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-02 22:08:37,765 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-02 22:08:37,773 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-02 22:08:37,815 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-02 22:08:37,818 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-02 22:08:37,823 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1520318306] [2021-11-02 22:08:37,823 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1520318306] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-02 22:08:37,823 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-02 22:08:37,824 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-11-02 22:08:37,824 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2035566929] [2021-11-02 22:08:37,824 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-11-02 22:08:37,825 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-02 22:08:37,825 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-11-02 22:08:37,829 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2021-11-02 22:08:37,829 INFO L87 Difference]: Start difference. First operand 9747 states and 18278 transitions. cyclomatic complexity: 8532 Second operand has 7 states, 7 states have (on average 6.0) internal successors, (42), 7 states have internal predecessors, (42), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:08:41,972 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-02 22:08:41,973 INFO L93 Difference]: Finished difference Result 60210 states and 113358 transitions. [2021-11-02 22:08:41,973 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 20 states. [2021-11-02 22:08:41,973 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 60210 states and 113358 transitions. [2021-11-02 22:08:42,273 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 21754 [2021-11-02 22:08:42,584 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 60210 states to 60210 states and 113358 transitions. [2021-11-02 22:08:42,584 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 60210 [2021-11-02 22:08:42,629 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 60210 [2021-11-02 22:08:42,630 INFO L73 IsDeterministic]: Start isDeterministic. Operand 60210 states and 113358 transitions. [2021-11-02 22:08:42,687 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-11-02 22:08:42,687 INFO L681 BuchiCegarLoop]: Abstraction has 60210 states and 113358 transitions. [2021-11-02 22:08:42,726 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 60210 states and 113358 transitions. [2021-11-02 22:08:43,704 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 60210 to 19455. [2021-11-02 22:08:43,732 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 19455 states, 19455 states have (on average 1.8747365715754305) internal successors, (36473), 19454 states have internal predecessors, (36473), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:08:43,794 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 19455 states to 19455 states and 36473 transitions. [2021-11-02 22:08:43,794 INFO L704 BuchiCegarLoop]: Abstraction has 19455 states and 36473 transitions. [2021-11-02 22:08:43,794 INFO L587 BuchiCegarLoop]: Abstraction has 19455 states and 36473 transitions. [2021-11-02 22:08:43,795 INFO L425 BuchiCegarLoop]: ======== Iteration 5============ [2021-11-02 22:08:43,795 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 19455 states and 36473 transitions. [2021-11-02 22:08:43,886 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 4380 [2021-11-02 22:08:43,887 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-11-02 22:08:43,887 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-11-02 22:08:43,897 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-02 22:08:43,897 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-02 22:08:43,898 INFO L791 eck$LassoCheckResult]: Stem: 151986#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(2);call write~init~int(48, #t~string4.base, #t~string4.offset, 1);call write~init~int(0, #t~string4.base, 1 + #t~string4.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(31);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(12);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(10);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string59.base, #t~string59.offset, 1);call write~init~int(95, #t~string59.base, 1 + #t~string59.offset, 1);call write~init~int(93, #t~string59.base, 2 + #t~string59.offset, 1);call write~init~int(0, #t~string59.base, 3 + #t~string59.offset, 1);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string61.base, #t~string61.offset, 1);call write~init~int(93, #t~string61.base, 1 + #t~string61.offset, 1);call write~init~int(32, #t~string61.base, 2 + #t~string61.offset, 1);call write~init~int(0, #t~string61.base, 3 + #t~string61.offset, 1);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string63.base, #t~string63.offset, 1);call write~init~int(97, #t~string63.base, 1 + #t~string63.offset, 1);call write~init~int(116, #t~string63.base, 2 + #t~string63.offset, 1);call write~init~int(32, #t~string63.base, 3 + #t~string63.offset, 1);call write~init~int(0, #t~string63.base, 4 + #t~string63.offset, 1);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string65.base, #t~string65.offset, 1);call write~init~int(105, #t~string65.base, 1 + #t~string65.offset, 1);call write~init~int(0, #t~string65.base, 2 + #t~string65.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(10);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string69.base, #t~string69.offset, 1);call write~init~int(112, #t~string69.base, 1 + #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 2 + #t~string69.offset, 1);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string71.base, #t~string71.offset, 1);call write~init~int(111, #t~string71.base, 1 + #t~string71.offset, 1);call write~init~int(119, #t~string71.base, 2 + #t~string71.offset, 1);call write~init~int(110, #t~string71.base, 3 + #t~string71.offset, 1);call write~init~int(0, #t~string71.base, 4 + #t~string71.offset, 1);call #t~string73.base, #t~string73.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string73.base, #t~string73.offset, 1);call write~init~int(73, #t~string73.base, 1 + #t~string73.offset, 1);call write~init~int(76, #t~string73.base, 2 + #t~string73.offset, 1);call write~init~int(95, #t~string73.base, 3 + #t~string73.offset, 1);call write~init~int(112, #t~string73.base, 4 + #t~string73.offset, 1);call write~init~int(58, #t~string73.base, 5 + #t~string73.offset, 1);call write~init~int(0, #t~string73.base, 6 + #t~string73.offset, 1);call #t~string75.base, #t~string75.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string75.base, #t~string75.offset, 1);call write~init~int(37, #t~string75.base, 1 + #t~string75.offset, 1);call write~init~int(105, #t~string75.base, 2 + #t~string75.offset, 1);call write~init~int(0, #t~string75.base, 3 + #t~string75.offset, 1);call #t~string77.base, #t~string77.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string77.base, #t~string77.offset, 1);call write~init~int(37, #t~string77.base, 1 + #t~string77.offset, 1);call write~init~int(105, #t~string77.base, 2 + #t~string77.offset, 1);call write~init~int(0, #t~string77.base, 3 + #t~string77.offset, 1);call #t~string79.base, #t~string79.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string79.base, #t~string79.offset, 1);call write~init~int(37, #t~string79.base, 1 + #t~string79.offset, 1);call write~init~int(105, #t~string79.base, 2 + #t~string79.offset, 1);call write~init~int(0, #t~string79.base, 3 + #t~string79.offset, 1);call #t~string81.base, #t~string81.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string81.base, #t~string81.offset, 1);call write~init~int(37, #t~string81.base, 1 + #t~string81.offset, 1);call write~init~int(105, #t~string81.base, 2 + #t~string81.offset, 1);call write~init~int(0, #t~string81.base, 3 + #t~string81.offset, 1);call #t~string83.base, #t~string83.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string83.base, #t~string83.offset, 1);call write~init~int(37, #t~string83.base, 1 + #t~string83.offset, 1);call write~init~int(105, #t~string83.base, 2 + #t~string83.offset, 1);call write~init~int(0, #t~string83.base, 3 + #t~string83.offset, 1);call #t~string85.base, #t~string85.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string85.base, #t~string85.offset, 1);call write~init~int(70, #t~string85.base, 1 + #t~string85.offset, 1);call write~init~int(95, #t~string85.base, 2 + #t~string85.offset, 1);call write~init~int(112, #t~string85.base, 3 + #t~string85.offset, 1);call write~init~int(58, #t~string85.base, 4 + #t~string85.offset, 1);call write~init~int(0, #t~string85.base, 5 + #t~string85.offset, 1);call #t~string88.base, #t~string88.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string88.base, #t~string88.offset, 1);call write~init~int(37, #t~string88.base, 1 + #t~string88.offset, 1);call write~init~int(105, #t~string88.base, 2 + #t~string88.offset, 1);call write~init~int(0, #t~string88.base, 3 + #t~string88.offset, 1);call #t~string91.base, #t~string91.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string91.base, #t~string91.offset, 1);call write~init~int(37, #t~string91.base, 1 + #t~string91.offset, 1);call write~init~int(105, #t~string91.base, 2 + #t~string91.offset, 1);call write~init~int(0, #t~string91.base, 3 + #t~string91.offset, 1);call #t~string94.base, #t~string94.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string94.base, #t~string94.offset, 1);call write~init~int(37, #t~string94.base, 1 + #t~string94.offset, 1);call write~init~int(105, #t~string94.base, 2 + #t~string94.offset, 1);call write~init~int(0, #t~string94.base, 3 + #t~string94.offset, 1);call #t~string97.base, #t~string97.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string97.base, #t~string97.offset, 1);call write~init~int(37, #t~string97.base, 1 + #t~string97.offset, 1);call write~init~int(105, #t~string97.base, 2 + #t~string97.offset, 1);call write~init~int(0, #t~string97.base, 3 + #t~string97.offset, 1);call #t~string100.base, #t~string100.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string100.base, #t~string100.offset, 1);call write~init~int(37, #t~string100.base, 1 + #t~string100.offset, 1);call write~init~int(105, #t~string100.base, 2 + #t~string100.offset, 1);call write~init~int(0, #t~string100.base, 3 + #t~string100.offset, 1);call #t~string102.base, #t~string102.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string102.base, #t~string102.offset, 1);call write~init~int(0, #t~string102.base, 1 + #t~string102.offset, 1);call #t~string151.base, #t~string151.offset := #Ultimate.allocOnStack(30);call #t~string152.base, #t~string152.offset := #Ultimate.allocOnStack(9);call #t~string153.base, #t~string153.offset := #Ultimate.allocOnStack(21);call #t~string154.base, #t~string154.offset := #Ultimate.allocOnStack(30);call #t~string155.base, #t~string155.offset := #Ultimate.allocOnStack(9);call #t~string156.base, #t~string156.offset := #Ultimate.allocOnStack(21);call #t~string160.base, #t~string160.offset := #Ultimate.allocOnStack(30);call #t~string161.base, #t~string161.offset := #Ultimate.allocOnStack(9);call #t~string162.base, #t~string162.offset := #Ultimate.allocOnStack(25);call #t~string163.base, #t~string163.offset := #Ultimate.allocOnStack(30);call #t~string164.base, #t~string164.offset := #Ultimate.allocOnStack(9);call #t~string165.base, #t~string165.offset := #Ultimate.allocOnStack(25);~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 151987#L-1 havoc main_#res;havoc main_#t~ret118, main_~retValue_acc~22, main_~tmp~19;havoc main_~retValue_acc~22;havoc main_~tmp~19; 148714#L2430 havoc valid_product_#res;havoc valid_product_~retValue_acc~20;havoc valid_product_~retValue_acc~20;valid_product_~retValue_acc~20 := 1;valid_product_#res := valid_product_~retValue_acc~20; 148715#L2438 main_#t~ret118 := valid_product_#res;main_~tmp~19 := main_#t~ret118;havoc main_#t~ret118; 148300#L2777 assume 0 != main_~tmp~19; 148301#L2754 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 149561#L247 havoc bobCall_#t~ret106, bobCall_~tmp~11;havoc bobCall_~tmp~11;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 149562#L878 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~4 := 4;getOrigin_#res := getOrigin_~retValue_acc~4; 147675#L903 bobCall_#t~ret106 := getOrigin_#res;bobCall_~tmp~11 := bobCall_#t~ret106;havoc bobCall_#t~ret106;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 151618#L525 assume 0 == initPersonOnFloor_~floor; 152719#L526 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 146443#L633-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 148426#L317 assume !(0 == callOnFloor_~floorID); 148428#L320 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 149102#L329-2 havoc timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_#t~ret53, timeShift_#t~ret54, timeShift_#t~ret55, timeShift_#t~ret56, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 153608#L1184 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 153607#L1236 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 153606#L2814 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 149247#L2815 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 149248#L1201 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 153588#L1222 __utac_acc__Specification3_spec__1_#t~ret121 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret121;havoc __utac_acc__Specification3_spec__1_#t~ret121; 147599#L2819 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 147600#L2920 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret32, stopRequestedAtCurrentFloor_#t~ret33, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 152313#L254 assume !(0 == isFloorCalling_~floorID); 152314#L258 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 149640#L281 stopRequestedAtCurrentFloor_#t~ret32 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret32;havoc stopRequestedAtCurrentFloor_#t~ret32; 149641#L1797 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 151249#L1201-10 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 149644#L1222-10 stopRequestedAtCurrentFloor_#t~ret33 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret33;havoc stopRequestedAtCurrentFloor_#t~ret33; 147370#L1804 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 147372#L1809 timeShift_#t~ret46 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 153148#L1948 assume !(0 != timeShift_~tmp___9~2); 151525#L2039 assume !(1 == ~doorState~0); 151526#L2039-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_#t~ret24, stopRequestedInDirection_#t~ret25, stopRequestedInDirection_#t~ret26, stopRequestedInDirection_#t~ret27, stopRequestedInDirection_#t~ret28, stopRequestedInDirection_#t~ret29, stopRequestedInDirection_#t~ret30, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 150012#L1388 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 150014#L828 stopRequestedInDirection_#t~ret20 := isTopFloor_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 147359#L1392 assume 0 != stopRequestedInDirection_~tmp~5;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 146840#L1710 timeShift_#t~ret53 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret53;havoc timeShift_#t~ret53; 147495#L2047 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret31, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 147497#L1764 assume !(1 == ~currentHeading~0); 153471#L1774 assume !(0 == ~currentFloorID~0); 153391#L1774-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 153390#L1780-5 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 153388#L2945 assume !(-1 == ~expectedDirection~0); 153384#L2957 assume !(1 == ~expectedDirection~0); 153383#L2958 havoc timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_#t~ret53, timeShift_#t~ret54, timeShift_#t~ret55, timeShift_#t~ret56, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 153382#L1184-1 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 153381#L1236-3 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 153379#L2814-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 153377#L2876-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 153376#L2886-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 153342#L2897-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 153328#L2908-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 153312#L2919-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 153305#L2920-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret32, stopRequestedAtCurrentFloor_#t~ret33, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 153303#L254-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 153299#L281-21 stopRequestedAtCurrentFloor_#t~ret32 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret32;havoc stopRequestedAtCurrentFloor_#t~ret32; 153298#L1797-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 153296#L1201-21 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 153292#L1222-21 stopRequestedAtCurrentFloor_#t~ret33 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret33;havoc stopRequestedAtCurrentFloor_#t~ret33; 153291#L1804-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 153290#L1809-1 timeShift_#t~ret46 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 153289#L1948-1 assume !(0 != timeShift_~tmp___9~2); 153288#L2039-3 assume !(1 == ~doorState~0); 153286#L2039-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_#t~ret24, stopRequestedInDirection_#t~ret25, stopRequestedInDirection_#t~ret26, stopRequestedInDirection_#t~ret27, stopRequestedInDirection_#t~ret28, stopRequestedInDirection_#t~ret29, stopRequestedInDirection_#t~ret30, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 153281#L1388-2 assume !(1 == stopRequestedInDirection_~dir); 153241#L1557-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 153222#L1710-2 timeShift_#t~ret53 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret53;havoc timeShift_#t~ret53; 153220#L2047-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret31, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 153221#L1764-3 assume !(1 == ~currentHeading~0); 153848#L1774-9 assume !(0 == ~currentFloorID~0); 147296#L1774-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 154114#L1780-11 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 154111#L2945-1 assume !(-1 == ~expectedDirection~0); 154108#L2957-1 assume !(1 == ~expectedDirection~0); 154107#L2958-1 havoc timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_#t~ret53, timeShift_#t~ret54, timeShift_#t~ret55, timeShift_#t~ret56, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 154105#L1184-2 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 154103#L1236-6 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 154101#L2814-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 154102#L2876-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 155164#L2886-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 154082#L2897-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 154070#L2908-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 154032#L2919-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 153949#L2920-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret32, stopRequestedAtCurrentFloor_#t~ret33, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 153921#L254-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 146712#L281-42 stopRequestedAtCurrentFloor_#t~ret32 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret32;havoc stopRequestedAtCurrentFloor_#t~ret32; 151140#L1797-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 150557#L1201-32 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 146507#L1222-32 stopRequestedAtCurrentFloor_#t~ret33 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret33;havoc stopRequestedAtCurrentFloor_#t~ret33; 146508#L1804-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 152488#L1809-2 timeShift_#t~ret46 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 153946#L1948-2 assume !(0 != timeShift_~tmp___9~2); 146853#L2039-6 assume !(1 == ~doorState~0); 146854#L2039-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_#t~ret24, stopRequestedInDirection_#t~ret25, stopRequestedInDirection_#t~ret26, stopRequestedInDirection_#t~ret27, stopRequestedInDirection_#t~ret28, stopRequestedInDirection_#t~ret29, stopRequestedInDirection_#t~ret30, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 148991#L1388-4 assume !(1 == stopRequestedInDirection_~dir); 151627#L1557-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 146578#L1710-4 timeShift_#t~ret53 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret53;havoc timeShift_#t~ret53; 148175#L2047-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret31, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 148177#L1764-6 assume !(1 == ~currentHeading~0); 152876#L1774-18 assume !(0 == ~currentFloorID~0); 150074#L1774-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 156348#L1780-17 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 156345#L2945-2 assume !(-1 == ~expectedDirection~0); 156342#L2957-2 assume !(1 == ~expectedDirection~0); 156341#L2958-2 havoc bobCall_#t~ret106, bobCall_~tmp~11;havoc bobCall_~tmp~11;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 156302#L878-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~4 := 4;getOrigin_#res := getOrigin_~retValue_acc~4; 156290#L903-1 bobCall_#t~ret106 := getOrigin_#res;bobCall_~tmp~11 := bobCall_#t~ret106;havoc bobCall_#t~ret106;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 156268#L525-1 assume 0 == initPersonOnFloor_~floor; 156210#L526-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 156192#L633-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 156191#L317-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 147030#L329-5 havoc cleanup_#t~ret112, cleanup_#t~ret113, cleanup_~i~3, cleanup_~tmp~17, cleanup_~tmp___0~8, cleanup_~__cil_tmp4~0;havoc cleanup_~i~3;havoc cleanup_~tmp~17;havoc cleanup_~tmp___0~8;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_#t~ret53, timeShift_#t~ret54, timeShift_#t~ret55, timeShift_#t~ret56, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 152947#L1184-3 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 150783#L1236-9 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 147795#L2814-3 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 147709#L2815-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 147710#L1201-33 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 147817#L1222-33 __utac_acc__Specification3_spec__1_#t~ret121 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret121;havoc __utac_acc__Specification3_spec__1_#t~ret121; 147090#L2819-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 146641#L2920-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret32, stopRequestedAtCurrentFloor_#t~ret33, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 153836#L254-63 assume !(0 == isFloorCalling_~floorID); 153837#L258-63 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 153829#L281-63 stopRequestedAtCurrentFloor_#t~ret32 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret32;havoc stopRequestedAtCurrentFloor_#t~ret32; 153830#L1797-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 153825#L1201-43 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 153821#L1222-43 stopRequestedAtCurrentFloor_#t~ret33 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret33;havoc stopRequestedAtCurrentFloor_#t~ret33; 153815#L1804-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 153817#L1809-3 timeShift_#t~ret46 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 153810#L1948-3 assume !(0 != timeShift_~tmp___9~2); 153812#L2039-9 assume !(1 == ~doorState~0); 164064#L2039-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_#t~ret24, stopRequestedInDirection_#t~ret25, stopRequestedInDirection_#t~ret26, stopRequestedInDirection_#t~ret27, stopRequestedInDirection_#t~ret28, stopRequestedInDirection_#t~ret29, stopRequestedInDirection_#t~ret30, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 164062#L1388-6 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 164061#L828-15 stopRequestedInDirection_#t~ret20 := isTopFloor_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 152483#L1392-6 assume 0 != stopRequestedInDirection_~tmp~5;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 146460#L1710-6 timeShift_#t~ret53 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret53;havoc timeShift_#t~ret53; 151178#L2047-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret31, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 151033#L1764-9 assume !(1 == ~currentHeading~0); 151034#L1774-27 assume !(0 == ~currentFloorID~0); 148968#L1774-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 163853#L1780-23 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 163851#L2945-3 assume !(-1 == ~expectedDirection~0); 163848#L2957-3 assume !(1 == ~expectedDirection~0); 163846#L2958-3 cleanup_~i~3 := 0; 163844#L2586-2 [2021-11-02 22:08:43,899 INFO L793 eck$LassoCheckResult]: Loop: 163844#L2586-2 assume !false; 163843#L2587 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 163842#L2590 assume cleanup_~i~3 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~6;havoc isBlocked_~retValue_acc~6;isBlocked_~retValue_acc~6 := 0;isBlocked_#res := isBlocked_~retValue_acc~6; 163841#L1035 cleanup_#t~ret112 := isBlocked_#res;cleanup_~tmp___0~8 := cleanup_#t~ret112;havoc cleanup_#t~ret112; 150114#L2594 assume 1 != cleanup_~tmp___0~8; 150115#L2594-1 havoc isIdle_#res;havoc isIdle_#t~ret19, isIdle_~retValue_acc~13, isIdle_~tmp~4;havoc isIdle_~retValue_acc~13;havoc isIdle_~tmp~4;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret14, anyStopRequested_#t~ret15, anyStopRequested_#t~ret16, anyStopRequested_#t~ret17, anyStopRequested_#t~ret18, anyStopRequested_~retValue_acc~12, anyStopRequested_~tmp~3, anyStopRequested_~tmp___0~2, anyStopRequested_~tmp___1~2, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~12;havoc anyStopRequested_~tmp~3;havoc anyStopRequested_~tmp___0~2;havoc anyStopRequested_~tmp___1~2;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 159427#L254-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 159428#L281-84 anyStopRequested_#t~ret14 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret14;havoc anyStopRequested_#t~ret14; 152853#L1292 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~12 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~12; 147822#L1356 isIdle_#t~ret19 := anyStopRequested_#res;isIdle_~tmp~4 := isIdle_#t~ret19;havoc isIdle_#t~ret19;isIdle_~retValue_acc~13 := (if 0 == isIdle_~tmp~4 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~13; 152732#L1369 cleanup_#t~ret113 := isIdle_#res;cleanup_~tmp~17 := cleanup_#t~ret113;havoc cleanup_#t~ret113; 159478#L2606 assume !(0 != cleanup_~tmp~17);havoc timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_#t~ret53, timeShift_#t~ret54, timeShift_#t~ret55, timeShift_#t~ret56, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 159445#L1184-4 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 159362#L1236-12 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 159361#L2814-4 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 150318#L2815-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 150319#L1201-44 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 162531#L1222-44 __utac_acc__Specification3_spec__1_#t~ret121 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret121;havoc __utac_acc__Specification3_spec__1_#t~ret121; 162249#L2819-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 152962#L2920-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret32, stopRequestedAtCurrentFloor_#t~ret33, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 155342#L254-89 assume !(0 == isFloorCalling_~floorID); 155343#L258-89 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 159439#L281-89 stopRequestedAtCurrentFloor_#t~ret32 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret32;havoc stopRequestedAtCurrentFloor_#t~ret32; 159440#L1797-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 148563#L1201-54 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 148222#L1222-54 stopRequestedAtCurrentFloor_#t~ret33 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret33;havoc stopRequestedAtCurrentFloor_#t~ret33; 147435#L1804-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 147437#L1809-4 timeShift_#t~ret46 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 159418#L1948-4 assume !