./Ultimate.py --spec ../../sv-benchmarks/c/properties/termination.prp --file ../../sv-benchmarks/c/product-lines/elevator_spec3_product17.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for termination Using default analysis Version 9ad7fb26 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3f78a14d-8b1d-4104-abd5-e26947194a3e/bin/uautomizer-tBqnrhUYjU/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3f78a14d-8b1d-4104-abd5-e26947194a3e/bin/uautomizer-tBqnrhUYjU/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3f78a14d-8b1d-4104-abd5-e26947194a3e/bin/uautomizer-tBqnrhUYjU/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3f78a14d-8b1d-4104-abd5-e26947194a3e/bin/uautomizer-tBqnrhUYjU/config/AutomizerTermination.xml -i ../../sv-benchmarks/c/product-lines/elevator_spec3_product17.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3f78a14d-8b1d-4104-abd5-e26947194a3e/bin/uautomizer-tBqnrhUYjU/config/svcomp-Termination-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3f78a14d-8b1d-4104-abd5-e26947194a3e/bin/uautomizer-tBqnrhUYjU --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(F end) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash c169527384ebd2beb44494ef6b1cbc32334198d2b76d2236e6ced79c84ed026c --- Real Ultimate output --- This is Ultimate 0.2.1-dev-9ad7fb2 [2021-11-02 22:05:23,817 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-11-02 22:05:23,821 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-11-02 22:05:23,884 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-11-02 22:05:23,885 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-11-02 22:05:23,889 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-11-02 22:05:23,891 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-11-02 22:05:23,895 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-11-02 22:05:23,897 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-11-02 22:05:23,903 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-11-02 22:05:23,904 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-11-02 22:05:23,906 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-11-02 22:05:23,907 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-11-02 22:05:23,909 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-11-02 22:05:23,912 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-11-02 22:05:23,916 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-11-02 22:05:23,918 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-11-02 22:05:23,919 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-11-02 22:05:23,922 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-11-02 22:05:23,933 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-11-02 22:05:23,935 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-11-02 22:05:23,937 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-11-02 22:05:23,941 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-11-02 22:05:23,942 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-11-02 22:05:23,952 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-11-02 22:05:23,953 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-11-02 22:05:23,953 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-11-02 22:05:23,956 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-11-02 22:05:23,957 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-11-02 22:05:23,959 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-11-02 22:05:23,959 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-11-02 22:05:23,965 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-11-02 22:05:23,967 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-11-02 22:05:23,969 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-11-02 22:05:23,971 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-11-02 22:05:23,971 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-11-02 22:05:23,972 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-11-02 22:05:23,973 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-11-02 22:05:23,973 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-11-02 22:05:23,974 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-11-02 22:05:23,975 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-11-02 22:05:23,976 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3f78a14d-8b1d-4104-abd5-e26947194a3e/bin/uautomizer-tBqnrhUYjU/config/svcomp-Termination-32bit-Automizer_Default.epf [2021-11-02 22:05:24,031 INFO L113 SettingsManager]: Loading preferences was successful [2021-11-02 22:05:24,032 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-11-02 22:05:24,033 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-11-02 22:05:24,033 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-11-02 22:05:24,035 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-11-02 22:05:24,035 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-11-02 22:05:24,035 INFO L138 SettingsManager]: * Use SBE=true [2021-11-02 22:05:24,036 INFO L136 SettingsManager]: Preferences of BuchiAutomizer differ from their defaults: [2021-11-02 22:05:24,036 INFO L138 SettingsManager]: * NCSB implementation=INTSET_LAZY3 [2021-11-02 22:05:24,036 INFO L138 SettingsManager]: * Use old map elimination=false [2021-11-02 22:05:24,037 INFO L138 SettingsManager]: * Use external solver (rank synthesis)=false [2021-11-02 22:05:24,038 INFO L138 SettingsManager]: * Use only trivial implications for array writes=true [2021-11-02 22:05:24,038 INFO L138 SettingsManager]: * Rank analysis=LINEAR_WITH_GUESSES [2021-11-02 22:05:24,038 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-11-02 22:05:24,039 INFO L138 SettingsManager]: * sizeof long=4 [2021-11-02 22:05:24,039 INFO L138 SettingsManager]: * Check unreachability of error function in SV-COMP mode=false [2021-11-02 22:05:24,039 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-11-02 22:05:24,039 INFO L138 SettingsManager]: * sizeof POINTER=4 [2021-11-02 22:05:24,040 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-11-02 22:05:24,040 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=ASSUME [2021-11-02 22:05:24,040 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=ASSUME [2021-11-02 22:05:24,040 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=ASSUME [2021-11-02 22:05:24,040 INFO L138 SettingsManager]: * sizeof long double=12 [2021-11-02 22:05:24,041 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-11-02 22:05:24,041 INFO L138 SettingsManager]: * Assume nondeterminstic values are in range=false [2021-11-02 22:05:24,041 INFO L138 SettingsManager]: * Use constant arrays=true [2021-11-02 22:05:24,043 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=ASSUME [2021-11-02 22:05:24,043 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-11-02 22:05:24,044 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-11-02 22:05:24,044 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-11-02 22:05:24,044 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2021-11-02 22:05:24,045 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-11-02 22:05:24,046 INFO L136 SettingsManager]: Preferences of IcfgTransformer differ from their defaults: [2021-11-02 22:05:24,046 INFO L138 SettingsManager]: * TransformationType=MODULO_NEIGHBOR WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3f78a14d-8b1d-4104-abd5-e26947194a3e/bin/uautomizer-tBqnrhUYjU/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3f78a14d-8b1d-4104-abd5-e26947194a3e/bin/uautomizer-tBqnrhUYjU Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(F end) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> c169527384ebd2beb44494ef6b1cbc32334198d2b76d2236e6ced79c84ed026c [2021-11-02 22:05:24,407 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-11-02 22:05:24,441 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-11-02 22:05:24,444 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-11-02 22:05:24,446 INFO L271 PluginConnector]: Initializing CDTParser... [2021-11-02 22:05:24,447 INFO L275 PluginConnector]: CDTParser initialized [2021-11-02 22:05:24,448 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3f78a14d-8b1d-4104-abd5-e26947194a3e/bin/uautomizer-tBqnrhUYjU/../../sv-benchmarks/c/product-lines/elevator_spec3_product17.cil.c [2021-11-02 22:05:24,529 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3f78a14d-8b1d-4104-abd5-e26947194a3e/bin/uautomizer-tBqnrhUYjU/data/47224807c/aedd6a75951142fb904bae245fb368d5/FLAG01e1ea2f0 [2021-11-02 22:05:25,269 INFO L306 CDTParser]: Found 1 translation units. [2021-11-02 22:05:25,270 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3f78a14d-8b1d-4104-abd5-e26947194a3e/sv-benchmarks/c/product-lines/elevator_spec3_product17.cil.c [2021-11-02 22:05:25,305 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3f78a14d-8b1d-4104-abd5-e26947194a3e/bin/uautomizer-tBqnrhUYjU/data/47224807c/aedd6a75951142fb904bae245fb368d5/FLAG01e1ea2f0 [2021-11-02 22:05:25,393 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3f78a14d-8b1d-4104-abd5-e26947194a3e/bin/uautomizer-tBqnrhUYjU/data/47224807c/aedd6a75951142fb904bae245fb368d5 [2021-11-02 22:05:25,395 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-11-02 22:05:25,397 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-11-02 22:05:25,399 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-11-02 22:05:25,399 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-11-02 22:05:25,403 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-11-02 22:05:25,403 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 02.11 10:05:25" (1/1) ... [2021-11-02 22:05:25,405 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@62428d26 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 10:05:25, skipping insertion in model container [2021-11-02 22:05:25,405 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 02.11 10:05:25" (1/1) ... [2021-11-02 22:05:25,413 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-11-02 22:05:25,485 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-11-02 22:05:25,750 WARN L228 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3f78a14d-8b1d-4104-abd5-e26947194a3e/sv-benchmarks/c/product-lines/elevator_spec3_product17.cil.c[5770,5783] [2021-11-02 22:05:26,155 INFO L206 PostProcessor]: Analyzing one entry point: main [2021-11-02 22:05:26,171 INFO L203 MainTranslator]: Completed pre-run [2021-11-02 22:05:26,205 WARN L228 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3f78a14d-8b1d-4104-abd5-e26947194a3e/sv-benchmarks/c/product-lines/elevator_spec3_product17.cil.c[5770,5783] [2021-11-02 22:05:26,329 INFO L206 PostProcessor]: Analyzing one entry point: main [2021-11-02 22:05:26,355 INFO L208 MainTranslator]: Completed translation [2021-11-02 22:05:26,356 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 10:05:26 WrapperNode [2021-11-02 22:05:26,356 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-11-02 22:05:26,357 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-11-02 22:05:26,357 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-11-02 22:05:26,358 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-11-02 22:05:26,366 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 10:05:26" (1/1) ... [2021-11-02 22:05:26,396 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 10:05:26" (1/1) ... [2021-11-02 22:05:26,785 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-11-02 22:05:26,786 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-11-02 22:05:26,786 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-11-02 22:05:26,787 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-11-02 22:05:26,796 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 10:05:26" (1/1) ... [2021-11-02 22:05:26,796 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 10:05:26" (1/1) ... [2021-11-02 22:05:26,873 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 10:05:26" (1/1) ... [2021-11-02 22:05:26,873 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 10:05:26" (1/1) ... [2021-11-02 22:05:27,078 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 10:05:26" (1/1) ... [2021-11-02 22:05:27,323 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 10:05:26" (1/1) ... [2021-11-02 22:05:27,347 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 10:05:26" (1/1) ... [2021-11-02 22:05:27,414 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-11-02 22:05:27,416 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-11-02 22:05:27,417 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-11-02 22:05:27,417 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-11-02 22:05:27,419 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 10:05:26" (1/1) ... [2021-11-02 22:05:27,429 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-11-02 22:05:27,441 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3f78a14d-8b1d-4104-abd5-e26947194a3e/bin/uautomizer-tBqnrhUYjU/z3 [2021-11-02 22:05:27,461 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3f78a14d-8b1d-4104-abd5-e26947194a3e/bin/uautomizer-tBqnrhUYjU/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-11-02 22:05:27,563 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3f78a14d-8b1d-4104-abd5-e26947194a3e/bin/uautomizer-tBqnrhUYjU/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (1)] Waiting until timeout for monitored process [2021-11-02 22:05:27,593 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2021-11-02 22:05:27,593 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-11-02 22:05:27,593 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-11-02 22:05:27,593 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-11-02 22:05:38,220 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-11-02 22:05:38,221 INFO L299 CfgBuilder]: Removed 1347 assume(true) statements. [2021-11-02 22:05:38,232 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 02.11 10:05:38 BoogieIcfgContainer [2021-11-02 22:05:38,232 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-11-02 22:05:38,234 INFO L113 PluginConnector]: ------------------------BuchiAutomizer---------------------------- [2021-11-02 22:05:38,234 INFO L271 PluginConnector]: Initializing BuchiAutomizer... [2021-11-02 22:05:38,238 INFO L275 PluginConnector]: BuchiAutomizer initialized [2021-11-02 22:05:38,239 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2021-11-02 22:05:38,240 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "CDTParser AST 02.11 10:05:25" (1/3) ... [2021-11-02 22:05:38,241 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@27e44966 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 02.11 10:05:38, skipping insertion in model container [2021-11-02 22:05:38,241 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2021-11-02 22:05:38,242 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 10:05:26" (2/3) ... [2021-11-02 22:05:38,242 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@27e44966 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 02.11 10:05:38, skipping insertion in model container [2021-11-02 22:05:38,242 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2021-11-02 22:05:38,242 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 02.11 10:05:38" (3/3) ... [2021-11-02 22:05:38,244 INFO L389 chiAutomizerObserver]: Analyzing ICFG elevator_spec3_product17.cil.c [2021-11-02 22:05:38,309 INFO L359 BuchiCegarLoop]: Interprodecural is true [2021-11-02 22:05:38,309 INFO L360 BuchiCegarLoop]: Hoare is false [2021-11-02 22:05:38,309 INFO L361 BuchiCegarLoop]: Compute interpolants for ForwardPredicates [2021-11-02 22:05:38,310 INFO L362 BuchiCegarLoop]: Backedges is STRAIGHT_LINE [2021-11-02 22:05:38,310 INFO L363 BuchiCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2021-11-02 22:05:38,310 INFO L364 BuchiCegarLoop]: Difference is false [2021-11-02 22:05:38,310 INFO L365 BuchiCegarLoop]: Minimize is MINIMIZE_SEVPA [2021-11-02 22:05:38,310 INFO L368 BuchiCegarLoop]: ======== Iteration 0==of CEGAR loop == BuchiCegarLoop======== [2021-11-02 22:05:38,437 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 6063 states, 6062 states have (on average 1.8921148135928736) internal successors, (11470), 6062 states have internal predecessors, (11470), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:05:38,593 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1230 [2021-11-02 22:05:38,593 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-11-02 22:05:38,594 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-11-02 22:05:38,617 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-02 22:05:38,617 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-02 22:05:38,617 INFO L425 BuchiCegarLoop]: ======== Iteration 1============ [2021-11-02 22:05:38,636 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 6063 states, 6062 states have (on average 1.8921148135928736) internal successors, (11470), 6062 states have internal predecessors, (11470), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:05:38,729 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1230 [2021-11-02 22:05:38,730 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-11-02 22:05:38,730 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-11-02 22:05:38,739 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-02 22:05:38,739 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-02 22:05:38,751 INFO L791 eck$LassoCheckResult]: Stem: 3770#ULTIMATE.startENTRYtrue #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(2);call write~init~int(48, #t~string4.base, #t~string4.offset, 1);call write~init~int(0, #t~string4.base, 1 + #t~string4.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(31);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(12);call #t~string45.base, #t~string45.offset := #Ultimate.allocOnStack(30);call #t~string46.base, #t~string46.offset := #Ultimate.allocOnStack(9);call #t~string47.base, #t~string47.offset := #Ultimate.allocOnStack(21);call #t~string48.base, #t~string48.offset := #Ultimate.allocOnStack(30);call #t~string49.base, #t~string49.offset := #Ultimate.allocOnStack(9);call #t~string50.base, #t~string50.offset := #Ultimate.allocOnStack(21);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(30);call #t~string55.base, #t~string55.offset := #Ultimate.allocOnStack(9);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(25);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(30);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(9);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(25);call #t~string107.base, #t~string107.offset := #Ultimate.allocOnStack(10);call #t~string109.base, #t~string109.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string109.base, #t~string109.offset, 1);call write~init~int(95, #t~string109.base, 1 + #t~string109.offset, 1);call write~init~int(93, #t~string109.base, 2 + #t~string109.offset, 1);call write~init~int(0, #t~string109.base, 3 + #t~string109.offset, 1);call #t~string111.base, #t~string111.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string111.base, #t~string111.offset, 1);call write~init~int(93, #t~string111.base, 1 + #t~string111.offset, 1);call write~init~int(32, #t~string111.base, 2 + #t~string111.offset, 1);call write~init~int(0, #t~string111.base, 3 + #t~string111.offset, 1);call #t~string113.base, #t~string113.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string113.base, #t~string113.offset, 1);call write~init~int(97, #t~string113.base, 1 + #t~string113.offset, 1);call write~init~int(116, #t~string113.base, 2 + #t~string113.offset, 1);call write~init~int(32, #t~string113.base, 3 + #t~string113.offset, 1);call write~init~int(0, #t~string113.base, 4 + #t~string113.offset, 1);call #t~string115.base, #t~string115.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string115.base, #t~string115.offset, 1);call write~init~int(105, #t~string115.base, 1 + #t~string115.offset, 1);call write~init~int(0, #t~string115.base, 2 + #t~string115.offset, 1);call #t~string117.base, #t~string117.offset := #Ultimate.allocOnStack(10);call #t~string119.base, #t~string119.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string119.base, #t~string119.offset, 1);call write~init~int(112, #t~string119.base, 1 + #t~string119.offset, 1);call write~init~int(0, #t~string119.base, 2 + #t~string119.offset, 1);call #t~string121.base, #t~string121.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string121.base, #t~string121.offset, 1);call write~init~int(111, #t~string121.base, 1 + #t~string121.offset, 1);call write~init~int(119, #t~string121.base, 2 + #t~string121.offset, 1);call write~init~int(110, #t~string121.base, 3 + #t~string121.offset, 1);call write~init~int(0, #t~string121.base, 4 + #t~string121.offset, 1);call #t~string123.base, #t~string123.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string123.base, #t~string123.offset, 1);call write~init~int(73, #t~string123.base, 1 + #t~string123.offset, 1);call write~init~int(76, #t~string123.base, 2 + #t~string123.offset, 1);call write~init~int(95, #t~string123.base, 3 + #t~string123.offset, 1);call write~init~int(112, #t~string123.base, 4 + #t~string123.offset, 1);call write~init~int(58, #t~string123.base, 5 + #t~string123.offset, 1);call write~init~int(0, #t~string123.base, 6 + #t~string123.offset, 1);call #t~string125.base, #t~string125.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string125.base, #t~string125.offset, 1);call write~init~int(37, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(105, #t~string125.base, 2 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 3 + #t~string125.offset, 1);call #t~string127.base, #t~string127.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string127.base, #t~string127.offset, 1);call write~init~int(37, #t~string127.base, 1 + #t~string127.offset, 1);call write~init~int(105, #t~string127.base, 2 + #t~string127.offset, 1);call write~init~int(0, #t~string127.base, 3 + #t~string127.offset, 1);call #t~string129.base, #t~string129.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string129.base, #t~string129.offset, 1);call write~init~int(37, #t~string129.base, 1 + #t~string129.offset, 1);call write~init~int(105, #t~string129.base, 2 + #t~string129.offset, 1);call write~init~int(0, #t~string129.base, 3 + #t~string129.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string131.base, #t~string131.offset, 1);call write~init~int(37, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string133.base, #t~string133.offset, 1);call write~init~int(37, #t~string133.base, 1 + #t~string133.offset, 1);call write~init~int(105, #t~string133.base, 2 + #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 3 + #t~string133.offset, 1);call #t~string135.base, #t~string135.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string135.base, #t~string135.offset, 1);call write~init~int(70, #t~string135.base, 1 + #t~string135.offset, 1);call write~init~int(95, #t~string135.base, 2 + #t~string135.offset, 1);call write~init~int(112, #t~string135.base, 3 + #t~string135.offset, 1);call write~init~int(58, #t~string135.base, 4 + #t~string135.offset, 1);call write~init~int(0, #t~string135.base, 5 + #t~string135.offset, 1);call #t~string138.base, #t~string138.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string138.base, #t~string138.offset, 1);call write~init~int(37, #t~string138.base, 1 + #t~string138.offset, 1);call write~init~int(105, #t~string138.base, 2 + #t~string138.offset, 1);call write~init~int(0, #t~string138.base, 3 + #t~string138.offset, 1);call #t~string141.base, #t~string141.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string141.base, #t~string141.offset, 1);call write~init~int(37, #t~string141.base, 1 + #t~string141.offset, 1);call write~init~int(105, #t~string141.base, 2 + #t~string141.offset, 1);call write~init~int(0, #t~string141.base, 3 + #t~string141.offset, 1);call #t~string144.base, #t~string144.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string144.base, #t~string144.offset, 1);call write~init~int(37, #t~string144.base, 1 + #t~string144.offset, 1);call write~init~int(105, #t~string144.base, 2 + #t~string144.offset, 1);call write~init~int(0, #t~string144.base, 3 + #t~string144.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string147.base, #t~string147.offset, 1);call write~init~int(37, #t~string147.base, 1 + #t~string147.offset, 1);call write~init~int(105, #t~string147.base, 2 + #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 3 + #t~string147.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string150.base, #t~string150.offset, 1);call write~init~int(37, #t~string150.base, 1 + #t~string150.offset, 1);call write~init~int(105, #t~string150.base, 2 + #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 3 + #t~string150.offset, 1);call #t~string152.base, #t~string152.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string152.base, #t~string152.offset, 1);call write~init~int(0, #t~string152.base, 1 + #t~string152.offset, 1);~weight~0 := 0;~maximumWeight~0 := 100;~expectedDirection~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 5940#L-1true havoc main_#res;havoc main_#t~ret167, main_~retValue_acc~20, main_~tmp~25;havoc main_~retValue_acc~20;havoc main_~tmp~25; 3638#L3336true havoc valid_product_#res;havoc valid_product_~retValue_acc~25;havoc valid_product_~retValue_acc~25;valid_product_~retValue_acc~25 := 1;valid_product_#res := valid_product_~retValue_acc~25; 2110#L3344true main_#t~ret167 := valid_product_#res;main_~tmp~25 := main_#t~ret167;havoc main_#t~ret167; 2564#L3182true assume 0 != main_~tmp~25; 2693#L3156true ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 3966#L448true havoc bobCall_#t~ret155, bobCall_~tmp~17;havoc bobCall_~tmp~17;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~22;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~22; 76#L3239true assume 0 == getOrigin_~person;getOrigin_~retValue_acc~22 := 4;getOrigin_#res := getOrigin_~retValue_acc~22; 2694#L3264true bobCall_#t~ret155 := getOrigin_#res;bobCall_~tmp~17 := bobCall_#t~ret155;havoc bobCall_#t~ret155;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~17;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 701#L726true assume 0 == initPersonOnFloor_~floor; 3613#L727true assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 2737#L834-1true callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 1160#L518true assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 1725#L530-2true havoc timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_~tmp~15, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_#t~ret12, __utac_acc__Specification3_spec__1_#t~ret13, __utac_acc__Specification3_spec__1_#t~ret14, __utac_acc__Specification3_spec__1_#t~ret15, __utac_acc__Specification3_spec__1_#t~ret16, __utac_acc__Specification3_spec__1_#t~ret17, __utac_acc__Specification3_spec__1_#t~ret18, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 4367#L1626true __utac_acc__Specification3_spec__1_#t~ret7 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret7;havoc __utac_acc__Specification3_spec__1_#t~ret7;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 322#L1678true __utac_acc__Specification3_spec__1_#t~ret8 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret8;havoc __utac_acc__Specification3_spec__1_#t~ret8; 1449#L97true assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 3752#L98true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 4529#L1643true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 223#L1664true __utac_acc__Specification3_spec__1_#t~ret9 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret9;havoc __utac_acc__Specification3_spec__1_#t~ret9; 462#L102true assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 4203#L203true havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret82, stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1349#L455true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1793#L482true stopRequestedAtCurrentFloor_#t~ret82 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret82;havoc stopRequestedAtCurrentFloor_#t~ret82; 1496#L2239true assume 0 != stopRequestedAtCurrentFloor_~tmp___0~6;stopRequestedAtCurrentFloor_~retValue_acc~16 := 1;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 2705#L2251true timeShift_#t~ret96 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret96;havoc timeShift_#t~ret96; 247#L2388true assume !(0 != timeShift_~tmp___9~3); 1395#L2479true assume !(1 == ~doorState~0); 4075#L2479-2true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~11, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~11;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 2698#L1830true assume !(1 == stopRequestedInDirection_~dir); 2544#L1999true assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 3116#L2152true timeShift_#t~ret103 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret103;havoc timeShift_#t~ret103; 4778#L2487true assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret81, continueInDirection_~dir, continueInDirection_~tmp~12;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~12;~currentHeading~0 := continueInDirection_~dir; 3139#L2206true assume !(1 == ~currentHeading~0); 1906#L2216true assume !(0 == ~currentFloorID~0); 5558#L2216-2true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 69#L2222-5true havoc __utac_acc__Specification3_spec__2_#t~ret19, __utac_acc__Specification3_spec__2_#t~ret20, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 5818#L228true assume !(-1 == ~expectedDirection~0); 3625#L240true assume !(1 == ~expectedDirection~0); 5719#L241true havoc timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_~tmp~15, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_#t~ret12, __utac_acc__Specification3_spec__1_#t~ret13, __utac_acc__Specification3_spec__1_#t~ret14, __utac_acc__Specification3_spec__1_#t~ret15, __utac_acc__Specification3_spec__1_#t~ret16, __utac_acc__Specification3_spec__1_#t~ret17, __utac_acc__Specification3_spec__1_#t~ret18, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 2367#L1626-1true __utac_acc__Specification3_spec__1_#t~ret7 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret7;havoc __utac_acc__Specification3_spec__1_#t~ret7;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 3164#L1678-3true __utac_acc__Specification3_spec__1_#t~ret8 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret8;havoc __utac_acc__Specification3_spec__1_#t~ret8; 2986#L97-1true assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 3614#L98-1true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 4969#L1643-11true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 2481#L1664-11true __utac_acc__Specification3_spec__1_#t~ret9 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret9;havoc __utac_acc__Specification3_spec__1_#t~ret9; 3851#L102-2true assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 1686#L203-1true havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret82, stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 3362#L455-21true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1754#L482-21true stopRequestedAtCurrentFloor_#t~ret82 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret82;havoc stopRequestedAtCurrentFloor_#t~ret82; 149#L2239-1true assume 0 != stopRequestedAtCurrentFloor_~tmp___0~6;stopRequestedAtCurrentFloor_~retValue_acc~16 := 1;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 4401#L2251-1true timeShift_#t~ret96 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret96;havoc timeShift_#t~ret96; 1149#L2388-1true assume !(0 != timeShift_~tmp___9~3); 4579#L2479-3true assume !(1 == ~doorState~0); 3516#L2479-5true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~11, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~11;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 1112#L1830-2true assume !(1 == stopRequestedInDirection_~dir); 4181#L1999-2true assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 2018#L2152-2true timeShift_#t~ret103 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret103;havoc timeShift_#t~ret103; 3620#L2487-1true assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret81, continueInDirection_~dir, continueInDirection_~tmp~12;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~12;~currentHeading~0 := continueInDirection_~dir; 3834#L2206-3true assume !(1 == ~currentHeading~0); 1029#L2216-9true assume !(0 == ~currentFloorID~0); 331#L2216-11true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 3354#L2222-11true havoc __utac_acc__Specification3_spec__2_#t~ret19, __utac_acc__Specification3_spec__2_#t~ret20, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 1612#L228-1true assume !(-1 == ~expectedDirection~0); 3951#L240-1true assume !(1 == ~expectedDirection~0); 4710#L241-1true havoc timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_~tmp~15, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_#t~ret12, __utac_acc__Specification3_spec__1_#t~ret13, __utac_acc__Specification3_spec__1_#t~ret14, __utac_acc__Specification3_spec__1_#t~ret15, __utac_acc__Specification3_spec__1_#t~ret16, __utac_acc__Specification3_spec__1_#t~ret17, __utac_acc__Specification3_spec__1_#t~ret18, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 6011#L1626-2true __utac_acc__Specification3_spec__1_#t~ret7 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret7;havoc __utac_acc__Specification3_spec__1_#t~ret7;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 3987#L1678-6true __utac_acc__Specification3_spec__1_#t~ret8 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret8;havoc __utac_acc__Specification3_spec__1_#t~ret8; 5864#L97-2true assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 699#L159-2true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 3685#L1643-27true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 4918#L1664-27true __utac_acc__Specification3_spec__1_#t~ret14 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret14;havoc __utac_acc__Specification3_spec__1_#t~ret14; 2077#L163-4true assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 1804#L203-2true havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret82, stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 2561#L455-42true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 4204#L482-42true stopRequestedAtCurrentFloor_#t~ret82 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret82;havoc stopRequestedAtCurrentFloor_#t~ret82; 152#L2239-2true assume 0 != stopRequestedAtCurrentFloor_~tmp___0~6;stopRequestedAtCurrentFloor_~retValue_acc~16 := 1;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 1182#L2251-2true timeShift_#t~ret96 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret96;havoc timeShift_#t~ret96; 3930#L2388-2true assume !(0 != timeShift_~tmp___9~3); 2091#L2479-6true assume 1 == ~doorState~0;~doorState~0 := 0; 3978#L2479-8true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~11, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~11;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 4153#L1830-4true assume !(1 == stopRequestedInDirection_~dir); 1405#L1999-4true assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 5254#L2152-4true timeShift_#t~ret103 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret103;havoc timeShift_#t~ret103; 5166#L2487-2true assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret81, continueInDirection_~dir, continueInDirection_~tmp~12;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~12;~currentHeading~0 := continueInDirection_~dir; 3390#L2206-6true assume !(1 == ~currentHeading~0); 5891#L2216-18true assume !(0 == ~currentFloorID~0); 1374#L2216-20true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1328#L2222-17true havoc __utac_acc__Specification3_spec__2_#t~ret19, __utac_acc__Specification3_spec__2_#t~ret20, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 1256#L228-2true assume !(-1 == ~expectedDirection~0); 461#L240-2true assume !(1 == ~expectedDirection~0); 2728#L241-2true havoc bobCall_#t~ret155, bobCall_~tmp~17;havoc bobCall_~tmp~17;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~22;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~22; 3360#L3239-1true assume 0 == getOrigin_~person;getOrigin_~retValue_acc~22 := 4;getOrigin_#res := getOrigin_~retValue_acc~22; 3265#L3264-1true bobCall_#t~ret155 := getOrigin_#res;bobCall_~tmp~17 := bobCall_#t~ret155;havoc bobCall_#t~ret155;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~17;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 5604#L726-1true assume 0 == initPersonOnFloor_~floor; 3167#L727-2true assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 3416#L834-3true callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 5850#L518-2true assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 4106#L530-5true havoc cleanup_#t~ret161, cleanup_#t~ret162, cleanup_~i~3, cleanup_~tmp~23, cleanup_~tmp___0~10, cleanup_~__cil_tmp4~2;havoc cleanup_~i~3;havoc cleanup_~tmp~23;havoc cleanup_~tmp___0~10;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_~tmp~15, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_#t~ret12, __utac_acc__Specification3_spec__1_#t~ret13, __utac_acc__Specification3_spec__1_#t~ret14, __utac_acc__Specification3_spec__1_#t~ret15, __utac_acc__Specification3_spec__1_#t~ret16, __utac_acc__Specification3_spec__1_#t~ret17, __utac_acc__Specification3_spec__1_#t~ret18, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 4497#L1626-3true __utac_acc__Specification3_spec__1_#t~ret7 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret7;havoc __utac_acc__Specification3_spec__1_#t~ret7;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 5917#L1678-9true __utac_acc__Specification3_spec__1_#t~ret8 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret8;havoc __utac_acc__Specification3_spec__1_#t~ret8; 2729#L97-3true assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 909#L98-3true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 2668#L1643-33true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 4677#L1664-33true __utac_acc__Specification3_spec__1_#t~ret9 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret9;havoc __utac_acc__Specification3_spec__1_#t~ret9; 3818#L102-6true assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 3464#L203-3true havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret82, stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 4373#L455-63true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 2804#L482-63true stopRequestedAtCurrentFloor_#t~ret82 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret82;havoc stopRequestedAtCurrentFloor_#t~ret82; 751#L2239-3true assume 0 != stopRequestedAtCurrentFloor_~tmp___0~6;stopRequestedAtCurrentFloor_~retValue_acc~16 := 1;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 5135#L2251-3true timeShift_#t~ret96 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret96;havoc timeShift_#t~ret96; 5730#L2388-3true assume !(0 != timeShift_~tmp___9~3); 4030#L2479-9true assume !(1 == ~doorState~0); 4177#L2479-11true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~11, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~11;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 5252#L1830-6true assume !(1 == stopRequestedInDirection_~dir); 2967#L1999-6true assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 4872#L2152-6true timeShift_#t~ret103 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret103;havoc timeShift_#t~ret103; 1318#L2487-3true assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret81, continueInDirection_~dir, continueInDirection_~tmp~12;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~12;~currentHeading~0 := continueInDirection_~dir; 3081#L2206-9true assume !(1 == ~currentHeading~0); 1464#L2216-27true assume !(0 == ~currentFloorID~0); 2446#L2216-29true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 608#L2222-23true havoc __utac_acc__Specification3_spec__2_#t~ret19, __utac_acc__Specification3_spec__2_#t~ret20, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 721#L228-3true assume !(-1 == ~expectedDirection~0); 3429#L240-3true assume !(1 == ~expectedDirection~0); 3148#L241-3true cleanup_~i~3 := 0; 5986#L2988-2true [2021-11-02 22:05:38,754 INFO L793 eck$LassoCheckResult]: Loop: 5986#L2988-2true assume !false; 4162#L2989true cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 1933#L2992true assume cleanup_~i~3 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~6;havoc isBlocked_~retValue_acc~6;isBlocked_~retValue_acc~6 := 0;isBlocked_#res := isBlocked_~retValue_acc~6; 3490#L1473true cleanup_#t~ret161 := isBlocked_#res;cleanup_~tmp___0~10 := cleanup_#t~ret161;havoc cleanup_#t~ret161; 3674#L2996true assume 1 != cleanup_~tmp___0~10; 5213#L2996-1true havoc isIdle_#res;havoc isIdle_#t~ret69, isIdle_~retValue_acc~13, isIdle_~tmp~10;havoc isIdle_~retValue_acc~13;havoc isIdle_~tmp~10;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret64, anyStopRequested_#t~ret65, anyStopRequested_#t~ret66, anyStopRequested_#t~ret67, anyStopRequested_#t~ret68, anyStopRequested_~retValue_acc~12, anyStopRequested_~tmp~9, anyStopRequested_~tmp___0~4, anyStopRequested_~tmp___1~3, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~12;havoc anyStopRequested_~tmp~9;havoc anyStopRequested_~tmp___0~4;havoc anyStopRequested_~tmp___1~3;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~1;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 2105#L455-84true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 5629#L482-84true anyStopRequested_#t~ret64 := isFloorCalling_#res;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret64;havoc anyStopRequested_#t~ret64; 2810#L1734true assume 0 != anyStopRequested_~tmp___3~1;anyStopRequested_~retValue_acc~12 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~12; 2652#L1798true isIdle_#t~ret69 := anyStopRequested_#res;isIdle_~tmp~10 := isIdle_#t~ret69;havoc isIdle_#t~ret69;isIdle_~retValue_acc~13 := (if 0 == isIdle_~tmp~10 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~13; 5290#L1811true cleanup_#t~ret162 := isIdle_#res;cleanup_~tmp~23 := cleanup_#t~ret162;havoc cleanup_#t~ret162; 4379#L3008true assume !(0 != cleanup_~tmp~23);havoc timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_~tmp~15, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_#t~ret12, __utac_acc__Specification3_spec__1_#t~ret13, __utac_acc__Specification3_spec__1_#t~ret14, __utac_acc__Specification3_spec__1_#t~ret15, __utac_acc__Specification3_spec__1_#t~ret16, __utac_acc__Specification3_spec__1_#t~ret17, __utac_acc__Specification3_spec__1_#t~ret18, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 936#L1626-4true __utac_acc__Specification3_spec__1_#t~ret7 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret7;havoc __utac_acc__Specification3_spec__1_#t~ret7;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 5194#L1678-12true __utac_acc__Specification3_spec__1_#t~ret8 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret8;havoc __utac_acc__Specification3_spec__1_#t~ret8; 5782#L97-4true assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 680#L98-4true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 3426#L1643-44true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 3734#L1664-44true __utac_acc__Specification3_spec__1_#t~ret9 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret9;havoc __utac_acc__Specification3_spec__1_#t~ret9; 1137#L102-8true assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 3699#L203-4true havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret82, stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 4234#L455-89true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 2276#L482-89true stopRequestedAtCurrentFloor_#t~ret82 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret82;havoc stopRequestedAtCurrentFloor_#t~ret82; 5047#L2239-4true assume 0 != stopRequestedAtCurrentFloor_~tmp___0~6;stopRequestedAtCurrentFloor_~retValue_acc~16 := 1;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 4633#L2251-4true timeShift_#t~ret96 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret96;havoc timeShift_#t~ret96; 1263#L2388-4true assume !(0 != timeShift_~tmp___9~3); 3749#L2479-12true assume 1 == ~doorState~0;~doorState~0 := 0; 3373#L2479-14true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~11, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~11;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 4744#L1830-8true assume !(1 == stopRequestedInDirection_~dir); 4270#L1999-8true assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 3932#L2152-8true timeShift_#t~ret103 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret103;havoc timeShift_#t~ret103; 784#L2487-4true assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret81, continueInDirection_~dir, continueInDirection_~tmp~12;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~12;~currentHeading~0 := continueInDirection_~dir; 2808#L2206-12true assume !(1 == ~currentHeading~0); 5798#L2216-36true assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 4606#L2216-38true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 4522#L2222-29true havoc __utac_acc__Specification3_spec__2_#t~ret19, __utac_acc__Specification3_spec__2_#t~ret20, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 56#L228-4true assume !(-1 == ~expectedDirection~0); 2758#L240-4true assume !(1 == ~expectedDirection~0); 2186#L241-4true cleanup_~i~3 := 1 + cleanup_~i~3; 5986#L2988-2true [2021-11-02 22:05:38,760 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-02 22:05:38,761 INFO L85 PathProgramCache]: Analyzing trace with hash 862631770, now seen corresponding path program 1 times [2021-11-02 22:05:38,771 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-02 22:05:38,772 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [269373442] [2021-11-02 22:05:38,772 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-02 22:05:38,773 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-02 22:05:39,073 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-02 22:05:39,266 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-02 22:05:39,268 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-02 22:05:39,268 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [269373442] [2021-11-02 22:05:39,270 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [269373442] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-02 22:05:39,271 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-02 22:05:39,271 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-11-02 22:05:39,273 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [674395093] [2021-11-02 22:05:39,293 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-11-02 22:05:39,304 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-02 22:05:39,304 INFO L85 PathProgramCache]: Analyzing trace with hash -1356264496, now seen corresponding path program 1 times [2021-11-02 22:05:39,305 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-02 22:05:39,305 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1444673275] [2021-11-02 22:05:39,305 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-02 22:05:39,306 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-02 22:05:39,330 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-02 22:05:39,421 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-02 22:05:39,422 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-02 22:05:39,423 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1444673275] [2021-11-02 22:05:39,423 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1444673275] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-02 22:05:39,424 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-02 22:05:39,424 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-11-02 22:05:39,424 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [227067780] [2021-11-02 22:05:39,425 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-11-02 22:05:39,426 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-02 22:05:39,442 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-11-02 22:05:39,443 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-11-02 22:05:39,464 INFO L87 Difference]: Start difference. First operand has 6063 states, 6062 states have (on average 1.8921148135928736) internal successors, (11470), 6062 states have internal predecessors, (11470), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 6 states, 6 states have (on average 6.333333333333333) internal successors, (38), 6 states have internal predecessors, (38), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:05:46,135 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-02 22:05:46,135 INFO L93 Difference]: Finished difference Result 15243 states and 28534 transitions. [2021-11-02 22:05:46,136 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2021-11-02 22:05:46,137 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 15243 states and 28534 transitions. [2021-11-02 22:05:46,357 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 3523 [2021-11-02 22:05:46,534 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 15243 states to 15173 states and 28453 transitions. [2021-11-02 22:05:46,536 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 15173 [2021-11-02 22:05:46,561 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 15173 [2021-11-02 22:05:46,562 INFO L73 IsDeterministic]: Start isDeterministic. Operand 15173 states and 28453 transitions. [2021-11-02 22:05:46,606 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-11-02 22:05:46,607 INFO L681 BuchiCegarLoop]: Abstraction has 15173 states and 28453 transitions. [2021-11-02 22:05:46,646 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 15173 states and 28453 transitions. [2021-11-02 22:05:47,018 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 15173 to 10107. [2021-11-02 22:05:47,052 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10107 states, 10107 states have (on average 1.8763233402592263) internal successors, (18964), 10106 states have internal predecessors, (18964), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:05:47,117 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10107 states to 10107 states and 18964 transitions. [2021-11-02 22:05:47,118 INFO L704 BuchiCegarLoop]: Abstraction has 10107 states and 18964 transitions. [2021-11-02 22:05:47,119 INFO L587 BuchiCegarLoop]: Abstraction has 10107 states and 18964 transitions. [2021-11-02 22:05:47,119 INFO L425 BuchiCegarLoop]: ======== Iteration 2============ [2021-11-02 22:05:47,120 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 10107 states and 18964 transitions. [2021-11-02 22:05:47,197 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 2265 [2021-11-02 22:05:47,198 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-11-02 22:05:47,198 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-11-02 22:05:47,213 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-02 22:05:47,213 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-02 22:05:47,215 INFO L791 eck$LassoCheckResult]: Stem: 26733#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(2);call write~init~int(48, #t~string4.base, #t~string4.offset, 1);call write~init~int(0, #t~string4.base, 1 + #t~string4.