./Ultimate.py --spec ../../sv-benchmarks/c/properties/termination.prp --file ../../sv-benchmarks/c/product-lines/elevator_spec3_product01.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for termination Using default analysis Version f8e1c903 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_48f77c2b-f187-4bc6-991f-fa76c65795a6/bin/uautomizer-IVEQpCNsaX/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_48f77c2b-f187-4bc6-991f-fa76c65795a6/bin/uautomizer-IVEQpCNsaX/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_48f77c2b-f187-4bc6-991f-fa76c65795a6/bin/uautomizer-IVEQpCNsaX/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_48f77c2b-f187-4bc6-991f-fa76c65795a6/bin/uautomizer-IVEQpCNsaX/config/AutomizerTermination.xml -i ../../sv-benchmarks/c/product-lines/elevator_spec3_product01.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_48f77c2b-f187-4bc6-991f-fa76c65795a6/bin/uautomizer-IVEQpCNsaX/config/svcomp-Termination-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_48f77c2b-f187-4bc6-991f-fa76c65795a6/bin/uautomizer-IVEQpCNsaX --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(F end) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 2e63e44256bba8522bf99795cd1238c2e8ad8456659e8a545df838f8f88bd318 --- Real Ultimate output --- This is Ultimate 0.2.1-dev-f8e1c90 [2021-11-09 09:19:40,922 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-11-09 09:19:40,925 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-11-09 09:19:40,986 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-11-09 09:19:40,987 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-11-09 09:19:40,991 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-11-09 09:19:40,993 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-11-09 09:19:40,996 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-11-09 09:19:40,999 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-11-09 09:19:41,005 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-11-09 09:19:41,006 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-11-09 09:19:41,008 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-11-09 09:19:41,008 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-11-09 09:19:41,011 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-11-09 09:19:41,013 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-11-09 09:19:41,019 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-11-09 09:19:41,021 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-11-09 09:19:41,022 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-11-09 09:19:41,025 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-11-09 09:19:41,035 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-11-09 09:19:41,037 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-11-09 09:19:41,039 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-11-09 09:19:41,042 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-11-09 09:19:41,043 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-11-09 09:19:41,052 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-11-09 09:19:41,053 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-11-09 09:19:41,053 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-11-09 09:19:41,055 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-11-09 09:19:41,056 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-11-09 09:19:41,057 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-11-09 09:19:41,058 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-11-09 09:19:41,059 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-11-09 09:19:41,061 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-11-09 09:19:41,062 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-11-09 09:19:41,063 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-11-09 09:19:41,064 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-11-09 09:19:41,065 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-11-09 09:19:41,065 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-11-09 09:19:41,065 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-11-09 09:19:41,066 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-11-09 09:19:41,067 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-11-09 09:19:41,068 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_48f77c2b-f187-4bc6-991f-fa76c65795a6/bin/uautomizer-IVEQpCNsaX/config/svcomp-Termination-32bit-Automizer_Default.epf [2021-11-09 09:19:41,114 INFO L113 SettingsManager]: Loading preferences was successful [2021-11-09 09:19:41,114 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-11-09 09:19:41,115 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-11-09 09:19:41,115 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-11-09 09:19:41,117 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-11-09 09:19:41,117 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-11-09 09:19:41,117 INFO L138 SettingsManager]: * Use SBE=true [2021-11-09 09:19:41,118 INFO L136 SettingsManager]: Preferences of BuchiAutomizer differ from their defaults: [2021-11-09 09:19:41,118 INFO L138 SettingsManager]: * NCSB implementation=INTSET_LAZY3 [2021-11-09 09:19:41,118 INFO L138 SettingsManager]: * Use old map elimination=false [2021-11-09 09:19:41,119 INFO L138 SettingsManager]: * Use external solver (rank synthesis)=false [2021-11-09 09:19:41,119 INFO L138 SettingsManager]: * Use only trivial implications for array writes=true [2021-11-09 09:19:41,120 INFO L138 SettingsManager]: * Rank analysis=LINEAR_WITH_GUESSES [2021-11-09 09:19:41,120 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-11-09 09:19:41,120 INFO L138 SettingsManager]: * sizeof long=4 [2021-11-09 09:19:41,120 INFO L138 SettingsManager]: * Check unreachability of error function in SV-COMP mode=false [2021-11-09 09:19:41,121 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-11-09 09:19:41,121 INFO L138 SettingsManager]: * sizeof POINTER=4 [2021-11-09 09:19:41,121 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-11-09 09:19:41,121 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=ASSUME [2021-11-09 09:19:41,121 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=ASSUME [2021-11-09 09:19:41,122 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=ASSUME [2021-11-09 09:19:41,122 INFO L138 SettingsManager]: * sizeof long double=12 [2021-11-09 09:19:41,122 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-11-09 09:19:41,122 INFO L138 SettingsManager]: * Assume nondeterminstic values are in range=false [2021-11-09 09:19:41,123 INFO L138 SettingsManager]: * Use constant arrays=true [2021-11-09 09:19:41,124 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=ASSUME [2021-11-09 09:19:41,125 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-11-09 09:19:41,125 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-11-09 09:19:41,125 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-11-09 09:19:41,125 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2021-11-09 09:19:41,126 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-11-09 09:19:41,127 INFO L136 SettingsManager]: Preferences of IcfgTransformer differ from their defaults: [2021-11-09 09:19:41,127 INFO L138 SettingsManager]: * TransformationType=MODULO_NEIGHBOR WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_48f77c2b-f187-4bc6-991f-fa76c65795a6/bin/uautomizer-IVEQpCNsaX/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_48f77c2b-f187-4bc6-991f-fa76c65795a6/bin/uautomizer-IVEQpCNsaX Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(F end) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 2e63e44256bba8522bf99795cd1238c2e8ad8456659e8a545df838f8f88bd318 [2021-11-09 09:19:41,424 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-11-09 09:19:41,444 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-11-09 09:19:41,447 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-11-09 09:19:41,448 INFO L271 PluginConnector]: Initializing CDTParser... [2021-11-09 09:19:41,449 INFO L275 PluginConnector]: CDTParser initialized [2021-11-09 09:19:41,450 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_48f77c2b-f187-4bc6-991f-fa76c65795a6/bin/uautomizer-IVEQpCNsaX/../../sv-benchmarks/c/product-lines/elevator_spec3_product01.cil.c [2021-11-09 09:19:41,520 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_48f77c2b-f187-4bc6-991f-fa76c65795a6/bin/uautomizer-IVEQpCNsaX/data/c3c190fed/8aaf2e220e9f449ab5b7c7d42fdf2073/FLAGde082bdf5 [2021-11-09 09:19:42,200 INFO L306 CDTParser]: Found 1 translation units. [2021-11-09 09:19:42,201 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_48f77c2b-f187-4bc6-991f-fa76c65795a6/sv-benchmarks/c/product-lines/elevator_spec3_product01.cil.c [2021-11-09 09:19:42,229 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_48f77c2b-f187-4bc6-991f-fa76c65795a6/bin/uautomizer-IVEQpCNsaX/data/c3c190fed/8aaf2e220e9f449ab5b7c7d42fdf2073/FLAGde082bdf5 [2021-11-09 09:19:42,404 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_48f77c2b-f187-4bc6-991f-fa76c65795a6/bin/uautomizer-IVEQpCNsaX/data/c3c190fed/8aaf2e220e9f449ab5b7c7d42fdf2073 [2021-11-09 09:19:42,406 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-11-09 09:19:42,408 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-11-09 09:19:42,412 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-11-09 09:19:42,412 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-11-09 09:19:42,416 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-11-09 09:19:42,417 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 09.11 09:19:42" (1/1) ... [2021-11-09 09:19:42,418 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@1ccc6086 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.11 09:19:42, skipping insertion in model container [2021-11-09 09:19:42,418 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 09.11 09:19:42" (1/1) ... [2021-11-09 09:19:42,426 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-11-09 09:19:42,514 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-11-09 09:19:43,057 WARN L228 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_48f77c2b-f187-4bc6-991f-fa76c65795a6/sv-benchmarks/c/product-lines/elevator_spec3_product01.cil.c[40412,40425] [2021-11-09 09:19:43,183 INFO L206 PostProcessor]: Analyzing one entry point: main [2021-11-09 09:19:43,204 INFO L203 MainTranslator]: Completed pre-run [2021-11-09 09:19:43,298 WARN L228 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_48f77c2b-f187-4bc6-991f-fa76c65795a6/sv-benchmarks/c/product-lines/elevator_spec3_product01.cil.c[40412,40425] [2021-11-09 09:19:43,366 INFO L206 PostProcessor]: Analyzing one entry point: main [2021-11-09 09:19:43,392 INFO L208 MainTranslator]: Completed translation [2021-11-09 09:19:43,392 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.11 09:19:43 WrapperNode [2021-11-09 09:19:43,393 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-11-09 09:19:43,394 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-11-09 09:19:43,394 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-11-09 09:19:43,394 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-11-09 09:19:43,402 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.11 09:19:43" (1/1) ... [2021-11-09 09:19:43,437 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.11 09:19:43" (1/1) ... [2021-11-09 09:19:43,808 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-11-09 09:19:43,809 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-11-09 09:19:43,809 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-11-09 09:19:43,809 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-11-09 09:19:43,817 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.11 09:19:43" (1/1) ... [2021-11-09 09:19:43,818 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.11 09:19:43" (1/1) ... [2021-11-09 09:19:43,903 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.11 09:19:43" (1/1) ... [2021-11-09 09:19:43,913 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.11 09:19:43" (1/1) ... [2021-11-09 09:19:44,098 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.11 09:19:43" (1/1) ... [2021-11-09 09:19:44,283 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.11 09:19:43" (1/1) ... [2021-11-09 09:19:44,304 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.11 09:19:43" (1/1) ... [2021-11-09 09:19:44,354 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-11-09 09:19:44,355 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-11-09 09:19:44,356 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-11-09 09:19:44,356 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-11-09 09:19:44,358 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.11 09:19:43" (1/1) ... [2021-11-09 09:19:44,366 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-11-09 09:19:44,377 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_48f77c2b-f187-4bc6-991f-fa76c65795a6/bin/uautomizer-IVEQpCNsaX/z3 [2021-11-09 09:19:44,394 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_48f77c2b-f187-4bc6-991f-fa76c65795a6/bin/uautomizer-IVEQpCNsaX/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-11-09 09:19:44,416 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_48f77c2b-f187-4bc6-991f-fa76c65795a6/bin/uautomizer-IVEQpCNsaX/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (1)] Waiting until timeout for monitored process [2021-11-09 09:19:44,443 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2021-11-09 09:19:44,443 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-11-09 09:19:44,444 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-11-09 09:19:44,444 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-11-09 09:19:53,709 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-11-09 09:19:53,709 INFO L299 CfgBuilder]: Removed 1107 assume(true) statements. [2021-11-09 09:19:53,719 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 09.11 09:19:53 BoogieIcfgContainer [2021-11-09 09:19:53,720 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-11-09 09:19:53,721 INFO L113 PluginConnector]: ------------------------BuchiAutomizer---------------------------- [2021-11-09 09:19:53,721 INFO L271 PluginConnector]: Initializing BuchiAutomizer... [2021-11-09 09:19:53,725 INFO L275 PluginConnector]: BuchiAutomizer initialized [2021-11-09 09:19:53,726 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2021-11-09 09:19:53,727 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "CDTParser AST 09.11 09:19:42" (1/3) ... [2021-11-09 09:19:53,728 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@1781a5d4 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 09.11 09:19:53, skipping insertion in model container [2021-11-09 09:19:53,728 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2021-11-09 09:19:53,728 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.11 09:19:43" (2/3) ... [2021-11-09 09:19:53,729 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@1781a5d4 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 09.11 09:19:53, skipping insertion in model container [2021-11-09 09:19:53,729 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2021-11-09 09:19:53,729 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 09.11 09:19:53" (3/3) ... [2021-11-09 09:19:53,731 INFO L389 chiAutomizerObserver]: Analyzing ICFG elevator_spec3_product01.cil.c [2021-11-09 09:19:53,788 INFO L359 BuchiCegarLoop]: Interprodecural is true [2021-11-09 09:19:53,788 INFO L360 BuchiCegarLoop]: Hoare is false [2021-11-09 09:19:53,788 INFO L361 BuchiCegarLoop]: Compute interpolants for ForwardPredicates [2021-11-09 09:19:53,788 INFO L362 BuchiCegarLoop]: Backedges is STRAIGHT_LINE [2021-11-09 09:19:53,788 INFO L363 BuchiCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2021-11-09 09:19:53,788 INFO L364 BuchiCegarLoop]: Difference is false [2021-11-09 09:19:53,788 INFO L365 BuchiCegarLoop]: Minimize is MINIMIZE_SEVPA [2021-11-09 09:19:53,789 INFO L368 BuchiCegarLoop]: ======== Iteration 0==of CEGAR loop == BuchiCegarLoop======== [2021-11-09 09:19:53,909 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 5583 states, 5582 states have (on average 1.904335363668936) internal successors, (10630), 5582 states have internal predecessors, (10630), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-09 09:19:54,104 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1134 [2021-11-09 09:19:54,105 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-11-09 09:19:54,105 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-11-09 09:19:54,135 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-09 09:19:54,135 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-09 09:19:54,135 INFO L425 BuchiCegarLoop]: ======== Iteration 1============ [2021-11-09 09:19:54,153 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 5583 states, 5582 states have (on average 1.904335363668936) internal successors, (10630), 5582 states have internal predecessors, (10630), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-09 09:19:54,242 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1134 [2021-11-09 09:19:54,242 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-11-09 09:19:54,243 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-11-09 09:19:54,253 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-09 09:19:54,253 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-09 09:19:54,276 INFO L791 eck$LassoCheckResult]: Stem: 3441#ULTIMATE.startENTRYtrue #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(2);call write~init~int(48, #t~string4.base, #t~string4.offset, 1);call write~init~int(0, #t~string4.base, 1 + #t~string4.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(31);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(12);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(30);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(9);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(21);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(30);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(9);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(21);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(30);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(9);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(25);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(30);call #t~string72.base, #t~string72.offset := #Ultimate.allocOnStack(9);call #t~string73.base, #t~string73.offset := #Ultimate.allocOnStack(25);call #t~string120.base, #t~string120.offset := #Ultimate.allocOnStack(10);call #t~string122.base, #t~string122.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string122.base, #t~string122.offset, 1);call write~init~int(95, #t~string122.base, 1 + #t~string122.offset, 1);call write~init~int(93, #t~string122.base, 2 + #t~string122.offset, 1);call write~init~int(0, #t~string122.base, 3 + #t~string122.offset, 1);call #t~string124.base, #t~string124.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string124.base, #t~string124.offset, 1);call write~init~int(93, #t~string124.base, 1 + #t~string124.offset, 1);call write~init~int(32, #t~string124.base, 2 + #t~string124.offset, 1);call write~init~int(0, #t~string124.base, 3 + #t~string124.offset, 1);call #t~string126.base, #t~string126.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string126.base, #t~string126.offset, 1);call write~init~int(97, #t~string126.base, 1 + #t~string126.offset, 1);call write~init~int(116, #t~string126.base, 2 + #t~string126.offset, 1);call write~init~int(32, #t~string126.base, 3 + #t~string126.offset, 1);call write~init~int(0, #t~string126.base, 4 + #t~string126.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string128.base, #t~string128.offset, 1);call write~init~int(105, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 2 + #t~string128.offset, 1);call #t~string130.base, #t~string130.offset := #Ultimate.allocOnStack(10);call #t~string132.base, #t~string132.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string132.base, #t~string132.offset, 1);call write~init~int(112, #t~string132.base, 1 + #t~string132.offset, 1);call write~init~int(0, #t~string132.base, 2 + #t~string132.offset, 1);call #t~string134.base, #t~string134.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string134.base, #t~string134.offset, 1);call write~init~int(111, #t~string134.base, 1 + #t~string134.offset, 1);call write~init~int(119, #t~string134.base, 2 + #t~string134.offset, 1);call write~init~int(110, #t~string134.base, 3 + #t~string134.offset, 1);call write~init~int(0, #t~string134.base, 4 + #t~string134.offset, 1);call #t~string136.base, #t~string136.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string136.base, #t~string136.offset, 1);call write~init~int(73, #t~string136.base, 1 + #t~string136.offset, 1);call write~init~int(76, #t~string136.base, 2 + #t~string136.offset, 1);call write~init~int(95, #t~string136.base, 3 + #t~string136.offset, 1);call write~init~int(112, #t~string136.base, 4 + #t~string136.offset, 1);call write~init~int(58, #t~string136.base, 5 + #t~string136.offset, 1);call write~init~int(0, #t~string136.base, 6 + #t~string136.offset, 1);call #t~string138.base, #t~string138.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string138.base, #t~string138.offset, 1);call write~init~int(37, #t~string138.base, 1 + #t~string138.offset, 1);call write~init~int(105, #t~string138.base, 2 + #t~string138.offset, 1);call write~init~int(0, #t~string138.base, 3 + #t~string138.offset, 1);call #t~string140.base, #t~string140.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string140.base, #t~string140.offset, 1);call write~init~int(37, #t~string140.base, 1 + #t~string140.offset, 1);call write~init~int(105, #t~string140.base, 2 + #t~string140.offset, 1);call write~init~int(0, #t~string140.base, 3 + #t~string140.offset, 1);call #t~string142.base, #t~string142.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string142.base, #t~string142.offset, 1);call write~init~int(37, #t~string142.base, 1 + #t~string142.offset, 1);call write~init~int(105, #t~string142.base, 2 + #t~string142.offset, 1);call write~init~int(0, #t~string142.base, 3 + #t~string142.offset, 1);call #t~string144.base, #t~string144.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string144.base, #t~string144.offset, 1);call write~init~int(37, #t~string144.base, 1 + #t~string144.offset, 1);call write~init~int(105, #t~string144.base, 2 + #t~string144.offset, 1);call write~init~int(0, #t~string144.base, 3 + #t~string144.offset, 1);call #t~string146.base, #t~string146.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string146.base, #t~string146.offset, 1);call write~init~int(37, #t~string146.base, 1 + #t~string146.offset, 1);call write~init~int(105, #t~string146.base, 2 + #t~string146.offset, 1);call write~init~int(0, #t~string146.base, 3 + #t~string146.offset, 1);call #t~string148.base, #t~string148.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string148.base, #t~string148.offset, 1);call write~init~int(70, #t~string148.base, 1 + #t~string148.offset, 1);call write~init~int(95, #t~string148.base, 2 + #t~string148.offset, 1);call write~init~int(112, #t~string148.base, 3 + #t~string148.offset, 1);call write~init~int(58, #t~string148.base, 4 + #t~string148.offset, 1);call write~init~int(0, #t~string148.base, 5 + #t~string148.offset, 1);call #t~string151.base, #t~string151.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string151.base, #t~string151.offset, 1);call write~init~int(37, #t~string151.base, 1 + #t~string151.offset, 1);call write~init~int(105, #t~string151.base, 2 + #t~string151.offset, 1);call write~init~int(0, #t~string151.base, 3 + #t~string151.offset, 1);call #t~string154.base, #t~string154.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string154.base, #t~string154.offset, 1);call write~init~int(37, #t~string154.base, 1 + #t~string154.offset, 1);call write~init~int(105, #t~string154.base, 2 + #t~string154.offset, 1);call write~init~int(0, #t~string154.base, 3 + #t~string154.offset, 1);call #t~string157.base, #t~string157.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string157.base, #t~string157.offset, 1);call write~init~int(37, #t~string157.base, 1 + #t~string157.offset, 1);call write~init~int(105, #t~string157.base, 2 + #t~string157.offset, 1);call write~init~int(0, #t~string157.base, 3 + #t~string157.offset, 1);call #t~string160.base, #t~string160.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string160.base, #t~string160.offset, 1);call write~init~int(37, #t~string160.base, 1 + #t~string160.offset, 1);call write~init~int(105, #t~string160.base, 2 + #t~string160.offset, 1);call write~init~int(0, #t~string160.base, 3 + #t~string160.offset, 1);call #t~string163.base, #t~string163.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string163.base, #t~string163.offset, 1);call write~init~int(37, #t~string163.base, 1 + #t~string163.offset, 1);call write~init~int(105, #t~string163.base, 2 + #t~string163.offset, 1);call write~init~int(0, #t~string163.base, 3 + #t~string163.offset, 1);call #t~string165.base, #t~string165.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string165.base, #t~string165.offset, 1);call write~init~int(0, #t~string165.base, 1 + #t~string165.offset, 1);~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 5446#L-1true havoc main_#res;havoc main_#t~ret20, main_~retValue_acc~1, main_~tmp~8;havoc main_~retValue_acc~1;havoc main_~tmp~8; 2892#L1866true havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 293#L1874true main_#t~ret20 := valid_product_#res;main_~tmp~8 := main_#t~ret20;havoc main_#t~ret20; 2016#L395true assume 0 != main_~tmp~8; 2050#L368true ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 897#L702true havoc bobCall_#t~ret8, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 2090#L454true assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 3377#L479true bobCall_#t~ret8 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret8;havoc bobCall_#t~ret8;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 279#L980true assume 0 == initPersonOnFloor_~floor; 2936#L981true assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 5502#L1088-1true callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 3097#L772true assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 429#L784-2true havoc timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_#t~ret32, __utac_acc__Specification3_spec__1_#t~ret33, __utac_acc__Specification3_spec__1_#t~ret34, __utac_acc__Specification3_spec__1_#t~ret35, __utac_acc__Specification3_spec__1_#t~ret36, __utac_acc__Specification3_spec__1_#t~ret37, __utac_acc__Specification3_spec__1_#t~ret38, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 95#L2102true __utac_acc__Specification3_spec__1_#t~ret27 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 5522#L2154true __utac_acc__Specification3_spec__1_#t~ret28 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret28;havoc __utac_acc__Specification3_spec__1_#t~ret28; 1046#L1315true assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 1213#L1316true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 534#L2119true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 60#L2140true __utac_acc__Specification3_spec__1_#t~ret29 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret29;havoc __utac_acc__Specification3_spec__1_#t~ret29; 5268#L1320true assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 384#L1421true havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret95, stopRequestedAtCurrentFloor_#t~ret96, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 3600#L709true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 2971#L736true stopRequestedAtCurrentFloor_#t~ret95 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret95;havoc stopRequestedAtCurrentFloor_#t~ret95; 964#L2715true assume 0 != stopRequestedAtCurrentFloor_~tmp___0~8;stopRequestedAtCurrentFloor_~retValue_acc~23 := 1;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 1719#L2727true timeShift_#t~ret109 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 2717#L2864true assume !(0 != timeShift_~tmp___9~3); 3938#L2955true assume !(1 == ~doorState~0); 2363#L2955-2true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_#t~ret87, stopRequestedInDirection_#t~ret88, stopRequestedInDirection_#t~ret89, stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 1384#L2306true assume !(1 == stopRequestedInDirection_~dir); 4484#L2475true assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 1742#L2628true timeShift_#t~ret116 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret116;havoc timeShift_#t~ret116; 4552#L2963true assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 115#L2682true assume !(1 == ~currentHeading~0); 1575#L2692true assume !(0 == ~currentFloorID~0); 5448#L2692-2true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1578#L2698-5true havoc __utac_acc__Specification3_spec__2_#t~ret39, __utac_acc__Specification3_spec__2_#t~ret40, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 3215#L1446true assume !(-1 == ~expectedDirection~0); 1514#L1458true assume !(1 == ~expectedDirection~0); 4191#L1459true havoc timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_#t~ret32, __utac_acc__Specification3_spec__1_#t~ret33, __utac_acc__Specification3_spec__1_#t~ret34, __utac_acc__Specification3_spec__1_#t~ret35, __utac_acc__Specification3_spec__1_#t~ret36, __utac_acc__Specification3_spec__1_#t~ret37, __utac_acc__Specification3_spec__1_#t~ret38, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1987#L2102-1true __utac_acc__Specification3_spec__1_#t~ret27 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 3016#L2154-3true __utac_acc__Specification3_spec__1_#t~ret28 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret28;havoc __utac_acc__Specification3_spec__1_#t~ret28; 1517#L1315-1true assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 768#L1377-1true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 3000#L2119-16true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 3155#L2140-16true __utac_acc__Specification3_spec__1_#t~ret34 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret34;havoc __utac_acc__Specification3_spec__1_#t~ret34; 1587#L1381-2true assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 872#L1421-1true havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret95, stopRequestedAtCurrentFloor_#t~ret96, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 4518#L709-21true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 433#L736-21true stopRequestedAtCurrentFloor_#t~ret95 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret95;havoc stopRequestedAtCurrentFloor_#t~ret95; 2607#L2715-1true assume 0 != stopRequestedAtCurrentFloor_~tmp___0~8;stopRequestedAtCurrentFloor_~retValue_acc~23 := 1;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 1424#L2727-1true timeShift_#t~ret109 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 340#L2864-1true assume !(0 != timeShift_~tmp___9~3); 5176#L2955-3true assume !(1 == ~doorState~0); 1576#L2955-5true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_#t~ret87, stopRequestedInDirection_#t~ret88, stopRequestedInDirection_#t~ret89, stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 652#L2306-2true assume !(1 == stopRequestedInDirection_~dir); 729#L2475-2true assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 403#L2628-2true timeShift_#t~ret116 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret116;havoc timeShift_#t~ret116; 1980#L2963-1true assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 3685#L2682-3true assume !(1 == ~currentHeading~0); 2117#L2692-9true assume !(0 == ~currentFloorID~0); 468#L2692-11true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 307#L2698-11true havoc __utac_acc__Specification3_spec__2_#t~ret39, __utac_acc__Specification3_spec__2_#t~ret40, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 3469#L1446-1true assume !(-1 == ~expectedDirection~0); 3728#L1458-1true assume !(1 == ~expectedDirection~0); 4834#L1459-1true havoc timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_#t~ret32, __utac_acc__Specification3_spec__1_#t~ret33, __utac_acc__Specification3_spec__1_#t~ret34, __utac_acc__Specification3_spec__1_#t~ret35, __utac_acc__Specification3_spec__1_#t~ret36, __utac_acc__Specification3_spec__1_#t~ret37, __utac_acc__Specification3_spec__1_#t~ret38, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1769#L2102-2true __utac_acc__Specification3_spec__1_#t~ret27 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 1773#L2154-6true __utac_acc__Specification3_spec__1_#t~ret28 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret28;havoc __utac_acc__Specification3_spec__1_#t~ret28; 165#L1315-2true assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 1916#L1377-2true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 504#L2119-27true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 3800#L2140-27true __utac_acc__Specification3_spec__1_#t~ret34 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret34;havoc __utac_acc__Specification3_spec__1_#t~ret34; 4963#L1381-4true assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 3923#L1421-2true havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret95, stopRequestedAtCurrentFloor_#t~ret96, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 2683#L709-42true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 4647#L736-42true stopRequestedAtCurrentFloor_#t~ret95 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret95;havoc stopRequestedAtCurrentFloor_#t~ret95; 4369#L2715-2true assume 0 != stopRequestedAtCurrentFloor_~tmp___0~8;stopRequestedAtCurrentFloor_~retValue_acc~23 := 1;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 261#L2727-2true timeShift_#t~ret109 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 4923#L2864-2true assume !(0 != timeShift_~tmp___9~3); 2895#L2955-6true assume !(1 == ~doorState~0); 3754#L2955-8true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_#t~ret87, stopRequestedInDirection_#t~ret88, stopRequestedInDirection_#t~ret89, stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 1660#L2306-4true assume !(1 == stopRequestedInDirection_~dir); 317#L2475-4true assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 799#L2628-4true timeShift_#t~ret116 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret116;havoc timeShift_#t~ret116; 5179#L2963-2true assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 452#L2682-6true assume !(1 == ~currentHeading~0); 64#L2692-18true assume !(0 == ~currentFloorID~0); 1317#L2692-20true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1426#L2698-17true havoc __utac_acc__Specification3_spec__2_#t~ret39, __utac_acc__Specification3_spec__2_#t~ret40, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 5488#L1446-2true assume !(-1 == ~expectedDirection~0); 3125#L1458-2true assume !(1 == ~expectedDirection~0); 2224#L1459-2true havoc bobCall_#t~ret8, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 1114#L454-1true assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 1487#L479-1true bobCall_#t~ret8 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret8;havoc bobCall_#t~ret8;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 2660#L980-1true assume 0 == initPersonOnFloor_~floor; 3186#L981-2true assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 1087#L1088-3true callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 3398#L772-2true assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 754#L784-5true havoc cleanup_#t~ret14, cleanup_#t~ret15, cleanup_~i~0, cleanup_~tmp~6, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~0;havoc cleanup_~i~0;havoc cleanup_~tmp~6;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_#t~ret32, __utac_acc__Specification3_spec__1_#t~ret33, __utac_acc__Specification3_spec__1_#t~ret34, __utac_acc__Specification3_spec__1_#t~ret35, __utac_acc__Specification3_spec__1_#t~ret36, __utac_acc__Specification3_spec__1_#t~ret37, __utac_acc__Specification3_spec__1_#t~ret38, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1045#L2102-3true __utac_acc__Specification3_spec__1_#t~ret27 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 1518#L2154-9true __utac_acc__Specification3_spec__1_#t~ret28 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret28;havoc __utac_acc__Specification3_spec__1_#t~ret28; 259#L1315-3true assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 2991#L1316-3true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1447#L2119-33true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 4064#L2140-33true __utac_acc__Specification3_spec__1_#t~ret29 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret29;havoc __utac_acc__Specification3_spec__1_#t~ret29; 4643#L1320-6true assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 687#L1421-3true havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret95, stopRequestedAtCurrentFloor_#t~ret96, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 1702#L709-63true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 4218#L736-63true stopRequestedAtCurrentFloor_#t~ret95 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret95;havoc stopRequestedAtCurrentFloor_#t~ret95; 5090#L2715-3true assume 0 != stopRequestedAtCurrentFloor_~tmp___0~8;stopRequestedAtCurrentFloor_~retValue_acc~23 := 1;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 5359#L2727-3true timeShift_#t~ret109 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 492#L2864-3true assume !(0 != timeShift_~tmp___9~3); 523#L2955-9true assume !(1 == ~doorState~0); 2451#L2955-11true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_#t~ret87, stopRequestedInDirection_#t~ret88, stopRequestedInDirection_#t~ret89, stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 367#L2306-6true assume !(1 == stopRequestedInDirection_~dir); 1972#L2475-6true assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 4003#L2628-6true timeShift_#t~ret116 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret116;havoc timeShift_#t~ret116; 263#L2963-3true assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 1060#L2682-9true assume !(1 == ~currentHeading~0); 2070#L2692-27true assume !(0 == ~currentFloorID~0); 5027#L2692-29true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 5478#L2698-23true havoc __utac_acc__Specification3_spec__2_#t~ret39, __utac_acc__Specification3_spec__2_#t~ret40, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 4467#L1446-3true assume !(-1 == ~expectedDirection~0); 4067#L1458-3true assume !