(0 != timeShift_~tmp___9~2); 159419#L2039-12 assume 1 == ~doorState~0;~doorState~0 := 0; 165094#L2039-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_#t~ret24, stopRequestedInDirection_#t~ret25, stopRequestedInDirection_#t~ret26, stopRequestedInDirection_#t~ret27, stopRequestedInDirection_#t~ret28, stopRequestedInDirection_#t~ret29, stopRequestedInDirection_#t~ret30, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 153066#L1388-8 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 150087#L828-20 stopRequestedInDirection_#t~ret20 := isTopFloor_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 150088#L1392-8 assume 0 != stopRequestedInDirection_~tmp~5;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 164964#L1710-8 timeShift_#t~ret53 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret53;havoc timeShift_#t~ret53; 165051#L2047-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret31, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 165050#L1764-12 assume !(1 == ~currentHeading~0); 165049#L1774-36 assume !(0 == ~currentFloorID~0); 164879#L1774-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 164875#L1780-29 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 164873#L2945-4 assume !(-1 == ~expectedDirection~0); 164870#L2957-4 assume !(1 == ~expectedDirection~0); 163845#L2958-4 cleanup_~i~3 := 1 + cleanup_~i~3; 163844#L2586-2 [2021-11-02 22:08:43,900 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-02 22:08:43,901 INFO L85 PathProgramCache]: Analyzing trace with hash 1940711574, now seen corresponding path program 1 times [2021-11-02 22:08:43,901 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-02 22:08:43,902 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2066551850] [2021-11-02 22:08:43,902 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-02 22:08:43,902 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-02 22:08:43,943 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-02 22:08:43,994 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-02 22:08:43,994 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-02 22:08:43,995 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2066551850] [2021-11-02 22:08:43,995 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2066551850] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-02 22:08:43,995 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-02 22:08:43,995 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-11-02 22:08:43,996 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2007376402] [2021-11-02 22:08:43,996 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-11-02 22:08:43,997 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-02 22:08:43,997 INFO L85 PathProgramCache]: Analyzing trace with hash 65845131, now seen corresponding path program 1 times [2021-11-02 22:08:43,997 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-02 22:08:43,997 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [653936538] [2021-11-02 22:08:43,997 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-02 22:08:43,998 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-02 22:08:44,009 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-02 22:08:44,058 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-02 22:08:44,058 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-02 22:08:44,059 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [653936538] [2021-11-02 22:08:44,059 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [653936538] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-02 22:08:44,059 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-02 22:08:44,059 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-11-02 22:08:44,059 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1918498640] [2021-11-02 22:08:44,060 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-11-02 22:08:44,060 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-02 22:08:44,061 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-11-02 22:08:44,061 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-11-02 22:08:44,061 INFO L87 Difference]: Start difference. First operand 19455 states and 36473 transitions. cyclomatic complexity: 17019 Second operand has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 6 states have internal predecessors, (43), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:08:49,434 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-02 22:08:49,435 INFO L93 Difference]: Finished difference Result 38163 states and 71151 transitions. [2021-11-02 22:08:49,437 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2021-11-02 22:08:49,437 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 38163 states and 71151 transitions. [2021-11-02 22:08:49,623 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 9138 [2021-11-02 22:08:49,754 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 38163 states to 38163 states and 71151 transitions. [2021-11-02 22:08:49,754 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 38163 [2021-11-02 22:08:49,786 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 38163 [2021-11-02 22:08:49,786 INFO L73 IsDeterministic]: Start isDeterministic. Operand 38163 states and 71151 transitions. [2021-11-02 22:08:49,829 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-11-02 22:08:49,829 INFO L681 BuchiCegarLoop]: Abstraction has 38163 states and 71151 transitions. [2021-11-02 22:08:49,854 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 38163 states and 71151 transitions. [2021-11-02 22:08:50,352 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 38163 to 26535. [2021-11-02 22:08:50,381 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 26535 states, 26535 states have (on average 1.867608818541549) internal successors, (49557), 26534 states have internal predecessors, (49557), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:08:50,463 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 26535 states to 26535 states and 49557 transitions. [2021-11-02 22:08:50,463 INFO L704 BuchiCegarLoop]: Abstraction has 26535 states and 49557 transitions. [2021-11-02 22:08:50,463 INFO L587 BuchiCegarLoop]: Abstraction has 26535 states and 49557 transitions. [2021-11-02 22:08:50,464 INFO L425 BuchiCegarLoop]: ======== Iteration 6============ [2021-11-02 22:08:50,464 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 26535 states and 49557 transitions. [2021-11-02 22:08:50,756 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 6260 [2021-11-02 22:08:50,757 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-11-02 22:08:50,757 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-11-02 22:08:50,760 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-02 22:08:50,760 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-02 22:08:50,761 INFO L791 eck$LassoCheckResult]: Stem: 209612#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(2);call write~init~int(48, #t~string4.base, #t~string4.offset, 1);call write~init~int(0, #t~string4.base, 1 + #t~string4.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(31);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(12);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(10);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string59.base, #t~string59.offset, 1);call write~init~int(95, #t~string59.base, 1 + #t~string59.offset, 1);call write~init~int(93, #t~string59.base, 2 + #t~string59.offset, 1);call write~init~int(0, #t~string59.base, 3 + #t~string59.offset, 1);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string61.base, #t~string61.offset, 1);call write~init~int(93, #t~string61.base, 1 + #t~string61.offset, 1);call write~init~int(32, #t~string61.base, 2 + #t~string61.offset, 1);call write~init~int(0, #t~string61.base, 3 + #t~string61.offset, 1);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string63.base, #t~string63.offset, 1);call write~init~int(97, #t~string63.base, 1 + #t~string63.offset, 1);call write~init~int(116, #t~string63.base, 2 + #t~string63.offset, 1);call write~init~int(32, #t~string63.base, 3 + #t~string63.offset, 1);call write~init~int(0, #t~string63.base, 4 + #t~string63.offset, 1);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string65.base, #t~string65.offset, 1);call write~init~int(105, #t~string65.base, 1 + #t~string65.offset, 1);call write~init~int(0, #t~string65.base, 2 + #t~string65.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(10);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string69.base, #t~string69.offset, 1);call write~init~int(112, #t~string69.base, 1 + #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 2 + #t~string69.offset, 1);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string71.base, #t~string71.offset, 1);call write~init~int(111, #t~string71.base, 1 + #t~string71.offset, 1);call write~init~int(119, #t~string71.base, 2 + #t~string71.offset, 1);call write~init~int(110, #t~string71.base, 3 + #t~string71.offset, 1);call write~init~int(0, #t~string71.base, 4 + #t~string71.offset, 1);call #t~string73.base, #t~string73.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string73.base, #t~string73.offset, 1);call write~init~int(73, #t~string73.base, 1 + #t~string73.offset, 1);call write~init~int(76, #t~string73.base, 2 + #t~string73.offset, 1);call write~init~int(95, #t~string73.base, 3 + #t~string73.offset, 1);call write~init~int(112, #t~string73.base, 4 + #t~string73.offset, 1);call write~init~int(58, #t~string73.base, 5 + #t~string73.offset, 1);call write~init~int(0, #t~string73.base, 6 + #t~string73.offset, 1);call #t~string75.base, #t~string75.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string75.base, #t~string75.offset, 1);call write~init~int(37, #t~string75.base, 1 + #t~string75.offset, 1);call write~init~int(105, #t~string75.base, 2 + #t~string75.offset, 1);call write~init~int(0, #t~string75.base, 3 + #t~string75.offset, 1);call #t~string77.base, #t~string77.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string77.base, #t~string77.offset, 1);call write~init~int(37, #t~string77.base, 1 + #t~string77.offset, 1);call write~init~int(105, #t~string77.base, 2 + #t~string77.offset, 1);call write~init~int(0, #t~string77.base, 3 + #t~string77.offset, 1);call #t~string79.base, #t~string79.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string79.base, #t~string79.offset, 1);call write~init~int(37, #t~string79.base, 1 + #t~string79.offset, 1);call write~init~int(105, #t~string79.base, 2 + #t~string79.offset, 1);call write~init~int(0, #t~string79.base, 3 + #t~string79.offset, 1);call #t~string81.base, #t~string81.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string81.base, #t~string81.offset, 1);call write~init~int(37, #t~string81.base, 1 + #t~string81.offset, 1);call write~init~int(105, #t~string81.base, 2 + #t~string81.offset, 1);call write~init~int(0, #t~string81.base, 3 + #t~string81.offset, 1);call #t~string83.base, #t~string83.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string83.base, #t~string83.offset, 1);call write~init~int(37, #t~string83.base, 1 + #t~string83.offset, 1);call write~init~int(105, #t~string83.base, 2 + #t~string83.offset, 1);call write~init~int(0, #t~string83.base, 3 + #t~string83.offset, 1);call #t~string85.base, #t~string85.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string85.base, #t~string85.offset, 1);call write~init~int(70, #t~string85.base, 1 + #t~string85.offset, 1);call write~init~int(95, #t~string85.base, 2 + #t~string85.offset, 1);call write~init~int(112, #t~string85.base, 3 + #t~string85.offset, 1);call write~init~int(58, #t~string85.base, 4 + #t~string85.offset, 1);call write~init~int(0, #t~string85.base, 5 + #t~string85.offset, 1);call #t~string88.base, #t~string88.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string88.base, #t~string88.offset, 1);call write~init~int(37, #t~string88.base, 1 + #t~string88.offset, 1);call write~init~int(105, #t~string88.base, 2 + #t~string88.offset, 1);call write~init~int(0, #t~string88.base, 3 + #t~string88.offset, 1);call #t~string91.base, #t~string91.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string91.base, #t~string91.offset, 1);call write~init~int(37, #t~string91.base, 1 + #t~string91.offset, 1);call write~init~int(105, #t~string91.base, 2 + #t~string91.offset, 1);call write~init~int(0, #t~string91.base, 3 + #t~string91.offset, 1);call #t~string94.base, #t~string94.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string94.base, #t~string94.offset, 1);call write~init~int(37, #t~string94.base, 1 + #t~string94.offset, 1);call write~init~int(105, #t~string94.base, 2 + #t~string94.offset, 1);call write~init~int(0, #t~string94.base, 3 + #t~string94.offset, 1);call #t~string97.base, #t~string97.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string97.base, #t~string97.offset, 1);call write~init~int(37, #t~string97.base, 1 + #t~string97.offset, 1);call write~init~int(105, #t~string97.base, 2 + #t~string97.offset, 1);call write~init~int(0, #t~string97.base, 3 + #t~string97.offset, 1);call #t~string100.base, #t~string100.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string100.base, #t~string100.offset, 1);call write~init~int(37, #t~string100.base, 1 + #t~string100.offset, 1);call write~init~int(105, #t~string100.base, 2 + #t~string100.offset, 1);call write~init~int(0, #t~string100.base, 3 + #t~string100.offset, 1);call #t~string102.base, #t~string102.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string102.base, #t~string102.offset, 1);call write~init~int(0, #t~string102.base, 1 + #t~string102.offset, 1);call #t~string151.base, #t~string151.offset := #Ultimate.allocOnStack(30);call #t~string152.base, #t~string152.offset := #Ultimate.allocOnStack(9);call #t~string153.base, #t~string153.offset := #Ultimate.allocOnStack(21);call #t~string154.base, #t~string154.offset := #Ultimate.allocOnStack(30);call #t~string155.base, #t~string155.offset := #Ultimate.allocOnStack(9);call #t~string156.base, #t~string156.offset := #Ultimate.allocOnStack(21);call #t~string160.base, #t~string160.offset := #Ultimate.allocOnStack(30);call #t~string161.base, #t~string161.offset := #Ultimate.allocOnStack(9);call #t~string162.base, #t~string162.offset := #Ultimate.allocOnStack(25);call #t~string163.base, #t~string163.offset := #Ultimate.allocOnStack(30);call #t~string164.base, #t~string164.offset := #Ultimate.allocOnStack(9);call #t~string165.base, #t~string165.offset := #Ultimate.allocOnStack(25);~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 209613#L-1 havoc main_#res;havoc main_#t~ret118, main_~retValue_acc~22, main_~tmp~19;havoc main_~retValue_acc~22;havoc main_~tmp~19; 206337#L2430 havoc valid_product_#res;havoc valid_product_~retValue_acc~20;havoc valid_product_~retValue_acc~20;valid_product_~retValue_acc~20 := 1;valid_product_#res := valid_product_~retValue_acc~20; 206338#L2438 main_#t~ret118 := valid_product_#res;main_~tmp~19 := main_#t~ret118;havoc main_#t~ret118; 205920#L2777 assume 0 != main_~tmp~19; 205921#L2754 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 207177#L247 havoc bobCall_#t~ret106, bobCall_~tmp~11;havoc bobCall_~tmp~11;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 207178#L878 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~4 := 4;getOrigin_#res := getOrigin_~retValue_acc~4; 205305#L903 bobCall_#t~ret106 := getOrigin_#res;bobCall_~tmp~11 := bobCall_#t~ret106;havoc bobCall_#t~ret106;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 209237#L525 assume 0 == initPersonOnFloor_~floor; 210320#L526 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 204090#L633-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 206046#L317 assume !(0 == callOnFloor_~floorID); 206048#L320 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 206722#L329-2 havoc timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_#t~ret53, timeShift_#t~ret54, timeShift_#t~ret55, timeShift_#t~ret56, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 214237#L1184 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 214236#L1236 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 214234#L2814 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 214235#L2815 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 214241#L1201 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 204588#L1222 __utac_acc__Specification3_spec__1_#t~ret121 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret121;havoc __utac_acc__Specification3_spec__1_#t~ret121; 204589#L2819 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 214210#L2920 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret32, stopRequestedAtCurrentFloor_#t~ret33, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 214209#L254 assume !(0 == isFloorCalling_~floorID); 214208#L258 assume !(1 == isFloorCalling_~floorID); 214205#L262 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 214204#L281 stopRequestedAtCurrentFloor_#t~ret32 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret32;havoc stopRequestedAtCurrentFloor_#t~ret32; 214203#L1797 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 214198#L1201-10 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 214194#L1222-10 stopRequestedAtCurrentFloor_#t~ret33 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret33;havoc stopRequestedAtCurrentFloor_#t~ret33; 214192#L1804 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 214191#L1809 timeShift_#t~ret46 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 214189#L1948 assume !(0 != timeShift_~tmp___9~2); 214188#L2039 assume !(1 == ~doorState~0); 214187#L2039-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_#t~ret24, stopRequestedInDirection_#t~ret25, stopRequestedInDirection_#t~ret26, stopRequestedInDirection_#t~ret27, stopRequestedInDirection_#t~ret28, stopRequestedInDirection_#t~ret29, stopRequestedInDirection_#t~ret30, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 207617#L1388 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 207619#L828 stopRequestedInDirection_#t~ret20 := isTopFloor_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 204999#L1392 assume 0 != stopRequestedInDirection_~tmp~5;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 204482#L1710 timeShift_#t~ret53 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret53;havoc timeShift_#t~ret53; 205132#L2047 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret31, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 205134#L1764 assume !(1 == ~currentHeading~0); 207048#L1774 assume !(0 == ~currentFloorID~0); 210248#L1774-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 214115#L1780-5 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 214108#L2945 assume !(-1 == ~expectedDirection~0); 214104#L2957 assume !(1 == ~expectedDirection~0); 210684#L2958 havoc timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_#t~ret53, timeShift_#t~ret54, timeShift_#t~ret55, timeShift_#t~ret56, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 209074#L1184-1 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 209075#L1236-3 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 214087#L2814-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 214078#L2876-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 214074#L2886-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 214038#L2897-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 214020#L2908-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 214005#L2919-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 213992#L2920-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret32, stopRequestedAtCurrentFloor_#t~ret33, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 213986#L254-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 213981#L281-21 stopRequestedAtCurrentFloor_#t~ret32 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret32;havoc stopRequestedAtCurrentFloor_#t~ret32; 213977#L1797-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 213979#L1201-21 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 213982#L1222-21 stopRequestedAtCurrentFloor_#t~ret33 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret33;havoc stopRequestedAtCurrentFloor_#t~ret33; 213980#L1804-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 213973#L1809-1 timeShift_#t~ret46 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 213974#L1948-1 assume !(0 != timeShift_~tmp___9~2); 214495#L2039-3 assume !(1 == ~doorState~0); 214491#L2039-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_#t~ret24, stopRequestedInDirection_#t~ret25, stopRequestedInDirection_#t~ret26, stopRequestedInDirection_#t~ret27, stopRequestedInDirection_#t~ret28, stopRequestedInDirection_#t~ret29, stopRequestedInDirection_#t~ret30, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 214481#L1388-2 assume !(1 == stopRequestedInDirection_~dir); 214476#L1557-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 214457#L1710-2 timeShift_#t~ret53 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret53;havoc timeShift_#t~ret53; 214453#L2047-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret31, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 214454#L1764-3 assume !(1 == ~currentHeading~0); 218990#L1774-9 assume !(0 == ~currentFloorID~0); 212465#L1774-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 212463#L1780-11 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 212457#L2945-1 assume !(-1 == ~expectedDirection~0); 212451#L2957-1 assume !(1 == ~expectedDirection~0); 212449#L2958-1 havoc timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_#t~ret53, timeShift_#t~ret54, timeShift_#t~ret55, timeShift_#t~ret56, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 212447#L1184-2 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 212445#L1236-6 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 212440#L2814-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 212419#L2876-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 212390#L2886-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 212384#L2897-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 212367#L2908-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 212352#L2919-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 212339#L2920-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret32, stopRequestedAtCurrentFloor_#t~ret33, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 212333#L254-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 212328#L281-42 stopRequestedAtCurrentFloor_#t~ret32 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret32;havoc stopRequestedAtCurrentFloor_#t~ret32; 212324#L1797-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 212326#L1201-32 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 212329#L1222-32 stopRequestedAtCurrentFloor_#t~ret33 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret33;havoc stopRequestedAtCurrentFloor_#t~ret33; 212327#L1804-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 212320#L1809-2 timeShift_#t~ret46 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 212321#L1948-2 assume !(0 != timeShift_~tmp___9~2); 214565#L2039-6 assume !(1 == ~doorState~0); 214555#L2039-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_#t~ret24, stopRequestedInDirection_#t~ret25, stopRequestedInDirection_#t~ret26, stopRequestedInDirection_#t~ret27, stopRequestedInDirection_#t~ret28, stopRequestedInDirection_#t~ret29, stopRequestedInDirection_#t~ret30, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 214550#L1388-4 assume !(1 == stopRequestedInDirection_~dir); 214531#L1557-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 214530#L1710-4 timeShift_#t~ret53 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret53;havoc timeShift_#t~ret53; 214528#L2047-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret31, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 214526#L1764-6 assume !(1 == ~currentHeading~0); 214524#L1774-18 assume !(0 == ~currentFloorID~0); 210815#L1774-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 210811#L1780-17 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 210808#L2945-2 assume !(-1 == ~expectedDirection~0); 210805#L2957-2 assume !(1 == ~expectedDirection~0); 210804#L2958-2 havoc bobCall_#t~ret106, bobCall_~tmp~11;havoc bobCall_~tmp~11;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 210802#L878-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~4 := 4;getOrigin_#res := getOrigin_~retValue_acc~4; 210797#L903-1 bobCall_#t~ret106 := getOrigin_#res;bobCall_~tmp~11 := bobCall_#t~ret106;havoc bobCall_#t~ret106;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 210796#L525-1 assume 0 == initPersonOnFloor_~floor; 210778#L526-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 210761#L633-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 210759#L317-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 210760#L329-5 havoc cleanup_#t~ret112, cleanup_#t~ret113, cleanup_~i~3, cleanup_~tmp~17, cleanup_~tmp___0~8, cleanup_~__cil_tmp4~0;havoc cleanup_~i~3;havoc cleanup_~tmp~17;havoc cleanup_~tmp___0~8;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_#t~ret53, timeShift_#t~ret54, timeShift_#t~ret55, timeShift_#t~ret56, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 221433#L1184-3 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 221432#L1236-9 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 221426#L2814-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 221355#L2876-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 204229#L1201-38 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 204738#L1222-38 __utac_acc__Specification3_spec__1_#t~ret126 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret126;havoc __utac_acc__Specification3_spec__1_#t~ret126; 210478#L2880-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 214597#L2920-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret32, stopRequestedAtCurrentFloor_#t~ret33, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 210704#L254-63 assume !(0 == isFloorCalling_~floorID); 210705#L258-63 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 221866#L281-63 stopRequestedAtCurrentFloor_#t~ret32 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret32;havoc stopRequestedAtCurrentFloor_#t~ret32; 221865#L1797-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 221864#L1201-43 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 221859#L1222-43 stopRequestedAtCurrentFloor_#t~ret33 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret33;havoc stopRequestedAtCurrentFloor_#t~ret33; 221858#L1804-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 221857#L1809-3 timeShift_#t~ret46 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 221856#L1948-3 assume !(0 != timeShift_~tmp___9~2); 207939#L2039-9 assume !(1 == ~doorState~0); 207940#L2039-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_#t~ret24, stopRequestedInDirection_#t~ret25, stopRequestedInDirection_#t~ret26, stopRequestedInDirection_#t~ret27, stopRequestedInDirection_#t~ret28, stopRequestedInDirection_#t~ret29, stopRequestedInDirection_#t~ret30, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 209214#L1388-6 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 208146#L828-15 stopRequestedInDirection_#t~ret20 := isTopFloor_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 208147#L1392-6 assume 0 != stopRequestedInDirection_~tmp~5;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 204107#L1710-6 timeShift_#t~ret53 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret53;havoc timeShift_#t~ret53; 208795#L2047-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret31, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 208648#L1764-9 assume !(1 == ~currentHeading~0); 208649#L1774-27 assume !(0 == ~currentFloorID~0); 220541#L1774-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 219758#L1780-23 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 219755#L2945-3 assume !(-1 == ~expectedDirection~0); 219749#L2957-3 assume !