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(31);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(12);call #t~string45.base, #t~string45.offset := #Ultimate.allocOnStack(30);call #t~string46.base, #t~string46.offset := #Ultimate.allocOnStack(9);call #t~string47.base, #t~string47.offset := #Ultimate.allocOnStack(21);call #t~string48.base, #t~string48.offset := #Ultimate.allocOnStack(30);call #t~string49.base, #t~string49.offset := #Ultimate.allocOnStack(9);call #t~string50.base, #t~string50.offset := #Ultimate.allocOnStack(21);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(30);call #t~string55.base, #t~string55.offset := #Ultimate.allocOnStack(9);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(25);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(30);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(9);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(25);call #t~string107.base, #t~string107.offset := #Ultimate.allocOnStack(10);call #t~string109.base, #t~string109.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string109.base, #t~string109.offset, 1);call write~init~int(95, #t~string109.base, 1 + #t~string109.offset, 1);call write~init~int(93, #t~string109.base, 2 + #t~string109.offset, 1);call write~init~int(0, #t~string109.base, 3 + #t~string109.offset, 1);call #t~string111.base, #t~string111.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string111.base, #t~string111.offset, 1);call write~init~int(93, #t~string111.base, 1 + #t~string111.offset, 1);call write~init~int(32, #t~string111.base, 2 + #t~string111.offset, 1);call write~init~int(0, #t~string111.base, 3 + #t~string111.offset, 1);call #t~string113.base, #t~string113.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string113.base, #t~string113.offset, 1);call write~init~int(97, #t~string113.base, 1 + #t~string113.offset, 1);call write~init~int(116, #t~string113.base, 2 + #t~string113.offset, 1);call write~init~int(32, #t~string113.base, 3 + #t~string113.offset, 1);call write~init~int(0, #t~string113.base, 4 + #t~string113.offset, 1);call #t~string115.base, #t~string115.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string115.base, #t~string115.offset, 1);call write~init~int(105, #t~string115.base, 1 + #t~string115.offset, 1);call write~init~int(0, #t~string115.base, 2 + #t~string115.offset, 1);call #t~string117.base, #t~string117.offset := #Ultimate.allocOnStack(10);call #t~string119.base, #t~string119.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string119.base, #t~string119.offset, 1);call write~init~int(112, #t~string119.base, 1 + #t~string119.offset, 1);call write~init~int(0, #t~string119.base, 2 + #t~string119.offset, 1);call #t~string121.base, #t~string121.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string121.base, #t~string121.offset, 1);call write~init~int(111, #t~string121.base, 1 + #t~string121.offset, 1);call write~init~int(119, #t~string121.base, 2 + #t~string121.offset, 1);call write~init~int(110, #t~string121.base, 3 + #t~string121.offset, 1);call write~init~int(0, #t~string121.base, 4 + #t~string121.offset, 1);call #t~string123.base, #t~string123.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string123.base, #t~string123.offset, 1);call write~init~int(73, #t~string123.base, 1 + #t~string123.offset, 1);call write~init~int(76, #t~string123.base, 2 + #t~string123.offset, 1);call write~init~int(95, #t~string123.base, 3 + #t~string123.offset, 1);call write~init~int(112, #t~string123.base, 4 + #t~string123.offset, 1);call write~init~int(58, #t~string123.base, 5 + #t~string123.offset, 1);call write~init~int(0, #t~string123.base, 6 + #t~string123.offset, 1);call #t~string125.base, #t~string125.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string125.base, #t~string125.offset, 1);call write~init~int(37, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(105, #t~string125.base, 2 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 3 + #t~string125.offset, 1);call #t~string127.base, #t~string127.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string127.base, #t~string127.offset, 1);call write~init~int(37, #t~string127.base, 1 + #t~string127.offset, 1);call write~init~int(105, #t~string127.base, 2 + #t~string127.offset, 1);call write~init~int(0, #t~string127.base, 3 + #t~string127.offset, 1);call #t~string129.base, #t~string129.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string129.base, #t~string129.offset, 1);call write~init~int(37, #t~string129.base, 1 + #t~string129.offset, 1);call write~init~int(105, #t~string129.base, 2 + #t~string129.offset, 1);call write~init~int(0, #t~string129.base, 3 + #t~string129.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string131.base, #t~string131.offset, 1);call write~init~int(37, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string133.base, #t~string133.offset, 1);call write~init~int(37, #t~string133.base, 1 + #t~string133.offset, 1);call write~init~int(105, #t~string133.base, 2 + #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 3 + #t~string133.offset, 1);call #t~string135.base, #t~string135.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string135.base, #t~string135.offset, 1);call write~init~int(70, #t~string135.base, 1 + #t~string135.offset, 1);call write~init~int(95, #t~string135.base, 2 + #t~string135.offset, 1);call write~init~int(112, #t~string135.base, 3 + #t~string135.offset, 1);call write~init~int(58, #t~string135.base, 4 + #t~string135.offset, 1);call write~init~int(0, #t~string135.base, 5 + #t~string135.offset, 1);call #t~string138.base, #t~string138.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string138.base, #t~string138.offset, 1);call write~init~int(37, #t~string138.base, 1 + #t~string138.offset, 1);call write~init~int(105, #t~string138.base, 2 + #t~string138.offset, 1);call write~init~int(0, #t~string138.base, 3 + #t~string138.offset, 1);call #t~string141.base, #t~string141.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string141.base, #t~string141.offset, 1);call write~init~int(37, #t~string141.base, 1 + #t~string141.offset, 1);call write~init~int(105, #t~string141.base, 2 + #t~string141.offset, 1);call write~init~int(0, #t~string141.base, 3 + #t~string141.offset, 1);call #t~string144.base, #t~string144.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string144.base, #t~string144.offset, 1);call write~init~int(37, #t~string144.base, 1 + #t~string144.offset, 1);call write~init~int(105, #t~string144.base, 2 + #t~string144.offset, 1);call write~init~int(0, #t~string144.base, 3 + #t~string144.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string147.base, #t~string147.offset, 1);call write~init~int(37, #t~string147.base, 1 + #t~string147.offset, 1);call write~init~int(105, #t~string147.base, 2 + #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 3 + #t~string147.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string150.base, #t~string150.offset, 1);call write~init~int(37, #t~string150.base, 1 + #t~string150.offset, 1);call write~init~int(105, #t~string150.base, 2 + #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 3 + #t~string150.offset, 1);call #t~string152.base, #t~string152.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string152.base, #t~string152.offset, 1);call write~init~int(0, #t~string152.base, 1 + #t~string152.offset, 1);~weight~0 := 0;~maximumWeight~0 := 100;~expectedDirection~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 26734#L-1 havoc main_#res;havoc main_#t~ret167, main_~retValue_acc~20, main_~tmp~25;havoc main_~retValue_acc~20;havoc main_~tmp~25; 26641#L3336 havoc valid_product_#res;havoc valid_product_~retValue_acc~25;havoc valid_product_~retValue_acc~25;valid_product_~retValue_acc~25 := 1;valid_product_#res := valid_product_~retValue_acc~25; 25131#L3344 main_#t~ret167 := valid_product_#res;main_~tmp~25 := main_#t~ret167;havoc main_#t~ret167; 25132#L3182 assume 0 != main_~tmp~25; 25662#L3156 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 25787#L448 havoc bobCall_#t~ret155, bobCall_~tmp~17;havoc bobCall_~tmp~17;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~22;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~22; 21527#L3239 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~22 := 4;getOrigin_#res := getOrigin_~retValue_acc~22; 21528#L3264 bobCall_#t~ret155 := getOrigin_#res;bobCall_~tmp~17 := bobCall_#t~ret155;havoc bobCall_#t~ret155;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~17;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 22910#L726 assume 0 == initPersonOnFloor_~floor; 22911#L727 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 21614#L834-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 23751#L518 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 23752#L530-2 havoc timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_~tmp~15, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_#t~ret12, __utac_acc__Specification3_spec__1_#t~ret13, __utac_acc__Specification3_spec__1_#t~ret14, __utac_acc__Specification3_spec__1_#t~ret15, __utac_acc__Specification3_spec__1_#t~ret16, __utac_acc__Specification3_spec__1_#t~ret17, __utac_acc__Specification3_spec__1_#t~ret18, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 24626#L1626 __utac_acc__Specification3_spec__1_#t~ret7 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret7;havoc __utac_acc__Specification3_spec__1_#t~ret7;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 22127#L1678 __utac_acc__Specification3_spec__1_#t~ret8 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret8;havoc __utac_acc__Specification3_spec__1_#t~ret8; 22128#L97 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 24229#L98 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 26723#L1643 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 21893#L1664 __utac_acc__Specification3_spec__1_#t~ret9 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret9;havoc __utac_acc__Specification3_spec__1_#t~ret9; 21894#L102 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 22437#L203 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret82, stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 24056#L455 assume !(0 == isFloorCalling_~floorID); 24057#L459 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 24038#L482 stopRequestedAtCurrentFloor_#t~ret82 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret82;havoc stopRequestedAtCurrentFloor_#t~ret82; 24297#L2239 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~6;stopRequestedAtCurrentFloor_~retValue_acc~16 := 1;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 24298#L2251 timeShift_#t~ret96 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret96;havoc timeShift_#t~ret96; 21952#L2388 assume !(0 != timeShift_~tmp___9~3); 21954#L2479 assume !(1 == ~doorState~0); 24140#L2479-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~11, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~11;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 25791#L1830 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 25344#L1029 stopRequestedInDirection_#t~ret70 := isTopFloor_#res;stopRequestedInDirection_~tmp~11 := stopRequestedInDirection_#t~ret70;havoc stopRequestedInDirection_#t~ret70; 25345#L1834 assume 0 != stopRequestedInDirection_~tmp~11;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 22191#L2152 timeShift_#t~ret103 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret103;havoc timeShift_#t~ret103; 26225#L2487 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret81, continueInDirection_~dir, continueInDirection_~tmp~12;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~12;~currentHeading~0 := continueInDirection_~dir; 26240#L2206 assume !(1 == ~currentHeading~0); 24867#L2216 assume !(0 == ~currentFloorID~0); 24868#L2216-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 21513#L2222-5 havoc __utac_acc__Specification3_spec__2_#t~ret19, __utac_acc__Specification3_spec__2_#t~ret20, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 21514#L228 assume !(-1 == ~expectedDirection~0); 26602#L240 assume !(1 == ~expectedDirection~0); 26487#L241 havoc timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_~tmp~15, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_#t~ret12, __utac_acc__Specification3_spec__1_#t~ret13, __utac_acc__Specification3_spec__1_#t~ret14, __utac_acc__Specification3_spec__1_#t~ret15, __utac_acc__Specification3_spec__1_#t~ret16, __utac_acc__Specification3_spec__1_#t~ret17, __utac_acc__Specification3_spec__1_#t~ret18, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 25450#L1626-1 __utac_acc__Specification3_spec__1_#t~ret7 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret7;havoc __utac_acc__Specification3_spec__1_#t~ret7;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 25451#L1678-3 __utac_acc__Specification3_spec__1_#t~ret8 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret8;havoc __utac_acc__Specification3_spec__1_#t~ret8; 26267#L97-1 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 31132#L98-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0); 31142#L108-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 1;buttonForFloorIsPressed_#in~floorID := 1;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 31124#L1643-12 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 31122#L1664-12 __utac_acc__Specification3_spec__1_#t~ret10 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___3~0 := __utac_acc__Specification3_spec__1_#t~ret10;havoc __utac_acc__Specification3_spec__1_#t~ret10; 31120#L113-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___3~0;~expectedDirection~0 := 1; 24578#L203-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret82, stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 24579#L455-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 22370#L482-21 stopRequestedAtCurrentFloor_#t~ret82 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret82;havoc stopRequestedAtCurrentFloor_#t~ret82; 21718#L2239-1 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~6;stopRequestedAtCurrentFloor_~retValue_acc~16 := 1;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 21719#L2251-1 timeShift_#t~ret96 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret96;havoc timeShift_#t~ret96; 23733#L2388-1 assume !(0 != timeShift_~tmp___9~3); 23735#L2479-3 assume !(1 == ~doorState~0); 26551#L2479-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~11, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~11;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 23668#L1830-2 assume !(1 == stopRequestedInDirection_~dir); 23669#L1999-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 22307#L2152-2 timeShift_#t~ret103 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret103;havoc timeShift_#t~ret103; 26619#L2487-1 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret81, continueInDirection_~dir, continueInDirection_~tmp~12;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~12;~currentHeading~0 := continueInDirection_~dir; 26621#L2206-3 assume !(1 == ~currentHeading~0); 31353#L2216-9 assume !(0 == ~currentFloorID~0); 22146#L2216-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 22147#L2222-11 havoc __utac_acc__Specification3_spec__2_#t~ret19, __utac_acc__Specification3_spec__2_#t~ret20, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 24477#L228-1 assume !(-1 == ~expectedDirection~0); 24478#L240-1 assume !(1 == ~expectedDirection~0); 22519#L241-1 havoc timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_~tmp~15, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_#t~ret12, __utac_acc__Specification3_spec__1_#t~ret13, __utac_acc__Specification3_spec__1_#t~ret14, __utac_acc__Specification3_spec__1_#t~ret15, __utac_acc__Specification3_spec__1_#t~ret16, __utac_acc__Specification3_spec__1_#t~ret17, __utac_acc__Specification3_spec__1_#t~ret18, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 27294#L1626-2 __utac_acc__Specification3_spec__1_#t~ret7 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret7;havoc __utac_acc__Specification3_spec__1_#t~ret7;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 26888#L1678-6 __utac_acc__Specification3_spec__1_#t~ret8 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret8;havoc __utac_acc__Specification3_spec__1_#t~ret8; 26889#L97-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 22906#L159-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 22908#L169-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 23679#L180-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 23232#L191-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 23234#L202-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 24380#L203-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret82, stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 24717#L455-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 22874#L482-42 stopRequestedAtCurrentFloor_#t~ret82 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret82;havoc stopRequestedAtCurrentFloor_#t~ret82; 21727#L2239-2 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~6;stopRequestedAtCurrentFloor_~retValue_acc~16 := 1;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 21728#L2251-2 timeShift_#t~ret96 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret96;havoc timeShift_#t~ret96; 23793#L2388-2 assume !(0 != timeShift_~tmp___9~3); 25108#L2479-6 assume 1 == ~doorState~0;~doorState~0 := 0; 25109#L2479-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~11, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~11;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 26881#L1830-4 assume !(1 == stopRequestedInDirection_~dir); 26986#L1999-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 21982#L2152-4 timeShift_#t~ret103 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret103;havoc timeShift_#t~ret103; 27463#L2487-2 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret81, continueInDirection_~dir, continueInDirection_~tmp~12;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~12;~currentHeading~0 := continueInDirection_~dir; 26442#L2206-6 assume !(1 == ~currentHeading~0); 26443#L2216-18 assume !(0 == ~currentFloorID~0); 23088#L2216-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 22229#L2222-17 havoc __utac_acc__Specification3_spec__2_#t~ret19, __utac_acc__Specification3_spec__2_#t~ret20, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 23901#L228-2 assume !(-1 == ~expectedDirection~0); 22434#L240-2 assume !(1 == ~expectedDirection~0); 22435#L241-2 havoc bobCall_#t~ret155, bobCall_~tmp~17;havoc bobCall_~tmp~17;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~22;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~22; 25820#L3239-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~22 := 4;getOrigin_#res := getOrigin_~retValue_acc~22; 24926#L3264-1 bobCall_#t~ret155 := getOrigin_#res;bobCall_~tmp~17 := bobCall_#t~ret155;havoc bobCall_#t~ret155;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~17;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 26346#L726-1 assume 0 == initPersonOnFloor_~floor; 26269#L727-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 21789#L834-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 26464#L518-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 22296#L530-5 havoc cleanup_#t~ret161, cleanup_#t~ret162, cleanup_~i~3, cleanup_~tmp~23, cleanup_~tmp___0~10, cleanup_~__cil_tmp4~2;havoc cleanup_~i~3;havoc cleanup_~tmp~23;havoc cleanup_~tmp___0~10;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_~tmp~15, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_#t~ret12, __utac_acc__Specification3_spec__1_#t~ret13, __utac_acc__Specification3_spec__1_#t~ret14, __utac_acc__Specification3_spec__1_#t~ret15, __utac_acc__Specification3_spec__1_#t~ret16, __utac_acc__Specification3_spec__1_#t~ret17, __utac_acc__Specification3_spec__1_#t~ret18, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 26953#L1626-3 __utac_acc__Specification3_spec__1_#t~ret7 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret7;havoc __utac_acc__Specification3_spec__1_#t~ret7;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 27194#L1678-9 __utac_acc__Specification3_spec__1_#t~ret8 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret8;havoc __utac_acc__Specification3_spec__1_#t~ret8; 25821#L97-3 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 25822#L98-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0); 29380#L108-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 1;buttonForFloorIsPressed_#in~floorID := 1;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 29378#L1643-34 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 29367#L1664-34 __utac_acc__Specification3_spec__1_#t~ret10 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___3~0 := __utac_acc__Specification3_spec__1_#t~ret10;havoc __utac_acc__Specification3_spec__1_#t~ret10; 29361#L113-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___3~0;~expectedDirection~0 := 1; 26509#L203-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret82, stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 26510#L455-63 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 25630#L482-63 stopRequestedAtCurrentFloor_#t~ret82 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret82;havoc stopRequestedAtCurrentFloor_#t~ret82; 23013#L2239-3 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~6;stopRequestedAtCurrentFloor_~retValue_acc~16 := 1;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 23014#L2251-3 timeShift_#t~ret96 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret96;havoc timeShift_#t~ret96; 27450#L2388-3 assume !(0 != timeShift_~tmp___9~3); 26913#L2479-9 assume !(1 == ~doorState~0); 26914#L2479-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~11, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~11;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 27005#L1830-6 assume !(1 == stopRequestedInDirection_~dir); 27497#L1999-6 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 27357#L2152-6 timeShift_#t~ret103 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret103;havoc timeShift_#t~ret103; 27358#L2487-3 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret81, continueInDirection_~dir, continueInDirection_~tmp~12;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~12;~currentHeading~0 := continueInDirection_~dir; 26193#L2206-9 assume !(1 == ~currentHeading~0); 26194#L2216-27 assume !(0 == ~currentFloorID~0); 24252#L2216-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 22726#L2222-23 havoc __utac_acc__Specification3_spec__2_#t~ret19, __utac_acc__Specification3_spec__2_#t~ret20, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 22727#L228-3 assume !(-1 == ~expectedDirection~0); 22948#L240-3 assume !(1 == ~expectedDirection~0); 26251#L241-3 cleanup_~i~3 := 0; 25237#L2988-2 [2021-11-02 22:05:47,216 INFO L793 eck$LassoCheckResult]: Loop: 25237#L2988-2 assume !false; 26994#L2989 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 24905#L2992 assume cleanup_~i~3 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~6;havoc isBlocked_~retValue_acc~6;isBlocked_~retValue_acc~6 := 0;isBlocked_#res := isBlocked_~retValue_acc~6; 24906#L1473 cleanup_#t~ret161 := isBlocked_#res;cleanup_~tmp___0~10 := cleanup_#t~ret161;havoc cleanup_#t~ret161; 26531#L2996 assume 1 != cleanup_~tmp___0~10; 26670#L2996-1 havoc isIdle_#res;havoc isIdle_#t~ret69, isIdle_~retValue_acc~13, isIdle_~tmp~10;havoc isIdle_~retValue_acc~13;havoc isIdle_~tmp~10;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret64, anyStopRequested_#t~ret65, anyStopRequested_#t~ret66, anyStopRequested_#t~ret67, anyStopRequested_#t~ret68, anyStopRequested_~retValue_acc~12, anyStopRequested_~tmp~9, anyStopRequested_~tmp___0~4, anyStopRequested_~tmp___1~3, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~12;havoc anyStopRequested_~tmp~9;havoc anyStopRequested_~tmp___0~4;havoc anyStopRequested_~tmp___1~3;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~1;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 25125#L455-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 21901#L482-84 anyStopRequested_#t~ret64 := isFloorCalling_#res;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret64;havoc anyStopRequested_#t~ret64; 25909#L1734 assume 0 != anyStopRequested_~tmp___3~1;anyStopRequested_~retValue_acc~12 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~12; 21909#L1798 isIdle_#t~ret69 := anyStopRequested_#res;isIdle_~tmp~10 := isIdle_#t~ret69;havoc isIdle_#t~ret69;isIdle_~retValue_acc~13 := (if 0 == isIdle_~tmp~10 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~13; 25747#L1811 cleanup_#t~ret162 := isIdle_#res;cleanup_~tmp~23 := cleanup_#t~ret162;havoc cleanup_#t~ret162; 27134#L3008 assume !(0 != cleanup_~tmp~23);havoc timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_~tmp~15, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_#t~ret12, __utac_acc__Specification3_spec__1_#t~ret13, __utac_acc__Specification3_spec__1_#t~ret14, __utac_acc__Specification3_spec__1_#t~ret15, __utac_acc__Specification3_spec__1_#t~ret16, __utac_acc__Specification3_spec__1_#t~ret17, __utac_acc__Specification3_spec__1_#t~ret18, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 23364#L1626-4 __utac_acc__Specification3_spec__1_#t~ret7 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret7;havoc __utac_acc__Specification3_spec__1_#t~ret7;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 23365#L1678-12 __utac_acc__Specification3_spec__1_#t~ret8 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret8;havoc __utac_acc__Specification3_spec__1_#t~ret8; 27477#L97-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 24719#L159-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 24102#L169-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 24103#L180-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 26404#L191-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 26405#L202-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 21670#L203-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret82, stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 26690#L455-89 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 25339#L482-89 stopRequestedAtCurrentFloor_#t~ret82 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret82;havoc stopRequestedAtCurrentFloor_#t~ret82; 25340#L2239-4 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~6;stopRequestedAtCurrentFloor_~retValue_acc~16 := 1;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 26333#L2251-4 timeShift_#t~ret96 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret96;havoc timeShift_#t~ret96; 23917#L2388-4 assume !(0 != timeShift_~tmp___9~3); 23919#L2479-12 assume 1 == ~doorState~0;~doorState~0 := 0; 26430#L2479-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~11, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~11;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 26431#L1830-8 assume !(1 == stopRequestedInDirection_~dir); 27307#L1999-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 26858#L2152-8 timeShift_#t~ret103 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret103;havoc timeShift_#t~ret103; 23085#L2487-4 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret81, continueInDirection_~dir, continueInDirection_~tmp~12;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~12;~currentHeading~0 := continueInDirection_~dir; 23087#L2206-12 assume !(1 == ~currentHeading~0); 31352#L2216-36 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 26419#L2216-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 24847#L2222-29 havoc __utac_acc__Specification3_spec__2_#t~ret19, __utac_acc__Specification3_spec__2_#t~ret20, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 21480#L228-4 assume !(-1 == ~expectedDirection~0); 21481#L240-4 assume !(1 == ~expectedDirection~0); 25236#L241-4 cleanup_~i~3 := 1 + cleanup_~i~3; 25237#L2988-2 [2021-11-02 22:05:47,218 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-02 22:05:47,218 INFO L85 PathProgramCache]: Analyzing trace with hash -1449005196, now seen corresponding path program 1 times [2021-11-02 22:05:47,219 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-02 22:05:47,219 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1317953571] [2021-11-02 22:05:47,220 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-02 22:05:47,220 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-02 22:05:47,314 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-02 22:05:47,426 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-02 22:05:47,426 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-02 22:05:47,427 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1317953571] [2021-11-02 22:05:47,427 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1317953571] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-02 22:05:47,427 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-02 22:05:47,428 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-11-02 22:05:47,428 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1402545115] [2021-11-02 22:05:47,429 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-11-02 22:05:47,429 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-02 22:05:47,429 INFO L85 PathProgramCache]: Analyzing trace with hash -922011119, now seen corresponding path program 1 times [2021-11-02 22:05:47,430 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-02 22:05:47,430 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [449387263] [2021-11-02 22:05:47,430 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-02 22:05:47,431 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-02 22:05:47,442 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-02 22:05:47,489 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-02 22:05:47,490 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-02 22:05:47,497 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [449387263] [2021-11-02 22:05:47,497 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [449387263] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-02 22:05:47,498 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-02 22:05:47,498 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-11-02 22:05:47,498 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [223857846] [2021-11-02 22:05:47,499 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-11-02 22:05:47,499 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-02 22:05:47,500 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-11-02 22:05:47,501 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-11-02 22:05:47,502 INFO L87 Difference]: Start difference. First operand 10107 states and 18964 transitions. cyclomatic complexity: 8858 Second operand has 6 states, 6 states have (on average 6.5) internal successors, (39), 6 states have internal predecessors, (39), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:05:48,201 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-02 22:05:48,201 INFO L93 Difference]: Finished difference Result 18187 states and 34206 transitions. [2021-11-02 22:05:48,202 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2021-11-02 22:05:48,202 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 18187 states and 34206 transitions. [2021-11-02 22:05:48,440 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 4162 [2021-11-02 22:05:48,568 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 18187 states to 18187 states and 34206 transitions. [2021-11-02 22:05:48,568 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 18187 [2021-11-02 22:05:48,587 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 18187 [2021-11-02 22:05:48,587 INFO L73 IsDeterministic]: Start isDeterministic. Operand 18187 states and 34206 transitions. [2021-11-02 22:05:48,623 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-11-02 22:05:48,623 INFO L681 BuchiCegarLoop]: Abstraction has 18187 states and 34206 transitions. [2021-11-02 22:05:48,647 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 18187 states and 34206 transitions. [2021-11-02 22:05:48,889 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 18187 to 10125. [2021-11-02 22:05:48,907 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10125 states, 10125 states have (on average 1.8747654320987654) internal successors, (18982), 10124 states have internal predecessors, (18982), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:05:49,065 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10125 states to 10125 states and 18982 transitions. [2021-11-02 22:05:49,066 INFO L704 BuchiCegarLoop]: Abstraction has 10125 states and 18982 transitions. [2021-11-02 22:05:49,066 INFO L587 BuchiCegarLoop]: Abstraction has 10125 states and 18982 transitions. [2021-11-02 22:05:49,066 INFO L425 BuchiCegarLoop]: ======== Iteration 3============ [2021-11-02 22:05:49,067 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 10125 states and 18982 transitions. [2021-11-02 22:05:49,118 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 2269 [2021-11-02 22:05:49,118 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-11-02 22:05:49,118 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-11-02 22:05:49,134 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-02 22:05:49,134 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-02 22:05:49,138 INFO L791 eck$LassoCheckResult]: Stem: 55027#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(2);call write~init~int(48, #t~string4.base, #t~string4.offset, 1);call write~init~int(0, #t~string4.base, 1 + #t~string4.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(31);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(12);call #t~string45.base, #t~string45.offset := #Ultimate.allocOnStack(30);call #t~string46.base, #t~string46.offset := #Ultimate.allocOnStack(9);call #t~string47.base, #t~string47.offset := #Ultimate.allocOnStack(21);call #t~string48.base, #t~string48.offset := #Ultimate.allocOnStack(30);call #t~string49.base, #t~string49.offset := #Ultimate.allocOnStack(9);call #t~string50.base, #t~string50.offset := #Ultimate.allocOnStack(21);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(30);call #t~string55.base, #t~string55.offset := #Ultimate.allocOnStack(9);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(25);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(30);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(9);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(25);call #t~string107.base, #t~string107.offset := #Ultimate.allocOnStack(10);call #t~string109.base, #t~string109.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string109.base, #t~string109.offset, 1);call write~init~int(95, #t~string109.base, 1 + #t~string109.offset, 1);call write~init~int(93, #t~string109.base, 2 + #t~string109.offset, 1);call write~init~int(0, #t~string109.base, 3 + #t~string109.offset, 1);call #t~string111.base, #t~string111.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string111.base, #t~string111.offset, 1);call write~init~int(93, #t~string111.base, 1 + #t~string111.offset, 1);call write~init~int(32, #t~string111.base, 2 + #t~string111.offset, 1);call write~init~int(0, #t~string111.base, 3 + #t~string111.offset, 1);call #t~string113.base, #t~string113.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string113.base, #t~string113.offset, 1);call write~init~int(97, #t~string113.base, 1 + #t~string113.offset, 1);call write~init~int(116, #t~string113.base, 2 + #t~string113.offset, 1);call write~init~int(32, #t~string113.base, 3 + #t~string113.offset, 1);call write~init~int(0, #t~string113.base, 4 + #t~string113.offset, 1);call #t~string115.base, #t~string115.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string115.base, #t~string115.offset, 1);call write~init~int(105, #t~string115.base, 1 + #t~string115.offset, 1);call write~init~int(0, #t~string115.base, 2 + #t~string115.offset, 1);call #t~string117.base, #t~string117.offset := #Ultimate.allocOnStack(10);call #t~string119.base, #t~string119.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string119.base, #t~string119.offset, 1);call write~init~int(112, #t~string119.base, 1 + #t~string119.offset, 1);call write~init~int(0, #t~string119.base, 2 + #t~string119.offset, 1);call #t~string121.base, #t~string121.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string121.base, #t~string121.offset, 1);call write~init~int(111, #t~string121.base, 1 + #t~string121.offset, 1);call write~init~int(119, #t~string121.base, 2 + #t~string121.offset, 1);call write~init~int(110, #t~string121.base, 3 + #t~string121.offset, 1);call write~init~int(0, #t~string121.base, 4 + #t~string121.offset, 1);call #t~string123.base, #t~string123.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string123.base, #t~string123.offset, 1);call write~init~int(73, #t~string123.base, 1 + #t~string123.offset, 1);call write~init~int(76, #t~string123.base, 2 + #t~string123.offset, 1);call write~init~int(95, #t~string123.base, 3 + #t~string123.offset, 1);call write~init~int(112, #t~string123.base, 4 + #t~string123.offset, 1);call write~init~int(58, #t~string123.base, 5 + #t~string123.offset, 1);call write~init~int(0, #t~string123.base, 6 + #t~string123.offset, 1);call #t~string125.base, #t~string125.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string125.base, #t~string125.offset, 1);call write~init~int(37, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(105, #t~string125.base, 2 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 3 + #t~string125.offset, 1);call #t~string127.base, #t~string127.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string127.base, #t~string127.offset, 1);call write~init~int(37, #t~string127.base, 1 + #t~string127.offset, 1);call write~init~int(105, #t~string127.base, 2 + #t~string127.offset, 1);call write~init~int(0, #t~string127.base, 3 + #t~string127.offset, 1);call #t~string129.base, #t~string129.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string129.base, #t~string129.offset, 1);call write~init~int(37, #t~string129.base, 1 + #t~string129.offset, 1);call write~init~int(105, #t~string129.base, 2 + #t~string129.offset, 1);call write~init~int(0, #t~string129.base, 3 + #t~string129.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string131.base, #t~string131.offset, 1);call write~init~int(37, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string133.base, #t~string133.offset, 1);call write~init~int(37, #t~string133.base, 1 + #t~string133.offset, 1);call write~init~int(105, #t~string133.base, 2 + #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 3 + #t~string133.offset, 1);call #t~string135.base, #t~string135.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string135.base, #t~string135.offset, 1);call write~init~int(70, #t~string135.base, 1 + #t~string135.offset, 1);call write~init~int(95, #t~string135.base, 2 + #t~string135.offset, 1);call write~init~int(112, #t~string135.base, 3 + #t~string135.offset, 1);call write~init~int(58, #t~string135.base, 4 + #t~string135.offset, 1);call write~init~int(0, #t~string135.base, 5 + #t~string135.offset, 1);call #t~string138.base, #t~string138.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string138.base, #t~string138.offset, 1);call write~init~int(37, #t~string138.base, 1 + #t~string138.offset, 1);call write~init~int(105, #t~string138.base, 2 + #t~string138.offset, 1);call write~init~int(0, #t~string138.base, 3 + #t~string138.offset, 1);call #t~string141.base, #t~string141.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string141.base, #t~string141.offset, 1);call write~init~int(37, #t~string141.base, 1 + #t~string141.offset, 1);call write~init~int(105, #t~string141.base, 2 + #t~string141.offset, 1);call write~init~int(0, #t~string141.base, 3 + #t~string141.offset, 1);call #t~string144.base, #t~string144.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string144.base, #t~string144.offset, 1);call write~init~int(37, #t~string144.base, 1 + #t~string144.offset, 1);call write~init~int(105, #t~string144.base, 2 + #t~string144.offset, 1);call write~init~int(0, #t~string144.base, 3 + #t~string144.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string147.base, #t~string147.offset, 1);call write~init~int(37, #t~string147.base, 1 + #t~string147.offset, 1);call write~init~int(105, #t~string147.base, 2 + #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 3 + #t~string147.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string150.base, #t~string150.offset, 1);call write~init~int(37, #t~string150.base, 1 + #t~string150.offset, 1);call write~init~int(105, #t~string150.base, 2 + #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 3 + #t~string150.offset, 1);call #t~string152.base, #t~string152.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string152.base, #t~string152.offset, 1);call write~init~int(0, #t~string152.base, 1 + #t~string152.offset, 1);~weight~0 := 0;~maximumWeight~0 := 100;~expectedDirection~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 55028#L-1 havoc main_#res;havoc main_#t~ret167, main_~retValue_acc~20, main_~tmp~25;havoc main_~retValue_acc~20;havoc main_~tmp~25; 54934#L3336 havoc valid_product_#res;havoc valid_product_~retValue_acc~25;havoc valid_product_~retValue_acc~25;valid_product_~retValue_acc~25 := 1;valid_product_#res := valid_product_~retValue_acc~25; 53438#L3344 main_#t~ret167 := valid_product_#res;main_~tmp~25 := main_#t~ret167;havoc main_#t~ret167; 53439#L3182 assume 0 != main_~tmp~25; 53963#L3156 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 54089#L448 havoc bobCall_#t~ret155, bobCall_~tmp~17;havoc bobCall_~tmp~17;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~22;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~22; 49851#L3239 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~22 := 4;getOrigin_#res := getOrigin_~retValue_acc~22; 49852#L3264 bobCall_#t~ret155 := getOrigin_#res;bobCall_~tmp~17 := bobCall_#t~ret155;havoc bobCall_#t~ret155;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~17;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 51232#L726 assume 0 == initPersonOnFloor_~floor; 51233#L727 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 49944#L834-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 52070#L518 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 52071#L530-2 havoc timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_~tmp~15, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_#t~ret12, __utac_acc__Specification3_spec__1_#t~ret13, __utac_acc__Specification3_spec__1_#t~ret14, __utac_acc__Specification3_spec__1_#t~ret15, __utac_acc__Specification3_spec__1_#t~ret16, __utac_acc__Specification3_spec__1_#t~ret17, __utac_acc__Specification3_spec__1_#t~ret18, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 52941#L1626 __utac_acc__Specification3_spec__1_#t~ret7 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret7;havoc __utac_acc__Specification3_spec__1_#t~ret7;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 50453#L1678 __utac_acc__Specification3_spec__1_#t~ret8 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret8;havoc __utac_acc__Specification3_spec__1_#t~ret8; 50454#L97 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 52547#L98 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 55018#L1643 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 50222#L1664 __utac_acc__Specification3_spec__1_#t~ret9 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret9;havoc __utac_acc__Specification3_spec__1_#t~ret9; 50223#L102 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 50758#L203 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret82, stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 52371#L455 assume !(0 == isFloorCalling_~floorID); 52372#L459 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 52353#L482 stopRequestedAtCurrentFloor_#t~ret82 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret82;havoc stopRequestedAtCurrentFloor_#t~ret82; 52617#L2239 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 52619#L1643-10 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 51669#L1664-10 stopRequestedAtCurrentFloor_#t~ret83 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~13 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 54271#L2246 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 55635#L2251 timeShift_#t~ret96 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret96;havoc timeShift_#t~ret96; 55887#L2388 assume !(0 != timeShift_~tmp___9~3); 52459#L2479 assume !(1 == ~doorState~0); 52460#L2479-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~11, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~11;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 54096#L1830 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 53650#L1029 stopRequestedInDirection_#t~ret70 := isTopFloor_#res;stopRequestedInDirection_~tmp~11 := stopRequestedInDirection_#t~ret70;havoc stopRequestedInDirection_#t~ret70; 53651#L1834 assume 0 != stopRequestedInDirection_~tmp~11;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 50514#L2152 timeShift_#t~ret103 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret103;havoc timeShift_#t~ret103; 54519#L2487 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret81, continueInDirection_~dir, continueInDirection_~tmp~12;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~12;~currentHeading~0 := continueInDirection_~dir; 54534#L2206 assume !(1 == ~currentHeading~0); 53179#L2216 assume !(0 == ~currentFloorID~0); 53180#L2216-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 54847#L2222-5 havoc __utac_acc__Specification3_spec__2_#t~ret19, __utac_acc__Specification3_spec__2_#t~ret20, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 56090#L228 assume !(-1 == ~expectedDirection~0); 56087#L240 assume !(1 == ~expectedDirection~0); 56085#L241 havoc timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_~tmp~15, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_#t~ret12, __utac_acc__Specification3_spec__1_#t~ret13, __utac_acc__Specification3_spec__1_#t~ret14, __utac_acc__Specification3_spec__1_#t~ret15, __utac_acc__Specification3_spec__1_#t~ret16, __utac_acc__Specification3_spec__1_#t~ret17, __utac_acc__Specification3_spec__1_#t~ret18, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 56084#L1626-1 __utac_acc__Specification3_spec__1_#t~ret7 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret7;havoc __utac_acc__Specification3_spec__1_#t~ret7;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 56083#L1678-3 __utac_acc__Specification3_spec__1_#t~ret8 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret8;havoc __utac_acc__Specification3_spec__1_#t~ret8; 56081#L97-1 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 56082#L98-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0); 56080#L108-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 1;buttonForFloorIsPressed_#in~floorID := 1;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 56074#L1643-12 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 56062#L1664-12 __utac_acc__Specification3_spec__1_#t~ret10 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___3~0 := __utac_acc__Specification3_spec__1_#t~ret10;havoc __utac_acc__Specification3_spec__1_#t~ret10; 56050#L113-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___3~0;~expectedDirection~0 := 1; 56043#L203-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret82, stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 56036#L455-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 56033#L482-21 stopRequestedAtCurrentFloor_#t~ret82 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret82;havoc stopRequestedAtCurrentFloor_#t~ret82; 56032#L2239-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 56027#L1643-21 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 56026#L1664-21 stopRequestedAtCurrentFloor_#t~ret83 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~13 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 56025#L2246-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 56023#L2251-1 timeShift_#t~ret96 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret96;havoc timeShift_#t~ret96; 56020#L2388-1 assume !(0 != timeShift_~tmp___9~3); 56017#L2479-3 assume !(1 == ~doorState~0); 56016#L2479-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~11, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~11;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 55997#L1830-2 assume !(1 == stopRequestedInDirection_~dir); 55988#L1999-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 55969#L2152-2 timeShift_#t~ret103 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret103;havoc timeShift_#t~ret103; 55967#L2487-1 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret81, continueInDirection_~dir, continueInDirection_~tmp~12;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~12;~currentHeading~0 := continueInDirection_~dir; 55966#L2206-3 assume !