(1 == ~expectedDirection~0); 1199#L1459-3true cleanup_~i~0 := 0; 2671#L198-2true [2021-11-09 09:19:54,278 INFO L793 eck$LassoCheckResult]: Loop: 2671#L198-2true assume !false; 5110#L199true cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 631#L202true assume cleanup_~i~0 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 2600#L1973true cleanup_#t~ret14 := isBlocked_#res;cleanup_~tmp___0~0 := cleanup_#t~ret14;havoc cleanup_#t~ret14; 3496#L206true assume 1 != cleanup_~tmp___0~0; 2336#L206-1true havoc isIdle_#res;havoc isIdle_#t~ret82, isIdle_~retValue_acc~20, isIdle_~tmp~17;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~17;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret77, anyStopRequested_#t~ret78, anyStopRequested_#t~ret79, anyStopRequested_#t~ret80, anyStopRequested_#t~ret81, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~16, anyStopRequested_~tmp___0~6, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~16;havoc anyStopRequested_~tmp___0~6;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~1;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 4336#L709-84true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 2300#L736-84true anyStopRequested_#t~ret77 := isFloorCalling_#res;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret77;havoc anyStopRequested_#t~ret77; 5505#L2210true assume 0 != anyStopRequested_~tmp___3~1;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 3663#L2274true isIdle_#t~ret82 := anyStopRequested_#res;isIdle_~tmp~17 := isIdle_#t~ret82;havoc isIdle_#t~ret82;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~17 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 4961#L2287true cleanup_#t~ret15 := isIdle_#res;cleanup_~tmp~6 := cleanup_#t~ret15;havoc cleanup_#t~ret15; 910#L218true assume !(0 != cleanup_~tmp~6);havoc timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_#t~ret32, __utac_acc__Specification3_spec__1_#t~ret33, __utac_acc__Specification3_spec__1_#t~ret34, __utac_acc__Specification3_spec__1_#t~ret35, __utac_acc__Specification3_spec__1_#t~ret36, __utac_acc__Specification3_spec__1_#t~ret37, __utac_acc__Specification3_spec__1_#t~ret38, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 3449#L2102-4true __utac_acc__Specification3_spec__1_#t~ret27 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 239#L2154-12true __utac_acc__Specification3_spec__1_#t~ret28 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret28;havoc __utac_acc__Specification3_spec__1_#t~ret28; 4736#L1315-4true assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 4764#L1316-4true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 4582#L2119-44true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 591#L2140-44true __utac_acc__Specification3_spec__1_#t~ret29 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret29;havoc __utac_acc__Specification3_spec__1_#t~ret29; 3029#L1320-8true assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 104#L1421-4true havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret95, stopRequestedAtCurrentFloor_#t~ret96, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 4227#L709-89true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 1914#L736-89true stopRequestedAtCurrentFloor_#t~ret95 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret95;havoc stopRequestedAtCurrentFloor_#t~ret95; 408#L2715-4true assume 0 != stopRequestedAtCurrentFloor_~tmp___0~8;stopRequestedAtCurrentFloor_~retValue_acc~23 := 1;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 2305#L2727-4true timeShift_#t~ret109 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 645#L2864-4true assume !(0 != timeShift_~tmp___9~3); 3916#L2955-12true assume 1 == ~doorState~0;~doorState~0 := 0; 3905#L2955-14true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_#t~ret87, stopRequestedInDirection_#t~ret88, stopRequestedInDirection_#t~ret89, stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 3689#L2306-8true assume !(1 == stopRequestedInDirection_~dir); 610#L2475-8true assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 563#L2628-8true timeShift_#t~ret116 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret116;havoc timeShift_#t~ret116; 1230#L2963-4true assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 5350#L2682-12true assume !(1 == ~currentHeading~0); 3019#L2692-36true assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 3634#L2692-38true assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 4318#L2698-29true havoc __utac_acc__Specification3_spec__2_#t~ret39, __utac_acc__Specification3_spec__2_#t~ret40, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 2796#L1446-4true assume !(-1 == ~expectedDirection~0); 643#L1458-4true assume !(1 == ~expectedDirection~0); 3788#L1459-4true cleanup_~i~0 := 1 + cleanup_~i~0; 2671#L198-2true [2021-11-09 09:19:54,284 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-09 09:19:54,288 INFO L85 PathProgramCache]: Analyzing trace with hash -1459300459, now seen corresponding path program 1 times [2021-11-09 09:19:54,299 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-09 09:19:54,300 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [149095293] [2021-11-09 09:19:54,300 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-09 09:19:54,301 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-09 09:19:54,578 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-09 09:19:54,786 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-09 09:19:54,787 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-09 09:19:54,787 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [149095293] [2021-11-09 09:19:54,789 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [149095293] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-09 09:19:54,789 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-09 09:19:54,789 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-11-09 09:19:54,792 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [343433229] [2021-11-09 09:19:54,810 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-11-09 09:19:54,813 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-09 09:19:54,814 INFO L85 PathProgramCache]: Analyzing trace with hash -872606770, now seen corresponding path program 1 times [2021-11-09 09:19:54,814 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-09 09:19:54,814 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2040712882] [2021-11-09 09:19:54,815 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-09 09:19:54,815 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-09 09:19:54,853 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-09 09:19:54,967 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-09 09:19:54,968 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-09 09:19:54,969 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2040712882] [2021-11-09 09:19:54,969 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2040712882] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-09 09:19:54,970 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-09 09:19:54,970 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2021-11-09 09:19:54,970 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1970568222] [2021-11-09 09:19:54,972 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-11-09 09:19:54,973 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-09 09:19:54,987 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2021-11-09 09:19:54,988 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=14, Invalid=42, Unknown=0, NotChecked=0, Total=56 [2021-11-09 09:19:55,006 INFO L87 Difference]: Start difference. First operand has 5583 states, 5582 states have (on average 1.904335363668936) internal successors, (10630), 5582 states have internal predecessors, (10630), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 8 states, 8 states have (on average 4.75) internal successors, (38), 8 states have internal predecessors, (38), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-09 09:20:03,425 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-09 09:20:03,425 INFO L93 Difference]: Finished difference Result 14349 states and 26946 transitions. [2021-11-09 09:20:03,426 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 30 states. [2021-11-09 09:20:03,427 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 14349 states and 26946 transitions. [2021-11-09 09:20:03,636 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 3305 [2021-11-09 09:20:03,780 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 14349 states to 14259 states and 26840 transitions. [2021-11-09 09:20:03,781 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 14259 [2021-11-09 09:20:03,803 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 14259 [2021-11-09 09:20:03,803 INFO L73 IsDeterministic]: Start isDeterministic. Operand 14259 states and 26840 transitions. [2021-11-09 09:20:03,848 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-11-09 09:20:03,849 INFO L681 BuchiCegarLoop]: Abstraction has 14259 states and 26840 transitions. [2021-11-09 09:20:03,882 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 14259 states and 26840 transitions. [2021-11-09 09:20:04,157 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 14259 to 9383. [2021-11-09 09:20:04,187 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9383 states, 9383 states have (on average 1.8876691889587551) internal successors, (17712), 9382 states have internal predecessors, (17712), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-09 09:20:04,231 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9383 states to 9383 states and 17712 transitions. [2021-11-09 09:20:04,232 INFO L704 BuchiCegarLoop]: Abstraction has 9383 states and 17712 transitions. [2021-11-09 09:20:04,233 INFO L587 BuchiCegarLoop]: Abstraction has 9383 states and 17712 transitions. [2021-11-09 09:20:04,233 INFO L425 BuchiCegarLoop]: ======== Iteration 2============ [2021-11-09 09:20:04,233 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 9383 states and 17712 transitions. [2021-11-09 09:20:04,272 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 2108 [2021-11-09 09:20:04,272 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-11-09 09:20:04,272 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-11-09 09:20:04,284 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-09 09:20:04,284 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-09 09:20:04,286 INFO L791 eck$LassoCheckResult]: Stem: 24968#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(2);call write~init~int(48, #t~string4.base, #t~string4.offset, 1);call write~init~int(0, #t~string4.base, 1 + #t~string4.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(31);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(12);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(30);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(9);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(21);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(30);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(9);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(21);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(30);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(9);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(25);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(30);call #t~string72.base, #t~string72.offset := #Ultimate.allocOnStack(9);call #t~string73.base, #t~string73.offset := #Ultimate.allocOnStack(25);call #t~string120.base, #t~string120.offset := #Ultimate.allocOnStack(10);call #t~string122.base, #t~string122.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string122.base, #t~string122.offset, 1);call write~init~int(95, #t~string122.base, 1 + #t~string122.offset, 1);call write~init~int(93, #t~string122.base, 2 + #t~string122.offset, 1);call write~init~int(0, #t~string122.base, 3 + #t~string122.offset, 1);call #t~string124.base, #t~string124.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string124.base, #t~string124.offset, 1);call write~init~int(93, #t~string124.base, 1 + #t~string124.offset, 1);call write~init~int(32, #t~string124.base, 2 + #t~string124.offset, 1);call write~init~int(0, #t~string124.base, 3 + #t~string124.offset, 1);call #t~string126.base, #t~string126.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string126.base, #t~string126.offset, 1);call write~init~int(97, #t~string126.base, 1 + #t~string126.offset, 1);call write~init~int(116, #t~string126.base, 2 + #t~string126.offset, 1);call write~init~int(32, #t~string126.base, 3 + #t~string126.offset, 1);call write~init~int(0, #t~string126.base, 4 + #t~string126.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string128.base, #t~string128.offset, 1);call write~init~int(105, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 2 + #t~string128.offset, 1);call #t~string130.base, #t~string130.offset := #Ultimate.allocOnStack(10);call #t~string132.base, #t~string132.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string132.base, #t~string132.offset, 1);call write~init~int(112, #t~string132.base, 1 + #t~string132.offset, 1);call write~init~int(0, #t~string132.base, 2 + #t~string132.offset, 1);call #t~string134.base, #t~string134.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string134.base, #t~string134.offset, 1);call write~init~int(111, #t~string134.base, 1 + #t~string134.offset, 1);call write~init~int(119, #t~string134.base, 2 + #t~string134.offset, 1);call write~init~int(110, #t~string134.base, 3 + #t~string134.offset, 1);call write~init~int(0, #t~string134.base, 4 + #t~string134.offset, 1);call #t~string136.base, #t~string136.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string136.base, #t~string136.offset, 1);call write~init~int(73, #t~string136.base, 1 + #t~string136.offset, 1);call write~init~int(76, #t~string136.base, 2 + #t~string136.offset, 1);call write~init~int(95, #t~string136.base, 3 + #t~string136.offset, 1);call write~init~int(112, #t~string136.base, 4 + #t~string136.offset, 1);call write~init~int(58, #t~string136.base, 5 + #t~string136.offset, 1);call write~init~int(0, #t~string136.base, 6 + #t~string136.offset, 1);call #t~string138.base, #t~string138.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string138.base, #t~string138.offset, 1);call write~init~int(37, #t~string138.base, 1 + #t~string138.offset, 1);call write~init~int(105, #t~string138.base, 2 + #t~string138.offset, 1);call write~init~int(0, #t~string138.base, 3 + #t~string138.offset, 1);call #t~string140.base, #t~string140.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string140.base, #t~string140.offset, 1);call write~init~int(37, #t~string140.base, 1 + #t~string140.offset, 1);call write~init~int(105, #t~string140.base, 2 + #t~string140.offset, 1);call write~init~int(0, #t~string140.base, 3 + #t~string140.offset, 1);call #t~string142.base, #t~string142.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string142.base, #t~string142.offset, 1);call write~init~int(37, #t~string142.base, 1 + #t~string142.offset, 1);call write~init~int(105, #t~string142.base, 2 + #t~string142.offset, 1);call write~init~int(0, #t~string142.base, 3 + #t~string142.offset, 1);call #t~string144.base, #t~string144.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string144.base, #t~string144.offset, 1);call write~init~int(37, #t~string144.base, 1 + #t~string144.offset, 1);call write~init~int(105, #t~string144.base, 2 + #t~string144.offset, 1);call write~init~int(0, #t~string144.base, 3 + #t~string144.offset, 1);call #t~string146.base, #t~string146.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string146.base, #t~string146.offset, 1);call write~init~int(37, #t~string146.base, 1 + #t~string146.offset, 1);call write~init~int(105, #t~string146.base, 2 + #t~string146.offset, 1);call write~init~int(0, #t~string146.base, 3 + #t~string146.offset, 1);call #t~string148.base, #t~string148.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string148.base, #t~string148.offset, 1);call write~init~int(70, #t~string148.base, 1 + #t~string148.offset, 1);call write~init~int(95, #t~string148.base, 2 + #t~string148.offset, 1);call write~init~int(112, #t~string148.base, 3 + #t~string148.offset, 1);call write~init~int(58, #t~string148.base, 4 + #t~string148.offset, 1);call write~init~int(0, #t~string148.base, 5 + #t~string148.offset, 1);call #t~string151.base, #t~string151.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string151.base, #t~string151.offset, 1);call write~init~int(37, #t~string151.base, 1 + #t~string151.offset, 1);call write~init~int(105, #t~string151.base, 2 + #t~string151.offset, 1);call write~init~int(0, #t~string151.base, 3 + #t~string151.offset, 1);call #t~string154.base, #t~string154.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string154.base, #t~string154.offset, 1);call write~init~int(37, #t~string154.base, 1 + #t~string154.offset, 1);call write~init~int(105, #t~string154.base, 2 + #t~string154.offset, 1);call write~init~int(0, #t~string154.base, 3 + #t~string154.offset, 1);call #t~string157.base, #t~string157.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string157.base, #t~string157.offset, 1);call write~init~int(37, #t~string157.base, 1 + #t~string157.offset, 1);call write~init~int(105, #t~string157.base, 2 + #t~string157.offset, 1);call write~init~int(0, #t~string157.base, 3 + #t~string157.offset, 1);call #t~string160.base, #t~string160.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string160.base, #t~string160.offset, 1);call write~init~int(37, #t~string160.base, 1 + #t~string160.offset, 1);call write~init~int(105, #t~string160.base, 2 + #t~string160.offset, 1);call write~init~int(0, #t~string160.base, 3 + #t~string160.offset, 1);call #t~string163.base, #t~string163.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string163.base, #t~string163.offset, 1);call write~init~int(37, #t~string163.base, 1 + #t~string163.offset, 1);call write~init~int(105, #t~string163.base, 2 + #t~string163.offset, 1);call write~init~int(0, #t~string163.base, 3 + #t~string163.offset, 1);call #t~string165.base, #t~string165.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string165.base, #t~string165.offset, 1);call write~init~int(0, #t~string165.base, 1 + #t~string165.offset, 1);~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 24969#L-1 havoc main_#res;havoc main_#t~ret20, main_~retValue_acc~1, main_~tmp~8;havoc main_~retValue_acc~1;havoc main_~tmp~8; 24538#L1866 havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 20727#L1874 main_#t~ret20 := valid_product_#res;main_~tmp~8 := main_#t~ret20;havoc main_#t~ret20; 20728#L395 assume 0 != main_~tmp~8; 23622#L368 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 21914#L702 havoc bobCall_#t~ret8, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 21915#L454 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 22393#L479 bobCall_#t~ret8 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret8;havoc bobCall_#t~ret8;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 20696#L980 assume 0 == initPersonOnFloor_~floor; 20697#L981 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 20047#L1088-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 24706#L772 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 21015#L784-2 havoc timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_#t~ret32, __utac_acc__Specification3_spec__1_#t~ret33, __utac_acc__Specification3_spec__1_#t~ret34, __utac_acc__Specification3_spec__1_#t~ret35, __utac_acc__Specification3_spec__1_#t~ret36, __utac_acc__Specification3_spec__1_#t~ret37, __utac_acc__Specification3_spec__1_#t~ret38, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 20254#L2102 __utac_acc__Specification3_spec__1_#t~ret27 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 20255#L2154 __utac_acc__Specification3_spec__1_#t~ret28 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret28;havoc __utac_acc__Specification3_spec__1_#t~ret28; 22171#L1315 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 22172#L1316 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 21239#L2119 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 20163#L2140 __utac_acc__Specification3_spec__1_#t~ret29 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret29;havoc __utac_acc__Specification3_spec__1_#t~ret29; 20164#L1320 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 20903#L1421 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret95, stopRequestedAtCurrentFloor_#t~ret96, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 20924#L709 assume !(0 == isFloorCalling_~floorID); 22669#L713 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 20240#L736 stopRequestedAtCurrentFloor_#t~ret95 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret95;havoc stopRequestedAtCurrentFloor_#t~ret95; 22026#L2715 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~8;stopRequestedAtCurrentFloor_~retValue_acc~23 := 1;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 22027#L2727 timeShift_#t~ret109 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 23216#L2864 assume !(0 != timeShift_~tmp___9~3); 24369#L2955 assume !(1 == ~doorState~0); 24016#L2955-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_#t~ret87, stopRequestedInDirection_#t~ret88, stopRequestedInDirection_#t~ret89, stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 22710#L2306 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~7;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~7;isTopFloor_~retValue_acc~7 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~7; 22712#L1283 stopRequestedInDirection_#t~ret83 := isTopFloor_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret83;havoc stopRequestedInDirection_#t~ret83; 25577#L2310 assume 0 != stopRequestedInDirection_~tmp~18;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 20065#L2628 timeShift_#t~ret116 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret116;havoc timeShift_#t~ret116; 23250#L2963 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 20303#L2682 assume !(1 == ~currentHeading~0); 20304#L2692 assume !(0 == ~currentFloorID~0); 23006#L2692-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 23009#L2698-5 havoc __utac_acc__Specification3_spec__2_#t~ret39, __utac_acc__Specification3_spec__2_#t~ret40, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 23010#L1446 assume !(-1 == ~expectedDirection~0); 21327#L1458 assume !(1 == ~expectedDirection~0); 22901#L1459 havoc timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_#t~ret32, __utac_acc__Specification3_spec__1_#t~ret33, __utac_acc__Specification3_spec__1_#t~ret34, __utac_acc__Specification3_spec__1_#t~ret35, __utac_acc__Specification3_spec__1_#t~ret36, __utac_acc__Specification3_spec__1_#t~ret37, __utac_acc__Specification3_spec__1_#t~ret38, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 23587#L2102-1 __utac_acc__Specification3_spec__1_#t~ret27 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 23588#L2154-3 __utac_acc__Specification3_spec__1_#t~ret28 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret28;havoc __utac_acc__Specification3_spec__1_#t~ret28; 22908#L1315-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 21684#L1377-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 21685#L2119-16 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 21530#L2140-16 __utac_acc__Specification3_spec__1_#t~ret34 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret34;havoc __utac_acc__Specification3_spec__1_#t~ret34; 23025#L1381-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 21783#L1421-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret95, stopRequestedAtCurrentFloor_#t~ret96, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 21872#L709-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 20628#L736-21 stopRequestedAtCurrentFloor_#t~ret95 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret95;havoc stopRequestedAtCurrentFloor_#t~ret95; 21021#L2715-1 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~8;stopRequestedAtCurrentFloor_~retValue_acc~23 := 1;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 22767#L2727-1 timeShift_#t~ret109 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 20830#L2864-1 assume !(0 != timeShift_~tmp___9~3); 20831#L2955-3 assume !(1 == ~doorState~0); 23007#L2955-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_#t~ret87, stopRequestedInDirection_#t~ret88, stopRequestedInDirection_#t~ret89, stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 21472#L2306-2 assume !(1 == stopRequestedInDirection_~dir); 21473#L2475-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 27637#L2628-2 timeShift_#t~ret116 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret116;havoc timeShift_#t~ret116; 27635#L2963-1 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 27636#L2682-3 assume !(1 == ~currentHeading~0); 29390#L2692-9 assume !(0 == ~currentFloorID~0); 21101#L2692-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 20493#L2698-11 havoc __utac_acc__Specification3_spec__2_#t~ret39, __utac_acc__Specification3_spec__2_#t~ret40, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 20761#L1446-1 assume !(-1 == ~expectedDirection~0); 24988#L1458-1 assume !(1 == ~expectedDirection~0); 23950#L1459-1 havoc timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_#t~ret32, __utac_acc__Specification3_spec__1_#t~ret33, __utac_acc__Specification3_spec__1_#t~ret34, __utac_acc__Specification3_spec__1_#t~ret35, __utac_acc__Specification3_spec__1_#t~ret36, __utac_acc__Specification3_spec__1_#t~ret37, __utac_acc__Specification3_spec__1_#t~ret38, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 23284#L2102-2 __utac_acc__Specification3_spec__1_#t~ret27 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 23285#L2154-6 __utac_acc__Specification3_spec__1_#t~ret28 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret28;havoc __utac_acc__Specification3_spec__1_#t~ret28; 20426#L1315-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 20427#L1377-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 21178#L2119-27 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 21090#L2140-27 __utac_acc__Specification3_spec__1_#t~ret34 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret34;havoc __utac_acc__Specification3_spec__1_#t~ret34; 25211#L1381-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 21025#L1421-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret95, stopRequestedAtCurrentFloor_#t~ret96, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 24336#L709-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 20347#L736-42 stopRequestedAtCurrentFloor_#t~ret95 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret95;havoc stopRequestedAtCurrentFloor_#t~ret95; 25482#L2715-2 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~8;stopRequestedAtCurrentFloor_~retValue_acc~23 := 1;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 20653#L2727-2 timeShift_#t~ret109 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 20654#L2864-2 assume !(0 != timeShift_~tmp___9~3); 24540#L2955-6 assume !(1 == ~doorState~0); 24541#L2955-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_#t~ret87, stopRequestedInDirection_#t~ret88, stopRequestedInDirection_#t~ret89, stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 23131#L2306-4 assume !(1 == stopRequestedInDirection_~dir); 23132#L2475-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 27804#L2628-4 timeShift_#t~ret116 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret116;havoc timeShift_#t~ret116; 27802#L2963-2 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 27803#L2682-6 assume !(1 == ~currentHeading~0); 29387#L2692-18 assume !(0 == ~currentFloorID~0); 20174#L2692-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 20854#L2698-17 havoc __utac_acc__Specification3_spec__2_#t~ret39, __utac_acc__Specification3_spec__2_#t~ret40, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 22770#L1446-2 assume !(-1 == ~expectedDirection~0); 24733#L1458-2 assume !(1 == ~expectedDirection~0); 23219#L1459-2 havoc bobCall_#t~ret8, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 22282#L454-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 22283#L479-1 bobCall_#t~ret8 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret8;havoc bobCall_#t~ret8;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 22862#L980-1 assume 0 == initPersonOnFloor_~floor; 24316#L981-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 20681#L1088-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 22236#L772-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 20310#L784-5 havoc cleanup_#t~ret14, cleanup_#t~ret15, cleanup_~i~0, cleanup_~tmp~6, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~0;havoc cleanup_~i~0;havoc cleanup_~tmp~6;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_#t~ret32, __utac_acc__Specification3_spec__1_#t~ret33, __utac_acc__Specification3_spec__1_#t~ret34, __utac_acc__Specification3_spec__1_#t~ret35, __utac_acc__Specification3_spec__1_#t~ret36, __utac_acc__Specification3_spec__1_#t~ret37, __utac_acc__Specification3_spec__1_#t~ret38, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 21657#L2102-3 __utac_acc__Specification3_spec__1_#t~ret27 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 22170#L2154-9 __utac_acc__Specification3_spec__1_#t~ret28 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret28;havoc __utac_acc__Specification3_spec__1_#t~ret28; 20649#L1315-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 20094#L1377-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 20095#L2119-38 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 23081#L2140-38 __utac_acc__Specification3_spec__1_#t~ret34 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret34;havoc __utac_acc__Specification3_spec__1_#t~ret34; 23713#L1381-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 20617#L1421-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret95, stopRequestedAtCurrentFloor_#t~ret96, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 21538#L709-63 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 20953#L736-63 stopRequestedAtCurrentFloor_#t~ret95 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret95;havoc stopRequestedAtCurrentFloor_#t~ret95; 25418#L2715-3 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~8;stopRequestedAtCurrentFloor_~retValue_acc~23 := 1;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 25293#L2727-3 timeShift_#t~ret109 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 21150#L2864-3 assume !(0 != timeShift_~tmp___9~3); 21152#L2955-9 assume !(1 == ~doorState~0); 21215#L2955-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_#t~ret87, stopRequestedInDirection_#t~ret88, stopRequestedInDirection_#t~ret89, stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 20883#L2306-6 assume !(1 == stopRequestedInDirection_~dir); 20884#L2475-6 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 21653#L2628-6 timeShift_#t~ret116 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret116;havoc timeShift_#t~ret116; 20658#L2963-3 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 20659#L2682-9 assume !(1 == ~currentHeading~0); 22195#L2692-27 assume !(0 == ~currentFloorID~0); 23689#L2692-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 22480#L2698-23 havoc __utac_acc__Specification3_spec__2_#t~ret39, __utac_acc__Specification3_spec__2_#t~ret40, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 25526#L1446-3 assume !(-1 == ~expectedDirection~0); 24195#L1458-3 assume !(1 == ~expectedDirection~0); 20901#L1459-3 cleanup_~i~0 := 0; 22413#L198-2 [2021-11-09 09:20:04,287 INFO L793 eck$LassoCheckResult]: Loop: 22413#L198-2 assume !false; 24327#L199 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 21432#L202 assume cleanup_~i~0 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 21433#L1973 cleanup_#t~ret14 := isBlocked_#res;cleanup_~tmp___0~0 := cleanup_#t~ret14;havoc cleanup_#t~ret14; 24249#L206 assume 1 != cleanup_~tmp___0~0; 23984#L206-1 havoc isIdle_#res;havoc isIdle_#t~ret82, isIdle_~retValue_acc~20, isIdle_~tmp~17;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~17;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret77, anyStopRequested_#t~ret78, anyStopRequested_#t~ret79, anyStopRequested_#t~ret80, anyStopRequested_#t~ret81, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~16, anyStopRequested_~tmp___0~6, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~16;havoc anyStopRequested_~tmp___0~6;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~1;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 23985#L709-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 20072#L736-84 anyStopRequested_#t~ret77 := isFloorCalling_#res;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret77;havoc anyStopRequested_#t~ret77; 23945#L2210 assume 0 != anyStopRequested_~tmp___3~1;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 22525#L2274 isIdle_#t~ret82 := anyStopRequested_#res;isIdle_~tmp~17 := isIdle_#t~ret82;havoc isIdle_#t~ret82;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~17 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 25128#L2287 cleanup_#t~ret15 := isIdle_#res;cleanup_~tmp~6 := cleanup_#t~ret15;havoc cleanup_#t~ret15; 21939#L218 assume !(0 != cleanup_~tmp~6);havoc timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_#t~ret32, __utac_acc__Specification3_spec__1_#t~ret33, __utac_acc__Specification3_spec__1_#t~ret34, __utac_acc__Specification3_spec__1_#t~ret35, __utac_acc__Specification3_spec__1_#t~ret36, __utac_acc__Specification3_spec__1_#t~ret37, __utac_acc__Specification3_spec__1_#t~ret38, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 21940#L2102-4 __utac_acc__Specification3_spec__1_#t~ret27 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 20604#L2154-12 __utac_acc__Specification3_spec__1_#t~ret28 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret28;havoc __utac_acc__Specification3_spec__1_#t~ret28; 20605#L1315-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 25632#L1377-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 24346#L2119-49 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 20184#L2140-49 __utac_acc__Specification3_spec__1_#t~ret34 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret34;havoc __utac_acc__Specification3_spec__1_#t~ret34; 22542#L1381-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 20076#L1421-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret95, stopRequestedAtCurrentFloor_#t~ret96, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 20276#L709-89 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 21688#L736-89 stopRequestedAtCurrentFloor_#t~ret95 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret95;havoc stopRequestedAtCurrentFloor_#t~ret95; 20971#L2715-4 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~8;stopRequestedAtCurrentFloor_~retValue_acc~23 := 1;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 20402#L2727-4 timeShift_#t~ret109 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 21456#L2864-4 assume !(0 != timeShift_~tmp___9~3); 21457#L2955-12 assume 1 == ~doorState~0;~doorState~0 := 0; 25265#L2955-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_#t~ret87, stopRequestedInDirection_#t~ret88, stopRequestedInDirection_#t~ret89, stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 25148#L2306-8 assume !(1 == stopRequestedInDirection_~dir); 25149#L2475-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 27842#L2628-8 timeShift_#t~ret116 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret116;havoc timeShift_#t~ret116; 27841#L2963-4 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 25762#L2682-12 assume !(1 == ~currentHeading~0); 25763#L2692-36 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 22562#L2692-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 21192#L2698-29 havoc __utac_acc__Specification3_spec__2_#t~ret39, __utac_acc__Specification3_spec__2_#t~ret40, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 24447#L1446-4 assume !(-1 == ~expectedDirection~0); 20868#L1458-4 assume !(1 == ~expectedDirection~0); 21453#L1459-4 cleanup_~i~0 := 1 + cleanup_~i~0; 22413#L198-2 [2021-11-09 09:20:04,288 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-09 09:20:04,288 INFO L85 PathProgramCache]: Analyzing trace with hash -447483024, now seen corresponding path program 1 times [2021-11-09 09:20:04,289 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-09 09:20:04,289 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [769568180] [2021-11-09 09:20:04,290 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-09 09:20:04,290 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-09 09:20:04,367 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-09 09:20:04,468 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-09 09:20:04,469 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-09 09:20:04,469 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [769568180] [2021-11-09 09:20:04,469 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [769568180] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-09 09:20:04,470 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-09 09:20:04,470 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-11-09 09:20:04,470 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1351649078] [2021-11-09 09:20:04,471 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-11-09 09:20:04,471 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-09 09:20:04,471 INFO L85 PathProgramCache]: Analyzing trace with hash 1199731753, now seen corresponding path program 1 times [2021-11-09 09:20:04,471 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-09 09:20:04,472 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [175883920] [2021-11-09 09:20:04,472 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-09 09:20:04,472 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-09 09:20:04,481 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-09 09:20:04,518 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-09 09:20:04,519 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-09 09:20:04,519 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [175883920] [2021-11-09 09:20:04,519 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [175883920] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-09 09:20:04,520 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-09 09:20:04,520 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-11-09 09:20:04,520 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1995214465] [2021-11-09 09:20:04,521 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-11-09 09:20:04,521 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-09 09:20:04,521 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-11-09 09:20:04,522 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2021-11-09 09:20:04,522 INFO L87 Difference]: Start difference. First operand 9383 states and 17712 transitions. cyclomatic complexity: 8330 Second operand has 6 states, 6 states have (on average 6.333333333333333) internal successors, (38), 6 states have internal predecessors, (38), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-09 09:20:08,997 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-09 09:20:08,997 INFO L93 Difference]: Finished difference Result 21691 states and 40928 transitions. [2021-11-09 09:20:09,002 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2021-11-09 09:20:09,002 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 21691 states and 40928 transitions. [2021-11-09 09:20:09,247 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 5297 [2021-11-09 09:20:09,383 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 21691 states to 21691 states and 40928 transitions. [2021-11-09 09:20:09,383 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 21691 [2021-11-09 09:20:09,412 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 21691 [2021-11-09 09:20:09,412 INFO L73 IsDeterministic]: Start isDeterministic. Operand 21691 states and 40928 transitions. [2021-11-09 09:20:09,439 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-11-09 09:20:09,439 INFO L681 BuchiCegarLoop]: Abstraction has 21691 states and 40928 transitions. [2021-11-09 09:20:09,462 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 21691 states and 40928 transitions. [2021-11-09 09:20:09,676 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 21691 to 9243. [2021-11-09 09:20:09,691 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9243 states, 9243 states have (on average 1.888131559017635) internal successors, (17452), 9242 states have internal predecessors, (17452), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-09 09:20:09,715 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9243 states to 9243 states and 17452 transitions. [2021-11-09 09:20:09,716 INFO L704 BuchiCegarLoop]: Abstraction has 9243 states and 17452 transitions. [2021-11-09 09:20:09,716 INFO L587 BuchiCegarLoop]: Abstraction has 9243 states and 17452 transitions. [2021-11-09 09:20:09,717 INFO L425 BuchiCegarLoop]: ======== Iteration 3============ [2021-11-09 09:20:09,717 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 9243 states and 17452 transitions. [2021-11-09 09:20:09,759 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 2073 [2021-11-09 09:20:09,759 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-11-09 09:20:09,759 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-11-09 09:20:09,766 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-09 09:20:09,767 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-09 09:20:09,767 INFO L791 eck$LassoCheckResult]: Stem: 55984#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(2);call write~init~int(48, #t~string4.base, #t~string4.offset, 1);call write~init~int(0, #t~string4.base, 1 + #t~string4.