(1 == ~expectedDirection~0); 219744#L2958-3 cleanup_~i~3 := 0; 219742#L2586-2 [2021-11-02 22:08:50,762 INFO L793 eck$LassoCheckResult]: Loop: 219742#L2586-2 assume !false; 219741#L2587 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 219740#L2590 assume cleanup_~i~3 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~6;havoc isBlocked_~retValue_acc~6;isBlocked_~retValue_acc~6 := 0;isBlocked_#res := isBlocked_~retValue_acc~6; 219739#L1035 cleanup_#t~ret112 := isBlocked_#res;cleanup_~tmp___0~8 := cleanup_#t~ret112;havoc cleanup_#t~ret112; 219737#L2594 assume 1 != cleanup_~tmp___0~8; 219738#L2594-1 havoc isIdle_#res;havoc isIdle_#t~ret19, isIdle_~retValue_acc~13, isIdle_~tmp~4;havoc isIdle_~retValue_acc~13;havoc isIdle_~tmp~4;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret14, anyStopRequested_#t~ret15, anyStopRequested_#t~ret16, anyStopRequested_#t~ret17, anyStopRequested_#t~ret18, anyStopRequested_~retValue_acc~12, anyStopRequested_~tmp~3, anyStopRequested_~tmp___0~2, anyStopRequested_~tmp___1~2, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~12;havoc anyStopRequested_~tmp~3;havoc anyStopRequested_~tmp___0~2;havoc anyStopRequested_~tmp___1~2;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 230480#L254-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 230479#L281-84 anyStopRequested_#t~ret14 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret14;havoc anyStopRequested_#t~ret14; 219691#L1292 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~12 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~12; 219684#L1356 isIdle_#t~ret19 := anyStopRequested_#res;isIdle_~tmp~4 := isIdle_#t~ret19;havoc isIdle_#t~ret19;isIdle_~retValue_acc~13 := (if 0 == isIdle_~tmp~4 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~13; 219683#L1369 cleanup_#t~ret113 := isIdle_#res;cleanup_~tmp~17 := cleanup_#t~ret113;havoc cleanup_#t~ret113; 219681#L2606 assume !(0 != cleanup_~tmp~17);havoc timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_#t~ret53, timeShift_#t~ret54, timeShift_#t~ret55, timeShift_#t~ret56, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 219682#L1184-4 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 230397#L1236-12 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 230394#L2814-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 230395#L2876-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 230520#L1201-49 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 230516#L1222-49 __utac_acc__Specification3_spec__1_#t~ret126 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret126;havoc __utac_acc__Specification3_spec__1_#t~ret126; 230362#L2880-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 209408#L2920-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret32, stopRequestedAtCurrentFloor_#t~ret33, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 209409#L254-89 assume !(0 == isFloorCalling_~floorID); 207149#L258-89 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 207150#L281-89 stopRequestedAtCurrentFloor_#t~ret32 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret32;havoc stopRequestedAtCurrentFloor_#t~ret32; 208894#L1797-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 206184#L1201-54 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 205847#L1222-54 stopRequestedAtCurrentFloor_#t~ret33 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret33;havoc stopRequestedAtCurrentFloor_#t~ret33; 205074#L1804-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 204732#L1809-4 timeShift_#t~ret46 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 204733#L1948-4 assume !(0 != timeShift_~tmp___9~2); 210273#L2039-12 assume 1 == ~doorState~0;~doorState~0 := 0; 210063#L2039-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_#t~ret24, stopRequestedInDirection_#t~ret25, stopRequestedInDirection_#t~ret26, stopRequestedInDirection_#t~ret27, stopRequestedInDirection_#t~ret28, stopRequestedInDirection_#t~ret29, stopRequestedInDirection_#t~ret30, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 210064#L1388-8 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 207691#L828-20 stopRequestedInDirection_#t~ret20 := isTopFloor_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 205542#L1392-8 assume 0 != stopRequestedInDirection_~tmp~5;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 204661#L1710-8 timeShift_#t~ret53 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret53;havoc timeShift_#t~ret53; 205996#L2047-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret31, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 210178#L1764-12 assume !(1 == ~currentHeading~0); 210179#L1774-36 assume !(0 == ~currentFloorID~0); 208284#L1774-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 219757#L1780-29 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 219752#L2945-4 assume !(-1 == ~expectedDirection~0); 219746#L2957-4 assume !(1 == ~expectedDirection~0); 219743#L2958-4 cleanup_~i~3 := 1 + cleanup_~i~3; 219742#L2586-2 [2021-11-02 22:08:50,762 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-02 22:08:50,763 INFO L85 PathProgramCache]: Analyzing trace with hash 1362113460, now seen corresponding path program 1 times [2021-11-02 22:08:50,763 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-02 22:08:50,763 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [293562663] [2021-11-02 22:08:50,763 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-02 22:08:50,763 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-02 22:08:50,810 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-02 22:08:50,855 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-02 22:08:50,855 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-02 22:08:50,856 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [293562663] [2021-11-02 22:08:50,856 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [293562663] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-02 22:08:50,856 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-02 22:08:50,856 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-11-02 22:08:50,857 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1007038102] [2021-11-02 22:08:50,858 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-11-02 22:08:50,859 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-02 22:08:50,859 INFO L85 PathProgramCache]: Analyzing trace with hash 1611421712, now seen corresponding path program 1 times [2021-11-02 22:08:50,859 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-02 22:08:50,860 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [397952834] [2021-11-02 22:08:50,860 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-02 22:08:50,860 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-02 22:08:50,880 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-02 22:08:50,907 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-02 22:08:50,907 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-02 22:08:50,910 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [397952834] [2021-11-02 22:08:50,914 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [397952834] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-02 22:08:50,914 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-02 22:08:50,915 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-11-02 22:08:50,915 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [74962542] [2021-11-02 22:08:50,916 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-11-02 22:08:50,919 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-02 22:08:50,919 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-11-02 22:08:50,920 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-11-02 22:08:50,920 INFO L87 Difference]: Start difference. First operand 26535 states and 49557 transitions. cyclomatic complexity: 23023 Second operand has 5 states, 5 states have (on average 8.6) internal successors, (43), 5 states have internal predecessors, (43), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:08:57,149 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-02 22:08:57,149 INFO L93 Difference]: Finished difference Result 63127 states and 118305 transitions. [2021-11-02 22:08:57,149 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2021-11-02 22:08:57,149 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 63127 states and 118305 transitions. [2021-11-02 22:08:57,409 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 16192 [2021-11-02 22:08:57,836 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 63127 states to 63127 states and 118305 transitions. [2021-11-02 22:08:57,836 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 63127 [2021-11-02 22:08:57,888 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 63127 [2021-11-02 22:08:57,888 INFO L73 IsDeterministic]: Start isDeterministic. Operand 63127 states and 118305 transitions. [2021-11-02 22:08:57,925 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-11-02 22:08:57,925 INFO L681 BuchiCegarLoop]: Abstraction has 63127 states and 118305 transitions. [2021-11-02 22:08:57,968 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 63127 states and 118305 transitions. [2021-11-02 22:08:58,559 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 63127 to 25963. [2021-11-02 22:08:58,584 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 25963 states, 25963 states have (on average 1.8692369911027231) internal successors, (48531), 25962 states have internal predecessors, (48531), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:08:58,665 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 25963 states to 25963 states and 48531 transitions. [2021-11-02 22:08:58,665 INFO L704 BuchiCegarLoop]: Abstraction has 25963 states and 48531 transitions. [2021-11-02 22:08:58,665 INFO L587 BuchiCegarLoop]: Abstraction has 25963 states and 48531 transitions. [2021-11-02 22:08:58,665 INFO L425 BuchiCegarLoop]: ======== Iteration 7============ [2021-11-02 22:08:58,665 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 25963 states and 48531 transitions. [2021-11-02 22:08:58,757 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 6117 [2021-11-02 22:08:58,757 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-11-02 22:08:58,757 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-11-02 22:08:58,761 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-02 22:08:58,761 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-02 22:08:58,762 INFO L791 eck$LassoCheckResult]: Stem: 299162#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(2);call write~init~int(48, #t~string4.base, #t~string4.offset, 1);call write~init~int(0, #t~string4.base, 1 + #t~string4.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(31);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(12);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(10);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string59.base, #t~string59.offset, 1);call write~init~int(95, #t~string59.base, 1 + #t~string59.offset, 1);call write~init~int(93, #t~string59.base, 2 + #t~string59.offset, 1);call write~init~int(0, #t~string59.base, 3 + #t~string59.offset, 1);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string61.base, #t~string61.offset, 1);call write~init~int(93, #t~string61.base, 1 + #t~string61.offset, 1);call write~init~int(32, #t~string61.base, 2 + #t~string61.offset, 1);call write~init~int(0, #t~string61.base, 3 + #t~string61.offset, 1);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string63.base, #t~string63.offset, 1);call write~init~int(97, #t~string63.base, 1 + #t~string63.offset, 1);call write~init~int(116, #t~string63.base, 2 + #t~string63.offset, 1);call write~init~int(32, #t~string63.base, 3 + #t~string63.offset, 1);call write~init~int(0, #t~string63.base, 4 + #t~string63.offset, 1);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string65.base, #t~string65.offset, 1);call write~init~int(105, #t~string65.base, 1 + #t~string65.offset, 1);call write~init~int(0, #t~string65.base, 2 + #t~string65.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(10);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string69.base, #t~string69.offset, 1);call write~init~int(112, #t~string69.base, 1 + #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 2 + #t~string69.offset, 1);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string71.base, #t~string71.offset, 1);call write~init~int(111, #t~string71.base, 1 + #t~string71.offset, 1);call write~init~int(119, #t~string71.base, 2 + #t~string71.offset, 1);call write~init~int(110, #t~string71.base, 3 + #t~string71.offset, 1);call write~init~int(0, #t~string71.base, 4 + #t~string71.offset, 1);call #t~string73.base, #t~string73.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string73.base, #t~string73.offset, 1);call write~init~int(73, #t~string73.base, 1 + #t~string73.offset, 1);call write~init~int(76, #t~string73.base, 2 + #t~string73.offset, 1);call write~init~int(95, #t~string73.base, 3 + #t~string73.offset, 1);call write~init~int(112, #t~string73.base, 4 + #t~string73.offset, 1);call write~init~int(58, #t~string73.base, 5 + #t~string73.offset, 1);call write~init~int(0, #t~string73.base, 6 + #t~string73.offset, 1);call #t~string75.base, #t~string75.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string75.base, #t~string75.offset, 1);call write~init~int(37, #t~string75.base, 1 + #t~string75.offset, 1);call write~init~int(105, #t~string75.base, 2 + #t~string75.offset, 1);call write~init~int(0, #t~string75.base, 3 + #t~string75.offset, 1);call #t~string77.base, #t~string77.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string77.base, #t~string77.offset, 1);call write~init~int(37, #t~string77.base, 1 + #t~string77.offset, 1);call write~init~int(105, #t~string77.base, 2 + #t~string77.offset, 1);call write~init~int(0, #t~string77.base, 3 + #t~string77.offset, 1);call #t~string79.base, #t~string79.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string79.base, #t~string79.offset, 1);call write~init~int(37, #t~string79.base, 1 + #t~string79.offset, 1);call write~init~int(105, #t~string79.base, 2 + #t~string79.offset, 1);call write~init~int(0, #t~string79.base, 3 + #t~string79.offset, 1);call #t~string81.base, #t~string81.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string81.base, #t~string81.offset, 1);call write~init~int(37, #t~string81.base, 1 + #t~string81.offset, 1);call write~init~int(105, #t~string81.base, 2 + #t~string81.offset, 1);call write~init~int(0, #t~string81.base, 3 + #t~string81.offset, 1);call #t~string83.base, #t~string83.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string83.base, #t~string83.offset, 1);call write~init~int(37, #t~string83.base, 1 + #t~string83.offset, 1);call write~init~int(105, #t~string83.base, 2 + #t~string83.offset, 1);call write~init~int(0, #t~string83.base, 3 + #t~string83.offset, 1);call #t~string85.base, #t~string85.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string85.base, #t~string85.offset, 1);call write~init~int(70, #t~string85.base, 1 + #t~string85.offset, 1);call write~init~int(95, #t~string85.base, 2 + #t~string85.offset, 1);call write~init~int(112, #t~string85.base, 3 + #t~string85.offset, 1);call write~init~int(58, #t~string85.base, 4 + #t~string85.offset, 1);call write~init~int(0, #t~string85.base, 5 + #t~string85.offset, 1);call #t~string88.base, #t~string88.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string88.base, #t~string88.offset, 1);call write~init~int(37, #t~string88.base, 1 + #t~string88.offset, 1);call write~init~int(105, #t~string88.base, 2 + #t~string88.offset, 1);call write~init~int(0, #t~string88.base, 3 + #t~string88.offset, 1);call #t~string91.base, #t~string91.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string91.base, #t~string91.offset, 1);call write~init~int(37, #t~string91.base, 1 + #t~string91.offset, 1);call write~init~int(105, #t~string91.base, 2 + #t~string91.offset, 1);call write~init~int(0, #t~string91.base, 3 + #t~string91.offset, 1);call #t~string94.base, #t~string94.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string94.base, #t~string94.offset, 1);call write~init~int(37, #t~string94.base, 1 + #t~string94.offset, 1);call write~init~int(105, #t~string94.base, 2 + #t~string94.offset, 1);call write~init~int(0, #t~string94.base, 3 + #t~string94.offset, 1);call #t~string97.base, #t~string97.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string97.base, #t~string97.offset, 1);call write~init~int(37, #t~string97.base, 1 + #t~string97.offset, 1);call write~init~int(105, #t~string97.base, 2 + #t~string97.offset, 1);call write~init~int(0, #t~string97.base, 3 + #t~string97.offset, 1);call #t~string100.base, #t~string100.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string100.base, #t~string100.offset, 1);call write~init~int(37, #t~string100.base, 1 + #t~string100.offset, 1);call write~init~int(105, #t~string100.base, 2 + #t~string100.offset, 1);call write~init~int(0, #t~string100.base, 3 + #t~string100.offset, 1);call #t~string102.base, #t~string102.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string102.base, #t~string102.offset, 1);call write~init~int(0, #t~string102.base, 1 + #t~string102.offset, 1);call #t~string151.base, #t~string151.offset := #Ultimate.allocOnStack(30);call #t~string152.base, #t~string152.offset := #Ultimate.allocOnStack(9);call #t~string153.base, #t~string153.offset := #Ultimate.allocOnStack(21);call #t~string154.base, #t~string154.offset := #Ultimate.allocOnStack(30);call #t~string155.base, #t~string155.offset := #Ultimate.allocOnStack(9);call #t~string156.base, #t~string156.offset := #Ultimate.allocOnStack(21);call #t~string160.base, #t~string160.offset := #Ultimate.allocOnStack(30);call #t~string161.base, #t~string161.offset := #Ultimate.allocOnStack(9);call #t~string162.base, #t~string162.offset := #Ultimate.allocOnStack(25);call #t~string163.base, #t~string163.offset := #Ultimate.allocOnStack(30);call #t~string164.base, #t~string164.offset := #Ultimate.allocOnStack(9);call #t~string165.base, #t~string165.offset := #Ultimate.allocOnStack(25);~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 299163#L-1 havoc main_#res;havoc main_#t~ret118, main_~retValue_acc~22, main_~tmp~19;havoc main_~retValue_acc~22;havoc main_~tmp~19; 296010#L2430 havoc valid_product_#res;havoc valid_product_~retValue_acc~20;havoc valid_product_~retValue_acc~20;valid_product_~retValue_acc~20 := 1;valid_product_#res := valid_product_~retValue_acc~20; 296011#L2438 main_#t~ret118 := valid_product_#res;main_~tmp~19 := main_#t~ret118;havoc main_#t~ret118; 295592#L2777 assume 0 != main_~tmp~19; 295593#L2754 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 296838#L247 havoc bobCall_#t~ret106, bobCall_~tmp~11;havoc bobCall_~tmp~11;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 296839#L878 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~4 := 4;getOrigin_#res := getOrigin_~retValue_acc~4; 294986#L903 bobCall_#t~ret106 := getOrigin_#res;bobCall_~tmp~11 := bobCall_#t~ret106;havoc bobCall_#t~ret106;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 298820#L525 assume 0 == initPersonOnFloor_~floor; 299815#L526 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 293774#L633-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 295717#L317 assume !(0 == callOnFloor_~floorID); 295719#L320 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 296395#L329-2 havoc timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_#t~ret53, timeShift_#t~ret54, timeShift_#t~ret55, timeShift_#t~ret56, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 295869#L1184 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 295870#L1236 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 298842#L2814 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 298843#L2815 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 295218#L1201 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 294274#L1222 __utac_acc__Specification3_spec__1_#t~ret121 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret121;havoc __utac_acc__Specification3_spec__1_#t~ret121; 294275#L2819 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 293823#L2920 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret32, stopRequestedAtCurrentFloor_#t~ret33, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 293824#L254 assume !(0 == isFloorCalling_~floorID); 299050#L258 assume !(1 == isFloorCalling_~floorID); 298769#L262 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 294618#L281 stopRequestedAtCurrentFloor_#t~ret32 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret32;havoc stopRequestedAtCurrentFloor_#t~ret32; 294077#L1797 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 294079#L1201-10 assume !(0 == buttonForFloorIsPressed_~floorID); 299723#L1205-10 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 296915#L1222-10 stopRequestedAtCurrentFloor_#t~ret33 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret33;havoc stopRequestedAtCurrentFloor_#t~ret33; 294692#L1804 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 294693#L1809 timeShift_#t~ret46 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 300156#L1948 assume !(0 != timeShift_~tmp___9~2); 298743#L2039 assume !(1 == ~doorState~0); 298744#L2039-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_#t~ret24, stopRequestedInDirection_#t~ret25, stopRequestedInDirection_#t~ret26, stopRequestedInDirection_#t~ret27, stopRequestedInDirection_#t~ret28, stopRequestedInDirection_#t~ret29, stopRequestedInDirection_#t~ret30, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 300149#L1388 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 295299#L828 stopRequestedInDirection_#t~ret20 := isTopFloor_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 295300#L1392 assume 0 != stopRequestedInDirection_~tmp~5;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 300236#L1710 timeShift_#t~ret53 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret53;havoc timeShift_#t~ret53; 300235#L2047 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret31, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 300234#L1764 assume !(1 == ~currentHeading~0); 299915#L1774 assume !(0 == ~currentFloorID~0); 299743#L1774-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 300231#L1780-5 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 300229#L2945 assume !(-1 == ~expectedDirection~0); 300225#L2957 assume !(1 == ~expectedDirection~0); 300224#L2958 havoc timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_#t~ret53, timeShift_#t~ret54, timeShift_#t~ret55, timeShift_#t~ret56, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 300223#L1184-1 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 300222#L1236-3 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 300221#L2814-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 300218#L2876-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 300212#L2886-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 300198#L2897-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 300190#L2908-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 300183#L2919-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 300180#L2920-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret32, stopRequestedAtCurrentFloor_#t~ret33, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 300179#L254-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 300178#L281-21 stopRequestedAtCurrentFloor_#t~ret32 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret32;havoc stopRequestedAtCurrentFloor_#t~ret32; 300176#L1797-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 300173#L1201-21 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 300174#L1222-21 stopRequestedAtCurrentFloor_#t~ret33 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret33;havoc stopRequestedAtCurrentFloor_#t~ret33; 301937#L1804-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 301936#L1809-1 timeShift_#t~ret46 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 301933#L1948-1 assume !(0 != timeShift_~tmp___9~2); 301934#L2039-3 assume !(1 == ~doorState~0); 302192#L2039-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_#t~ret24, stopRequestedInDirection_#t~ret25, stopRequestedInDirection_#t~ret26, stopRequestedInDirection_#t~ret27, stopRequestedInDirection_#t~ret28, stopRequestedInDirection_#t~ret29, stopRequestedInDirection_#t~ret30, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 302178#L1388-2 assume !(1 == stopRequestedInDirection_~dir); 302172#L1557-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 302153#L1710-2 timeShift_#t~ret53 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret53;havoc timeShift_#t~ret53; 302151#L2047-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret31, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 302152#L1764-3 assume !(1 == ~currentHeading~0); 319607#L1774-9 assume !(0 == ~currentFloorID~0); 294616#L1774-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 300572#L1780-11 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 300562#L2945-1 assume !(-1 == ~expectedDirection~0); 300563#L2957-1 assume !(1 == ~expectedDirection~0); 300556#L2958-1 havoc timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_#t~ret53, timeShift_#t~ret54, timeShift_#t~ret55, timeShift_#t~ret56, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 300557#L1184-2 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 300552#L1236-6 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 300553#L2814-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 314035#L2876-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 300550#L2886-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 300545#L2897-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 300542#L2908-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 300511#L2919-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 300508#L2920-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret32, stopRequestedAtCurrentFloor_#t~ret33, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 300507#L254-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 300506#L281-42 stopRequestedAtCurrentFloor_#t~ret32 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret32;havoc stopRequestedAtCurrentFloor_#t~ret32; 300504#L1797-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 300501#L1201-32 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 300502#L1222-32 stopRequestedAtCurrentFloor_#t~ret33 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret33;havoc stopRequestedAtCurrentFloor_#t~ret33; 307845#L1804-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 307844#L1809-2 timeShift_#t~ret46 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 307843#L1948-2 assume !(0 != timeShift_~tmp___9~2); 294179#L2039-6 assume !(1 == ~doorState~0); 294180#L2039-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_#t~ret24, stopRequestedInDirection_#t~ret25, stopRequestedInDirection_#t~ret26, stopRequestedInDirection_#t~ret27, stopRequestedInDirection_#t~ret28, stopRequestedInDirection_#t~ret29, stopRequestedInDirection_#t~ret30, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 298827#L1388-4 assume !(1 == stopRequestedInDirection_~dir); 298828#L1557-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 319671#L1710-4 timeShift_#t~ret53 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret53;havoc timeShift_#t~ret53; 319669#L2047-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret31, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 319670#L1764-6 assume !(1 == ~currentHeading~0); 319723#L1774-18 assume !(0 == ~currentFloorID~0); 297323#L1774-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 306633#L1780-17 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 311722#L2945-2 assume !(-1 == ~expectedDirection~0); 311719#L2957-2 assume !(1 == ~expectedDirection~0); 311718#L2958-2 havoc bobCall_#t~ret106, bobCall_~tmp~11;havoc bobCall_~tmp~11;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 311716#L878-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~4 := 4;getOrigin_#res := getOrigin_~retValue_acc~4; 311711#L903-1 bobCall_#t~ret106 := getOrigin_#res;bobCall_~tmp~11 := bobCall_#t~ret106;havoc bobCall_#t~ret106;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 311710#L525-1 assume 0 == initPersonOnFloor_~floor; 306597#L526-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 306581#L633-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 306575#L317-2 assume !