(1 == ~currentHeading~0); 55885#L2216-9 assume !(0 == ~currentFloorID~0); 50469#L2216-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 50470#L2222-11 havoc __utac_acc__Specification3_spec__2_#t~ret19, __utac_acc__Specification3_spec__2_#t~ret20, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 56582#L228-1 assume !(-1 == ~expectedDirection~0); 56579#L240-1 assume !(1 == ~expectedDirection~0); 56572#L241-1 havoc timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_~tmp~15, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_#t~ret12, __utac_acc__Specification3_spec__1_#t~ret13, __utac_acc__Specification3_spec__1_#t~ret14, __utac_acc__Specification3_spec__1_#t~ret15, __utac_acc__Specification3_spec__1_#t~ret16, __utac_acc__Specification3_spec__1_#t~ret17, __utac_acc__Specification3_spec__1_#t~ret18, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 56571#L1626-2 __utac_acc__Specification3_spec__1_#t~ret7 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret7;havoc __utac_acc__Specification3_spec__1_#t~ret7;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 56570#L1678-6 __utac_acc__Specification3_spec__1_#t~ret8 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret8;havoc __utac_acc__Specification3_spec__1_#t~ret8; 56569#L97-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 56567#L159-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 56565#L169-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 56549#L180-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 56540#L191-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 56533#L202-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 55965#L203-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret82, stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 55962#L455-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 55957#L482-42 stopRequestedAtCurrentFloor_#t~ret82 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret82;havoc stopRequestedAtCurrentFloor_#t~ret82; 55954#L2239-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 55942#L1643-32 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 55938#L1664-32 stopRequestedAtCurrentFloor_#t~ret83 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~13 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 55937#L2246-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 55935#L2251-2 timeShift_#t~ret96 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret96;havoc timeShift_#t~ret96; 55932#L2388-2 assume !(0 != timeShift_~tmp___9~3); 55931#L2479-6 assume 1 == ~doorState~0;~doorState~0 := 0; 55930#L2479-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~11, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~11;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 55915#L1830-4 assume !(1 == stopRequestedInDirection_~dir); 55902#L1999-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 55891#L2152-4 timeShift_#t~ret103 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret103;havoc timeShift_#t~ret103; 55889#L2487-2 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret81, continueInDirection_~dir, continueInDirection_~tmp~12;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~12;~currentHeading~0 := continueInDirection_~dir; 55888#L2206-6 assume !(1 == ~currentHeading~0); 55886#L2216-18 assume !(0 == ~currentFloorID~0); 51411#L2216-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 52417#L2222-17 havoc __utac_acc__Specification3_spec__2_#t~ret19, __utac_acc__Specification3_spec__2_#t~ret20, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 57422#L228-2 assume !(-1 == ~expectedDirection~0); 57419#L240-2 assume !(1 == ~expectedDirection~0); 57417#L241-2 havoc bobCall_#t~ret155, bobCall_~tmp~17;havoc bobCall_~tmp~17;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~22;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~22; 57413#L3239-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~22 := 4;getOrigin_#res := getOrigin_~retValue_acc~22; 57410#L3264-1 bobCall_#t~ret155 := getOrigin_#res;bobCall_~tmp~17 := bobCall_#t~ret155;havoc bobCall_#t~ret155;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~17;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 57409#L726-1 assume 0 == initPersonOnFloor_~floor; 57387#L727-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 54758#L834-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 54759#L518-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 50619#L530-5 havoc cleanup_#t~ret161, cleanup_#t~ret162, cleanup_~i~3, cleanup_~tmp~23, cleanup_~tmp___0~10, cleanup_~__cil_tmp4~2;havoc cleanup_~i~3;havoc cleanup_~tmp~23;havoc cleanup_~tmp___0~10;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_~tmp~15, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_#t~ret12, __utac_acc__Specification3_spec__1_#t~ret13, __utac_acc__Specification3_spec__1_#t~ret14, __utac_acc__Specification3_spec__1_#t~ret15, __utac_acc__Specification3_spec__1_#t~ret16, __utac_acc__Specification3_spec__1_#t~ret17, __utac_acc__Specification3_spec__1_#t~ret18, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 56482#L1626-3 __utac_acc__Specification3_spec__1_#t~ret7 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret7;havoc __utac_acc__Specification3_spec__1_#t~ret7;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 56481#L1678-9 __utac_acc__Specification3_spec__1_#t~ret8 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret8;havoc __utac_acc__Specification3_spec__1_#t~ret8; 56479#L97-3 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 56478#L98-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0); 56477#L108-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 1;buttonForFloorIsPressed_#in~floorID := 1;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 56441#L1643-34 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 56425#L1664-34 __utac_acc__Specification3_spec__1_#t~ret10 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___3~0 := __utac_acc__Specification3_spec__1_#t~ret10;havoc __utac_acc__Specification3_spec__1_#t~ret10; 56414#L113-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___3~0;~expectedDirection~0 := 1; 56220#L203-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret82, stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 56210#L455-63 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 56205#L482-63 stopRequestedAtCurrentFloor_#t~ret82 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret82;havoc stopRequestedAtCurrentFloor_#t~ret82; 56203#L2239-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 56198#L1643-43 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 56194#L1664-43 stopRequestedAtCurrentFloor_#t~ret83 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~13 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 56193#L2246-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 56192#L2251-3 timeShift_#t~ret96 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret96;havoc timeShift_#t~ret96; 56190#L2388-3 assume !(0 != timeShift_~tmp___9~3); 56189#L2479-9 assume !(1 == ~doorState~0); 56187#L2479-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~11, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~11;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 56184#L1830-6 assume !(1 == stopRequestedInDirection_~dir); 56136#L1999-6 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 56107#L2152-6 timeShift_#t~ret103 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret103;havoc timeShift_#t~ret103; 56095#L2487-3 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret81, continueInDirection_~dir, continueInDirection_~tmp~12;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~12;~currentHeading~0 := continueInDirection_~dir; 56094#L2206-9 assume !(1 == ~currentHeading~0); 55884#L2216-27 assume !(0 == ~currentFloorID~0); 52570#L2216-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 51048#L2222-23 havoc __utac_acc__Specification3_spec__2_#t~ret19, __utac_acc__Specification3_spec__2_#t~ret20, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 51049#L228-3 assume !(-1 == ~expectedDirection~0); 51271#L240-3 assume !(1 == ~expectedDirection~0); 54543#L241-3 cleanup_~i~3 := 0; 53543#L2988-2 [2021-11-02 22:05:49,139 INFO L793 eck$LassoCheckResult]: Loop: 53543#L2988-2 assume !false; 55268#L2989 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 53217#L2992 assume cleanup_~i~3 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~6;havoc isBlocked_~retValue_acc~6;isBlocked_~retValue_acc~6 := 0;isBlocked_#res := isBlocked_~retValue_acc~6; 53218#L1473 cleanup_#t~ret161 := isBlocked_#res;cleanup_~tmp___0~10 := cleanup_#t~ret161;havoc cleanup_#t~ret161; 54825#L2996 assume 1 != cleanup_~tmp___0~10; 54962#L2996-1 havoc isIdle_#res;havoc isIdle_#t~ret69, isIdle_~retValue_acc~13, isIdle_~tmp~10;havoc isIdle_~retValue_acc~13;havoc isIdle_~tmp~10;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret64, anyStopRequested_#t~ret65, anyStopRequested_#t~ret66, anyStopRequested_#t~ret67, anyStopRequested_#t~ret68, anyStopRequested_~retValue_acc~12, anyStopRequested_~tmp~9, anyStopRequested_~tmp___0~4, anyStopRequested_~tmp___1~3, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~12;havoc anyStopRequested_~tmp~9;havoc anyStopRequested_~tmp___0~4;havoc anyStopRequested_~tmp___1~3;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~1;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 53431#L455-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 50227#L482-84 anyStopRequested_#t~ret64 := isFloorCalling_#res;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret64;havoc anyStopRequested_#t~ret64; 54211#L1734 assume 0 != anyStopRequested_~tmp___3~1;anyStopRequested_~retValue_acc~12 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~12; 50235#L1798 isIdle_#t~ret69 := anyStopRequested_#res;isIdle_~tmp~10 := isIdle_#t~ret69;havoc isIdle_#t~ret69;isIdle_~retValue_acc~13 := (if 0 == isIdle_~tmp~10 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~13; 54048#L1811 cleanup_#t~ret162 := isIdle_#res;cleanup_~tmp~23 := cleanup_#t~ret162;havoc cleanup_#t~ret162; 55407#L3008 assume !(0 != cleanup_~tmp~23);havoc timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_~tmp~15, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_#t~ret12, __utac_acc__Specification3_spec__1_#t~ret13, __utac_acc__Specification3_spec__1_#t~ret14, __utac_acc__Specification3_spec__1_#t~ret15, __utac_acc__Specification3_spec__1_#t~ret16, __utac_acc__Specification3_spec__1_#t~ret17, __utac_acc__Specification3_spec__1_#t~ret18, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 51686#L1626-4 __utac_acc__Specification3_spec__1_#t~ret7 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret7;havoc __utac_acc__Specification3_spec__1_#t~ret7;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 51687#L1678-12 __utac_acc__Specification3_spec__1_#t~ret8 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret8;havoc __utac_acc__Specification3_spec__1_#t~ret8; 55746#L97-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 53030#L159-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 52418#L169-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 52419#L180-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 54697#L191-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 54698#L202-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 49994#L203-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret82, stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 54982#L455-89 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 53645#L482-89 stopRequestedAtCurrentFloor_#t~ret82 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret82;havoc stopRequestedAtCurrentFloor_#t~ret82; 53646#L2239-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 50189#L1643-54 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 50125#L1664-54 stopRequestedAtCurrentFloor_#t~ret83 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~13 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 50126#L2246-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 54625#L2251-4 timeShift_#t~ret96 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret96;havoc timeShift_#t~ret96; 56239#L2388-4 assume !(0 != timeShift_~tmp___9~3); 55013#L2479-12 assume 1 == ~doorState~0;~doorState~0 := 0; 54724#L2479-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~11, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~11;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 54725#L1830-8 assume !(1 == stopRequestedInDirection_~dir); 55585#L1999-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 49958#L2152-8 timeShift_#t~ret103 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret103;havoc timeShift_#t~ret103; 51408#L2487-4 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret81, continueInDirection_~dir, continueInDirection_~tmp~12;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~12;~currentHeading~0 := continueInDirection_~dir; 51410#L2206-12 assume !(1 == ~currentHeading~0); 54208#L2216-36 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 54713#L2216-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 53159#L2222-29 havoc __utac_acc__Specification3_spec__2_#t~ret19, __utac_acc__Specification3_spec__2_#t~ret20, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 49804#L228-4 assume !(-1 == ~expectedDirection~0); 49805#L240-4 assume !(1 == ~expectedDirection~0); 53542#L241-4 cleanup_~i~3 := 1 + cleanup_~i~3; 53543#L2988-2 [2021-11-02 22:05:49,140 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-02 22:05:49,140 INFO L85 PathProgramCache]: Analyzing trace with hash 711260277, now seen corresponding path program 1 times [2021-11-02 22:05:49,141 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-02 22:05:49,141 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2144306169] [2021-11-02 22:05:49,141 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-02 22:05:49,141 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-02 22:05:49,202 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-02 22:05:49,278 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-02 22:05:49,279 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-02 22:05:49,279 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2144306169] [2021-11-02 22:05:49,279 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2144306169] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-02 22:05:49,279 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-02 22:05:49,279 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-11-02 22:05:49,280 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1491678458] [2021-11-02 22:05:49,280 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-11-02 22:05:49,281 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-02 22:05:49,281 INFO L85 PathProgramCache]: Analyzing trace with hash 1898671110, now seen corresponding path program 1 times [2021-11-02 22:05:49,281 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-02 22:05:49,281 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [212054361] [2021-11-02 22:05:49,282 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-02 22:05:49,282 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-02 22:05:49,290 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-02 22:05:49,334 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-02 22:05:49,334 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-02 22:05:49,334 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [212054361] [2021-11-02 22:05:49,334 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [212054361] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-02 22:05:49,335 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-02 22:05:49,335 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-11-02 22:05:49,335 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1024729591] [2021-11-02 22:05:49,335 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-11-02 22:05:49,336 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-02 22:05:49,336 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-11-02 22:05:49,336 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2021-11-02 22:05:49,337 INFO L87 Difference]: Start difference. First operand 10125 states and 18982 transitions. cyclomatic complexity: 8858 Second operand has 7 states, 7 states have (on average 6.0) internal successors, (42), 7 states have internal predecessors, (42), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:05:53,890 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-02 22:05:53,894 INFO L93 Difference]: Finished difference Result 62880 states and 118382 transitions. [2021-11-02 22:05:53,894 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 20 states. [2021-11-02 22:05:53,894 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 62880 states and 118382 transitions. [2021-11-02 22:05:54,223 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 22726 [2021-11-02 22:05:54,761 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 62880 states to 62880 states and 118382 transitions. [2021-11-02 22:05:54,761 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 62880 [2021-11-02 22:05:54,802 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 62880 [2021-11-02 22:05:54,803 INFO L73 IsDeterministic]: Start isDeterministic. Operand 62880 states and 118382 transitions. [2021-11-02 22:05:54,851 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-11-02 22:05:54,852 INFO L681 BuchiCegarLoop]: Abstraction has 62880 states and 118382 transitions. [2021-11-02 22:05:54,904 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 62880 states and 118382 transitions. [2021-11-02 22:05:55,471 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 62880 to 20211. [2021-11-02 22:05:55,506 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 20211 states, 20211 states have (on average 1.8742763841472465) internal successors, (37881), 20210 states have internal predecessors, (37881), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:05:55,564 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 20211 states to 20211 states and 37881 transitions. [2021-11-02 22:05:55,564 INFO L704 BuchiCegarLoop]: Abstraction has 20211 states and 37881 transitions. [2021-11-02 22:05:55,564 INFO L587 BuchiCegarLoop]: Abstraction has 20211 states and 37881 transitions. [2021-11-02 22:05:55,564 INFO L425 BuchiCegarLoop]: ======== Iteration 4============ [2021-11-02 22:05:55,565 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 20211 states and 37881 transitions. [2021-11-02 22:05:55,648 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 4548 [2021-11-02 22:05:55,648 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-11-02 22:05:55,648 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-11-02 22:05:55,653 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-02 22:05:55,653 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-02 22:05:55,654 INFO L791 eck$LassoCheckResult]: Stem: 128417#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(2);call write~init~int(48, #t~string4.base, #t~string4.offset, 1);call write~init~int(0, #t~string4.base, 1 + #t~string4.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(31);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(12);call #t~string45.base, #t~string45.offset := #Ultimate.allocOnStack(30);call #t~string46.base, #t~string46.offset := #Ultimate.allocOnStack(9);call #t~string47.base, #t~string47.offset := #Ultimate.allocOnStack(21);call #t~string48.base, #t~string48.offset := #Ultimate.allocOnStack(30);call #t~string49.base, #t~string49.offset := #Ultimate.allocOnStack(9);call #t~string50.base, #t~string50.offset := #Ultimate.allocOnStack(21);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(30);call #t~string55.base, #t~string55.offset := #Ultimate.allocOnStack(9);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(25);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(30);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(9);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(25);call #t~string107.base, #t~string107.offset := #Ultimate.allocOnStack(10);call #t~string109.base, #t~string109.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string109.base, #t~string109.offset, 1);call write~init~int(95, #t~string109.base, 1 + #t~string109.offset, 1);call write~init~int(93, #t~string109.base, 2 + #t~string109.offset, 1);call write~init~int(0, #t~string109.base, 3 + #t~string109.offset, 1);call #t~string111.base, #t~string111.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string111.base, #t~string111.offset, 1);call write~init~int(93, #t~string111.base, 1 + #t~string111.offset, 1);call write~init~int(32, #t~string111.base, 2 + #t~string111.offset, 1);call write~init~int(0, #t~string111.base, 3 + #t~string111.offset, 1);call #t~string113.base, #t~string113.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string113.base, #t~string113.offset, 1);call write~init~int(97, #t~string113.base, 1 + #t~string113.offset, 1);call write~init~int(116, #t~string113.base, 2 + #t~string113.offset, 1);call write~init~int(32, #t~string113.base, 3 + #t~string113.offset, 1);call write~init~int(0, #t~string113.base, 4 + #t~string113.offset, 1);call #t~string115.base, #t~string115.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string115.base, #t~string115.offset, 1);call write~init~int(105, #t~string115.base, 1 + #t~string115.offset, 1);call write~init~int(0, #t~string115.base, 2 + #t~string115.offset, 1);call #t~string117.base, #t~string117.offset := #Ultimate.allocOnStack(10);call #t~string119.base, #t~string119.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string119.base, #t~string119.offset, 1);call write~init~int(112, #t~string119.base, 1 + #t~string119.offset, 1);call write~init~int(0, #t~string119.base, 2 + #t~string119.offset, 1);call #t~string121.base, #t~string121.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string121.base, #t~string121.offset, 1);call write~init~int(111, #t~string121.base, 1 + #t~string121.offset, 1);call write~init~int(119, #t~string121.base, 2 + #t~string121.offset, 1);call write~init~int(110, #t~string121.base, 3 + #t~string121.offset, 1);call write~init~int(0, #t~string121.base, 4 + #t~string121.offset, 1);call #t~string123.base, #t~string123.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string123.base, #t~string123.offset, 1);call write~init~int(73, #t~string123.base, 1 + #t~string123.offset, 1);call write~init~int(76, #t~string123.base, 2 + #t~string123.offset, 1);call write~init~int(95, #t~string123.base, 3 + #t~string123.offset, 1);call write~init~int(112, #t~string123.base, 4 + #t~string123.offset, 1);call write~init~int(58, #t~string123.base, 5 + #t~string123.offset, 1);call write~init~int(0, #t~string123.base, 6 + #t~string123.offset, 1);call #t~string125.base, #t~string125.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string125.base, #t~string125.offset, 1);call write~init~int(37, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(105, #t~string125.base, 2 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 3 + #t~string125.offset, 1);call #t~string127.base, #t~string127.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string127.base, #t~string127.offset, 1);call write~init~int(37, #t~string127.base, 1 + #t~string127.offset, 1);call write~init~int(105, #t~string127.base, 2 + #t~string127.offset, 1);call write~init~int(0, #t~string127.base, 3 + #t~string127.offset, 1);call #t~string129.base, #t~string129.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string129.base, #t~string129.offset, 1);call write~init~int(37, #t~string129.base, 1 + #t~string129.offset, 1);call write~init~int(105, #t~string129.base, 2 + #t~string129.offset, 1);call write~init~int(0, #t~string129.base, 3 + #t~string129.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string131.base, #t~string131.offset, 1);call write~init~int(37, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string133.base, #t~string133.offset, 1);call write~init~int(37, #t~string133.base, 1 + #t~string133.offset, 1);call write~init~int(105, #t~string133.base, 2 + #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 3 + #t~string133.offset, 1);call #t~string135.base, #t~string135.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string135.base, #t~string135.offset, 1);call write~init~int(70, #t~string135.base, 1 + #t~string135.offset, 1);call write~init~int(95, #t~string135.base, 2 + #t~string135.offset, 1);call write~init~int(112, #t~string135.base, 3 + #t~string135.offset, 1);call write~init~int(58, #t~string135.base, 4 + #t~string135.offset, 1);call write~init~int(0, #t~string135.base, 5 + #t~string135.offset, 1);call #t~string138.base, #t~string138.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string138.base, #t~string138.offset, 1);call write~init~int(37, #t~string138.base, 1 + #t~string138.offset, 1);call write~init~int(105, #t~string138.base, 2 + #t~string138.offset, 1);call write~init~int(0, #t~string138.base, 3 + #t~string138.offset, 1);call #t~string141.base, #t~string141.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string141.base, #t~string141.offset, 1);call write~init~int(37, #t~string141.base, 1 + #t~string141.offset, 1);call write~init~int(105, #t~string141.base, 2 + #t~string141.offset, 1);call write~init~int(0, #t~string141.base, 3 + #t~string141.offset, 1);call #t~string144.base, #t~string144.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string144.base, #t~string144.offset, 1);call write~init~int(37, #t~string144.base, 1 + #t~string144.offset, 1);call write~init~int(105, #t~string144.base, 2 + #t~string144.offset, 1);call write~init~int(0, #t~string144.base, 3 + #t~string144.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string147.base, #t~string147.offset, 1);call write~init~int(37, #t~string147.base, 1 + #t~string147.offset, 1);call write~init~int(105, #t~string147.base, 2 + #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 3 + #t~string147.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string150.base, #t~string150.offset, 1);call write~init~int(37, #t~string150.base, 1 + #t~string150.offset, 1);call write~init~int(105, #t~string150.base, 2 + #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 3 + #t~string150.offset, 1);call #t~string152.base, #t~string152.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string152.base, #t~string152.offset, 1);call write~init~int(0, #t~string152.base, 1 + #t~string152.offset, 1);~weight~0 := 0;~maximumWeight~0 := 100;~expectedDirection~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 128418#L-1 havoc main_#res;havoc main_#t~ret167, main_~retValue_acc~20, main_~tmp~25;havoc main_~retValue_acc~20;havoc main_~tmp~25; 128294#L3336 havoc valid_product_#res;havoc valid_product_~retValue_acc~25;havoc valid_product_~retValue_acc~25;valid_product_~retValue_acc~25 := 1;valid_product_#res := valid_product_~retValue_acc~25; 126628#L3344 main_#t~ret167 := valid_product_#res;main_~tmp~25 := main_#t~ret167;havoc main_#t~ret167; 126629#L3182 assume 0 != main_~tmp~25; 127205#L3156 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 127346#L448 havoc bobCall_#t~ret155, bobCall_~tmp~17;havoc bobCall_~tmp~17;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~22;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~22; 122910#L3239 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~22 := 4;getOrigin_#res := getOrigin_~retValue_acc~22; 122911#L3264 bobCall_#t~ret155 := getOrigin_#res;bobCall_~tmp~17 := bobCall_#t~ret155;havoc bobCall_#t~ret155;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~17;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 124300#L726 assume 0 == initPersonOnFloor_~floor; 124301#L727 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 122997#L834-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 125158#L518 assume !(0 == callOnFloor_~floorID); 125160#L521 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 126082#L530-2 havoc timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_~tmp~15, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_#t~ret12, __utac_acc__Specification3_spec__1_#t~ret13, __utac_acc__Specification3_spec__1_#t~ret14, __utac_acc__Specification3_spec__1_#t~ret15, __utac_acc__Specification3_spec__1_#t~ret16, __utac_acc__Specification3_spec__1_#t~ret17, __utac_acc__Specification3_spec__1_#t~ret18, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 126083#L1626 __utac_acc__Specification3_spec__1_#t~ret7 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret7;havoc __utac_acc__Specification3_spec__1_#t~ret7;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 123511#L1678 __utac_acc__Specification3_spec__1_#t~ret8 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret8;havoc __utac_acc__Specification3_spec__1_#t~ret8; 123512#L97 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 125661#L98 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 128397#L1643 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 123278#L1664 __utac_acc__Specification3_spec__1_#t~ret9 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret9;havoc __utac_acc__Specification3_spec__1_#t~ret9; 123279#L102 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 123822#L203 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret82, stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 125476#L455 assume !(0 == isFloorCalling_~floorID); 125477#L459 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 125458#L482 stopRequestedAtCurrentFloor_#t~ret82 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret82;havoc stopRequestedAtCurrentFloor_#t~ret82; 125731#L2239 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 125733#L1643-10 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 124742#L1664-10 stopRequestedAtCurrentFloor_#t~ret83 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~13 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 127544#L2246 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 129195#L2251 timeShift_#t~ret96 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret96;havoc timeShift_#t~ret96; 129638#L2388 assume !(0 != timeShift_~tmp___9~3); 125566#L2479 assume !(1 == ~doorState~0); 125567#L2479-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~11, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~11;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 130195#L1830 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 130194#L1029 stopRequestedInDirection_#t~ret70 := isTopFloor_#res;stopRequestedInDirection_~tmp~11 := stopRequestedInDirection_#t~ret70;havoc stopRequestedInDirection_#t~ret70; 127313#L1834 assume 0 != stopRequestedInDirection_~tmp~11;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 123576#L2152 timeShift_#t~ret103 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret103;havoc timeShift_#t~ret103; 127820#L2487 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret81, continueInDirection_~dir, continueInDirection_~tmp~12;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~12;~currentHeading~0 := continueInDirection_~dir; 130073#L2206 assume !(1 == ~currentHeading~0); 130070#L2216 assume !(0 == ~currentFloorID~0); 130067#L2216-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 130065#L2222-5 havoc __utac_acc__Specification3_spec__2_#t~ret19, __utac_acc__Specification3_spec__2_#t~ret20, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 130063#L228 assume !(-1 == ~expectedDirection~0); 130060#L240 assume !(1 == ~expectedDirection~0); 130058#L241 havoc timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_~tmp~15, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_#t~ret12, __utac_acc__Specification3_spec__1_#t~ret13, __utac_acc__Specification3_spec__1_#t~ret14, __utac_acc__Specification3_spec__1_#t~ret15, __utac_acc__Specification3_spec__1_#t~ret16, __utac_acc__Specification3_spec__1_#t~ret17, __utac_acc__Specification3_spec__1_#t~ret18, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 130057#L1626-1 __utac_acc__Specification3_spec__1_#t~ret7 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret7;havoc __utac_acc__Specification3_spec__1_#t~ret7;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 130020#L1678-3 __utac_acc__Specification3_spec__1_#t~ret8 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret8;havoc __utac_acc__Specification3_spec__1_#t~ret8; 130013#L97-1 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 130014#L98-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0); 130042#L108-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 1;buttonForFloorIsPressed_#in~floorID := 1;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 130015#L1643-12 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 129987#L1664-12 __utac_acc__Specification3_spec__1_#t~ret10 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___3~0 := __utac_acc__Specification3_spec__1_#t~ret10;havoc __utac_acc__Specification3_spec__1_#t~ret10; 129973#L113-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___3~0;~expectedDirection~0 := 1; 129962#L203-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret82, stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 129957#L455-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 129956#L482-21 stopRequestedAtCurrentFloor_#t~ret82 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret82;havoc stopRequestedAtCurrentFloor_#t~ret82; 129955#L2239-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 129950#L1643-21 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 129949#L1664-21 stopRequestedAtCurrentFloor_#t~ret83 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~13 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 129947#L2246-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 129946#L2251-1 timeShift_#t~ret96 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret96;havoc timeShift_#t~ret96; 129944#L2388-1 assume !(0 != timeShift_~tmp___9~3); 129941#L2479-3 assume !(1 == ~doorState~0); 129935#L2479-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~11, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~11;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 129932#L1830-2 assume !(1 == stopRequestedInDirection_~dir); 129896#L1999-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 129879#L2152-2 timeShift_#t~ret103 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret103;havoc timeShift_#t~ret103; 129877#L2487-1 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret81, continueInDirection_~dir, continueInDirection_~tmp~12;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~12;~currentHeading~0 := continueInDirection_~dir; 129878#L2206-3 assume !(1 == ~currentHeading~0); 130055#L2216-9 assume !(0 == ~currentFloorID~0); 123531#L2216-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 123532#L2222-11 havoc __utac_acc__Specification3_spec__2_#t~ret19, __utac_acc__Specification3_spec__2_#t~ret20, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 132530#L228-1 assume !(-1 == ~expectedDirection~0); 132525#L240-1 assume !(1 == ~expectedDirection~0); 132524#L241-1 havoc timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_~tmp~15, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_#t~ret12, __utac_acc__Specification3_spec__1_#t~ret13, __utac_acc__Specification3_spec__1_#t~ret14, __utac_acc__Specification3_spec__1_#t~ret15, __utac_acc__Specification3_spec__1_#t~ret16, __utac_acc__Specification3_spec__1_#t~ret17, __utac_acc__Specification3_spec__1_#t~ret18, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 132522#L1626-2 __utac_acc__Specification3_spec__1_#t~ret7 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret7;havoc __utac_acc__Specification3_spec__1_#t~ret7;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 132510#L1678-6 __utac_acc__Specification3_spec__1_#t~ret8 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret8;havoc __utac_acc__Specification3_spec__1_#t~ret8; 132505#L97-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 132506#L159-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 132595#L169-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 132547#L180-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 132544#L191-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 130544#L202-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 130444#L203-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret82, stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 130428#L455-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 124264#L482-42 stopRequestedAtCurrentFloor_#t~ret82 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret82;havoc stopRequestedAtCurrentFloor_#t~ret82; 128755#L2239-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 129605#L1643-32 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 123961#L1664-32 stopRequestedAtCurrentFloor_#t~ret83 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~13 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 124485#L2246-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 126042#L2251-2 timeShift_#t~ret96 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret96;havoc timeShift_#t~ret96; 130430#L2388-2 assume !(0 != timeShift_~tmp___9~3); 130407#L2479-6 assume 1 == ~doorState~0;~doorState~0 := 0; 130405#L2479-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~11, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~11;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 130399#L1830-4 assume !(1 == stopRequestedInDirection_~dir); 130355#L1999-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 130346#L2152-4 timeShift_#t~ret103 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret103;havoc timeShift_#t~ret103; 130344#L2487-2 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret81, continueInDirection_~dir, continueInDirection_~tmp~12;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~12;~currentHeading~0 := continueInDirection_~dir; 130343#L2206-6 assume !(1 == ~currentHeading~0); 130342#L2216-18 assume !(0 == ~currentFloorID~0); 124481#L2216-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 132615#L2222-17 havoc __utac_acc__Specification3_spec__2_#t~ret19, __utac_acc__Specification3_spec__2_#t~ret20, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 132613#L228-2 assume !(-1 == ~expectedDirection~0); 132610#L240-2 assume !(1 == ~expectedDirection~0); 132608#L241-2 havoc bobCall_#t~ret155, bobCall_~tmp~17;havoc bobCall_~tmp~17;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~22;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~22; 132603#L3239-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~22 := 4;getOrigin_#res := getOrigin_~retValue_acc~22; 132600#L3264-1 bobCall_#t~ret155 := getOrigin_#res;bobCall_~tmp~17 := bobCall_#t~ret155;havoc bobCall_#t~ret155;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~17;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 132598#L726-1 assume 0 == initPersonOnFloor_~floor; 132561#L727-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 132546#L834-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 132537#L518-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 132538#L530-5 havoc cleanup_#t~ret161, cleanup_#t~ret162, cleanup_~i~3, cleanup_~tmp~23, cleanup_~tmp___0~10, cleanup_~__cil_tmp4~2;havoc cleanup_~i~3;havoc cleanup_~tmp~23;havoc cleanup_~tmp___0~10;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_~tmp~15, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_#t~ret12, __utac_acc__Specification3_spec__1_#t~ret13, __utac_acc__Specification3_spec__1_#t~ret14, __utac_acc__Specification3_spec__1_#t~ret15, __utac_acc__Specification3_spec__1_#t~ret16, __utac_acc__Specification3_spec__1_#t~ret17, __utac_acc__Specification3_spec__1_#t~ret18, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 134480#L1626-3 __utac_acc__Specification3_spec__1_#t~ret7 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret7;havoc __utac_acc__Specification3_spec__1_#t~ret7;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 130591#L1678-9 __utac_acc__Specification3_spec__1_#t~ret8 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret8;havoc __utac_acc__Specification3_spec__1_#t~ret8; 130589#L97-3 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 130587#L98-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0); 130585#L108-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 1;buttonForFloorIsPressed_#in~floorID := 1;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 130583#L1643-34 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 130579#L1664-34 __utac_acc__Specification3_spec__1_#t~ret10 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___3~0 := __utac_acc__Specification3_spec__1_#t~ret10;havoc __utac_acc__Specification3_spec__1_#t~ret10; 130561#L113-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___3~0;~expectedDirection~0 := 1; 129798#L203-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret82, stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 129796#L455-63 assume !(0 == isFloorCalling_~floorID); 129797#L459-63 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 136468#L482-63 stopRequestedAtCurrentFloor_#t~ret82 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret82;havoc stopRequestedAtCurrentFloor_#t~ret82; 136467#L2239-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 136462#L1643-43 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 136458#L1664-43 stopRequestedAtCurrentFloor_#t~ret83 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~13 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 136457#L2246-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 136453#L2251-3 timeShift_#t~ret96 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret96;havoc timeShift_#t~ret96; 136451#L2388-3 assume !(0 != timeShift_~tmp___9~3); 136450#L2479-9 assume !(1 == ~doorState~0); 136449#L2479-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~11, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~11;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 136438#L1830-6 assume !(1 == stopRequestedInDirection_~dir); 136420#L1999-6 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 136414#L2152-6 timeShift_#t~ret103 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret103;havoc timeShift_#t~ret103; 136412#L2487-3 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret81, continueInDirection_~dir, continueInDirection_~tmp~12;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~12;~currentHeading~0 := continueInDirection_~dir; 136413#L2206-9 assume !(1 == ~currentHeading~0); 136541#L2216-27 assume !(0 == ~currentFloorID~0); 127056#L2216-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 124113#L2222-23 havoc __utac_acc__Specification3_spec__2_#t~ret19, __utac_acc__Specification3_spec__2_#t~ret20, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 124114#L228-3 assume !(-1 == ~expectedDirection~0); 124339#L240-3 assume !(1 == ~expectedDirection~0); 127847#L241-3 cleanup_~i~3 := 0; 126737#L2988-2 [2021-11-02 22:05:55,656 INFO L793 eck$LassoCheckResult]: Loop: 126737#L2988-2 assume !false; 128720#L2989 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 126386#L2992 assume cleanup_~i~3 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~6;havoc isBlocked_~retValue_acc~6;isBlocked_~retValue_acc~6 := 0;isBlocked_#res := isBlocked_~retValue_acc~6; 126387#L1473 cleanup_#t~ret161 := isBlocked_#res;cleanup_~tmp___0~10 := cleanup_#t~ret161;havoc cleanup_#t~ret161; 128166#L2996 assume 1 != cleanup_~tmp___0~10; 139324#L2996-1 havoc isIdle_#res;havoc isIdle_#t~ret69, isIdle_~retValue_acc~13, isIdle_~tmp~10;havoc isIdle_~retValue_acc~13;havoc isIdle_~tmp~10;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret64, anyStopRequested_#t~ret65, anyStopRequested_#t~ret66, anyStopRequested_#t~ret67, anyStopRequested_#t~ret68, anyStopRequested_~retValue_acc~12, anyStopRequested_~tmp~9, anyStopRequested_~tmp___0~4, anyStopRequested_~tmp___1~3, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~12;havoc anyStopRequested_~tmp~9;havoc anyStopRequested_~tmp___0~4;havoc anyStopRequested_~tmp___1~3;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~1;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 139322#L455-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 139323#L482-84 anyStopRequested_#t~ret64 := isFloorCalling_#res;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret64;havoc anyStopRequested_#t~ret64; 139286#L1734 assume 0 != anyStopRequested_~tmp___3~1;anyStopRequested_~retValue_acc~12 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~12; 136318#L1798 isIdle_#t~ret69 := anyStopRequested_#res;isIdle_~tmp~10 := isIdle_#t~ret69;havoc isIdle_#t~ret69;isIdle_~retValue_acc~13 := (if 0 == isIdle_~tmp~10 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~13; 139274#L1811 cleanup_#t~ret162 := isIdle_#res;cleanup_~tmp~23 := cleanup_#t~ret162;havoc cleanup_#t~ret162; 139270#L3008 assume !(0 != cleanup_~tmp~23);havoc timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_~tmp~15, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_#t~ret12, __utac_acc__Specification3_spec__1_#t~ret13, __utac_acc__Specification3_spec__1_#t~ret14, __utac_acc__Specification3_spec__1_#t~ret15, __utac_acc__Specification3_spec__1_#t~ret16, __utac_acc__Specification3_spec__1_#t~ret17, __utac_acc__Specification3_spec__1_#t~ret18, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 139269#L1626-4 __utac_acc__Specification3_spec__1_#t~ret7 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret7;havoc __utac_acc__Specification3_spec__1_#t~ret7;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 139268#L1678-12 __utac_acc__Specification3_spec__1_#t~ret8 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret8;havoc __utac_acc__Specification3_spec__1_#t~ret8; 139267#L97-4 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 139265#L98-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 139266#L1643-44 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 141625#L1664-44 __utac_acc__Specification3_spec__1_#t~ret9 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret9;havoc __utac_acc__Specification3_spec__1_#t~ret9; 141608#L102-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 128351#L203-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret82, stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 128352#L455-89 assume !(0 == isFloorCalling_~floorID); 139279#L459-89 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 139278#L482-89 stopRequestedAtCurrentFloor_#t~ret82 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret82;havoc stopRequestedAtCurrentFloor_#t~ret82; 139271#L2239-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 139273#L1643-54 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 123183#L1664-54 stopRequestedAtCurrentFloor_#t~ret83 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~13 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 123184#L2246-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 136152#L2251-4 timeShift_#t~ret96 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret96;havoc timeShift_#t~ret96; 136153#L2388-4 assume !(0 != timeShift_~tmp___9~3); 128393#L2479-12 assume 1 == ~doorState~0;~doorState~0 := 0; 128059#L2479-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~11, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~11;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 128060#L1830-8 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 129124#L1029-20 stopRequestedInDirection_#t~ret70 := isTopFloor_#res;stopRequestedInDirection_~tmp~11 := stopRequestedInDirection_#t~ret70;havoc stopRequestedInDirection_#t~ret70; 136170#L1834-8 assume 0 != stopRequestedInDirection_~tmp~11;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 123126#L2152-8 timeShift_#t~ret103 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret103;havoc timeShift_#t~ret103; 124478#L2487-4 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret81, continueInDirection_~dir, continueInDirection_~tmp~12;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~12;~currentHeading~0 := continueInDirection_~dir; 124480#L2206-12 assume !(1 == ~currentHeading~0); 127474#L2216-36 assume !(0 == ~currentFloorID~0); 128048#L2216-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 141867#L2222-29 havoc __utac_acc__Specification3_spec__2_#t~ret19, __utac_acc__Specification3_spec__2_#t~ret20, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 141865#L228-4 assume !(-1 == ~expectedDirection~0); 141862#L240-4 assume !