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(31);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(12);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(30);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(9);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(21);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(30);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(9);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(21);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(30);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(9);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(25);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(30);call #t~string72.base, #t~string72.offset := #Ultimate.allocOnStack(9);call #t~string73.base, #t~string73.offset := #Ultimate.allocOnStack(25);call #t~string120.base, #t~string120.offset := #Ultimate.allocOnStack(10);call #t~string122.base, #t~string122.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string122.base, #t~string122.offset, 1);call write~init~int(95, #t~string122.base, 1 + #t~string122.offset, 1);call write~init~int(93, #t~string122.base, 2 + #t~string122.offset, 1);call write~init~int(0, #t~string122.base, 3 + #t~string122.offset, 1);call #t~string124.base, #t~string124.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string124.base, #t~string124.offset, 1);call write~init~int(93, #t~string124.base, 1 + #t~string124.offset, 1);call write~init~int(32, #t~string124.base, 2 + #t~string124.offset, 1);call write~init~int(0, #t~string124.base, 3 + #t~string124.offset, 1);call #t~string126.base, #t~string126.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string126.base, #t~string126.offset, 1);call write~init~int(97, #t~string126.base, 1 + #t~string126.offset, 1);call write~init~int(116, #t~string126.base, 2 + #t~string126.offset, 1);call write~init~int(32, #t~string126.base, 3 + #t~string126.offset, 1);call write~init~int(0, #t~string126.base, 4 + #t~string126.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string128.base, #t~string128.offset, 1);call write~init~int(105, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 2 + #t~string128.offset, 1);call #t~string130.base, #t~string130.offset := #Ultimate.allocOnStack(10);call #t~string132.base, #t~string132.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string132.base, #t~string132.offset, 1);call write~init~int(112, #t~string132.base, 1 + #t~string132.offset, 1);call write~init~int(0, #t~string132.base, 2 + #t~string132.offset, 1);call #t~string134.base, #t~string134.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string134.base, #t~string134.offset, 1);call write~init~int(111, #t~string134.base, 1 + #t~string134.offset, 1);call write~init~int(119, #t~string134.base, 2 + #t~string134.offset, 1);call write~init~int(110, #t~string134.base, 3 + #t~string134.offset, 1);call write~init~int(0, #t~string134.base, 4 + #t~string134.offset, 1);call #t~string136.base, #t~string136.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string136.base, #t~string136.offset, 1);call write~init~int(73, #t~string136.base, 1 + #t~string136.offset, 1);call write~init~int(76, #t~string136.base, 2 + #t~string136.offset, 1);call write~init~int(95, #t~string136.base, 3 + #t~string136.offset, 1);call write~init~int(112, #t~string136.base, 4 + #t~string136.offset, 1);call write~init~int(58, #t~string136.base, 5 + #t~string136.offset, 1);call write~init~int(0, #t~string136.base, 6 + #t~string136.offset, 1);call #t~string138.base, #t~string138.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string138.base, #t~string138.offset, 1);call write~init~int(37, #t~string138.base, 1 + #t~string138.offset, 1);call write~init~int(105, #t~string138.base, 2 + #t~string138.offset, 1);call write~init~int(0, #t~string138.base, 3 + #t~string138.offset, 1);call #t~string140.base, #t~string140.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string140.base, #t~string140.offset, 1);call write~init~int(37, #t~string140.base, 1 + #t~string140.offset, 1);call write~init~int(105, #t~string140.base, 2 + #t~string140.offset, 1);call write~init~int(0, #t~string140.base, 3 + #t~string140.offset, 1);call #t~string142.base, #t~string142.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string142.base, #t~string142.offset, 1);call write~init~int(37, #t~string142.base, 1 + #t~string142.offset, 1);call write~init~int(105, #t~string142.base, 2 + #t~string142.offset, 1);call write~init~int(0, #t~string142.base, 3 + #t~string142.offset, 1);call #t~string144.base, #t~string144.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string144.base, #t~string144.offset, 1);call write~init~int(37, #t~string144.base, 1 + #t~string144.offset, 1);call write~init~int(105, #t~string144.base, 2 + #t~string144.offset, 1);call write~init~int(0, #t~string144.base, 3 + #t~string144.offset, 1);call #t~string146.base, #t~string146.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string146.base, #t~string146.offset, 1);call write~init~int(37, #t~string146.base, 1 + #t~string146.offset, 1);call write~init~int(105, #t~string146.base, 2 + #t~string146.offset, 1);call write~init~int(0, #t~string146.base, 3 + #t~string146.offset, 1);call #t~string148.base, #t~string148.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string148.base, #t~string148.offset, 1);call write~init~int(70, #t~string148.base, 1 + #t~string148.offset, 1);call write~init~int(95, #t~string148.base, 2 + #t~string148.offset, 1);call write~init~int(112, #t~string148.base, 3 + #t~string148.offset, 1);call write~init~int(58, #t~string148.base, 4 + #t~string148.offset, 1);call write~init~int(0, #t~string148.base, 5 + #t~string148.offset, 1);call #t~string151.base, #t~string151.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string151.base, #t~string151.offset, 1);call write~init~int(37, #t~string151.base, 1 + #t~string151.offset, 1);call write~init~int(105, #t~string151.base, 2 + #t~string151.offset, 1);call write~init~int(0, #t~string151.base, 3 + #t~string151.offset, 1);call #t~string154.base, #t~string154.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string154.base, #t~string154.offset, 1);call write~init~int(37, #t~string154.base, 1 + #t~string154.offset, 1);call write~init~int(105, #t~string154.base, 2 + #t~string154.offset, 1);call write~init~int(0, #t~string154.base, 3 + #t~string154.offset, 1);call #t~string157.base, #t~string157.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string157.base, #t~string157.offset, 1);call write~init~int(37, #t~string157.base, 1 + #t~string157.offset, 1);call write~init~int(105, #t~string157.base, 2 + #t~string157.offset, 1);call write~init~int(0, #t~string157.base, 3 + #t~string157.offset, 1);call #t~string160.base, #t~string160.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string160.base, #t~string160.offset, 1);call write~init~int(37, #t~string160.base, 1 + #t~string160.offset, 1);call write~init~int(105, #t~string160.base, 2 + #t~string160.offset, 1);call write~init~int(0, #t~string160.base, 3 + #t~string160.offset, 1);call #t~string163.base, #t~string163.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string163.base, #t~string163.offset, 1);call write~init~int(37, #t~string163.base, 1 + #t~string163.offset, 1);call write~init~int(105, #t~string163.base, 2 + #t~string163.offset, 1);call write~init~int(0, #t~string163.base, 3 + #t~string163.offset, 1);call #t~string165.base, #t~string165.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string165.base, #t~string165.offset, 1);call write~init~int(0, #t~string165.base, 1 + #t~string165.offset, 1);~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 55985#L-1 havoc main_#res;havoc main_#t~ret20, main_~retValue_acc~1, main_~tmp~8;havoc main_~retValue_acc~1;havoc main_~tmp~8; 55577#L1866 havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 51824#L1874 main_#t~ret20 := valid_product_#res;main_~tmp~8 := main_#t~ret20;havoc main_#t~ret20; 51825#L395 assume 0 != main_~tmp~8; 54683#L368 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 53000#L702 havoc bobCall_#t~ret8, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 53001#L454 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 53475#L479 bobCall_#t~ret8 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret8;havoc bobCall_#t~ret8;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 51793#L980 assume 0 == initPersonOnFloor_~floor; 51794#L981 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 51146#L1088-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 55739#L772 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 52114#L784-2 havoc timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_#t~ret32, __utac_acc__Specification3_spec__1_#t~ret33, __utac_acc__Specification3_spec__1_#t~ret34, __utac_acc__Specification3_spec__1_#t~ret35, __utac_acc__Specification3_spec__1_#t~ret36, __utac_acc__Specification3_spec__1_#t~ret37, __utac_acc__Specification3_spec__1_#t~ret38, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 51355#L2102 __utac_acc__Specification3_spec__1_#t~ret27 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 51356#L2154 __utac_acc__Specification3_spec__1_#t~ret28 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret28;havoc __utac_acc__Specification3_spec__1_#t~ret28; 53257#L1315 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 53258#L1316 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 52334#L2119 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 51262#L2140 __utac_acc__Specification3_spec__1_#t~ret29 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret29;havoc __utac_acc__Specification3_spec__1_#t~ret29; 51263#L1320 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 52001#L1421 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret95, stopRequestedAtCurrentFloor_#t~ret96, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 52022#L709 assume !(0 == isFloorCalling_~floorID); 53745#L713 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 51339#L736 stopRequestedAtCurrentFloor_#t~ret95 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret95;havoc stopRequestedAtCurrentFloor_#t~ret95; 53111#L2715 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~8;stopRequestedAtCurrentFloor_~retValue_acc~23 := 1;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 53112#L2727 timeShift_#t~ret109 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 54281#L2864 assume !(0 != timeShift_~tmp___9~3); 55417#L2955 assume !(1 == ~doorState~0); 55067#L2955-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_#t~ret87, stopRequestedInDirection_#t~ret88, stopRequestedInDirection_#t~ret89, stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 53787#L2306 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~7;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~7;isTopFloor_~retValue_acc~7 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~7; 53789#L1283 stopRequestedInDirection_#t~ret83 := isTopFloor_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret83;havoc stopRequestedInDirection_#t~ret83; 56536#L2310 assume 0 != stopRequestedInDirection_~tmp~18;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 51170#L2628 timeShift_#t~ret116 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret116;havoc timeShift_#t~ret116; 54315#L2963 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 51402#L2682 assume !(1 == ~currentHeading~0); 51403#L2692 assume !(0 == ~currentFloorID~0); 54078#L2692-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 54081#L2698-5 havoc __utac_acc__Specification3_spec__2_#t~ret39, __utac_acc__Specification3_spec__2_#t~ret40, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 54082#L1446 assume !(-1 == ~expectedDirection~0); 52421#L1458 assume !(1 == ~expectedDirection~0); 53975#L1459 havoc timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_#t~ret32, __utac_acc__Specification3_spec__1_#t~ret33, __utac_acc__Specification3_spec__1_#t~ret34, __utac_acc__Specification3_spec__1_#t~ret35, __utac_acc__Specification3_spec__1_#t~ret36, __utac_acc__Specification3_spec__1_#t~ret37, __utac_acc__Specification3_spec__1_#t~ret38, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 54645#L2102-1 __utac_acc__Specification3_spec__1_#t~ret27 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 54646#L2154-3 __utac_acc__Specification3_spec__1_#t~ret28 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret28;havoc __utac_acc__Specification3_spec__1_#t~ret28; 53979#L1315-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 53980#L1377-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 57041#L1387-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 57025#L1398-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 57016#L1409-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 57009#L1420-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 57002#L1421-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret95, stopRequestedAtCurrentFloor_#t~ret96, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 57000#L709-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 56995#L736-21 stopRequestedAtCurrentFloor_#t~ret95 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret95;havoc stopRequestedAtCurrentFloor_#t~ret95; 56992#L2715-1 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~8;stopRequestedAtCurrentFloor_~retValue_acc~23 := 1;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 56991#L2727-1 timeShift_#t~ret109 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 56989#L2864-1 assume !(0 != timeShift_~tmp___9~3); 56988#L2955-3 assume !(1 == ~doorState~0); 56986#L2955-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_#t~ret87, stopRequestedInDirection_#t~ret88, stopRequestedInDirection_#t~ret89, stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 56984#L2306-2 assume !(1 == stopRequestedInDirection_~dir); 56951#L2475-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 56932#L2628-2 timeShift_#t~ret116 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret116;havoc timeShift_#t~ret116; 56930#L2963-1 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 56931#L2682-3 assume !(1 == ~currentHeading~0); 58134#L2692-9 assume !(0 == ~currentFloorID~0); 52198#L2692-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 51900#L2698-11 havoc __utac_acc__Specification3_spec__2_#t~ret39, __utac_acc__Specification3_spec__2_#t~ret40, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 57424#L1446-1 assume !(-1 == ~expectedDirection~0); 57296#L1458-1 assume !(1 == ~expectedDirection~0); 57295#L1459-1 havoc timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_#t~ret32, __utac_acc__Specification3_spec__1_#t~ret33, __utac_acc__Specification3_spec__1_#t~ret34, __utac_acc__Specification3_spec__1_#t~ret35, __utac_acc__Specification3_spec__1_#t~ret36, __utac_acc__Specification3_spec__1_#t~ret37, __utac_acc__Specification3_spec__1_#t~ret38, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 57294#L2102-2 __utac_acc__Specification3_spec__1_#t~ret27 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 57293#L2154-6 __utac_acc__Specification3_spec__1_#t~ret28 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret28;havoc __utac_acc__Specification3_spec__1_#t~ret28; 57292#L1315-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 57290#L1377-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 57288#L1387-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 57272#L1398-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 57263#L1409-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 57256#L1420-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 57249#L1421-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret95, stopRequestedAtCurrentFloor_#t~ret96, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 57247#L709-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 57242#L736-42 stopRequestedAtCurrentFloor_#t~ret95 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret95;havoc stopRequestedAtCurrentFloor_#t~ret95; 57239#L2715-2 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~8;stopRequestedAtCurrentFloor_~retValue_acc~23 := 1;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 57238#L2727-2 timeShift_#t~ret109 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 57236#L2864-2 assume !(0 != timeShift_~tmp___9~3); 57234#L2955-6 assume !(1 == ~doorState~0); 57232#L2955-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_#t~ret87, stopRequestedInDirection_#t~ret88, stopRequestedInDirection_#t~ret89, stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 57231#L2306-4 assume !(1 == stopRequestedInDirection_~dir); 57180#L2475-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 57179#L2628-4 timeShift_#t~ret116 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret116;havoc timeShift_#t~ret116; 57177#L2963-2 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 57176#L2682-6 assume !(1 == ~currentHeading~0); 57175#L2692-18 assume !(0 == ~currentFloorID~0); 51270#L2692-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 51952#L2698-17 havoc __utac_acc__Specification3_spec__2_#t~ret39, __utac_acc__Specification3_spec__2_#t~ret40, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 53843#L1446-2 assume !(-1 == ~expectedDirection~0); 55765#L1458-2 assume !(1 == ~expectedDirection~0); 54284#L1459-2 havoc bobCall_#t~ret8, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 53365#L454-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 53366#L479-1 bobCall_#t~ret8 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret8;havoc bobCall_#t~ret8;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 53935#L980-1 assume 0 == initPersonOnFloor_~floor; 55363#L981-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 51779#L1088-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 53319#L772-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 57173#L784-5 havoc cleanup_#t~ret14, cleanup_#t~ret15, cleanup_~i~0, cleanup_~tmp~6, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~0;havoc cleanup_~i~0;havoc cleanup_~tmp~6;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_#t~ret32, __utac_acc__Specification3_spec__1_#t~ret33, __utac_acc__Specification3_spec__1_#t~ret34, __utac_acc__Specification3_spec__1_#t~ret35, __utac_acc__Specification3_spec__1_#t~ret36, __utac_acc__Specification3_spec__1_#t~ret37, __utac_acc__Specification3_spec__1_#t~ret38, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 57172#L2102-3 __utac_acc__Specification3_spec__1_#t~ret27 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 57171#L2154-9 __utac_acc__Specification3_spec__1_#t~ret28 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret28;havoc __utac_acc__Specification3_spec__1_#t~ret28; 57170#L1315-3 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 57169#L1316-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0); 57167#L1326-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 1;buttonForFloorIsPressed_#in~floorID := 1;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 57165#L2119-34 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 57144#L2140-34 __utac_acc__Specification3_spec__1_#t~ret30 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___3~0 := __utac_acc__Specification3_spec__1_#t~ret30;havoc __utac_acc__Specification3_spec__1_#t~ret30; 57138#L1331-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___3~0;~expectedDirection~0 := 1; 57127#L1421-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret95, stopRequestedAtCurrentFloor_#t~ret96, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 57126#L709-63 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 57120#L736-63 stopRequestedAtCurrentFloor_#t~ret95 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret95;havoc stopRequestedAtCurrentFloor_#t~ret95; 57117#L2715-3 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~8;stopRequestedAtCurrentFloor_~retValue_acc~23 := 1;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 57116#L2727-3 timeShift_#t~ret109 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 57114#L2864-3 assume !(0 != timeShift_~tmp___9~3); 57113#L2955-9 assume !(1 == ~doorState~0); 57111#L2955-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_#t~ret87, stopRequestedInDirection_#t~ret88, stopRequestedInDirection_#t~ret89, stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 57109#L2306-6 assume !(1 == stopRequestedInDirection_~dir); 57066#L2475-6 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 57057#L2628-6 timeShift_#t~ret116 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret116;havoc timeShift_#t~ret116; 57055#L2963-3 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 57054#L2682-9 assume !(1 == ~currentHeading~0); 57053#L2692-27 assume !(0 == ~currentFloorID~0); 54743#L2692-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 53560#L2698-23 havoc __utac_acc__Specification3_spec__2_#t~ret39, __utac_acc__Specification3_spec__2_#t~ret40, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 56491#L1446-3 assume !(-1 == ~expectedDirection~0); 55243#L1458-3 assume !(1 == ~expectedDirection~0); 51999#L1459-3 cleanup_~i~0 := 0; 53494#L198-2 [2021-11-09 09:20:09,768 INFO L793 eck$LassoCheckResult]: Loop: 53494#L198-2 assume !false; 55374#L199 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 52525#L202 assume cleanup_~i~0 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 52526#L1973 cleanup_#t~ret14 := isBlocked_#res;cleanup_~tmp___0~0 := cleanup_#t~ret14;havoc cleanup_#t~ret14; 55296#L206 assume 1 != cleanup_~tmp___0~0; 58929#L206-1 havoc isIdle_#res;havoc isIdle_#t~ret82, isIdle_~retValue_acc~20, isIdle_~tmp~17;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~17;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret77, anyStopRequested_#t~ret78, anyStopRequested_#t~ret79, anyStopRequested_#t~ret80, anyStopRequested_#t~ret81, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~16, anyStopRequested_~tmp___0~6, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~16;havoc anyStopRequested_~tmp___0~6;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~1;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 58927#L709-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 58923#L736-84 anyStopRequested_#t~ret77 := isFloorCalling_#res;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret77;havoc anyStopRequested_#t~ret77; 58893#L2210 assume 0 != anyStopRequested_~tmp___3~1;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 58888#L2274 isIdle_#t~ret82 := anyStopRequested_#res;isIdle_~tmp~17 := isIdle_#t~ret82;havoc isIdle_#t~ret82;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~17 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 58133#L2287 cleanup_#t~ret15 := isIdle_#res;cleanup_~tmp~6 := cleanup_#t~ret15;havoc cleanup_#t~ret15; 56866#L218 assume !(0 != cleanup_~tmp~6);havoc timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_#t~ret32, __utac_acc__Specification3_spec__1_#t~ret33, __utac_acc__Specification3_spec__1_#t~ret34, __utac_acc__Specification3_spec__1_#t~ret35, __utac_acc__Specification3_spec__1_#t~ret36, __utac_acc__Specification3_spec__1_#t~ret37, __utac_acc__Specification3_spec__1_#t~ret38, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 56865#L2102-4 __utac_acc__Specification3_spec__1_#t~ret27 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 56864#L2154-12 __utac_acc__Specification3_spec__1_#t~ret28 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret28;havoc __utac_acc__Specification3_spec__1_#t~ret28; 56863#L1315-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 56861#L1377-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 56859#L1387-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 56843#L1398-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 56834#L1409-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 56827#L1420-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 56820#L1421-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret95, stopRequestedAtCurrentFloor_#t~ret96, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 56819#L709-89 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 56813#L736-89 stopRequestedAtCurrentFloor_#t~ret95 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret95;havoc stopRequestedAtCurrentFloor_#t~ret95; 56810#L2715-4 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~8;stopRequestedAtCurrentFloor_~retValue_acc~23 := 1;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 56809#L2727-4 timeShift_#t~ret109 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 56807#L2864-4 assume !(0 != timeShift_~tmp___9~3); 56806#L2955-12 assume 1 == ~doorState~0;~doorState~0 := 0; 56804#L2955-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_#t~ret87, stopRequestedInDirection_#t~ret88, stopRequestedInDirection_#t~ret89, stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 56798#L2306-8 assume !(1 == stopRequestedInDirection_~dir); 56755#L2475-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 56750#L2628-8 timeShift_#t~ret116 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret116;havoc timeShift_#t~ret116; 56748#L2963-4 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 56749#L2682-12 assume !(1 == ~currentHeading~0); 58128#L2692-36 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 53639#L2692-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 52288#L2698-29 havoc __utac_acc__Specification3_spec__2_#t~ret39, __utac_acc__Specification3_spec__2_#t~ret40, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 55488#L1446-4 assume !(-1 == ~expectedDirection~0); 51966#L1458-4 assume !(1 == ~expectedDirection~0); 52547#L1459-4 cleanup_~i~0 := 1 + cleanup_~i~0; 53494#L198-2 [2021-11-09 09:20:09,768 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-09 09:20:09,768 INFO L85 PathProgramCache]: Analyzing trace with hash 1518867470, now seen corresponding path program 1 times [2021-11-09 09:20:09,768 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-09 09:20:09,769 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1022671905] [2021-11-09 09:20:09,769 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-09 09:20:09,769 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-09 09:20:09,796 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-09 09:20:09,889 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-09 09:20:09,891 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-09 09:20:09,892 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1022671905] [2021-11-09 09:20:09,892 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1022671905] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-09 09:20:09,892 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-09 09:20:09,892 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-11-09 09:20:09,893 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [440357605] [2021-11-09 09:20:09,893 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-11-09 09:20:09,894 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-09 09:20:09,895 INFO L85 PathProgramCache]: Analyzing trace with hash 2142700463, now seen corresponding path program 1 times [2021-11-09 09:20:09,895 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-09 09:20:09,896 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1238708489] [2021-11-09 09:20:09,896 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-09 09:20:09,897 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-09 09:20:09,906 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-09 09:20:09,990 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-09 09:20:09,990 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-09 09:20:09,991 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1238708489] [2021-11-09 09:20:09,991 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1238708489] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-09 09:20:09,992 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-09 09:20:09,992 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2021-11-09 09:20:09,994 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [216580883] [2021-11-09 09:20:09,994 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-11-09 09:20:09,995 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-09 09:20:09,995 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2021-11-09 09:20:09,995 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=17, Invalid=55, Unknown=0, NotChecked=0, Total=72 [2021-11-09 09:20:09,996 INFO L87 Difference]: Start difference. First operand 9243 states and 17452 transitions. cyclomatic complexity: 8210 Second operand has 9 states, 9 states have (on average 4.333333333333333) internal successors, (39), 9 states have internal predecessors, (39), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-09 09:20:18,565 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-09 09:20:18,566 INFO L93 Difference]: Finished difference Result 33112 states and 62459 transitions. [2021-11-09 09:20:18,569 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 30 states. [2021-11-09 09:20:18,569 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 33112 states and 62459 transitions. [2021-11-09 09:20:18,826 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 8069 [2021-11-09 09:20:19,013 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 33112 states to 33112 states and 62459 transitions. [2021-11-09 09:20:19,013 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 33112 [2021-11-09 09:20:19,054 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 33112 [2021-11-09 09:20:19,055 INFO L73 IsDeterministic]: Start isDeterministic. Operand 33112 states and 62459 transitions. [2021-11-09 09:20:19,087 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-11-09 09:20:19,087 INFO L681 BuchiCegarLoop]: Abstraction has 33112 states and 62459 transitions. [2021-11-09 09:20:19,117 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 33112 states and 62459 transitions. [2021-11-09 09:20:19,375 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 33112 to 12581. [2021-11-09 09:20:19,393 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 12581 states, 12581 states have (on average 1.8786265002781972) internal successors, (23635), 12580 states have internal predecessors, (23635), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-09 09:20:19,432 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12581 states to 12581 states and 23635 transitions. [2021-11-09 09:20:19,432 INFO L704 BuchiCegarLoop]: Abstraction has 12581 states and 23635 transitions. [2021-11-09 09:20:19,432 INFO L587 BuchiCegarLoop]: Abstraction has 12581 states and 23635 transitions. [2021-11-09 09:20:19,433 INFO L425 BuchiCegarLoop]: ======== Iteration 4============ [2021-11-09 09:20:19,433 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 12581 states and 23635 transitions. [2021-11-09 09:20:19,476 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 2959 [2021-11-09 09:20:19,476 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-11-09 09:20:19,476 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-11-09 09:20:19,479 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-09 09:20:19,479 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-09 09:20:19,482 INFO L791 eck$LassoCheckResult]: Stem: 98465#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(2);call write~init~int(48, #t~string4.base, #t~string4.offset, 1);call write~init~int(0, #t~string4.base, 1 + #t~string4.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(31);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(12);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(30);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(9);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(21);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(30);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(9);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(21);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(30);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(9);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(25);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(30);call #t~string72.base, #t~string72.offset := #Ultimate.allocOnStack(9);call #t~string73.base, #t~string73.offset := #Ultimate.allocOnStack(25);call #t~string120.base, #t~string120.offset := #Ultimate.allocOnStack(10);call #t~string122.base, #t~string122.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string122.base, #t~string122.offset, 1);call write~init~int(95, #t~string122.base, 1 + #t~string122.offset, 1);call write~init~int(93, #t~string122.base, 2 + #t~string122.offset, 1);call write~init~int(0, #t~string122.base, 3 + #t~string122.offset, 1);call #t~string124.base, #t~string124.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string124.base, #t~string124.offset, 1);call write~init~int(93, #t~string124.base, 1 + #t~string124.offset, 1);call write~init~int(32, #t~string124.base, 2 + #t~string124.offset, 1);call write~init~int(0, #t~string124.base, 3 + #t~string124.offset, 1);call #t~string126.base, #t~string126.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string126.base, #t~string126.offset, 1);call write~init~int(97, #t~string126.base, 1 + #t~string126.offset, 1);call write~init~int(116, #t~string126.base, 2 + #t~string126.offset, 1);call write~init~int(32, #t~string126.base, 3 + #t~string126.offset, 1);call write~init~int(0, #t~string126.base, 4 + #t~string126.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string128.base, #t~string128.offset, 1);call write~init~int(105, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 2 + #t~string128.offset, 1);call #t~string130.base, #t~string130.offset := #Ultimate.allocOnStack(10);call #t~string132.base, #t~string132.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string132.base, #t~string132.offset, 1);call write~init~int(112, #t~string132.base, 1 + #t~string132.offset, 1);call write~init~int(0, #t~string132.base, 2 + #t~string132.offset, 1);call #t~string134.base, #t~string134.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string134.base, #t~string134.offset, 1);call write~init~int(111, #t~string134.base, 1 + #t~string134.offset, 1);call write~init~int(119, #t~string134.base, 2 + #t~string134.offset, 1);call write~init~int(110, #t~string134.base, 3 + #t~string134.offset, 1);call write~init~int(0, #t~string134.base, 4 + #t~string134.offset, 1);call #t~string136.base, #t~string136.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string136.base, #t~string136.offset, 1);call write~init~int(73, #t~string136.base, 1 + #t~string136.offset, 1);call write~init~int(76, #t~string136.base, 2 + #t~string136.offset, 1);call write~init~int(95, #t~string136.base, 3 + #t~string136.offset, 1);call write~init~int(112, #t~string136.base, 4 + #t~string136.offset, 1);call write~init~int(58, #t~string136.base, 5 + #t~string136.offset, 1);call write~init~int(0, #t~string136.base, 6 + #t~string136.offset, 1);call #t~string138.base, #t~string138.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string138.base, #t~string138.offset, 1);call write~init~int(37, #t~string138.base, 1 + #t~string138.offset, 1);call write~init~int(105, #t~string138.base, 2 + #t~string138.offset, 1);call write~init~int(0, #t~string138.base, 3 + #t~string138.offset, 1);call #t~string140.base, #t~string140.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string140.base, #t~string140.offset, 1);call write~init~int(37, #t~string140.base, 1 + #t~string140.offset, 1);call write~init~int(105, #t~string140.base, 2 + #t~string140.offset, 1);call write~init~int(0, #t~string140.base, 3 + #t~string140.offset, 1);call #t~string142.base, #t~string142.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string142.base, #t~string142.offset, 1);call write~init~int(37, #t~string142.base, 1 + #t~string142.offset, 1);call write~init~int(105, #t~string142.base, 2 + #t~string142.offset, 1);call write~init~int(0, #t~string142.base, 3 + #t~string142.offset, 1);call #t~string144.base, #t~string144.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string144.base, #t~string144.offset, 1);call write~init~int(37, #t~string144.base, 1 + #t~string144.offset, 1);call write~init~int(105, #t~string144.base, 2 + #t~string144.offset, 1);call write~init~int(0, #t~string144.base, 3 + #t~string144.offset, 1);call #t~string146.base, #t~string146.