(0 == callOnFloor_~floorID); 306577#L320-2 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 306567#L329-5 havoc cleanup_#t~ret112, cleanup_#t~ret113, cleanup_~i~3, cleanup_~tmp~17, cleanup_~tmp___0~8, cleanup_~__cil_tmp4~0;havoc cleanup_~i~3;havoc cleanup_~tmp~17;havoc cleanup_~tmp___0~8;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_#t~ret53, timeShift_#t~ret54, timeShift_#t~ret55, timeShift_#t~ret56, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 306568#L1184-3 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 306429#L1236-9 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 306430#L2814-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 311496#L2876-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 306428#L2886-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 306423#L2897-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 306418#L2908-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 306385#L2919-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 306324#L2920-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret32, stopRequestedAtCurrentFloor_#t~ret33, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 306323#L254-63 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 306322#L281-63 stopRequestedAtCurrentFloor_#t~ret32 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret32;havoc stopRequestedAtCurrentFloor_#t~ret32; 306321#L1797-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 306320#L1201-43 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 306315#L1222-43 stopRequestedAtCurrentFloor_#t~ret33 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret33;havoc stopRequestedAtCurrentFloor_#t~ret33; 306313#L1804-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 306307#L1809-3 timeShift_#t~ret46 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 306305#L1948-3 assume !(0 != timeShift_~tmp___9~2); 297587#L2039-9 assume !(1 == ~doorState~0); 297588#L2039-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_#t~ret24, stopRequestedInDirection_#t~ret25, stopRequestedInDirection_#t~ret26, stopRequestedInDirection_#t~ret27, stopRequestedInDirection_#t~ret28, stopRequestedInDirection_#t~ret29, stopRequestedInDirection_#t~ret30, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 298805#L1388-6 assume !(1 == stopRequestedInDirection_~dir); 298806#L1557-6 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 318563#L1710-6 timeShift_#t~ret53 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret53;havoc timeShift_#t~ret53; 318560#L2047-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret31, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 318561#L1764-9 assume !(1 == ~currentHeading~0); 319730#L1774-27 assume !(0 == ~currentFloorID~0); 296261#L1774-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 303357#L1780-23 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 303358#L2945-3 assume !(-1 == ~expectedDirection~0); 303339#L2957-3 assume !(1 == ~expectedDirection~0); 303337#L2958-3 cleanup_~i~3 := 0; 303335#L2586-2 [2021-11-02 22:08:58,763 INFO L793 eck$LassoCheckResult]: Loop: 303335#L2586-2 assume !false; 303333#L2587 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 303331#L2590 assume cleanup_~i~3 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~6;havoc isBlocked_~retValue_acc~6;isBlocked_~retValue_acc~6 := 0;isBlocked_#res := isBlocked_~retValue_acc~6; 303330#L1035 cleanup_#t~ret112 := isBlocked_#res;cleanup_~tmp___0~8 := cleanup_#t~ret112;havoc cleanup_#t~ret112; 303329#L2594 assume 1 != cleanup_~tmp___0~8; 303327#L2594-1 havoc isIdle_#res;havoc isIdle_#t~ret19, isIdle_~retValue_acc~13, isIdle_~tmp~4;havoc isIdle_~retValue_acc~13;havoc isIdle_~tmp~4;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret14, anyStopRequested_#t~ret15, anyStopRequested_#t~ret16, anyStopRequested_#t~ret17, anyStopRequested_#t~ret18, anyStopRequested_~retValue_acc~12, anyStopRequested_~tmp~3, anyStopRequested_~tmp___0~2, anyStopRequested_~tmp___1~2, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~12;havoc anyStopRequested_~tmp~3;havoc anyStopRequested_~tmp___0~2;havoc anyStopRequested_~tmp___1~2;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 303321#L254-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 303315#L281-84 anyStopRequested_#t~ret14 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret14;havoc anyStopRequested_#t~ret14; 303297#L1292 assume !(0 != anyStopRequested_~tmp___3~0); 303299#L1296 assume 0 != ~floorButtons_0~0;anyStopRequested_~retValue_acc~12 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~12; 303274#L1356 isIdle_#t~ret19 := anyStopRequested_#res;isIdle_~tmp~4 := isIdle_#t~ret19;havoc isIdle_#t~ret19;isIdle_~retValue_acc~13 := (if 0 == isIdle_~tmp~4 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~13; 303275#L1369 cleanup_#t~ret113 := isIdle_#res;cleanup_~tmp~17 := cleanup_#t~ret113;havoc cleanup_#t~ret113; 303270#L2606 assume !(0 != cleanup_~tmp~17);havoc timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_#t~ret53, timeShift_#t~ret54, timeShift_#t~ret55, timeShift_#t~ret56, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 303271#L1184-4 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 303266#L1236-12 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 303267#L2814-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 308190#L2876-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 303259#L2886-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 303258#L2897-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 303257#L2908-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 303222#L2919-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 303219#L2920-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret32, stopRequestedAtCurrentFloor_#t~ret33, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 303217#L254-89 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 303216#L281-89 stopRequestedAtCurrentFloor_#t~ret32 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret32;havoc stopRequestedAtCurrentFloor_#t~ret32; 303214#L1797-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 303211#L1201-54 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 303212#L1222-54 stopRequestedAtCurrentFloor_#t~ret33 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret33;havoc stopRequestedAtCurrentFloor_#t~ret33; 305233#L1804-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 305232#L1809-4 timeShift_#t~ret46 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 305225#L1948-4 assume !(0 != timeShift_~tmp___9~2); 299766#L2039-12 assume 1 == ~doorState~0;~doorState~0 := 0; 299767#L2039-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_#t~ret24, stopRequestedInDirection_#t~ret25, stopRequestedInDirection_#t~ret26, stopRequestedInDirection_#t~ret27, stopRequestedInDirection_#t~ret28, stopRequestedInDirection_#t~ret29, stopRequestedInDirection_#t~ret30, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 300097#L1388-8 assume !(1 == stopRequestedInDirection_~dir); 300098#L1557-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 319555#L1710-8 timeShift_#t~ret53 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret53;havoc timeShift_#t~ret53; 319553#L2047-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret31, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 319554#L1764-12 assume !(1 == ~currentHeading~0); 319731#L1774-36 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 297918#L1774-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 303359#L1780-29 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 303349#L2945-4 assume !(-1 == ~expectedDirection~0); 303342#L2957-4 assume !(1 == ~expectedDirection~0); 303336#L2958-4 cleanup_~i~3 := 1 + cleanup_~i~3; 303335#L2586-2 [2021-11-02 22:08:58,764 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-02 22:08:58,764 INFO L85 PathProgramCache]: Analyzing trace with hash -350699030, now seen corresponding path program 1 times [2021-11-02 22:08:58,764 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-02 22:08:58,764 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [331283620] [2021-11-02 22:08:58,765 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-02 22:08:58,765 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-02 22:08:58,796 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-02 22:08:58,846 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-02 22:08:58,847 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-02 22:08:58,847 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [331283620] [2021-11-02 22:08:58,847 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [331283620] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-02 22:08:58,847 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-02 22:08:58,848 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-11-02 22:08:58,848 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1022338132] [2021-11-02 22:08:58,848 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-11-02 22:08:58,849 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-02 22:08:58,849 INFO L85 PathProgramCache]: Analyzing trace with hash -2146990963, now seen corresponding path program 1 times [2021-11-02 22:08:58,849 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-02 22:08:58,849 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [462038530] [2021-11-02 22:08:58,849 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-02 22:08:58,850 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-02 22:08:58,860 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-02 22:08:58,890 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-02 22:08:58,891 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-02 22:08:58,891 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [462038530] [2021-11-02 22:08:58,891 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [462038530] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-02 22:08:58,891 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-02 22:08:58,891 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-11-02 22:08:58,892 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1982122449] [2021-11-02 22:08:58,892 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-11-02 22:08:58,892 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-02 22:08:58,893 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-11-02 22:08:58,893 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-11-02 22:08:58,893 INFO L87 Difference]: Start difference. First operand 25963 states and 48531 transitions. cyclomatic complexity: 22569 Second operand has 5 states, 5 states have (on average 8.6) internal successors, (43), 5 states have internal predecessors, (43), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:09:01,913 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-02 22:09:01,913 INFO L93 Difference]: Finished difference Result 126963 states and 239536 transitions. [2021-11-02 22:09:01,914 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2021-11-02 22:09:01,914 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 126963 states and 239536 transitions. [2021-11-02 22:09:02,747 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 32106 [2021-11-02 22:09:03,525 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 126963 states to 126963 states and 239536 transitions. [2021-11-02 22:09:03,525 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 126963 [2021-11-02 22:09:03,624 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 126963 [2021-11-02 22:09:03,624 INFO L73 IsDeterministic]: Start isDeterministic. Operand 126963 states and 239536 transitions. [2021-11-02 22:09:03,698 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-11-02 22:09:03,698 INFO L681 BuchiCegarLoop]: Abstraction has 126963 states and 239536 transitions. [2021-11-02 22:09:03,789 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 126963 states and 239536 transitions. [2021-11-02 22:09:04,792 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 126963 to 50691. [2021-11-02 22:09:04,833 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 50691 states, 50691 states have (on average 1.8702136473930284) internal successors, (94803), 50690 states have internal predecessors, (94803), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:09:04,965 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 50691 states to 50691 states and 94803 transitions. [2021-11-02 22:09:04,965 INFO L704 BuchiCegarLoop]: Abstraction has 50691 states and 94803 transitions. [2021-11-02 22:09:04,965 INFO L587 BuchiCegarLoop]: Abstraction has 50691 states and 94803 transitions. [2021-11-02 22:09:04,965 INFO L425 BuchiCegarLoop]: ======== Iteration 8============ [2021-11-02 22:09:04,965 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 50691 states and 94803 transitions. [2021-11-02 22:09:05,120 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 11980 [2021-11-02 22:09:05,120 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-11-02 22:09:05,120 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-11-02 22:09:05,123 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-02 22:09:05,123 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-02 22:09:05,123 INFO L791 eck$LassoCheckResult]: Stem: 452226#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(2);call write~init~int(48, #t~string4.base, #t~string4.offset, 1);call write~init~int(0, #t~string4.base, 1 + #t~string4.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(31);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(12);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(10);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string59.base, #t~string59.offset, 1);call write~init~int(95, #t~string59.base, 1 + #t~string59.offset, 1);call write~init~int(93, #t~string59.base, 2 + #t~string59.offset, 1);call write~init~int(0, #t~string59.base, 3 + #t~string59.offset, 1);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string61.base, #t~string61.offset, 1);call write~init~int(93, #t~string61.base, 1 + #t~string61.offset, 1);call write~init~int(32, #t~string61.base, 2 + #t~string61.offset, 1);call write~init~int(0, #t~string61.base, 3 + #t~string61.offset, 1);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string63.base, #t~string63.offset, 1);call write~init~int(97, #t~string63.base, 1 + #t~string63.offset, 1);call write~init~int(116, #t~string63.base, 2 + #t~string63.offset, 1);call write~init~int(32, #t~string63.base, 3 + #t~string63.offset, 1);call write~init~int(0, #t~string63.base, 4 + #t~string63.offset, 1);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string65.base, #t~string65.offset, 1);call write~init~int(105, #t~string65.base, 1 + #t~string65.offset, 1);call write~init~int(0, #t~string65.base, 2 + #t~string65.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(10);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string69.base, #t~string69.offset, 1);call write~init~int(112, #t~string69.base, 1 + #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 2 + #t~string69.offset, 1);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string71.base, #t~string71.offset, 1);call write~init~int(111, #t~string71.base, 1 + #t~string71.offset, 1);call write~init~int(119, #t~string71.base, 2 + #t~string71.offset, 1);call write~init~int(110, #t~string71.base, 3 + #t~string71.offset, 1);call write~init~int(0, #t~string71.base, 4 + #t~string71.offset, 1);call #t~string73.base, #t~string73.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string73.base, #t~string73.offset, 1);call write~init~int(73, #t~string73.base, 1 + #t~string73.offset, 1);call write~init~int(76, #t~string73.base, 2 + #t~string73.offset, 1);call write~init~int(95, #t~string73.base, 3 + #t~string73.offset, 1);call write~init~int(112, #t~string73.base, 4 + #t~string73.offset, 1);call write~init~int(58, #t~string73.base, 5 + #t~string73.offset, 1);call write~init~int(0, #t~string73.base, 6 + #t~string73.offset, 1);call #t~string75.base, #t~string75.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string75.base, #t~string75.offset, 1);call write~init~int(37, #t~string75.base, 1 + #t~string75.offset, 1);call write~init~int(105, #t~string75.base, 2 + #t~string75.offset, 1);call write~init~int(0, #t~string75.base, 3 + #t~string75.offset, 1);call #t~string77.base, #t~string77.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string77.base, #t~string77.offset, 1);call write~init~int(37, #t~string77.base, 1 + #t~string77.offset, 1);call write~init~int(105, #t~string77.base, 2 + #t~string77.offset, 1);call write~init~int(0, #t~string77.base, 3 + #t~string77.offset, 1);call #t~string79.base, #t~string79.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string79.base, #t~string79.offset, 1);call write~init~int(37, #t~string79.base, 1 + #t~string79.offset, 1);call write~init~int(105, #t~string79.base, 2 + #t~string79.offset, 1);call write~init~int(0, #t~string79.base, 3 + #t~string79.offset, 1);call #t~string81.base, #t~string81.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string81.base, #t~string81.offset, 1);call write~init~int(37, #t~string81.base, 1 + #t~string81.offset, 1);call write~init~int(105, #t~string81.base, 2 + #t~string81.offset, 1);call write~init~int(0, #t~string81.base, 3 + #t~string81.offset, 1);call #t~string83.base, #t~string83.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string83.base, #t~string83.offset, 1);call write~init~int(37, #t~string83.base, 1 + #t~string83.offset, 1);call write~init~int(105, #t~string83.base, 2 + #t~string83.offset, 1);call write~init~int(0, #t~string83.base, 3 + #t~string83.offset, 1);call #t~string85.base, #t~string85.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string85.base, #t~string85.offset, 1);call write~init~int(70, #t~string85.base, 1 + #t~string85.offset, 1);call write~init~int(95, #t~string85.base, 2 + #t~string85.offset, 1);call write~init~int(112, #t~string85.base, 3 + #t~string85.offset, 1);call write~init~int(58, #t~string85.base, 4 + #t~string85.offset, 1);call write~init~int(0, #t~string85.base, 5 + #t~string85.offset, 1);call #t~string88.base, #t~string88.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string88.base, #t~string88.offset, 1);call write~init~int(37, #t~string88.base, 1 + #t~string88.offset, 1);call write~init~int(105, #t~string88.base, 2 + #t~string88.offset, 1);call write~init~int(0, #t~string88.base, 3 + #t~string88.offset, 1);call #t~string91.base, #t~string91.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string91.base, #t~string91.offset, 1);call write~init~int(37, #t~string91.base, 1 + #t~string91.offset, 1);call write~init~int(105, #t~string91.base, 2 + #t~string91.offset, 1);call write~init~int(0, #t~string91.base, 3 + #t~string91.offset, 1);call #t~string94.base, #t~string94.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string94.base, #t~string94.offset, 1);call write~init~int(37, #t~string94.base, 1 + #t~string94.offset, 1);call write~init~int(105, #t~string94.base, 2 + #t~string94.offset, 1);call write~init~int(0, #t~string94.base, 3 + #t~string94.offset, 1);call #t~string97.base, #t~string97.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string97.base, #t~string97.offset, 1);call write~init~int(37, #t~string97.base, 1 + #t~string97.offset, 1);call write~init~int(105, #t~string97.base, 2 + #t~string97.offset, 1);call write~init~int(0, #t~string97.base, 3 + #t~string97.offset, 1);call #t~string100.base, #t~string100.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string100.base, #t~string100.offset, 1);call write~init~int(37, #t~string100.base, 1 + #t~string100.offset, 1);call write~init~int(105, #t~string100.base, 2 + #t~string100.offset, 1);call write~init~int(0, #t~string100.base, 3 + #t~string100.offset, 1);call #t~string102.base, #t~string102.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string102.base, #t~string102.offset, 1);call write~init~int(0, #t~string102.base, 1 + #t~string102.offset, 1);call #t~string151.base, #t~string151.offset := #Ultimate.allocOnStack(30);call #t~string152.base, #t~string152.offset := #Ultimate.allocOnStack(9);call #t~string153.base, #t~string153.offset := #Ultimate.allocOnStack(21);call #t~string154.base, #t~string154.offset := #Ultimate.allocOnStack(30);call #t~string155.base, #t~string155.offset := #Ultimate.allocOnStack(9);call #t~string156.base, #t~string156.offset := #Ultimate.allocOnStack(21);call #t~string160.base, #t~string160.offset := #Ultimate.allocOnStack(30);call #t~string161.base, #t~string161.offset := #Ultimate.allocOnStack(9);call #t~string162.base, #t~string162.offset := #Ultimate.allocOnStack(25);call #t~string163.base, #t~string163.offset := #Ultimate.allocOnStack(30);call #t~string164.base, #t~string164.offset := #Ultimate.allocOnStack(9);call #t~string165.base, #t~string165.offset := #Ultimate.allocOnStack(25);~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 452227#L-1 havoc main_#res;havoc main_#t~ret118, main_~retValue_acc~22, main_~tmp~19;havoc main_~retValue_acc~22;havoc main_~tmp~19; 448968#L2430 havoc valid_product_#res;havoc valid_product_~retValue_acc~20;havoc valid_product_~retValue_acc~20;valid_product_~retValue_acc~20 := 1;valid_product_#res := valid_product_~retValue_acc~20; 448969#L2438 main_#t~ret118 := valid_product_#res;main_~tmp~19 := main_#t~ret118;havoc main_#t~ret118; 448554#L2777 assume 0 != main_~tmp~19; 448555#L2754 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 449808#L247 havoc bobCall_#t~ret106, bobCall_~tmp~11;havoc bobCall_~tmp~11;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 449809#L878 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~4 := 4;getOrigin_#res := getOrigin_~retValue_acc~4; 447937#L903 bobCall_#t~ret106 := getOrigin_#res;bobCall_~tmp~11 := bobCall_#t~ret106;havoc bobCall_#t~ret106;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 451870#L525 assume 0 == initPersonOnFloor_~floor; 452915#L526 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 446722#L633-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 448680#L317 assume !(0 == callOnFloor_~floorID); 448682#L320 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 449347#L329-2 havoc timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_#t~ret53, timeShift_#t~ret54, timeShift_#t~ret55, timeShift_#t~ret56, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 454012#L1184 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 454011#L1236 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 454009#L2814 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 454010#L2815 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 454020#L1201 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 454043#L1222 __utac_acc__Specification3_spec__1_#t~ret121 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret121;havoc __utac_acc__Specification3_spec__1_#t~ret121; 453985#L2819 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 453979#L2920 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret32, stopRequestedAtCurrentFloor_#t~ret33, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 453978#L254 assume !(0 == isFloorCalling_~floorID); 453977#L258 assume !(1 == isFloorCalling_~floorID); 453974#L262 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 453973#L281 stopRequestedAtCurrentFloor_#t~ret32 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret32;havoc stopRequestedAtCurrentFloor_#t~ret32; 453972#L1797 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 453971#L1201-10 assume !(0 == buttonForFloorIsPressed_~floorID); 452822#L1205-10 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 449889#L1222-10 stopRequestedAtCurrentFloor_#t~ret33 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret33;havoc stopRequestedAtCurrentFloor_#t~ret33; 447639#L1804 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 447641#L1809 timeShift_#t~ret46 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 453336#L1948 assume !(0 != timeShift_~tmp___9~2); 451785#L2039 assume !(1 == ~doorState~0); 451786#L2039-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_#t~ret24, stopRequestedInDirection_#t~ret25, stopRequestedInDirection_#t~ret26, stopRequestedInDirection_#t~ret27, stopRequestedInDirection_#t~ret28, stopRequestedInDirection_#t~ret29, stopRequestedInDirection_#t~ret30, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 450253#L1388 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 448254#L828 stopRequestedInDirection_#t~ret20 := isTopFloor_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 448255#L1392 assume 0 != stopRequestedInDirection_~tmp~5;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 453788#L1710 timeShift_#t~ret53 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret53;havoc timeShift_#t~ret53; 453783#L2047 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret31, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 453778#L1764 assume !(1 == ~currentHeading~0); 453772#L1774 assume !(0 == ~currentFloorID~0); 453768#L1774-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 453767#L1780-5 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 453765#L2945 assume !(-1 == ~expectedDirection~0); 453761#L2957 assume !(1 == ~expectedDirection~0); 453760#L2958 havoc timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_#t~ret53, timeShift_#t~ret54, timeShift_#t~ret55, timeShift_#t~ret56, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 453759#L1184-1 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 453758#L1236-3 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 453755#L2814-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 453749#L2876-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 453743#L2886-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 453728#L2897-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 453719#L2908-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 453711#L2919-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 453708#L2920-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret32, stopRequestedAtCurrentFloor_#t~ret33, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 453706#L254-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 453705#L281-21 stopRequestedAtCurrentFloor_#t~ret32 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret32;havoc stopRequestedAtCurrentFloor_#t~ret32; 453704#L1797-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 453702#L1201-21 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 453698#L1222-21 stopRequestedAtCurrentFloor_#t~ret33 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret33;havoc stopRequestedAtCurrentFloor_#t~ret33; 453696#L1804-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 453695#L1809-1 timeShift_#t~ret46 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 453693#L1948-1 assume !(0 != timeShift_~tmp___9~2); 453692#L2039-3 assume !(1 == ~doorState~0); 453691#L2039-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_#t~ret24, stopRequestedInDirection_#t~ret25, stopRequestedInDirection_#t~ret26, stopRequestedInDirection_#t~ret27, stopRequestedInDirection_#t~ret28, stopRequestedInDirection_#t~ret29, stopRequestedInDirection_#t~ret30, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 453689#L1388-2 assume !(1 == stopRequestedInDirection_~dir); 453661#L1557-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 453663#L1710-2 timeShift_#t~ret53 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret53;havoc timeShift_#t~ret53; 454803#L2047-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret31, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 454804#L1764-3 assume !(1 == ~currentHeading~0); 455901#L1774-9 assume !(0 == ~currentFloorID~0); 455890#L1774-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 455889#L1780-11 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 464510#L2945-1 assume !(-1 == ~expectedDirection~0); 464507#L2957-1 assume !