(1 == ~expectedDirection~0); 126736#L241-4 cleanup_~i~3 := 1 + cleanup_~i~3; 126737#L2988-2 [2021-11-02 22:05:55,657 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-02 22:05:55,658 INFO L85 PathProgramCache]: Analyzing trace with hash -1923539896, now seen corresponding path program 1 times [2021-11-02 22:05:55,658 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-02 22:05:55,658 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [896083936] [2021-11-02 22:05:55,658 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-02 22:05:55,659 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-02 22:05:55,699 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-02 22:05:55,761 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-02 22:05:55,761 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-02 22:05:55,762 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [896083936] [2021-11-02 22:05:55,762 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [896083936] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-02 22:05:55,762 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-02 22:05:55,763 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-11-02 22:05:55,763 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1180468883] [2021-11-02 22:05:55,763 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-11-02 22:05:55,764 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-02 22:05:55,764 INFO L85 PathProgramCache]: Analyzing trace with hash -1692626219, now seen corresponding path program 1 times [2021-11-02 22:05:55,764 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-02 22:05:55,766 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [169622982] [2021-11-02 22:05:55,766 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-02 22:05:55,766 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-02 22:05:55,777 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-02 22:05:55,841 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-02 22:05:55,845 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-02 22:05:55,849 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [169622982] [2021-11-02 22:05:55,851 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [169622982] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-02 22:05:55,851 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-02 22:05:55,852 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-11-02 22:05:55,853 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1145933783] [2021-11-02 22:05:55,854 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-11-02 22:05:55,854 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-02 22:05:55,856 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-11-02 22:05:55,857 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-11-02 22:05:55,858 INFO L87 Difference]: Start difference. First operand 20211 states and 37881 transitions. cyclomatic complexity: 17671 Second operand has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 6 states have internal predecessors, (43), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:06:01,751 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-02 22:06:01,752 INFO L93 Difference]: Finished difference Result 39591 states and 73855 transitions. [2021-11-02 22:06:01,752 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2021-11-02 22:06:01,752 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 39591 states and 73855 transitions. [2021-11-02 22:06:01,912 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 9474 [2021-11-02 22:06:02,085 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 39591 states to 39591 states and 73855 transitions. [2021-11-02 22:06:02,086 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 39591 [2021-11-02 22:06:02,122 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 39591 [2021-11-02 22:06:02,123 INFO L73 IsDeterministic]: Start isDeterministic. Operand 39591 states and 73855 transitions. [2021-11-02 22:06:02,171 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-11-02 22:06:02,171 INFO L681 BuchiCegarLoop]: Abstraction has 39591 states and 73855 transitions. [2021-11-02 22:06:02,205 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 39591 states and 73855 transitions. [2021-11-02 22:06:02,839 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 39591 to 27627. [2021-11-02 22:06:02,875 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 27627 states, 27627 states have (on average 1.8664712057045645) internal successors, (51565), 27626 states have internal predecessors, (51565), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:06:03,177 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 27627 states to 27627 states and 51565 transitions. [2021-11-02 22:06:03,178 INFO L704 BuchiCegarLoop]: Abstraction has 27627 states and 51565 transitions. [2021-11-02 22:06:03,178 INFO L587 BuchiCegarLoop]: Abstraction has 27627 states and 51565 transitions. [2021-11-02 22:06:03,178 INFO L425 BuchiCegarLoop]: ======== Iteration 5============ [2021-11-02 22:06:03,178 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 27627 states and 51565 transitions. [2021-11-02 22:06:03,273 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 6512 [2021-11-02 22:06:03,273 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-11-02 22:06:03,273 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-11-02 22:06:03,277 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-02 22:06:03,277 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-02 22:06:03,278 INFO L791 eck$LassoCheckResult]: Stem: 188249#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(2);call write~init~int(48, #t~string4.base, #t~string4.offset, 1);call write~init~int(0, #t~string4.base, 1 + #t~string4.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(31);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(12);call #t~string45.base, #t~string45.offset := #Ultimate.allocOnStack(30);call #t~string46.base, #t~string46.offset := #Ultimate.allocOnStack(9);call #t~string47.base, #t~string47.offset := #Ultimate.allocOnStack(21);call #t~string48.base, #t~string48.offset := #Ultimate.allocOnStack(30);call #t~string49.base, #t~string49.offset := #Ultimate.allocOnStack(9);call #t~string50.base, #t~string50.offset := #Ultimate.allocOnStack(21);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(30);call #t~string55.base, #t~string55.offset := #Ultimate.allocOnStack(9);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(25);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(30);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(9);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(25);call #t~string107.base, #t~string107.offset := #Ultimate.allocOnStack(10);call #t~string109.base, #t~string109.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string109.base, #t~string109.offset, 1);call write~init~int(95, #t~string109.base, 1 + #t~string109.offset, 1);call write~init~int(93, #t~string109.base, 2 + #t~string109.offset, 1);call write~init~int(0, #t~string109.base, 3 + #t~string109.offset, 1);call #t~string111.base, #t~string111.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string111.base, #t~string111.offset, 1);call write~init~int(93, #t~string111.base, 1 + #t~string111.offset, 1);call write~init~int(32, #t~string111.base, 2 + #t~string111.offset, 1);call write~init~int(0, #t~string111.base, 3 + #t~string111.offset, 1);call #t~string113.base, #t~string113.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string113.base, #t~string113.offset, 1);call write~init~int(97, #t~string113.base, 1 + #t~string113.offset, 1);call write~init~int(116, #t~string113.base, 2 + #t~string113.offset, 1);call write~init~int(32, #t~string113.base, 3 + #t~string113.offset, 1);call write~init~int(0, #t~string113.base, 4 + #t~string113.offset, 1);call #t~string115.base, #t~string115.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string115.base, #t~string115.offset, 1);call write~init~int(105, #t~string115.base, 1 + #t~string115.offset, 1);call write~init~int(0, #t~string115.base, 2 + #t~string115.offset, 1);call #t~string117.base, #t~string117.offset := #Ultimate.allocOnStack(10);call #t~string119.base, #t~string119.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string119.base, #t~string119.offset, 1);call write~init~int(112, #t~string119.base, 1 + #t~string119.offset, 1);call write~init~int(0, #t~string119.base, 2 + #t~string119.offset, 1);call #t~string121.base, #t~string121.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string121.base, #t~string121.offset, 1);call write~init~int(111, #t~string121.base, 1 + #t~string121.offset, 1);call write~init~int(119, #t~string121.base, 2 + #t~string121.offset, 1);call write~init~int(110, #t~string121.base, 3 + #t~string121.offset, 1);call write~init~int(0, #t~string121.base, 4 + #t~string121.offset, 1);call #t~string123.base, #t~string123.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string123.base, #t~string123.offset, 1);call write~init~int(73, #t~string123.base, 1 + #t~string123.offset, 1);call write~init~int(76, #t~string123.base, 2 + #t~string123.offset, 1);call write~init~int(95, #t~string123.base, 3 + #t~string123.offset, 1);call write~init~int(112, #t~string123.base, 4 + #t~string123.offset, 1);call write~init~int(58, #t~string123.base, 5 + #t~string123.offset, 1);call write~init~int(0, #t~string123.base, 6 + #t~string123.offset, 1);call #t~string125.base, #t~string125.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string125.base, #t~string125.offset, 1);call write~init~int(37, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(105, #t~string125.base, 2 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 3 + #t~string125.offset, 1);call #t~string127.base, #t~string127.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string127.base, #t~string127.offset, 1);call write~init~int(37, #t~string127.base, 1 + #t~string127.offset, 1);call write~init~int(105, #t~string127.base, 2 + #t~string127.offset, 1);call write~init~int(0, #t~string127.base, 3 + #t~string127.offset, 1);call #t~string129.base, #t~string129.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string129.base, #t~string129.offset, 1);call write~init~int(37, #t~string129.base, 1 + #t~string129.offset, 1);call write~init~int(105, #t~string129.base, 2 + #t~string129.offset, 1);call write~init~int(0, #t~string129.base, 3 + #t~string129.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string131.base, #t~string131.offset, 1);call write~init~int(37, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string133.base, #t~string133.offset, 1);call write~init~int(37, #t~string133.base, 1 + #t~string133.offset, 1);call write~init~int(105, #t~string133.base, 2 + #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 3 + #t~string133.offset, 1);call #t~string135.base, #t~string135.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string135.base, #t~string135.offset, 1);call write~init~int(70, #t~string135.base, 1 + #t~string135.offset, 1);call write~init~int(95, #t~string135.base, 2 + #t~string135.offset, 1);call write~init~int(112, #t~string135.base, 3 + #t~string135.offset, 1);call write~init~int(58, #t~string135.base, 4 + #t~string135.offset, 1);call write~init~int(0, #t~string135.base, 5 + #t~string135.offset, 1);call #t~string138.base, #t~string138.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string138.base, #t~string138.offset, 1);call write~init~int(37, #t~string138.base, 1 + #t~string138.offset, 1);call write~init~int(105, #t~string138.base, 2 + #t~string138.offset, 1);call write~init~int(0, #t~string138.base, 3 + #t~string138.offset, 1);call #t~string141.base, #t~string141.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string141.base, #t~string141.offset, 1);call write~init~int(37, #t~string141.base, 1 + #t~string141.offset, 1);call write~init~int(105, #t~string141.base, 2 + #t~string141.offset, 1);call write~init~int(0, #t~string141.base, 3 + #t~string141.offset, 1);call #t~string144.base, #t~string144.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string144.base, #t~string144.offset, 1);call write~init~int(37, #t~string144.base, 1 + #t~string144.offset, 1);call write~init~int(105, #t~string144.base, 2 + #t~string144.offset, 1);call write~init~int(0, #t~string144.base, 3 + #t~string144.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string147.base, #t~string147.offset, 1);call write~init~int(37, #t~string147.base, 1 + #t~string147.offset, 1);call write~init~int(105, #t~string147.base, 2 + #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 3 + #t~string147.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string150.base, #t~string150.offset, 1);call write~init~int(37, #t~string150.base, 1 + #t~string150.offset, 1);call write~init~int(105, #t~string150.base, 2 + #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 3 + #t~string150.offset, 1);call #t~string152.base, #t~string152.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string152.base, #t~string152.offset, 1);call write~init~int(0, #t~string152.base, 1 + #t~string152.offset, 1);~weight~0 := 0;~maximumWeight~0 := 100;~expectedDirection~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 188250#L-1 havoc main_#res;havoc main_#t~ret167, main_~retValue_acc~20, main_~tmp~25;havoc main_~retValue_acc~20;havoc main_~tmp~25; 188120#L3336 havoc valid_product_#res;havoc valid_product_~retValue_acc~25;havoc valid_product_~retValue_acc~25;valid_product_~retValue_acc~25 := 1;valid_product_#res := valid_product_~retValue_acc~25; 186436#L3344 main_#t~ret167 := valid_product_#res;main_~tmp~25 := main_#t~ret167;havoc main_#t~ret167; 186437#L3182 assume 0 != main_~tmp~25; 187020#L3156 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 187165#L448 havoc bobCall_#t~ret155, bobCall_~tmp~17;havoc bobCall_~tmp~17;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~22;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~22; 182738#L3239 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~22 := 4;getOrigin_#res := getOrigin_~retValue_acc~22; 182739#L3264 bobCall_#t~ret155 := getOrigin_#res;bobCall_~tmp~17 := bobCall_#t~ret155;havoc bobCall_#t~ret155;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~17;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 184111#L726 assume 0 == initPersonOnFloor_~floor; 184112#L727 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 182825#L834-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 184977#L518 assume !(0 == callOnFloor_~floorID); 184979#L521 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 185888#L530-2 havoc timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_~tmp~15, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_#t~ret12, __utac_acc__Specification3_spec__1_#t~ret13, __utac_acc__Specification3_spec__1_#t~ret14, __utac_acc__Specification3_spec__1_#t~ret15, __utac_acc__Specification3_spec__1_#t~ret16, __utac_acc__Specification3_spec__1_#t~ret17, __utac_acc__Specification3_spec__1_#t~ret18, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 185889#L1626 __utac_acc__Specification3_spec__1_#t~ret7 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret7;havoc __utac_acc__Specification3_spec__1_#t~ret7;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 183333#L1678 __utac_acc__Specification3_spec__1_#t~ret8 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret8;havoc __utac_acc__Specification3_spec__1_#t~ret8; 183334#L97 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 185473#L98 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 188229#L1643 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 183100#L1664 __utac_acc__Specification3_spec__1_#t~ret9 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret9;havoc __utac_acc__Specification3_spec__1_#t~ret9; 183101#L102 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 188594#L203 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret82, stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 188595#L455 assume !(0 == isFloorCalling_~floorID); 186159#L459 assume !(1 == isFloorCalling_~floorID); 186160#L463 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 185981#L482 stopRequestedAtCurrentFloor_#t~ret82 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret82;havoc stopRequestedAtCurrentFloor_#t~ret82; 185982#L2239 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 185600#L1643-10 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 184564#L1664-10 stopRequestedAtCurrentFloor_#t~ret83 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~13 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 189028#L2246 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 189030#L2251 timeShift_#t~ret96 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret96;havoc timeShift_#t~ret96; 189493#L2388 assume !(0 != timeShift_~tmp___9~3); 189495#L2479 assume !(1 == ~doorState~0); 188493#L2479-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~11, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~11;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 188494#L1830 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 186673#L1029 stopRequestedInDirection_#t~ret70 := isTopFloor_#res;stopRequestedInDirection_~tmp~11 := stopRequestedInDirection_#t~ret70;havoc stopRequestedInDirection_#t~ret70; 186674#L1834 assume 0 != stopRequestedInDirection_~tmp~11;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 192567#L2152 timeShift_#t~ret103 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret103;havoc timeShift_#t~ret103; 192566#L2487 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret81, continueInDirection_~dir, continueInDirection_~tmp~12;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~12;~currentHeading~0 := continueInDirection_~dir; 187663#L2206 assume !(1 == ~currentHeading~0); 187664#L2216 assume !(0 == ~currentFloorID~0); 189355#L2216-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 182724#L2222-5 havoc __utac_acc__Specification3_spec__2_#t~ret19, __utac_acc__Specification3_spec__2_#t~ret20, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 182725#L228 assume !(-1 == ~expectedDirection~0); 188073#L240 assume !(1 == ~expectedDirection~0); 187944#L241 havoc timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_~tmp~15, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_#t~ret12, __utac_acc__Specification3_spec__1_#t~ret13, __utac_acc__Specification3_spec__1_#t~ret14, __utac_acc__Specification3_spec__1_#t~ret15, __utac_acc__Specification3_spec__1_#t~ret16, __utac_acc__Specification3_spec__1_#t~ret17, __utac_acc__Specification3_spec__1_#t~ret18, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 186788#L1626-1 __utac_acc__Specification3_spec__1_#t~ret7 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret7;havoc __utac_acc__Specification3_spec__1_#t~ret7;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 186789#L1678-3 __utac_acc__Specification3_spec__1_#t~ret8 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret8;havoc __utac_acc__Specification3_spec__1_#t~ret8; 187693#L97-1 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 193571#L98-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0); 193569#L108-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 1;buttonForFloorIsPressed_#in~floorID := 1;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 193562#L1643-12 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 193545#L1664-12 __utac_acc__Specification3_spec__1_#t~ret10 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___3~0 := __utac_acc__Specification3_spec__1_#t~ret10;havoc __utac_acc__Specification3_spec__1_#t~ret10; 193539#L113-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___3~0;~expectedDirection~0 := 1; 193532#L203-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret82, stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 193523#L455-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 193521#L482-21 stopRequestedAtCurrentFloor_#t~ret82 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret82;havoc stopRequestedAtCurrentFloor_#t~ret82; 193517#L2239-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 193519#L1643-21 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 193522#L1664-21 stopRequestedAtCurrentFloor_#t~ret83 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~13 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 193520#L2246-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 193515#L2251-1 timeShift_#t~ret96 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret96;havoc timeShift_#t~ret96; 193516#L2388-1 assume !(0 != timeShift_~tmp___9~3); 197761#L2479-3 assume !(1 == ~doorState~0); 197757#L2479-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~11, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~11;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 197747#L1830-2 assume !(1 == stopRequestedInDirection_~dir); 197742#L1999-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 197724#L2152-2 timeShift_#t~ret103 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret103;havoc timeShift_#t~ret103; 197723#L2487-1 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret81, continueInDirection_~dir, continueInDirection_~tmp~12;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~12;~currentHeading~0 := continueInDirection_~dir; 188309#L2206-3 assume !(1 == ~currentHeading~0); 188310#L2216-9 assume !(0 == ~currentFloorID~0); 183352#L2216-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 183353#L2222-11 havoc __utac_acc__Specification3_spec__2_#t~ret19, __utac_acc__Specification3_spec__2_#t~ret20, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 192719#L228-1 assume !(-1 == ~expectedDirection~0); 192716#L240-1 assume !(1 == ~expectedDirection~0); 192715#L241-1 havoc timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_~tmp~15, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_#t~ret12, __utac_acc__Specification3_spec__1_#t~ret13, __utac_acc__Specification3_spec__1_#t~ret14, __utac_acc__Specification3_spec__1_#t~ret15, __utac_acc__Specification3_spec__1_#t~ret16, __utac_acc__Specification3_spec__1_#t~ret17, __utac_acc__Specification3_spec__1_#t~ret18, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 191601#L1626-2 __utac_acc__Specification3_spec__1_#t~ret7 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret7;havoc __utac_acc__Specification3_spec__1_#t~ret7;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 191553#L1678-6 __utac_acc__Specification3_spec__1_#t~ret8 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret8;havoc __utac_acc__Specification3_spec__1_#t~ret8; 191547#L97-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 191535#L159-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 191534#L169-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 191494#L180-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 191476#L191-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 191460#L202-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 191447#L203-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret82, stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 191441#L455-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 191436#L482-42 stopRequestedAtCurrentFloor_#t~ret82 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret82;havoc stopRequestedAtCurrentFloor_#t~ret82; 191432#L2239-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 191434#L1643-32 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 191437#L1664-32 stopRequestedAtCurrentFloor_#t~ret83 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~13 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 191435#L2246-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 191428#L2251-2 timeShift_#t~ret96 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret96;havoc timeShift_#t~ret96; 191429#L2388-2 assume !(0 != timeShift_~tmp___9~3); 193802#L2479-6 assume 1 == ~doorState~0;~doorState~0 := 0; 193796#L2479-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~11, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~11;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 193787#L1830-4 assume !(1 == stopRequestedInDirection_~dir); 193775#L1999-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 193764#L2152-4 timeShift_#t~ret103 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret103;havoc timeShift_#t~ret103; 193762#L2487-2 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret81, continueInDirection_~dir, continueInDirection_~tmp~12;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~12;~currentHeading~0 := continueInDirection_~dir; 193753#L2206-6 assume !(1 == ~currentHeading~0); 193740#L2216-18 assume !(0 == ~currentFloorID~0); 189843#L2216-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 189834#L2222-17 havoc __utac_acc__Specification3_spec__2_#t~ret19, __utac_acc__Specification3_spec__2_#t~ret20, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 189832#L228-2 assume !(-1 == ~expectedDirection~0); 189829#L240-2 assume !(1 == ~expectedDirection~0); 189827#L241-2 havoc bobCall_#t~ret155, bobCall_~tmp~17;havoc bobCall_~tmp~17;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~22;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~22; 189823#L3239-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~22 := 4;getOrigin_#res := getOrigin_~retValue_acc~22; 189820#L3264-1 bobCall_#t~ret155 := getOrigin_#res;bobCall_~tmp~17 := bobCall_#t~ret155;havoc bobCall_#t~ret155;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~17;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 189819#L726-1 assume 0 == initPersonOnFloor_~floor; 189797#L727-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 189784#L834-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 189782#L518-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 189783#L530-5 havoc cleanup_#t~ret161, cleanup_#t~ret162, cleanup_~i~3, cleanup_~tmp~23, cleanup_~tmp___0~10, cleanup_~__cil_tmp4~2;havoc cleanup_~i~3;havoc cleanup_~tmp~23;havoc cleanup_~tmp___0~10;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_~tmp~15, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_#t~ret12, __utac_acc__Specification3_spec__1_#t~ret13, __utac_acc__Specification3_spec__1_#t~ret14, __utac_acc__Specification3_spec__1_#t~ret15, __utac_acc__Specification3_spec__1_#t~ret16, __utac_acc__Specification3_spec__1_#t~ret17, __utac_acc__Specification3_spec__1_#t~ret18, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 198956#L1626-3 __utac_acc__Specification3_spec__1_#t~ret7 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret7;havoc __utac_acc__Specification3_spec__1_#t~ret7;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 198954#L1678-9 __utac_acc__Specification3_spec__1_#t~ret8 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret8;havoc __utac_acc__Specification3_spec__1_#t~ret8; 198952#L97-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 189742#L159-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 189141#L1643-38 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 198811#L1664-38 __utac_acc__Specification3_spec__1_#t~ret14 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret14;havoc __utac_acc__Specification3_spec__1_#t~ret14; 198419#L163-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 198417#L203-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret82, stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 188721#L455-63 assume !(0 == isFloorCalling_~floorID); 188722#L459-63 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 198413#L482-63 stopRequestedAtCurrentFloor_#t~ret82 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret82;havoc stopRequestedAtCurrentFloor_#t~ret82; 198412#L2239-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 198410#L1643-43 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 198406#L1664-43 stopRequestedAtCurrentFloor_#t~ret83 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~13 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 186002#L2246-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 186004#L2251-3 timeShift_#t~ret96 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret96;havoc timeShift_#t~ret96; 209957#L2388-3 assume !(0 != timeShift_~tmp___9~3); 188460#L2479-9 assume !(1 == ~doorState~0); 188461#L2479-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~11, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~11;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 198399#L1830-6 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 183708#L1029-15 stopRequestedInDirection_#t~ret70 := isTopFloor_#res;stopRequestedInDirection_~tmp~11 := stopRequestedInDirection_#t~ret70;havoc stopRequestedInDirection_#t~ret70; 183508#L1834-6 assume 0 != stopRequestedInDirection_~tmp~11;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 182764#L2152-6 timeShift_#t~ret103 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret103;havoc timeShift_#t~ret103; 189027#L2487-3 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret81, continueInDirection_~dir, continueInDirection_~tmp~12;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~12;~currentHeading~0 := continueInDirection_~dir; 198330#L2206-9 assume !(1 == ~currentHeading~0); 198171#L2216-27 assume !(0 == ~currentFloorID~0); 186868#L2216-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 183926#L2222-23 havoc __utac_acc__Specification3_spec__2_#t~ret19, __utac_acc__Specification3_spec__2_#t~ret20, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 183927#L228-3 assume !(-1 == ~expectedDirection~0); 202282#L240-3 assume !(1 == ~expectedDirection~0); 202280#L241-3 cleanup_~i~3 := 0; 202278#L2988-2 [2021-11-02 22:06:03,279 INFO L793 eck$LassoCheckResult]: Loop: 202278#L2988-2 assume !false; 202277#L2989 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 202276#L2992 assume cleanup_~i~3 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~6;havoc isBlocked_~retValue_acc~6;isBlocked_~retValue_acc~6 := 0;isBlocked_#res := isBlocked_~retValue_acc~6; 202275#L1473 cleanup_#t~ret161 := isBlocked_#res;cleanup_~tmp___0~10 := cleanup_#t~ret161;havoc cleanup_#t~ret161; 202252#L2996 assume 1 != cleanup_~tmp___0~10; 202243#L2996-1 havoc isIdle_#res;havoc isIdle_#t~ret69, isIdle_~retValue_acc~13, isIdle_~tmp~10;havoc isIdle_~retValue_acc~13;havoc isIdle_~tmp~10;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret64, anyStopRequested_#t~ret65, anyStopRequested_#t~ret66, anyStopRequested_#t~ret67, anyStopRequested_#t~ret68, anyStopRequested_~retValue_acc~12, anyStopRequested_~tmp~9, anyStopRequested_~tmp___0~4, anyStopRequested_~tmp___1~3, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~12;havoc anyStopRequested_~tmp~9;havoc anyStopRequested_~tmp___0~4;havoc anyStopRequested_~tmp___1~3;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~1;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 202233#L455-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 202205#L482-84 anyStopRequested_#t~ret64 := isFloorCalling_#res;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret64;havoc anyStopRequested_#t~ret64; 202206#L1734 assume 0 != anyStopRequested_~tmp___3~1;anyStopRequested_~retValue_acc~12 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~12; 202210#L1798 isIdle_#t~ret69 := anyStopRequested_#res;isIdle_~tmp~10 := isIdle_#t~ret69;havoc isIdle_#t~ret69;isIdle_~retValue_acc~13 := (if 0 == isIdle_~tmp~10 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~13; 202209#L1811 cleanup_#t~ret162 := isIdle_#res;cleanup_~tmp~23 := cleanup_#t~ret162;havoc cleanup_#t~ret162; 202010#L3008 assume !(0 != cleanup_~tmp~23);havoc timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_~tmp~15, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_#t~ret12, __utac_acc__Specification3_spec__1_#t~ret13, __utac_acc__Specification3_spec__1_#t~ret14, __utac_acc__Specification3_spec__1_#t~ret15, __utac_acc__Specification3_spec__1_#t~ret16, __utac_acc__Specification3_spec__1_#t~ret17, __utac_acc__Specification3_spec__1_#t~ret18, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 202008#L1626-4 __utac_acc__Specification3_spec__1_#t~ret7 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret7;havoc __utac_acc__Specification3_spec__1_#t~ret7;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 202005#L1678-12 __utac_acc__Specification3_spec__1_#t~ret8 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret8;havoc __utac_acc__Specification3_spec__1_#t~ret8; 202002#L97-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 202003#L159-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 206267#L1643-49 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 206259#L1664-49 __utac_acc__Specification3_spec__1_#t~ret14 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret14;havoc __utac_acc__Specification3_spec__1_#t~ret14; 206258#L163-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 198059#L203-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret82, stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 198060#L455-89 assume !(0 == isFloorCalling_~floorID); 209773#L459-89 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 209767#L482-89 stopRequestedAtCurrentFloor_#t~ret82 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret82;havoc stopRequestedAtCurrentFloor_#t~ret82; 209763#L2239-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 209764#L1643-54 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 209766#L1664-54 stopRequestedAtCurrentFloor_#t~ret83 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~13 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 209765#L2246-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 209762#L2251-4 timeShift_#t~ret96 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret96;havoc timeShift_#t~ret96; 209759#L2388-4 assume !(0 != timeShift_~tmp___9~3); 203657#L2479-12 assume 1 == ~doorState~0;~doorState~0 := 0; 210051#L2479-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~11, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~11;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 210050#L1830-8 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 210049#L1029-20 stopRequestedInDirection_#t~ret70 := isTopFloor_#res;stopRequestedInDirection_~tmp~11 := stopRequestedInDirection_#t~ret70;havoc stopRequestedInDirection_#t~ret70; 209998#L1834-8 assume 0 != stopRequestedInDirection_~tmp~11;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 209981#L2152-8 timeShift_#t~ret103 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret103;havoc timeShift_#t~ret103; 209988#L2487-4 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret81, continueInDirection_~dir, continueInDirection_~tmp~12;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~12;~currentHeading~0 := continueInDirection_~dir; 209963#L2206-12 assume !(1 == ~currentHeading~0); 189442#L2216-36 assume !(0 == ~currentFloorID~0); 187871#L2216-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 186136#L2222-29 havoc __utac_acc__Specification3_spec__2_#t~ret19, __utac_acc__Specification3_spec__2_#t~ret20, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 202298#L228-4 assume !(-1 == ~expectedDirection~0); 202295#L240-4 assume !(1 == ~expectedDirection~0); 202279#L241-4 cleanup_~i~3 := 1 + cleanup_~i~3; 202278#L2988-2 [2021-11-02 22:06:03,280 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-02 22:06:03,280 INFO L85 PathProgramCache]: Analyzing trace with hash 1376577338, now seen corresponding path program 1 times [2021-11-02 22:06:03,280 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-02 22:06:03,281 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [616444886] [2021-11-02 22:06:03,281 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-02 22:06:03,281 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-02 22:06:03,312 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-02 22:06:03,359 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-02 22:06:03,359 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-02 22:06:03,360 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [616444886] [2021-11-02 22:06:03,360 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [616444886] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-02 22:06:03,360 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-02 22:06:03,360 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-11-02 22:06:03,361 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [40239686] [2021-11-02 22:06:03,361 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-11-02 22:06:03,362 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-02 22:06:03,362 INFO L85 PathProgramCache]: Analyzing trace with hash -147049638, now seen corresponding path program 1 times [2021-11-02 22:06:03,362 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-02 22:06:03,362 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [50057979] [2021-11-02 22:06:03,363 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-02 22:06:03,363 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-02 22:06:03,372 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-02 22:06:03,401 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-02 22:06:03,402 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-02 22:06:03,402 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [50057979] [2021-11-02 22:06:03,402 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [50057979] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-02 22:06:03,403 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-02 22:06:03,403 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-11-02 22:06:03,403 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [420964536] [2021-11-02 22:06:03,403 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-11-02 22:06:03,404 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-02 22:06:03,404 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-11-02 22:06:03,404 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-11-02 22:06:03,405 INFO L87 Difference]: Start difference. First operand 27627 states and 51565 transitions. cyclomatic complexity: 23939 Second operand has 5 states, 5 states have (on average 8.6) internal successors, (43), 5 states have internal predecessors, (43), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:06:10,361 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-02 22:06:10,361 INFO L93 Difference]: Finished difference Result 65773 states and 122841 transitions. [2021-11-02 22:06:10,362 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2021-11-02 22:06:10,362 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 65773 states and 122841 transitions. [2021-11-02 22:06:10,773 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 16864 [2021-11-02 22:06:11,008 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 65773 states to 65773 states and 122841 transitions. [2021-11-02 22:06:11,008 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 65773 [2021-11-02 22:06:11,059 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 65773 [2021-11-02 22:06:11,059 INFO L73 IsDeterministic]: Start isDeterministic. Operand 65773 states and 122841 transitions. [2021-11-02 22:06:11,100 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-11-02 22:06:11,100 INFO L681 BuchiCegarLoop]: Abstraction has 65773 states and 122841 transitions. [2021-11-02 22:06:11,165 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 65773 states and 122841 transitions. [2021-11-02 22:06:11,784 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 65773 to 27055. [2021-11-02 22:06:11,815 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 27055 states, 27055 states have (on average 1.8629828127887635) internal successors, (50403), 27054 states have internal predecessors, (50403), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:06:11,901 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 27055 states to 27055 states and 50403 transitions. [2021-11-02 22:06:11,901 INFO L704 BuchiCegarLoop]: Abstraction has 27055 states and 50403 transitions. [2021-11-02 22:06:11,901 INFO L587 BuchiCegarLoop]: Abstraction has 27055 states and 50403 transitions. [2021-11-02 22:06:11,901 INFO L425 BuchiCegarLoop]: ======== Iteration 6============ [2021-11-02 22:06:11,901 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 27055 states and 50403 transitions. [2021-11-02 22:06:12,010 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 6369 [2021-11-02 22:06:12,010 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-11-02 22:06:12,010 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-11-02 22:06:12,014 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-02 22:06:12,014 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-02 22:06:12,015 INFO L791 eck$LassoCheckResult]: Stem: 281501#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(2);call write~init~int(48, #t~string4.base, #t~string4.offset, 1);call write~init~int(0, #t~string4.base, 1 + #t~string4.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(31);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(12);call #t~string45.base, #t~string45.offset := #Ultimate.allocOnStack(30);call #t~string46.base, #t~string46.offset := #Ultimate.allocOnStack(9);call #t~string47.base, #t~string47.offset := #Ultimate.allocOnStack(21);call #t~string48.base, #t~string48.offset := #Ultimate.allocOnStack(30);call #t~string49.base, #t~string49.offset := #Ultimate.allocOnStack(9);call #t~string50.base, #t~string50.offset := #Ultimate.allocOnStack(21);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(30);call #t~string55.base, #t~string55.offset := #Ultimate.allocOnStack(9);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(25);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(30);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(9);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(25);call #t~string107.base, #t~string107.offset := #Ultimate.allocOnStack(10);call #t~string109.base, #t~string109.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string109.base, #t~string109.offset, 1);call write~init~int(95, #t~string109.base, 1 + #t~string109.offset, 1);call write~init~int(93, #t~string109.base, 2 + #t~string109.offset, 1);call write~init~int(0, #t~string109.base, 3 + #t~string109.offset, 1);call #t~string111.base, #t~string111.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string111.base, #t~string111.offset, 1);call write~init~int(93, #t~string111.base, 1 + #t~string111.offset, 1);call write~init~int(32, #t~string111.base, 2 + #t~string111.offset, 1);call write~init~int(0, #t~string111.base, 3 + #t~string111.offset, 1);call #t~string113.base, #t~string113.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string113.base, #t~string113.offset, 1);call write~init~int(97, #t~string113.base, 1 + #t~string113.offset, 1);call write~init~int(116, #t~string113.base, 2 + #t~string113.offset, 1);call write~init~int(32, #t~string113.base, 3 + #t~string113.offset, 1);call write~init~int(0, #t~string113.base, 4 + #t~string113.offset, 1);call #t~string115.base, #t~string115.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string115.base, #t~string115.offset, 1);call write~init~int(105, #t~string115.base, 1 + #t~string115.offset, 1);call write~init~int(0, #t~string115.base, 2 + #t~string115.offset, 1);call #t~string117.base, #t~string117.offset := #Ultimate.allocOnStack(10);call #t~string119.base, #t~string119.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string119.base, #t~string119.offset, 1);call write~init~int(112, #t~string119.base, 1 + #t~string119.offset, 1);call write~init~int(0, #t~string119.base, 2 + #t~string119.offset, 1);call #t~string121.base, #t~string121.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string121.base, #t~string121.offset, 1);call write~init~int(111, #t~string121.base, 1 + #t~string121.offset, 1);call write~init~int(119, #t~string121.base, 2 + #t~string121.offset, 1);call write~init~int(110, #t~string121.base, 3 + #t~string121.offset, 1);call write~init~int(0, #t~string121.base, 4 + #t~string121.offset, 1);call #t~string123.base, #t~string123.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string123.base, #t~string123.offset, 1);call write~init~int(73, #t~string123.base, 1 + #t~string123.offset, 1);call write~init~int(76, #t~string123.base, 2 + #t~string123.offset, 1);call write~init~int(95, #t~string123.base, 3 + #t~string123.offset, 1);call write~init~int(112, #t~string123.base, 4 + #t~string123.offset, 1);call write~init~int(58, #t~string123.base, 5 + #t~string123.offset, 1);call write~init~int(0, #t~string123.base, 6 + #t~string123.offset, 1);call #t~string125.base, #t~string125.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string125.base, #t~string125.offset, 1);call write~init~int(37, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(105, #t~string125.base, 2 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 3 + #t~string125.offset, 1);call #t~string127.base, #t~string127.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string127.base, #t~string127.offset, 1);call write~init~int(37, #t~string127.base, 1 + #t~string127.offset, 1);call write~init~int(105, #t~string127.base, 2 + #t~string127.offset, 1);call write~init~int(0, #t~string127.base, 3 + #t~string127.offset, 1);call #t~string129.base, #t~string129.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string129.base, #t~string129.offset, 1);call write~init~int(37, #t~string129.base, 1 + #t~string129.offset, 1);call write~init~int(105, #t~string129.base, 2 + #t~string129.offset, 1);call write~init~int(0, #t~string129.base, 3 + #t~string129.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string131.base, #t~string131.offset, 1);call write~init~int(37, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string133.base, #t~string133.offset, 1);call write~init~int(37, #t~string133.base, 1 + #t~string133.offset, 1);call write~init~int(105, #t~string133.base, 2 + #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 3 + #t~string133.offset, 1);call #t~string135.base, #t~string135.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string135.base, #t~string135.offset, 1);call write~init~int(70, #t~string135.base, 1 + #t~string135.offset, 1);call write~init~int(95, #t~string135.base, 2 + #t~string135.offset, 1);call write~init~int(112, #t~string135.base, 3 + #t~string135.offset, 1);call write~init~int(58, #t~string135.base, 4 + #t~string135.offset, 1);call write~init~int(0, #t~string135.base, 5 + #t~string135.offset, 1);call #t~string138.base, #t~string138.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string138.base, #t~string138.offset, 1);call write~init~int(37, #t~string138.base, 1 + #t~string138.offset, 1);call write~init~int(105, #t~string138.base, 2 + #t~string138.offset, 1);call write~init~int(0, #t~string138.base, 3 + #t~string138.offset, 1);call #t~string141.base, #t~string141.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string141.base, #t~string141.offset, 1);call write~init~int(37, #t~string141.base, 1 + #t~string141.offset, 1);call write~init~int(105, #t~string141.base, 2 + #t~string141.offset, 1);call write~init~int(0, #t~string141.base, 3 + #t~string141.offset, 1);call #t~string144.base, #t~string144.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string144.base, #t~string144.offset, 1);call write~init~int(37, #t~string144.base, 1 + #t~string144.offset, 1);call write~init~int(105, #t~string144.base, 2 + #t~string144.offset, 1);call write~init~int(0, #t~string144.base, 3 + #t~string144.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string147.base, #t~string147.offset, 1);call write~init~int(37, #t~string147.base, 1 + #t~string147.offset, 1);call write~init~int(105, #t~string147.base, 2 + #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 3 + #t~string147.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string150.base, #t~string150.offset, 1);call write~init~int(37, #t~string150.base, 1 + #t~string150.offset, 1);call write~init~int(105, #t~string150.base, 2 + #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 3 + #t~string150.offset, 1);call #t~string152.base, #t~string152.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string152.base, #t~string152.offset, 1);call write~init~int(0, #t~string152.base, 1 + #t~string152.offset, 1);~weight~0 := 0;~maximumWeight~0 := 100;~expectedDirection~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 281502#L-1 havoc main_#res;havoc main_#t~ret167, main_~retValue_acc~20, main_~tmp~25;havoc main_~retValue_acc~20;havoc main_~tmp~25; 281399#L3336 havoc valid_product_#res;havoc valid_product_~retValue_acc~25;havoc valid_product_~retValue_acc~25;valid_product_~retValue_acc~25 := 1;valid_product_#res := valid_product_~retValue_acc~25; 279800#L3344 main_#t~ret167 := valid_product_#res;main_~tmp~25 := main_#t~ret167;havoc main_#t~ret167; 279801#L3182 assume 0 != main_~tmp~25; 280345#L3156 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 280483#L448 havoc bobCall_#t~ret155, bobCall_~tmp~17;havoc bobCall_~tmp~17;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~22;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~22; 276159#L3239 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~22 := 4;getOrigin_#res := getOrigin_~retValue_acc~22; 276160#L3264 bobCall_#t~ret155 := getOrigin_#res;bobCall_~tmp~17 := bobCall_#t~ret155;havoc bobCall_#t~ret155;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~17;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 277522#L726 assume 0 == initPersonOnFloor_~floor; 277523#L727 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 276248#L834-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 278370#L518 assume !(0 == callOnFloor_~floorID); 278372#L521 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 279268#L530-2 havoc timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_~tmp~15, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_#t~ret12, __utac_acc__Specification3_spec__1_#t~ret13, __utac_acc__Specification3_spec__1_#t~ret14, __utac_acc__Specification3_spec__1_#t~ret15, __utac_acc__Specification3_spec__1_#t~ret16, __utac_acc__Specification3_spec__1_#t~ret17, __utac_acc__Specification3_spec__1_#t~ret18, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 279269#L1626 __utac_acc__Specification3_spec__1_#t~ret7 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret7;havoc __utac_acc__Specification3_spec__1_#t~ret7;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 276748#L1678 __utac_acc__Specification3_spec__1_#t~ret8 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret8;havoc __utac_acc__Specification3_spec__1_#t~ret8; 276749#L97 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 281488#L98 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 281489#L1643 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 276517#L1664 __utac_acc__Specification3_spec__1_#t~ret9 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret9;havoc __utac_acc__Specification3_spec__1_#t~ret9; 276518#L102 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 277054#L203 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret82, stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 278678#L455 assume !(0 == isFloorCalling_~floorID); 278679#L459 assume !(1 == isFloorCalling_~floorID); 279538#L463 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 278659#L482 stopRequestedAtCurrentFloor_#t~ret82 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret82;havoc stopRequestedAtCurrentFloor_#t~ret82; 279358#L2239 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 278986#L1643-10 assume !