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string146.base, #t~string146.offset, 1);call write~init~int(37, #t~string146.base, 1 + #t~string146.offset, 1);call write~init~int(105, #t~string146.base, 2 + #t~string146.offset, 1);call write~init~int(0, #t~string146.base, 3 + #t~string146.offset, 1);call #t~string148.base, #t~string148.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string148.base, #t~string148.offset, 1);call write~init~int(70, #t~string148.base, 1 + #t~string148.offset, 1);call write~init~int(95, #t~string148.base, 2 + #t~string148.offset, 1);call write~init~int(112, #t~string148.base, 3 + #t~string148.offset, 1);call write~init~int(58, #t~string148.base, 4 + #t~string148.offset, 1);call write~init~int(0, #t~string148.base, 5 + #t~string148.offset, 1);call #t~string151.base, #t~string151.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string151.base, #t~string151.offset, 1);call write~init~int(37, #t~string151.base, 1 + #t~string151.offset, 1);call write~init~int(105, #t~string151.base, 2 + #t~string151.offset, 1);call write~init~int(0, #t~string151.base, 3 + #t~string151.offset, 1);call #t~string154.base, #t~string154.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string154.base, #t~string154.offset, 1);call write~init~int(37, #t~string154.base, 1 + #t~string154.offset, 1);call write~init~int(105, #t~string154.base, 2 + #t~string154.offset, 1);call write~init~int(0, #t~string154.base, 3 + #t~string154.offset, 1);call #t~string157.base, #t~string157.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string157.base, #t~string157.offset, 1);call write~init~int(37, #t~string157.base, 1 + #t~string157.offset, 1);call write~init~int(105, #t~string157.base, 2 + #t~string157.offset, 1);call write~init~int(0, #t~string157.base, 3 + #t~string157.offset, 1);call #t~string160.base, #t~string160.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string160.base, #t~string160.offset, 1);call write~init~int(37, #t~string160.base, 1 + #t~string160.offset, 1);call write~init~int(105, #t~string160.base, 2 + #t~string160.offset, 1);call write~init~int(0, #t~string160.base, 3 + #t~string160.offset, 1);call #t~string163.base, #t~string163.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string163.base, #t~string163.offset, 1);call write~init~int(37, #t~string163.base, 1 + #t~string163.offset, 1);call write~init~int(105, #t~string163.base, 2 + #t~string163.offset, 1);call write~init~int(0, #t~string163.base, 3 + #t~string163.offset, 1);call #t~string165.base, #t~string165.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string165.base, #t~string165.offset, 1);call write~init~int(0, #t~string165.base, 1 + #t~string165.offset, 1);~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 98466#L-1 havoc main_#res;havoc main_#t~ret20, main_~retValue_acc~1, main_~tmp~8;havoc main_~retValue_acc~1;havoc main_~tmp~8; 98043#L1866 havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 94250#L1874 main_#t~ret20 := valid_product_#res;main_~tmp~8 := main_#t~ret20;havoc main_#t~ret20; 94251#L395 assume 0 != main_~tmp~8; 97134#L368 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 95433#L702 havoc bobCall_#t~ret8, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 95434#L454 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 95913#L479 bobCall_#t~ret8 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret8;havoc bobCall_#t~ret8;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 94219#L980 assume 0 == initPersonOnFloor_~floor; 94220#L981 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 93575#L1088-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 98211#L772 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 94536#L784-2 havoc timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_#t~ret32, __utac_acc__Specification3_spec__1_#t~ret33, __utac_acc__Specification3_spec__1_#t~ret34, __utac_acc__Specification3_spec__1_#t~ret35, __utac_acc__Specification3_spec__1_#t~ret36, __utac_acc__Specification3_spec__1_#t~ret37, __utac_acc__Specification3_spec__1_#t~ret38, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 93783#L2102 __utac_acc__Specification3_spec__1_#t~ret27 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 93784#L2154 __utac_acc__Specification3_spec__1_#t~ret28 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret28;havoc __utac_acc__Specification3_spec__1_#t~ret28; 95693#L1315 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 95694#L1316 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 94760#L2119 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 93690#L2140 __utac_acc__Specification3_spec__1_#t~ret29 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret29;havoc __utac_acc__Specification3_spec__1_#t~ret29; 93691#L1320 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 94424#L1421 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret95, stopRequestedAtCurrentFloor_#t~ret96, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 94445#L709 assume !(0 == isFloorCalling_~floorID); 96184#L713 assume !(1 == isFloorCalling_~floorID); 96185#L717 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 93767#L736 stopRequestedAtCurrentFloor_#t~ret95 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret95;havoc stopRequestedAtCurrentFloor_#t~ret95; 95548#L2715 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 94604#L2119-10 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 94234#L2140-10 stopRequestedAtCurrentFloor_#t~ret96 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret96;havoc stopRequestedAtCurrentFloor_#t~ret96; 94235#L2722 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 99115#L2727 timeShift_#t~ret109 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 99231#L2864 assume !(0 != timeShift_~tmp___9~3); 98771#L2955 assume !(1 == ~doorState~0); 97523#L2955-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_#t~ret87, stopRequestedInDirection_#t~ret88, stopRequestedInDirection_#t~ret89, stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 96226#L2306 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~7;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~7;isTopFloor_~retValue_acc~7 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~7; 96228#L1283 stopRequestedInDirection_#t~ret83 := isTopFloor_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret83;havoc stopRequestedInDirection_#t~ret83; 99051#L2310 assume 0 != stopRequestedInDirection_~tmp~18;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 93598#L2628 timeShift_#t~ret116 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret116;havoc timeShift_#t~ret116; 96764#L2963 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 93831#L2682 assume !(1 == ~currentHeading~0); 93832#L2692 assume !(0 == ~currentFloorID~0); 96522#L2692-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 98020#L2698-5 havoc __utac_acc__Specification3_spec__2_#t~ret39, __utac_acc__Specification3_spec__2_#t~ret40, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 98311#L1446 assume !(-1 == ~expectedDirection~0); 94847#L1458 assume !(1 == ~expectedDirection~0); 98893#L1459 havoc timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_#t~ret32, __utac_acc__Specification3_spec__1_#t~ret33, __utac_acc__Specification3_spec__1_#t~ret34, __utac_acc__Specification3_spec__1_#t~ret35, __utac_acc__Specification3_spec__1_#t~ret36, __utac_acc__Specification3_spec__1_#t~ret37, __utac_acc__Specification3_spec__1_#t~ret38, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 97095#L2102-1 __utac_acc__Specification3_spec__1_#t~ret27 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 97096#L2154-3 __utac_acc__Specification3_spec__1_#t~ret28 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret28;havoc __utac_acc__Specification3_spec__1_#t~ret28; 96423#L1315-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 96424#L1377-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 99359#L1387-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 99343#L1398-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 99334#L1409-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 99327#L1420-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 99324#L1421-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret95, stopRequestedAtCurrentFloor_#t~ret96, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 99320#L709-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 99321#L736-21 stopRequestedAtCurrentFloor_#t~ret95 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret95;havoc stopRequestedAtCurrentFloor_#t~ret95; 103889#L2715-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 103890#L2119-21 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 103891#L2140-21 stopRequestedAtCurrentFloor_#t~ret96 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret96;havoc stopRequestedAtCurrentFloor_#t~ret96; 103888#L2722-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 103886#L2727-1 timeShift_#t~ret109 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 103883#L2864-1 assume !(0 != timeShift_~tmp___9~3); 103884#L2955-3 assume !(1 == ~doorState~0); 105782#L2955-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_#t~ret87, stopRequestedInDirection_#t~ret88, stopRequestedInDirection_#t~ret89, stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 105772#L2306-2 assume !(1 == stopRequestedInDirection_~dir); 105767#L2475-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 105748#L2628-2 timeShift_#t~ret116 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret116;havoc timeShift_#t~ret116; 105745#L2963-1 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 105746#L2682-3 assume !(1 == ~currentHeading~0); 106053#L2692-9 assume !(0 == ~currentFloorID~0); 94621#L2692-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 94325#L2698-11 havoc __utac_acc__Specification3_spec__2_#t~ret39, __utac_acc__Specification3_spec__2_#t~ret40, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 102647#L1446-1 assume !(-1 == ~expectedDirection~0); 102648#L1458-1 assume !(1 == ~expectedDirection~0); 102639#L1459-1 havoc timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_#t~ret32, __utac_acc__Specification3_spec__1_#t~ret33, __utac_acc__Specification3_spec__1_#t~ret34, __utac_acc__Specification3_spec__1_#t~ret35, __utac_acc__Specification3_spec__1_#t~ret36, __utac_acc__Specification3_spec__1_#t~ret37, __utac_acc__Specification3_spec__1_#t~ret38, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 102640#L2102-2 __utac_acc__Specification3_spec__1_#t~ret27 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 102635#L2154-6 __utac_acc__Specification3_spec__1_#t~ret28 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret28;havoc __utac_acc__Specification3_spec__1_#t~ret28; 102636#L1315-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 99318#L1377-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 99316#L1387-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 99300#L1398-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 99291#L1409-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 99284#L1420-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 99281#L1421-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret95, stopRequestedAtCurrentFloor_#t~ret96, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 99277#L709-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 99278#L736-42 stopRequestedAtCurrentFloor_#t~ret95 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret95;havoc stopRequestedAtCurrentFloor_#t~ret95; 104344#L2715-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 104345#L2119-32 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 104346#L2140-32 stopRequestedAtCurrentFloor_#t~ret96 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret96;havoc stopRequestedAtCurrentFloor_#t~ret96; 104343#L2722-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 104341#L2727-2 timeShift_#t~ret109 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 104338#L2864-2 assume !(0 != timeShift_~tmp___9~3); 104339#L2955-6 assume !(1 == ~doorState~0); 105835#L2955-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_#t~ret87, stopRequestedInDirection_#t~ret88, stopRequestedInDirection_#t~ret89, stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 105830#L2306-4 assume !(1 == stopRequestedInDirection_~dir); 105811#L2475-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 105810#L2628-4 timeShift_#t~ret116 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret116;havoc timeShift_#t~ret116; 105808#L2963-2 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 105807#L2682-6 assume !(1 == ~currentHeading~0); 105806#L2692-18 assume !(0 == ~currentFloorID~0); 93698#L2692-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 94375#L2698-17 havoc __utac_acc__Specification3_spec__2_#t~ret39, __utac_acc__Specification3_spec__2_#t~ret40, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 102774#L1446-2 assume !(-1 == ~expectedDirection~0); 102771#L1458-2 assume !(1 == ~expectedDirection~0); 102770#L1459-2 havoc bobCall_#t~ret8, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 102768#L454-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 102763#L479-1 bobCall_#t~ret8 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret8;havoc bobCall_#t~ret8;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 102762#L980-1 assume 0 == initPersonOnFloor_~floor; 102734#L981-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 102727#L1088-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 102722#L772-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 102721#L784-5 havoc cleanup_#t~ret14, cleanup_#t~ret15, cleanup_~i~0, cleanup_~tmp~6, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~0;havoc cleanup_~i~0;havoc cleanup_~tmp~6;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_#t~ret32, __utac_acc__Specification3_spec__1_#t~ret33, __utac_acc__Specification3_spec__1_#t~ret34, __utac_acc__Specification3_spec__1_#t~ret35, __utac_acc__Specification3_spec__1_#t~ret36, __utac_acc__Specification3_spec__1_#t~ret37, __utac_acc__Specification3_spec__1_#t~ret38, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 102720#L2102-3 __utac_acc__Specification3_spec__1_#t~ret27 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 102719#L2154-9 __utac_acc__Specification3_spec__1_#t~ret28 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret28;havoc __utac_acc__Specification3_spec__1_#t~ret28; 102718#L1315-3 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 102717#L1316-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0); 99273#L1326-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 1;buttonForFloorIsPressed_#in~floorID := 1;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 99270#L2119-34 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 99249#L2140-34 __utac_acc__Specification3_spec__1_#t~ret30 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___3~0 := __utac_acc__Specification3_spec__1_#t~ret30;havoc __utac_acc__Specification3_spec__1_#t~ret30; 99243#L1331-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___3~0;~expectedDirection~0 := 1; 99236#L1421-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret95, stopRequestedAtCurrentFloor_#t~ret96, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 99233#L709-63 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 99235#L736-63 stopRequestedAtCurrentFloor_#t~ret95 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret95;havoc stopRequestedAtCurrentFloor_#t~ret95; 100096#L2715-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 100097#L2119-43 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 100098#L2140-43 stopRequestedAtCurrentFloor_#t~ret96 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret96;havoc stopRequestedAtCurrentFloor_#t~ret96; 100095#L2722-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 100093#L2727-3 timeShift_#t~ret109 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 100090#L2864-3 assume !(0 != timeShift_~tmp___9~3); 100091#L2955-9 assume !(1 == ~doorState~0); 106032#L2955-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_#t~ret87, stopRequestedInDirection_#t~ret88, stopRequestedInDirection_#t~ret89, stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 106026#L2306-6 assume !(1 == stopRequestedInDirection_~dir); 106027#L2475-6 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 95172#L2628-6 timeShift_#t~ret116 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret116;havoc timeShift_#t~ret116; 94183#L2963-3 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 94184#L2682-9 assume !(1 == ~currentHeading~0); 105804#L2692-27 assume !(0 == ~currentFloorID~0); 97194#L2692-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 96800#L2698-23 havoc __utac_acc__Specification3_spec__2_#t~ret39, __utac_acc__Specification3_spec__2_#t~ret40, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 99524#L1446-3 assume !(-1 == ~expectedDirection~0); 99518#L1458-3 assume !(1 == ~expectedDirection~0); 99513#L1459-3 cleanup_~i~0 := 0; 99511#L198-2 [2021-11-09 09:20:19,483 INFO L793 eck$LassoCheckResult]: Loop: 99511#L198-2 assume !false; 99510#L199 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 99509#L202 assume cleanup_~i~0 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 99508#L1973 cleanup_#t~ret14 := isBlocked_#res;cleanup_~tmp___0~0 := cleanup_#t~ret14;havoc cleanup_#t~ret14; 99503#L206 assume 1 != cleanup_~tmp___0~0; 99499#L206-1 havoc isIdle_#res;havoc isIdle_#t~ret82, isIdle_~retValue_acc~20, isIdle_~tmp~17;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~17;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret77, anyStopRequested_#t~ret78, anyStopRequested_#t~ret79, anyStopRequested_#t~ret80, anyStopRequested_#t~ret81, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~16, anyStopRequested_~tmp___0~6, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~16;havoc anyStopRequested_~tmp___0~6;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~1;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 99490#L709-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 99481#L736-84 anyStopRequested_#t~ret77 := isFloorCalling_#res;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret77;havoc anyStopRequested_#t~ret77; 99470#L2210 assume 0 != anyStopRequested_~tmp___3~1;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 99465#L2274 isIdle_#t~ret82 := anyStopRequested_#res;isIdle_~tmp~17 := isIdle_#t~ret82;havoc isIdle_#t~ret82;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~17 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 99464#L2287 cleanup_#t~ret15 := isIdle_#res;cleanup_~tmp~6 := cleanup_#t~ret15;havoc cleanup_#t~ret15; 99463#L218 assume !(0 != cleanup_~tmp~6);havoc timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_#t~ret32, __utac_acc__Specification3_spec__1_#t~ret33, __utac_acc__Specification3_spec__1_#t~ret34, __utac_acc__Specification3_spec__1_#t~ret35, __utac_acc__Specification3_spec__1_#t~ret36, __utac_acc__Specification3_spec__1_#t~ret37, __utac_acc__Specification3_spec__1_#t~ret38, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 99462#L2102-4 __utac_acc__Specification3_spec__1_#t~ret27 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 99461#L2154-12 __utac_acc__Specification3_spec__1_#t~ret28 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret28;havoc __utac_acc__Specification3_spec__1_#t~ret28; 99459#L1315-4 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 99458#L1316-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0); 99457#L1326-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 1;buttonForFloorIsPressed_#in~floorID := 1;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 99423#L2119-45 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 99406#L2140-45 __utac_acc__Specification3_spec__1_#t~ret30 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___3~0 := __utac_acc__Specification3_spec__1_#t~ret30;havoc __utac_acc__Specification3_spec__1_#t~ret30; 99395#L1331-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___3~0;~expectedDirection~0 := 1; 99391#L1421-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret95, stopRequestedAtCurrentFloor_#t~ret96, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 99388#L709-89 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 99389#L736-89 stopRequestedAtCurrentFloor_#t~ret95 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret95;havoc stopRequestedAtCurrentFloor_#t~ret95; 101020#L2715-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 101022#L2119-54 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 101024#L2140-54 stopRequestedAtCurrentFloor_#t~ret96 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret96;havoc stopRequestedAtCurrentFloor_#t~ret96; 101023#L2722-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 101018#L2727-4 timeShift_#t~ret109 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 101019#L2864-4 assume !(0 != timeShift_~tmp___9~3); 104919#L2955-12 assume 1 == ~doorState~0;~doorState~0 := 0; 105991#L2955-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_#t~ret87, stopRequestedInDirection_#t~ret88, stopRequestedInDirection_#t~ret89, stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 105986#L2306-8 assume !(1 == stopRequestedInDirection_~dir); 105987#L2475-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 94812#L2628-8 timeShift_#t~ret116 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret116;havoc timeShift_#t~ret116; 94813#L2963-4 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 95985#L2682-12 assume !(1 == ~currentHeading~0); 106054#L2692-36 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 96078#L2692-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 94712#L2698-29 havoc __utac_acc__Specification3_spec__2_#t~ret39, __utac_acc__Specification3_spec__2_#t~ret40, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 99521#L1446-4 assume !(-1 == ~expectedDirection~0); 99515#L1458-4 assume !(1 == ~expectedDirection~0); 99512#L1459-4 cleanup_~i~0 := 1 + cleanup_~i~0; 99511#L198-2 [2021-11-09 09:20:19,483 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-09 09:20:19,484 INFO L85 PathProgramCache]: Analyzing trace with hash -102310280, now seen corresponding path program 1 times [2021-11-09 09:20:19,484 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-09 09:20:19,484 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [493465509] [2021-11-09 09:20:19,484 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-09 09:20:19,484 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-09 09:20:19,529 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-09 09:20:19,584 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-09 09:20:19,585 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-09 09:20:19,585 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [493465509] [2021-11-09 09:20:19,585 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [493465509] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-09 09:20:19,585 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-09 09:20:19,586 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-11-09 09:20:19,586 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1626316653] [2021-11-09 09:20:19,586 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-11-09 09:20:19,587 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-09 09:20:19,587 INFO L85 PathProgramCache]: Analyzing trace with hash -1586794052, now seen corresponding path program 1 times [2021-11-09 09:20:19,587 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-09 09:20:19,588 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1097647971] [2021-11-09 09:20:19,588 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-09 09:20:19,589 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-09 09:20:19,599 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-09 09:20:19,626 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-09 09:20:19,630 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-09 09:20:19,634 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1097647971] [2021-11-09 09:20:19,634 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1097647971] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-09 09:20:19,635 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-09 09:20:19,636 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-11-09 09:20:19,636 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1454309646] [2021-11-09 09:20:19,636 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-11-09 09:20:19,636 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-09 09:20:19,637 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-09 09:20:19,641 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-09 09:20:19,641 INFO L87 Difference]: Start difference. First operand 12581 states and 23635 transitions. cyclomatic complexity: 11055 Second operand has 3 states, 3 states have (on average 14.0) internal successors, (42), 3 states have internal predecessors, (42), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-09 09:20:20,337 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-09 09:20:20,337 INFO L93 Difference]: Finished difference Result 24470 states and 45898 transitions. [2021-11-09 09:20:20,338 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-09 09:20:20,338 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 24470 states and 45898 transitions. [2021-11-09 09:20:20,642 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 5778 [2021-11-09 09:20:20,767 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 24470 states to 24470 states and 45898 transitions. [2021-11-09 09:20:20,768 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 24470 [2021-11-09 09:20:20,788 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 24470 [2021-11-09 09:20:20,788 INFO L73 IsDeterministic]: Start isDeterministic. Operand 24470 states and 45898 transitions. [2021-11-09 09:20:20,806 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-11-09 09:20:20,806 INFO L681 BuchiCegarLoop]: Abstraction has 24470 states and 45898 transitions. [2021-11-09 09:20:20,826 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 24470 states and 45898 transitions. [2021-11-09 09:20:21,169 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 24470 to 12581. [2021-11-09 09:20:21,188 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 12581 states, 12581 states have (on average 1.8732215245211032) internal successors, (23567), 12580 states have internal predecessors, (23567), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-09 09:20:21,219 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12581 states to 12581 states and 23567 transitions. [2021-11-09 09:20:21,220 INFO L704 BuchiCegarLoop]: Abstraction has 12581 states and 23567 transitions. [2021-11-09 09:20:21,220 INFO L587 BuchiCegarLoop]: Abstraction has 12581 states and 23567 transitions. [2021-11-09 09:20:21,220 INFO L425 BuchiCegarLoop]: ======== Iteration 5============ [2021-11-09 09:20:21,220 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 12581 states and 23567 transitions. [2021-11-09 09:20:21,259 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 2959 [2021-11-09 09:20:21,259 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-11-09 09:20:21,259 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-11-09 09:20:21,262 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-09 09:20:21,263 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-09 09:20:21,263 INFO L791 eck$LassoCheckResult]: Stem: 135568#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(2);call write~init~int(48, #t~string4.base, #t~string4.offset, 1);call write~init~int(0, #t~string4.base, 1 + #t~string4.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(31);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(12);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(30);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(9);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(21);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(30);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(9);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(21);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(30);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(9);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(25);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(30);call #t~string72.base, #t~string72.offset := #Ultimate.allocOnStack(9);call #t~string73.base, #t~string73.offset := #Ultimate.allocOnStack(25);call #t~string120.base, #t~string120.offset := #Ultimate.allocOnStack(10);call #t~string122.base, #t~string122.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string122.base, #t~string122.offset, 1);call write~init~int(95, #t~string122.base, 1 + #t~string122.offset, 1);call write~init~int(93, #t~string122.base, 2 + #t~string122.offset, 1);call write~init~int(0, #t~string122.base, 3 + #t~string122.offset, 1);call #t~string124.base, #t~string124.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string124.base, #t~string124.offset, 1);call write~init~int(93, #t~string124.base, 1 + #t~string124.offset, 1);call write~init~int(32, #t~string124.base, 2 + #t~string124.offset, 1);call write~init~int(0, #t~string124.base, 3 + #t~string124.offset, 1);call #t~string126.base, #t~string126.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string126.base, #t~string126.offset, 1);call write~init~int(97, #t~string126.base, 1 + #t~string126.offset, 1);call write~init~int(116, #t~string126.base, 2 + #t~string126.offset, 1);call write~init~int(32, #t~string126.base, 3 + #t~string126.offset, 1);call write~init~int(0, #t~string126.base, 4 + #t~string126.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string128.base, #t~string128.offset, 1);call write~init~int(105, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 2 + #t~string128.offset, 1);call #t~string130.base, #t~string130.offset := #Ultimate.allocOnStack(10);call #t~string132.base, #t~string132.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string132.base, #t~string132.offset, 1);call write~init~int(112, #t~string132.base, 1 + #t~string132.offset, 1);call write~init~int(0, #t~string132.base, 2 + #t~string132.offset, 1);call #t~string134.base, #t~string134.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string134.base, #t~string134.offset, 1);call write~init~int(111, #t~string134.base, 1 + #t~string134.offset, 1);call write~init~int(119, #t~string134.base, 2 + #t~string134.offset, 1);call write~init~int(110, #t~string134.base, 3 + #t~string134.offset, 1);call write~init~int(0, #t~string134.base, 4 + #t~string134.offset, 1);call #t~string136.base, #t~string136.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string136.base, #t~string136.offset, 1);call write~init~int(73, #t~string136.base, 1 + #t~string136.offset, 1);call write~init~int(76, #t~string136.base, 2 + #t~string136.offset, 1);call write~init~int(95, #t~string136.base, 3 + #t~string136.offset, 1);call write~init~int(112, #t~string136.base, 4 + #t~string136.offset, 1);call write~init~int(58, #t~string136.base, 5 + #t~string136.offset, 1);call write~init~int(0, #t~string136.base, 6 + #t~string136.offset, 1);call #t~string138.base, #t~string138.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string138.base, #t~string138.offset, 1);call write~init~int(37, #t~string138.base, 1 + #t~string138.offset, 1);call write~init~int(105, #t~string138.base, 2 + #t~string138.offset, 1);call write~init~int(0, #t~string138.base, 3 + #t~string138.offset, 1);call #t~string140.base, #t~string140.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string140.base, #t~string140.offset, 1);call write~init~int(37, #t~string140.base, 1 + #t~string140.offset, 1);call write~init~int(105, #t~string140.base, 2 + #t~string140.offset, 1);call write~init~int(0, #t~string140.base, 3 + #t~string140.offset, 1);call #t~string142.base, #t~string142.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string142.base, #t~string142.offset, 1);call write~init~int(37, #t~string142.base, 1 + #t~string142.offset, 1);call write~init~int(105, #t~string142.base, 2 + #t~string142.offset, 1);call write~init~int(0, #t~string142.base, 3 + #t~string142.offset, 1);call #t~string144.base, #t~string144.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string144.base, #t~string144.offset, 1);call write~init~int(37, #t~string144.base, 1 + #t~string144.offset, 1);call write~init~int(105, #t~string144.base, 2 + #t~string144.offset, 1);call write~init~int(0, #t~string144.base, 3 + #t~string144.offset, 1);call #t~string146.base, #t~string146.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string146.base, #t~string146.offset, 1);call write~init~int(37, #t~string146.base, 1 + #t~string146.offset, 1);call write~init~int(105, #t~string146.base, 2 + #t~string146.offset, 1);call write~init~int(0, #t~string146.base, 3 + #t~string146.offset, 1);call #t~string148.base, #t~string148.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string148.base, #t~string148.offset, 1);call write~init~int(70, #t~string148.base, 1 + #t~string148.offset, 1);call write~init~int(95, #t~string148.base, 2 + #t~string148.offset, 1);call write~init~int(112, #t~string148.base, 3 + #t~string148.offset, 1);call write~init~int(58, #t~string148.base, 4 + #t~string148.offset, 1);call write~init~int(0, #t~string148.base, 5 + #t~string148.offset, 1);call #t~string151.base, #t~string151.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string151.base, #t~string151.offset, 1);call write~init~int(37, #t~string151.base, 1 + #t~string151.offset, 1);call write~init~int(105, #t~string151.base, 2 + #t~string151.offset, 1);call write~init~int(0, #t~string151.base, 3 + #t~string151.offset, 1);call #t~string154.base, #t~string154.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string154.base, #t~string154.offset, 1);call write~init~int(37, #t~string154.base, 1 + #t~string154.offset, 1);call write~init~int(105, #t~string154.base, 2 + #t~string154.offset, 1);call write~init~int(0, #t~string154.base, 3 + #t~string154.offset, 1);call #t~string157.base, #t~string157.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string157.base, #t~string157.offset, 1);call write~init~int(37, #t~string157.base, 1 + #t~string157.offset, 1);call write~init~int(105, #t~string157.base, 2 + #t~string157.offset, 1);call write~init~int(0, #t~string157.base, 3 + #t~string157.offset, 1);call #t~string160.base, #t~string160.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string160.base, #t~string160.offset, 1);call write~init~int(37, #t~string160.base, 1 + #t~string160.offset, 1);call write~init~int(105, #t~string160.base, 2 + #t~string160.offset, 1);call write~init~int(0, #t~string160.base, 3 + #t~string160.offset, 1);call #t~string163.base, #t~string163.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string163.base, #t~string163.offset, 1);call write~init~int(37, #t~string163.base, 1 + #t~string163.offset, 1);call write~init~int(105, #t~string163.base, 2 + #t~string163.offset, 1);call write~init~int(0, #t~string163.base, 3 + #t~string163.offset, 1);call #t~string165.base, #t~string165.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string165.base, #t~string165.offset, 1);call write~init~int(0, #t~string165.base, 1 + #t~string165.offset, 1);~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 135569#L-1 havoc main_#res;havoc main_#t~ret20, main_~retValue_acc~1, main_~tmp~8;havoc main_~retValue_acc~1;havoc main_~tmp~8; 135139#L1866 havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 131309#L1874 main_#t~ret20 := valid_product_#res;main_~tmp~8 := main_#t~ret20;havoc main_#t~ret20; 131310#L395 assume 0 != main_~tmp~8; 134211#L368 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 132496#L702 havoc bobCall_#t~ret8, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 132497#L454 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 132975#L479 bobCall_#t~ret8 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret8;havoc bobCall_#t~ret8;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 131278#L980 assume 0 == initPersonOnFloor_~floor; 131279#L981 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 130634#L1088-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 135309#L772 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 131594#L784-2 havoc timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_#t~ret32, __utac_acc__Specification3_spec__1_#t~ret33, __utac_acc__Specification3_spec__1_#t~ret34, __utac_acc__Specification3_spec__1_#t~ret35, __utac_acc__Specification3_spec__1_#t~ret36, __utac_acc__Specification3_spec__1_#t~ret37, __utac_acc__Specification3_spec__1_#t~ret38, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 130840#L2102 __utac_acc__Specification3_spec__1_#t~ret27 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 130841#L2154 __utac_acc__Specification3_spec__1_#t~ret28 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret28;havoc __utac_acc__Specification3_spec__1_#t~ret28; 132754#L1315 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 132755#L1316 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 131819#L2119 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 130749#L2140 __utac_acc__Specification3_spec__1_#t~ret29 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret29;havoc __utac_acc__Specification3_spec__1_#t~ret29; 130750#L1320 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 131483#L1421 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret95, stopRequestedAtCurrentFloor_#t~ret96, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 131504#L709 assume !(0 == isFloorCalling_~floorID); 133249#L713 assume !(1 == isFloorCalling_~floorID); 133250#L717 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 130827#L736 stopRequestedAtCurrentFloor_#t~ret95 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret95;havoc stopRequestedAtCurrentFloor_#t~ret95; 132610#L2715 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 131661#L2119-10 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 131291#L2140-10 stopRequestedAtCurrentFloor_#t~ret96 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret96;havoc stopRequestedAtCurrentFloor_#t~ret96; 131292#L2722 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 136258#L2727 timeShift_#t~ret109 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 136565#L2864 assume !(0 != timeShift_~tmp___9~3); 135888#L2955 assume !(1 == ~doorState~0); 134611#L2955-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_#t~ret87, stopRequestedInDirection_#t~ret88, stopRequestedInDirection_#t~ret89, stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 133289#L2306 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~7;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~7;isTopFloor_~retValue_acc~7 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~7; 133291#L1283 stopRequestedInDirection_#t~ret83 := isTopFloor_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret83;havoc stopRequestedInDirection_#t~ret83; 136186#L2310 assume 0 != stopRequestedInDirection_~tmp~18;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 130652#L2628 timeShift_#t~ret116 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret116;havoc timeShift_#t~ret116; 133831#L2963 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 130889#L2682 assume !