(1 == ~expectedDirection~0); 464506#L2958-1 havoc timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_#t~ret53, timeShift_#t~ret54, timeShift_#t~ret55, timeShift_#t~ret56, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 464505#L1184-2 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 464504#L1236-6 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 464502#L2814-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 464501#L2876-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 455652#L2886-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 455650#L2897-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 455648#L2908-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 455612#L2919-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 455541#L2920-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret32, stopRequestedAtCurrentFloor_#t~ret33, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 455505#L254-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 455504#L281-42 stopRequestedAtCurrentFloor_#t~ret32 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret32;havoc stopRequestedAtCurrentFloor_#t~ret32; 455496#L1797-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 455494#L1201-32 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 455490#L1222-32 stopRequestedAtCurrentFloor_#t~ret33 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret33;havoc stopRequestedAtCurrentFloor_#t~ret33; 455488#L1804-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 455487#L1809-2 timeShift_#t~ret46 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 455485#L1948-2 assume !(0 != timeShift_~tmp___9~2); 455484#L2039-6 assume !(1 == ~doorState~0); 455483#L2039-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_#t~ret24, stopRequestedInDirection_#t~ret25, stopRequestedInDirection_#t~ret26, stopRequestedInDirection_#t~ret27, stopRequestedInDirection_#t~ret28, stopRequestedInDirection_#t~ret29, stopRequestedInDirection_#t~ret30, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 455481#L1388-4 assume !(1 == stopRequestedInDirection_~dir); 455471#L1557-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 455445#L1710-4 timeShift_#t~ret53 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret53;havoc timeShift_#t~ret53; 455438#L2047-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret31, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 453067#L1764-6 assume !(1 == ~currentHeading~0); 453069#L1774-18 assume !(0 == ~currentFloorID~0); 462527#L1774-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 462525#L1780-17 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 462522#L2945-2 assume !(-1 == ~expectedDirection~0); 462519#L2957-2 assume !(1 == ~expectedDirection~0); 462518#L2958-2 havoc bobCall_#t~ret106, bobCall_~tmp~11;havoc bobCall_~tmp~11;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 462516#L878-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~4 := 4;getOrigin_#res := getOrigin_~retValue_acc~4; 462511#L903-1 bobCall_#t~ret106 := getOrigin_#res;bobCall_~tmp~11 := bobCall_#t~ret106;havoc bobCall_#t~ret106;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 462510#L525-1 assume 0 == initPersonOnFloor_~floor; 462492#L526-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 462475#L633-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 462473#L317-2 assume !(0 == callOnFloor_~floorID); 462470#L320-2 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 462468#L329-5 havoc cleanup_#t~ret112, cleanup_#t~ret113, cleanup_~i~3, cleanup_~tmp~17, cleanup_~tmp___0~8, cleanup_~__cil_tmp4~0;havoc cleanup_~i~3;havoc cleanup_~tmp~17;havoc cleanup_~tmp___0~8;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_#t~ret53, timeShift_#t~ret54, timeShift_#t~ret55, timeShift_#t~ret56, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 462467#L1184-3 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 462466#L1236-9 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 462464#L2814-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 462463#L2876-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 454716#L2886-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 454714#L2897-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 454712#L2908-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 454679#L2919-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 454562#L2920-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret32, stopRequestedAtCurrentFloor_#t~ret33, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 454559#L254-63 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 454516#L281-63 stopRequestedAtCurrentFloor_#t~ret32 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret32;havoc stopRequestedAtCurrentFloor_#t~ret32; 454513#L1797-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 454510#L1201-43 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 454512#L1222-43 stopRequestedAtCurrentFloor_#t~ret33 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret33;havoc stopRequestedAtCurrentFloor_#t~ret33; 455230#L1804-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 455229#L1809-3 timeShift_#t~ret46 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 455228#L1948-3 assume !(0 != timeShift_~tmp___9~2); 455227#L2039-9 assume !(1 == ~doorState~0); 455226#L2039-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_#t~ret24, stopRequestedInDirection_#t~ret25, stopRequestedInDirection_#t~ret26, stopRequestedInDirection_#t~ret27, stopRequestedInDirection_#t~ret28, stopRequestedInDirection_#t~ret29, stopRequestedInDirection_#t~ret30, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 454464#L1388-6 assume !(1 == stopRequestedInDirection_~dir); 454465#L1557-6 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 454339#L1710-6 timeShift_#t~ret53 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret53;havoc timeShift_#t~ret53; 454340#L2047-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret31, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 455199#L1764-9 assume !(1 == ~currentHeading~0); 460942#L1774-27 assume !(0 == ~currentFloorID~0); 461853#L1774-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 461847#L1780-23 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 461844#L2945-3 assume !(-1 == ~expectedDirection~0); 461838#L2957-3 assume !(1 == ~expectedDirection~0); 461833#L2958-3 cleanup_~i~3 := 0; 461831#L2586-2 [2021-11-02 22:09:05,123 INFO L793 eck$LassoCheckResult]: Loop: 461831#L2586-2 assume !false; 461830#L2587 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 461829#L2590 assume cleanup_~i~3 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~6;havoc isBlocked_~retValue_acc~6;isBlocked_~retValue_acc~6 := 0;isBlocked_#res := isBlocked_~retValue_acc~6; 461828#L1035 cleanup_#t~ret112 := isBlocked_#res;cleanup_~tmp___0~8 := cleanup_#t~ret112;havoc cleanup_#t~ret112; 461825#L2594 assume 1 != cleanup_~tmp___0~8; 461822#L2594-1 havoc isIdle_#res;havoc isIdle_#t~ret19, isIdle_~retValue_acc~13, isIdle_~tmp~4;havoc isIdle_~retValue_acc~13;havoc isIdle_~tmp~4;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret14, anyStopRequested_#t~ret15, anyStopRequested_#t~ret16, anyStopRequested_#t~ret17, anyStopRequested_#t~ret18, anyStopRequested_~retValue_acc~12, anyStopRequested_~tmp~3, anyStopRequested_~tmp___0~2, anyStopRequested_~tmp___1~2, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~12;havoc anyStopRequested_~tmp~3;havoc anyStopRequested_~tmp___0~2;havoc anyStopRequested_~tmp___1~2;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 461818#L254-84 assume !(0 == isFloorCalling_~floorID); 461817#L258-84 assume !(1 == isFloorCalling_~floorID); 461803#L262-84 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 461796#L281-84 anyStopRequested_#t~ret14 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret14;havoc anyStopRequested_#t~ret14; 461786#L1292 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~12 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~12; 461781#L1356 isIdle_#t~ret19 := anyStopRequested_#res;isIdle_~tmp~4 := isIdle_#t~ret19;havoc isIdle_#t~ret19;isIdle_~retValue_acc~13 := (if 0 == isIdle_~tmp~4 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~13; 461780#L1369 cleanup_#t~ret113 := isIdle_#res;cleanup_~tmp~17 := cleanup_#t~ret113;havoc cleanup_#t~ret113; 461779#L2606 assume !(0 != cleanup_~tmp~17);havoc timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_#t~ret53, timeShift_#t~ret54, timeShift_#t~ret55, timeShift_#t~ret56, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 461778#L1184-4 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 461777#L1236-12 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 461775#L2814-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 461773#L2876-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 453593#L2886-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 453592#L2897-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 453590#L2908-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 453556#L2919-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 453552#L2920-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret32, stopRequestedAtCurrentFloor_#t~ret33, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 453549#L254-89 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 453547#L281-89 stopRequestedAtCurrentFloor_#t~ret32 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret32;havoc stopRequestedAtCurrentFloor_#t~ret32; 453542#L1797-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 453541#L1201-54 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 453536#L1222-54 stopRequestedAtCurrentFloor_#t~ret33 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret33;havoc stopRequestedAtCurrentFloor_#t~ret33; 453534#L1804-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 453530#L1809-4 timeShift_#t~ret46 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 453524#L1948-4 assume !(0 != timeShift_~tmp___9~2); 453516#L2039-12 assume 1 == ~doorState~0;~doorState~0 := 0; 453517#L2039-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_#t~ret24, stopRequestedInDirection_#t~ret25, stopRequestedInDirection_#t~ret26, stopRequestedInDirection_#t~ret27, stopRequestedInDirection_#t~ret28, stopRequestedInDirection_#t~ret29, stopRequestedInDirection_#t~ret30, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 454266#L1388-8 assume !(1 == stopRequestedInDirection_~dir); 453444#L1557-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 453440#L1710-8 timeShift_#t~ret53 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret53;havoc timeShift_#t~ret53; 453427#L2047-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret31, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 453428#L1764-12 assume !(1 == ~currentHeading~0); 461389#L1774-36 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 461850#L1774-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 461846#L1780-29 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 461841#L2945-4 assume !(-1 == ~expectedDirection~0); 461835#L2957-4 assume !(1 == ~expectedDirection~0); 461832#L2958-4 cleanup_~i~3 := 1 + cleanup_~i~3; 461831#L2586-2 [2021-11-02 22:09:05,124 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-02 22:09:05,124 INFO L85 PathProgramCache]: Analyzing trace with hash -350699030, now seen corresponding path program 2 times [2021-11-02 22:09:05,124 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-02 22:09:05,125 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1528108558] [2021-11-02 22:09:05,125 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-02 22:09:05,125 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-02 22:09:05,157 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-02 22:09:05,202 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-02 22:09:05,202 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-02 22:09:05,202 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1528108558] [2021-11-02 22:09:05,203 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1528108558] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-02 22:09:05,203 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-02 22:09:05,203 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-11-02 22:09:05,203 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1560036866] [2021-11-02 22:09:05,204 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-11-02 22:09:05,204 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-02 22:09:05,204 INFO L85 PathProgramCache]: Analyzing trace with hash -2065398881, now seen corresponding path program 1 times [2021-11-02 22:09:05,205 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-02 22:09:05,205 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [880502677] [2021-11-02 22:09:05,205 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-02 22:09:05,205 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-02 22:09:05,211 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-02 22:09:05,226 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-02 22:09:05,227 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-02 22:09:05,228 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [880502677] [2021-11-02 22:09:05,231 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [880502677] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-02 22:09:05,232 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-02 22:09:05,232 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-11-02 22:09:05,232 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1361895230] [2021-11-02 22:09:05,233 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-11-02 22:09:05,233 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-02 22:09:05,233 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-02 22:09:05,233 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-02 22:09:05,234 INFO L87 Difference]: Start difference. First operand 50691 states and 94803 transitions. cyclomatic complexity: 44113 Second operand has 3 states, 3 states have (on average 14.666666666666666) internal successors, (44), 3 states have internal predecessors, (44), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:09:06,873 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-02 22:09:06,873 INFO L93 Difference]: Finished difference Result 55243 states and 103047 transitions. [2021-11-02 22:09:06,875 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-02 22:09:06,875 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 55243 states and 103047 transitions. [2021-11-02 22:09:07,087 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 12354 [2021-11-02 22:09:07,236 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 55243 states to 55243 states and 103047 transitions. [2021-11-02 22:09:07,236 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 55243 [2021-11-02 22:09:07,272 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 55243 [2021-11-02 22:09:07,272 INFO L73 IsDeterministic]: Start isDeterministic. Operand 55243 states and 103047 transitions. [2021-11-02 22:09:07,670 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-11-02 22:09:07,670 INFO L681 BuchiCegarLoop]: Abstraction has 55243 states and 103047 transitions. [2021-11-02 22:09:07,702 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 55243 states and 103047 transitions. [2021-11-02 22:09:08,053 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 55243 to 50155. [2021-11-02 22:09:08,089 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 50155 states, 50155 states have (on average 1.870102681686771) internal successors, (93795), 50154 states have internal predecessors, (93795), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:09:08,190 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 50155 states to 50155 states and 93795 transitions. [2021-11-02 22:09:08,190 INFO L704 BuchiCegarLoop]: Abstraction has 50155 states and 93795 transitions. [2021-11-02 22:09:08,190 INFO L587 BuchiCegarLoop]: Abstraction has 50155 states and 93795 transitions. [2021-11-02 22:09:08,190 INFO L425 BuchiCegarLoop]: ======== Iteration 9============ [2021-11-02 22:09:08,191 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 50155 states and 93795 transitions. [2021-11-02 22:09:08,677 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 11684 [2021-11-02 22:09:08,677 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-11-02 22:09:08,677 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-11-02 22:09:08,680 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-02 22:09:08,680 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-02 22:09:08,681 INFO L791 eck$LassoCheckResult]: Stem: 557941#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(2);call write~init~int(48, #t~string4.base, #t~string4.offset, 1);call write~init~int(0, #t~string4.base, 1 + #t~string4.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(31);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(12);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(10);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string59.base, #t~string59.offset, 1);call write~init~int(95, #t~string59.base, 1 + #t~string59.offset, 1);call write~init~int(93, #t~string59.base, 2 + #t~string59.offset, 1);call write~init~int(0, #t~string59.base, 3 + #t~string59.offset, 1);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string61.base, #t~string61.offset, 1);call write~init~int(93, #t~string61.base, 1 + #t~string61.offset, 1);call write~init~int(32, #t~string61.base, 2 + #t~string61.offset, 1);call write~init~int(0, #t~string61.base, 3 + #t~string61.offset, 1);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string63.base, #t~string63.offset, 1);call write~init~int(97, #t~string63.base, 1 + #t~string63.offset, 1);call write~init~int(116, #t~string63.base, 2 + #t~string63.offset, 1);call write~init~int(32, #t~string63.base, 3 + #t~string63.offset, 1);call write~init~int(0, #t~string63.base, 4 + #t~string63.offset, 1);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string65.base, #t~string65.offset, 1);call write~init~int(105, #t~string65.base, 1 + #t~string65.offset, 1);call write~init~int(0, #t~string65.base, 2 + #t~string65.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(10);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string69.base, #t~string69.offset, 1);call write~init~int(112, #t~string69.base, 1 + #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 2 + #t~string69.offset, 1);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string71.base, #t~string71.offset, 1);call write~init~int(111, #t~string71.base, 1 + #t~string71.offset, 1);call write~init~int(119, #t~string71.base, 2 + #t~string71.offset, 1);call write~init~int(110, #t~string71.base, 3 + #t~string71.offset, 1);call write~init~int(0, #t~string71.base, 4 + #t~string71.offset, 1);call #t~string73.base, #t~string73.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string73.base, #t~string73.offset, 1);call write~init~int(73, #t~string73.base, 1 + #t~string73.offset, 1);call write~init~int(76, #t~string73.base, 2 + #t~string73.offset, 1);call write~init~int(95, #t~string73.base, 3 + #t~string73.offset, 1);call write~init~int(112, #t~string73.base, 4 + #t~string73.offset, 1);call write~init~int(58, #t~string73.base, 5 + #t~string73.offset, 1);call write~init~int(0, #t~string73.base, 6 + #t~string73.offset, 1);call #t~string75.base, #t~string75.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string75.base, #t~string75.offset, 1);call write~init~int(37, #t~string75.base, 1 + #t~string75.offset, 1);call write~init~int(105, #t~string75.base, 2 + #t~string75.offset, 1);call write~init~int(0, #t~string75.base, 3 + #t~string75.offset, 1);call #t~string77.base, #t~string77.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string77.base, #t~string77.offset, 1);call write~init~int(37, #t~string77.base, 1 + #t~string77.offset, 1);call write~init~int(105, #t~string77.base, 2 + #t~string77.offset, 1);call write~init~int(0, #t~string77.base, 3 + #t~string77.offset, 1);call #t~string79.base, #t~string79.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string79.base, #t~string79.offset, 1);call write~init~int(37, #t~string79.base, 1 + #t~string79.offset, 1);call write~init~int(105, #t~string79.base, 2 + #t~string79.offset, 1);call write~init~int(0, #t~string79.base, 3 + #t~string79.offset, 1);call #t~string81.base, #t~string81.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string81.base, #t~string81.offset, 1);call write~init~int(37, #t~string81.base, 1 + #t~string81.offset, 1);call write~init~int(105, #t~string81.base, 2 + #t~string81.offset, 1);call write~init~int(0, #t~string81.base, 3 + #t~string81.offset, 1);call #t~string83.base, #t~string83.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string83.base, #t~string83.offset, 1);call write~init~int(37, #t~string83.base, 1 + #t~string83.offset, 1);call write~init~int(105, #t~string83.base, 2 + #t~string83.offset, 1);call write~init~int(0, #t~string83.base, 3 + #t~string83.offset, 1);call #t~string85.base, #t~string85.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string85.base, #t~string85.offset, 1);call write~init~int(70, #t~string85.base, 1 + #t~string85.offset, 1);call write~init~int(95, #t~string85.base, 2 + #t~string85.offset, 1);call write~init~int(112, #t~string85.base, 3 + #t~string85.offset, 1);call write~init~int(58, #t~string85.base, 4 + #t~string85.offset, 1);call write~init~int(0, #t~string85.base, 5 + #t~string85.offset, 1);call #t~string88.base, #t~string88.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string88.base, #t~string88.offset, 1);call write~init~int(37, #t~string88.base, 1 + #t~string88.offset, 1);call write~init~int(105, #t~string88.base, 2 + #t~string88.offset, 1);call write~init~int(0, #t~string88.base, 3 + #t~string88.offset, 1);call #t~string91.base, #t~string91.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string91.base, #t~string91.offset, 1);call write~init~int(37, #t~string91.base, 1 + #t~string91.offset, 1);call write~init~int(105, #t~string91.base, 2 + #t~string91.offset, 1);call write~init~int(0, #t~string91.base, 3 + #t~string91.offset, 1);call #t~string94.base, #t~string94.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string94.base, #t~string94.offset, 1);call write~init~int(37, #t~string94.base, 1 + #t~string94.offset, 1);call write~init~int(105, #t~string94.base, 2 + #t~string94.offset, 1);call write~init~int(0, #t~string94.base, 3 + #t~string94.offset, 1);call #t~string97.base, #t~string97.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string97.base, #t~string97.offset, 1);call write~init~int(37, #t~string97.base, 1 + #t~string97.offset, 1);call write~init~int(105, #t~string97.base, 2 + #t~string97.offset, 1);call write~init~int(0, #t~string97.base, 3 + #t~string97.offset, 1);call #t~string100.base, #t~string100.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string100.base, #t~string100.offset, 1);call write~init~int(37, #t~string100.base, 1 + #t~string100.offset, 1);call write~init~int(105, #t~string100.base, 2 + #t~string100.offset, 1);call write~init~int(0, #t~string100.base, 3 + #t~string100.offset, 1);call #t~string102.base, #t~string102.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string102.base, #t~string102.offset, 1);call write~init~int(0, #t~string102.base, 1 + #t~string102.offset, 1);call #t~string151.base, #t~string151.offset := #Ultimate.allocOnStack(30);call #t~string152.base, #t~string152.offset := #Ultimate.allocOnStack(9);call #t~string153.base, #t~string153.offset := #Ultimate.allocOnStack(21);call #t~string154.base, #t~string154.offset := #Ultimate.allocOnStack(30);call #t~string155.base, #t~string155.offset := #Ultimate.allocOnStack(9);call #t~string156.base, #t~string156.offset := #Ultimate.allocOnStack(21);call #t~string160.base, #t~string160.offset := #Ultimate.allocOnStack(30);call #t~string161.base, #t~string161.offset := #Ultimate.allocOnStack(9);call #t~string162.base, #t~string162.offset := #Ultimate.allocOnStack(25);call #t~string163.base, #t~string163.offset := #Ultimate.allocOnStack(30);call #t~string164.base, #t~string164.offset := #Ultimate.allocOnStack(9);call #t~string165.base, #t~string165.offset := #Ultimate.allocOnStack(25);~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 557942#L-1 havoc main_#res;havoc main_#t~ret118, main_~retValue_acc~22, main_~tmp~19;havoc main_~retValue_acc~22;havoc main_~tmp~19; 554863#L2430 havoc valid_product_#res;havoc valid_product_~retValue_acc~20;havoc valid_product_~retValue_acc~20;valid_product_~retValue_acc~20 := 1;valid_product_#res := valid_product_~retValue_acc~20; 554864#L2438 main_#t~ret118 := valid_product_#res;main_~tmp~19 := main_#t~ret118;havoc main_#t~ret118; 554460#L2777 assume 0 != main_~tmp~19; 554461#L2754 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 555668#L247 havoc bobCall_#t~ret106, bobCall_~tmp~11;havoc bobCall_~tmp~11;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 555669#L878 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~4 := 4;getOrigin_#res := getOrigin_~retValue_acc~4; 553859#L903 bobCall_#t~ret106 := getOrigin_#res;bobCall_~tmp~11 := bobCall_#t~ret106;havoc bobCall_#t~ret106;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 557607#L525 assume 0 == initPersonOnFloor_~floor; 558567#L526 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 552664#L633-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 554580#L317 assume !(0 == callOnFloor_~floorID); 554582#L320 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 555237#L329-2 havoc timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_#t~ret53, timeShift_#t~ret54, timeShift_#t~ret55, timeShift_#t~ret56, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 554724#L1184 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 554725#L1236 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 557627#L2814 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 555372#L2815 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 554091#L1201 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 554092#L1222 __utac_acc__Specification3_spec__1_#t~ret121 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret121;havoc __utac_acc__Specification3_spec__1_#t~ret121; 553785#L2819 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 553786#L2920 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret32, stopRequestedAtCurrentFloor_#t~ret33, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 558228#L254 assume !(0 == isFloorCalling_~floorID); 558229#L258 assume !(1 == isFloorCalling_~floorID); 557549#L262 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 553492#L281 stopRequestedAtCurrentFloor_#t~ret32 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret32;havoc stopRequestedAtCurrentFloor_#t~ret32; 552958#L1797 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 552960#L1201-10 assume !(0 == buttonForFloorIsPressed_~floorID); 558483#L1205-10 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 556370#L1222-10 stopRequestedAtCurrentFloor_#t~ret33 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret33;havoc stopRequestedAtCurrentFloor_#t~ret33; 553566#L1804 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 553567#L1809 timeShift_#t~ret46 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 558900#L1948 assume !(0 != timeShift_~tmp___9~2); 558901#L2039 assume !(1 == ~doorState~0); 558887#L2039-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_#t~ret24, stopRequestedInDirection_#t~ret25, stopRequestedInDirection_#t~ret26, stopRequestedInDirection_#t~ret27, stopRequestedInDirection_#t~ret28, stopRequestedInDirection_#t~ret29, stopRequestedInDirection_#t~ret30, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 558888#L1388 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 554173#L828 stopRequestedInDirection_#t~ret20 := isTopFloor_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 554174#L1392 assume 0 != stopRequestedInDirection_~tmp~5;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 553049#L1710 timeShift_#t~ret53 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret53;havoc timeShift_#t~ret53; 601009#L2047 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret31, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 601010#L1764 assume !(1 == ~currentHeading~0); 601061#L1774 assume !(0 == ~currentFloorID~0); 600924#L1774-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 600923#L1780-5 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 600921#L2945 assume !(-1 == ~expectedDirection~0); 600917#L2957 assume !