(0 == buttonForFloorIsPressed_~floorID); 278987#L1647-10 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 280684#L1664-10 stopRequestedAtCurrentFloor_#t~ret83 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~13 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 280685#L2246 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 282555#L2251 timeShift_#t~ret96 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret96;havoc timeShift_#t~ret96; 282556#L2388 assume !(0 != timeShift_~tmp___9~3); 278765#L2479 assume !(1 == ~doorState~0); 278766#L2479-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~11, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~11;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 280487#L1830 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 280489#L1029 stopRequestedInDirection_#t~ret70 := isTopFloor_#res;stopRequestedInDirection_~tmp~11 := stopRequestedInDirection_#t~ret70;havoc stopRequestedInDirection_#t~ret70; 280448#L1834 assume 0 != stopRequestedInDirection_~tmp~11;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 276809#L2152 timeShift_#t~ret103 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret103;havoc timeShift_#t~ret103; 280950#L2487 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret81, continueInDirection_~dir, continueInDirection_~tmp~12;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~12;~currentHeading~0 := continueInDirection_~dir; 280966#L2206 assume !(1 == ~currentHeading~0); 279535#L2216 assume !(0 == ~currentFloorID~0); 279536#L2216-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 286036#L2222-5 havoc __utac_acc__Specification3_spec__2_#t~ret19, __utac_acc__Specification3_spec__2_#t~ret20, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 286034#L228 assume !(-1 == ~expectedDirection~0); 286031#L240 assume !(1 == ~expectedDirection~0); 286029#L241 havoc timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_~tmp~15, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_#t~ret12, __utac_acc__Specification3_spec__1_#t~ret13, __utac_acc__Specification3_spec__1_#t~ret14, __utac_acc__Specification3_spec__1_#t~ret15, __utac_acc__Specification3_spec__1_#t~ret16, __utac_acc__Specification3_spec__1_#t~ret17, __utac_acc__Specification3_spec__1_#t~ret18, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 286028#L1626-1 __utac_acc__Specification3_spec__1_#t~ret7 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret7;havoc __utac_acc__Specification3_spec__1_#t~ret7;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 286027#L1678-3 __utac_acc__Specification3_spec__1_#t~ret8 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret8;havoc __utac_acc__Specification3_spec__1_#t~ret8; 286025#L97-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 286021#L159-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 286019#L169-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 286011#L180-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 285996#L191-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 285990#L202-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 285984#L203-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret82, stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 285983#L455-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 285982#L482-21 stopRequestedAtCurrentFloor_#t~ret82 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret82;havoc stopRequestedAtCurrentFloor_#t~ret82; 285980#L2239-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 285981#L1643-21 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 286356#L1664-21 stopRequestedAtCurrentFloor_#t~ret83 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~13 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 285979#L2246-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 285977#L2251-1 timeShift_#t~ret96 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret96;havoc timeShift_#t~ret96; 285963#L2388-1 assume !(0 != timeShift_~tmp___9~3); 282046#L2479-3 assume !(1 == ~doorState~0); 282047#L2479-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~11, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~11;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 278287#L1830-2 assume !(1 == stopRequestedInDirection_~dir); 278288#L1999-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 299806#L2152-2 timeShift_#t~ret103 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret103;havoc timeShift_#t~ret103; 299804#L2487-1 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret81, continueInDirection_~dir, continueInDirection_~tmp~12;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~12;~currentHeading~0 := continueInDirection_~dir; 299803#L2206-3 assume !(1 == ~currentHeading~0); 299802#L2216-9 assume !(0 == ~currentFloorID~0); 278137#L2216-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 284485#L2222-11 havoc __utac_acc__Specification3_spec__2_#t~ret19, __utac_acc__Specification3_spec__2_#t~ret20, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 284477#L228-1 assume !(-1 == ~expectedDirection~0); 284478#L240-1 assume !(1 == ~expectedDirection~0); 284469#L241-1 havoc timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_~tmp~15, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_#t~ret12, __utac_acc__Specification3_spec__1_#t~ret13, __utac_acc__Specification3_spec__1_#t~ret14, __utac_acc__Specification3_spec__1_#t~ret15, __utac_acc__Specification3_spec__1_#t~ret16, __utac_acc__Specification3_spec__1_#t~ret17, __utac_acc__Specification3_spec__1_#t~ret18, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 284470#L1626-2 __utac_acc__Specification3_spec__1_#t~ret7 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret7;havoc __utac_acc__Specification3_spec__1_#t~ret7;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 284345#L1678-6 __utac_acc__Specification3_spec__1_#t~ret8 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret8;havoc __utac_acc__Specification3_spec__1_#t~ret8; 284346#L97-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 287810#L159-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 284343#L169-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 284338#L180-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 284333#L191-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 284302#L202-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 284238#L203-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret82, stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 284231#L455-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 284175#L482-42 stopRequestedAtCurrentFloor_#t~ret82 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret82;havoc stopRequestedAtCurrentFloor_#t~ret82; 284170#L2239-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 284171#L1643-32 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 284174#L1664-32 stopRequestedAtCurrentFloor_#t~ret83 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~13 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 284172#L2246-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 284173#L2251-2 timeShift_#t~ret96 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret96;havoc timeShift_#t~ret96; 284161#L2388-2 assume !(0 != timeShift_~tmp___9~3); 284162#L2479-6 assume 1 == ~doorState~0;~doorState~0 := 0; 299772#L2479-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~11, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~11;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 281771#L1830-4 assume !(1 == stopRequestedInDirection_~dir); 281772#L1999-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 299743#L2152-4 timeShift_#t~ret103 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret103;havoc timeShift_#t~ret103; 299741#L2487-2 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret81, continueInDirection_~dir, continueInDirection_~tmp~12;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~12;~currentHeading~0 := continueInDirection_~dir; 299742#L2206-6 assume !(1 == ~currentHeading~0); 303026#L2216-18 assume !(0 == ~currentFloorID~0); 277700#L2216-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 282694#L2222-17 havoc __utac_acc__Specification3_spec__2_#t~ret19, __utac_acc__Specification3_spec__2_#t~ret20, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 295836#L228-2 assume !(-1 == ~expectedDirection~0); 295833#L240-2 assume !(1 == ~expectedDirection~0); 295831#L241-2 havoc bobCall_#t~ret155, bobCall_~tmp~17;havoc bobCall_~tmp~17;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~22;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~22; 282676#L3239-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~22 := 4;getOrigin_#res := getOrigin_~retValue_acc~22; 282673#L3264-1 bobCall_#t~ret155 := getOrigin_#res;bobCall_~tmp~17 := bobCall_#t~ret155;havoc bobCall_#t~ret155;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~17;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 282667#L726-1 assume 0 == initPersonOnFloor_~floor; 282668#L727-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 282630#L834-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 282631#L518-2 assume !(0 == callOnFloor_~floorID); 295793#L521-2 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 282621#L530-5 havoc cleanup_#t~ret161, cleanup_#t~ret162, cleanup_~i~3, cleanup_~tmp~23, cleanup_~tmp___0~10, cleanup_~__cil_tmp4~2;havoc cleanup_~i~3;havoc cleanup_~tmp~23;havoc cleanup_~tmp___0~10;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_~tmp~15, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_#t~ret12, __utac_acc__Specification3_spec__1_#t~ret13, __utac_acc__Specification3_spec__1_#t~ret14, __utac_acc__Specification3_spec__1_#t~ret15, __utac_acc__Specification3_spec__1_#t~ret16, __utac_acc__Specification3_spec__1_#t~ret17, __utac_acc__Specification3_spec__1_#t~ret18, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 282622#L1626-3 __utac_acc__Specification3_spec__1_#t~ret7 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret7;havoc __utac_acc__Specification3_spec__1_#t~ret7;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 282617#L1678-9 __utac_acc__Specification3_spec__1_#t~ret8 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret8;havoc __utac_acc__Specification3_spec__1_#t~ret8; 282618#L97-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 299272#L159-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 282616#L169-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 282612#L180-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 282609#L191-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 282578#L202-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 282575#L203-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret82, stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 282573#L455-63 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 282572#L482-63 stopRequestedAtCurrentFloor_#t~ret82 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret82;havoc stopRequestedAtCurrentFloor_#t~ret82; 282570#L2239-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 282567#L1643-43 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 282568#L1664-43 stopRequestedAtCurrentFloor_#t~ret83 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~13 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 292426#L2246-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 292427#L2251-3 timeShift_#t~ret96 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret96;havoc timeShift_#t~ret96; 292417#L2388-3 assume !(0 != timeShift_~tmp___9~3); 292418#L2479-9 assume !(1 == ~doorState~0); 301828#L2479-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~11, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~11;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 301818#L1830-6 assume !(1 == stopRequestedInDirection_~dir); 301805#L1999-6 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 301796#L2152-6 timeShift_#t~ret103 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret103;havoc timeShift_#t~ret103; 301794#L2487-3 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret81, continueInDirection_~dir, continueInDirection_~tmp~12;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~12;~currentHeading~0 := continueInDirection_~dir; 301795#L2206-9 assume !(1 == ~currentHeading~0); 303025#L2216-27 assume !(0 == ~currentFloorID~0); 278885#L2216-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 290514#L2222-23 havoc __utac_acc__Specification3_spec__2_#t~ret19, __utac_acc__Specification3_spec__2_#t~ret20, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 290487#L228-3 assume !(-1 == ~expectedDirection~0); 290486#L240-3 assume !(1 == ~expectedDirection~0); 290468#L241-3 cleanup_~i~3 := 0; 290467#L2988-2 [2021-11-02 22:06:12,016 INFO L793 eck$LassoCheckResult]: Loop: 290467#L2988-2 assume !false; 290462#L2989 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 290463#L2992 assume cleanup_~i~3 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~6;havoc isBlocked_~retValue_acc~6;isBlocked_~retValue_acc~6 := 0;isBlocked_#res := isBlocked_~retValue_acc~6; 290458#L1473 cleanup_#t~ret161 := isBlocked_#res;cleanup_~tmp___0~10 := cleanup_#t~ret161;havoc cleanup_#t~ret161; 290459#L2996 assume 1 != cleanup_~tmp___0~10; 290451#L2996-1 havoc isIdle_#res;havoc isIdle_#t~ret69, isIdle_~retValue_acc~13, isIdle_~tmp~10;havoc isIdle_~retValue_acc~13;havoc isIdle_~tmp~10;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret64, anyStopRequested_#t~ret65, anyStopRequested_#t~ret66, anyStopRequested_#t~ret67, anyStopRequested_#t~ret68, anyStopRequested_~retValue_acc~12, anyStopRequested_~tmp~9, anyStopRequested_~tmp___0~4, anyStopRequested_~tmp___1~3, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~12;havoc anyStopRequested_~tmp~9;havoc anyStopRequested_~tmp___0~4;havoc anyStopRequested_~tmp___1~3;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~1;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 290452#L455-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 290430#L482-84 anyStopRequested_#t~ret64 := isFloorCalling_#res;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret64;havoc anyStopRequested_#t~ret64; 290431#L1734 assume !(0 != anyStopRequested_~tmp___3~1); 290398#L1738 assume 0 != ~floorButtons_0~0;anyStopRequested_~retValue_acc~12 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~12; 290393#L1798 isIdle_#t~ret69 := anyStopRequested_#res;isIdle_~tmp~10 := isIdle_#t~ret69;havoc isIdle_#t~ret69;isIdle_~retValue_acc~13 := (if 0 == isIdle_~tmp~10 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~13; 290388#L1811 cleanup_#t~ret162 := isIdle_#res;cleanup_~tmp~23 := cleanup_#t~ret162;havoc cleanup_#t~ret162; 290389#L3008 assume !(0 != cleanup_~tmp~23);havoc timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_~tmp~15, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_#t~ret12, __utac_acc__Specification3_spec__1_#t~ret13, __utac_acc__Specification3_spec__1_#t~ret14, __utac_acc__Specification3_spec__1_#t~ret15, __utac_acc__Specification3_spec__1_#t~ret16, __utac_acc__Specification3_spec__1_#t~ret17, __utac_acc__Specification3_spec__1_#t~ret18, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 290384#L1626-4 __utac_acc__Specification3_spec__1_#t~ret7 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret7;havoc __utac_acc__Specification3_spec__1_#t~ret7;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 290385#L1678-12 __utac_acc__Specification3_spec__1_#t~ret8 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret8;havoc __utac_acc__Specification3_spec__1_#t~ret8; 290378#L97-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 290379#L159-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 290352#L169-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 290351#L180-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 290350#L191-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 290319#L202-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 290316#L203-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret82, stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 290315#L455-89 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 290314#L482-89 stopRequestedAtCurrentFloor_#t~ret82 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret82;havoc stopRequestedAtCurrentFloor_#t~ret82; 290312#L2239-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 290309#L1643-54 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 290310#L1664-54 stopRequestedAtCurrentFloor_#t~ret83 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~13 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 292877#L2246-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 292876#L2251-4 timeShift_#t~ret96 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret96;havoc timeShift_#t~ret96; 292874#L2388-4 assume !(0 != timeShift_~tmp___9~3); 281483#L2479-12 assume 1 == ~doorState~0;~doorState~0 := 0; 281484#L2479-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~11, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~11;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 282138#L1830-8 assume !(1 == stopRequestedInDirection_~dir); 282139#L1999-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 299625#L2152-8 timeShift_#t~ret103 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret103;havoc timeShift_#t~ret103; 299622#L2487-4 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret81, continueInDirection_~dir, continueInDirection_~tmp~12;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~12;~currentHeading~0 := continueInDirection_~dir; 299623#L2206-12 assume !(1 == ~currentHeading~0); 303021#L2216-36 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 281160#L2216-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 290497#L2222-29 havoc __utac_acc__Specification3_spec__2_#t~ret19, __utac_acc__Specification3_spec__2_#t~ret20, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 290481#L228-4 assume !(-1 == ~expectedDirection~0); 290480#L240-4 assume !(1 == ~expectedDirection~0); 290466#L241-4 cleanup_~i~3 := 1 + cleanup_~i~3; 290467#L2988-2 [2021-11-02 22:06:12,017 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-02 22:06:12,017 INFO L85 PathProgramCache]: Analyzing trace with hash 1780121872, now seen corresponding path program 1 times [2021-11-02 22:06:12,018 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-02 22:06:12,019 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1997160247] [2021-11-02 22:06:12,019 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-02 22:06:12,019 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-02 22:06:12,052 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-02 22:06:12,099 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-02 22:06:12,099 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-02 22:06:12,100 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1997160247] [2021-11-02 22:06:12,100 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1997160247] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-02 22:06:12,100 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-02 22:06:12,100 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-11-02 22:06:12,101 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [782475552] [2021-11-02 22:06:12,101 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-11-02 22:06:12,102 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-02 22:06:12,102 INFO L85 PathProgramCache]: Analyzing trace with hash 523871535, now seen corresponding path program 1 times [2021-11-02 22:06:12,102 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-02 22:06:12,102 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [965389294] [2021-11-02 22:06:12,102 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-02 22:06:12,103 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-02 22:06:12,113 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-02 22:06:12,143 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-02 22:06:12,144 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-02 22:06:12,148 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [965389294] [2021-11-02 22:06:12,149 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [965389294] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-02 22:06:12,149 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-02 22:06:12,149 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-11-02 22:06:12,150 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [390317159] [2021-11-02 22:06:12,151 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-11-02 22:06:12,154 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-02 22:06:12,154 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-11-02 22:06:12,155 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-11-02 22:06:12,155 INFO L87 Difference]: Start difference. First operand 27055 states and 50403 transitions. cyclomatic complexity: 23349 Second operand has 5 states, 5 states have (on average 8.6) internal successors, (43), 5 states have internal predecessors, (43), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:06:15,323 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-02 22:06:15,323 INFO L93 Difference]: Finished difference Result 122283 states and 229418 transitions. [2021-11-02 22:06:15,323 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2021-11-02 22:06:15,324 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 122283 states and 229418 transitions. [2021-11-02 22:06:16,147 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 31296 [2021-11-02 22:06:16,826 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 122283 states to 122283 states and 229418 transitions. [2021-11-02 22:06:16,826 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 122283 [2021-11-02 22:06:16,909 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 122283 [2021-11-02 22:06:16,909 INFO L73 IsDeterministic]: Start isDeterministic. Operand 122283 states and 229418 transitions. [2021-11-02 22:06:16,953 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-11-02 22:06:16,953 INFO L681 BuchiCegarLoop]: Abstraction has 122283 states and 229418 transitions. [2021-11-02 22:06:17,010 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 122283 states and 229418 transitions. [2021-11-02 22:06:17,889 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 122283 to 52887. [2021-11-02 22:06:17,932 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 52887 states, 52887 states have (on average 1.8638039593851041) internal successors, (98571), 52886 states have internal predecessors, (98571), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:06:18,078 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 52887 states to 52887 states and 98571 transitions. [2021-11-02 22:06:18,078 INFO L704 BuchiCegarLoop]: Abstraction has 52887 states and 98571 transitions. [2021-11-02 22:06:18,078 INFO L587 BuchiCegarLoop]: Abstraction has 52887 states and 98571 transitions. [2021-11-02 22:06:18,078 INFO L425 BuchiCegarLoop]: ======== Iteration 7============ [2021-11-02 22:06:18,079 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 52887 states and 98571 transitions. [2021-11-02 22:06:18,260 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 12484 [2021-11-02 22:06:18,260 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-11-02 22:06:18,260 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-11-02 22:06:18,264 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-02 22:06:18,265 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-02 22:06:18,265 INFO L791 eck$LassoCheckResult]: Stem: 430956#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(2);call write~init~int(48, #t~string4.base, #t~string4.offset, 1);call write~init~int(0, #t~string4.base, 1 + #t~string4.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(31);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(12);call #t~string45.base, #t~string45.offset := #Ultimate.allocOnStack(30);call #t~string46.base, #t~string46.offset := #Ultimate.allocOnStack(9);call #t~string47.base, #t~string47.offset := #Ultimate.allocOnStack(21);call #t~string48.base, #t~string48.offset := #Ultimate.allocOnStack(30);call #t~string49.base, #t~string49.offset := #Ultimate.allocOnStack(9);call #t~string50.base, #t~string50.offset := #Ultimate.allocOnStack(21);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(30);call #t~string55.base, #t~string55.offset := #Ultimate.allocOnStack(9);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(25);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(30);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(9);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(25);call #t~string107.base, #t~string107.offset := #Ultimate.allocOnStack(10);call #t~string109.base, #t~string109.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string109.base, #t~string109.offset, 1);call write~init~int(95, #t~string109.base, 1 + #t~string109.offset, 1);call write~init~int(93, #t~string109.base, 2 + #t~string109.offset, 1);call write~init~int(0, #t~string109.base, 3 + #t~string109.offset, 1);call #t~string111.base, #t~string111.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string111.base, #t~string111.offset, 1);call write~init~int(93, #t~string111.base, 1 + #t~string111.offset, 1);call write~init~int(32, #t~string111.base, 2 + #t~string111.offset, 1);call write~init~int(0, #t~string111.base, 3 + #t~string111.offset, 1);call #t~string113.base, #t~string113.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string113.base, #t~string113.offset, 1);call write~init~int(97, #t~string113.base, 1 + #t~string113.offset, 1);call write~init~int(116, #t~string113.base, 2 + #t~string113.offset, 1);call write~init~int(32, #t~string113.base, 3 + #t~string113.offset, 1);call write~init~int(0, #t~string113.base, 4 + #t~string113.offset, 1);call #t~string115.base, #t~string115.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string115.base, #t~string115.offset, 1);call write~init~int(105, #t~string115.base, 1 + #t~string115.offset, 1);call write~init~int(0, #t~string115.base, 2 + #t~string115.offset, 1);call #t~string117.base, #t~string117.offset := #Ultimate.allocOnStack(10);call #t~string119.base, #t~string119.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string119.base, #t~string119.offset, 1);call write~init~int(112, #t~string119.base, 1 + #t~string119.offset, 1);call write~init~int(0, #t~string119.base, 2 + #t~string119.offset, 1);call #t~string121.base, #t~string121.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string121.base, #t~string121.offset, 1);call write~init~int(111, #t~string121.base, 1 + #t~string121.offset, 1);call write~init~int(119, #t~string121.base, 2 + #t~string121.offset, 1);call write~init~int(110, #t~string121.base, 3 + #t~string121.offset, 1);call write~init~int(0, #t~string121.base, 4 + #t~string121.offset, 1);call #t~string123.base, #t~string123.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string123.base, #t~string123.offset, 1);call write~init~int(73, #t~string123.base, 1 + #t~string123.offset, 1);call write~init~int(76, #t~string123.base, 2 + #t~string123.offset, 1);call write~init~int(95, #t~string123.base, 3 + #t~string123.offset, 1);call write~init~int(112, #t~string123.base, 4 + #t~string123.offset, 1);call write~init~int(58, #t~string123.base, 5 + #t~string123.offset, 1);call write~init~int(0, #t~string123.base, 6 + #t~string123.offset, 1);call #t~string125.base, #t~string125.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string125.base, #t~string125.offset, 1);call write~init~int(37, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(105, #t~string125.base, 2 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 3 + #t~string125.offset, 1);call #t~string127.base, #t~string127.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string127.base, #t~string127.offset, 1);call write~init~int(37, #t~string127.base, 1 + #t~string127.offset, 1);call write~init~int(105, #t~string127.base, 2 + #t~string127.offset, 1);call write~init~int(0, #t~string127.base, 3 + #t~string127.offset, 1);call #t~string129.base, #t~string129.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string129.base, #t~string129.offset, 1);call write~init~int(37, #t~string129.base, 1 + #t~string129.offset, 1);call write~init~int(105, #t~string129.base, 2 + #t~string129.offset, 1);call write~init~int(0, #t~string129.base, 3 + #t~string129.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string131.base, #t~string131.offset, 1);call write~init~int(37, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string133.base, #t~string133.offset, 1);call write~init~int(37, #t~string133.base, 1 + #t~string133.offset, 1);call write~init~int(105, #t~string133.base, 2 + #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 3 + #t~string133.offset, 1);call #t~string135.base, #t~string135.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string135.base, #t~string135.offset, 1);call write~init~int(70, #t~string135.base, 1 + #t~string135.offset, 1);call write~init~int(95, #t~string135.base, 2 + #t~string135.offset, 1);call write~init~int(112, #t~string135.base, 3 + #t~string135.offset, 1);call write~init~int(58, #t~string135.base, 4 + #t~string135.offset, 1);call write~init~int(0, #t~string135.base, 5 + #t~string135.offset, 1);call #t~string138.base, #t~string138.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string138.base, #t~string138.offset, 1);call write~init~int(37, #t~string138.base, 1 + #t~string138.offset, 1);call write~init~int(105, #t~string138.base, 2 + #t~string138.offset, 1);call write~init~int(0, #t~string138.base, 3 + #t~string138.offset, 1);call #t~string141.base, #t~string141.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string141.base, #t~string141.offset, 1);call write~init~int(37, #t~string141.base, 1 + #t~string141.offset, 1);call write~init~int(105, #t~string141.base, 2 + #t~string141.offset, 1);call write~init~int(0, #t~string141.base, 3 + #t~string141.offset, 1);call #t~string144.base, #t~string144.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string144.base, #t~string144.offset, 1);call write~init~int(37, #t~string144.base, 1 + #t~string144.offset, 1);call write~init~int(105, #t~string144.base, 2 + #t~string144.offset, 1);call write~init~int(0, #t~string144.base, 3 + #t~string144.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string147.base, #t~string147.offset, 1);call write~init~int(37, #t~string147.base, 1 + #t~string147.offset, 1);call write~init~int(105, #t~string147.base, 2 + #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 3 + #t~string147.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string150.base, #t~string150.offset, 1);call write~init~int(37, #t~string150.base, 1 + #t~string150.offset, 1);call write~init~int(105, #t~string150.base, 2 + #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 3 + #t~string150.offset, 1);call #t~string152.base, #t~string152.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string152.base, #t~string152.offset, 1);call write~init~int(0, #t~string152.base, 1 + #t~string152.offset, 1);~weight~0 := 0;~maximumWeight~0 := 100;~expectedDirection~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 430957#L-1 havoc main_#res;havoc main_#t~ret167, main_~retValue_acc~20, main_~tmp~25;havoc main_~retValue_acc~20;havoc main_~tmp~25; 430846#L3336 havoc valid_product_#res;havoc valid_product_~retValue_acc~25;havoc valid_product_~retValue_acc~25;valid_product_~retValue_acc~25 := 1;valid_product_#res := valid_product_~retValue_acc~25; 429195#L3344 main_#t~ret167 := valid_product_#res;main_~tmp~25 := main_#t~ret167;havoc main_#t~ret167; 429196#L3182 assume 0 != main_~tmp~25; 429767#L3156 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 429903#L448 havoc bobCall_#t~ret155, bobCall_~tmp~17;havoc bobCall_~tmp~17;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~22;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~22; 425519#L3239 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~22 := 4;getOrigin_#res := getOrigin_~retValue_acc~22; 425520#L3264 bobCall_#t~ret155 := getOrigin_#res;bobCall_~tmp~17 := bobCall_#t~ret155;havoc bobCall_#t~ret155;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~17;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 426890#L726 assume 0 == initPersonOnFloor_~floor; 426891#L727 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 425604#L834-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 427745#L518 assume !(0 == callOnFloor_~floorID); 427747#L521 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 430014#L530-2 havoc timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_~tmp~15, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_#t~ret12, __utac_acc__Specification3_spec__1_#t~ret13, __utac_acc__Specification3_spec__1_#t~ret14, __utac_acc__Specification3_spec__1_#t~ret15, __utac_acc__Specification3_spec__1_#t~ret16, __utac_acc__Specification3_spec__1_#t~ret17, __utac_acc__Specification3_spec__1_#t~ret18, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 433059#L1626 __utac_acc__Specification3_spec__1_#t~ret7 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret7;havoc __utac_acc__Specification3_spec__1_#t~ret7;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 433058#L1678 __utac_acc__Specification3_spec__1_#t~ret8 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret8;havoc __utac_acc__Specification3_spec__1_#t~ret8; 433057#L97 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 433056#L98 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 431492#L1643 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 425878#L1664 __utac_acc__Specification3_spec__1_#t~ret9 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret9;havoc __utac_acc__Specification3_spec__1_#t~ret9; 425879#L102 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 431282#L203 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret82, stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 431283#L455 assume !(0 == isFloorCalling_~floorID); 428914#L459 assume !(1 == isFloorCalling_~floorID); 428915#L463 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 428739#L482 stopRequestedAtCurrentFloor_#t~ret82 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret82;havoc stopRequestedAtCurrentFloor_#t~ret82; 428740#L2239 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 428361#L1643-10 assume !(0 == buttonForFloorIsPressed_~floorID); 428362#L1647-10 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 430105#L1664-10 stopRequestedAtCurrentFloor_#t~ret83 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~13 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 430106#L2246 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 432134#L2251 timeShift_#t~ret96 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret96;havoc timeShift_#t~ret96; 432135#L2388 assume !(0 != timeShift_~tmp___9~3); 428142#L2479 assume !(1 == ~doorState~0); 428143#L2479-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~11, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~11;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 429907#L1830 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 429426#L1029 stopRequestedInDirection_#t~ret70 := isTopFloor_#res;stopRequestedInDirection_~tmp~11 := stopRequestedInDirection_#t~ret70;havoc stopRequestedInDirection_#t~ret70; 429427#L1834 assume 0 != stopRequestedInDirection_~tmp~11;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 432829#L2152 timeShift_#t~ret103 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret103;havoc timeShift_#t~ret103; 432826#L2487 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret81, continueInDirection_~dir, continueInDirection_~tmp~12;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~12;~currentHeading~0 := continueInDirection_~dir; 432821#L2206 assume !(1 == ~currentHeading~0); 432815#L2216 assume !(0 == ~currentFloorID~0); 432810#L2216-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 432807#L2222-5 havoc __utac_acc__Specification3_spec__2_#t~ret19, __utac_acc__Specification3_spec__2_#t~ret20, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 432805#L228 assume !(-1 == ~expectedDirection~0); 432802#L240 assume !(1 == ~expectedDirection~0); 432800#L241 havoc timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_~tmp~15, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_#t~ret12, __utac_acc__Specification3_spec__1_#t~ret13, __utac_acc__Specification3_spec__1_#t~ret14, __utac_acc__Specification3_spec__1_#t~ret15, __utac_acc__Specification3_spec__1_#t~ret16, __utac_acc__Specification3_spec__1_#t~ret17, __utac_acc__Specification3_spec__1_#t~ret18, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 432798#L1626-1 __utac_acc__Specification3_spec__1_#t~ret7 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret7;havoc __utac_acc__Specification3_spec__1_#t~ret7;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 432793#L1678-3 __utac_acc__Specification3_spec__1_#t~ret8 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret8;havoc __utac_acc__Specification3_spec__1_#t~ret8; 432789#L97-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 432790#L159-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 432794#L169-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 432776#L180-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 432761#L191-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 432754#L202-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 432748#L203-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret82, stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 432746#L455-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 432745#L482-21 stopRequestedAtCurrentFloor_#t~ret82 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret82;havoc stopRequestedAtCurrentFloor_#t~ret82; 432744#L2239-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 432738#L1643-21 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 432739#L1664-21 stopRequestedAtCurrentFloor_#t~ret83 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~13 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 432733#L2246-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 432735#L2251-1 timeShift_#t~ret96 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret96;havoc timeShift_#t~ret96; 432728#L2388-1 assume !(0 != timeShift_~tmp___9~3); 432730#L2479-3 assume !(1 == ~doorState~0); 432715#L2479-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~11, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~11;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 432716#L1830-2 assume !(1 == stopRequestedInDirection_~dir); 433333#L1999-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 432637#L2152-2 timeShift_#t~ret103 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret103;havoc timeShift_#t~ret103; 432638#L2487-1 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret81, continueInDirection_~dir, continueInDirection_~tmp~12;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~12;~currentHeading~0 := continueInDirection_~dir; 432613#L2206-3 assume !(1 == ~currentHeading~0); 432614#L2216-9 assume !(0 == ~currentFloorID~0); 433637#L2216-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 433636#L2222-11 havoc __utac_acc__Specification3_spec__2_#t~ret19, __utac_acc__Specification3_spec__2_#t~ret20, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 441507#L228-1 assume !(-1 == ~expectedDirection~0); 441504#L240-1 assume !(1 == ~expectedDirection~0); 441503#L241-1 havoc timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_~tmp~15, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_#t~ret12, __utac_acc__Specification3_spec__1_#t~ret13, __utac_acc__Specification3_spec__1_#t~ret14, __utac_acc__Specification3_spec__1_#t~ret15, __utac_acc__Specification3_spec__1_#t~ret16, __utac_acc__Specification3_spec__1_#t~ret17, __utac_acc__Specification3_spec__1_#t~ret18, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 441502#L1626-2 __utac_acc__Specification3_spec__1_#t~ret7 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret7;havoc __utac_acc__Specification3_spec__1_#t~ret7;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 441501#L1678-6 __utac_acc__Specification3_spec__1_#t~ret8 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret8;havoc __utac_acc__Specification3_spec__1_#t~ret8; 441498#L97-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 441494#L159-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 433566#L169-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 433562#L180-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 433559#L191-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 433523#L202-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 433461#L203-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret82, stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 433439#L455-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 433432#L482-42 stopRequestedAtCurrentFloor_#t~ret82 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret82;havoc stopRequestedAtCurrentFloor_#t~ret82; 433419#L2239-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 433416#L1643-32 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 433408#L1664-32 stopRequestedAtCurrentFloor_#t~ret83 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~13 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 433405#L2246-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 433403#L2251-2 timeShift_#t~ret96 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret96;havoc timeShift_#t~ret96; 433400#L2388-2 assume !(0 != timeShift_~tmp___9~3); 433397#L2479-6 assume 1 == ~doorState~0;~doorState~0 := 0; 433395#L2479-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~11, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~11;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 433392#L1830-4 assume !(1 == stopRequestedInDirection_~dir); 433381#L1999-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 433370#L2152-4 timeShift_#t~ret103 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret103;havoc timeShift_#t~ret103; 433365#L2487-2 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret81, continueInDirection_~dir, continueInDirection_~tmp~12;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~12;~currentHeading~0 := continueInDirection_~dir; 433362#L2206-6 assume !(1 == ~currentHeading~0); 433363#L2216-18 assume !(0 == ~currentFloorID~0); 441650#L2216-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 441641#L2222-17 havoc __utac_acc__Specification3_spec__2_#t~ret19, __utac_acc__Specification3_spec__2_#t~ret20, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 441636#L228-2 assume !(-1 == ~expectedDirection~0); 441632#L240-2 assume !(1 == ~expectedDirection~0); 441627#L241-2 havoc bobCall_#t~ret155, bobCall_~tmp~17;havoc bobCall_~tmp~17;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~22;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~22; 441620#L3239-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~22 := 4;getOrigin_#res := getOrigin_~retValue_acc~22; 441615#L3264-1 bobCall_#t~ret155 := getOrigin_#res;bobCall_~tmp~17 := bobCall_#t~ret155;havoc bobCall_#t~ret155;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~17;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 441608#L726-1 assume 0 == initPersonOnFloor_~floor; 441551#L727-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 441537#L834-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 441530#L518-2 assume !(0 == callOnFloor_~floorID); 441531#L521-2 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 441526#L530-5 havoc cleanup_#t~ret161, cleanup_#t~ret162, cleanup_~i~3, cleanup_~tmp~23, cleanup_~tmp___0~10, cleanup_~__cil_tmp4~2;havoc cleanup_~i~3;havoc cleanup_~tmp~23;havoc cleanup_~tmp___0~10;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_~tmp~15, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_#t~ret12, __utac_acc__Specification3_spec__1_#t~ret13, __utac_acc__Specification3_spec__1_#t~ret14, __utac_acc__Specification3_spec__1_#t~ret15, __utac_acc__Specification3_spec__1_#t~ret16, __utac_acc__Specification3_spec__1_#t~ret17, __utac_acc__Specification3_spec__1_#t~ret18, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 441524#L1626-3 __utac_acc__Specification3_spec__1_#t~ret7 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret7;havoc __utac_acc__Specification3_spec__1_#t~ret7;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 441522#L1678-9 __utac_acc__Specification3_spec__1_#t~ret8 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret8;havoc __utac_acc__Specification3_spec__1_#t~ret8; 441519#L97-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 441516#L159-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 440948#L169-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 440944#L180-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 440940#L191-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 440550#L202-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 432554#L203-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret82, stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 432550#L455-63 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 432548#L482-63 stopRequestedAtCurrentFloor_#t~ret82 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret82;havoc stopRequestedAtCurrentFloor_#t~ret82; 432543#L2239-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 432540#L1643-43 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 432533#L1664-43 stopRequestedAtCurrentFloor_#t~ret83 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~13 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 432534#L2246-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 432525#L2251-3 timeShift_#t~ret96 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret96;havoc timeShift_#t~ret96; 432526#L2388-3 assume !(0 != timeShift_~tmp___9~3); 432492#L2479-9 assume !(1 == ~doorState~0); 432493#L2479-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~11, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~11;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 432465#L1830-6 assume !(1 == stopRequestedInDirection_~dir); 432466#L1999-6 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 432426#L2152-6 timeShift_#t~ret103 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret103;havoc timeShift_#t~ret103; 432427#L2487-3 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret81, continueInDirection_~dir, continueInDirection_~tmp~12;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~12;~currentHeading~0 := continueInDirection_~dir; 432600#L2206-9 assume !(1 == ~currentHeading~0); 432601#L2216-27 assume !(0 == ~currentFloorID~0); 452407#L2216-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 452404#L2222-23 havoc __utac_acc__Specification3_spec__2_#t~ret19, __utac_acc__Specification3_spec__2_#t~ret20, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 452401#L228-3 assume !(-1 == ~expectedDirection~0); 452395#L240-3 assume !(1 == ~expectedDirection~0); 452390#L241-3 cleanup_~i~3 := 0; 452388#L2988-2 [2021-11-02 22:06:18,267 INFO L793 eck$LassoCheckResult]: Loop: 452388#L2988-2 assume !false; 452387#L2989 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 452386#L2992 assume cleanup_~i~3 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~6;havoc isBlocked_~retValue_acc~6;isBlocked_~retValue_acc~6 := 0;isBlocked_#res := isBlocked_~retValue_acc~6; 452385#L1473 cleanup_#t~ret161 := isBlocked_#res;cleanup_~tmp___0~10 := cleanup_#t~ret161;havoc cleanup_#t~ret161; 452384#L2996 assume 1 != cleanup_~tmp___0~10; 452381#L2996-1 havoc isIdle_#res;havoc isIdle_#t~ret69, isIdle_~retValue_acc~13, isIdle_~tmp~10;havoc isIdle_~retValue_acc~13;havoc isIdle_~tmp~10;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret64, anyStopRequested_#t~ret65, anyStopRequested_#t~ret66, anyStopRequested_#t~ret67, anyStopRequested_#t~ret68, anyStopRequested_~retValue_acc~12, anyStopRequested_~tmp~9, anyStopRequested_~tmp___0~4, anyStopRequested_~tmp___1~3, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~12;havoc anyStopRequested_~tmp~9;havoc anyStopRequested_~tmp___0~4;havoc anyStopRequested_~tmp___1~3;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~1;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 452377#L455-84 assume !(0 == isFloorCalling_~floorID); 452374#L459-84 assume !(1 == isFloorCalling_~floorID); 452360#L463-84 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 452353#L482-84 anyStopRequested_#t~ret64 := isFloorCalling_#res;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret64;havoc anyStopRequested_#t~ret64; 452343#L1734 assume 0 != anyStopRequested_~tmp___3~1;anyStopRequested_~retValue_acc~12 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~12; 452338#L1798 isIdle_#t~ret69 := anyStopRequested_#res;isIdle_~tmp~10 := isIdle_#t~ret69;havoc isIdle_#t~ret69;isIdle_~retValue_acc~13 := (if 0 == isIdle_~tmp~10 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~13; 452337#L1811 cleanup_#t~ret162 := isIdle_#res;cleanup_~tmp~23 := cleanup_#t~ret162;havoc cleanup_#t~ret162; 452336#L3008 assume !