(1 == ~currentHeading~0); 130890#L2692 assume !(0 == ~currentFloorID~0); 133588#L2692-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 135113#L2698-5 havoc __utac_acc__Specification3_spec__2_#t~ret39, __utac_acc__Specification3_spec__2_#t~ret40, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 137923#L1446 assume !(-1 == ~expectedDirection~0); 133482#L1458 assume !(1 == ~expectedDirection~0); 133483#L1459 havoc timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_#t~ret32, __utac_acc__Specification3_spec__1_#t~ret33, __utac_acc__Specification3_spec__1_#t~ret34, __utac_acc__Specification3_spec__1_#t~ret35, __utac_acc__Specification3_spec__1_#t~ret36, __utac_acc__Specification3_spec__1_#t~ret37, __utac_acc__Specification3_spec__1_#t~ret38, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 137920#L2102-1 __utac_acc__Specification3_spec__1_#t~ret27 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 137919#L2154-3 __utac_acc__Specification3_spec__1_#t~ret28 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret28;havoc __utac_acc__Specification3_spec__1_#t~ret28; 137917#L1315-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 137918#L1377-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 137922#L1387-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 137921#L1398-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 137915#L1409-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 137888#L1420-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 137885#L1421-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret95, stopRequestedAtCurrentFloor_#t~ret96, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 137879#L709-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 137874#L736-21 stopRequestedAtCurrentFloor_#t~ret95 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret95;havoc stopRequestedAtCurrentFloor_#t~ret95; 137870#L2715-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 137871#L2119-21 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 137875#L2140-21 stopRequestedAtCurrentFloor_#t~ret96 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret96;havoc stopRequestedAtCurrentFloor_#t~ret96; 137872#L2722-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 137873#L2727-1 timeShift_#t~ret109 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 136956#L2864-1 assume !(0 != timeShift_~tmp___9~3); 136340#L2955-3 assume !(1 == ~doorState~0); 133589#L2955-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_#t~ret87, stopRequestedInDirection_#t~ret88, stopRequestedInDirection_#t~ret89, stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 132053#L2306-2 assume !(1 == stopRequestedInDirection_~dir); 132054#L2475-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 136514#L2628-2 timeShift_#t~ret116 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret116;havoc timeShift_#t~ret116; 136512#L2963-1 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 136513#L2682-3 assume !(1 == ~currentHeading~0); 136568#L2692-9 assume !(0 == ~currentFloorID~0); 131681#L2692-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 131384#L2698-11 havoc __utac_acc__Specification3_spec__2_#t~ret39, __utac_acc__Specification3_spec__2_#t~ret40, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 137159#L1446-1 assume !(-1 == ~expectedDirection~0); 137160#L1458-1 assume !(1 == ~expectedDirection~0); 137060#L1459-1 havoc timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_#t~ret32, __utac_acc__Specification3_spec__1_#t~ret33, __utac_acc__Specification3_spec__1_#t~ret34, __utac_acc__Specification3_spec__1_#t~ret35, __utac_acc__Specification3_spec__1_#t~ret36, __utac_acc__Specification3_spec__1_#t~ret37, __utac_acc__Specification3_spec__1_#t~ret38, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 137061#L2102-2 __utac_acc__Specification3_spec__1_#t~ret27 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 137024#L2154-6 __utac_acc__Specification3_spec__1_#t~ret28 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret28;havoc __utac_acc__Specification3_spec__1_#t~ret28; 137025#L1315-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 137014#L1377-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 137013#L1387-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 137012#L1398-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 137011#L1409-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 136984#L1420-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 136981#L1421-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret95, stopRequestedAtCurrentFloor_#t~ret96, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 136979#L709-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 136975#L736-42 stopRequestedAtCurrentFloor_#t~ret95 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret95;havoc stopRequestedAtCurrentFloor_#t~ret95; 136974#L2715-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 136972#L2119-32 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 136968#L2140-32 stopRequestedAtCurrentFloor_#t~ret96 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret96;havoc stopRequestedAtCurrentFloor_#t~ret96; 136967#L2722-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 136966#L2727-2 timeShift_#t~ret109 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 136960#L2864-2 assume !(0 != timeShift_~tmp___9~3); 135141#L2955-6 assume !(1 == ~doorState~0); 135142#L2955-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_#t~ret87, stopRequestedInDirection_#t~ret88, stopRequestedInDirection_#t~ret89, stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 133713#L2306-4 assume !(1 == stopRequestedInDirection_~dir); 133714#L2475-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 131904#L2628-4 timeShift_#t~ret116 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret116;havoc timeShift_#t~ret116; 132320#L2963-2 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 131642#L2682-6 assume !(1 == ~currentHeading~0); 131644#L2692-18 assume !(0 == ~currentFloorID~0); 130760#L2692-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 131434#L2698-17 havoc __utac_acc__Specification3_spec__2_#t~ret39, __utac_acc__Specification3_spec__2_#t~ret40, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 133350#L1446-2 assume !(-1 == ~expectedDirection~0); 135336#L1458-2 assume !(1 == ~expectedDirection~0); 133800#L1459-2 havoc bobCall_#t~ret8, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 132864#L454-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 132865#L479-1 bobCall_#t~ret8 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret8;havoc bobCall_#t~ret8;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 133442#L980-1 assume 0 == initPersonOnFloor_~floor; 134918#L981-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 131264#L1088-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 132818#L772-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 130896#L784-5 havoc cleanup_#t~ret14, cleanup_#t~ret15, cleanup_~i~0, cleanup_~tmp~6, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~0;havoc cleanup_~i~0;havoc cleanup_~tmp~6;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_#t~ret32, __utac_acc__Specification3_spec__1_#t~ret33, __utac_acc__Specification3_spec__1_#t~ret34, __utac_acc__Specification3_spec__1_#t~ret35, __utac_acc__Specification3_spec__1_#t~ret36, __utac_acc__Specification3_spec__1_#t~ret37, __utac_acc__Specification3_spec__1_#t~ret38, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 132238#L2102-3 __utac_acc__Specification3_spec__1_#t~ret27 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 132753#L2154-9 __utac_acc__Specification3_spec__1_#t~ret28 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret28;havoc __utac_acc__Specification3_spec__1_#t~ret28; 131232#L1315-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 131234#L1377-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 136812#L1387-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 136799#L1398-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 136797#L1409-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 136773#L1420-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 136767#L1421-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret95, stopRequestedAtCurrentFloor_#t~ret96, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 136765#L709-63 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 136761#L736-63 stopRequestedAtCurrentFloor_#t~ret95 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret95;havoc stopRequestedAtCurrentFloor_#t~ret95; 136760#L2715-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 136759#L2119-43 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 136754#L2140-43 stopRequestedAtCurrentFloor_#t~ret96 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret96;havoc stopRequestedAtCurrentFloor_#t~ret96; 136749#L2722-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 136745#L2727-3 timeShift_#t~ret109 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 136742#L2864-3 assume !(0 != timeShift_~tmp___9~3); 136741#L2955-9 assume !(1 == ~doorState~0); 136733#L2955-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_#t~ret87, stopRequestedInDirection_#t~ret88, stopRequestedInDirection_#t~ret89, stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 136723#L2306-6 assume !(1 == stopRequestedInDirection_~dir); 136701#L2475-6 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 136691#L2628-6 timeShift_#t~ret116 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret116;havoc timeShift_#t~ret116; 136685#L2963-3 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 136504#L2682-9 assume !(1 == ~currentHeading~0); 136456#L2692-27 assume !(0 == ~currentFloorID~0); 134278#L2692-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 133867#L2698-23 havoc __utac_acc__Specification3_spec__2_#t~ret39, __utac_acc__Specification3_spec__2_#t~ret40, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 136394#L1446-3 assume !(-1 == ~expectedDirection~0); 138640#L1458-3 assume !(1 == ~expectedDirection~0); 138635#L1459-3 cleanup_~i~0 := 0; 138598#L198-2 [2021-11-09 09:20:21,264 INFO L793 eck$LassoCheckResult]: Loop: 138598#L198-2 assume !false; 138597#L199 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 138596#L202 assume cleanup_~i~0 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 138595#L1973 cleanup_#t~ret14 := isBlocked_#res;cleanup_~tmp___0~0 := cleanup_#t~ret14;havoc cleanup_#t~ret14; 138594#L206 assume 1 != cleanup_~tmp___0~0; 138591#L206-1 havoc isIdle_#res;havoc isIdle_#t~ret82, isIdle_~retValue_acc~20, isIdle_~tmp~17;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~17;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret77, anyStopRequested_#t~ret78, anyStopRequested_#t~ret79, anyStopRequested_#t~ret80, anyStopRequested_#t~ret81, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~16, anyStopRequested_~tmp___0~6, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~16;havoc anyStopRequested_~tmp___0~6;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~1;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 138589#L709-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 138568#L736-84 anyStopRequested_#t~ret77 := isFloorCalling_#res;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret77;havoc anyStopRequested_#t~ret77; 138557#L2210 assume 0 != anyStopRequested_~tmp___3~1;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 138552#L2274 isIdle_#t~ret82 := anyStopRequested_#res;isIdle_~tmp~17 := isIdle_#t~ret82;havoc isIdle_#t~ret82;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~17 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 138551#L2287 cleanup_#t~ret15 := isIdle_#res;cleanup_~tmp~6 := cleanup_#t~ret15;havoc cleanup_#t~ret15; 138550#L218 assume !(0 != cleanup_~tmp~6);havoc timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_#t~ret32, __utac_acc__Specification3_spec__1_#t~ret33, __utac_acc__Specification3_spec__1_#t~ret34, __utac_acc__Specification3_spec__1_#t~ret35, __utac_acc__Specification3_spec__1_#t~ret36, __utac_acc__Specification3_spec__1_#t~ret37, __utac_acc__Specification3_spec__1_#t~ret38, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 138549#L2102-4 __utac_acc__Specification3_spec__1_#t~ret27 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 131187#L2154-12 __utac_acc__Specification3_spec__1_#t~ret28 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret28;havoc __utac_acc__Specification3_spec__1_#t~ret28; 131188#L1315-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 138531#L1377-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 136673#L1387-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 136672#L1398-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 136671#L1409-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 136644#L1420-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 136641#L1421-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret95, stopRequestedAtCurrentFloor_#t~ret96, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 136639#L709-89 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 136635#L736-89 stopRequestedAtCurrentFloor_#t~ret95 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret95;havoc stopRequestedAtCurrentFloor_#t~ret95; 136634#L2715-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 136633#L2119-54 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 136628#L2140-54 stopRequestedAtCurrentFloor_#t~ret96 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret96;havoc stopRequestedAtCurrentFloor_#t~ret96; 136625#L2722-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 136624#L2727-4 timeShift_#t~ret109 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 136622#L2864-4 assume !(0 != timeShift_~tmp___9~3); 136618#L2955-12 assume 1 == ~doorState~0;~doorState~0 := 0; 136616#L2955-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_#t~ret87, stopRequestedInDirection_#t~ret88, stopRequestedInDirection_#t~ret89, stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 136615#L2306-8 assume !(1 == stopRequestedInDirection_~dir); 136576#L2475-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 136571#L2628-8 timeShift_#t~ret116 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret116;havoc timeShift_#t~ret116; 136570#L2963-4 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 136567#L2682-12 assume !(1 == ~currentHeading~0); 136566#L2692-36 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 133143#L2692-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 131771#L2698-29 havoc __utac_acc__Specification3_spec__2_#t~ret39, __utac_acc__Specification3_spec__2_#t~ret40, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 138643#L1446-4 assume !(-1 == ~expectedDirection~0); 138637#L1458-4 assume !(1 == ~expectedDirection~0); 138634#L1459-4 cleanup_~i~0 := 1 + cleanup_~i~0; 138598#L198-2 [2021-11-09 09:20:21,265 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-09 09:20:21,265 INFO L85 PathProgramCache]: Analyzing trace with hash 2133739712, now seen corresponding path program 1 times [2021-11-09 09:20:21,265 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-09 09:20:21,265 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1356959636] [2021-11-09 09:20:21,265 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-09 09:20:21,266 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-09 09:20:21,288 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-09 09:20:21,331 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-09 09:20:21,332 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-09 09:20:21,332 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1356959636] [2021-11-09 09:20:21,332 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1356959636] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-09 09:20:21,332 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-09 09:20:21,332 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-11-09 09:20:21,333 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [774385752] [2021-11-09 09:20:21,333 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-11-09 09:20:21,333 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-09 09:20:21,334 INFO L85 PathProgramCache]: Analyzing trace with hash 649255940, now seen corresponding path program 1 times [2021-11-09 09:20:21,334 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-09 09:20:21,334 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [640738411] [2021-11-09 09:20:21,334 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-09 09:20:21,334 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-09 09:20:21,344 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-09 09:20:21,379 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-09 09:20:21,379 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-09 09:20:21,380 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [640738411] [2021-11-09 09:20:21,380 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [640738411] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-09 09:20:21,380 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-09 09:20:21,380 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-11-09 09:20:21,381 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [974339371] [2021-11-09 09:20:21,381 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-11-09 09:20:21,381 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-09 09:20:21,382 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-11-09 09:20:21,382 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2021-11-09 09:20:21,382 INFO L87 Difference]: Start difference. First operand 12581 states and 23567 transitions. cyclomatic complexity: 10987 Second operand has 7 states, 7 states have (on average 6.0) internal successors, (42), 7 states have internal predecessors, (42), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-09 09:20:25,054 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-09 09:20:25,054 INFO L93 Difference]: Finished difference Result 73473 states and 138445 transitions. [2021-11-09 09:20:25,055 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 20 states. [2021-11-09 09:20:25,055 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 73473 states and 138445 transitions. [2021-11-09 09:20:25,463 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 27304 [2021-11-09 09:20:25,694 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 73473 states to 73473 states and 138445 transitions. [2021-11-09 09:20:25,694 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 73473 [2021-11-09 09:20:25,754 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 73473 [2021-11-09 09:20:25,754 INFO L73 IsDeterministic]: Start isDeterministic. Operand 73473 states and 138445 transitions. [2021-11-09 09:20:25,993 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-11-09 09:20:25,993 INFO L681 BuchiCegarLoop]: Abstraction has 73473 states and 138445 transitions. [2021-11-09 09:20:26,039 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 73473 states and 138445 transitions. [2021-11-09 09:20:26,542 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 73473 to 25131. [2021-11-09 09:20:26,570 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 25131 states, 25131 states have (on average 1.8726274322549838) internal successors, (47061), 25130 states have internal predecessors, (47061), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-09 09:20:26,836 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 25131 states to 25131 states and 47061 transitions. [2021-11-09 09:20:26,836 INFO L704 BuchiCegarLoop]: Abstraction has 25131 states and 47061 transitions. [2021-11-09 09:20:26,836 INFO L587 BuchiCegarLoop]: Abstraction has 25131 states and 47061 transitions. [2021-11-09 09:20:26,836 INFO L425 BuchiCegarLoop]: ======== Iteration 6============ [2021-11-09 09:20:26,837 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 25131 states and 47061 transitions. [2021-11-09 09:20:26,942 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 5936 [2021-11-09 09:20:26,942 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-11-09 09:20:26,942 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-11-09 09:20:26,946 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-09 09:20:26,946 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-09 09:20:26,947 INFO L791 eck$LassoCheckResult]: Stem: 221967#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(2);call write~init~int(48, #t~string4.base, #t~string4.offset, 1);call write~init~int(0, #t~string4.base, 1 + #t~string4.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(31);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(12);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(30);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(9);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(21);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(30);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(9);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(21);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(30);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(9);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(25);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(30);call #t~string72.base, #t~string72.offset := #Ultimate.allocOnStack(9);call #t~string73.base, #t~string73.offset := #Ultimate.allocOnStack(25);call #t~string120.base, #t~string120.offset := #Ultimate.allocOnStack(10);call #t~string122.base, #t~string122.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string122.base, #t~string122.offset, 1);call write~init~int(95, #t~string122.base, 1 + #t~string122.offset, 1);call write~init~int(93, #t~string122.base, 2 + #t~string122.offset, 1);call write~init~int(0, #t~string122.base, 3 + #t~string122.offset, 1);call #t~string124.base, #t~string124.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string124.base, #t~string124.offset, 1);call write~init~int(93, #t~string124.base, 1 + #t~string124.offset, 1);call write~init~int(32, #t~string124.base, 2 + #t~string124.offset, 1);call write~init~int(0, #t~string124.base, 3 + #t~string124.offset, 1);call #t~string126.base, #t~string126.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string126.base, #t~string126.offset, 1);call write~init~int(97, #t~string126.base, 1 + #t~string126.offset, 1);call write~init~int(116, #t~string126.base, 2 + #t~string126.offset, 1);call write~init~int(32, #t~string126.base, 3 + #t~string126.offset, 1);call write~init~int(0, #t~string126.base, 4 + #t~string126.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string128.base, #t~string128.offset, 1);call write~init~int(105, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 2 + #t~string128.offset, 1);call #t~string130.base, #t~string130.offset := #Ultimate.allocOnStack(10);call #t~string132.base, #t~string132.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string132.base, #t~string132.offset, 1);call write~init~int(112, #t~string132.base, 1 + #t~string132.offset, 1);call write~init~int(0, #t~string132.base, 2 + #t~string132.offset, 1);call #t~string134.base, #t~string134.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string134.base, #t~string134.offset, 1);call write~init~int(111, #t~string134.base, 1 + #t~string134.offset, 1);call write~init~int(119, #t~string134.base, 2 + #t~string134.offset, 1);call write~init~int(110, #t~string134.base, 3 + #t~string134.offset, 1);call write~init~int(0, #t~string134.base, 4 + #t~string134.offset, 1);call #t~string136.base, #t~string136.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string136.base, #t~string136.offset, 1);call write~init~int(73, #t~string136.base, 1 + #t~string136.offset, 1);call write~init~int(76, #t~string136.base, 2 + #t~string136.offset, 1);call write~init~int(95, #t~string136.base, 3 + #t~string136.offset, 1);call write~init~int(112, #t~string136.base, 4 + #t~string136.offset, 1);call write~init~int(58, #t~string136.base, 5 + #t~string136.offset, 1);call write~init~int(0, #t~string136.base, 6 + #t~string136.offset, 1);call #t~string138.base, #t~string138.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string138.base, #t~string138.offset, 1);call write~init~int(37, #t~string138.base, 1 + #t~string138.offset, 1);call write~init~int(105, #t~string138.base, 2 + #t~string138.offset, 1);call write~init~int(0, #t~string138.base, 3 + #t~string138.offset, 1);call #t~string140.base, #t~string140.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string140.base, #t~string140.offset, 1);call write~init~int(37, #t~string140.base, 1 + #t~string140.offset, 1);call write~init~int(105, #t~string140.base, 2 + #t~string140.offset, 1);call write~init~int(0, #t~string140.base, 3 + #t~string140.offset, 1);call #t~string142.base, #t~string142.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string142.base, #t~string142.offset, 1);call write~init~int(37, #t~string142.base, 1 + #t~string142.offset, 1);call write~init~int(105, #t~string142.base, 2 + #t~string142.offset, 1);call write~init~int(0, #t~string142.base, 3 + #t~string142.offset, 1);call #t~string144.base, #t~string144.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string144.base, #t~string144.offset, 1);call write~init~int(37, #t~string144.base, 1 + #t~string144.offset, 1);call write~init~int(105, #t~string144.base, 2 + #t~string144.offset, 1);call write~init~int(0, #t~string144.base, 3 + #t~string144.offset, 1);call #t~string146.base, #t~string146.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string146.base, #t~string146.offset, 1);call write~init~int(37, #t~string146.base, 1 + #t~string146.offset, 1);call write~init~int(105, #t~string146.base, 2 + #t~string146.offset, 1);call write~init~int(0, #t~string146.base, 3 + #t~string146.offset, 1);call #t~string148.base, #t~string148.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string148.base, #t~string148.offset, 1);call write~init~int(70, #t~string148.base, 1 + #t~string148.offset, 1);call write~init~int(95, #t~string148.base, 2 + #t~string148.offset, 1);call write~init~int(112, #t~string148.base, 3 + #t~string148.offset, 1);call write~init~int(58, #t~string148.base, 4 + #t~string148.offset, 1);call write~init~int(0, #t~string148.base, 5 + #t~string148.offset, 1);call #t~string151.base, #t~string151.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string151.base, #t~string151.offset, 1);call write~init~int(37, #t~string151.base, 1 + #t~string151.offset, 1);call write~init~int(105, #t~string151.base, 2 + #t~string151.offset, 1);call write~init~int(0, #t~string151.base, 3 + #t~string151.offset, 1);call #t~string154.base, #t~string154.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string154.base, #t~string154.offset, 1);call write~init~int(37, #t~string154.base, 1 + #t~string154.offset, 1);call write~init~int(105, #t~string154.base, 2 + #t~string154.offset, 1);call write~init~int(0, #t~string154.base, 3 + #t~string154.offset, 1);call #t~string157.base, #t~string157.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string157.base, #t~string157.offset, 1);call write~init~int(37, #t~string157.base, 1 + #t~string157.offset, 1);call write~init~int(105, #t~string157.base, 2 + #t~string157.offset, 1);call write~init~int(0, #t~string157.base, 3 + #t~string157.offset, 1);call #t~string160.base, #t~string160.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string160.base, #t~string160.offset, 1);call write~init~int(37, #t~string160.base, 1 + #t~string160.offset, 1);call write~init~int(105, #t~string160.base, 2 + #t~string160.offset, 1);call write~init~int(0, #t~string160.base, 3 + #t~string160.offset, 1);call #t~string163.base, #t~string163.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string163.base, #t~string163.offset, 1);call write~init~int(37, #t~string163.base, 1 + #t~string163.offset, 1);call write~init~int(105, #t~string163.base, 2 + #t~string163.offset, 1);call write~init~int(0, #t~string163.base, 3 + #t~string163.offset, 1);call #t~string165.base, #t~string165.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string165.base, #t~string165.offset, 1);call write~init~int(0, #t~string165.base, 1 + #t~string165.offset, 1);~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 221968#L-1 havoc main_#res;havoc main_#t~ret20, main_~retValue_acc~1, main_~tmp~8;havoc main_~retValue_acc~1;havoc main_~tmp~8; 221456#L1866 havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 217418#L1874 main_#t~ret20 := valid_product_#res;main_~tmp~8 := main_#t~ret20;havoc main_#t~ret20; 217419#L395 assume 0 != main_~tmp~8; 220434#L368 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 218632#L702 havoc bobCall_#t~ret8, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 218633#L454 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 219135#L479 bobCall_#t~ret8 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret8;havoc bobCall_#t~ret8;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 217387#L980 assume 0 == initPersonOnFloor_~floor; 217388#L981 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 216740#L1088-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 221653#L772 assume !(0 == callOnFloor_~floorID); 221655#L775 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 217712#L784-2 havoc timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_#t~ret32, __utac_acc__Specification3_spec__1_#t~ret33, __utac_acc__Specification3_spec__1_#t~ret34, __utac_acc__Specification3_spec__1_#t~ret35, __utac_acc__Specification3_spec__1_#t~ret36, __utac_acc__Specification3_spec__1_#t~ret37, __utac_acc__Specification3_spec__1_#t~ret38, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 216947#L2102 __utac_acc__Specification3_spec__1_#t~ret27 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 216948#L2154 __utac_acc__Specification3_spec__1_#t~ret28 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret28;havoc __utac_acc__Specification3_spec__1_#t~ret28; 218904#L1315 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 218905#L1316 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 217946#L2119 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 216857#L2140 __utac_acc__Specification3_spec__1_#t~ret29 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret29;havoc __utac_acc__Specification3_spec__1_#t~ret29; 216858#L1320 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 217619#L1421 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret95, stopRequestedAtCurrentFloor_#t~ret96, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 217620#L709 assume !(0 == isFloorCalling_~floorID); 219423#L713 assume !(1 == isFloorCalling_~floorID); 219424#L717 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 221534#L736 stopRequestedAtCurrentFloor_#t~ret95 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret95;havoc stopRequestedAtCurrentFloor_#t~ret95; 221535#L2715 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 217782#L2119-10 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 217400#L2140-10 stopRequestedAtCurrentFloor_#t~ret96 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret96;havoc stopRequestedAtCurrentFloor_#t~ret96; 217401#L2722 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 222836#L2727 timeShift_#t~ret109 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 223098#L2864 assume !(0 != timeShift_~tmp___9~3); 222352#L2955 assume !(1 == ~doorState~0); 220877#L2955-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_#t~ret87, stopRequestedInDirection_#t~ret88, stopRequestedInDirection_#t~ret89, stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 219469#L2306 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~7;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~7;isTopFloor_~retValue_acc~7 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~7; 219471#L1283 stopRequestedInDirection_#t~ret83 := isTopFloor_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret83;havoc stopRequestedInDirection_#t~ret83; 222731#L2310 assume 0 != stopRequestedInDirection_~tmp~18;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 216758#L2628 timeShift_#t~ret116 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret116;havoc timeShift_#t~ret116; 220042#L2963 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 222717#L2682 assume !(1 == ~currentHeading~0); 223559#L2692 assume !(0 == ~currentFloorID~0); 223331#L2692-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 223330#L2698-5 havoc __utac_acc__Specification3_spec__2_#t~ret39, __utac_acc__Specification3_spec__2_#t~ret40, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 223328#L1446 assume !(-1 == ~expectedDirection~0); 223324#L1458 assume !(1 == ~expectedDirection~0); 223323#L1459 havoc timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_#t~ret32, __utac_acc__Specification3_spec__1_#t~ret33, __utac_acc__Specification3_spec__1_#t~ret34, __utac_acc__Specification3_spec__1_#t~ret35, __utac_acc__Specification3_spec__1_#t~ret36, __utac_acc__Specification3_spec__1_#t~ret37, __utac_acc__Specification3_spec__1_#t~ret38, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 223322#L2102-1 __utac_acc__Specification3_spec__1_#t~ret27 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 223321#L2154-3 __utac_acc__Specification3_spec__1_#t~ret28 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret28;havoc __utac_acc__Specification3_spec__1_#t~ret28; 223282#L1315-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 223280#L1377-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 223279#L1387-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 223276#L1398-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 223260#L1409-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 223251#L1420-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 223246#L1421-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret95, stopRequestedAtCurrentFloor_#t~ret96, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 223244#L709-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 223240#L736-21 stopRequestedAtCurrentFloor_#t~ret95 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret95;havoc stopRequestedAtCurrentFloor_#t~ret95; 223239#L2715-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 223237#L2119-21 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 223233#L2140-21 stopRequestedAtCurrentFloor_#t~ret96 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret96;havoc stopRequestedAtCurrentFloor_#t~ret96; 223232#L2722-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 223231#L2727-1 timeShift_#t~ret109 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 223230#L2864-1 assume !(0 != timeShift_~tmp___9~3); 223228#L2955-3 assume !(1 == ~doorState~0); 223226#L2955-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_#t~ret87, stopRequestedInDirection_#t~ret88, stopRequestedInDirection_#t~ret89, stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 223224#L2306-2 assume !(1 == stopRequestedInDirection_~dir); 223180#L2475-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 223164#L2628-2 timeShift_#t~ret116 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret116;havoc timeShift_#t~ret116; 223162#L2963-1 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 223163#L2682-3 assume !(1 == ~currentHeading~0); 223675#L2692-9 assume !(0 == ~currentFloorID~0); 217802#L2692-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 217495#L2698-11 havoc __utac_acc__Specification3_spec__2_#t~ret39, __utac_acc__Specification3_spec__2_#t~ret40, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 225983#L1446-1 assume !(-1 == ~expectedDirection~0); 225977#L1458-1 assume !(1 == ~expectedDirection~0); 225973#L1459-1 havoc timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_#t~ret32, __utac_acc__Specification3_spec__1_#t~ret33, __utac_acc__Specification3_spec__1_#t~ret34, __utac_acc__Specification3_spec__1_#t~ret35, __utac_acc__Specification3_spec__1_#t~ret36, __utac_acc__Specification3_spec__1_#t~ret37, __utac_acc__Specification3_spec__1_#t~ret38, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 225971#L2102-2 __utac_acc__Specification3_spec__1_#t~ret27 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 225969#L2154-6 __utac_acc__Specification3_spec__1_#t~ret28 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret28;havoc __utac_acc__Specification3_spec__1_#t~ret28; 225966#L1315-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 225963#L1377-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 225872#L1387-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 225865#L1398-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 225855#L1409-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 223998#L1420-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 223966#L1421-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret95, stopRequestedAtCurrentFloor_#t~ret96, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 223964#L709-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 223960#L736-42 stopRequestedAtCurrentFloor_#t~ret95 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret95;havoc stopRequestedAtCurrentFloor_#t~ret95; 223959#L2715-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 223957#L2119-32 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 223953#L2140-32 stopRequestedAtCurrentFloor_#t~ret96 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret96;havoc stopRequestedAtCurrentFloor_#t~ret96; 223952#L2722-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 223951#L2727-2 timeShift_#t~ret109 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 223745#L2864-2 assume !(0 != timeShift_~tmp___9~3); 221458#L2955-6 assume !(1 == ~doorState~0); 221459#L2955-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_#t~ret87, stopRequestedInDirection_#t~ret88, stopRequestedInDirection_#t~ret89, stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 219913#L2306-4 assume !(1 == stopRequestedInDirection_~dir); 219914#L2475-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 223810#L2628-4 timeShift_#t~ret116 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret116;havoc timeShift_#t~ret116; 223806#L2963-2 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 217763#L2682-6 assume !(1 == ~currentHeading~0); 217765#L2692-18 assume !(0 == ~currentFloorID~0); 227608#L2692-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 227607#L2698-17 havoc __utac_acc__Specification3_spec__2_#t~ret39, __utac_acc__Specification3_spec__2_#t~ret40, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 227604#L1446-2 assume !