(1 == ~expectedDirection~0); 600916#L2958 havoc timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_#t~ret53, timeShift_#t~ret54, timeShift_#t~ret55, timeShift_#t~ret56, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 600915#L1184-1 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 600913#L1236-3 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 600911#L2814-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 600912#L2876-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 601065#L2886-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 601064#L2897-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 601062#L2908-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 600879#L2919-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 600874#L2920-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret32, stopRequestedAtCurrentFloor_#t~ret33, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 600871#L254-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 600870#L281-21 stopRequestedAtCurrentFloor_#t~ret32 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret32;havoc stopRequestedAtCurrentFloor_#t~ret32; 600869#L1797-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 600863#L1201-21 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 600857#L1222-21 stopRequestedAtCurrentFloor_#t~ret33 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret33;havoc stopRequestedAtCurrentFloor_#t~ret33; 600853#L1804-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 600852#L1809-1 timeShift_#t~ret46 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 600847#L1948-1 assume !(0 != timeShift_~tmp___9~2); 600848#L2039-3 assume !(1 == ~doorState~0); 600868#L2039-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_#t~ret24, stopRequestedInDirection_#t~ret25, stopRequestedInDirection_#t~ret26, stopRequestedInDirection_#t~ret27, stopRequestedInDirection_#t~ret28, stopRequestedInDirection_#t~ret29, stopRequestedInDirection_#t~ret30, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 600866#L1388-2 assume !(1 == stopRequestedInDirection_~dir); 600867#L1557-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 600859#L1710-2 timeShift_#t~ret53 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret53;havoc timeShift_#t~ret53; 601205#L2047-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret31, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 601197#L1764-3 assume !(1 == ~currentHeading~0); 601184#L1774-9 assume !(0 == ~currentFloorID~0); 588911#L1774-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 588908#L1780-11 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 588905#L2945-1 assume !(-1 == ~expectedDirection~0); 588896#L2957-1 assume !(1 == ~expectedDirection~0); 588894#L2958-1 havoc timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_#t~ret53, timeShift_#t~ret54, timeShift_#t~ret55, timeShift_#t~ret56, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 588892#L1184-2 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 588890#L1236-6 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 588887#L2814-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 588884#L2876-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 588881#L2886-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 588876#L2897-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 588874#L2908-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 588851#L2919-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 588848#L2920-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret32, stopRequestedAtCurrentFloor_#t~ret33, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 588847#L254-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 588846#L281-42 stopRequestedAtCurrentFloor_#t~ret32 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret32;havoc stopRequestedAtCurrentFloor_#t~ret32; 588845#L1797-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 588835#L1201-32 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 588831#L1222-32 stopRequestedAtCurrentFloor_#t~ret33 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret33;havoc stopRequestedAtCurrentFloor_#t~ret33; 588830#L1804-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 588829#L1809-2 timeShift_#t~ret46 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 588828#L1948-2 assume !(0 != timeShift_~tmp___9~2); 588827#L2039-6 assume !(1 == ~doorState~0); 588826#L2039-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_#t~ret24, stopRequestedInDirection_#t~ret25, stopRequestedInDirection_#t~ret26, stopRequestedInDirection_#t~ret27, stopRequestedInDirection_#t~ret28, stopRequestedInDirection_#t~ret29, stopRequestedInDirection_#t~ret30, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 588825#L1388-4 assume !(1 == stopRequestedInDirection_~dir); 588403#L1557-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 588401#L1710-4 timeShift_#t~ret53 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret53;havoc timeShift_#t~ret53; 588399#L2047-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret31, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 588398#L1764-6 assume !(1 == ~currentHeading~0); 588390#L1774-18 assume !(0 == ~currentFloorID~0); 588384#L1774-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 588382#L1780-17 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 588379#L2945-2 assume !(-1 == ~expectedDirection~0); 588376#L2957-2 assume !(1 == ~expectedDirection~0); 588375#L2958-2 havoc bobCall_#t~ret106, bobCall_~tmp~11;havoc bobCall_~tmp~11;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 588367#L878-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~4 := 4;getOrigin_#res := getOrigin_~retValue_acc~4; 557243#L903-1 bobCall_#t~ret106 := getOrigin_#res;bobCall_~tmp~11 := bobCall_#t~ret106;havoc bobCall_#t~ret106;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 557244#L525-1 assume 0 == initPersonOnFloor_~floor; 556425#L526-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 552777#L633-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 558305#L317-2 assume !(0 == callOnFloor_~floorID); 558834#L320-2 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 588338#L329-5 havoc cleanup_#t~ret112, cleanup_#t~ret113, cleanup_~i~3, cleanup_~tmp~17, cleanup_~tmp___0~8, cleanup_~__cil_tmp4~0;havoc cleanup_~i~3;havoc cleanup_~tmp~17;havoc cleanup_~tmp___0~8;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_#t~ret53, timeShift_#t~ret54, timeShift_#t~ret55, timeShift_#t~ret56, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 588337#L1184-3 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 588336#L1236-9 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 588333#L2814-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 588332#L2876-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 588202#L2886-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 588331#L2897-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 588326#L2908-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 588322#L2919-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 585937#L2920-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret32, stopRequestedAtCurrentFloor_#t~ret33, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 585507#L254-63 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 585503#L281-63 stopRequestedAtCurrentFloor_#t~ret32 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret32;havoc stopRequestedAtCurrentFloor_#t~ret32; 585500#L1797-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 585499#L1201-43 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 585494#L1222-43 stopRequestedAtCurrentFloor_#t~ret33 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret33;havoc stopRequestedAtCurrentFloor_#t~ret33; 585492#L1804-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 585491#L1809-3 timeShift_#t~ret46 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 585486#L1948-3 assume !(0 != timeShift_~tmp___9~2); 585484#L2039-9 assume !(1 == ~doorState~0); 585483#L2039-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_#t~ret24, stopRequestedInDirection_#t~ret25, stopRequestedInDirection_#t~ret26, stopRequestedInDirection_#t~ret27, stopRequestedInDirection_#t~ret28, stopRequestedInDirection_#t~ret29, stopRequestedInDirection_#t~ret30, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 585479#L1388-6 assume !(1 == stopRequestedInDirection_~dir); 585480#L1557-6 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 585475#L1710-6 timeShift_#t~ret53 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret53;havoc timeShift_#t~ret53; 588259#L2047-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret31, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 585538#L1764-9 assume !(1 == ~currentHeading~0); 585530#L1774-27 assume !(0 == ~currentFloorID~0); 584508#L1774-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 558933#L1780-23 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 558930#L2945-3 assume !(-1 == ~expectedDirection~0); 558924#L2957-3 assume !(1 == ~expectedDirection~0); 558919#L2958-3 cleanup_~i~3 := 0; 558916#L2586-2 [2021-11-02 22:09:08,682 INFO L793 eck$LassoCheckResult]: Loop: 558916#L2586-2 assume !false; 558917#L2587 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 571510#L2590 assume cleanup_~i~3 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~6;havoc isBlocked_~retValue_acc~6;isBlocked_~retValue_acc~6 := 0;isBlocked_#res := isBlocked_~retValue_acc~6; 571486#L1035 cleanup_#t~ret112 := isBlocked_#res;cleanup_~tmp___0~8 := cleanup_#t~ret112;havoc cleanup_#t~ret112; 571482#L2594 assume 1 != cleanup_~tmp___0~8; 559605#L2594-1 havoc isIdle_#res;havoc isIdle_#t~ret19, isIdle_~retValue_acc~13, isIdle_~tmp~4;havoc isIdle_~retValue_acc~13;havoc isIdle_~tmp~4;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret14, anyStopRequested_#t~ret15, anyStopRequested_#t~ret16, anyStopRequested_#t~ret17, anyStopRequested_#t~ret18, anyStopRequested_~retValue_acc~12, anyStopRequested_~tmp~3, anyStopRequested_~tmp___0~2, anyStopRequested_~tmp___1~2, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~12;havoc anyStopRequested_~tmp~3;havoc anyStopRequested_~tmp___0~2;havoc anyStopRequested_~tmp___1~2;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 559544#L254-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 559540#L281-84 anyStopRequested_#t~ret14 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret14;havoc anyStopRequested_#t~ret14; 559538#L1292 assume !(0 != anyStopRequested_~tmp___3~0); 559536#L1296 assume !(0 != ~floorButtons_0~0);isFloorCalling_#in~floorID := 1;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 559535#L254-85 assume !(0 == isFloorCalling_~floorID); 559532#L258-85 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 559530#L281-85 anyStopRequested_#t~ret15 := isFloorCalling_#res;anyStopRequested_~tmp___2~0 := anyStopRequested_#t~ret15;havoc anyStopRequested_#t~ret15; 559494#L1303 assume 0 != anyStopRequested_~tmp___2~0;anyStopRequested_~retValue_acc~12 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~12; 559464#L1356 isIdle_#t~ret19 := anyStopRequested_#res;isIdle_~tmp~4 := isIdle_#t~ret19;havoc isIdle_#t~ret19;isIdle_~retValue_acc~13 := (if 0 == isIdle_~tmp~4 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~13; 559406#L1369 cleanup_#t~ret113 := isIdle_#res;cleanup_~tmp~17 := cleanup_#t~ret113;havoc cleanup_#t~ret113; 559407#L2606 assume !(0 != cleanup_~tmp~17);havoc timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_#t~ret53, timeShift_#t~ret54, timeShift_#t~ret55, timeShift_#t~ret56, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 559400#L1184-4 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 559401#L1236-12 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 559376#L2814-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 559377#L2876-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 559196#L2886-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 559181#L2897-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 559172#L2908-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 559164#L2919-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 559161#L2920-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret32, stopRequestedAtCurrentFloor_#t~ret33, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 559159#L254-89 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 559158#L281-89 stopRequestedAtCurrentFloor_#t~ret32 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret32;havoc stopRequestedAtCurrentFloor_#t~ret32; 559157#L1797-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 559156#L1201-54 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 559151#L1222-54 stopRequestedAtCurrentFloor_#t~ret33 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret33;havoc stopRequestedAtCurrentFloor_#t~ret33; 559149#L1804-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 559148#L1809-4 timeShift_#t~ret46 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 559146#L1948-4 assume !(0 != timeShift_~tmp___9~2); 559145#L2039-12 assume 1 == ~doorState~0;~doorState~0 := 0; 559144#L2039-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_#t~ret24, stopRequestedInDirection_#t~ret25, stopRequestedInDirection_#t~ret26, stopRequestedInDirection_#t~ret27, stopRequestedInDirection_#t~ret28, stopRequestedInDirection_#t~ret29, stopRequestedInDirection_#t~ret30, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 559141#L1388-8 assume !(1 == stopRequestedInDirection_~dir); 559142#L1557-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 558974#L1710-8 timeShift_#t~ret53 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret53;havoc timeShift_#t~ret53; 558968#L2047-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret31, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 558959#L1764-12 assume !(1 == ~currentHeading~0); 558950#L1774-36 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 558940#L1774-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 558932#L1780-29 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 558927#L2945-4 assume !(-1 == ~expectedDirection~0); 558921#L2957-4 assume !(1 == ~expectedDirection~0); 558918#L2958-4 cleanup_~i~3 := 1 + cleanup_~i~3; 558916#L2586-2 [2021-11-02 22:09:08,683 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-02 22:09:08,683 INFO L85 PathProgramCache]: Analyzing trace with hash -350699030, now seen corresponding path program 3 times [2021-11-02 22:09:08,683 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-02 22:09:08,683 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [670688924] [2021-11-02 22:09:08,684 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-02 22:09:08,684 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-02 22:09:08,712 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-02 22:09:08,757 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-02 22:09:08,758 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-02 22:09:08,758 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [670688924] [2021-11-02 22:09:08,758 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [670688924] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-02 22:09:08,758 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-02 22:09:08,758 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-11-02 22:09:08,759 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2127466650] [2021-11-02 22:09:08,759 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-11-02 22:09:08,760 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-02 22:09:08,760 INFO L85 PathProgramCache]: Analyzing trace with hash -790064123, now seen corresponding path program 1 times [2021-11-02 22:09:08,760 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-02 22:09:08,760 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [95186203] [2021-11-02 22:09:08,760 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-02 22:09:08,760 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-02 22:09:08,769 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-02 22:09:08,787 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-02 22:09:08,787 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-02 22:09:08,787 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [95186203] [2021-11-02 22:09:08,787 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [95186203] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-02 22:09:08,787 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-02 22:09:08,788 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-11-02 22:09:08,788 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [65463958] [2021-11-02 22:09:08,788 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-11-02 22:09:08,788 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-02 22:09:08,789 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-11-02 22:09:08,789 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-11-02 22:09:08,789 INFO L87 Difference]: Start difference. First operand 50155 states and 93795 transitions. cyclomatic complexity: 43641 Second operand has 4 states, 4 states have (on average 11.75) internal successors, (47), 4 states have internal predecessors, (47), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:09:09,611 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-02 22:09:09,612 INFO L93 Difference]: Finished difference Result 92453 states and 173303 transitions. [2021-11-02 22:09:09,612 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-11-02 22:09:09,612 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 92453 states and 173303 transitions. [2021-11-02 22:09:10,515 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 22314 [2021-11-02 22:09:10,802 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 92453 states to 92453 states and 173303 transitions. [2021-11-02 22:09:10,802 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 92453 [2021-11-02 22:09:10,872 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 92453 [2021-11-02 22:09:10,872 INFO L73 IsDeterministic]: Start isDeterministic. Operand 92453 states and 173303 transitions. [2021-11-02 22:09:10,919 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-11-02 22:09:10,919 INFO L681 BuchiCegarLoop]: Abstraction has 92453 states and 173303 transitions. [2021-11-02 22:09:10,972 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 92453 states and 173303 transitions. [2021-11-02 22:09:11,899 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 92453 to 50207. [2021-11-02 22:09:11,937 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 50207 states, 50207 states have (on average 1.8692015057661282) internal successors, (93847), 50206 states have internal predecessors, (93847), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:09:12,080 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 50207 states to 50207 states and 93847 transitions. [2021-11-02 22:09:12,080 INFO L704 BuchiCegarLoop]: Abstraction has 50207 states and 93847 transitions. [2021-11-02 22:09:12,080 INFO L587 BuchiCegarLoop]: Abstraction has 50207 states and 93847 transitions. [2021-11-02 22:09:12,080 INFO L425 BuchiCegarLoop]: ======== Iteration 10============ [2021-11-02 22:09:12,080 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 50207 states and 93847 transitions. [2021-11-02 22:09:12,233 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 11696 [2021-11-02 22:09:12,233 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-11-02 22:09:12,233 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-11-02 22:09:12,237 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-02 22:09:12,237 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-02 22:09:12,238 INFO L791 eck$LassoCheckResult]: Stem: 700711#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(2);call write~init~int(48, #t~string4.base, #t~string4.offset, 1);call write~init~int(0, #t~string4.base, 1 + #t~string4.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(31);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(12);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(10);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string59.base, #t~string59.offset, 1);call write~init~int(95, #t~string59.base, 1 + #t~string59.offset, 1);call write~init~int(93, #t~string59.base, 2 + #t~string59.offset, 1);call write~init~int(0, #t~string59.base, 3 + #t~string59.offset, 1);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string61.base, #t~string61.offset, 1);call write~init~int(93, #t~string61.base, 1 + #t~string61.offset, 1);call write~init~int(32, #t~string61.base, 2 + #t~string61.offset, 1);call write~init~int(0, #t~string61.base, 3 + #t~string61.offset, 1);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string63.base, #t~string63.offset, 1);call write~init~int(97, #t~string63.base, 1 + #t~string63.offset, 1);call write~init~int(116, #t~string63.base, 2 + #t~string63.offset, 1);call write~init~int(32, #t~string63.base, 3 + #t~string63.offset, 1);call write~init~int(0, #t~string63.base, 4 + #t~string63.offset, 1);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string65.base, #t~string65.offset, 1);call write~init~int(105, #t~string65.base, 1 + #t~string65.offset, 1);call write~init~int(0, #t~string65.base, 2 + #t~string65.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(10);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string69.base, #t~string69.offset, 1);call write~init~int(112, #t~string69.base, 1 + #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 2 + #t~string69.offset, 1);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string71.base, #t~string71.offset, 1);call write~init~int(111, #t~string71.base, 1 + #t~string71.offset, 1);call write~init~int(119, #t~string71.base, 2 + #t~string71.offset, 1);call write~init~int(110, #t~string71.base, 3 + #t~string71.offset, 1);call write~init~int(0, #t~string71.base, 4 + #t~string71.offset, 1);call #t~string73.base, #t~string73.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string73.base, #t~string73.offset, 1);call write~init~int(73, #t~string73.base, 1 + #t~string73.offset, 1);call write~init~int(76, #t~string73.base, 2 + #t~string73.offset, 1);call write~init~int(95, #t~string73.base, 3 + #t~string73.offset, 1);call write~init~int(112, #t~string73.base, 4 + #t~string73.offset, 1);call write~init~int(58, #t~string73.base, 5 + #t~string73.offset, 1);call write~init~int(0, #t~string73.base, 6 + #t~string73.offset, 1);call #t~string75.base, #t~string75.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string75.base, #t~string75.offset, 1);call write~init~int(37, #t~string75.base, 1 + #t~string75.offset, 1);call write~init~int(105, #t~string75.base, 2 + #t~string75.offset, 1);call write~init~int(0, #t~string75.base, 3 + #t~string75.offset, 1);call #t~string77.base, #t~string77.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string77.base, #t~string77.offset, 1);call write~init~int(37, #t~string77.base, 1 + #t~string77.offset, 1);call write~init~int(105, #t~string77.base, 2 + #t~string77.offset, 1);call write~init~int(0, #t~string77.base, 3 + #t~string77.offset, 1);call #t~string79.base, #t~string79.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string79.base, #t~string79.offset, 1);call write~init~int(37, #t~string79.base, 1 + #t~string79.offset, 1);call write~init~int(105, #t~string79.base, 2 + #t~string79.offset, 1);call write~init~int(0, #t~string79.base, 3 + #t~string79.offset, 1);call #t~string81.base, #t~string81.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string81.base, #t~string81.offset, 1);call write~init~int(37, #t~string81.base, 1 + #t~string81.offset, 1);call write~init~int(105, #t~string81.base, 2 + #t~string81.offset, 1);call write~init~int(0, #t~string81.base, 3 + #t~string81.offset, 1);call #t~string83.base, #t~string83.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string83.base, #t~string83.offset, 1);call write~init~int(37, #t~string83.base, 1 + #t~string83.offset, 1);call write~init~int(105, #t~string83.base, 2 + #t~string83.offset, 1);call write~init~int(0, #t~string83.base, 3 + #t~string83.offset, 1);call #t~string85.base, #t~string85.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string85.base, #t~string85.offset, 1);call write~init~int(70, #t~string85.base, 1 + #t~string85.offset, 1);call write~init~int(95, #t~string85.base, 2 + #t~string85.offset, 1);call write~init~int(112, #t~string85.base, 3 + #t~string85.offset, 1);call write~init~int(58, #t~string85.base, 4 + #t~string85.offset, 1);call write~init~int(0, #t~string85.base, 5 + #t~string85.offset, 1);call #t~string88.base, #t~string88.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string88.base, #t~string88.offset, 1);call write~init~int(37, #t~string88.base, 1 + #t~string88.offset, 1);call write~init~int(105, #t~string88.base, 2 + #t~string88.offset, 1);call write~init~int(0, #t~string88.base, 3 + #t~string88.offset, 1);call #t~string91.base, #t~string91.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string91.base, #t~string91.offset, 1);call write~init~int(37, #t~string91.base, 1 + #t~string91.offset, 1);call write~init~int(105, #t~string91.base, 2 + #t~string91.offset, 1);call write~init~int(0, #t~string91.base, 3 + #t~string91.offset, 1);call #t~string94.base, #t~string94.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string94.base, #t~string94.offset, 1);call write~init~int(37, #t~string94.base, 1 + #t~string94.offset, 1);call write~init~int(105, #t~string94.base, 2 + #t~string94.offset, 1);call write~init~int(0, #t~string94.base, 3 + #t~string94.offset, 1);call #t~string97.base, #t~string97.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string97.base, #t~string97.offset, 1);call write~init~int(37, #t~string97.base, 1 + #t~string97.offset, 1);call write~init~int(105, #t~string97.base, 2 + #t~string97.offset, 1);call write~init~int(0, #t~string97.base, 3 + #t~string97.offset, 1);call #t~string100.base, #t~string100.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string100.base, #t~string100.offset, 1);call write~init~int(37, #t~string100.base, 1 + #t~string100.offset, 1);call write~init~int(105, #t~string100.base, 2 + #t~string100.offset, 1);call write~init~int(0, #t~string100.base, 3 + #t~string100.offset, 1);call #t~string102.base, #t~string102.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string102.base, #t~string102.offset, 1);call write~init~int(0, #t~string102.base, 1 + #t~string102.offset, 1);call #t~string151.base, #t~string151.offset := #Ultimate.allocOnStack(30);call #t~string152.base, #t~string152.offset := #Ultimate.allocOnStack(9);call #t~string153.base, #t~string153.offset := #Ultimate.allocOnStack(21);call #t~string154.base, #t~string154.offset := #Ultimate.allocOnStack(30);call #t~string155.base, #t~string155.offset := #Ultimate.allocOnStack(9);call #t~string156.base, #t~string156.offset := #Ultimate.allocOnStack(21);call #t~string160.base, #t~string160.offset := #Ultimate.allocOnStack(30);call #t~string161.base, #t~string161.offset := #Ultimate.allocOnStack(9);call #t~string162.base, #t~string162.offset := #Ultimate.allocOnStack(25);call #t~string163.base, #t~string163.offset := #Ultimate.allocOnStack(30);call #t~string164.base, #t~string164.offset := #Ultimate.allocOnStack(9);call #t~string165.base, #t~string165.offset := #Ultimate.allocOnStack(25);~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 700712#L-1 havoc main_#res;havoc main_#t~ret118, main_~retValue_acc~22, main_~tmp~19;havoc main_~retValue_acc~22;havoc main_~tmp~19; 697502#L2430 havoc valid_product_#res;havoc valid_product_~retValue_acc~20;havoc valid_product_~retValue_acc~20;valid_product_~retValue_acc~20 := 1;valid_product_#res := valid_product_~retValue_acc~20; 697503#L2438 main_#t~ret118 := valid_product_#res;main_~tmp~19 := main_#t~ret118;havoc main_#t~ret118; 697094#L2777 assume 0 != main_~tmp~19; 697095#L2754 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 698324#L247 havoc bobCall_#t~ret106, bobCall_~tmp~11;havoc bobCall_~tmp~11;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 698325#L878 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~4 := 4;getOrigin_#res := getOrigin_~retValue_acc~4; 696483#L903 bobCall_#t~ret106 := getOrigin_#res;bobCall_~tmp~11 := bobCall_#t~ret106;havoc bobCall_#t~ret106;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 700339#L525 assume 0 == initPersonOnFloor_~floor; 701405#L526 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 695284#L633-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 697216#L317 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 697217#L329-2 havoc timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_#t~ret53, timeShift_#t~ret54, timeShift_#t~ret55, timeShift_#t~ret56, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 697363#L1184 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 697364#L1236 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 700366#L2814 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 698019#L2815 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 696718#L1201 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 695772#L1222 __utac_acc__Specification3_spec__1_#t~ret121 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret121;havoc __utac_acc__Specification3_spec__1_#t~ret121; 695773#L2819 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 695331#L2920 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret32, stopRequestedAtCurrentFloor_#t~ret33, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 695332#L254 assume !