(0 != cleanup_~tmp~23);havoc timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_~tmp~15, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_#t~ret12, __utac_acc__Specification3_spec__1_#t~ret13, __utac_acc__Specification3_spec__1_#t~ret14, __utac_acc__Specification3_spec__1_#t~ret15, __utac_acc__Specification3_spec__1_#t~ret16, __utac_acc__Specification3_spec__1_#t~ret17, __utac_acc__Specification3_spec__1_#t~ret18, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 452335#L1626-4 __utac_acc__Specification3_spec__1_#t~ret7 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret7;havoc __utac_acc__Specification3_spec__1_#t~ret7;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 452334#L1678-12 __utac_acc__Specification3_spec__1_#t~ret8 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret8;havoc __utac_acc__Specification3_spec__1_#t~ret8; 452333#L97-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 452248#L159-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 452249#L169-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 452739#L180-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 452329#L191-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 440535#L202-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 432238#L203-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret82, stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 432236#L455-89 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 432235#L482-89 stopRequestedAtCurrentFloor_#t~ret82 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret82;havoc stopRequestedAtCurrentFloor_#t~ret82; 432214#L2239-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 432213#L1643-54 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 432208#L1664-54 stopRequestedAtCurrentFloor_#t~ret83 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~13 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 432206#L2246-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 432205#L2251-4 timeShift_#t~ret96 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret96;havoc timeShift_#t~ret96; 432203#L2388-4 assume !(0 != timeShift_~tmp___9~3); 432202#L2479-12 assume 1 == ~doorState~0;~doorState~0 := 0; 432201#L2479-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~11, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~11;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 432199#L1830-8 assume !(1 == stopRequestedInDirection_~dir); 432185#L1999-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 432186#L2152-8 timeShift_#t~ret103 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret103;havoc timeShift_#t~ret103; 439547#L2487-4 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret81, continueInDirection_~dir, continueInDirection_~tmp~12;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~12;~currentHeading~0 := continueInDirection_~dir; 439549#L2206-12 assume !(1 == ~currentHeading~0); 439211#L2216-36 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 439212#L2216-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 452403#L2222-29 havoc __utac_acc__Specification3_spec__2_#t~ret19, __utac_acc__Specification3_spec__2_#t~ret20, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 452398#L228-4 assume !(-1 == ~expectedDirection~0); 452392#L240-4 assume !(1 == ~expectedDirection~0); 452389#L241-4 cleanup_~i~3 := 1 + cleanup_~i~3; 452388#L2988-2 [2021-11-02 22:06:18,267 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-02 22:06:18,268 INFO L85 PathProgramCache]: Analyzing trace with hash 1780121872, now seen corresponding path program 2 times [2021-11-02 22:06:18,268 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-02 22:06:18,268 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1170096162] [2021-11-02 22:06:18,268 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-02 22:06:18,269 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-02 22:06:18,302 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-02 22:06:18,352 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-02 22:06:18,353 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-02 22:06:18,353 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1170096162] [2021-11-02 22:06:18,353 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1170096162] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-02 22:06:18,353 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-02 22:06:18,354 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-11-02 22:06:18,354 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1014377014] [2021-11-02 22:06:18,354 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-11-02 22:06:18,355 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-02 22:06:18,355 INFO L85 PathProgramCache]: Analyzing trace with hash -794083935, now seen corresponding path program 1 times [2021-11-02 22:06:18,355 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-02 22:06:18,355 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [16715763] [2021-11-02 22:06:18,356 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-02 22:06:18,356 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-02 22:06:18,363 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-02 22:06:18,375 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-02 22:06:18,375 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-02 22:06:18,375 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [16715763] [2021-11-02 22:06:18,375 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [16715763] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-02 22:06:18,376 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-02 22:06:18,376 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-11-02 22:06:18,376 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [786480379] [2021-11-02 22:06:18,376 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-11-02 22:06:18,377 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-02 22:06:18,377 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-02 22:06:18,377 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-02 22:06:18,378 INFO L87 Difference]: Start difference. First operand 52887 states and 98571 transitions. cyclomatic complexity: 45685 Second operand has 3 states, 3 states have (on average 14.666666666666666) internal successors, (44), 3 states have internal predecessors, (44), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:06:19,943 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-02 22:06:19,943 INFO L93 Difference]: Finished difference Result 57439 states and 106815 transitions. [2021-11-02 22:06:19,944 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-02 22:06:19,944 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 57439 states and 106815 transitions. [2021-11-02 22:06:20,195 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 12858 [2021-11-02 22:06:20,354 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 57439 states to 57439 states and 106815 transitions. [2021-11-02 22:06:20,354 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 57439 [2021-11-02 22:06:20,388 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 57439 [2021-11-02 22:06:20,389 INFO L73 IsDeterministic]: Start isDeterministic. Operand 57439 states and 106815 transitions. [2021-11-02 22:06:20,412 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-11-02 22:06:20,413 INFO L681 BuchiCegarLoop]: Abstraction has 57439 states and 106815 transitions. [2021-11-02 22:06:20,439 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 57439 states and 106815 transitions. [2021-11-02 22:06:21,158 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 57439 to 52351. [2021-11-02 22:06:21,199 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 52351 states, 52351 states have (on average 1.8636320223109397) internal successors, (97563), 52350 states have internal predecessors, (97563), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:06:21,325 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 52351 states to 52351 states and 97563 transitions. [2021-11-02 22:06:21,326 INFO L704 BuchiCegarLoop]: Abstraction has 52351 states and 97563 transitions. [2021-11-02 22:06:21,326 INFO L587 BuchiCegarLoop]: Abstraction has 52351 states and 97563 transitions. [2021-11-02 22:06:21,326 INFO L425 BuchiCegarLoop]: ======== Iteration 8============ [2021-11-02 22:06:21,326 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 52351 states and 97563 transitions. [2021-11-02 22:06:21,481 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 12188 [2021-11-02 22:06:21,481 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-11-02 22:06:21,482 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-11-02 22:06:21,485 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-02 22:06:21,485 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-02 22:06:21,485 INFO L791 eck$LassoCheckResult]: Stem: 541026#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(2);call write~init~int(48, #t~string4.base, #t~string4.offset, 1);call write~init~int(0, #t~string4.base, 1 + #t~string4.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(31);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(12);call #t~string45.base, #t~string45.offset := #Ultimate.allocOnStack(30);call #t~string46.base, #t~string46.offset := #Ultimate.allocOnStack(9);call #t~string47.base, #t~string47.offset := #Ultimate.allocOnStack(21);call #t~string48.base, #t~string48.offset := #Ultimate.allocOnStack(30);call #t~string49.base, #t~string49.offset := #Ultimate.allocOnStack(9);call #t~string50.base, #t~string50.offset := #Ultimate.allocOnStack(21);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(30);call #t~string55.base, #t~string55.offset := #Ultimate.allocOnStack(9);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(25);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(30);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(9);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(25);call #t~string107.base, #t~string107.offset := #Ultimate.allocOnStack(10);call #t~string109.base, #t~string109.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string109.base, #t~string109.offset, 1);call write~init~int(95, #t~string109.base, 1 + #t~string109.offset, 1);call write~init~int(93, #t~string109.base, 2 + #t~string109.offset, 1);call write~init~int(0, #t~string109.base, 3 + #t~string109.offset, 1);call #t~string111.base, #t~string111.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string111.base, #t~string111.offset, 1);call write~init~int(93, #t~string111.base, 1 + #t~string111.offset, 1);call write~init~int(32, #t~string111.base, 2 + #t~string111.offset, 1);call write~init~int(0, #t~string111.base, 3 + #t~string111.offset, 1);call #t~string113.base, #t~string113.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string113.base, #t~string113.offset, 1);call write~init~int(97, #t~string113.base, 1 + #t~string113.offset, 1);call write~init~int(116, #t~string113.base, 2 + #t~string113.offset, 1);call write~init~int(32, #t~string113.base, 3 + #t~string113.offset, 1);call write~init~int(0, #t~string113.base, 4 + #t~string113.offset, 1);call #t~string115.base, #t~string115.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string115.base, #t~string115.offset, 1);call write~init~int(105, #t~string115.base, 1 + #t~string115.offset, 1);call write~init~int(0, #t~string115.base, 2 + #t~string115.offset, 1);call #t~string117.base, #t~string117.offset := #Ultimate.allocOnStack(10);call #t~string119.base, #t~string119.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string119.base, #t~string119.offset, 1);call write~init~int(112, #t~string119.base, 1 + #t~string119.offset, 1);call write~init~int(0, #t~string119.base, 2 + #t~string119.offset, 1);call #t~string121.base, #t~string121.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string121.base, #t~string121.offset, 1);call write~init~int(111, #t~string121.base, 1 + #t~string121.offset, 1);call write~init~int(119, #t~string121.base, 2 + #t~string121.offset, 1);call write~init~int(110, #t~string121.base, 3 + #t~string121.offset, 1);call write~init~int(0, #t~string121.base, 4 + #t~string121.offset, 1);call #t~string123.base, #t~string123.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string123.base, #t~string123.offset, 1);call write~init~int(73, #t~string123.base, 1 + #t~string123.offset, 1);call write~init~int(76, #t~string123.base, 2 + #t~string123.offset, 1);call write~init~int(95, #t~string123.base, 3 + #t~string123.offset, 1);call write~init~int(112, #t~string123.base, 4 + #t~string123.offset, 1);call write~init~int(58, #t~string123.base, 5 + #t~string123.offset, 1);call write~init~int(0, #t~string123.base, 6 + #t~string123.offset, 1);call #t~string125.base, #t~string125.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string125.base, #t~string125.offset, 1);call write~init~int(37, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(105, #t~string125.base, 2 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 3 + #t~string125.offset, 1);call #t~string127.base, #t~string127.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string127.base, #t~string127.offset, 1);call write~init~int(37, #t~string127.base, 1 + #t~string127.offset, 1);call write~init~int(105, #t~string127.base, 2 + #t~string127.offset, 1);call write~init~int(0, #t~string127.base, 3 + #t~string127.offset, 1);call #t~string129.base, #t~string129.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string129.base, #t~string129.offset, 1);call write~init~int(37, #t~string129.base, 1 + #t~string129.offset, 1);call write~init~int(105, #t~string129.base, 2 + #t~string129.offset, 1);call write~init~int(0, #t~string129.base, 3 + #t~string129.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string131.base, #t~string131.offset, 1);call write~init~int(37, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string133.base, #t~string133.offset, 1);call write~init~int(37, #t~string133.base, 1 + #t~string133.offset, 1);call write~init~int(105, #t~string133.base, 2 + #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 3 + #t~string133.offset, 1);call #t~string135.base, #t~string135.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string135.base, #t~string135.offset, 1);call write~init~int(70, #t~string135.base, 1 + #t~string135.offset, 1);call write~init~int(95, #t~string135.base, 2 + #t~string135.offset, 1);call write~init~int(112, #t~string135.base, 3 + #t~string135.offset, 1);call write~init~int(58, #t~string135.base, 4 + #t~string135.offset, 1);call write~init~int(0, #t~string135.base, 5 + #t~string135.offset, 1);call #t~string138.base, #t~string138.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string138.base, #t~string138.offset, 1);call write~init~int(37, #t~string138.base, 1 + #t~string138.offset, 1);call write~init~int(105, #t~string138.base, 2 + #t~string138.offset, 1);call write~init~int(0, #t~string138.base, 3 + #t~string138.offset, 1);call #t~string141.base, #t~string141.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string141.base, #t~string141.offset, 1);call write~init~int(37, #t~string141.base, 1 + #t~string141.offset, 1);call write~init~int(105, #t~string141.base, 2 + #t~string141.offset, 1);call write~init~int(0, #t~string141.base, 3 + #t~string141.offset, 1);call #t~string144.base, #t~string144.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string144.base, #t~string144.offset, 1);call write~init~int(37, #t~string144.base, 1 + #t~string144.offset, 1);call write~init~int(105, #t~string144.base, 2 + #t~string144.offset, 1);call write~init~int(0, #t~string144.base, 3 + #t~string144.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string147.base, #t~string147.offset, 1);call write~init~int(37, #t~string147.base, 1 + #t~string147.offset, 1);call write~init~int(105, #t~string147.base, 2 + #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 3 + #t~string147.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string150.base, #t~string150.offset, 1);call write~init~int(37, #t~string150.base, 1 + #t~string150.offset, 1);call write~init~int(105, #t~string150.base, 2 + #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 3 + #t~string150.offset, 1);call #t~string152.base, #t~string152.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string152.base, #t~string152.offset, 1);call write~init~int(0, #t~string152.base, 1 + #t~string152.offset, 1);~weight~0 := 0;~maximumWeight~0 := 100;~expectedDirection~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 541027#L-1 havoc main_#res;havoc main_#t~ret167, main_~retValue_acc~20, main_~tmp~25;havoc main_~retValue_acc~20;havoc main_~tmp~25; 540928#L3336 havoc valid_product_#res;havoc valid_product_~retValue_acc~25;havoc valid_product_~retValue_acc~25;valid_product_~retValue_acc~25 := 1;valid_product_#res := valid_product_~retValue_acc~25; 539403#L3344 main_#t~ret167 := valid_product_#res;main_~tmp~25 := main_#t~ret167;havoc main_#t~ret167; 539404#L3182 assume 0 != main_~tmp~25; 539928#L3156 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 540056#L448 havoc bobCall_#t~ret155, bobCall_~tmp~17;havoc bobCall_~tmp~17;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~22;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~22; 535850#L3239 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~22 := 4;getOrigin_#res := getOrigin_~retValue_acc~22; 535851#L3264 bobCall_#t~ret155 := getOrigin_#res;bobCall_~tmp~17 := bobCall_#t~ret155;havoc bobCall_#t~ret155;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~17;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 537194#L726 assume 0 == initPersonOnFloor_~floor; 537195#L727 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 535937#L834-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 538033#L518 assume !(0 == callOnFloor_~floorID); 538035#L521 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 540157#L530-2 havoc timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_~tmp~15, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_#t~ret12, __utac_acc__Specification3_spec__1_#t~ret13, __utac_acc__Specification3_spec__1_#t~ret14, __utac_acc__Specification3_spec__1_#t~ret15, __utac_acc__Specification3_spec__1_#t~ret16, __utac_acc__Specification3_spec__1_#t~ret17, __utac_acc__Specification3_spec__1_#t~ret18, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 582726#L1626 __utac_acc__Specification3_spec__1_#t~ret7 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret7;havoc __utac_acc__Specification3_spec__1_#t~ret7;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 582725#L1678 __utac_acc__Specification3_spec__1_#t~ret8 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret8;havoc __utac_acc__Specification3_spec__1_#t~ret8; 582724#L97 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 541014#L98 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 541015#L1643 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 536206#L1664 __utac_acc__Specification3_spec__1_#t~ret9 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret9;havoc __utac_acc__Specification3_spec__1_#t~ret9; 536207#L102 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 536732#L203 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret82, stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 538333#L455 assume !(0 == isFloorCalling_~floorID); 538334#L459 assume !(1 == isFloorCalling_~floorID); 539144#L463 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 538315#L482 stopRequestedAtCurrentFloor_#t~ret82 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret82;havoc stopRequestedAtCurrentFloor_#t~ret82; 538577#L2239 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 538579#L1643-10 assume !(0 == buttonForFloorIsPressed_~floorID); 538626#L1647-10 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 575486#L1664-10 stopRequestedAtCurrentFloor_#t~ret83 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~13 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 575485#L2246 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 575484#L2251 timeShift_#t~ret96 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret96;havoc timeShift_#t~ret96; 575483#L2388 assume !(0 != timeShift_~tmp___9~3); 575482#L2479 assume !(1 == ~doorState~0); 575481#L2479-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~11, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~11;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 540060#L1830 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 539614#L1029 stopRequestedInDirection_#t~ret70 := isTopFloor_#res;stopRequestedInDirection_~tmp~11 := stopRequestedInDirection_#t~ret70;havoc stopRequestedInDirection_#t~ret70; 539615#L1834 assume 0 != stopRequestedInDirection_~tmp~11;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 536491#L2152 timeShift_#t~ret103 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret103;havoc timeShift_#t~ret103; 540498#L2487 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret81, continueInDirection_~dir, continueInDirection_~tmp~12;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~12;~currentHeading~0 := continueInDirection_~dir; 540514#L2206 assume !(1 == ~currentHeading~0); 539141#L2216 assume !(0 == ~currentFloorID~0); 539142#L2216-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 540840#L2222-5 havoc __utac_acc__Specification3_spec__2_#t~ret19, __utac_acc__Specification3_spec__2_#t~ret20, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 584048#L228 assume !(-1 == ~expectedDirection~0); 584044#L240 assume !(1 == ~expectedDirection~0); 584042#L241 havoc timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_~tmp~15, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_#t~ret12, __utac_acc__Specification3_spec__1_#t~ret13, __utac_acc__Specification3_spec__1_#t~ret14, __utac_acc__Specification3_spec__1_#t~ret15, __utac_acc__Specification3_spec__1_#t~ret16, __utac_acc__Specification3_spec__1_#t~ret17, __utac_acc__Specification3_spec__1_#t~ret18, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 584041#L1626-1 __utac_acc__Specification3_spec__1_#t~ret7 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret7;havoc __utac_acc__Specification3_spec__1_#t~ret7;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 584040#L1678-3 __utac_acc__Specification3_spec__1_#t~ret8 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret8;havoc __utac_acc__Specification3_spec__1_#t~ret8; 584036#L97-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 584033#L159-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 584032#L169-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 584031#L180-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 584026#L191-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 584022#L202-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 579904#L203-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret82, stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 579899#L455-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 579897#L482-21 stopRequestedAtCurrentFloor_#t~ret82 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret82;havoc stopRequestedAtCurrentFloor_#t~ret82; 579893#L2239-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 579895#L1643-21 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 579898#L1664-21 stopRequestedAtCurrentFloor_#t~ret83 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~13 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 579896#L2246-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 579891#L2251-1 timeShift_#t~ret96 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret96;havoc timeShift_#t~ret96; 579892#L2388-1 assume !(0 != timeShift_~tmp___9~3); 585628#L2479-3 assume !(1 == ~doorState~0); 585621#L2479-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~11, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~11;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 585607#L1830-2 assume !(1 == stopRequestedInDirection_~dir); 585601#L1999-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 585587#L2152-2 timeShift_#t~ret103 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret103;havoc timeShift_#t~ret103; 585584#L2487-1 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret81, continueInDirection_~dir, continueInDirection_~tmp~12;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~12;~currentHeading~0 := continueInDirection_~dir; 585583#L2206-3 assume !(1 == ~currentHeading~0); 585582#L2216-9 assume !(0 == ~currentFloorID~0); 536446#L2216-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 536447#L2222-11 havoc __utac_acc__Specification3_spec__2_#t~ret19, __utac_acc__Specification3_spec__2_#t~ret20, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 585640#L228-1 assume !(-1 == ~expectedDirection~0); 585637#L240-1 assume !(1 == ~expectedDirection~0); 585636#L241-1 havoc timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_~tmp~15, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_#t~ret12, __utac_acc__Specification3_spec__1_#t~ret13, __utac_acc__Specification3_spec__1_#t~ret14, __utac_acc__Specification3_spec__1_#t~ret15, __utac_acc__Specification3_spec__1_#t~ret16, __utac_acc__Specification3_spec__1_#t~ret17, __utac_acc__Specification3_spec__1_#t~ret18, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 585635#L1626-2 __utac_acc__Specification3_spec__1_#t~ret7 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret7;havoc __utac_acc__Specification3_spec__1_#t~ret7;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 585634#L1678-6 __utac_acc__Specification3_spec__1_#t~ret8 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret8;havoc __utac_acc__Specification3_spec__1_#t~ret8; 585633#L97-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 570569#L159-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 570570#L169-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 571265#L180-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 571250#L191-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 571251#L202-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 570600#L203-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret82, stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 570601#L455-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 571092#L482-42 stopRequestedAtCurrentFloor_#t~ret82 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret82;havoc stopRequestedAtCurrentFloor_#t~ret82; 571090#L2239-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 571088#L1643-32 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 571084#L1664-32 stopRequestedAtCurrentFloor_#t~ret83 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~13 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 571082#L2246-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 571081#L2251-2 timeShift_#t~ret96 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret96;havoc timeShift_#t~ret96; 571079#L2388-2 assume !(0 != timeShift_~tmp___9~3); 571078#L2479-6 assume 1 == ~doorState~0;~doorState~0 := 0; 571074#L2479-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~11, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~11;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 571068#L1830-4 assume !(1 == stopRequestedInDirection_~dir); 570236#L1999-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 570224#L2152-4 timeShift_#t~ret103 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret103;havoc timeShift_#t~ret103; 570221#L2487-2 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret81, continueInDirection_~dir, continueInDirection_~tmp~12;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~12;~currentHeading~0 := continueInDirection_~dir; 570222#L2206-6 assume !(1 == ~currentHeading~0); 570132#L2216-18 assume !(0 == ~currentFloorID~0); 570131#L2216-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 570128#L2222-17 havoc __utac_acc__Specification3_spec__2_#t~ret19, __utac_acc__Specification3_spec__2_#t~ret20, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 570120#L228-2 assume !(-1 == ~expectedDirection~0); 570111#L240-2 assume !(1 == ~expectedDirection~0); 570109#L241-2 havoc bobCall_#t~ret155, bobCall_~tmp~17;havoc bobCall_~tmp~17;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~22;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~22; 570105#L3239-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~22 := 4;getOrigin_#res := getOrigin_~retValue_acc~22; 570102#L3264-1 bobCall_#t~ret155 := getOrigin_#res;bobCall_~tmp~17 := bobCall_#t~ret155;havoc bobCall_#t~ret155;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~17;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 570101#L726-1 assume 0 == initPersonOnFloor_~floor; 570080#L727-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 570067#L834-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 570066#L518-2 assume !(0 == callOnFloor_~floorID); 570065#L521-2 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 570061#L530-5 havoc cleanup_#t~ret161, cleanup_#t~ret162, cleanup_~i~3, cleanup_~tmp~23, cleanup_~tmp___0~10, cleanup_~__cil_tmp4~2;havoc cleanup_~i~3;havoc cleanup_~tmp~23;havoc cleanup_~tmp___0~10;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_~tmp~15, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_#t~ret12, __utac_acc__Specification3_spec__1_#t~ret13, __utac_acc__Specification3_spec__1_#t~ret14, __utac_acc__Specification3_spec__1_#t~ret15, __utac_acc__Specification3_spec__1_#t~ret16, __utac_acc__Specification3_spec__1_#t~ret17, __utac_acc__Specification3_spec__1_#t~ret18, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 570060#L1626-3 __utac_acc__Specification3_spec__1_#t~ret7 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret7;havoc __utac_acc__Specification3_spec__1_#t~ret7;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 570058#L1678-9 __utac_acc__Specification3_spec__1_#t~ret8 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret8;havoc __utac_acc__Specification3_spec__1_#t~ret8; 570057#L97-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 569978#L159-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 569976#L169-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 569973#L180-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 569972#L191-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 569971#L202-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 557217#L203-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret82, stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 557218#L455-63 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 569429#L482-63 stopRequestedAtCurrentFloor_#t~ret82 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret82;havoc stopRequestedAtCurrentFloor_#t~ret82; 569428#L2239-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 569426#L1643-43 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 569422#L1664-43 stopRequestedAtCurrentFloor_#t~ret83 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~13 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 569420#L2246-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 569419#L2251-3 timeShift_#t~ret96 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret96;havoc timeShift_#t~ret96; 569418#L2388-3 assume !(0 != timeShift_~tmp___9~3); 569417#L2479-9 assume !(1 == ~doorState~0); 569416#L2479-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~11, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~11;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 569413#L1830-6 assume !(1 == stopRequestedInDirection_~dir); 569414#L1999-6 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 569464#L2152-6 timeShift_#t~ret103 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret103;havoc timeShift_#t~ret103; 569532#L2487-3 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret81, continueInDirection_~dir, continueInDirection_~tmp~12;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~12;~currentHeading~0 := continueInDirection_~dir; 568267#L2206-9 assume !(1 == ~currentHeading~0); 568261#L2216-27 assume !(0 == ~currentFloorID~0); 568125#L2216-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 541984#L2222-23 havoc __utac_acc__Specification3_spec__2_#t~ret19, __utac_acc__Specification3_spec__2_#t~ret20, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 541981#L228-3 assume !(-1 == ~expectedDirection~0); 541975#L240-3 assume !(1 == ~expectedDirection~0); 541970#L241-3 cleanup_~i~3 := 0; 541968#L2988-2 [2021-11-02 22:06:21,486 INFO L793 eck$LassoCheckResult]: Loop: 541968#L2988-2 assume !false; 541967#L2989 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 541966#L2992 assume cleanup_~i~3 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~6;havoc isBlocked_~retValue_acc~6;isBlocked_~retValue_acc~6 := 0;isBlocked_#res := isBlocked_~retValue_acc~6; 541965#L1473 cleanup_#t~ret161 := isBlocked_#res;cleanup_~tmp___0~10 := cleanup_#t~ret161;havoc cleanup_#t~ret161; 541964#L2996 assume 1 != cleanup_~tmp___0~10; 541963#L2996-1 havoc isIdle_#res;havoc isIdle_#t~ret69, isIdle_~retValue_acc~13, isIdle_~tmp~10;havoc isIdle_~retValue_acc~13;havoc isIdle_~tmp~10;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret64, anyStopRequested_#t~ret65, anyStopRequested_#t~ret66, anyStopRequested_#t~ret67, anyStopRequested_#t~ret68, anyStopRequested_~retValue_acc~12, anyStopRequested_~tmp~9, anyStopRequested_~tmp___0~4, anyStopRequested_~tmp___1~3, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~12;havoc anyStopRequested_~tmp~9;havoc anyStopRequested_~tmp___0~4;havoc anyStopRequested_~tmp___1~3;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~1;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 541962#L455-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 541961#L482-84 anyStopRequested_#t~ret64 := isFloorCalling_#res;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret64;havoc anyStopRequested_#t~ret64; 541958#L1734 assume !(0 != anyStopRequested_~tmp___3~1); 541960#L1738 assume !(0 != ~floorButtons_0~0);isFloorCalling_#in~floorID := 1;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 542617#L455-85 assume !(0 == isFloorCalling_~floorID); 539619#L459-85 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 539620#L482-85 anyStopRequested_#t~ret65 := isFloorCalling_#res;anyStopRequested_~tmp___2~1 := anyStopRequested_#t~ret65;havoc anyStopRequested_#t~ret65; 542536#L1745 assume 0 != anyStopRequested_~tmp___2~1;anyStopRequested_~retValue_acc~12 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~12; 542517#L1798 isIdle_#t~ret69 := anyStopRequested_#res;isIdle_~tmp~10 := isIdle_#t~ret69;havoc isIdle_#t~ret69;isIdle_~retValue_acc~13 := (if 0 == isIdle_~tmp~10 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~13; 542514#L1811 cleanup_#t~ret162 := isIdle_#res;cleanup_~tmp~23 := cleanup_#t~ret162;havoc cleanup_#t~ret162; 542509#L3008 assume !(0 != cleanup_~tmp~23);havoc timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_~tmp~15, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_#t~ret12, __utac_acc__Specification3_spec__1_#t~ret13, __utac_acc__Specification3_spec__1_#t~ret14, __utac_acc__Specification3_spec__1_#t~ret15, __utac_acc__Specification3_spec__1_#t~ret16, __utac_acc__Specification3_spec__1_#t~ret17, __utac_acc__Specification3_spec__1_#t~ret18, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 542505#L1626-4 __utac_acc__Specification3_spec__1_#t~ret7 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret7;havoc __utac_acc__Specification3_spec__1_#t~ret7;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 542502#L1678-12 __utac_acc__Specification3_spec__1_#t~ret8 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret8;havoc __utac_acc__Specification3_spec__1_#t~ret8; 542149#L97-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 542150#L159-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 542134#L169-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 542119#L180-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 542110#L191-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 542102#L202-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 542099#L203-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret82, stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 542097#L455-89 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 542096#L482-89 stopRequestedAtCurrentFloor_#t~ret82 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret82;havoc stopRequestedAtCurrentFloor_#t~ret82; 542095#L2239-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 542094#L1643-54 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 542088#L1664-54 stopRequestedAtCurrentFloor_#t~ret83 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~13 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 542084#L2246-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 542081#L2251-4 timeShift_#t~ret96 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret96;havoc timeShift_#t~ret96; 542075#L2388-4 assume !(0 != timeShift_~tmp___9~3); 542070#L2479-12 assume 1 == ~doorState~0;~doorState~0 := 0; 542062#L2479-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~11, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~11;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 542050#L1830-8 assume !(1 == stopRequestedInDirection_~dir); 542039#L1999-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 542023#L2152-8 timeShift_#t~ret103 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret103;havoc timeShift_#t~ret103; 542013#L2487-4 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret81, continueInDirection_~dir, continueInDirection_~tmp~12;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~12;~currentHeading~0 := continueInDirection_~dir; 542005#L2206-12 assume !(1 == ~currentHeading~0); 541996#L2216-36 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 541985#L2216-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 541983#L2222-29 havoc __utac_acc__Specification3_spec__2_#t~ret19, __utac_acc__Specification3_spec__2_#t~ret20, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 541978#L228-4 assume !(-1 == ~expectedDirection~0); 541972#L240-4 assume !(1 == ~expectedDirection~0); 541969#L241-4 cleanup_~i~3 := 1 + cleanup_~i~3; 541968#L2988-2 [2021-11-02 22:06:21,487 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-02 22:06:21,487 INFO L85 PathProgramCache]: Analyzing trace with hash 1780121872, now seen corresponding path program 3 times [2021-11-02 22:06:21,487 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-02 22:06:21,488 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1741493059] [2021-11-02 22:06:21,488 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-02 22:06:21,488 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-02 22:06:21,514 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-02 22:06:21,551 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-02 22:06:21,552 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-02 22:06:21,552 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1741493059] [2021-11-02 22:06:21,552 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1741493059] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-02 22:06:21,552 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-02 22:06:21,552 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-11-02 22:06:21,553 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2053342004] [2021-11-02 22:06:21,553 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-11-02 22:06:21,553 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-02 22:06:21,553 INFO L85 PathProgramCache]: Analyzing trace with hash 1025903783, now seen corresponding path program 1 times [2021-11-02 22:06:21,554 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-02 22:06:21,554 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1278894941] [2021-11-02 22:06:21,554 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-02 22:06:21,554 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-02 22:06:21,562 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-02 22:06:21,579 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-02 22:06:21,580 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-02 22:06:21,580 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1278894941] [2021-11-02 22:06:21,580 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1278894941] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-02 22:06:21,580 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-02 22:06:21,581 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-11-02 22:06:21,581 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [736876782] [2021-11-02 22:06:21,581 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-11-02 22:06:21,581 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-02 22:06:21,582 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-11-02 22:06:21,582 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-11-02 22:06:21,582 INFO L87 Difference]: Start difference. First operand 52351 states and 97563 transitions. cyclomatic complexity: 45213 Second operand has 4 states, 4 states have (on average 11.75) internal successors, (47), 4 states have internal predecessors, (47), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:06:22,676 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-02 22:06:22,677 INFO L93 Difference]: Finished difference Result 96665 states and 180527 transitions. [2021-11-02 22:06:22,679 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-11-02 22:06:22,679 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 96665 states and 180527 transitions. [2021-11-02 22:06:23,059 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 23322 [2021-11-02 22:06:23,822 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 96665 states to 96665 states and 180527 transitions. [2021-11-02 22:06:23,822 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 96665 [2021-11-02 22:06:23,883 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 96665 [2021-11-02 22:06:23,884 INFO L73 IsDeterministic]: Start isDeterministic. Operand 96665 states and 180527 transitions. [2021-11-02 22:06:23,932 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-11-02 22:06:23,932 INFO L681 BuchiCegarLoop]: Abstraction has 96665 states and 180527 transitions. [2021-11-02 22:06:23,979 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 96665 states and 180527 transitions. [2021-11-02 22:06:24,634 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 96665 to 52403. [2021-11-02 22:06:24,676 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 52403 states, 52403 states have (on average 1.8627750319638188) internal successors, (97615), 52402 states have internal predecessors, (97615), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:06:25,273 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 52403 states to 52403 states and 97615 transitions. [2021-11-02 22:06:25,273 INFO L704 BuchiCegarLoop]: Abstraction has 52403 states and 97615 transitions. [2021-11-02 22:06:25,273 INFO L587 BuchiCegarLoop]: Abstraction has 52403 states and 97615 transitions. [2021-11-02 22:06:25,273 INFO L425 BuchiCegarLoop]: ======== Iteration 9============ [2021-11-02 22:06:25,273 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 52403 states and 97615 transitions. [2021-11-02 22:06:25,405 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 12200 [2021-11-02 22:06:25,405 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-11-02 22:06:25,406 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-11-02 22:06:25,408 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-02 22:06:25,408 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-02 22:06:25,409 INFO L791 eck$LassoCheckResult]: Stem: 690264#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(2);call write~init~int(48, #t~string4.base, #t~string4.offset, 1);call write~init~int(0, #t~string4.base, 1 + #t~string4.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(31);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(12);call #t~string45.base, #t~string45.offset := #Ultimate.allocOnStack(30);call #t~string46.base, #t~string46.offset := #Ultimate.allocOnStack(9);call #t~string47.base, #t~string47.offset := #Ultimate.allocOnStack(21);call #t~string48.base, #t~string48.offset := #Ultimate.allocOnStack(30);call #t~string49.base, #t~string49.offset := #Ultimate.allocOnStack(9);call #t~string50.base, #t~string50.offset := #Ultimate.allocOnStack(21);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(30);call #t~string55.base, #t~string55.offset := #Ultimate.allocOnStack(9);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(25);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(30);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(9);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(25);call #t~string107.base, #t~string107.offset := #Ultimate.allocOnStack(10);call #t~string109.base, #t~string109.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string109.base, #t~string109.offset, 1);call write~init~int(95, #t~string109.base, 1 + #t~string109.offset, 1);call write~init~int(93, #t~string109.base, 2 + #t~string109.offset, 1);call write~init~int(0, #t~string109.base, 3 + #t~string109.offset, 1);call #t~string111.base, #t~string111.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string111.base, #t~string111.offset, 1);call write~init~int(93, #t~string111.base, 1 + #t~string111.offset, 1);call write~init~int(32, #t~string111.base, 2 + #t~string111.offset, 1);call write~init~int(0, #t~string111.base, 3 + #t~string111.offset, 1);call #t~string113.base, #t~string113.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string113.base, #t~string113.offset, 1);call write~init~int(97, #t~string113.base, 1 + #t~string113.offset, 1);call write~init~int(116, #t~string113.base, 2 + #t~string113.offset, 1);call write~init~int(32, #t~string113.base, 3 + #t~string113.offset, 1);call write~init~int(0, #t~string113.base, 4 + #t~string113.offset, 1);call #t~string115.base, #t~string115.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string115.base, #t~string115.offset, 1);call write~init~int(105, #t~string115.base, 1 + #t~string115.offset, 1);call write~init~int(0, #t~string115.base, 2 + #t~string115.offset, 1);call #t~string117.base, #t~string117.offset := #Ultimate.allocOnStack(10);call #t~string119.base, #t~string119.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string119.base, #t~string119.offset, 1);call write~init~int(112, #t~string119.base, 1 + #t~string119.offset, 1);call write~init~int(0, #t~string119.base, 2 + #t~string119.offset, 1);call #t~string121.base, #t~string121.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string121.base, #t~string121.offset, 1);call write~init~int(111, #t~string121.base, 1 + #t~string121.offset, 1);call write~init~int(119, #t~string121.base, 2 + #t~string121.offset, 1);call write~init~int(110, #t~string121.base, 3 + #t~string121.offset, 1);call write~init~int(0, #t~string121.base, 4 + #t~string121.offset, 1);call #t~string123.base, #t~string123.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string123.base, #t~string123.offset, 1);call write~init~int(73, #t~string123.base, 1 + #t~string123.offset, 1);call write~init~int(76, #t~string123.base, 2 + #t~string123.offset, 1);call write~init~int(95, #t~string123.base, 3 + #t~string123.offset, 1);call write~init~int(112, #t~string123.base, 4 + #t~string123.offset, 1);call write~init~int(58, #t~string123.base, 5 + #t~string123.offset, 1);call write~init~int(0, #t~string123.base, 6 + #t~string123.offset, 1);call #t~string125.base, #t~string125.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string125.base, #t~string125.offset, 1);call write~init~int(37, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(105, #t~string125.base, 2 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 3 + #t~string125.offset, 1);call #t~string127.base, #t~string127.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string127.base, #t~string127.offset, 1);call write~init~int(37, #t~string127.base, 1 + #t~string127.offset, 1);call write~init~int(105, #t~string127.base, 2 + #t~string127.offset, 1);call write~init~int(0, #t~string127.base, 3 + #t~string127.offset, 1);call #t~string129.base, #t~string129.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string129.base, #t~string129.offset, 1);call write~init~int(37, #t~string129.base, 1 + #t~string129.offset, 1);call write~init~int(105, #t~string129.base, 2 + #t~string129.offset, 1);call write~init~int(0, #t~string129.base, 3 + #t~string129.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string131.base, #t~string131.offset, 1);call write~init~int(37, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string133.base, #t~string133.offset, 1);call write~init~int(37, #t~string133.base, 1 + #t~string133.offset, 1);call write~init~int(105, #t~string133.base, 2 + #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 3 + #t~string133.offset, 1);call #t~string135.base, #t~string135.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string135.base, #t~string135.offset, 1);call write~init~int(70, #t~string135.base, 1 + #t~string135.offset, 1);call write~init~int(95, #t~string135.base, 2 + #t~string135.offset, 1);call write~init~int(112, #t~string135.base, 3 + #t~string135.offset, 1);call write~init~int(58, #t~string135.base, 4 + #t~string135.offset, 1);call write~init~int(0, #t~string135.base, 5 + #t~string135.offset, 1);call #t~string138.base, #t~string138.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string138.base, #t~string138.offset, 1);call write~init~int(37, #t~string138.base, 1 + #t~string138.offset, 1);call write~init~int(105, #t~string138.base, 2 + #t~string138.offset, 1);call write~init~int(0, #t~string138.base, 3 + #t~string138.offset, 1);call #t~string141.base, #t~string141.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string141.base, #t~string141.offset, 1);call write~init~int(37, #t~string141.base, 1 + #t~string141.offset, 1);call write~init~int(105, #t~string141.base, 2 + #t~string141.offset, 1);call write~init~int(0, #t~string141.base, 3 + #t~string141.offset, 1);call #t~string144.base, #t~string144.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string144.base, #t~string144.offset, 1);call write~init~int(37, #t~string144.base, 1 + #t~string144.offset, 1);call write~init~int(105, #t~string144.base, 2 + #t~string144.offset, 1);call write~init~int(0, #t~string144.base, 3 + #t~string144.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string147.base, #t~string147.offset, 1);call write~init~int(37, #t~string147.base, 1 + #t~string147.offset, 1);call write~init~int(105, #t~string147.base, 2 + #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 3 + #t~string147.