(-1 == ~expectedDirection~0); 227601#L1458-2 assume !(1 == ~expectedDirection~0); 227600#L1459-2 havoc bobCall_#t~ret8, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 227598#L454-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 227593#L479-1 bobCall_#t~ret8 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret8;havoc bobCall_#t~ret8;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 227589#L980-1 assume 0 == initPersonOnFloor_~floor; 227564#L981-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 227557#L1088-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 227555#L772-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 227556#L784-5 havoc cleanup_#t~ret14, cleanup_#t~ret15, cleanup_~i~0, cleanup_~tmp~6, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~0;havoc cleanup_~i~0;havoc cleanup_~tmp~6;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_#t~ret32, __utac_acc__Specification3_spec__1_#t~ret33, __utac_acc__Specification3_spec__1_#t~ret34, __utac_acc__Specification3_spec__1_#t~ret35, __utac_acc__Specification3_spec__1_#t~ret36, __utac_acc__Specification3_spec__1_#t~ret37, __utac_acc__Specification3_spec__1_#t~ret38, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 227905#L2102-3 __utac_acc__Specification3_spec__1_#t~ret27 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 227904#L2154-9 __utac_acc__Specification3_spec__1_#t~ret28 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret28;havoc __utac_acc__Specification3_spec__1_#t~ret28; 227901#L1315-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 227543#L1377-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 227538#L2119-38 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 227530#L2140-38 __utac_acc__Specification3_spec__1_#t~ret34 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret34;havoc __utac_acc__Specification3_spec__1_#t~ret34; 226835#L1381-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 226832#L1421-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret95, stopRequestedAtCurrentFloor_#t~ret96, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 223902#L709-63 assume !(0 == isFloorCalling_~floorID); 223903#L713-63 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 232546#L736-63 stopRequestedAtCurrentFloor_#t~ret95 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret95;havoc stopRequestedAtCurrentFloor_#t~ret95; 232541#L2715-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 232543#L2119-43 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 232533#L2140-43 stopRequestedAtCurrentFloor_#t~ret96 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret96;havoc stopRequestedAtCurrentFloor_#t~ret96; 232534#L2722-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 232528#L2727-3 timeShift_#t~ret109 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 232529#L2864-3 assume !(0 != timeShift_~tmp___9~3); 223795#L2955-9 assume !(1 == ~doorState~0); 223778#L2955-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_#t~ret87, stopRequestedInDirection_#t~ret88, stopRequestedInDirection_#t~ret89, stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 223771#L2306-6 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~7;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~7;isTopFloor_~retValue_acc~7 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~7; 223761#L1283-15 stopRequestedInDirection_#t~ret83 := isTopFloor_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret83;havoc stopRequestedInDirection_#t~ret83; 223762#L2310-6 assume 0 != stopRequestedInDirection_~tmp~18;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 232345#L2628-6 timeShift_#t~ret116 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret116;havoc timeShift_#t~ret116; 232377#L2963-3 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 232376#L2682-9 assume !(1 == ~currentHeading~0); 232373#L2692-27 assume !(0 == ~currentFloorID~0); 222929#L2692-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 220079#L2698-23 havoc __utac_acc__Specification3_spec__2_#t~ret39, __utac_acc__Specification3_spec__2_#t~ret40, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 233551#L1446-3 assume !(-1 == ~expectedDirection~0); 233548#L1458-3 assume !(1 == ~expectedDirection~0); 233546#L1459-3 cleanup_~i~0 := 0; 233544#L198-2 [2021-11-09 09:20:26,948 INFO L793 eck$LassoCheckResult]: Loop: 233544#L198-2 assume !false; 232239#L199 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 232237#L202 assume cleanup_~i~0 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 232235#L1973 cleanup_#t~ret14 := isBlocked_#res;cleanup_~tmp___0~0 := cleanup_#t~ret14;havoc cleanup_#t~ret14; 232230#L206 assume 1 != cleanup_~tmp___0~0; 232220#L206-1 havoc isIdle_#res;havoc isIdle_#t~ret82, isIdle_~retValue_acc~20, isIdle_~tmp~17;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~17;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret77, anyStopRequested_#t~ret78, anyStopRequested_#t~ret79, anyStopRequested_#t~ret80, anyStopRequested_#t~ret81, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~16, anyStopRequested_~tmp___0~6, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~16;havoc anyStopRequested_~tmp___0~6;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~1;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 232218#L709-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 232219#L736-84 anyStopRequested_#t~ret77 := isFloorCalling_#res;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret77;havoc anyStopRequested_#t~ret77; 232186#L2210 assume 0 != anyStopRequested_~tmp___3~1;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 232179#L2274 isIdle_#t~ret82 := anyStopRequested_#res;isIdle_~tmp~17 := isIdle_#t~ret82;havoc isIdle_#t~ret82;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~17 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 232178#L2287 cleanup_#t~ret15 := isIdle_#res;cleanup_~tmp~6 := cleanup_#t~ret15;havoc cleanup_#t~ret15; 232177#L218 assume !(0 != cleanup_~tmp~6);havoc timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_#t~ret32, __utac_acc__Specification3_spec__1_#t~ret33, __utac_acc__Specification3_spec__1_#t~ret34, __utac_acc__Specification3_spec__1_#t~ret35, __utac_acc__Specification3_spec__1_#t~ret36, __utac_acc__Specification3_spec__1_#t~ret37, __utac_acc__Specification3_spec__1_#t~ret38, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 232176#L2102-4 __utac_acc__Specification3_spec__1_#t~ret27 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 232175#L2154-12 __utac_acc__Specification3_spec__1_#t~ret28 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret28;havoc __utac_acc__Specification3_spec__1_#t~ret28; 232173#L1315-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 232174#L1377-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 233611#L2119-49 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 233603#L2140-49 __utac_acc__Specification3_spec__1_#t~ret34 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret34;havoc __utac_acc__Specification3_spec__1_#t~ret34; 233582#L1381-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 233581#L1421-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret95, stopRequestedAtCurrentFloor_#t~ret96, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 231250#L709-89 assume !(0 == isFloorCalling_~floorID); 231251#L713-89 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 233578#L736-89 stopRequestedAtCurrentFloor_#t~ret95 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret95;havoc stopRequestedAtCurrentFloor_#t~ret95; 233572#L2715-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 233574#L2119-54 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 231231#L2140-54 stopRequestedAtCurrentFloor_#t~ret96 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret96;havoc stopRequestedAtCurrentFloor_#t~ret96; 231232#L2722-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 231226#L2727-4 timeShift_#t~ret109 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 231216#L2864-4 assume !(0 != timeShift_~tmp___9~3); 231186#L2955-12 assume 1 == ~doorState~0;~doorState~0 := 0; 231185#L2955-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_#t~ret87, stopRequestedInDirection_#t~ret88, stopRequestedInDirection_#t~ret89, stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 231175#L2306-8 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~7;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~7;isTopFloor_~retValue_acc~7 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~7; 231177#L1283-20 stopRequestedInDirection_#t~ret83 := isTopFloor_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret83;havoc stopRequestedInDirection_#t~ret83; 231178#L2310-8 assume 0 != stopRequestedInDirection_~tmp~18;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 233305#L2628-8 timeShift_#t~ret116 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret116;havoc timeShift_#t~ret116; 233392#L2963-4 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 231091#L2682-12 assume !(1 == ~currentHeading~0); 221573#L2692-36 assume !(0 == ~currentFloorID~0); 219312#L2692-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 217896#L2698-29 havoc __utac_acc__Specification3_spec__2_#t~ret39, __utac_acc__Specification3_spec__2_#t~ret40, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 233557#L1446-4 assume !(-1 == ~expectedDirection~0); 233554#L1458-4 assume !(1 == ~expectedDirection~0); 233545#L1459-4 cleanup_~i~0 := 1 + cleanup_~i~0; 233544#L198-2 [2021-11-09 09:20:26,949 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-09 09:20:26,949 INFO L85 PathProgramCache]: Analyzing trace with hash -1046251052, now seen corresponding path program 1 times [2021-11-09 09:20:26,950 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-09 09:20:26,950 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [567697497] [2021-11-09 09:20:26,950 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-09 09:20:26,950 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-09 09:20:26,977 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-09 09:20:27,022 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-09 09:20:27,023 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-09 09:20:27,023 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [567697497] [2021-11-09 09:20:27,023 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [567697497] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-09 09:20:27,023 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-09 09:20:27,024 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-11-09 09:20:27,024 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2077278305] [2021-11-09 09:20:27,025 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-11-09 09:20:27,026 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-09 09:20:27,026 INFO L85 PathProgramCache]: Analyzing trace with hash -168805024, now seen corresponding path program 1 times [2021-11-09 09:20:27,026 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-09 09:20:27,027 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [421935757] [2021-11-09 09:20:27,027 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-09 09:20:27,027 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-09 09:20:27,037 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-09 09:20:27,059 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-09 09:20:27,060 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-09 09:20:27,065 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [421935757] [2021-11-09 09:20:27,065 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [421935757] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-09 09:20:27,065 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-09 09:20:27,065 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-11-09 09:20:27,066 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [156793833] [2021-11-09 09:20:27,066 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-11-09 09:20:27,069 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-09 09:20:27,069 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-11-09 09:20:27,070 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-11-09 09:20:27,070 INFO L87 Difference]: Start difference. First operand 25131 states and 47061 transitions. cyclomatic complexity: 21931 Second operand has 5 states, 5 states have (on average 8.6) internal successors, (43), 5 states have internal predecessors, (43), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-09 09:20:32,692 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-09 09:20:32,692 INFO L93 Difference]: Finished difference Result 59725 states and 112257 transitions. [2021-11-09 09:20:32,693 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2021-11-09 09:20:32,693 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 59725 states and 112257 transitions. [2021-11-09 09:20:33,033 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 15328 [2021-11-09 09:20:33,203 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 59725 states to 59725 states and 112257 transitions. [2021-11-09 09:20:33,203 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 59725 [2021-11-09 09:20:33,255 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 59725 [2021-11-09 09:20:33,255 INFO L73 IsDeterministic]: Start isDeterministic. Operand 59725 states and 112257 transitions. [2021-11-09 09:20:33,302 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-11-09 09:20:33,302 INFO L681 BuchiCegarLoop]: Abstraction has 59725 states and 112257 transitions. [2021-11-09 09:20:33,339 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 59725 states and 112257 transitions. [2021-11-09 09:20:33,910 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 59725 to 24559. [2021-11-09 09:20:33,936 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 24559 states, 24559 states have (on average 1.8744655727024715) internal successors, (46035), 24558 states have internal predecessors, (46035), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-09 09:20:33,996 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 24559 states to 24559 states and 46035 transitions. [2021-11-09 09:20:33,996 INFO L704 BuchiCegarLoop]: Abstraction has 24559 states and 46035 transitions. [2021-11-09 09:20:33,996 INFO L587 BuchiCegarLoop]: Abstraction has 24559 states and 46035 transitions. [2021-11-09 09:20:33,996 INFO L425 BuchiCegarLoop]: ======== Iteration 7============ [2021-11-09 09:20:33,996 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 24559 states and 46035 transitions. [2021-11-09 09:20:34,068 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 5793 [2021-11-09 09:20:34,068 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-11-09 09:20:34,068 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-11-09 09:20:34,072 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-09 09:20:34,073 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-09 09:20:34,073 INFO L791 eck$LassoCheckResult]: Stem: 306649#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(2);call write~init~int(48, #t~string4.base, #t~string4.offset, 1);call write~init~int(0, #t~string4.base, 1 + #t~string4.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(31);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(12);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(30);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(9);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(21);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(30);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(9);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(21);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(30);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(9);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(25);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(30);call #t~string72.base, #t~string72.offset := #Ultimate.allocOnStack(9);call #t~string73.base, #t~string73.offset := #Ultimate.allocOnStack(25);call #t~string120.base, #t~string120.offset := #Ultimate.allocOnStack(10);call #t~string122.base, #t~string122.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string122.base, #t~string122.offset, 1);call write~init~int(95, #t~string122.base, 1 + #t~string122.offset, 1);call write~init~int(93, #t~string122.base, 2 + #t~string122.offset, 1);call write~init~int(0, #t~string122.base, 3 + #t~string122.offset, 1);call #t~string124.base, #t~string124.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string124.base, #t~string124.offset, 1);call write~init~int(93, #t~string124.base, 1 + #t~string124.offset, 1);call write~init~int(32, #t~string124.base, 2 + #t~string124.offset, 1);call write~init~int(0, #t~string124.base, 3 + #t~string124.offset, 1);call #t~string126.base, #t~string126.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string126.base, #t~string126.offset, 1);call write~init~int(97, #t~string126.base, 1 + #t~string126.offset, 1);call write~init~int(116, #t~string126.base, 2 + #t~string126.offset, 1);call write~init~int(32, #t~string126.base, 3 + #t~string126.offset, 1);call write~init~int(0, #t~string126.base, 4 + #t~string126.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string128.base, #t~string128.offset, 1);call write~init~int(105, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 2 + #t~string128.offset, 1);call #t~string130.base, #t~string130.offset := #Ultimate.allocOnStack(10);call #t~string132.base, #t~string132.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string132.base, #t~string132.offset, 1);call write~init~int(112, #t~string132.base, 1 + #t~string132.offset, 1);call write~init~int(0, #t~string132.base, 2 + #t~string132.offset, 1);call #t~string134.base, #t~string134.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string134.base, #t~string134.offset, 1);call write~init~int(111, #t~string134.base, 1 + #t~string134.offset, 1);call write~init~int(119, #t~string134.base, 2 + #t~string134.offset, 1);call write~init~int(110, #t~string134.base, 3 + #t~string134.offset, 1);call write~init~int(0, #t~string134.base, 4 + #t~string134.offset, 1);call #t~string136.base, #t~string136.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string136.base, #t~string136.offset, 1);call write~init~int(73, #t~string136.base, 1 + #t~string136.offset, 1);call write~init~int(76, #t~string136.base, 2 + #t~string136.offset, 1);call write~init~int(95, #t~string136.base, 3 + #t~string136.offset, 1);call write~init~int(112, #t~string136.base, 4 + #t~string136.offset, 1);call write~init~int(58, #t~string136.base, 5 + #t~string136.offset, 1);call write~init~int(0, #t~string136.base, 6 + #t~string136.offset, 1);call #t~string138.base, #t~string138.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string138.base, #t~string138.offset, 1);call write~init~int(37, #t~string138.base, 1 + #t~string138.offset, 1);call write~init~int(105, #t~string138.base, 2 + #t~string138.offset, 1);call write~init~int(0, #t~string138.base, 3 + #t~string138.offset, 1);call #t~string140.base, #t~string140.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string140.base, #t~string140.offset, 1);call write~init~int(37, #t~string140.base, 1 + #t~string140.offset, 1);call write~init~int(105, #t~string140.base, 2 + #t~string140.offset, 1);call write~init~int(0, #t~string140.base, 3 + #t~string140.offset, 1);call #t~string142.base, #t~string142.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string142.base, #t~string142.offset, 1);call write~init~int(37, #t~string142.base, 1 + #t~string142.offset, 1);call write~init~int(105, #t~string142.base, 2 + #t~string142.offset, 1);call write~init~int(0, #t~string142.base, 3 + #t~string142.offset, 1);call #t~string144.base, #t~string144.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string144.base, #t~string144.offset, 1);call write~init~int(37, #t~string144.base, 1 + #t~string144.offset, 1);call write~init~int(105, #t~string144.base, 2 + #t~string144.offset, 1);call write~init~int(0, #t~string144.base, 3 + #t~string144.offset, 1);call #t~string146.base, #t~string146.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string146.base, #t~string146.offset, 1);call write~init~int(37, #t~string146.base, 1 + #t~string146.offset, 1);call write~init~int(105, #t~string146.base, 2 + #t~string146.offset, 1);call write~init~int(0, #t~string146.base, 3 + #t~string146.offset, 1);call #t~string148.base, #t~string148.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string148.base, #t~string148.offset, 1);call write~init~int(70, #t~string148.base, 1 + #t~string148.offset, 1);call write~init~int(95, #t~string148.base, 2 + #t~string148.offset, 1);call write~init~int(112, #t~string148.base, 3 + #t~string148.offset, 1);call write~init~int(58, #t~string148.base, 4 + #t~string148.offset, 1);call write~init~int(0, #t~string148.base, 5 + #t~string148.offset, 1);call #t~string151.base, #t~string151.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string151.base, #t~string151.offset, 1);call write~init~int(37, #t~string151.base, 1 + #t~string151.offset, 1);call write~init~int(105, #t~string151.base, 2 + #t~string151.offset, 1);call write~init~int(0, #t~string151.base, 3 + #t~string151.offset, 1);call #t~string154.base, #t~string154.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string154.base, #t~string154.offset, 1);call write~init~int(37, #t~string154.base, 1 + #t~string154.offset, 1);call write~init~int(105, #t~string154.base, 2 + #t~string154.offset, 1);call write~init~int(0, #t~string154.base, 3 + #t~string154.offset, 1);call #t~string157.base, #t~string157.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string157.base, #t~string157.offset, 1);call write~init~int(37, #t~string157.base, 1 + #t~string157.offset, 1);call write~init~int(105, #t~string157.base, 2 + #t~string157.offset, 1);call write~init~int(0, #t~string157.base, 3 + #t~string157.offset, 1);call #t~string160.base, #t~string160.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string160.base, #t~string160.offset, 1);call write~init~int(37, #t~string160.base, 1 + #t~string160.offset, 1);call write~init~int(105, #t~string160.base, 2 + #t~string160.offset, 1);call write~init~int(0, #t~string160.base, 3 + #t~string160.offset, 1);call #t~string163.base, #t~string163.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string163.base, #t~string163.offset, 1);call write~init~int(37, #t~string163.base, 1 + #t~string163.offset, 1);call write~init~int(105, #t~string163.base, 2 + #t~string163.offset, 1);call write~init~int(0, #t~string163.base, 3 + #t~string163.offset, 1);call #t~string165.base, #t~string165.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string165.base, #t~string165.offset, 1);call write~init~int(0, #t~string165.base, 1 + #t~string165.offset, 1);~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 306650#L-1 havoc main_#res;havoc main_#t~ret20, main_~retValue_acc~1, main_~tmp~8;havoc main_~retValue_acc~1;havoc main_~tmp~8; 306193#L1866 havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 302294#L1874 main_#t~ret20 := valid_product_#res;main_~tmp~8 := main_#t~ret20;havoc main_#t~ret20; 302295#L395 assume 0 != main_~tmp~8; 305242#L368 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 303497#L702 havoc bobCall_#t~ret8, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 303498#L454 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 303986#L479 bobCall_#t~ret8 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret8;havoc bobCall_#t~ret8;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 302263#L980 assume 0 == initPersonOnFloor_~floor; 302264#L981 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 301618#L1088-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 306368#L772 assume !(0 == callOnFloor_~floorID); 306370#L775 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 302586#L784-2 havoc timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_#t~ret32, __utac_acc__Specification3_spec__1_#t~ret33, __utac_acc__Specification3_spec__1_#t~ret34, __utac_acc__Specification3_spec__1_#t~ret35, __utac_acc__Specification3_spec__1_#t~ret36, __utac_acc__Specification3_spec__1_#t~ret37, __utac_acc__Specification3_spec__1_#t~ret38, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 302587#L2102 __utac_acc__Specification3_spec__1_#t~ret27 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 307581#L2154 __utac_acc__Specification3_spec__1_#t~ret28 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret28;havoc __utac_acc__Specification3_spec__1_#t~ret28; 307582#L1315 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 304028#L1316 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 304030#L2119 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 301733#L2140 __utac_acc__Specification3_spec__1_#t~ret29 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret29;havoc __utac_acc__Specification3_spec__1_#t~ret29; 301734#L1320 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 302493#L1421 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret95, stopRequestedAtCurrentFloor_#t~ret96, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 302494#L709 assume !(0 == isFloorCalling_~floorID); 304263#L713 assume !(1 == isFloorCalling_~floorID); 304264#L717 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 306269#L736 stopRequestedAtCurrentFloor_#t~ret95 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret95;havoc stopRequestedAtCurrentFloor_#t~ret95; 303612#L2715 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 302654#L2119-10 assume !(0 == buttonForFloorIsPressed_~floorID); 302655#L2123-10 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 302276#L2140-10 stopRequestedAtCurrentFloor_#t~ret96 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret96;havoc stopRequestedAtCurrentFloor_#t~ret96; 302277#L2722 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 307409#L2727 timeShift_#t~ret109 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 307590#L2864 assume !(0 != timeShift_~tmp___9~3); 306996#L2955 assume !(1 == ~doorState~0); 305656#L2955-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_#t~ret87, stopRequestedInDirection_#t~ret88, stopRequestedInDirection_#t~ret89, stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 304306#L2306 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~7;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~7;isTopFloor_~retValue_acc~7 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~7; 304308#L1283 stopRequestedInDirection_#t~ret83 := isTopFloor_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret83;havoc stopRequestedInDirection_#t~ret83; 307315#L2310 assume 0 != stopRequestedInDirection_~tmp~18;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 301641#L2628 timeShift_#t~ret116 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret116;havoc timeShift_#t~ret116; 304857#L2963 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 301872#L2682 assume !(1 == ~currentHeading~0); 301873#L2692 assume !(0 == ~currentFloorID~0); 304607#L2692-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 313918#L2698-5 havoc __utac_acc__Specification3_spec__2_#t~ret39, __utac_acc__Specification3_spec__2_#t~ret40, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 313916#L1446 assume !(-1 == ~expectedDirection~0); 313912#L1458 assume !(1 == ~expectedDirection~0); 313911#L1459 havoc timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_#t~ret32, __utac_acc__Specification3_spec__1_#t~ret33, __utac_acc__Specification3_spec__1_#t~ret34, __utac_acc__Specification3_spec__1_#t~ret35, __utac_acc__Specification3_spec__1_#t~ret36, __utac_acc__Specification3_spec__1_#t~ret37, __utac_acc__Specification3_spec__1_#t~ret38, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 313910#L2102-1 __utac_acc__Specification3_spec__1_#t~ret27 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 313909#L2154-3 __utac_acc__Specification3_spec__1_#t~ret28 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret28;havoc __utac_acc__Specification3_spec__1_#t~ret28; 313906#L1315-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 313900#L1377-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 313896#L1387-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 313882#L1398-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 313874#L1409-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 313867#L1420-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 313864#L1421-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret95, stopRequestedAtCurrentFloor_#t~ret96, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 313862#L709-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 313861#L736-21 stopRequestedAtCurrentFloor_#t~ret95 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret95;havoc stopRequestedAtCurrentFloor_#t~ret95; 313859#L2715-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 313860#L2119-21 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 313999#L2140-21 stopRequestedAtCurrentFloor_#t~ret96 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret96;havoc stopRequestedAtCurrentFloor_#t~ret96; 313858#L2722-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 313856#L2727-1 timeShift_#t~ret109 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 313855#L2864-1 assume !(0 != timeShift_~tmp___9~3); 307522#L2955-3 assume !(1 == ~doorState~0); 304608#L2955-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_#t~ret87, stopRequestedInDirection_#t~ret88, stopRequestedInDirection_#t~ret89, stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 303047#L2306-2 assume !(1 == stopRequestedInDirection_~dir); 303048#L2475-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 325151#L2628-2 timeShift_#t~ret116 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret116;havoc timeShift_#t~ret116; 325148#L2963-1 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 325149#L2682-3 assume !(1 == ~currentHeading~0); 325207#L2692-9 assume !(0 == ~currentFloorID~0); 305372#L2692-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 312583#L2698-11 havoc __utac_acc__Specification3_spec__2_#t~ret39, __utac_acc__Specification3_spec__2_#t~ret40, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 312573#L1446-1 assume !(-1 == ~expectedDirection~0); 312574#L1458-1 assume !(1 == ~expectedDirection~0); 312567#L1459-1 havoc timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_#t~ret32, __utac_acc__Specification3_spec__1_#t~ret33, __utac_acc__Specification3_spec__1_#t~ret34, __utac_acc__Specification3_spec__1_#t~ret35, __utac_acc__Specification3_spec__1_#t~ret36, __utac_acc__Specification3_spec__1_#t~ret37, __utac_acc__Specification3_spec__1_#t~ret38, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 312568#L2102-2 __utac_acc__Specification3_spec__1_#t~ret27 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 312563#L2154-6 __utac_acc__Specification3_spec__1_#t~ret28 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret28;havoc __utac_acc__Specification3_spec__1_#t~ret28; 312564#L1315-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 320420#L1377-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 312562#L1387-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 312557#L1398-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 312553#L1409-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 312522#L1420-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 312485#L1421-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret95, stopRequestedAtCurrentFloor_#t~ret96, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 312478#L709-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 312348#L736-42 stopRequestedAtCurrentFloor_#t~ret95 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret95;havoc stopRequestedAtCurrentFloor_#t~ret95; 312344#L2715-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 312345#L2119-32 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 312347#L2140-32 stopRequestedAtCurrentFloor_#t~ret96 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret96;havoc stopRequestedAtCurrentFloor_#t~ret96; 312346#L2722-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 312343#L2727-2 timeShift_#t~ret109 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 312340#L2864-2 assume !(0 != timeShift_~tmp___9~3); 306196#L2955-6 assume !(1 == ~doorState~0); 306197#L2955-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_#t~ret87, stopRequestedInDirection_#t~ret88, stopRequestedInDirection_#t~ret89, stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 304730#L2306-4 assume !(1 == stopRequestedInDirection_~dir); 304731#L2475-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 325031#L2628-4 timeShift_#t~ret116 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret116;havoc timeShift_#t~ret116; 325029#L2963-2 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 325030#L2682-6 assume !(1 == ~currentHeading~0); 325206#L2692-18 assume !(0 == ~currentFloorID~0); 301741#L2692-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 311107#L2698-17 havoc __utac_acc__Specification3_spec__2_#t~ret39, __utac_acc__Specification3_spec__2_#t~ret40, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 311104#L1446-2 assume !(-1 == ~expectedDirection~0); 311101#L1458-2 assume !(1 == ~expectedDirection~0); 311100#L1459-2 havoc bobCall_#t~ret8, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 311092#L454-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 311087#L479-1 bobCall_#t~ret8 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret8;havoc bobCall_#t~ret8;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 311084#L980-1 assume 0 == initPersonOnFloor_~floor; 311085#L981-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 311050#L1088-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 311051#L772-2 assume !(0 == callOnFloor_~floorID); 318569#L775-2 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 311041#L784-5 havoc cleanup_#t~ret14, cleanup_#t~ret15, cleanup_~i~0, cleanup_~tmp~6, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~0;havoc cleanup_~i~0;havoc cleanup_~tmp~6;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_#t~ret32, __utac_acc__Specification3_spec__1_#t~ret33, __utac_acc__Specification3_spec__1_#t~ret34, __utac_acc__Specification3_spec__1_#t~ret35, __utac_acc__Specification3_spec__1_#t~ret36, __utac_acc__Specification3_spec__1_#t~ret37, __utac_acc__Specification3_spec__1_#t~ret38, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 311042#L2102-3 __utac_acc__Specification3_spec__1_#t~ret27 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 311037#L2154-9 __utac_acc__Specification3_spec__1_#t~ret28 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret28;havoc __utac_acc__Specification3_spec__1_#t~ret28; 311038#L1315-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 320370#L1377-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 311035#L1387-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 311031#L1398-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 311028#L1409-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 310997#L1420-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 310170#L1421-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret95, stopRequestedAtCurrentFloor_#t~ret96, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 310169#L709-63 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 310164#L736-63 stopRequestedAtCurrentFloor_#t~ret95 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret95;havoc stopRequestedAtCurrentFloor_#t~ret95; 310160#L2715-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 310161#L2119-43 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 310163#L2140-43 stopRequestedAtCurrentFloor_#t~ret96 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret96;havoc stopRequestedAtCurrentFloor_#t~ret96; 310162#L2722-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 310159#L2727-3 timeShift_#t~ret109 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 310156#L2864-3 assume !(0 != timeShift_~tmp___9~3); 302788#L2955-9 assume !(1 == ~doorState~0); 302789#L2955-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_#t~ret87, stopRequestedInDirection_#t~ret88, stopRequestedInDirection_#t~ret89, stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 302452#L2306-6 assume !(1 == stopRequestedInDirection_~dir); 302453#L2475-6 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 324977#L2628-6 timeShift_#t~ret116 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret116;havoc timeShift_#t~ret116; 324972#L2963-3 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 324973#L2682-9 assume !(1 == ~currentHeading~0); 326138#L2692-27 assume !(0 == ~currentFloorID~0); 305307#L2692-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 307770#L2698-23 havoc __utac_acc__Specification3_spec__2_#t~ret39, __utac_acc__Specification3_spec__2_#t~ret40, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 315700#L1446-3 assume !(-1 == ~expectedDirection~0); 315698#L1458-3 assume !(1 == ~expectedDirection~0); 307735#L1459-3 cleanup_~i~0 := 0; 307733#L198-2 [2021-11-09 09:20:34,074 INFO L793 eck$LassoCheckResult]: Loop: 307733#L198-2 assume !false; 307732#L199 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 307731#L202 assume cleanup_~i~0 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 307730#L1973 cleanup_#t~ret14 := isBlocked_#res;cleanup_~tmp___0~0 := cleanup_#t~ret14;havoc cleanup_#t~ret14; 307729#L206 assume 1 != cleanup_~tmp___0~0; 307728#L206-1 havoc isIdle_#res;havoc isIdle_#t~ret82, isIdle_~retValue_acc~20, isIdle_~tmp~17;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~17;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret77, anyStopRequested_#t~ret78, anyStopRequested_#t~ret79, anyStopRequested_#t~ret80, anyStopRequested_#t~ret81, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~16, anyStopRequested_~tmp___0~6, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~16;havoc anyStopRequested_~tmp___0~6;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~1;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 307715#L709-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 307709#L736-84 anyStopRequested_#t~ret77 := isFloorCalling_#res;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret77;havoc anyStopRequested_#t~ret77; 307710#L2210 assume !(0 != anyStopRequested_~tmp___3~1); 307678#L2214 assume 0 != ~floorButtons_0~0;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 307673#L2274 isIdle_#t~ret82 := anyStopRequested_#res;isIdle_~tmp~17 := isIdle_#t~ret82;havoc isIdle_#t~ret82;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~17 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 307668#L2287 cleanup_#t~ret15 := isIdle_#res;cleanup_~tmp~6 := cleanup_#t~ret15;havoc cleanup_#t~ret15; 307669#L218 assume !