(0 == isFloorCalling_~floorID); 700588#L258 assume !(1 == isFloorCalling_~floorID); 700278#L262 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 696119#L281 stopRequestedAtCurrentFloor_#t~ret32 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret32;havoc stopRequestedAtCurrentFloor_#t~ret32; 695578#L1797 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 695580#L1201-10 assume !(0 == buttonForFloorIsPressed_~floorID); 699967#L1205-10 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 702583#L1222-10 stopRequestedAtCurrentFloor_#t~ret33 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret33;havoc stopRequestedAtCurrentFloor_#t~ret33; 702582#L1804 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 702581#L1809 timeShift_#t~ret46 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 702579#L1948 assume !(0 != timeShift_~tmp___9~2); 702578#L2039 assume !(1 == ~doorState~0); 702577#L2039-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_#t~ret24, stopRequestedInDirection_#t~ret25, stopRequestedInDirection_#t~ret26, stopRequestedInDirection_#t~ret27, stopRequestedInDirection_#t~ret28, stopRequestedInDirection_#t~ret29, stopRequestedInDirection_#t~ret30, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 702576#L1388 assume !(1 == stopRequestedInDirection_~dir); 702575#L1557 assume !(0 == ~currentFloorID~0); 702574#L1563 assume !(~currentFloorID~0 > 0); 699953#L1578 assume ~currentFloorID~0 > 0; 702572#L1580 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 702571#L1581 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 702525#L1710 timeShift_#t~ret53 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret53;havoc timeShift_#t~ret53; 701869#L2047 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret31, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 698193#L1764 assume !(1 == ~currentHeading~0); 698194#L1774 assume !(0 == ~currentFloorID~0); 699787#L1774-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 699143#L1780-5 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 705763#L2945 assume !(-1 == ~expectedDirection~0); 705759#L2957 assume !(1 == ~expectedDirection~0); 704625#L2958 havoc timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_#t~ret53, timeShift_#t~ret54, timeShift_#t~ret55, timeShift_#t~ret56, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 704624#L1184-1 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 704623#L1236-3 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 704622#L2814-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 704620#L2876-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 704621#L1201-16 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 709296#L1222-16 __utac_acc__Specification3_spec__1_#t~ret126 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret126;havoc __utac_acc__Specification3_spec__1_#t~ret126; 709288#L2880-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 709287#L2920-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret32, stopRequestedAtCurrentFloor_#t~ret33, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 709286#L254-21 assume !(0 == isFloorCalling_~floorID); 709283#L258-21 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 709284#L281-21 stopRequestedAtCurrentFloor_#t~ret32 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret32;havoc stopRequestedAtCurrentFloor_#t~ret32; 727444#L1797-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 707406#L1201-21 assume !(0 == buttonForFloorIsPressed_~floorID); 707404#L1205-21 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 707398#L1222-21 stopRequestedAtCurrentFloor_#t~ret33 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret33;havoc stopRequestedAtCurrentFloor_#t~ret33; 707399#L1804-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 707388#L1809-1 timeShift_#t~ret46 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 707389#L1948-1 assume !(0 != timeShift_~tmp___9~2); 700927#L2039-3 assume !(1 == ~doorState~0); 700928#L2039-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_#t~ret24, stopRequestedInDirection_#t~ret25, stopRequestedInDirection_#t~ret26, stopRequestedInDirection_#t~ret27, stopRequestedInDirection_#t~ret28, stopRequestedInDirection_#t~ret29, stopRequestedInDirection_#t~ret30, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 701289#L1388-2 assume !(1 == stopRequestedInDirection_~dir); 707039#L1557-2 assume !(0 == ~currentFloorID~0); 707037#L1563-2 assume !(~currentFloorID~0 > 0); 700191#L1578-2 assume ~currentFloorID~0 > 0; 707034#L1580-2 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 696141#L1581-2 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 696142#L1710-2 timeShift_#t~ret53 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret53;havoc timeShift_#t~ret53; 707265#L2047-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret31, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 701464#L1764-3 assume !(1 == ~currentHeading~0); 701465#L1774-9 assume !(0 == ~currentFloorID~0); 696910#L1774-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 696911#L1780-11 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 699800#L2945-1 assume !(-1 == ~expectedDirection~0); 699801#L2957-1 assume !(1 == ~expectedDirection~0); 743884#L2958-1 havoc timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_#t~ret53, timeShift_#t~ret54, timeShift_#t~ret55, timeShift_#t~ret56, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 743883#L1184-2 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 713248#L1236-6 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 713230#L2814-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 711698#L2876-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 711699#L1201-27 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 736474#L1222-27 __utac_acc__Specification3_spec__1_#t~ret126 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret126;havoc __utac_acc__Specification3_spec__1_#t~ret126; 736473#L2880-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 734465#L2920-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret32, stopRequestedAtCurrentFloor_#t~ret33, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 698274#L254-42 assume !(0 == isFloorCalling_~floorID); 698275#L258-42 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 726836#L281-42 stopRequestedAtCurrentFloor_#t~ret32 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret32;havoc stopRequestedAtCurrentFloor_#t~ret32; 726833#L1797-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 726834#L1201-32 assume !(0 == buttonForFloorIsPressed_~floorID); 739889#L1205-32 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 739885#L1222-32 stopRequestedAtCurrentFloor_#t~ret33 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret33;havoc stopRequestedAtCurrentFloor_#t~ret33; 726835#L1804-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 726832#L1809-2 timeShift_#t~ret46 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 726829#L1948-2 assume !(0 != timeShift_~tmp___9~2); 703388#L2039-6 assume !(1 == ~doorState~0); 709821#L2039-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_#t~ret24, stopRequestedInDirection_#t~ret25, stopRequestedInDirection_#t~ret26, stopRequestedInDirection_#t~ret27, stopRequestedInDirection_#t~ret28, stopRequestedInDirection_#t~ret29, stopRequestedInDirection_#t~ret30, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 709819#L1388-4 assume !(1 == stopRequestedInDirection_~dir); 709818#L1557-4 assume !(0 == ~currentFloorID~0); 709817#L1563-4 assume !(~currentFloorID~0 > 0); 701825#L1578-4 assume ~currentFloorID~0 > 0; 709857#L1580-4 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 695619#L1581-4 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 695409#L1710-4 timeShift_#t~ret53 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret53;havoc timeShift_#t~ret53; 712154#L2047-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret31, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 701552#L1764-6 assume !(1 == ~currentHeading~0); 701553#L1774-18 assume !(0 == ~currentFloorID~0); 696893#L1774-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 696894#L1780-17 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 701435#L2945-2 assume !(-1 == ~expectedDirection~0); 701302#L2957-2 assume !(1 == ~expectedDirection~0); 695404#L2958-2 havoc bobCall_#t~ret106, bobCall_~tmp~11;havoc bobCall_~tmp~11;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 700567#L878-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~4 := 4;getOrigin_#res := getOrigin_~retValue_acc~4; 697510#L903-1 bobCall_#t~ret106 := getOrigin_#res;bobCall_~tmp~11 := bobCall_#t~ret106;havoc bobCall_#t~ret106;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 699954#L525-1 assume 0 == initPersonOnFloor_~floor; 699098#L526-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 695397#L633-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 742815#L317-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 706980#L329-5 havoc cleanup_#t~ret112, cleanup_#t~ret113, cleanup_~i~3, cleanup_~tmp~17, cleanup_~tmp___0~8, cleanup_~__cil_tmp4~0;havoc cleanup_~i~3;havoc cleanup_~tmp~17;havoc cleanup_~tmp___0~8;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_#t~ret53, timeShift_#t~ret54, timeShift_#t~ret55, timeShift_#t~ret56, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 724424#L1184-3 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 724423#L1236-9 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 724419#L2814-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 724417#L2876-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 717094#L1201-38 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 717089#L1222-38 __utac_acc__Specification3_spec__1_#t~ret126 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret126;havoc __utac_acc__Specification3_spec__1_#t~ret126; 717076#L2880-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 717072#L2920-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret32, stopRequestedAtCurrentFloor_#t~ret33, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 717071#L254-63 assume !(0 == isFloorCalling_~floorID); 717068#L258-63 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 717062#L281-63 stopRequestedAtCurrentFloor_#t~ret32 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret32;havoc stopRequestedAtCurrentFloor_#t~ret32; 717057#L1797-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 717058#L1201-43 assume !(0 == buttonForFloorIsPressed_~floorID); 717064#L1205-43 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 717061#L1222-43 stopRequestedAtCurrentFloor_#t~ret33 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret33;havoc stopRequestedAtCurrentFloor_#t~ret33; 717059#L1804-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 717060#L1809-3 timeShift_#t~ret46 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 717048#L1948-3 assume !(0 != timeShift_~tmp___9~2); 706962#L2039-9 assume !(1 == ~doorState~0); 744512#L2039-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_#t~ret24, stopRequestedInDirection_#t~ret25, stopRequestedInDirection_#t~ret26, stopRequestedInDirection_#t~ret27, stopRequestedInDirection_#t~ret28, stopRequestedInDirection_#t~ret29, stopRequestedInDirection_#t~ret30, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 700318#L1388-6 assume !(1 == stopRequestedInDirection_~dir); 695790#L1557-6 assume !(0 == ~currentFloorID~0); 695791#L1563-6 assume !(~currentFloorID~0 > 0); 701193#L1578-6 assume ~currentFloorID~0 > 0; 701195#L1580-6 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 698287#L1581-6 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 697831#L1710-6 timeShift_#t~ret53 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret53;havoc timeShift_#t~ret53; 744776#L2047-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret31, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 699757#L1764-9 assume !(1 == ~currentHeading~0); 699758#L1774-27 assume !(0 == ~currentFloorID~0); 696112#L1774-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 696113#L1780-23 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 696957#L2945-3 assume !(-1 == ~expectedDirection~0); 696712#L2957-3 assume !(1 == ~expectedDirection~0); 744056#L2958-3 cleanup_~i~3 := 0; 744053#L2586-2 [2021-11-02 22:09:12,239 INFO L793 eck$LassoCheckResult]: Loop: 744053#L2586-2 assume !false; 744051#L2587 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 744049#L2590 assume cleanup_~i~3 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~6;havoc isBlocked_~retValue_acc~6;isBlocked_~retValue_acc~6 := 0;isBlocked_#res := isBlocked_~retValue_acc~6; 744047#L1035 cleanup_#t~ret112 := isBlocked_#res;cleanup_~tmp___0~8 := cleanup_#t~ret112;havoc cleanup_#t~ret112; 744045#L2594 assume 1 != cleanup_~tmp___0~8; 744043#L2594-1 havoc isIdle_#res;havoc isIdle_#t~ret19, isIdle_~retValue_acc~13, isIdle_~tmp~4;havoc isIdle_~retValue_acc~13;havoc isIdle_~tmp~4;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret14, anyStopRequested_#t~ret15, anyStopRequested_#t~ret16, anyStopRequested_#t~ret17, anyStopRequested_#t~ret18, anyStopRequested_~retValue_acc~12, anyStopRequested_~tmp~3, anyStopRequested_~tmp___0~2, anyStopRequested_~tmp___1~2, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~12;havoc anyStopRequested_~tmp~3;havoc anyStopRequested_~tmp___0~2;havoc anyStopRequested_~tmp___1~2;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 744041#L254-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 744039#L281-84 anyStopRequested_#t~ret14 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret14;havoc anyStopRequested_#t~ret14; 701531#L1292 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~12 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~12; 701532#L1356 isIdle_#t~ret19 := anyStopRequested_#res;isIdle_~tmp~4 := isIdle_#t~ret19;havoc isIdle_#t~ret19;isIdle_~retValue_acc~13 := (if 0 == isIdle_~tmp~4 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~13; 742814#L1369 cleanup_#t~ret113 := isIdle_#res;cleanup_~tmp~17 := cleanup_#t~ret113;havoc cleanup_#t~ret113; 737713#L2606 assume !(0 != cleanup_~tmp~17);havoc timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_#t~ret53, timeShift_#t~ret54, timeShift_#t~ret55, timeShift_#t~ret56, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 737712#L1184-4 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 737706#L1236-12 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 737704#L2814-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 737443#L2876-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 737444#L1201-49 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 737769#L1222-49 __utac_acc__Specification3_spec__1_#t~ret126 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret126;havoc __utac_acc__Specification3_spec__1_#t~ret126; 737768#L2880-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 737688#L2920-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret32, stopRequestedAtCurrentFloor_#t~ret33, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 739510#L254-89 assume !(0 == isFloorCalling_~floorID); 739507#L258-89 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 739501#L281-89 stopRequestedAtCurrentFloor_#t~ret32 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret32;havoc stopRequestedAtCurrentFloor_#t~ret32; 739497#L1797-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 739498#L1201-54 assume !(0 == buttonForFloorIsPressed_~floorID); 739503#L1205-54 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 739500#L1222-54 stopRequestedAtCurrentFloor_#t~ret33 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret33;havoc stopRequestedAtCurrentFloor_#t~ret33; 739499#L1804-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 695914#L1809-4 timeShift_#t~ret46 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 695915#L1948-4 assume !(0 != timeShift_~tmp___9~2); 706963#L2039-12 assume 1 == ~doorState~0;~doorState~0 := 0; 701143#L2039-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_#t~ret24, stopRequestedInDirection_#t~ret25, stopRequestedInDirection_#t~ret26, stopRequestedInDirection_#t~ret27, stopRequestedInDirection_#t~ret28, stopRequestedInDirection_#t~ret29, stopRequestedInDirection_#t~ret30, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 701144#L1388-8 assume !(1 == stopRequestedInDirection_~dir); 701148#L1557-8 assume !(0 == ~currentFloorID~0); 698577#L1563-8 assume !(~currentFloorID~0 > 0); 696542#L1578-8 assume ~currentFloorID~0 > 0; 744126#L1580-8 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 700371#L1581-8 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 696526#L1710-8 timeShift_#t~ret53 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret53;havoc timeShift_#t~ret53; 709259#L2047-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret31, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 701255#L1764-12 assume !(1 == ~currentHeading~0); 701256#L1774-36 assume !(0 == ~currentFloorID~0); 699404#L1774-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 745421#L1780-29 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 744422#L2945-4 assume !(-1 == ~expectedDirection~0); 744060#L2957-4 assume !(1 == ~expectedDirection~0); 744055#L2958-4 cleanup_~i~3 := 1 + cleanup_~i~3; 744053#L2586-2 [2021-11-02 22:09:12,239 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-02 22:09:12,240 INFO L85 PathProgramCache]: Analyzing trace with hash -540053120, now seen corresponding path program 1 times [2021-11-02 22:09:12,240 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-02 22:09:12,240 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1475885934] [2021-11-02 22:09:12,240 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-02 22:09:12,240 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-02 22:09:12,268 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-02 22:09:12,317 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-02 22:09:12,318 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-02 22:09:12,318 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1475885934] [2021-11-02 22:09:12,318 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1475885934] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-02 22:09:12,318 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-02 22:09:12,319 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-11-02 22:09:12,319 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1994166968] [2021-11-02 22:09:12,320 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-11-02 22:09:12,321 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-02 22:09:12,321 INFO L85 PathProgramCache]: Analyzing trace with hash 22950895, now seen corresponding path program 1 times [2021-11-02 22:09:12,321 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-02 22:09:12,321 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1751529668] [2021-11-02 22:09:12,321 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-02 22:09:12,322 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-02 22:09:12,333 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-02 22:09:12,345 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-02 22:09:12,345 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-02 22:09:12,345 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1751529668] [2021-11-02 22:09:12,346 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1751529668] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-02 22:09:12,346 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-02 22:09:12,346 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-11-02 22:09:12,346 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [311478622] [2021-11-02 22:09:12,346 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-11-02 22:09:12,347 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-02 22:09:12,347 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-02 22:09:12,348 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-02 22:09:12,348 INFO L87 Difference]: Start difference. First operand 50207 states and 93847 transitions. cyclomatic complexity: 43641 Second operand has 3 states, 3 states have (on average 15.666666666666666) internal successors, (47), 3 states have internal predecessors, (47), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:09:14,194 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-02 22:09:14,194 INFO L93 Difference]: Finished difference Result 94363 states and 175959 transitions. [2021-11-02 22:09:14,194 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-02 22:09:14,194 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 94363 states and 175959 transitions. [2021-11-02 22:09:14,556 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 22700 [2021-11-02 22:09:14,826 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 94363 states to 94363 states and 175959 transitions. [2021-11-02 22:09:14,826 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 94363 [2021-11-02 22:09:14,885 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 94363 [2021-11-02 22:09:14,885 INFO L73 IsDeterministic]: Start isDeterministic. Operand 94363 states and 175959 transitions. [2021-11-02 22:09:14,928 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-11-02 22:09:14,928 INFO L681 BuchiCegarLoop]: Abstraction has 94363 states and 175959 transitions. [2021-11-02 22:09:14,976 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 94363 states and 175959 transitions. [2021-11-02 22:09:16,322 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 94363 to 94363. [2021-11-02 22:09:16,395 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 94363 states, 94363 states have (on average 1.8647033265156894) internal successors, (175959), 94362 states have internal predecessors, (175959), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:09:16,649 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 94363 states to 94363 states and 175959 transitions. [2021-11-02 22:09:16,649 INFO L704 BuchiCegarLoop]: Abstraction has 94363 states and 175959 transitions. [2021-11-02 22:09:16,649 INFO L587 BuchiCegarLoop]: Abstraction has 94363 states and 175959 transitions. [2021-11-02 22:09:16,649 INFO L425 BuchiCegarLoop]: ======== Iteration 11============ [2021-11-02 22:09:16,649 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 94363 states and 175959 transitions. [2021-11-02 22:09:17,405 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 22700 [2021-11-02 22:09:17,406 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-11-02 22:09:17,406 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-11-02 22:09:17,410 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-02 22:09:17,411 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-02 22:09:17,411 INFO L791 eck$LassoCheckResult]: Stem: 845248#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(2);call write~init~int(48, #t~string4.base, #t~string4.offset, 1);call write~init~int(0, #t~string4.base, 1 + #t~string4.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(31);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(12);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(10);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string59.base, #t~string59.offset, 1);call write~init~int(95, #t~string59.base, 1 + #t~string59.offset, 1);call write~init~int(93, #t~string59.base, 2 + #t~string59.offset, 1);call write~init~int(0, #t~string59.base, 3 + #t~string59.offset, 1);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string61.base, #t~string61.offset, 1);call write~init~int(93, #t~string61.base, 1 + #t~string61.offset, 1);call write~init~int(32, #t~string61.base, 2 + #t~string61.offset, 1);call write~init~int(0, #t~string61.base, 3 + #t~string61.offset, 1);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string63.base, #t~string63.offset, 1);call write~init~int(97, #t~string63.base, 1 + #t~string63.offset, 1);call write~init~int(116, #t~string63.base, 2 + #t~string63.offset, 1);call write~init~int(32, #t~string63.base, 3 + #t~string63.offset, 1);call write~init~int(0, #t~string63.base, 4 + #t~string63.offset, 1);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string65.base, #t~string65.offset, 1);call write~init~int(105, #t~string65.base, 1 + #t~string65.offset, 1);call write~init~int(0, #t~string65.base, 2 + #t~string65.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(10);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string69.base, #t~string69.offset, 1);call write~init~int(112, #t~string69.base, 1 + #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 2 + #t~string69.offset, 1);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string71.base, #t~string71.offset, 1);call write~init~int(111, #t~string71.base, 1 + #t~string71.offset, 1);call write~init~int(119, #t~string71.base, 2 + #t~string71.offset, 1);call write~init~int(110, #t~string71.base, 3 + #t~string71.offset, 1);call write~init~int(0, #t~string71.base, 4 + #t~string71.offset, 1);call #t~string73.base, #t~string73.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string73.base, #t~string73.offset, 1);call write~init~int(73, #t~string73.base, 1 + #t~string73.offset, 1);call write~init~int(76, #t~string73.base, 2 + #t~string73.offset, 1);call write~init~int(95, #t~string73.base, 3 + #t~string73.offset, 1);call write~init~int(112, #t~string73.base, 4 + #t~string73.offset, 1);call write~init~int(58, #t~string73.base, 5 + #t~string73.offset, 1);call write~init~int(0, #t~string73.base, 6 + #t~string73.offset, 1);call #t~string75.base, #t~string75.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string75.base, #t~string75.offset, 1);call write~init~int(37, #t~string75.base, 1 + #t~string75.offset, 1);call write~init~int(105, #t~string75.base, 2 + #t~string75.offset, 1);call write~init~int(0, #t~string75.base, 3 + #t~string75.offset, 1);call #t~string77.base, #t~string77.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string77.base, #t~string77.offset, 1);call write~init~int(37, #t~string77.base, 1 + #t~string77.offset, 1);call write~init~int(105, #t~string77.base, 2 + #t~string77.offset, 1);call write~init~int(0, #t~string77.base, 3 + #t~string77.offset, 1);call #t~string79.base, #t~string79.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string79.base, #t~string79.offset, 1);call write~init~int(37, #t~string79.base, 1 + #t~string79.offset, 1);call write~init~int(105, #t~string79.base, 2 + #t~string79.offset, 1);call write~init~int(0, #t~string79.base, 3 + #t~string79.offset, 1);call #t~string81.base, #t~string81.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string81.base, #t~string81.offset, 1);call write~init~int(37, #t~string81.base, 1 + #t~string81.offset, 1);call write~init~int(105, #t~string81.base, 2 + #t~string81.offset, 1);call write~init~int(0, #t~string81.base, 3 + #t~string81.offset, 1);call #t~string83.base, #t~string83.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string83.base, #t~string83.offset, 1);call write~init~int(37, #t~string83.base, 1 + #t~string83.offset, 1);call write~init~int(105, #t~string83.base, 2 + #t~string83.offset, 1);call write~init~int(0, #t~string83.base, 3 + #t~string83.offset, 1);call #t~string85.base, #t~string85.