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string150.base, #t~string150.offset, 1);call write~init~int(37, #t~string150.base, 1 + #t~string150.offset, 1);call write~init~int(105, #t~string150.base, 2 + #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 3 + #t~string150.offset, 1);call #t~string152.base, #t~string152.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string152.base, #t~string152.offset, 1);call write~init~int(0, #t~string152.base, 1 + #t~string152.offset, 1);~weight~0 := 0;~maximumWeight~0 := 100;~expectedDirection~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 690265#L-1 havoc main_#res;havoc main_#t~ret167, main_~retValue_acc~20, main_~tmp~25;havoc main_~retValue_acc~20;havoc main_~tmp~25; 690148#L3336 havoc valid_product_#res;havoc valid_product_~retValue_acc~25;havoc valid_product_~retValue_acc~25;valid_product_~retValue_acc~25 := 1;valid_product_#res := valid_product_~retValue_acc~25; 688516#L3344 main_#t~ret167 := valid_product_#res;main_~tmp~25 := main_#t~ret167;havoc main_#t~ret167; 688517#L3182 assume 0 != main_~tmp~25; 689069#L3156 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 689210#L448 havoc bobCall_#t~ret155, bobCall_~tmp~17;havoc bobCall_~tmp~17;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~22;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~22; 684878#L3239 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~22 := 4;getOrigin_#res := getOrigin_~retValue_acc~22; 684879#L3264 bobCall_#t~ret155 := getOrigin_#res;bobCall_~tmp~17 := bobCall_#t~ret155;havoc bobCall_#t~ret155;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~17;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 686228#L726 assume 0 == initPersonOnFloor_~floor; 686229#L727 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 684966#L834-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 687085#L518 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 687086#L530-2 havoc timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_~tmp~15, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_#t~ret12, __utac_acc__Specification3_spec__1_#t~ret13, __utac_acc__Specification3_spec__1_#t~ret14, __utac_acc__Specification3_spec__1_#t~ret15, __utac_acc__Specification3_spec__1_#t~ret16, __utac_acc__Specification3_spec__1_#t~ret17, __utac_acc__Specification3_spec__1_#t~ret18, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 687987#L1626 __utac_acc__Specification3_spec__1_#t~ret7 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret7;havoc __utac_acc__Specification3_spec__1_#t~ret7;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 685458#L1678 __utac_acc__Specification3_spec__1_#t~ret8 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret8;havoc __utac_acc__Specification3_spec__1_#t~ret8; 685459#L97 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 687577#L98 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 690246#L1643 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 686968#L1664 __utac_acc__Specification3_spec__1_#t~ret9 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret9;havoc __utac_acc__Specification3_spec__1_#t~ret9; 685763#L102 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 685764#L203 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret82, stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 687396#L455 assume !(0 == isFloorCalling_~floorID); 687397#L459 assume !(1 == isFloorCalling_~floorID); 688251#L463 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 687378#L482 stopRequestedAtCurrentFloor_#t~ret82 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret82;havoc stopRequestedAtCurrentFloor_#t~ret82; 687650#L2239 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 687652#L1643-10 assume !(0 == buttonForFloorIsPressed_~floorID); 687699#L1647-10 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 692470#L1664-10 stopRequestedAtCurrentFloor_#t~ret83 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~13 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 692469#L2246 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 692468#L2251 timeShift_#t~ret96 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret96;havoc timeShift_#t~ret96; 692466#L2388 assume !(0 != timeShift_~tmp___9~3); 692465#L2479 assume !(1 == ~doorState~0); 692464#L2479-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~11, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~11;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 692463#L1830 assume !(1 == stopRequestedInDirection_~dir); 689048#L1999 assume !(0 == ~currentFloorID~0); 689049#L2005 assume !(~currentFloorID~0 > 0); 690164#L2020 assume ~currentFloorID~0 > 0; 690165#L2022 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 688212#L2023 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 688213#L2152 timeShift_#t~ret103 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret103;havoc timeShift_#t~ret103; 692898#L2487 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret81, continueInDirection_~dir, continueInDirection_~tmp~12;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~12;~currentHeading~0 := continueInDirection_~dir; 692920#L2206 assume !(1 == ~currentHeading~0); 688248#L2216 assume !(0 == ~currentFloorID~0); 688249#L2216-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 696800#L2222-5 havoc __utac_acc__Specification3_spec__2_#t~ret19, __utac_acc__Specification3_spec__2_#t~ret20, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 696795#L228 assume !(-1 == ~expectedDirection~0); 696789#L240 assume !(1 == ~expectedDirection~0); 696782#L241 havoc timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_~tmp~15, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_#t~ret12, __utac_acc__Specification3_spec__1_#t~ret13, __utac_acc__Specification3_spec__1_#t~ret14, __utac_acc__Specification3_spec__1_#t~ret15, __utac_acc__Specification3_spec__1_#t~ret16, __utac_acc__Specification3_spec__1_#t~ret17, __utac_acc__Specification3_spec__1_#t~ret18, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 696780#L1626-1 __utac_acc__Specification3_spec__1_#t~ret7 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret7;havoc __utac_acc__Specification3_spec__1_#t~ret7;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 696779#L1678-3 __utac_acc__Specification3_spec__1_#t~ret8 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret8;havoc __utac_acc__Specification3_spec__1_#t~ret8; 696776#L97-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 696773#L159-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 696774#L1643-16 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 704394#L1664-16 __utac_acc__Specification3_spec__1_#t~ret14 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret14;havoc __utac_acc__Specification3_spec__1_#t~ret14; 704393#L163-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 687933#L203-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret82, stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 687934#L455-21 assume !(0 == isFloorCalling_~floorID); 689793#L459-21 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 685697#L482-21 stopRequestedAtCurrentFloor_#t~ret82 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret82;havoc stopRequestedAtCurrentFloor_#t~ret82; 685063#L2239-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 685065#L1643-21 assume !(0 == buttonForFloorIsPressed_~floorID); 686198#L1647-21 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 685835#L1664-21 stopRequestedAtCurrentFloor_#t~ret83 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~13 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 688073#L2246-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 689809#L2251-1 timeShift_#t~ret96 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret96;havoc timeShift_#t~ret96; 699024#L2388-1 assume !(0 != timeShift_~tmp___9~3); 699025#L2479-3 assume !(1 == ~doorState~0); 712973#L2479-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~11, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~11;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 712971#L1830-2 assume !(1 == stopRequestedInDirection_~dir); 712970#L1999-2 assume !(0 == ~currentFloorID~0); 687455#L2005-2 assume !(~currentFloorID~0 > 0); 687457#L2020-2 assume ~currentFloorID~0 > 0; 691430#L2022-2 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 691431#L2023-2 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 692943#L2152-2 timeShift_#t~ret103 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret103;havoc timeShift_#t~ret103; 692967#L2487-1 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret81, continueInDirection_~dir, continueInDirection_~tmp~12;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~12;~currentHeading~0 := continueInDirection_~dir; 690325#L2206-3 assume !(1 == ~currentHeading~0); 690326#L2216-9 assume !(0 == ~currentFloorID~0); 685475#L2216-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 685476#L2222-11 havoc __utac_acc__Specification3_spec__2_#t~ret19, __utac_acc__Specification3_spec__2_#t~ret20, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 719094#L228-1 assume !(-1 == ~expectedDirection~0); 719091#L240-1 assume !(1 == ~expectedDirection~0); 717686#L241-1 havoc timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_~tmp~15, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_#t~ret12, __utac_acc__Specification3_spec__1_#t~ret13, __utac_acc__Specification3_spec__1_#t~ret14, __utac_acc__Specification3_spec__1_#t~ret15, __utac_acc__Specification3_spec__1_#t~ret16, __utac_acc__Specification3_spec__1_#t~ret17, __utac_acc__Specification3_spec__1_#t~ret18, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 717685#L1626-2 __utac_acc__Specification3_spec__1_#t~ret7 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret7;havoc __utac_acc__Specification3_spec__1_#t~ret7;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 717684#L1678-6 __utac_acc__Specification3_spec__1_#t~ret8 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret8;havoc __utac_acc__Specification3_spec__1_#t~ret8; 702738#L97-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 702739#L159-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 718897#L1643-27 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 718893#L1664-27 __utac_acc__Specification3_spec__1_#t~ret14 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret14;havoc __utac_acc__Specification3_spec__1_#t~ret14; 688469#L163-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 688089#L203-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret82, stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 688090#L455-42 assume !(0 == isFloorCalling_~floorID); 688801#L459-42 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 686191#L482-42 stopRequestedAtCurrentFloor_#t~ret82 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret82;havoc stopRequestedAtCurrentFloor_#t~ret82; 711524#L2239-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 711525#L1643-32 assume !(0 == buttonForFloorIsPressed_~floorID); 711532#L1647-32 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 711528#L1664-32 stopRequestedAtCurrentFloor_#t~ret83 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~13 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 711526#L2246-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 711527#L2251-2 timeShift_#t~ret96 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret96;havoc timeShift_#t~ret96; 711516#L2388-2 assume !(0 != timeShift_~tmp___9~3); 688489#L2479-6 assume 1 == ~doorState~0;~doorState~0 := 0; 688490#L2479-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~11, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~11;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 718267#L1830-4 assume !(1 == stopRequestedInDirection_~dir); 718266#L1999-4 assume !(0 == ~currentFloorID~0); 718265#L2005-4 assume !(~currentFloorID~0 > 0); 690608#L2020-4 assume ~currentFloorID~0 > 0; 690610#L2022-4 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 691033#L2023-4 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 690224#L2152-4 timeShift_#t~ret103 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret103;havoc timeShift_#t~ret103; 718474#L2487-2 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret81, continueInDirection_~dir, continueInDirection_~tmp~12;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~12;~currentHeading~0 := continueInDirection_~dir; 689927#L2206-6 assume !(1 == ~currentHeading~0); 689928#L2216-18 assume !(0 == ~currentFloorID~0); 687444#L2216-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 687445#L2222-17 havoc __utac_acc__Specification3_spec__2_#t~ret19, __utac_acc__Specification3_spec__2_#t~ret20, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 730828#L228-2 assume !(-1 == ~expectedDirection~0); 730825#L240-2 assume !(1 == ~expectedDirection~0); 730823#L241-2 havoc bobCall_#t~ret155, bobCall_~tmp~17;havoc bobCall_~tmp~17;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~22;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~22; 730819#L3239-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~22 := 4;getOrigin_#res := getOrigin_~retValue_acc~22; 730816#L3264-1 bobCall_#t~ret155 := getOrigin_#res;bobCall_~tmp~17 := bobCall_#t~ret155;havoc bobCall_#t~ret155;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~17;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 730815#L726-1 assume 0 == initPersonOnFloor_~floor; 730794#L727-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 730781#L834-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 730663#L518-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 730658#L530-5 havoc cleanup_#t~ret161, cleanup_#t~ret162, cleanup_~i~3, cleanup_~tmp~23, cleanup_~tmp___0~10, cleanup_~__cil_tmp4~2;havoc cleanup_~i~3;havoc cleanup_~tmp~23;havoc cleanup_~tmp___0~10;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_~tmp~15, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_#t~ret12, __utac_acc__Specification3_spec__1_#t~ret13, __utac_acc__Specification3_spec__1_#t~ret14, __utac_acc__Specification3_spec__1_#t~ret15, __utac_acc__Specification3_spec__1_#t~ret16, __utac_acc__Specification3_spec__1_#t~ret17, __utac_acc__Specification3_spec__1_#t~ret18, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 730656#L1626-3 __utac_acc__Specification3_spec__1_#t~ret7 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret7;havoc __utac_acc__Specification3_spec__1_#t~ret7;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 730649#L1678-9 __utac_acc__Specification3_spec__1_#t~ret8 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret8;havoc __utac_acc__Specification3_spec__1_#t~ret8; 730646#L97-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 730647#L159-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 730893#L1643-38 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 730886#L1664-38 __utac_acc__Specification3_spec__1_#t~ret14 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret14;havoc __utac_acc__Specification3_spec__1_#t~ret14; 730615#L163-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 730614#L203-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret82, stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 730613#L455-63 assume !(0 == isFloorCalling_~floorID); 730612#L459-63 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 730605#L482-63 stopRequestedAtCurrentFloor_#t~ret82 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret82;havoc stopRequestedAtCurrentFloor_#t~ret82; 730601#L2239-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 689377#L1643-43 assume !(0 == buttonForFloorIsPressed_~floorID); 689378#L1647-43 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 730604#L1664-43 stopRequestedAtCurrentFloor_#t~ret83 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~13 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 730603#L2246-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 730599#L2251-3 timeShift_#t~ret96 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret96;havoc timeShift_#t~ret96; 730600#L2388-3 assume !(0 != timeShift_~tmp___9~3); 735125#L2479-9 assume !(1 == ~doorState~0); 690560#L2479-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~11, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~11;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 690561#L1830-6 assume !(1 == stopRequestedInDirection_~dir); 736597#L1999-6 assume !(0 == ~currentFloorID~0); 691556#L2005-6 assume !(~currentFloorID~0 > 0); 691554#L2020-6 assume ~currentFloorID~0 > 0; 736615#L2022-6 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 736583#L2023-6 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 735934#L2152-6 timeShift_#t~ret103 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret103;havoc timeShift_#t~ret103; 736551#L2487-3 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret81, continueInDirection_~dir, continueInDirection_~tmp~12;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~12;~currentHeading~0 := continueInDirection_~dir; 736549#L2206-9 assume !(1 == ~currentHeading~0); 736548#L2216-27 assume !(0 == ~currentFloorID~0); 736547#L2216-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 736544#L2222-23 havoc __utac_acc__Specification3_spec__2_#t~ret19, __utac_acc__Specification3_spec__2_#t~ret20, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 736542#L228-3 assume !(-1 == ~expectedDirection~0); 689963#L240-3 assume !(1 == ~expectedDirection~0); 689714#L241-3 cleanup_~i~3 := 0; 688624#L2988-2 [2021-11-02 22:06:25,410 INFO L793 eck$LassoCheckResult]: Loop: 688624#L2988-2 assume !false; 690550#L2989 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 688282#L2992 assume cleanup_~i~3 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~6;havoc isBlocked_~retValue_acc~6;isBlocked_~retValue_acc~6 := 0;isBlocked_#res := isBlocked_~retValue_acc~6; 688283#L1473 cleanup_#t~ret161 := isBlocked_#res;cleanup_~tmp___0~10 := cleanup_#t~ret161;havoc cleanup_#t~ret161; 690022#L2996 assume 1 != cleanup_~tmp___0~10; 690178#L2996-1 havoc isIdle_#res;havoc isIdle_#t~ret69, isIdle_~retValue_acc~13, isIdle_~tmp~10;havoc isIdle_~retValue_acc~13;havoc isIdle_~tmp~10;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret64, anyStopRequested_#t~ret65, anyStopRequested_#t~ret66, anyStopRequested_#t~ret67, anyStopRequested_#t~ret68, anyStopRequested_~retValue_acc~12, anyStopRequested_~tmp~9, anyStopRequested_~tmp___0~4, anyStopRequested_~tmp___1~3, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~12;havoc anyStopRequested_~tmp~9;havoc anyStopRequested_~tmp___0~4;havoc anyStopRequested_~tmp___1~3;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~1;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 688509#L455-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 688510#L482-84 anyStopRequested_#t~ret64 := isFloorCalling_#res;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret64;havoc anyStopRequested_#t~ret64; 691342#L1734 assume 0 != anyStopRequested_~tmp___3~1;anyStopRequested_~retValue_acc~12 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~12; 730356#L1798 isIdle_#t~ret69 := anyStopRequested_#res;isIdle_~tmp~10 := isIdle_#t~ret69;havoc isIdle_#t~ret69;isIdle_~retValue_acc~13 := (if 0 == isIdle_~tmp~10 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~13; 730313#L1811 cleanup_#t~ret162 := isIdle_#res;cleanup_~tmp~23 := cleanup_#t~ret162;havoc cleanup_#t~ret162; 726087#L3008 assume !(0 != cleanup_~tmp~23);havoc timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_~tmp~15, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_#t~ret12, __utac_acc__Specification3_spec__1_#t~ret13, __utac_acc__Specification3_spec__1_#t~ret14, __utac_acc__Specification3_spec__1_#t~ret15, __utac_acc__Specification3_spec__1_#t~ret16, __utac_acc__Specification3_spec__1_#t~ret17, __utac_acc__Specification3_spec__1_#t~ret18, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 726086#L1626-4 __utac_acc__Specification3_spec__1_#t~ret7 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret7;havoc __utac_acc__Specification3_spec__1_#t~ret7;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 726085#L1678-12 __utac_acc__Specification3_spec__1_#t~ret8 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret8;havoc __utac_acc__Specification3_spec__1_#t~ret8; 726083#L97-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 726084#L159-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 720801#L1643-49 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 720796#L1664-49 __utac_acc__Specification3_spec__1_#t~ret14 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret14;havoc __utac_acc__Specification3_spec__1_#t~ret14; 720787#L163-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 720786#L203-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret82, stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 720785#L455-89 assume !(0 == isFloorCalling_~floorID); 720780#L459-89 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 720781#L482-89 stopRequestedAtCurrentFloor_#t~ret82 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret82;havoc stopRequestedAtCurrentFloor_#t~ret82; 729115#L2239-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 729116#L1643-54 assume !(0 == buttonForFloorIsPressed_~floorID); 729121#L1647-54 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 729119#L1664-54 stopRequestedAtCurrentFloor_#t~ret83 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~13 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 729117#L2246-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 729118#L2251-4 timeShift_#t~ret96 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret96;havoc timeShift_#t~ret96; 729112#L2388-4 assume !(0 != timeShift_~tmp___9~3); 720761#L2479-12 assume 1 == ~doorState~0;~doorState~0 := 0; 736108#L2479-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~11, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~11;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 736107#L1830-8 assume !(1 == stopRequestedInDirection_~dir); 692320#L1999-8 assume !(0 == ~currentFloorID~0); 692321#L2005-8 assume !(~currentFloorID~0 > 0); 687945#L2020-8 assume ~currentFloorID~0 > 0; 687947#L2022-8 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 687953#L2023-8 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 687954#L2152-8 timeShift_#t~ret103 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret103;havoc timeShift_#t~ret103; 692309#L2487-4 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret81, continueInDirection_~dir, continueInDirection_~tmp~12;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~12;~currentHeading~0 := continueInDirection_~dir; 689337#L2206-12 assume !(1 == ~currentHeading~0); 689338#L2216-36 assume !(0 == ~currentFloorID~0); 735958#L2216-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 735957#L2222-29 havoc __utac_acc__Specification3_spec__2_#t~ret19, __utac_acc__Specification3_spec__2_#t~ret20, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 735955#L228-4 assume !(-1 == ~expectedDirection~0); 735952#L240-4 assume !(1 == ~expectedDirection~0); 688623#L241-4 cleanup_~i~3 := 1 + cleanup_~i~3; 688624#L2988-2 [2021-11-02 22:06:25,411 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-02 22:06:25,411 INFO L85 PathProgramCache]: Analyzing trace with hash 1191077286, now seen corresponding path program 1 times [2021-11-02 22:06:25,411 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-02 22:06:25,411 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [731307206] [2021-11-02 22:06:25,411 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-02 22:06:25,412 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-02 22:06:25,437 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-02 22:06:25,477 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-02 22:06:25,477 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-02 22:06:25,478 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [731307206] [2021-11-02 22:06:25,478 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [731307206] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-02 22:06:25,478 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-02 22:06:25,478 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-11-02 22:06:25,478 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [985648375] [2021-11-02 22:06:25,479 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-11-02 22:06:25,479 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-02 22:06:25,479 INFO L85 PathProgramCache]: Analyzing trace with hash 1552488081, now seen corresponding path program 1 times [2021-11-02 22:06:25,480 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-02 22:06:25,480 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [617026860] [2021-11-02 22:06:25,480 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-02 22:06:25,480 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-02 22:06:25,488 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-02 22:06:25,501 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-02 22:06:25,501 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-02 22:06:25,502 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [617026860] [2021-11-02 22:06:25,502 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [617026860] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-02 22:06:25,502 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-02 22:06:25,502 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-11-02 22:06:25,502 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2033125336] [2021-11-02 22:06:25,503 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-11-02 22:06:25,503 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-02 22:06:25,503 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-02 22:06:25,503 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-02 22:06:25,504 INFO L87 Difference]: Start difference. First operand 52403 states and 97615 transitions. cyclomatic complexity: 45213 Second operand has 3 states, 3 states have (on average 15.666666666666666) internal successors, (47), 3 states have internal predecessors, (47), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:06:26,929 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-02 22:06:26,929 INFO L93 Difference]: Finished difference Result 98575 states and 183183 transitions. [2021-11-02 22:06:26,930 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-02 22:06:26,930 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 98575 states and 183183 transitions. [2021-11-02 22:06:27,824 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 23708 [2021-11-02 22:06:28,123 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 98575 states to 98575 states and 183183 transitions. [2021-11-02 22:06:28,124 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 98575 [2021-11-02 22:06:28,185 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 98575 [2021-11-02 22:06:28,185 INFO L73 IsDeterministic]: Start isDeterministic. Operand 98575 states and 183183 transitions. [2021-11-02 22:06:28,226 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-11-02 22:06:28,226 INFO L681 BuchiCegarLoop]: Abstraction has 98575 states and 183183 transitions. [2021-11-02 22:06:28,271 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 98575 states and 183183 transitions. [2021-11-02 22:06:29,432 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 98575 to 98575. [2021-11-02 22:06:29,507 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 98575 states, 98575 states have (on average 1.858310930763378) internal successors, (183183), 98574 states have internal predecessors, (183183), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:06:30,287 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 98575 states to 98575 states and 183183 transitions. [2021-11-02 22:06:30,288 INFO L704 BuchiCegarLoop]: Abstraction has 98575 states and 183183 transitions. [2021-11-02 22:06:30,289 INFO L587 BuchiCegarLoop]: Abstraction has 98575 states and 183183 transitions. [2021-11-02 22:06:30,289 INFO L425 BuchiCegarLoop]: ======== Iteration 10============ [2021-11-02 22:06:30,289 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 98575 states and 183183 transitions. [2021-11-02 22:06:30,649 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 23708 [2021-11-02 22:06:30,650 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-11-02 22:06:30,650 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-11-02 22:06:30,654 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-02 22:06:30,654 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-02 22:06:30,655 INFO L791 eck$LassoCheckResult]: Stem: 841221#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(2);call write~init~int(48, #t~string4.base, #t~string4.offset, 1);call write~init~int(0, #t~string4.base, 1 + #t~string4.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(31);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(12);call #t~string45.base, #t~string45.offset := #Ultimate.allocOnStack(30);call #t~string46.base, #t~string46.offset := #Ultimate.allocOnStack(9);call #t~string47.base, #t~string47.offset := #Ultimate.allocOnStack(21);call #t~string48.base, #t~string48.offset := #Ultimate.allocOnStack(30);call #t~string49.base, #t~string49.offset := #Ultimate.allocOnStack(9);call #t~string50.base, #t~string50.offset := #Ultimate.allocOnStack(21);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(30);call #t~string55.base, #t~string55.offset := #Ultimate.allocOnStack(9);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(25);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(30);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(9);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(25);call #t~string107.base, #t~string107.offset := #Ultimate.allocOnStack(10);call #t~string109.base, #t~string109.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string109.base, #t~string109.offset, 1);call write~init~int(95, #t~string109.base, 1 + #t~string109.offset, 1);call write~init~int(93, #t~string109.base, 2 + #t~string109.offset, 1);call write~init~int(0, #t~string109.base, 3 + #t~string109.offset, 1);call #t~string111.base, #t~string111.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string111.base, #t~string111.offset, 1);call write~init~int(93, #t~string111.base, 1 + #t~string111.offset, 1);call write~init~int(32, #t~string111.base, 2 + #t~string111.offset, 1);call write~init~int(0, #t~string111.base, 3 + #t~string111.offset, 1);call #t~string113.base, #t~string113.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string113.base, #t~string113.offset, 1);call write~init~int(97, #t~string113.base, 1 + #t~string113.offset, 1);call write~init~int(116, #t~string113.base, 2 + #t~string113.offset, 1);call write~init~int(32, #t~string113.base, 3 + #t~string113.offset, 1);call write~init~int(0, #t~string113.base, 4 + #t~string113.offset, 1);call #t~string115.base, #t~string115.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string115.base, #t~string115.offset, 1);call write~init~int(105, #t~string115.base, 1 + #t~string115.offset, 1);call write~init~int(0, #t~string115.base, 2 + #t~string115.offset, 1);call #t~string117.base, #t~string117.offset := #Ultimate.allocOnStack(10);call #t~string119.base, #t~string119.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string119.base, #t~string119.offset, 1);call write~init~int(112, #t~string119.base, 1 + #t~string119.offset, 1);call write~init~int(0, #t~string119.base, 2 + #t~string119.offset, 1);call #t~string121.base, #t~string121.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string121.base, #t~string121.offset, 1);call write~init~int(111, #t~string121.base, 1 + #t~string121.offset, 1);call write~init~int(119, #t~string121.base, 2 + #t~string121.offset, 1);call write~init~int(110, #t~string121.base, 3 + #t~string121.offset, 1);call write~init~int(0, #t~string121.base, 4 + #t~string121.offset, 1);call #t~string123.base, #t~string123.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string123.base, #t~string123.offset, 1);call write~init~int(73, #t~string123.base, 1 + #t~string123.offset, 1);call write~init~int(76, #t~string123.base, 2 + #t~string123.offset, 1);call write~init~int(95, #t~string123.base, 3 + #t~string123.offset, 1);call write~init~int(112, #t~string123.base, 4 + #t~string123.offset, 1);call write~init~int(58, #t~string123.base, 5 + #t~string123.offset, 1);call write~init~int(0, #t~string123.base, 6 + #t~string123.offset, 1);call #t~string125.base, #t~string125.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string125.base, #t~string125.offset, 1);call write~init~int(37, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(105, #t~string125.base, 2 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 3 + #t~string125.offset, 1);call #t~string127.base, #t~string127.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string127.base, #t~string127.offset, 1);call write~init~int(37, #t~string127.base, 1 + #t~string127.offset, 1);call write~init~int(105, #t~string127.base, 2 + #t~string127.offset, 1);call write~init~int(0, #t~string127.base, 3 + #t~string127.offset, 1);call #t~string129.base, #t~string129.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string129.base, #t~string129.offset, 1);call write~init~int(37, #t~string129.base, 1 + #t~string129.offset, 1);call write~init~int(105, #t~string129.base, 2 + #t~string129.offset, 1);call write~init~int(0, #t~string129.base, 3 + #t~string129.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string131.base, #t~string131.offset, 1);call write~init~int(37, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string133.base, #t~string133.offset, 1);call write~init~int(37, #t~string133.base, 1 + #t~string133.offset, 1);call write~init~int(105, #t~string133.base, 2 + #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 3 + #t~string133.offset, 1);call #t~string135.base, #t~string135.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string135.base, #t~string135.offset, 1);call write~init~int(70, #t~string135.base, 1 + #t~string135.offset, 1);call write~init~int(95, #t~string135.base, 2 + #t~string135.offset, 1);call write~init~int(112, #t~string135.base, 3 + #t~string135.offset, 1);call write~init~int(58, #t~string135.base, 4 + #t~string135.offset, 1);call write~init~int(0, #t~string135.base, 5 + #t~string135.offset, 1);call #t~string138.base, #t~string138.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string138.base, #t~string138.offset, 1);call write~init~int(37, #t~string138.base, 1 + #t~string138.offset, 1);call write~init~int(105, #t~string138.base, 2 + #t~string138.offset, 1);call write~init~int(0, #t~string138.base, 3 + #t~string138.offset, 1);call #t~string141.base, #t~string141.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string141.base, #t~string141.offset, 1);call write~init~int(37, #t~string141.base, 1 + #t~string141.offset, 1);call write~init~int(105, #t~string141.base, 2 + #t~string141.offset, 1);call write~init~int(0, #t~string141.base, 3 + #t~string141.offset, 1);call #t~string144.base, #t~string144.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string144.base, #t~string144.offset, 1);call write~init~int(37, #t~string144.base, 1 + #t~string144.offset, 1);call write~init~int(105, #t~string144.base, 2 + #t~string144.offset, 1);call write~init~int(0, #t~string144.base, 3 + #t~string144.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string147.base, #t~string147.offset, 1);call write~init~int(37, #t~string147.base, 1 + #t~string147.offset, 1);call write~init~int(105, #t~string147.base, 2 + #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 3 + #t~string147.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string150.base, #t~string150.offset, 1);call write~init~int(37, #t~string150.base, 1 + #t~string150.offset, 1);call write~init~int(105, #t~string150.base, 2 + #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 3 + #t~string150.offset, 1);call #t~string152.base, #t~string152.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string152.base, #t~string152.offset, 1);call write~init~int(0, #t~string152.base, 1 + #t~string152.offset, 1);~weight~0 := 0;~maximumWeight~0 := 100;~expectedDirection~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 841222#L-1 havoc main_#res;havoc main_#t~ret167, main_~retValue_acc~20, main_~tmp~25;havoc main_~retValue_acc~20;havoc main_~tmp~25; 841110#L3336 havoc valid_product_#res;havoc valid_product_~retValue_acc~25;havoc valid_product_~retValue_acc~25;valid_product_~retValue_acc~25 := 1;valid_product_#res := valid_product_~retValue_acc~25; 839483#L3344 main_#t~ret167 := valid_product_#res;main_~tmp~25 := main_#t~ret167;havoc main_#t~ret167; 839484#L3182 assume 0 != main_~tmp~25; 840050#L3156 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 840185#L448 havoc bobCall_#t~ret155, bobCall_~tmp~17;havoc bobCall_~tmp~17;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~22;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~22; 835864#L3239 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~22 := 4;getOrigin_#res := getOrigin_~retValue_acc~22; 835865#L3264 bobCall_#t~ret155 := getOrigin_#res;bobCall_~tmp~17 := bobCall_#t~ret155;havoc bobCall_#t~ret155;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~17;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 837214#L726 assume 0 == initPersonOnFloor_~floor; 837215#L727 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 835956#L834-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 838061#L518 assume !(0 == callOnFloor_~floorID); 838063#L521 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 840289#L530-2 havoc timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_~tmp~15, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_#t~ret12, __utac_acc__Specification3_spec__1_#t~ret13, __utac_acc__Specification3_spec__1_#t~ret14, __utac_acc__Specification3_spec__1_#t~ret15, __utac_acc__Specification3_spec__1_#t~ret16, __utac_acc__Specification3_spec__1_#t~ret17, __utac_acc__Specification3_spec__1_#t~ret18, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 848890#L1626 __utac_acc__Specification3_spec__1_#t~ret7 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret7;havoc __utac_acc__Specification3_spec__1_#t~ret7;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 848889#L1678 __utac_acc__Specification3_spec__1_#t~ret8 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret8;havoc __utac_acc__Specification3_spec__1_#t~ret8; 848888#L97 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 841204#L98 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 841205#L1643 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 836223#L1664 __utac_acc__Specification3_spec__1_#t~ret9 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret9;havoc __utac_acc__Specification3_spec__1_#t~ret9; 836224#L102 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 836752#L203 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret82, stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 838372#L455 assume !(0 == isFloorCalling_~floorID); 838373#L459 assume !(1 == isFloorCalling_~floorID); 839212#L463 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 838354#L482 stopRequestedAtCurrentFloor_#t~ret82 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret82;havoc stopRequestedAtCurrentFloor_#t~ret82; 838624#L2239 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 838626#L1643-10 assume !(0 == buttonForFloorIsPressed_~floorID); 838674#L1647-10 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 837656#L1664-10 stopRequestedAtCurrentFloor_#t~ret83 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~13 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 840384#L2246 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 841949#L2251 timeShift_#t~ret96 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret96;havoc timeShift_#t~ret96; 842367#L2388 assume !(0 != timeShift_~tmp___9~3); 838456#L2479 assume !(1 == ~doorState~0); 838457#L2479-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~11, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~11;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 840189#L1830 assume !(1 == stopRequestedInDirection_~dir); 840025#L1999 assume !(0 == ~currentFloorID~0); 836273#L2005 assume ~currentFloorID~0 > 0; 836275#L2006 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 837779#L455-6 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 837780#L482-6 stopRequestedInDirection_#t~ret76 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~1 := stopRequestedInDirection_#t~ret76;havoc stopRequestedInDirection_#t~ret76; 842293#L2010 assume 0 != stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 848767#L2152 timeShift_#t~ret103 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret103;havoc timeShift_#t~ret103; 848766#L2487 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret81, continueInDirection_~dir, continueInDirection_~tmp~12;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~12;~currentHeading~0 := continueInDirection_~dir; 848765#L2206 assume !(1 == ~currentHeading~0); 848762#L2216 assume !(0 == ~currentFloorID~0); 847819#L2216-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 847781#L2222-5 havoc __utac_acc__Specification3_spec__2_#t~ret19, __utac_acc__Specification3_spec__2_#t~ret20, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 847778#L228 assume !(-1 == ~expectedDirection~0); 847774#L240 assume !(1 == ~expectedDirection~0); 847772#L241 havoc timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_~tmp~15, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_#t~ret12, __utac_acc__Specification3_spec__1_#t~ret13, __utac_acc__Specification3_spec__1_#t~ret14, __utac_acc__Specification3_spec__1_#t~ret15, __utac_acc__Specification3_spec__1_#t~ret16, __utac_acc__Specification3_spec__1_#t~ret17, __utac_acc__Specification3_spec__1_#t~ret18, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 847771#L1626-1 __utac_acc__Specification3_spec__1_#t~ret7 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret7;havoc __utac_acc__Specification3_spec__1_#t~ret7;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 847770#L1678-3 __utac_acc__Specification3_spec__1_#t~ret8 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret8;havoc __utac_acc__Specification3_spec__1_#t~ret8; 847762#L97-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 847763#L159-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 857734#L169-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 850738#L180-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 848460#L191-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 847733#L202-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 847727#L203-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret82, stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 847725#L455-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 847718#L482-21 stopRequestedAtCurrentFloor_#t~ret82 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret82;havoc stopRequestedAtCurrentFloor_#t~ret82; 847716#L2239-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 847711#L1643-21 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 847710#L1664-21 stopRequestedAtCurrentFloor_#t~ret83 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~13 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 847703#L2246-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 847702#L2251-1 timeShift_#t~ret96 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret96;havoc timeShift_#t~ret96; 847701#L2388-1 assume !(0 != timeShift_~tmp___9~3); 847700#L2479-3 assume !(1 == ~doorState~0); 847699#L2479-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~11, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~11;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 847697#L1830-2 assume !(1 == stopRequestedInDirection_~dir); 847698#L1999-2 assume !(0 == ~currentFloorID~0); 842450#L2005-2 assume ~currentFloorID~0 > 0; 842441#L2006-2 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 842442#L455-27 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 842448#L482-27 stopRequestedInDirection_#t~ret76 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~1 := stopRequestedInDirection_#t~ret76;havoc stopRequestedInDirection_#t~ret76; 842438#L2010-2 assume 0 != stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 842439#L2152-2 timeShift_#t~ret103 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret103;havoc timeShift_#t~ret103; 860991#L2487-1 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret81, continueInDirection_~dir, continueInDirection_~tmp~12;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~12;~currentHeading~0 := continueInDirection_~dir; 860972#L2206-3 assume !(1 == ~currentHeading~0); 860971#L2216-9 assume !(0 == ~currentFloorID~0); 860950#L2216-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 847188#L2222-11 havoc __utac_acc__Specification3_spec__2_#t~ret19, __utac_acc__Specification3_spec__2_#t~ret20, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 864332#L228-1 assume !(-1 == ~expectedDirection~0); 864329#L240-1 assume !(1 == ~expectedDirection~0); 864328#L241-1 havoc timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_~tmp~15, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_#t~ret12, __utac_acc__Specification3_spec__1_#t~ret13, __utac_acc__Specification3_spec__1_#t~ret14, __utac_acc__Specification3_spec__1_#t~ret15, __utac_acc__Specification3_spec__1_#t~ret16, __utac_acc__Specification3_spec__1_#t~ret17, __utac_acc__Specification3_spec__1_#t~ret18, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 864327#L1626-2 __utac_acc__Specification3_spec__1_#t~ret7 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret7;havoc __utac_acc__Specification3_spec__1_#t~ret7;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 864326#L1678-6 __utac_acc__Specification3_spec__1_#t~ret8 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret8;havoc __utac_acc__Specification3_spec__1_#t~ret8; 864324#L97-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 864325#L159-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 845470#L169-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 845466#L180-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 845463#L191-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 845439#L202-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 845430#L203-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret82, stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 845427#L455-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 845426#L482-42 stopRequestedAtCurrentFloor_#t~ret82 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret82;havoc stopRequestedAtCurrentFloor_#t~ret82; 845425#L2239-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 845423#L1643-32 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 845419#L1664-32 stopRequestedAtCurrentFloor_#t~ret83 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~13 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 843890#L2246-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 843889#L2251-2 timeShift_#t~ret96 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret96;havoc timeShift_#t~ret96; 843887#L2388-2 assume !(0 != timeShift_~tmp___9~3); 843886#L2479-6 assume 1 == ~doorState~0;~doorState~0 := 0; 843885#L2479-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~11, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~11;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 843884#L1830-4 assume !(1 == stopRequestedInDirection_~dir); 843883#L1999-4 assume !(0 == ~currentFloorID~0); 842461#L2005-4 assume ~currentFloorID~0 > 0; 842172#L2006-4 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 835995#L455-48 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 835712#L482-48 stopRequestedInDirection_#t~ret76 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~1 := stopRequestedInDirection_#t~ret76;havoc stopRequestedInDirection_#t~ret76; 835713#L2010-4 assume 0 != stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 843265#L2152-4 timeShift_#t~ret103 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret103;havoc timeShift_#t~ret103; 843118#L2487-2 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret81, continueInDirection_~dir, continueInDirection_~tmp~12;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~12;~currentHeading~0 := continueInDirection_~dir; 843116#L2206-6 assume !(1 == ~currentHeading~0); 843111#L2216-18 assume !(0 == ~currentFloorID~0); 843083#L2216-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 843069#L2222-17 havoc __utac_acc__Specification3_spec__2_#t~ret19, __utac_acc__Specification3_spec__2_#t~ret20, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 843067#L228-2 assume !(-1 == ~expectedDirection~0); 843064#L240-2 assume !(1 == ~expectedDirection~0); 843062#L241-2 havoc bobCall_#t~ret155, bobCall_~tmp~17;havoc bobCall_~tmp~17;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~22;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~22; 843058#L3239-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~22 := 4;getOrigin_#res := getOrigin_~retValue_acc~22; 843055#L3264-1 bobCall_#t~ret155 := getOrigin_#res;bobCall_~tmp~17 := bobCall_#t~ret155;havoc bobCall_#t~ret155;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~17;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 843054#L726-1 assume 0 == initPersonOnFloor_~floor; 843028#L727-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 843015#L834-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 843012#L518-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 843013#L530-5 havoc cleanup_#t~ret161, cleanup_#t~ret162, cleanup_~i~3, cleanup_~tmp~23, cleanup_~tmp___0~10, cleanup_~__cil_tmp4~2;havoc cleanup_~i~3;havoc cleanup_~tmp~23;havoc cleanup_~tmp___0~10;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_~tmp~15, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_#t~ret12, __utac_acc__Specification3_spec__1_#t~ret13, __utac_acc__Specification3_spec__1_#t~ret14, __utac_acc__Specification3_spec__1_#t~ret15, __utac_acc__Specification3_spec__1_#t~ret16, __utac_acc__Specification3_spec__1_#t~ret17, __utac_acc__Specification3_spec__1_#t~ret18, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 899393#L1626-3 __utac_acc__Specification3_spec__1_#t~ret7 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret7;havoc __utac_acc__Specification3_spec__1_#t~ret7;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 882358#L1678-9 __utac_acc__Specification3_spec__1_#t~ret8 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret8;havoc __utac_acc__Specification3_spec__1_#t~ret8; 882349#L97-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 882351#L159-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 913361#L1643-38 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 912715#L1664-38 __utac_acc__Specification3_spec__1_#t~ret14 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret14;havoc __utac_acc__Specification3_spec__1_#t~ret14; 892427#L163-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 840801#L203-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret82, stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 916227#L455-63 assume !