(0 != cleanup_~tmp~6);havoc timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_#t~ret32, __utac_acc__Specification3_spec__1_#t~ret33, __utac_acc__Specification3_spec__1_#t~ret34, __utac_acc__Specification3_spec__1_#t~ret35, __utac_acc__Specification3_spec__1_#t~ret36, __utac_acc__Specification3_spec__1_#t~ret37, __utac_acc__Specification3_spec__1_#t~ret38, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 307664#L2102-4 __utac_acc__Specification3_spec__1_#t~ret27 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 307665#L2154-12 __utac_acc__Specification3_spec__1_#t~ret28 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret28;havoc __utac_acc__Specification3_spec__1_#t~ret28; 307660#L1315-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 307661#L1377-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 307655#L1387-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 307653#L1398-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 307652#L1409-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 307616#L1420-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 307613#L1421-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret95, stopRequestedAtCurrentFloor_#t~ret96, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 307611#L709-89 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 307610#L736-89 stopRequestedAtCurrentFloor_#t~ret95 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret95;havoc stopRequestedAtCurrentFloor_#t~ret95; 307608#L2715-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 307605#L2119-54 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 307606#L2140-54 stopRequestedAtCurrentFloor_#t~ret96 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret96;havoc stopRequestedAtCurrentFloor_#t~ret96; 309547#L2722-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 309546#L2727-4 timeShift_#t~ret109 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 309545#L2864-4 assume !(0 != timeShift_~tmp___9~3); 306978#L2955-12 assume 1 == ~doorState~0;~doorState~0 := 0; 306979#L2955-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_#t~ret87, stopRequestedInDirection_#t~ret88, stopRequestedInDirection_#t~ret89, stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 306850#L2306-8 assume !(1 == stopRequestedInDirection_~dir); 306851#L2475-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 326076#L2628-8 timeShift_#t~ret116 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret116;havoc timeShift_#t~ret116; 326074#L2963-4 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 326075#L2682-12 assume !(1 == ~currentHeading~0); 326134#L2692-36 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 304152#L2692-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 307754#L2698-29 havoc __utac_acc__Specification3_spec__2_#t~ret39, __utac_acc__Specification3_spec__2_#t~ret40, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 315703#L1446-4 assume !(-1 == ~expectedDirection~0); 307737#L1458-4 assume !(1 == ~expectedDirection~0); 307734#L1459-4 cleanup_~i~0 := 1 + cleanup_~i~0; 307733#L198-2 [2021-11-09 09:20:34,074 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-09 09:20:34,075 INFO L85 PathProgramCache]: Analyzing trace with hash -1723882246, now seen corresponding path program 1 times [2021-11-09 09:20:34,075 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-09 09:20:34,075 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [677093086] [2021-11-09 09:20:34,076 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-09 09:20:34,076 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-09 09:20:34,350 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-09 09:20:34,448 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-09 09:20:34,448 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-09 09:20:34,448 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [677093086] [2021-11-09 09:20:34,448 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [677093086] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-09 09:20:34,449 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-09 09:20:34,449 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-11-09 09:20:34,449 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [47518055] [2021-11-09 09:20:34,449 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-11-09 09:20:34,450 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-09 09:20:34,450 INFO L85 PathProgramCache]: Analyzing trace with hash 1402930893, now seen corresponding path program 1 times [2021-11-09 09:20:34,450 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-09 09:20:34,450 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1813467729] [2021-11-09 09:20:34,450 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-09 09:20:34,451 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-09 09:20:34,459 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-09 09:20:34,488 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-09 09:20:34,489 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-09 09:20:34,489 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1813467729] [2021-11-09 09:20:34,489 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1813467729] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-09 09:20:34,489 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-09 09:20:34,489 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-11-09 09:20:34,490 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1745346006] [2021-11-09 09:20:34,490 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-11-09 09:20:34,490 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-09 09:20:34,490 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-11-09 09:20:34,491 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-11-09 09:20:34,491 INFO L87 Difference]: Start difference. First operand 24559 states and 46035 transitions. cyclomatic complexity: 21477 Second operand has 5 states, 5 states have (on average 8.6) internal successors, (43), 5 states have internal predecessors, (43), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-09 09:20:36,937 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-09 09:20:36,938 INFO L93 Difference]: Finished difference Result 109803 states and 207578 transitions. [2021-11-09 09:20:36,938 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2021-11-09 09:20:36,938 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 109803 states and 207578 transitions. [2021-11-09 09:20:37,615 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 28128 [2021-11-09 09:20:37,899 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 109803 states to 109803 states and 207578 transitions. [2021-11-09 09:20:37,899 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 109803 [2021-11-09 09:20:37,962 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 109803 [2021-11-09 09:20:37,962 INFO L73 IsDeterministic]: Start isDeterministic. Operand 109803 states and 207578 transitions. [2021-11-09 09:20:38,009 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-11-09 09:20:38,009 INFO L681 BuchiCegarLoop]: Abstraction has 109803 states and 207578 transitions. [2021-11-09 09:20:38,068 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 109803 states and 207578 transitions. [2021-11-09 09:20:38,792 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 109803 to 47991. [2021-11-09 09:20:38,825 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 47991 states, 47991 states have (on average 1.8754141401512783) internal successors, (90003), 47990 states have internal predecessors, (90003), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-09 09:20:38,909 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 47991 states to 47991 states and 90003 transitions. [2021-11-09 09:20:38,909 INFO L704 BuchiCegarLoop]: Abstraction has 47991 states and 90003 transitions. [2021-11-09 09:20:38,909 INFO L587 BuchiCegarLoop]: Abstraction has 47991 states and 90003 transitions. [2021-11-09 09:20:38,909 INFO L425 BuchiCegarLoop]: ======== Iteration 8============ [2021-11-09 09:20:38,910 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 47991 states and 90003 transitions. [2021-11-09 09:20:39,354 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 11332 [2021-11-09 09:20:39,354 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-11-09 09:20:39,354 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-11-09 09:20:39,369 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-09 09:20:39,376 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-09 09:20:39,376 INFO L791 eck$LassoCheckResult]: Stem: 441174#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(2);call write~init~int(48, #t~string4.base, #t~string4.offset, 1);call write~init~int(0, #t~string4.base, 1 + #t~string4.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(31);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(12);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(30);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(9);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(21);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(30);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(9);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(21);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(30);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(9);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(25);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(30);call #t~string72.base, #t~string72.offset := #Ultimate.allocOnStack(9);call #t~string73.base, #t~string73.offset := #Ultimate.allocOnStack(25);call #t~string120.base, #t~string120.offset := #Ultimate.allocOnStack(10);call #t~string122.base, #t~string122.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string122.base, #t~string122.offset, 1);call write~init~int(95, #t~string122.base, 1 + #t~string122.offset, 1);call write~init~int(93, #t~string122.base, 2 + #t~string122.offset, 1);call write~init~int(0, #t~string122.base, 3 + #t~string122.offset, 1);call #t~string124.base, #t~string124.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string124.base, #t~string124.offset, 1);call write~init~int(93, #t~string124.base, 1 + #t~string124.offset, 1);call write~init~int(32, #t~string124.base, 2 + #t~string124.offset, 1);call write~init~int(0, #t~string124.base, 3 + #t~string124.offset, 1);call #t~string126.base, #t~string126.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string126.base, #t~string126.offset, 1);call write~init~int(97, #t~string126.base, 1 + #t~string126.offset, 1);call write~init~int(116, #t~string126.base, 2 + #t~string126.offset, 1);call write~init~int(32, #t~string126.base, 3 + #t~string126.offset, 1);call write~init~int(0, #t~string126.base, 4 + #t~string126.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string128.base, #t~string128.offset, 1);call write~init~int(105, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 2 + #t~string128.offset, 1);call #t~string130.base, #t~string130.offset := #Ultimate.allocOnStack(10);call #t~string132.base, #t~string132.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string132.base, #t~string132.offset, 1);call write~init~int(112, #t~string132.base, 1 + #t~string132.offset, 1);call write~init~int(0, #t~string132.base, 2 + #t~string132.offset, 1);call #t~string134.base, #t~string134.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string134.base, #t~string134.offset, 1);call write~init~int(111, #t~string134.base, 1 + #t~string134.offset, 1);call write~init~int(119, #t~string134.base, 2 + #t~string134.offset, 1);call write~init~int(110, #t~string134.base, 3 + #t~string134.offset, 1);call write~init~int(0, #t~string134.base, 4 + #t~string134.offset, 1);call #t~string136.base, #t~string136.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string136.base, #t~string136.offset, 1);call write~init~int(73, #t~string136.base, 1 + #t~string136.offset, 1);call write~init~int(76, #t~string136.base, 2 + #t~string136.offset, 1);call write~init~int(95, #t~string136.base, 3 + #t~string136.offset, 1);call write~init~int(112, #t~string136.base, 4 + #t~string136.offset, 1);call write~init~int(58, #t~string136.base, 5 + #t~string136.offset, 1);call write~init~int(0, #t~string136.base, 6 + #t~string136.offset, 1);call #t~string138.base, #t~string138.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string138.base, #t~string138.offset, 1);call write~init~int(37, #t~string138.base, 1 + #t~string138.offset, 1);call write~init~int(105, #t~string138.base, 2 + #t~string138.offset, 1);call write~init~int(0, #t~string138.base, 3 + #t~string138.offset, 1);call #t~string140.base, #t~string140.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string140.base, #t~string140.offset, 1);call write~init~int(37, #t~string140.base, 1 + #t~string140.offset, 1);call write~init~int(105, #t~string140.base, 2 + #t~string140.offset, 1);call write~init~int(0, #t~string140.base, 3 + #t~string140.offset, 1);call #t~string142.base, #t~string142.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string142.base, #t~string142.offset, 1);call write~init~int(37, #t~string142.base, 1 + #t~string142.offset, 1);call write~init~int(105, #t~string142.base, 2 + #t~string142.offset, 1);call write~init~int(0, #t~string142.base, 3 + #t~string142.offset, 1);call #t~string144.base, #t~string144.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string144.base, #t~string144.offset, 1);call write~init~int(37, #t~string144.base, 1 + #t~string144.offset, 1);call write~init~int(105, #t~string144.base, 2 + #t~string144.offset, 1);call write~init~int(0, #t~string144.base, 3 + #t~string144.offset, 1);call #t~string146.base, #t~string146.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string146.base, #t~string146.offset, 1);call write~init~int(37, #t~string146.base, 1 + #t~string146.offset, 1);call write~init~int(105, #t~string146.base, 2 + #t~string146.offset, 1);call write~init~int(0, #t~string146.base, 3 + #t~string146.offset, 1);call #t~string148.base, #t~string148.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string148.base, #t~string148.offset, 1);call write~init~int(70, #t~string148.base, 1 + #t~string148.offset, 1);call write~init~int(95, #t~string148.base, 2 + #t~string148.offset, 1);call write~init~int(112, #t~string148.base, 3 + #t~string148.offset, 1);call write~init~int(58, #t~string148.base, 4 + #t~string148.offset, 1);call write~init~int(0, #t~string148.base, 5 + #t~string148.offset, 1);call #t~string151.base, #t~string151.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string151.base, #t~string151.offset, 1);call write~init~int(37, #t~string151.base, 1 + #t~string151.offset, 1);call write~init~int(105, #t~string151.base, 2 + #t~string151.offset, 1);call write~init~int(0, #t~string151.base, 3 + #t~string151.offset, 1);call #t~string154.base, #t~string154.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string154.base, #t~string154.offset, 1);call write~init~int(37, #t~string154.base, 1 + #t~string154.offset, 1);call write~init~int(105, #t~string154.base, 2 + #t~string154.offset, 1);call write~init~int(0, #t~string154.base, 3 + #t~string154.offset, 1);call #t~string157.base, #t~string157.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string157.base, #t~string157.offset, 1);call write~init~int(37, #t~string157.base, 1 + #t~string157.offset, 1);call write~init~int(105, #t~string157.base, 2 + #t~string157.offset, 1);call write~init~int(0, #t~string157.base, 3 + #t~string157.offset, 1);call #t~string160.base, #t~string160.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string160.base, #t~string160.offset, 1);call write~init~int(37, #t~string160.base, 1 + #t~string160.offset, 1);call write~init~int(105, #t~string160.base, 2 + #t~string160.offset, 1);call write~init~int(0, #t~string160.base, 3 + #t~string160.offset, 1);call #t~string163.base, #t~string163.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string163.base, #t~string163.offset, 1);call write~init~int(37, #t~string163.base, 1 + #t~string163.offset, 1);call write~init~int(105, #t~string163.base, 2 + #t~string163.offset, 1);call write~init~int(0, #t~string163.base, 3 + #t~string163.offset, 1);call #t~string165.base, #t~string165.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string165.base, #t~string165.offset, 1);call write~init~int(0, #t~string165.base, 1 + #t~string165.offset, 1);~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 441175#L-1 havoc main_#res;havoc main_#t~ret20, main_~retValue_acc~1, main_~tmp~8;havoc main_~retValue_acc~1;havoc main_~tmp~8; 440675#L1866 havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 436676#L1874 main_#t~ret20 := valid_product_#res;main_~tmp~8 := main_#t~ret20;havoc main_#t~ret20; 436677#L395 assume 0 != main_~tmp~8; 439679#L368 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 437889#L702 havoc bobCall_#t~ret8, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 437890#L454 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 438381#L479 bobCall_#t~ret8 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret8;havoc bobCall_#t~ret8;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 436645#L980 assume 0 == initPersonOnFloor_~floor; 436646#L981 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 436002#L1088-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 440863#L772 assume !(0 == callOnFloor_~floorID); 440864#L775 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 438116#L784-2 havoc timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_#t~ret32, __utac_acc__Specification3_spec__1_#t~ret33, __utac_acc__Specification3_spec__1_#t~ret34, __utac_acc__Specification3_spec__1_#t~ret35, __utac_acc__Specification3_spec__1_#t~ret36, __utac_acc__Specification3_spec__1_#t~ret37, __utac_acc__Specification3_spec__1_#t~ret38, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 443020#L2102 __utac_acc__Specification3_spec__1_#t~ret27 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 443019#L2154 __utac_acc__Specification3_spec__1_#t~ret28 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret28;havoc __utac_acc__Specification3_spec__1_#t~ret28; 443018#L1315 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 438425#L1316 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 437201#L2119 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 437202#L2140 __utac_acc__Specification3_spec__1_#t~ret29 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret29;havoc __utac_acc__Specification3_spec__1_#t~ret29; 442147#L1320 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 436855#L1421 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret95, stopRequestedAtCurrentFloor_#t~ret96, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 441304#L709 assume !(0 == isFloorCalling_~floorID); 441305#L713 assume !(1 == isFloorCalling_~floorID); 442044#L717 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 436194#L736 stopRequestedAtCurrentFloor_#t~ret95 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret95;havoc stopRequestedAtCurrentFloor_#t~ret95; 438004#L2715 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 438006#L2119-10 assume !(0 == buttonForFloorIsPressed_~floorID); 441974#L2123-10 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 436658#L2140-10 stopRequestedAtCurrentFloor_#t~ret96 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret96;havoc stopRequestedAtCurrentFloor_#t~ret96; 436659#L2722 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 441997#L2727 timeShift_#t~ret109 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 442227#L2864 assume !(0 != timeShift_~tmp___9~3); 441547#L2955 assume !(1 == ~doorState~0); 440100#L2955-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_#t~ret87, stopRequestedInDirection_#t~ret88, stopRequestedInDirection_#t~ret89, stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 438713#L2306 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~7;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~7;isTopFloor_~retValue_acc~7 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~7; 438715#L1283 stopRequestedInDirection_#t~ret83 := isTopFloor_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret83;havoc stopRequestedInDirection_#t~ret83; 442056#L2310 assume 0 != stopRequestedInDirection_~tmp~18;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 442775#L2628 timeShift_#t~ret116 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret116;havoc timeShift_#t~ret116; 442770#L2963 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 442765#L2682 assume !(1 == ~currentHeading~0); 442759#L2692 assume !(0 == ~currentFloorID~0); 442755#L2692-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 442754#L2698-5 havoc __utac_acc__Specification3_spec__2_#t~ret39, __utac_acc__Specification3_spec__2_#t~ret40, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 442752#L1446 assume !(-1 == ~expectedDirection~0); 442748#L1458 assume !(1 == ~expectedDirection~0); 442747#L1459 havoc timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_#t~ret32, __utac_acc__Specification3_spec__1_#t~ret33, __utac_acc__Specification3_spec__1_#t~ret34, __utac_acc__Specification3_spec__1_#t~ret35, __utac_acc__Specification3_spec__1_#t~ret36, __utac_acc__Specification3_spec__1_#t~ret37, __utac_acc__Specification3_spec__1_#t~ret38, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 442746#L2102-1 __utac_acc__Specification3_spec__1_#t~ret27 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 442745#L2154-3 __utac_acc__Specification3_spec__1_#t~ret28 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret28;havoc __utac_acc__Specification3_spec__1_#t~ret28; 442742#L1315-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 442737#L1377-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 442732#L1387-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 442715#L1398-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 442706#L1409-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 442698#L1420-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 442695#L1421-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret95, stopRequestedAtCurrentFloor_#t~ret96, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 442693#L709-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 442692#L736-21 stopRequestedAtCurrentFloor_#t~ret95 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret95;havoc stopRequestedAtCurrentFloor_#t~ret95; 442690#L2715-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 442687#L2119-21 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 442679#L2140-21 stopRequestedAtCurrentFloor_#t~ret96 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret96;havoc stopRequestedAtCurrentFloor_#t~ret96; 442680#L2722-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 442663#L2727-1 timeShift_#t~ret109 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 442664#L2864-1 assume !(0 != timeShift_~tmp___9~3); 442617#L2955-3 assume !(1 == ~doorState~0); 442618#L2955-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_#t~ret87, stopRequestedInDirection_#t~ret88, stopRequestedInDirection_#t~ret89, stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 442612#L2306-2 assume !(1 == stopRequestedInDirection_~dir); 442613#L2475-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 442584#L2628-2 timeShift_#t~ret116 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret116;havoc timeShift_#t~ret116; 442585#L2963-1 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 444269#L2682-3 assume !(1 == ~currentHeading~0); 444262#L2692-9 assume !(0 == ~currentFloorID~0); 444251#L2692-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 444250#L2698-11 havoc __utac_acc__Specification3_spec__2_#t~ret39, __utac_acc__Specification3_spec__2_#t~ret40, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 453328#L1446-1 assume !(-1 == ~expectedDirection~0); 453325#L1458-1 assume !(1 == ~expectedDirection~0); 453324#L1459-1 havoc timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_#t~ret32, __utac_acc__Specification3_spec__1_#t~ret33, __utac_acc__Specification3_spec__1_#t~ret34, __utac_acc__Specification3_spec__1_#t~ret35, __utac_acc__Specification3_spec__1_#t~ret36, __utac_acc__Specification3_spec__1_#t~ret37, __utac_acc__Specification3_spec__1_#t~ret38, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 453323#L2102-2 __utac_acc__Specification3_spec__1_#t~ret27 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 453322#L2154-6 __utac_acc__Specification3_spec__1_#t~ret28 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret28;havoc __utac_acc__Specification3_spec__1_#t~ret28; 453320#L1315-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 453319#L1377-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 444222#L1387-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 444219#L1398-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 444215#L1409-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 444178#L1420-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 444141#L1421-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret95, stopRequestedAtCurrentFloor_#t~ret96, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 444139#L709-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 444137#L736-42 stopRequestedAtCurrentFloor_#t~ret95 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret95;havoc stopRequestedAtCurrentFloor_#t~ret95; 444070#L2715-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 444064#L2119-32 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 444059#L2140-32 stopRequestedAtCurrentFloor_#t~ret96 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret96;havoc stopRequestedAtCurrentFloor_#t~ret96; 444056#L2722-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 444054#L2727-2 timeShift_#t~ret109 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 444051#L2864-2 assume !(0 != timeShift_~tmp___9~3); 444049#L2955-6 assume !(1 == ~doorState~0); 444047#L2955-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_#t~ret87, stopRequestedInDirection_#t~ret88, stopRequestedInDirection_#t~ret89, stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 444043#L2306-4 assume !(1 == stopRequestedInDirection_~dir); 444021#L2475-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 444019#L2628-4 timeShift_#t~ret116 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret116;havoc timeShift_#t~ret116; 444020#L2963-2 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 450443#L2682-6 assume !(1 == ~currentHeading~0); 453048#L2692-18 assume !(0 == ~currentFloorID~0); 452993#L2692-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 452991#L2698-17 havoc __utac_acc__Specification3_spec__2_#t~ret39, __utac_acc__Specification3_spec__2_#t~ret40, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 452988#L1446-2 assume !(-1 == ~expectedDirection~0); 452985#L1458-2 assume !(1 == ~expectedDirection~0); 452984#L1459-2 havoc bobCall_#t~ret8, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 452982#L454-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 452977#L479-1 bobCall_#t~ret8 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret8;havoc bobCall_#t~ret8;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 452974#L980-1 assume 0 == initPersonOnFloor_~floor; 452948#L981-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 452941#L1088-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 452939#L772-2 assume !(0 == callOnFloor_~floorID); 452936#L775-2 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 452934#L784-5 havoc cleanup_#t~ret14, cleanup_#t~ret15, cleanup_~i~0, cleanup_~tmp~6, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~0;havoc cleanup_~i~0;havoc cleanup_~tmp~6;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_#t~ret32, __utac_acc__Specification3_spec__1_#t~ret33, __utac_acc__Specification3_spec__1_#t~ret34, __utac_acc__Specification3_spec__1_#t~ret35, __utac_acc__Specification3_spec__1_#t~ret36, __utac_acc__Specification3_spec__1_#t~ret37, __utac_acc__Specification3_spec__1_#t~ret38, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 452933#L2102-3 __utac_acc__Specification3_spec__1_#t~ret27 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 452932#L2154-9 __utac_acc__Specification3_spec__1_#t~ret28 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret28;havoc __utac_acc__Specification3_spec__1_#t~ret28; 452930#L1315-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 452929#L1377-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 443495#L1387-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 443492#L1398-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 443489#L1409-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 443422#L1420-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 443415#L1421-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret95, stopRequestedAtCurrentFloor_#t~ret96, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 443411#L709-63 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 443409#L736-63 stopRequestedAtCurrentFloor_#t~ret95 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret95;havoc stopRequestedAtCurrentFloor_#t~ret95; 443405#L2715-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 443403#L2119-43 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 443396#L2140-43 stopRequestedAtCurrentFloor_#t~ret96 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret96;havoc stopRequestedAtCurrentFloor_#t~ret96; 443397#L2722-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 443389#L2727-3 timeShift_#t~ret109 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 443390#L2864-3 assume !(0 != timeShift_~tmp___9~3); 443370#L2955-9 assume !(1 == ~doorState~0); 443371#L2955-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_#t~ret87, stopRequestedInDirection_#t~ret88, stopRequestedInDirection_#t~ret89, stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 443315#L2306-6 assume !(1 == stopRequestedInDirection_~dir); 443297#L2475-6 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 443287#L2628-6 timeShift_#t~ret116 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret116;havoc timeShift_#t~ret116; 443288#L2963-3 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 443281#L2682-9 assume !(1 == ~currentHeading~0); 443282#L2692-27 assume !(0 == ~currentFloorID~0); 451976#L2692-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 451973#L2698-23 havoc __utac_acc__Specification3_spec__2_#t~ret39, __utac_acc__Specification3_spec__2_#t~ret40, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 451971#L1446-3 assume !(-1 == ~expectedDirection~0); 451965#L1458-3 assume !(1 == ~expectedDirection~0); 451960#L1459-3 cleanup_~i~0 := 0; 451958#L198-2 [2021-11-09 09:20:39,377 INFO L793 eck$LassoCheckResult]: Loop: 451958#L198-2 assume !false; 451957#L199 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 451956#L202 assume cleanup_~i~0 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 451953#L1973 cleanup_#t~ret14 := isBlocked_#res;cleanup_~tmp___0~0 := cleanup_#t~ret14;havoc cleanup_#t~ret14; 451951#L206 assume 1 != cleanup_~tmp___0~0; 451947#L206-1 havoc isIdle_#res;havoc isIdle_#t~ret82, isIdle_~retValue_acc~20, isIdle_~tmp~17;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~17;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret77, anyStopRequested_#t~ret78, anyStopRequested_#t~ret79, anyStopRequested_#t~ret80, anyStopRequested_#t~ret81, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~16, anyStopRequested_~tmp___0~6, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~16;havoc anyStopRequested_~tmp___0~6;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~1;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 451945#L709-84 assume !(0 == isFloorCalling_~floorID); 451944#L713-84 assume !(1 == isFloorCalling_~floorID); 451930#L717-84 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 451923#L736-84 anyStopRequested_#t~ret77 := isFloorCalling_#res;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret77;havoc anyStopRequested_#t~ret77; 451913#L2210 assume 0 != anyStopRequested_~tmp___3~1;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 451908#L2274 isIdle_#t~ret82 := anyStopRequested_#res;isIdle_~tmp~17 := isIdle_#t~ret82;havoc isIdle_#t~ret82;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~17 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 451907#L2287 cleanup_#t~ret15 := isIdle_#res;cleanup_~tmp~6 := cleanup_#t~ret15;havoc cleanup_#t~ret15; 451906#L218 assume !(0 != cleanup_~tmp~6);havoc timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_#t~ret32, __utac_acc__Specification3_spec__1_#t~ret33, __utac_acc__Specification3_spec__1_#t~ret34, __utac_acc__Specification3_spec__1_#t~ret35, __utac_acc__Specification3_spec__1_#t~ret36, __utac_acc__Specification3_spec__1_#t~ret37, __utac_acc__Specification3_spec__1_#t~ret38, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 451905#L2102-4 __utac_acc__Specification3_spec__1_#t~ret27 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 451904#L2154-12 __utac_acc__Specification3_spec__1_#t~ret28 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret28;havoc __utac_acc__Specification3_spec__1_#t~ret28; 451902#L1315-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 451901#L1377-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 443507#L1387-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 442484#L1398-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 442482#L1409-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 442446#L1420-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 442442#L1421-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret95, stopRequestedAtCurrentFloor_#t~ret96, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 442439#L709-89 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 442437#L736-89 stopRequestedAtCurrentFloor_#t~ret95 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret95;havoc stopRequestedAtCurrentFloor_#t~ret95; 442433#L2715-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 442432#L2119-54 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 442427#L2140-54 stopRequestedAtCurrentFloor_#t~ret96 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret96;havoc stopRequestedAtCurrentFloor_#t~ret96; 442423#L2722-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 442421#L2727-4 timeShift_#t~ret109 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 442418#L2864-4 assume !(0 != timeShift_~tmp___9~3); 442414#L2955-12 assume 1 == ~doorState~0;~doorState~0 := 0; 442385#L2955-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_#t~ret87, stopRequestedInDirection_#t~ret88, stopRequestedInDirection_#t~ret89, stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 442386#L2306-8 assume !(1 == stopRequestedInDirection_~dir); 442341#L2475-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 442337#L2628-8 timeShift_#t~ret116 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret116;havoc timeShift_#t~ret116; 442323#L2963-4 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 442324#L2682-12 assume !(1 == ~currentHeading~0); 450188#L2692-36 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 450848#L2692-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 450843#L2698-29 havoc __utac_acc__Specification3_spec__2_#t~ret39, __utac_acc__Specification3_spec__2_#t~ret40, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 451968#L1446-4 assume !(-1 == ~expectedDirection~0); 451962#L1458-4 assume !(1 == ~expectedDirection~0); 451959#L1459-4 cleanup_~i~0 := 1 + cleanup_~i~0; 451958#L198-2 [2021-11-09 09:20:39,378 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-09 09:20:39,378 INFO L85 PathProgramCache]: Analyzing trace with hash -1723882246, now seen corresponding path program 2 times [2021-11-09 09:20:39,379 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-09 09:20:39,379 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1254515531] [2021-11-09 09:20:39,379 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-09 09:20:39,379 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-09 09:20:39,405 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-09 09:20:39,442 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-09 09:20:39,443 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-09 09:20:39,443 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1254515531] [2021-11-09 09:20:39,443 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1254515531] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-09 09:20:39,443 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-09 09:20:39,444 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-11-09 09:20:39,444 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [776674554] [2021-11-09 09:20:39,444 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-11-09 09:20:39,444 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-09 09:20:39,445 INFO L85 PathProgramCache]: Analyzing trace with hash 1643176351, now seen corresponding path program 1 times [2021-11-09 09:20:39,445 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-09 09:20:39,445 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1168791036] [2021-11-09 09:20:39,445 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-09 09:20:39,445 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-09 09:20:39,451 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-09 09:20:39,459 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-09 09:20:39,460 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-09 09:20:39,460 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1168791036] [2021-11-09 09:20:39,460 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1168791036] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-09 09:20:39,460 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-09 09:20:39,460 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-11-09 09:20:39,461 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1086762600] [2021-11-09 09:20:39,461 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-11-09 09:20:39,461 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-09 09:20:39,462 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-09 09:20:39,462 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-09 09:20:39,462 INFO L87 Difference]: Start difference. First operand 47991 states and 90003 transitions. cyclomatic complexity: 42013 Second operand has 3 states, 3 states have (on average 14.666666666666666) internal successors, (44), 3 states have internal predecessors, (44), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-09 09:20:40,536 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-09 09:20:40,536 INFO L93 Difference]: Finished difference Result 53451 states and 99611 transitions. [2021-11-09 09:20:40,538 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-09 09:20:40,538 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 53451 states and 99611 transitions. [2021-11-09 09:20:41,057 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 12374 [2021-11-09 09:20:41,208 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 53451 states to 53451 states and 99611 transitions. [2021-11-09 09:20:41,208 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 53451 [2021-11-09 09:20:41,243 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 53451 [2021-11-09 09:20:41,243 INFO L73 IsDeterministic]: Start isDeterministic. Operand 53451 states and 99611 transitions. [2021-11-09 09:20:41,271 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-11-09 09:20:41,271 INFO L681 BuchiCegarLoop]: Abstraction has 53451 states and 99611 transitions. [2021-11-09 09:20:41,296 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 53451 states and 99611 transitions. [2021-11-09 09:20:41,655 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 53451 to 47991. [2021-11-09 09:20:41,690 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 47991 states, 47991 states have (on average 1.869663061824092) internal successors, (89727), 47990 states have internal predecessors, (89727), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-09 09:20:42,128 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 47991 states to 47991 states and 89727 transitions. [2021-11-09 09:20:42,128 INFO L704 BuchiCegarLoop]: Abstraction has 47991 states and 89727 transitions. [2021-11-09 09:20:42,128 INFO L587 BuchiCegarLoop]: Abstraction has 47991 states and 89727 transitions. [2021-11-09 09:20:42,128 INFO L425 BuchiCegarLoop]: ======== Iteration 9============ [2021-11-09 09:20:42,128 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 47991 states and 89727 transitions. [2021-11-09 09:20:42,216 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 11332 [2021-11-09 09:20:42,216 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-11-09 09:20:42,217 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-11-09 09:20:42,218 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-09 09:20:42,218 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-09 09:20:42,219 INFO L791 eck$LassoCheckResult]: Stem: 542525#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(2);call write~init~int(48, #t~string4.base, #t~string4.offset, 1);call write~init~int(0, #t~string4.base, 1 + #t~string4.