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string85.base, #t~string85.offset, 1);call write~init~int(70, #t~string85.base, 1 + #t~string85.offset, 1);call write~init~int(95, #t~string85.base, 2 + #t~string85.offset, 1);call write~init~int(112, #t~string85.base, 3 + #t~string85.offset, 1);call write~init~int(58, #t~string85.base, 4 + #t~string85.offset, 1);call write~init~int(0, #t~string85.base, 5 + #t~string85.offset, 1);call #t~string88.base, #t~string88.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string88.base, #t~string88.offset, 1);call write~init~int(37, #t~string88.base, 1 + #t~string88.offset, 1);call write~init~int(105, #t~string88.base, 2 + #t~string88.offset, 1);call write~init~int(0, #t~string88.base, 3 + #t~string88.offset, 1);call #t~string91.base, #t~string91.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string91.base, #t~string91.offset, 1);call write~init~int(37, #t~string91.base, 1 + #t~string91.offset, 1);call write~init~int(105, #t~string91.base, 2 + #t~string91.offset, 1);call write~init~int(0, #t~string91.base, 3 + #t~string91.offset, 1);call #t~string94.base, #t~string94.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string94.base, #t~string94.offset, 1);call write~init~int(37, #t~string94.base, 1 + #t~string94.offset, 1);call write~init~int(105, #t~string94.base, 2 + #t~string94.offset, 1);call write~init~int(0, #t~string94.base, 3 + #t~string94.offset, 1);call #t~string97.base, #t~string97.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string97.base, #t~string97.offset, 1);call write~init~int(37, #t~string97.base, 1 + #t~string97.offset, 1);call write~init~int(105, #t~string97.base, 2 + #t~string97.offset, 1);call write~init~int(0, #t~string97.base, 3 + #t~string97.offset, 1);call #t~string100.base, #t~string100.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string100.base, #t~string100.offset, 1);call write~init~int(37, #t~string100.base, 1 + #t~string100.offset, 1);call write~init~int(105, #t~string100.base, 2 + #t~string100.offset, 1);call write~init~int(0, #t~string100.base, 3 + #t~string100.offset, 1);call #t~string102.base, #t~string102.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string102.base, #t~string102.offset, 1);call write~init~int(0, #t~string102.base, 1 + #t~string102.offset, 1);call #t~string151.base, #t~string151.offset := #Ultimate.allocOnStack(30);call #t~string152.base, #t~string152.offset := #Ultimate.allocOnStack(9);call #t~string153.base, #t~string153.offset := #Ultimate.allocOnStack(21);call #t~string154.base, #t~string154.offset := #Ultimate.allocOnStack(30);call #t~string155.base, #t~string155.offset := #Ultimate.allocOnStack(9);call #t~string156.base, #t~string156.offset := #Ultimate.allocOnStack(21);call #t~string160.base, #t~string160.offset := #Ultimate.allocOnStack(30);call #t~string161.base, #t~string161.offset := #Ultimate.allocOnStack(9);call #t~string162.base, #t~string162.offset := #Ultimate.allocOnStack(25);call #t~string163.base, #t~string163.offset := #Ultimate.allocOnStack(30);call #t~string164.base, #t~string164.offset := #Ultimate.allocOnStack(9);call #t~string165.base, #t~string165.offset := #Ultimate.allocOnStack(25);~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 845249#L-1 havoc main_#res;havoc main_#t~ret118, main_~retValue_acc~22, main_~tmp~19;havoc main_~retValue_acc~22;havoc main_~tmp~19; 842083#L2430 havoc valid_product_#res;havoc valid_product_~retValue_acc~20;havoc valid_product_~retValue_acc~20;valid_product_~retValue_acc~20 := 1;valid_product_#res := valid_product_~retValue_acc~20; 842084#L2438 main_#t~ret118 := valid_product_#res;main_~tmp~19 := main_#t~ret118;havoc main_#t~ret118; 841667#L2777 assume 0 != main_~tmp~19; 841668#L2754 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 842896#L247 havoc bobCall_#t~ret106, bobCall_~tmp~11;havoc bobCall_~tmp~11;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 842897#L878 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~4 := 4;getOrigin_#res := getOrigin_~retValue_acc~4; 841055#L903 bobCall_#t~ret106 := getOrigin_#res;bobCall_~tmp~11 := bobCall_#t~ret106;havoc bobCall_#t~ret106;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 844898#L525 assume 0 == initPersonOnFloor_~floor; 845906#L526 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 839862#L633-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 841790#L317 assume !(0 == callOnFloor_~floorID); 841792#L320 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 842457#L329-2 havoc timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_#t~ret53, timeShift_#t~ret54, timeShift_#t~ret55, timeShift_#t~ret56, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 841941#L1184 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 841942#L1236 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 844920#L2814 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 842591#L2815 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 841290#L1201 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 840350#L1222 __utac_acc__Specification3_spec__1_#t~ret121 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret121;havoc __utac_acc__Specification3_spec__1_#t~ret121; 840351#L2819 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 853208#L2920 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret32, stopRequestedAtCurrentFloor_#t~ret33, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 853207#L254 assume !(0 == isFloorCalling_~floorID); 853206#L258 assume !(1 == isFloorCalling_~floorID); 853203#L262 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 853202#L281 stopRequestedAtCurrentFloor_#t~ret32 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret32;havoc stopRequestedAtCurrentFloor_#t~ret32; 853201#L1797 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 853200#L1201-10 assume !(0 == buttonForFloorIsPressed_~floorID); 853199#L1205-10 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 853195#L1222-10 stopRequestedAtCurrentFloor_#t~ret33 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret33;havoc stopRequestedAtCurrentFloor_#t~ret33; 853194#L1804 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 853193#L1809 timeShift_#t~ret46 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 853192#L1948 assume !(0 != timeShift_~tmp___9~2); 853191#L2039 assume !(1 == ~doorState~0); 853190#L2039-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_#t~ret24, stopRequestedInDirection_#t~ret25, stopRequestedInDirection_#t~ret26, stopRequestedInDirection_#t~ret27, stopRequestedInDirection_#t~ret28, stopRequestedInDirection_#t~ret29, stopRequestedInDirection_#t~ret30, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 853188#L1388 assume !(1 == stopRequestedInDirection_~dir); 853187#L1557 assume !(0 == ~currentFloorID~0); 853185#L1563 assume ~currentFloorID~0 > 0; 853183#L1564 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 853184#L254-6 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 853267#L281-6 stopRequestedInDirection_#t~ret26 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~0 := stopRequestedInDirection_#t~ret26;havoc stopRequestedInDirection_#t~ret26; 853181#L1568 assume 0 != stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 853182#L1710 timeShift_#t~ret53 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret53;havoc timeShift_#t~ret53; 854942#L2047 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret31, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 854938#L1764 assume !(1 == ~currentHeading~0); 854935#L1774 assume !(0 == ~currentFloorID~0); 854748#L1774-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 854745#L1780-5 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 854743#L2945 assume !(-1 == ~expectedDirection~0); 854732#L2957 assume !(1 == ~expectedDirection~0); 854731#L2958 havoc timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_#t~ret53, timeShift_#t~ret54, timeShift_#t~ret55, timeShift_#t~ret56, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 854730#L1184-1 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 854729#L1236-3 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 854728#L2814-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 854726#L2876-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 854722#L2886-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 854718#L2897-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 854715#L2908-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 854689#L2919-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 854686#L2920-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret32, stopRequestedAtCurrentFloor_#t~ret33, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 854684#L254-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 854679#L281-21 stopRequestedAtCurrentFloor_#t~ret32 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret32;havoc stopRequestedAtCurrentFloor_#t~ret32; 854676#L1797-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 854677#L1201-21 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 854678#L1222-21 stopRequestedAtCurrentFloor_#t~ret33 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret33;havoc stopRequestedAtCurrentFloor_#t~ret33; 854675#L1804-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 854673#L1809-1 timeShift_#t~ret46 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 854672#L1948-1 assume !(0 != timeShift_~tmp___9~2); 846740#L2039-3 assume !(1 == ~doorState~0); 846737#L2039-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_#t~ret24, stopRequestedInDirection_#t~ret25, stopRequestedInDirection_#t~ret26, stopRequestedInDirection_#t~ret27, stopRequestedInDirection_#t~ret28, stopRequestedInDirection_#t~ret29, stopRequestedInDirection_#t~ret30, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 846731#L1388-2 assume !(1 == stopRequestedInDirection_~dir); 846732#L1557-2 assume !(0 == ~currentFloorID~0); 851686#L1563-2 assume ~currentFloorID~0 > 0; 851682#L1564-2 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 851683#L254-27 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 846702#L281-27 stopRequestedInDirection_#t~ret26 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~0 := stopRequestedInDirection_#t~ret26;havoc stopRequestedInDirection_#t~ret26; 846703#L1568-2 assume 0 != stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 851100#L1710-2 timeShift_#t~ret53 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret53;havoc timeShift_#t~ret53; 850997#L2047-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret31, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 850900#L1764-3 assume !(1 == ~currentHeading~0); 850892#L1774-9 assume !(0 == ~currentFloorID~0); 850881#L1774-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 850876#L1780-11 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 871028#L2945-1 assume !(-1 == ~expectedDirection~0); 871027#L2957-1 assume !(1 == ~expectedDirection~0); 871026#L2958-1 havoc timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_#t~ret53, timeShift_#t~ret54, timeShift_#t~ret55, timeShift_#t~ret56, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 871025#L1184-2 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 871024#L1236-6 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 871023#L2814-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 871012#L2876-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 849843#L2886-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 849840#L2897-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 849837#L2908-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 848344#L2919-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 848341#L2920-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret32, stopRequestedAtCurrentFloor_#t~ret33, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 848339#L254-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 848332#L281-42 stopRequestedAtCurrentFloor_#t~ret32 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret32;havoc stopRequestedAtCurrentFloor_#t~ret32; 848330#L1797-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 848322#L1201-32 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 848318#L1222-32 stopRequestedAtCurrentFloor_#t~ret33 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret33;havoc stopRequestedAtCurrentFloor_#t~ret33; 848316#L1804-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 847901#L1809-2 timeShift_#t~ret46 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 847323#L1948-2 assume !(0 != timeShift_~tmp___9~2); 847321#L2039-6 assume !(1 == ~doorState~0); 847317#L2039-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_#t~ret24, stopRequestedInDirection_#t~ret25, stopRequestedInDirection_#t~ret26, stopRequestedInDirection_#t~ret27, stopRequestedInDirection_#t~ret28, stopRequestedInDirection_#t~ret29, stopRequestedInDirection_#t~ret30, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 847315#L1388-4 assume !(1 == stopRequestedInDirection_~dir); 847298#L1557-4 assume !(0 == ~currentFloorID~0); 846294#L1563-4 assume ~currentFloorID~0 > 0; 846290#L1564-4 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 846291#L254-48 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 846292#L281-48 stopRequestedInDirection_#t~ret26 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~0 := stopRequestedInDirection_#t~ret26;havoc stopRequestedInDirection_#t~ret26; 846293#L1568-4 assume 0 != stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 847275#L1710-4 timeShift_#t~ret53 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret53;havoc timeShift_#t~ret53; 847088#L2047-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret31, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 847085#L1764-6 assume !(1 == ~currentHeading~0); 847019#L1774-18 assume !(0 == ~currentFloorID~0); 847006#L1774-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 847001#L1780-17 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 886855#L2945-2 assume !(-1 == ~expectedDirection~0); 886852#L2957-2 assume !(1 == ~expectedDirection~0); 886851#L2958-2 havoc bobCall_#t~ret106, bobCall_~tmp~11;havoc bobCall_~tmp~11;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 886849#L878-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~4 := 4;getOrigin_#res := getOrigin_~retValue_acc~4; 886844#L903-1 bobCall_#t~ret106 := getOrigin_#res;bobCall_~tmp~11 := bobCall_#t~ret106;havoc bobCall_#t~ret106;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 886843#L525-1 assume 0 == initPersonOnFloor_~floor; 846960#L526-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 846943#L633-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 846940#L317-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 846941#L329-5 havoc cleanup_#t~ret112, cleanup_#t~ret113, cleanup_~i~3, cleanup_~tmp~17, cleanup_~tmp___0~8, cleanup_~__cil_tmp4~0;havoc cleanup_~i~3;havoc cleanup_~tmp~17;havoc cleanup_~tmp___0~8;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_#t~ret53, timeShift_#t~ret54, timeShift_#t~ret55, timeShift_#t~ret56, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 878803#L1184-3 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 878802#L1236-9 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 878800#L2814-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 878798#L2876-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 878799#L1201-38 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 885869#L1222-38 __utac_acc__Specification3_spec__1_#t~ret126 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret126;havoc __utac_acc__Specification3_spec__1_#t~ret126; 885848#L2880-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 885843#L2920-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret32, stopRequestedAtCurrentFloor_#t~ret33, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 885838#L254-63 assume !(0 == isFloorCalling_~floorID); 878638#L258-63 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 878637#L281-63 stopRequestedAtCurrentFloor_#t~ret32 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret32;havoc stopRequestedAtCurrentFloor_#t~ret32; 878632#L1797-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 878633#L1201-43 assume !(0 == buttonForFloorIsPressed_~floorID); 878627#L1205-43 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 878625#L1222-43 stopRequestedAtCurrentFloor_#t~ret33 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret33;havoc stopRequestedAtCurrentFloor_#t~ret33; 878623#L1804-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 878621#L1809-3 timeShift_#t~ret46 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 878619#L1948-3 assume !(0 != timeShift_~tmp___9~2); 878618#L2039-9 assume !(1 == ~doorState~0); 878617#L2039-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_#t~ret24, stopRequestedInDirection_#t~ret25, stopRequestedInDirection_#t~ret26, stopRequestedInDirection_#t~ret27, stopRequestedInDirection_#t~ret28, stopRequestedInDirection_#t~ret29, stopRequestedInDirection_#t~ret30, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 878615#L1388-6 assume !(1 == stopRequestedInDirection_~dir); 878614#L1557-6 assume !(0 == ~currentFloorID~0); 878612#L1563-6 assume ~currentFloorID~0 > 0; 878610#L1564-6 assume !(0 != stopRequestedInDirection_~respectFloorCalls); 846420#L1578-6 assume ~currentFloorID~0 > 0; 878606#L1580-6 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 878607#L1581-6 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 878608#L1710-6 timeShift_#t~ret53 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret53;havoc timeShift_#t~ret53; 897759#L2047-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret31, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 897437#L1764-9 assume !(1 == ~currentHeading~0); 897428#L1774-27 assume !(0 == ~currentFloorID~0); 897429#L1774-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 840686#L1780-23 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 897409#L2945-3 assume !(-1 == ~expectedDirection~0); 897406#L2957-3 assume !(1 == ~expectedDirection~0); 896973#L2958-3 cleanup_~i~3 := 0; 896963#L2586-2 [2021-11-02 22:09:17,413 INFO L793 eck$LassoCheckResult]: Loop: 896963#L2586-2 assume !false; 896961#L2587 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 896959#L2590 assume cleanup_~i~3 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~6;havoc isBlocked_~retValue_acc~6;isBlocked_~retValue_acc~6 := 0;isBlocked_#res := isBlocked_~retValue_acc~6; 896957#L1035 cleanup_#t~ret112 := isBlocked_#res;cleanup_~tmp___0~8 := cleanup_#t~ret112;havoc cleanup_#t~ret112; 896918#L2594 assume 1 != cleanup_~tmp___0~8; 896915#L2594-1 havoc isIdle_#res;havoc isIdle_#t~ret19, isIdle_~retValue_acc~13, isIdle_~tmp~4;havoc isIdle_~retValue_acc~13;havoc isIdle_~tmp~4;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret14, anyStopRequested_#t~ret15, anyStopRequested_#t~ret16, anyStopRequested_#t~ret17, anyStopRequested_#t~ret18, anyStopRequested_~retValue_acc~12, anyStopRequested_~tmp~3, anyStopRequested_~tmp___0~2, anyStopRequested_~tmp___1~2, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~12;havoc anyStopRequested_~tmp~3;havoc anyStopRequested_~tmp___0~2;havoc anyStopRequested_~tmp___1~2;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 896906#L254-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 896707#L281-84 anyStopRequested_#t~ret14 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret14;havoc anyStopRequested_#t~ret14; 893311#L1292 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~12 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~12; 893309#L1356 isIdle_#t~ret19 := anyStopRequested_#res;isIdle_~tmp~4 := isIdle_#t~ret19;havoc isIdle_#t~ret19;isIdle_~retValue_acc~13 := (if 0 == isIdle_~tmp~4 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~13; 893307#L1369 cleanup_#t~ret113 := isIdle_#res;cleanup_~tmp~17 := cleanup_#t~ret113;havoc cleanup_#t~ret113; 893305#L2606 assume !(0 != cleanup_~tmp~17);havoc timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_#t~ret53, timeShift_#t~ret54, timeShift_#t~ret55, timeShift_#t~ret56, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 893303#L1184-4 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 893301#L1236-12 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 893298#L2814-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 893299#L2876-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 893295#L1201-49 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 893291#L1222-49 __utac_acc__Specification3_spec__1_#t~ret126 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret126;havoc __utac_acc__Specification3_spec__1_#t~ret126; 893290#L2880-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 893284#L2920-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret32, stopRequestedAtCurrentFloor_#t~ret33, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 906324#L254-89 assume !(0 == isFloorCalling_~floorID); 906321#L258-89 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 906319#L281-89 stopRequestedAtCurrentFloor_#t~ret32 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret32;havoc stopRequestedAtCurrentFloor_#t~ret32; 906318#L1797-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 906317#L1201-54 assume !(0 == buttonForFloorIsPressed_~floorID); 906309#L1205-54 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 906306#L1222-54 stopRequestedAtCurrentFloor_#t~ret33 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret33;havoc stopRequestedAtCurrentFloor_#t~ret33; 906304#L1804-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 906303#L1809-4 timeShift_#t~ret46 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 906296#L1948-4 assume !(0 != timeShift_~tmp___9~2); 893197#L2039-12 assume 1 == ~doorState~0;~doorState~0 := 0; 908549#L2039-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_#t~ret24, stopRequestedInDirection_#t~ret25, stopRequestedInDirection_#t~ret26, stopRequestedInDirection_#t~ret27, stopRequestedInDirection_#t~ret28, stopRequestedInDirection_#t~ret29, stopRequestedInDirection_#t~ret30, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 908547#L1388-8 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 908548#L828-20 stopRequestedInDirection_#t~ret20 := isTopFloor_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 908572#L1392-8 assume !(0 != stopRequestedInDirection_~tmp~5); 908570#L1398-8 assume !(~currentFloorID~0 < 0); 908568#L1413-8 assume ~currentFloorID~0 < 0; 908569#L1415-8 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 908706#L1416-8 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 908690#L1710-8 timeShift_#t~ret53 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret53;havoc timeShift_#t~ret53; 908687#L2047-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret31, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 897594#L1764-12 assume !(1 == ~currentHeading~0); 897596#L1774-36 assume !(0 == ~currentFloorID~0); 896992#L1774-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 896987#L1780-29 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 896985#L2945-4 assume !(-1 == ~expectedDirection~0); 896984#L2957-4 assume !(1 == ~expectedDirection~0); 896972#L2958-4 cleanup_~i~3 := 1 + cleanup_~i~3; 896963#L2586-2 [2021-11-02 22:09:17,413 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-02 22:09:17,413 INFO L85 PathProgramCache]: Analyzing trace with hash -2037944092, now seen corresponding path program 1 times [2021-11-02 22:09:17,414 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-02 22:09:17,414 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [531702345] [2021-11-02 22:09:17,414 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-02 22:09:17,414 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-02 22:09:17,439 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-02 22:09:17,480 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-02 22:09:17,480 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-02 22:09:17,480 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [531702345] [2021-11-02 22:09:17,480 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [531702345] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-02 22:09:17,480 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-02 22:09:17,481 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-11-02 22:09:17,481 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [227695646] [2021-11-02 22:09:17,481 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-11-02 22:09:17,482 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-02 22:09:17,482 INFO L85 PathProgramCache]: Analyzing trace with hash -1057087940, now seen corresponding path program 1 times [2021-11-02 22:09:17,482 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-02 22:09:17,482 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [67622440] [2021-11-02 22:09:17,482 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-02 22:09:17,483 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-02 22:09:17,490 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-02 22:09:17,522 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-02 22:09:17,522 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-02 22:09:17,522 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [67622440] [2021-11-02 22:09:17,522 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [67622440] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-02 22:09:17,523 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-02 22:09:17,523 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-11-02 22:09:17,523 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [206914275] [2021-11-02 22:09:17,523 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-11-02 22:09:17,523 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-02 22:09:17,524 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-11-02 22:09:17,524 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-11-02 22:09:17,524 INFO L87 Difference]: Start difference. First operand 94363 states and 175959 transitions. cyclomatic complexity: 81597 Second operand has 6 states, 6 states have (on average 8.0) internal successors, (48), 6 states have internal predecessors, (48), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:09:20,757 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-02 22:09:20,757 INFO L93 Difference]: Finished difference Result 262049 states and 489915 transitions. [2021-11-02 22:09:20,757 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2021-11-02 22:09:20,757 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 262049 states and 489915 transitions. [2021-11-02 22:09:22,753 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 65012 [2021-11-02 22:09:24,323 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 262049 states to 262049 states and 489915 transitions. [2021-11-02 22:09:24,323 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 262049 [2021-11-02 22:09:24,510 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 262049 [2021-11-02 22:09:24,511 INFO L73 IsDeterministic]: Start isDeterministic. Operand 262049 states and 489915 transitions. [2021-11-02 22:09:24,641 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-11-02 22:09:24,641 INFO L681 BuchiCegarLoop]: Abstraction has 262049 states and 489915 transitions. [2021-11-02 22:09:24,779 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 262049 states and 489915 transitions. [2021-11-02 22:09:26,823 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 262049 to 135937. [2021-11-02 22:09:26,927 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 135937 states, 135937 states have (on average 1.864650536645652) internal successors, (253475), 135936 states have internal predecessors, (253475), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:09:27,265 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 135937 states to 135937 states and 253475 transitions. [2021-11-02 22:09:27,265 INFO L704 BuchiCegarLoop]: Abstraction has 135937 states and 253475 transitions. [2021-11-02 22:09:27,265 INFO L587 BuchiCegarLoop]: Abstraction has 135937 states and 253475 transitions. [2021-11-02 22:09:27,265 INFO L425 BuchiCegarLoop]: ======== Iteration 12============ [2021-11-02 22:09:27,265 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 135937 states and 253475 transitions.