(0 == isFloorCalling_~floorID); 872250#L459-63 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 872247#L482-63 stopRequestedAtCurrentFloor_#t~ret82 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret82;havoc stopRequestedAtCurrentFloor_#t~ret82; 872223#L2239-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 871573#L1643-43 assume !(0 == buttonForFloorIsPressed_~floorID); 842948#L1647-43 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 842844#L1664-43 stopRequestedAtCurrentFloor_#t~ret83 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~13 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 842744#L2246-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 842650#L2251-3 timeShift_#t~ret96 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret96;havoc timeShift_#t~ret96; 842594#L2388-3 assume !(0 != timeShift_~tmp___9~3); 842585#L2479-9 assume !(1 == ~doorState~0); 842576#L2479-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~11, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~11;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 842556#L1830-6 assume !(1 == stopRequestedInDirection_~dir); 842557#L1999-6 assume !(0 == ~currentFloorID~0); 893942#L2005-6 assume ~currentFloorID~0 > 0; 893941#L2006-6 assume !(0 != stopRequestedInDirection_~respectFloorCalls); 891571#L2020-6 assume ~currentFloorID~0 > 0; 891608#L2022-6 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 891609#L2023-6 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 835890#L2152-6 timeShift_#t~ret103 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret103;havoc timeShift_#t~ret103; 892406#L2487-3 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret81, continueInDirection_~dir, continueInDirection_~tmp~12;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~12;~currentHeading~0 := continueInDirection_~dir; 892407#L2206-9 assume !(1 == ~currentHeading~0); 913844#L2216-27 assume !(0 == ~currentFloorID~0); 913840#L2216-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 839720#L2222-23 havoc __utac_acc__Specification3_spec__2_#t~ret19, __utac_acc__Specification3_spec__2_#t~ret20, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 913833#L228-3 assume !(-1 == ~expectedDirection~0); 913827#L240-3 assume !(1 == ~expectedDirection~0); 913825#L241-3 cleanup_~i~3 := 0; 913823#L2988-2 [2021-11-02 22:06:30,656 INFO L793 eck$LassoCheckResult]: Loop: 913823#L2988-2 assume !false; 913822#L2989 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 913821#L2992 assume cleanup_~i~3 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~6;havoc isBlocked_~retValue_acc~6;isBlocked_~retValue_acc~6 := 0;isBlocked_#res := isBlocked_~retValue_acc~6; 913819#L1473 cleanup_#t~ret161 := isBlocked_#res;cleanup_~tmp___0~10 := cleanup_#t~ret161;havoc cleanup_#t~ret161; 913817#L2996 assume 1 != cleanup_~tmp___0~10; 913815#L2996-1 havoc isIdle_#res;havoc isIdle_#t~ret69, isIdle_~retValue_acc~13, isIdle_~tmp~10;havoc isIdle_~retValue_acc~13;havoc isIdle_~tmp~10;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret64, anyStopRequested_#t~ret65, anyStopRequested_#t~ret66, anyStopRequested_#t~ret67, anyStopRequested_#t~ret68, anyStopRequested_~retValue_acc~12, anyStopRequested_~tmp~9, anyStopRequested_~tmp___0~4, anyStopRequested_~tmp___1~3, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~12;havoc anyStopRequested_~tmp~9;havoc anyStopRequested_~tmp___0~4;havoc anyStopRequested_~tmp___1~3;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~1;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 913814#L455-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 913813#L482-84 anyStopRequested_#t~ret64 := isFloorCalling_#res;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret64;havoc anyStopRequested_#t~ret64; 913812#L1734 assume 0 != anyStopRequested_~tmp___3~1;anyStopRequested_~retValue_acc~12 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~12; 899473#L1798 isIdle_#t~ret69 := anyStopRequested_#res;isIdle_~tmp~10 := isIdle_#t~ret69;havoc isIdle_#t~ret69;isIdle_~retValue_acc~13 := (if 0 == isIdle_~tmp~10 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~13; 913811#L1811 cleanup_#t~ret162 := isIdle_#res;cleanup_~tmp~23 := cleanup_#t~ret162;havoc cleanup_#t~ret162; 913810#L3008 assume !(0 != cleanup_~tmp~23);havoc timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_~tmp~15, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_#t~ret12, __utac_acc__Specification3_spec__1_#t~ret13, __utac_acc__Specification3_spec__1_#t~ret14, __utac_acc__Specification3_spec__1_#t~ret15, __utac_acc__Specification3_spec__1_#t~ret16, __utac_acc__Specification3_spec__1_#t~ret17, __utac_acc__Specification3_spec__1_#t~ret18, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 913809#L1626-4 __utac_acc__Specification3_spec__1_#t~ret7 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret7;havoc __utac_acc__Specification3_spec__1_#t~ret7;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 913808#L1678-12 __utac_acc__Specification3_spec__1_#t~ret8 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret8;havoc __utac_acc__Specification3_spec__1_#t~ret8; 913806#L97-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 913807#L159-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 896961#L1643-49 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 896957#L1664-49 __utac_acc__Specification3_spec__1_#t~ret14 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret14;havoc __utac_acc__Specification3_spec__1_#t~ret14; 896954#L163-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 896955#L203-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret82, stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 898167#L455-89 assume !(0 == isFloorCalling_~floorID); 896296#L459-89 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 896297#L482-89 stopRequestedAtCurrentFloor_#t~ret82 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret82;havoc stopRequestedAtCurrentFloor_#t~ret82; 904481#L2239-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 904482#L1643-54 assume !(0 == buttonForFloorIsPressed_~floorID); 904486#L1647-54 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 904484#L1664-54 stopRequestedAtCurrentFloor_#t~ret83 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~13 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 904483#L2246-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 904480#L2251-4 timeShift_#t~ret96 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret96;havoc timeShift_#t~ret96; 904477#L2388-4 assume !(0 != timeShift_~tmp___9~3); 896274#L2479-12 assume 1 == ~doorState~0;~doorState~0 := 0; 896272#L2479-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~11, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~11;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 896269#L1830-8 assume !(1 == stopRequestedInDirection_~dir); 896270#L1999-8 assume !(0 == ~currentFloorID~0); 913994#L2005-8 assume ~currentFloorID~0 > 0; 913992#L2006-8 assume !(0 != stopRequestedInDirection_~respectFloorCalls); 913953#L2020-8 assume ~currentFloorID~0 > 0; 913990#L2022-8 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 913964#L2023-8 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 842491#L2152-8 timeShift_#t~ret103 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret103;havoc timeShift_#t~ret103; 913949#L2487-4 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret81, continueInDirection_~dir, continueInDirection_~tmp~12;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~12;~currentHeading~0 := continueInDirection_~dir; 913947#L2206-12 assume !(1 == ~currentHeading~0); 913945#L2216-36 assume !(0 == ~currentFloorID~0); 913841#L2216-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 894835#L2222-29 havoc __utac_acc__Specification3_spec__2_#t~ret19, __utac_acc__Specification3_spec__2_#t~ret20, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 913836#L228-4 assume !(-1 == ~expectedDirection~0); 913830#L240-4 assume !(1 == ~expectedDirection~0); 913824#L241-4 cleanup_~i~3 := 1 + cleanup_~i~3; 913823#L2988-2 [2021-11-02 22:06:30,657 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-02 22:06:30,657 INFO L85 PathProgramCache]: Analyzing trace with hash -610952910, now seen corresponding path program 1 times [2021-11-02 22:06:30,658 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-02 22:06:30,658 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1589543672] [2021-11-02 22:06:30,658 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-02 22:06:30,658 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-02 22:06:30,690 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-02 22:06:30,735 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-02 22:06:30,735 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-02 22:06:30,736 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1589543672] [2021-11-02 22:06:30,736 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1589543672] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-02 22:06:30,736 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-02 22:06:30,736 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-11-02 22:06:30,737 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1441233846] [2021-11-02 22:06:30,737 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-11-02 22:06:30,737 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-02 22:06:30,738 INFO L85 PathProgramCache]: Analyzing trace with hash 1297371671, now seen corresponding path program 1 times [2021-11-02 22:06:30,738 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-02 22:06:30,738 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1283726652] [2021-11-02 22:06:30,738 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-02 22:06:30,738 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-02 22:06:30,748 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-02 22:06:30,768 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-02 22:06:30,768 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-02 22:06:30,769 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1283726652] [2021-11-02 22:06:30,769 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1283726652] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-02 22:06:30,769 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-02 22:06:30,769 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-11-02 22:06:30,769 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1164853500] [2021-11-02 22:06:30,770 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-11-02 22:06:30,770 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-02 22:06:30,771 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-11-02 22:06:30,771 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-11-02 22:06:30,771 INFO L87 Difference]: Start difference. First operand 98575 states and 183183 transitions. cyclomatic complexity: 84609 Second operand has 4 states, 4 states have (on average 12.0) internal successors, (48), 4 states have internal predecessors, (48), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:06:32,557 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-02 22:06:32,557 INFO L93 Difference]: Finished difference Result 121051 states and 223179 transitions. [2021-11-02 22:06:32,558 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-11-02 22:06:32,558 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 121051 states and 223179 transitions. [2021-11-02 22:06:33,610 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 28220 [2021-11-02 22:06:33,967 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 121051 states to 121051 states and 223179 transitions. [2021-11-02 22:06:33,967 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 121051 [2021-11-02 22:06:34,036 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 121051 [2021-11-02 22:06:34,036 INFO L73 IsDeterministic]: Start isDeterministic. Operand 121051 states and 223179 transitions. [2021-11-02 22:06:34,078 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-11-02 22:06:34,078 INFO L681 BuchiCegarLoop]: Abstraction has 121051 states and 223179 transitions. [2021-11-02 22:06:34,126 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 121051 states and 223179 transitions. [2021-11-02 22:06:35,458 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 121051 to 98575. [2021-11-02 22:06:35,534 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 98575 states, 98575 states have (on average 1.8526502662946995) internal successors, (182625), 98574 states have internal predecessors, (182625), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:06:35,770 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 98575 states to 98575 states and 182625 transitions. [2021-11-02 22:06:35,771 INFO L704 BuchiCegarLoop]: Abstraction has 98575 states and 182625 transitions. [2021-11-02 22:06:35,771 INFO L587 BuchiCegarLoop]: Abstraction has 98575 states and 182625 transitions. [2021-11-02 22:06:35,771 INFO L425 BuchiCegarLoop]: ======== Iteration 11============ [2021-11-02 22:06:35,771 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 98575 states and 182625 transitions. [2021-11-02 22:06:36,675 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 23708 [2021-11-02 22:06:36,675 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-11-02 22:06:36,675 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-11-02 22:06:36,678 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-02 22:06:36,678 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-02 22:06:36,678 INFO L791 eck$LassoCheckResult]: Stem: 1060830#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(2);call write~init~int(48, #t~string4.base, #t~string4.offset, 1);call write~init~int(0, #t~string4.base, 1 + #t~string4.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(31);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(12);call #t~string45.base, #t~string45.offset := #Ultimate.allocOnStack(30);call #t~string46.base, #t~string46.offset := #Ultimate.allocOnStack(9);call #t~string47.base, #t~string47.offset := #Ultimate.allocOnStack(21);call #t~string48.base, #t~string48.offset := #Ultimate.allocOnStack(30);call #t~string49.base, #t~string49.offset := #Ultimate.allocOnStack(9);call #t~string50.base, #t~string50.offset := #Ultimate.allocOnStack(21);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(30);call #t~string55.base, #t~string55.offset := #Ultimate.allocOnStack(9);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(25);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(30);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(9);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(25);call #t~string107.base, #t~string107.offset := #Ultimate.allocOnStack(10);call #t~string109.base, #t~string109.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string109.base, #t~string109.offset, 1);call write~init~int(95, #t~string109.base, 1 + #t~string109.offset, 1);call write~init~int(93, #t~string109.base, 2 + #t~string109.offset, 1);call write~init~int(0, #t~string109.base, 3 + #t~string109.offset, 1);call #t~string111.base, #t~string111.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string111.base, #t~string111.offset, 1);call write~init~int(93, #t~string111.base, 1 + #t~string111.offset, 1);call write~init~int(32, #t~string111.base, 2 + #t~string111.offset, 1);call write~init~int(0, #t~string111.base, 3 + #t~string111.offset, 1);call #t~string113.base, #t~string113.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string113.base, #t~string113.offset, 1);call write~init~int(97, #t~string113.base, 1 + #t~string113.offset, 1);call write~init~int(116, #t~string113.base, 2 + #t~string113.offset, 1);call write~init~int(32, #t~string113.base, 3 + #t~string113.offset, 1);call write~init~int(0, #t~string113.base, 4 + #t~string113.offset, 1);call #t~string115.base, #t~string115.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string115.base, #t~string115.offset, 1);call write~init~int(105, #t~string115.base, 1 + #t~string115.offset, 1);call write~init~int(0, #t~string115.base, 2 + #t~string115.offset, 1);call #t~string117.base, #t~string117.offset := #Ultimate.allocOnStack(10);call #t~string119.base, #t~string119.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string119.base, #t~string119.offset, 1);call write~init~int(112, #t~string119.base, 1 + #t~string119.offset, 1);call write~init~int(0, #t~string119.base, 2 + #t~string119.offset, 1);call #t~string121.base, #t~string121.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string121.base, #t~string121.offset, 1);call write~init~int(111, #t~string121.base, 1 + #t~string121.offset, 1);call write~init~int(119, #t~string121.base, 2 + #t~string121.offset, 1);call write~init~int(110, #t~string121.base, 3 + #t~string121.offset, 1);call write~init~int(0, #t~string121.base, 4 + #t~string121.offset, 1);call #t~string123.base, #t~string123.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string123.base, #t~string123.offset, 1);call write~init~int(73, #t~string123.base, 1 + #t~string123.offset, 1);call write~init~int(76, #t~string123.base, 2 + #t~string123.offset, 1);call write~init~int(95, #t~string123.base, 3 + #t~string123.offset, 1);call write~init~int(112, #t~string123.base, 4 + #t~string123.offset, 1);call write~init~int(58, #t~string123.base, 5 + #t~string123.offset, 1);call write~init~int(0, #t~string123.base, 6 + #t~string123.offset, 1);call #t~string125.base, #t~string125.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string125.base, #t~string125.offset, 1);call write~init~int(37, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(105, #t~string125.base, 2 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 3 + #t~string125.offset, 1);call #t~string127.base, #t~string127.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string127.base, #t~string127.offset, 1);call write~init~int(37, #t~string127.base, 1 + #t~string127.offset, 1);call write~init~int(105, #t~string127.base, 2 + #t~string127.offset, 1);call write~init~int(0, #t~string127.base, 3 + #t~string127.offset, 1);call #t~string129.base, #t~string129.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string129.base, #t~string129.offset, 1);call write~init~int(37, #t~string129.base, 1 + #t~string129.offset, 1);call write~init~int(105, #t~string129.base, 2 + #t~string129.offset, 1);call write~init~int(0, #t~string129.base, 3 + #t~string129.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string131.base, #t~string131.offset, 1);call write~init~int(37, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string133.base, #t~string133.offset, 1);call write~init~int(37, #t~string133.base, 1 + #t~string133.offset, 1);call write~init~int(105, #t~string133.base, 2 + #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 3 + #t~string133.offset, 1);call #t~string135.base, #t~string135.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string135.base, #t~string135.offset, 1);call write~init~int(70, #t~string135.base, 1 + #t~string135.offset, 1);call write~init~int(95, #t~string135.base, 2 + #t~string135.offset, 1);call write~init~int(112, #t~string135.base, 3 + #t~string135.offset, 1);call write~init~int(58, #t~string135.base, 4 + #t~string135.offset, 1);call write~init~int(0, #t~string135.base, 5 + #t~string135.offset, 1);call #t~string138.base, #t~string138.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string138.base, #t~string138.offset, 1);call write~init~int(37, #t~string138.base, 1 + #t~string138.offset, 1);call write~init~int(105, #t~string138.base, 2 + #t~string138.offset, 1);call write~init~int(0, #t~string138.base, 3 + #t~string138.offset, 1);call #t~string141.base, #t~string141.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string141.base, #t~string141.offset, 1);call write~init~int(37, #t~string141.base, 1 + #t~string141.offset, 1);call write~init~int(105, #t~string141.base, 2 + #t~string141.offset, 1);call write~init~int(0, #t~string141.base, 3 + #t~string141.offset, 1);call #t~string144.base, #t~string144.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string144.base, #t~string144.offset, 1);call write~init~int(37, #t~string144.base, 1 + #t~string144.offset, 1);call write~init~int(105, #t~string144.base, 2 + #t~string144.offset, 1);call write~init~int(0, #t~string144.base, 3 + #t~string144.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string147.base, #t~string147.offset, 1);call write~init~int(37, #t~string147.base, 1 + #t~string147.offset, 1);call write~init~int(105, #t~string147.base, 2 + #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 3 + #t~string147.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string150.base, #t~string150.offset, 1);call write~init~int(37, #t~string150.base, 1 + #t~string150.offset, 1);call write~init~int(105, #t~string150.base, 2 + #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 3 + #t~string150.offset, 1);call #t~string152.base, #t~string152.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string152.base, #t~string152.offset, 1);call write~init~int(0, #t~string152.base, 1 + #t~string152.offset, 1);~weight~0 := 0;~maximumWeight~0 := 100;~expectedDirection~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 1060831#L-1 havoc main_#res;havoc main_#t~ret167, main_~retValue_acc~20, main_~tmp~25;havoc main_~retValue_acc~20;havoc main_~tmp~25; 1060711#L3336 havoc valid_product_#res;havoc valid_product_~retValue_acc~25;havoc valid_product_~retValue_acc~25;valid_product_~retValue_acc~25 := 1;valid_product_#res := valid_product_~retValue_acc~25; 1059097#L3344 main_#t~ret167 := valid_product_#res;main_~tmp~25 := main_#t~ret167;havoc main_#t~ret167; 1059098#L3182 assume 0 != main_~tmp~25; 1059653#L3156 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 1059789#L448 havoc bobCall_#t~ret155, bobCall_~tmp~17;havoc bobCall_~tmp~17;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~22;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~22; 1055501#L3239 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~22 := 4;getOrigin_#res := getOrigin_~retValue_acc~22; 1055502#L3264 bobCall_#t~ret155 := getOrigin_#res;bobCall_~tmp~17 := bobCall_#t~ret155;havoc bobCall_#t~ret155;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~17;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1056837#L726 assume 0 == initPersonOnFloor_~floor; 1056838#L727 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 1055590#L834-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 1057676#L518 assume !(0 == callOnFloor_~floorID); 1057678#L521 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 1058565#L530-2 havoc timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_~tmp~15, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_#t~ret12, __utac_acc__Specification3_spec__1_#t~ret13, __utac_acc__Specification3_spec__1_#t~ret14, __utac_acc__Specification3_spec__1_#t~ret15, __utac_acc__Specification3_spec__1_#t~ret16, __utac_acc__Specification3_spec__1_#t~ret17, __utac_acc__Specification3_spec__1_#t~ret18, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 1058566#L1626 __utac_acc__Specification3_spec__1_#t~ret7 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret7;havoc __utac_acc__Specification3_spec__1_#t~ret7;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 1056077#L1678 __utac_acc__Specification3_spec__1_#t~ret8 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret8;havoc __utac_acc__Specification3_spec__1_#t~ret8; 1056078#L97 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 1058158#L98 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 1060812#L1643 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 1055858#L1664 __utac_acc__Specification3_spec__1_#t~ret9 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret9;havoc __utac_acc__Specification3_spec__1_#t~ret9; 1055859#L102 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 1061140#L203 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret82, stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1061141#L455 assume !(0 == isFloorCalling_~floorID); 1058825#L459 assume !(1 == isFloorCalling_~floorID); 1058826#L463 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1058654#L482 stopRequestedAtCurrentFloor_#t~ret82 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret82;havoc stopRequestedAtCurrentFloor_#t~ret82; 1058655#L2239 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 1058280#L1643-10 assume !(0 == buttonForFloorIsPressed_~floorID); 1058281#L1647-10 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 1062647#L1664-10 stopRequestedAtCurrentFloor_#t~ret83 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~13 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 1062646#L2246 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 1062645#L2251 timeShift_#t~ret96 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret96;havoc timeShift_#t~ret96; 1062644#L2388 assume !(0 != timeShift_~tmp___9~3); 1062643#L2479 assume !(1 == ~doorState~0); 1062642#L2479-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~11, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~11;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 1062640#L1830 assume !(1 == stopRequestedInDirection_~dir); 1062641#L1999 assume !(0 == ~currentFloorID~0); 1062658#L2005 assume ~currentFloorID~0 > 0; 1062656#L2006 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1057399#L455-6 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1057400#L482-6 stopRequestedInDirection_#t~ret76 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~1 := stopRequestedInDirection_#t~ret76;havoc stopRequestedInDirection_#t~ret76; 1061919#L2010 assume 0 != stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 1062503#L2152 timeShift_#t~ret103 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret103;havoc timeShift_#t~ret103; 1062499#L2487 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret81, continueInDirection_~dir, continueInDirection_~tmp~12;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~12;~currentHeading~0 := continueInDirection_~dir; 1062489#L2206 assume !(1 == ~currentHeading~0); 1062477#L2216 assume !(0 == ~currentFloorID~0); 1062466#L2216-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1062458#L2222-5 havoc __utac_acc__Specification3_spec__2_#t~ret19, __utac_acc__Specification3_spec__2_#t~ret20, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 1062454#L228 assume !(-1 == ~expectedDirection~0); 1062448#L240 assume !(1 == ~expectedDirection~0); 1062444#L241 havoc timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_~tmp~15, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_#t~ret12, __utac_acc__Specification3_spec__1_#t~ret13, __utac_acc__Specification3_spec__1_#t~ret14, __utac_acc__Specification3_spec__1_#t~ret15, __utac_acc__Specification3_spec__1_#t~ret16, __utac_acc__Specification3_spec__1_#t~ret17, __utac_acc__Specification3_spec__1_#t~ret18, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 1062443#L1626-1 __utac_acc__Specification3_spec__1_#t~ret7 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret7;havoc __utac_acc__Specification3_spec__1_#t~ret7;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 1062441#L1678-3 __utac_acc__Specification3_spec__1_#t~ret8 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret8;havoc __utac_acc__Specification3_spec__1_#t~ret8; 1062438#L97-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 1062436#L159-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 1062434#L169-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 1062428#L180-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 1062413#L191-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 1062406#L202-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 1062400#L203-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret82, stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1062398#L455-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1062397#L482-21 stopRequestedAtCurrentFloor_#t~ret82 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret82;havoc stopRequestedAtCurrentFloor_#t~ret82; 1062395#L2239-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 1062388#L1643-21 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 1062389#L1664-21 stopRequestedAtCurrentFloor_#t~ret83 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~13 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 1065018#L2246-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 1065017#L2251-1 timeShift_#t~ret96 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret96;havoc timeShift_#t~ret96; 1065010#L2388-1 assume !(0 != timeShift_~tmp___9~3); 1065011#L2479-3 assume !(1 == ~doorState~0); 1066159#L2479-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~11, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~11;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 1066156#L1830-2 assume !(1 == stopRequestedInDirection_~dir); 1066157#L1999-2 assume !(0 == ~currentFloorID~0); 1066520#L2005-2 assume ~currentFloorID~0 > 0; 1062063#L2006-2 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1062062#L455-27 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1062060#L482-27 stopRequestedInDirection_#t~ret76 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~1 := stopRequestedInDirection_#t~ret76;havoc stopRequestedInDirection_#t~ret76; 1062061#L2010-2 assume 0 != stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 1066398#L2152-2 timeShift_#t~ret103 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret103;havoc timeShift_#t~ret103; 1066183#L2487-1 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret81, continueInDirection_~dir, continueInDirection_~tmp~12;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~12;~currentHeading~0 := continueInDirection_~dir; 1062956#L2206-3 assume !(1 == ~currentHeading~0); 1062928#L2216-9 assume !(0 == ~currentFloorID~0); 1062913#L2216-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1062906#L2222-11 havoc __utac_acc__Specification3_spec__2_#t~ret19, __utac_acc__Specification3_spec__2_#t~ret20, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 1062901#L228-1 assume !(-1 == ~expectedDirection~0); 1062898#L240-1 assume !(1 == ~expectedDirection~0); 1062897#L241-1 havoc timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_~tmp~15, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_#t~ret12, __utac_acc__Specification3_spec__1_#t~ret13, __utac_acc__Specification3_spec__1_#t~ret14, __utac_acc__Specification3_spec__1_#t~ret15, __utac_acc__Specification3_spec__1_#t~ret16, __utac_acc__Specification3_spec__1_#t~ret17, __utac_acc__Specification3_spec__1_#t~ret18, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 1062896#L1626-2 __utac_acc__Specification3_spec__1_#t~ret7 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret7;havoc __utac_acc__Specification3_spec__1_#t~ret7;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 1062895#L1678-6 __utac_acc__Specification3_spec__1_#t~ret8 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret8;havoc __utac_acc__Specification3_spec__1_#t~ret8; 1062890#L97-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 1062891#L159-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 1062879#L169-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 1062863#L180-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 1062854#L191-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 1062846#L202-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 1062843#L203-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret82, stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1062841#L455-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1062840#L482-42 stopRequestedAtCurrentFloor_#t~ret82 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret82;havoc stopRequestedAtCurrentFloor_#t~ret82; 1062838#L2239-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 1062834#L1643-32 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 1062835#L1664-32 stopRequestedAtCurrentFloor_#t~ret83 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~13 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 1109799#L2246-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 1109798#L2251-2 timeShift_#t~ret96 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret96;havoc timeShift_#t~ret96; 1109796#L2388-2 assume !(0 != timeShift_~tmp___9~3); 1109795#L2479-6 assume 1 == ~doorState~0;~doorState~0 := 0; 1109793#L2479-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~11, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~11;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 1109790#L1830-4 assume !(1 == stopRequestedInDirection_~dir); 1109791#L1999-4 assume !(0 == ~currentFloorID~0); 1062343#L2005-4 assume ~currentFloorID~0 > 0; 1062345#L2006-4 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1055632#L455-48 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1055633#L482-48 stopRequestedInDirection_#t~ret76 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~1 := stopRequestedInDirection_#t~ret76;havoc stopRequestedInDirection_#t~ret76; 1060962#L2010-4 assume 0 != stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 1060964#L2152-4 timeShift_#t~ret103 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret103;havoc timeShift_#t~ret103; 1121851#L2487-2 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret81, continueInDirection_~dir, continueInDirection_~tmp~12;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~12;~currentHeading~0 := continueInDirection_~dir; 1121844#L2206-6 assume !(1 == ~currentHeading~0); 1121831#L2216-18 assume !(0 == ~currentFloorID~0); 1118582#L2216-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1109573#L2222-17 havoc __utac_acc__Specification3_spec__2_#t~ret19, __utac_acc__Specification3_spec__2_#t~ret20, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 1138246#L228-2 assume !(-1 == ~expectedDirection~0); 1138243#L240-2 assume !(1 == ~expectedDirection~0); 1138241#L241-2 havoc bobCall_#t~ret155, bobCall_~tmp~17;havoc bobCall_~tmp~17;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~22;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~22; 1138237#L3239-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~22 := 4;getOrigin_#res := getOrigin_~retValue_acc~22; 1138234#L3264-1 bobCall_#t~ret155 := getOrigin_#res;bobCall_~tmp~17 := bobCall_#t~ret155;havoc bobCall_#t~ret155;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~17;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1138233#L726-1 assume 0 == initPersonOnFloor_~floor; 1138212#L727-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 1138199#L834-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 1138146#L518-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 1138141#L530-5 havoc cleanup_#t~ret161, cleanup_#t~ret162, cleanup_~i~3, cleanup_~tmp~23, cleanup_~tmp___0~10, cleanup_~__cil_tmp4~2;havoc cleanup_~i~3;havoc cleanup_~tmp~23;havoc cleanup_~tmp___0~10;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_~tmp~15, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_#t~ret12, __utac_acc__Specification3_spec__1_#t~ret13, __utac_acc__Specification3_spec__1_#t~ret14, __utac_acc__Specification3_spec__1_#t~ret15, __utac_acc__Specification3_spec__1_#t~ret16, __utac_acc__Specification3_spec__1_#t~ret17, __utac_acc__Specification3_spec__1_#t~ret18, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 1138134#L1626-3 __utac_acc__Specification3_spec__1_#t~ret7 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret7;havoc __utac_acc__Specification3_spec__1_#t~ret7;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 1138132#L1678-9 __utac_acc__Specification3_spec__1_#t~ret8 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret8;havoc __utac_acc__Specification3_spec__1_#t~ret8; 1138129#L97-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 1138125#L159-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 1067742#L1643-38 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 1067707#L1664-38 __utac_acc__Specification3_spec__1_#t~ret14 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret14;havoc __utac_acc__Specification3_spec__1_#t~ret14; 1067708#L163-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 1067695#L203-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret82, stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1067696#L455-63 assume !(0 == isFloorCalling_~floorID); 1067692#L459-63 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1067689#L482-63 stopRequestedAtCurrentFloor_#t~ret82 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret82;havoc stopRequestedAtCurrentFloor_#t~ret82; 1067679#L2239-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 1067681#L1643-43 assume !(0 == buttonForFloorIsPressed_~floorID); 1118279#L1647-43 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 1117883#L1664-43 stopRequestedAtCurrentFloor_#t~ret83 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~13 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 1117882#L2246-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 1117881#L2251-3 timeShift_#t~ret96 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret96;havoc timeShift_#t~ret96; 1115013#L2388-3 assume !(0 != timeShift_~tmp___9~3); 1115012#L2479-9 assume !(1 == ~doorState~0); 1115011#L2479-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~11, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~11;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 1115009#L1830-6 assume !(1 == stopRequestedInDirection_~dir); 1115008#L1999-6 assume !(0 == ~currentFloorID~0); 1115005#L2005-6 assume ~currentFloorID~0 > 0; 1115006#L2006-6 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1062150#L455-69 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1062151#L482-69 stopRequestedInDirection_#t~ret76 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~1 := stopRequestedInDirection_#t~ret76;havoc stopRequestedInDirection_#t~ret76; 1062145#L2010-6 assume 0 != stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 1062146#L2152-6 timeShift_#t~ret103 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret103;havoc timeShift_#t~ret103; 1132199#L2487-3 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret81, continueInDirection_~dir, continueInDirection_~tmp~12;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~12;~currentHeading~0 := continueInDirection_~dir; 1132197#L2206-9 assume !(1 == ~currentHeading~0); 1132193#L2216-27 assume !(0 == ~currentFloorID~0); 1126057#L2216-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1067947#L2222-23 havoc __utac_acc__Specification3_spec__2_#t~ret19, __utac_acc__Specification3_spec__2_#t~ret20, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 1067938#L228-3 assume !(-1 == ~expectedDirection~0); 1067926#L240-3 assume !(1 == ~expectedDirection~0); 1067919#L241-3 cleanup_~i~3 := 0; 1067916#L2988-2 [2021-11-02 22:06:36,679 INFO L793 eck$LassoCheckResult]: Loop: 1067916#L2988-2 assume !false; 1067914#L2989 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 1067912#L2992 assume cleanup_~i~3 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~6;havoc isBlocked_~retValue_acc~6;isBlocked_~retValue_acc~6 := 0;isBlocked_#res := isBlocked_~retValue_acc~6; 1067910#L1473 cleanup_#t~ret161 := isBlocked_#res;cleanup_~tmp___0~10 := cleanup_#t~ret161;havoc cleanup_#t~ret161; 1067908#L2996 assume 1 != cleanup_~tmp___0~10; 1067904#L2996-1 havoc isIdle_#res;havoc isIdle_#t~ret69, isIdle_~retValue_acc~13, isIdle_~tmp~10;havoc isIdle_~retValue_acc~13;havoc isIdle_~tmp~10;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret64, anyStopRequested_#t~ret65, anyStopRequested_#t~ret66, anyStopRequested_#t~ret67, anyStopRequested_#t~ret68, anyStopRequested_~retValue_acc~12, anyStopRequested_~tmp~9, anyStopRequested_~tmp___0~4, anyStopRequested_~tmp___1~3, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~12;havoc anyStopRequested_~tmp~9;havoc anyStopRequested_~tmp___0~4;havoc anyStopRequested_~tmp___1~3;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~1;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1067905#L455-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1067896#L482-84 anyStopRequested_#t~ret64 := isFloorCalling_#res;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret64;havoc anyStopRequested_#t~ret64; 1067897#L1734 assume 0 != anyStopRequested_~tmp___3~1;anyStopRequested_~retValue_acc~12 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~12; 1132378#L1798 isIdle_#t~ret69 := anyStopRequested_#res;isIdle_~tmp~10 := isIdle_#t~ret69;havoc isIdle_#t~ret69;isIdle_~retValue_acc~13 := (if 0 == isIdle_~tmp~10 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~13; 1132377#L1811 cleanup_#t~ret162 := isIdle_#res;cleanup_~tmp~23 := cleanup_#t~ret162;havoc cleanup_#t~ret162; 1132376#L3008 assume !(0 != cleanup_~tmp~23);havoc timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_~tmp~15, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_#t~ret12, __utac_acc__Specification3_spec__1_#t~ret13, __utac_acc__Specification3_spec__1_#t~ret14, __utac_acc__Specification3_spec__1_#t~ret15, __utac_acc__Specification3_spec__1_#t~ret16, __utac_acc__Specification3_spec__1_#t~ret17, __utac_acc__Specification3_spec__1_#t~ret18, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 1132375#L1626-4 __utac_acc__Specification3_spec__1_#t~ret7 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret7;havoc __utac_acc__Specification3_spec__1_#t~ret7;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 1132374#L1678-12 __utac_acc__Specification3_spec__1_#t~ret8 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret8;havoc __utac_acc__Specification3_spec__1_#t~ret8; 1132372#L97-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 1132373#L159-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 1067846#L1643-49 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 1067837#L1664-49 __utac_acc__Specification3_spec__1_#t~ret14 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret14;havoc __utac_acc__Specification3_spec__1_#t~ret14; 1067838#L163-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 1069399#L203-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret82, stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1069398#L455-89 assume !(0 == isFloorCalling_~floorID); 1069391#L459-89 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1069388#L482-89 stopRequestedAtCurrentFloor_#t~ret82 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret82;havoc stopRequestedAtCurrentFloor_#t~ret82; 1069385#L2239-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 1069386#L1643-54 assume !(0 == buttonForFloorIsPressed_~floorID); 1069395#L1647-54 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 1069389#L1664-54 stopRequestedAtCurrentFloor_#t~ret83 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~13 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 1069387#L2246-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 1069384#L2251-4 timeShift_#t~ret96 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret96;havoc timeShift_#t~ret96; 1069381#L2388-4 assume !(0 != timeShift_~tmp___9~3); 1069382#L2479-12 assume 1 == ~doorState~0;~doorState~0 := 0; 1069955#L2479-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~11, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~11;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 1069952#L1830-8 assume !(1 == stopRequestedInDirection_~dir); 1069953#L1999-8 assume !(0 == ~currentFloorID~0); 1070056#L2005-8 assume ~currentFloorID~0 > 0; 1062129#L2006-8 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1062130#L455-95 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1062125#L482-95 stopRequestedInDirection_#t~ret76 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~1 := stopRequestedInDirection_#t~ret76;havoc stopRequestedInDirection_#t~ret76; 1062126#L2010-8 assume 0 != stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 1069974#L2152-8 timeShift_#t~ret103 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret103;havoc timeShift_#t~ret103; 1069969#L2487-4 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret81, continueInDirection_~dir, continueInDirection_~tmp~12;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~12;~currentHeading~0 := continueInDirection_~dir; 1069959#L2206-12 assume !(1 == ~currentHeading~0); 1067969#L2216-36 assume !(0 == ~currentFloorID~0); 1067949#L2216-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1067946#L2222-29 havoc __utac_acc__Specification3_spec__2_#t~ret19, __utac_acc__Specification3_spec__2_#t~ret20, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 1067935#L228-4 assume !(-1 == ~expectedDirection~0); 1067923#L240-4 assume !(1 == ~expectedDirection~0); 1067918#L241-4 cleanup_~i~3 := 1 + cleanup_~i~3; 1067916#L2988-2 [2021-11-02 22:06:36,680 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-02 22:06:36,680 INFO L85 PathProgramCache]: Analyzing trace with hash 2124388181, now seen corresponding path program 1 times [2021-11-02 22:06:36,680 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-02 22:06:36,681 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [830986198] [2021-11-02 22:06:36,681 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-02 22:06:36,681 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-02 22:06:36,718 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-02 22:06:36,769 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-02 22:06:36,770 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-02 22:06:36,770 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [830986198] [2021-11-02 22:06:36,770 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [830986198] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-02 22:06:36,770 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-02 22:06:36,770 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-11-02 22:06:36,771 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [139072311] [2021-11-02 22:06:36,771 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-11-02 22:06:36,771 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-02 22:06:36,772 INFO L85 PathProgramCache]: Analyzing trace with hash -262254534, now seen corresponding path program 1 times [2021-11-02 22:06:36,772 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-02 22:06:36,772 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1439820671] [2021-11-02 22:06:36,772 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-02 22:06:36,772 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-02 22:06:36,781 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-02 22:06:36,795 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-02 22:06:36,796 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-02 22:06:36,796 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1439820671] [2021-11-02 22:06:36,796 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1439820671] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-02 22:06:36,796 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-02 22:06:36,796 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-11-02 22:06:36,796 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1687558709] [2021-11-02 22:06:36,797 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-11-02 22:06:36,797 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-02 22:06:36,797 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-02 22:06:36,798 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-02 22:06:36,798 INFO L87 Difference]: Start difference. First operand 98575 states and 182625 transitions. cyclomatic complexity: 84051 Second operand has 3 states, 3 states have (on average 16.0) internal successors, (48), 3 states have internal predecessors, (48), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:06:37,699 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-02 22:06:37,699 INFO L93 Difference]: Finished difference Result 163859 states and 303395 transitions. [2021-11-02 22:06:37,700 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-02 22:06:37,700 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 163859 states and 303395 transitions. [2021-11-02 22:06:39,197 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 39124 [2021-11-02 22:06:39,751 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 163859 states to 163859 states and 303395 transitions. [2021-11-02 22:06:39,751 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 163859 [2021-11-02 22:06:39,869 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 163859 [2021-11-02 22:06:39,869 INFO L73 IsDeterministic]: Start isDeterministic. Operand 163859 states and 303395 transitions. [2021-11-02 22:06:39,951 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-11-02 22:06:39,951 INFO L681 BuchiCegarLoop]: Abstraction has 163859 states and 303395 transitions.