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(31);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(12);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(30);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(9);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(21);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(30);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(9);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(21);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(30);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(9);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(25);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(30);call #t~string72.base, #t~string72.offset := #Ultimate.allocOnStack(9);call #t~string73.base, #t~string73.offset := #Ultimate.allocOnStack(25);call #t~string120.base, #t~string120.offset := #Ultimate.allocOnStack(10);call #t~string122.base, #t~string122.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string122.base, #t~string122.offset, 1);call write~init~int(95, #t~string122.base, 1 + #t~string122.offset, 1);call write~init~int(93, #t~string122.base, 2 + #t~string122.offset, 1);call write~init~int(0, #t~string122.base, 3 + #t~string122.offset, 1);call #t~string124.base, #t~string124.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string124.base, #t~string124.offset, 1);call write~init~int(93, #t~string124.base, 1 + #t~string124.offset, 1);call write~init~int(32, #t~string124.base, 2 + #t~string124.offset, 1);call write~init~int(0, #t~string124.base, 3 + #t~string124.offset, 1);call #t~string126.base, #t~string126.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string126.base, #t~string126.offset, 1);call write~init~int(97, #t~string126.base, 1 + #t~string126.offset, 1);call write~init~int(116, #t~string126.base, 2 + #t~string126.offset, 1);call write~init~int(32, #t~string126.base, 3 + #t~string126.offset, 1);call write~init~int(0, #t~string126.base, 4 + #t~string126.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string128.base, #t~string128.offset, 1);call write~init~int(105, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 2 + #t~string128.offset, 1);call #t~string130.base, #t~string130.offset := #Ultimate.allocOnStack(10);call #t~string132.base, #t~string132.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string132.base, #t~string132.offset, 1);call write~init~int(112, #t~string132.base, 1 + #t~string132.offset, 1);call write~init~int(0, #t~string132.base, 2 + #t~string132.offset, 1);call #t~string134.base, #t~string134.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string134.base, #t~string134.offset, 1);call write~init~int(111, #t~string134.base, 1 + #t~string134.offset, 1);call write~init~int(119, #t~string134.base, 2 + #t~string134.offset, 1);call write~init~int(110, #t~string134.base, 3 + #t~string134.offset, 1);call write~init~int(0, #t~string134.base, 4 + #t~string134.offset, 1);call #t~string136.base, #t~string136.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string136.base, #t~string136.offset, 1);call write~init~int(73, #t~string136.base, 1 + #t~string136.offset, 1);call write~init~int(76, #t~string136.base, 2 + #t~string136.offset, 1);call write~init~int(95, #t~string136.base, 3 + #t~string136.offset, 1);call write~init~int(112, #t~string136.base, 4 + #t~string136.offset, 1);call write~init~int(58, #t~string136.base, 5 + #t~string136.offset, 1);call write~init~int(0, #t~string136.base, 6 + #t~string136.offset, 1);call #t~string138.base, #t~string138.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string138.base, #t~string138.offset, 1);call write~init~int(37, #t~string138.base, 1 + #t~string138.offset, 1);call write~init~int(105, #t~string138.base, 2 + #t~string138.offset, 1);call write~init~int(0, #t~string138.base, 3 + #t~string138.offset, 1);call #t~string140.base, #t~string140.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string140.base, #t~string140.offset, 1);call write~init~int(37, #t~string140.base, 1 + #t~string140.offset, 1);call write~init~int(105, #t~string140.base, 2 + #t~string140.offset, 1);call write~init~int(0, #t~string140.base, 3 + #t~string140.offset, 1);call #t~string142.base, #t~string142.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string142.base, #t~string142.offset, 1);call write~init~int(37, #t~string142.base, 1 + #t~string142.offset, 1);call write~init~int(105, #t~string142.base, 2 + #t~string142.offset, 1);call write~init~int(0, #t~string142.base, 3 + #t~string142.offset, 1);call #t~string144.base, #t~string144.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string144.base, #t~string144.offset, 1);call write~init~int(37, #t~string144.base, 1 + #t~string144.offset, 1);call write~init~int(105, #t~string144.base, 2 + #t~string144.offset, 1);call write~init~int(0, #t~string144.base, 3 + #t~string144.offset, 1);call #t~string146.base, #t~string146.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string146.base, #t~string146.offset, 1);call write~init~int(37, #t~string146.base, 1 + #t~string146.offset, 1);call write~init~int(105, #t~string146.base, 2 + #t~string146.offset, 1);call write~init~int(0, #t~string146.base, 3 + #t~string146.offset, 1);call #t~string148.base, #t~string148.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string148.base, #t~string148.offset, 1);call write~init~int(70, #t~string148.base, 1 + #t~string148.offset, 1);call write~init~int(95, #t~string148.base, 2 + #t~string148.offset, 1);call write~init~int(112, #t~string148.base, 3 + #t~string148.offset, 1);call write~init~int(58, #t~string148.base, 4 + #t~string148.offset, 1);call write~init~int(0, #t~string148.base, 5 + #t~string148.offset, 1);call #t~string151.base, #t~string151.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string151.base, #t~string151.offset, 1);call write~init~int(37, #t~string151.base, 1 + #t~string151.offset, 1);call write~init~int(105, #t~string151.base, 2 + #t~string151.offset, 1);call write~init~int(0, #t~string151.base, 3 + #t~string151.offset, 1);call #t~string154.base, #t~string154.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string154.base, #t~string154.offset, 1);call write~init~int(37, #t~string154.base, 1 + #t~string154.offset, 1);call write~init~int(105, #t~string154.base, 2 + #t~string154.offset, 1);call write~init~int(0, #t~string154.base, 3 + #t~string154.offset, 1);call #t~string157.base, #t~string157.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string157.base, #t~string157.offset, 1);call write~init~int(37, #t~string157.base, 1 + #t~string157.offset, 1);call write~init~int(105, #t~string157.base, 2 + #t~string157.offset, 1);call write~init~int(0, #t~string157.base, 3 + #t~string157.offset, 1);call #t~string160.base, #t~string160.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string160.base, #t~string160.offset, 1);call write~init~int(37, #t~string160.base, 1 + #t~string160.offset, 1);call write~init~int(105, #t~string160.base, 2 + #t~string160.offset, 1);call write~init~int(0, #t~string160.base, 3 + #t~string160.offset, 1);call #t~string163.base, #t~string163.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string163.base, #t~string163.offset, 1);call write~init~int(37, #t~string163.base, 1 + #t~string163.offset, 1);call write~init~int(105, #t~string163.base, 2 + #t~string163.offset, 1);call write~init~int(0, #t~string163.base, 3 + #t~string163.offset, 1);call #t~string165.base, #t~string165.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string165.base, #t~string165.offset, 1);call write~init~int(0, #t~string165.base, 1 + #t~string165.offset, 1);~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 542526#L-1 havoc main_#res;havoc main_#t~ret20, main_~retValue_acc~1, main_~tmp~8;havoc main_~retValue_acc~1;havoc main_~tmp~8; 542067#L1866 havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 538129#L1874 main_#t~ret20 := valid_product_#res;main_~tmp~8 := main_#t~ret20;havoc main_#t~ret20; 538130#L395 assume 0 != main_~tmp~8; 541104#L368 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 539321#L702 havoc bobCall_#t~ret8, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 539322#L454 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 539813#L479 bobCall_#t~ret8 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret8;havoc bobCall_#t~ret8;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 538097#L980 assume 0 == initPersonOnFloor_~floor; 538098#L981 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 537452#L1088-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 542246#L772 assume !(0 == callOnFloor_~floorID); 542248#L775 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 538414#L784-2 havoc timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_#t~ret32, __utac_acc__Specification3_spec__1_#t~ret33, __utac_acc__Specification3_spec__1_#t~ret34, __utac_acc__Specification3_spec__1_#t~ret35, __utac_acc__Specification3_spec__1_#t~ret36, __utac_acc__Specification3_spec__1_#t~ret37, __utac_acc__Specification3_spec__1_#t~ret38, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 537660#L2102 __utac_acc__Specification3_spec__1_#t~ret27 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 537661#L2154 __utac_acc__Specification3_spec__1_#t~ret28 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret28;havoc __utac_acc__Specification3_spec__1_#t~ret28; 539583#L1315 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 539584#L1316 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 538642#L2119 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 537569#L2140 __utac_acc__Specification3_spec__1_#t~ret29 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret29;havoc __utac_acc__Specification3_spec__1_#t~ret29; 537570#L1320 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 577313#L1421 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret95, stopRequestedAtCurrentFloor_#t~ret96, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 577312#L709 assume !(0 == isFloorCalling_~floorID); 577311#L713 assume !(1 == isFloorCalling_~floorID); 577305#L717 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 577304#L736 stopRequestedAtCurrentFloor_#t~ret95 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret95;havoc stopRequestedAtCurrentFloor_#t~ret95; 577303#L2715 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 577302#L2119-10 assume !(0 == buttonForFloorIsPressed_~floorID); 577301#L2123-10 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 577297#L2140-10 stopRequestedAtCurrentFloor_#t~ret96 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret96;havoc stopRequestedAtCurrentFloor_#t~ret96; 577296#L2722 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 577295#L2727 timeShift_#t~ret109 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 577294#L2864 assume !(0 != timeShift_~tmp___9~3); 577293#L2955 assume !(1 == ~doorState~0); 577292#L2955-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_#t~ret87, stopRequestedInDirection_#t~ret88, stopRequestedInDirection_#t~ret89, stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 577290#L2306 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~7;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~7;isTopFloor_~retValue_acc~7 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~7; 577289#L1283 stopRequestedInDirection_#t~ret83 := isTopFloor_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret83;havoc stopRequestedInDirection_#t~ret83; 577288#L2310 assume 0 != stopRequestedInDirection_~tmp~18;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 577284#L2628 timeShift_#t~ret116 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret116;havoc timeShift_#t~ret116; 578190#L2963 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 578187#L2682 assume !(1 == ~currentHeading~0); 578185#L2692 assume !(0 == ~currentFloorID~0); 578179#L2692-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 578178#L2698-5 havoc __utac_acc__Specification3_spec__2_#t~ret39, __utac_acc__Specification3_spec__2_#t~ret40, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 578172#L1446 assume !(-1 == ~expectedDirection~0); 578163#L1458 assume !(1 == ~expectedDirection~0); 578162#L1459 havoc timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_#t~ret32, __utac_acc__Specification3_spec__1_#t~ret33, __utac_acc__Specification3_spec__1_#t~ret34, __utac_acc__Specification3_spec__1_#t~ret35, __utac_acc__Specification3_spec__1_#t~ret36, __utac_acc__Specification3_spec__1_#t~ret37, __utac_acc__Specification3_spec__1_#t~ret38, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 578161#L2102-1 __utac_acc__Specification3_spec__1_#t~ret27 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 578160#L2154-3 __utac_acc__Specification3_spec__1_#t~ret28 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret28;havoc __utac_acc__Specification3_spec__1_#t~ret28; 578157#L1315-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 578158#L1377-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 578275#L1387-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 578274#L1398-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 578273#L1409-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 574450#L1420-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 573977#L1421-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret95, stopRequestedAtCurrentFloor_#t~ret96, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 573975#L709-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 573970#L736-21 stopRequestedAtCurrentFloor_#t~ret95 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret95;havoc stopRequestedAtCurrentFloor_#t~ret95; 573966#L2715-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 573967#L2119-21 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 573969#L2140-21 stopRequestedAtCurrentFloor_#t~ret96 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret96;havoc stopRequestedAtCurrentFloor_#t~ret96; 573968#L2722-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 573965#L2727-1 timeShift_#t~ret109 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 573961#L2864-1 assume !(0 != timeShift_~tmp___9~3); 573962#L2955-3 assume !(1 == ~doorState~0); 578619#L2955-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_#t~ret87, stopRequestedInDirection_#t~ret88, stopRequestedInDirection_#t~ret89, stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 578617#L2306-2 assume !(1 == stopRequestedInDirection_~dir); 578611#L2475-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 578592#L2628-2 timeShift_#t~ret116 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret116;havoc timeShift_#t~ret116; 578589#L2963-1 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 578550#L2682-3 assume !(1 == ~currentHeading~0); 578541#L2692-9 assume !(0 == ~currentFloorID~0); 578535#L2692-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 578533#L2698-11 havoc __utac_acc__Specification3_spec__2_#t~ret39, __utac_acc__Specification3_spec__2_#t~ret40, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 578530#L1446-1 assume !(-1 == ~expectedDirection~0); 578527#L1458-1 assume !(1 == ~expectedDirection~0); 578526#L1459-1 havoc timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_#t~ret32, __utac_acc__Specification3_spec__1_#t~ret33, __utac_acc__Specification3_spec__1_#t~ret34, __utac_acc__Specification3_spec__1_#t~ret35, __utac_acc__Specification3_spec__1_#t~ret36, __utac_acc__Specification3_spec__1_#t~ret37, __utac_acc__Specification3_spec__1_#t~ret38, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 578525#L2102-2 __utac_acc__Specification3_spec__1_#t~ret27 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 578524#L2154-6 __utac_acc__Specification3_spec__1_#t~ret28 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret28;havoc __utac_acc__Specification3_spec__1_#t~ret28; 578523#L1315-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 571195#L1377-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 571196#L1387-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 581909#L1398-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 581904#L1409-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 569990#L1420-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 566107#L1421-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret95, stopRequestedAtCurrentFloor_#t~ret96, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 566106#L709-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 566101#L736-42 stopRequestedAtCurrentFloor_#t~ret95 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret95;havoc stopRequestedAtCurrentFloor_#t~ret95; 566097#L2715-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 566098#L2119-32 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 566100#L2140-32 stopRequestedAtCurrentFloor_#t~ret96 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret96;havoc stopRequestedAtCurrentFloor_#t~ret96; 566099#L2722-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 566096#L2727-2 timeShift_#t~ret109 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 566092#L2864-2 assume !(0 != timeShift_~tmp___9~3); 566093#L2955-6 assume !(1 == ~doorState~0); 583095#L2955-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_#t~ret87, stopRequestedInDirection_#t~ret88, stopRequestedInDirection_#t~ret89, stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 583092#L2306-4 assume !(1 == stopRequestedInDirection_~dir); 583093#L2475-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 583120#L2628-4 timeShift_#t~ret116 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret116;havoc timeShift_#t~ret116; 583319#L2963-2 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 582968#L2682-6 assume !(1 == ~currentHeading~0); 582959#L2692-18 assume !(0 == ~currentFloorID~0); 582953#L2692-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 582951#L2698-17 havoc __utac_acc__Specification3_spec__2_#t~ret39, __utac_acc__Specification3_spec__2_#t~ret40, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 582948#L1446-2 assume !(-1 == ~expectedDirection~0); 582945#L1458-2 assume !(1 == ~expectedDirection~0); 582944#L1459-2 havoc bobCall_#t~ret8, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 582942#L454-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 582937#L479-1 bobCall_#t~ret8 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret8;havoc bobCall_#t~ret8;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 582936#L980-1 assume 0 == initPersonOnFloor_~floor; 582898#L981-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 582891#L1088-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 569403#L772-2 assume !(0 == callOnFloor_~floorID); 569404#L775-2 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 584550#L784-5 havoc cleanup_#t~ret14, cleanup_#t~ret15, cleanup_~i~0, cleanup_~tmp~6, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~0;havoc cleanup_~i~0;havoc cleanup_~tmp~6;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_#t~ret32, __utac_acc__Specification3_spec__1_#t~ret33, __utac_acc__Specification3_spec__1_#t~ret34, __utac_acc__Specification3_spec__1_#t~ret35, __utac_acc__Specification3_spec__1_#t~ret36, __utac_acc__Specification3_spec__1_#t~ret37, __utac_acc__Specification3_spec__1_#t~ret38, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 584549#L2102-3 __utac_acc__Specification3_spec__1_#t~ret27 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 584548#L2154-9 __utac_acc__Specification3_spec__1_#t~ret28 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret28;havoc __utac_acc__Specification3_spec__1_#t~ret28; 584546#L1315-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 584533#L1377-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 584531#L1387-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 584529#L1398-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 584527#L1409-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 584524#L1420-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 541900#L1421-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret95, stopRequestedAtCurrentFloor_#t~ret96, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 553996#L709-63 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 553991#L736-63 stopRequestedAtCurrentFloor_#t~ret95 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret95;havoc stopRequestedAtCurrentFloor_#t~ret95; 553988#L2715-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 553989#L2119-43 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 553990#L2140-43 stopRequestedAtCurrentFloor_#t~ret96 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret96;havoc stopRequestedAtCurrentFloor_#t~ret96; 553987#L2722-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 553985#L2727-3 timeShift_#t~ret109 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 553983#L2864-3 assume !(0 != timeShift_~tmp___9~3); 553984#L2955-9 assume !(1 == ~doorState~0); 580930#L2955-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_#t~ret87, stopRequestedInDirection_#t~ret88, stopRequestedInDirection_#t~ret89, stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 580928#L2306-6 assume !(1 == stopRequestedInDirection_~dir); 580929#L2475-6 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 580926#L2628-6 timeShift_#t~ret116 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret116;havoc timeShift_#t~ret116; 581040#L2963-3 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 581041#L2682-9 assume !(1 == ~currentHeading~0); 581289#L2692-27 assume !(0 == ~currentFloorID~0); 580393#L2692-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 580389#L2698-23 havoc __utac_acc__Specification3_spec__2_#t~ret39, __utac_acc__Specification3_spec__2_#t~ret40, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 580384#L1446-3 assume !(-1 == ~expectedDirection~0); 580378#L1458-3 assume !(1 == ~expectedDirection~0); 580376#L1459-3 cleanup_~i~0 := 0; 580365#L198-2 [2021-11-09 09:20:42,219 INFO L793 eck$LassoCheckResult]: Loop: 580365#L198-2 assume !false; 580364#L199 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 580363#L202 assume cleanup_~i~0 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 580360#L1973 cleanup_#t~ret14 := isBlocked_#res;cleanup_~tmp___0~0 := cleanup_#t~ret14;havoc cleanup_#t~ret14; 580355#L206 assume 1 != cleanup_~tmp___0~0; 580351#L206-1 havoc isIdle_#res;havoc isIdle_#t~ret82, isIdle_~retValue_acc~20, isIdle_~tmp~17;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~17;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret77, anyStopRequested_#t~ret78, anyStopRequested_#t~ret79, anyStopRequested_#t~ret80, anyStopRequested_#t~ret81, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~16, anyStopRequested_~tmp___0~6, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~16;havoc anyStopRequested_~tmp___0~6;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~1;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 580348#L709-84 assume !(0 == isFloorCalling_~floorID); 580350#L713-84 assume !(1 == isFloorCalling_~floorID); 582493#L717-84 assume !(2 == isFloorCalling_~floorID); 582492#L721-84 assume !(3 == isFloorCalling_~floorID); 582490#L725-84 assume !(4 == isFloorCalling_~floorID);isFloorCalling_~retValue_acc~5 := 0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 582489#L736-84 anyStopRequested_#t~ret77 := isFloorCalling_#res;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret77;havoc anyStopRequested_#t~ret77; 582415#L2210 assume 0 != anyStopRequested_~tmp___3~1;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 569838#L2274 isIdle_#t~ret82 := anyStopRequested_#res;isIdle_~tmp~17 := isIdle_#t~ret82;havoc isIdle_#t~ret82;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~17 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 569836#L2287 cleanup_#t~ret15 := isIdle_#res;cleanup_~tmp~6 := cleanup_#t~ret15;havoc cleanup_#t~ret15; 569834#L218 assume !(0 != cleanup_~tmp~6);havoc timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_#t~ret32, __utac_acc__Specification3_spec__1_#t~ret33, __utac_acc__Specification3_spec__1_#t~ret34, __utac_acc__Specification3_spec__1_#t~ret35, __utac_acc__Specification3_spec__1_#t~ret36, __utac_acc__Specification3_spec__1_#t~ret37, __utac_acc__Specification3_spec__1_#t~ret38, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 569832#L2102-4 __utac_acc__Specification3_spec__1_#t~ret27 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 569830#L2154-12 __utac_acc__Specification3_spec__1_#t~ret28 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret28;havoc __utac_acc__Specification3_spec__1_#t~ret28; 569827#L1315-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 569823#L1377-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 543751#L1387-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 543734#L1398-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 543725#L1409-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 543712#L1420-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 543654#L1421-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret95, stopRequestedAtCurrentFloor_#t~ret96, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 543652#L709-89 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 543651#L736-89 stopRequestedAtCurrentFloor_#t~ret95 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret95;havoc stopRequestedAtCurrentFloor_#t~ret95; 543650#L2715-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 543649#L2119-54 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 543642#L2140-54 stopRequestedAtCurrentFloor_#t~ret96 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret96;havoc stopRequestedAtCurrentFloor_#t~ret96; 543637#L2722-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 543629#L2727-4 timeShift_#t~ret109 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 543618#L2864-4 assume !(0 != timeShift_~tmp___9~3); 543619#L2955-12 assume 1 == ~doorState~0;~doorState~0 := 0; 546724#L2955-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_#t~ret87, stopRequestedInDirection_#t~ret88, stopRequestedInDirection_#t~ret89, stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 546722#L2306-8 assume !(1 == stopRequestedInDirection_~dir); 543566#L2475-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 543561#L2628-8 timeShift_#t~ret116 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret116;havoc timeShift_#t~ret116; 543559#L2963-4 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 543560#L2682-12 assume !(1 == ~currentHeading~0); 581293#L2692-36 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 580395#L2692-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 580390#L2698-29 havoc __utac_acc__Specification3_spec__2_#t~ret39, __utac_acc__Specification3_spec__2_#t~ret40, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 580387#L1446-4 assume !(-1 == ~expectedDirection~0); 580381#L1458-4 assume !(1 == ~expectedDirection~0); 580375#L1459-4 cleanup_~i~0 := 1 + cleanup_~i~0; 580365#L198-2 [2021-11-09 09:20:42,219 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-09 09:20:42,219 INFO L85 PathProgramCache]: Analyzing trace with hash -1723882246, now seen corresponding path program 3 times [2021-11-09 09:20:42,220 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-09 09:20:42,220 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [416173893] [2021-11-09 09:20:42,220 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-09 09:20:42,220 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-09 09:20:42,242 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-09 09:20:42,279 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-09 09:20:42,279 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-09 09:20:42,279 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [416173893] [2021-11-09 09:20:42,280 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [416173893] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-09 09:20:42,280 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-09 09:20:42,280 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-11-09 09:20:42,280 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [725051845] [2021-11-09 09:20:42,281 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-11-09 09:20:42,281 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-09 09:20:42,281 INFO L85 PathProgramCache]: Analyzing trace with hash -45558792, now seen corresponding path program 1 times [2021-11-09 09:20:42,281 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-09 09:20:42,281 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1366548439] [2021-11-09 09:20:42,282 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-09 09:20:42,282 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-09 09:20:42,287 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-09 09:20:42,301 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-09 09:20:42,301 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-09 09:20:42,302 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1366548439] [2021-11-09 09:20:42,302 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1366548439] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-09 09:20:42,302 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-09 09:20:42,302 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-11-09 09:20:42,302 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2096781724] [2021-11-09 09:20:42,302 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-11-09 09:20:42,303 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-09 09:20:42,303 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-11-09 09:20:42,303 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-11-09 09:20:42,303 INFO L87 Difference]: Start difference. First operand 47991 states and 89727 transitions. cyclomatic complexity: 41737 Second operand has 4 states, 4 states have (on average 11.5) internal successors, (46), 4 states have internal predecessors, (46), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-09 09:20:43,865 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-09 09:20:43,865 INFO L93 Difference]: Finished difference Result 95099 states and 178367 transitions. [2021-11-09 09:20:43,865 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-11-09 09:20:43,865 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 95099 states and 178367 transitions. [2021-11-09 09:20:44,147 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 32796 [2021-11-09 09:20:44,367 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 95099 states to 95099 states and 178367 transitions. [2021-11-09 09:20:44,368 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 95099 [2021-11-09 09:20:44,424 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 95099 [2021-11-09 09:20:44,424 INFO L73 IsDeterministic]: Start isDeterministic. Operand 95099 states and 178367 transitions. [2021-11-09 09:20:44,895 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-11-09 09:20:44,895 INFO L681 BuchiCegarLoop]: Abstraction has 95099 states and 178367 transitions. [2021-11-09 09:20:44,937 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 95099 states and 178367 transitions. [2021-11-09 09:20:45,347 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 95099 to 47991. [2021-11-09 09:20:45,381 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 47991 states, 47991 states have (on average 1.8693296659790377) internal successors, (89711), 47990 states have internal predecessors, (89711), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-09 09:20:45,469 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 47991 states to 47991 states and 89711 transitions. [2021-11-09 09:20:45,469 INFO L704 BuchiCegarLoop]: Abstraction has 47991 states and 89711 transitions. [2021-11-09 09:20:45,469 INFO L587 BuchiCegarLoop]: Abstraction has 47991 states and 89711 transitions. [2021-11-09 09:20:45,469 INFO L425 BuchiCegarLoop]: ======== Iteration 10============ [2021-11-09 09:20:45,469 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 47991 states and 89711 transitions. [2021-11-09 09:20:45,834 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 11332 [2021-11-09 09:20:45,834 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-11-09 09:20:45,834 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-11-09 09:20:45,837 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-09 09:20:45,837 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-09 09:20:45,838 INFO L791 eck$LassoCheckResult]: Stem: 685769#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(2);call write~init~int(48, #t~string4.base, #t~string4.offset, 1);call write~init~int(0, #t~string4.base, 1 + #t~string4.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(31);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(12);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(30);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(9);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(21);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(30);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(9);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(21);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(30);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(9);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(25);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(30);call #t~string72.base, #t~string72.offset := #Ultimate.allocOnStack(9);call #t~string73.base, #t~string73.offset := #Ultimate.allocOnStack(25);call #t~string120.base, #t~string120.offset := #Ultimate.allocOnStack(10);call #t~string122.base, #t~string122.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string122.base, #t~string122.offset, 1);call write~init~int(95, #t~string122.base, 1 + #t~string122.offset, 1);call write~init~int(93, #t~string122.base, 2 + #t~string122.offset, 1);call write~init~int(0, #t~string122.base, 3 + #t~string122.offset, 1);call #t~string124.base, #t~string124.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string124.base, #t~string124.offset, 1);call write~init~int(93, #t~string124.base, 1 + #t~string124.offset, 1);call write~init~int(32, #t~string124.base, 2 + #t~string124.offset, 1);call write~init~int(0, #t~string124.base, 3 + #t~string124.offset, 1);call #t~string126.base, #t~string126.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string126.base, #t~string126.offset, 1);call write~init~int(97, #t~string126.base, 1 + #t~string126.offset, 1);call write~init~int(116, #t~string126.base, 2 + #t~string126.offset, 1);call write~init~int(32, #t~string126.base, 3 + #t~string126.offset, 1);call write~init~int(0, #t~string126.base, 4 + #t~string126.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string128.base, #t~string128.offset, 1);call write~init~int(105, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 2 + #t~string128.offset, 1);call #t~string130.base, #t~string130.offset := #Ultimate.allocOnStack(10);call #t~string132.base, #t~string132.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string132.base, #t~string132.offset, 1);call write~init~int(112, #t~string132.base, 1 + #t~string132.offset, 1);call write~init~int(0, #t~string132.base, 2 + #t~string132.offset, 1);call #t~string134.base, #t~string134.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string134.base, #t~string134.offset, 1);call write~init~int(111, #t~string134.base, 1 + #t~string134.offset, 1);call write~init~int(119, #t~string134.base, 2 + #t~string134.offset, 1);call write~init~int(110, #t~string134.base, 3 + #t~string134.offset, 1);call write~init~int(0, #t~string134.base, 4 + #t~string134.offset, 1);call #t~string136.base, #t~string136.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string136.base, #t~string136.offset, 1);call write~init~int(73, #t~string136.base, 1 + #t~string136.offset, 1);call write~init~int(76, #t~string136.base, 2 + #t~string136.offset, 1);call write~init~int(95, #t~string136.base, 3 + #t~string136.offset, 1);call write~init~int(112, #t~string136.base, 4 + #t~string136.offset, 1);call write~init~int(58, #t~string136.base, 5 + #t~string136.offset, 1);call write~init~int(0, #t~string136.base, 6 + #t~string136.offset, 1);call #t~string138.base, #t~string138.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string138.base, #t~string138.offset, 1);call write~init~int(37, #t~string138.base, 1 + #t~string138.offset, 1);call write~init~int(105, #t~string138.base, 2 + #t~string138.offset, 1);call write~init~int(0, #t~string138.base, 3 + #t~string138.offset, 1);call #t~string140.base, #t~string140.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string140.base, #t~string140.offset, 1);call write~init~int(37, #t~string140.base, 1 + #t~string140.offset, 1);call write~init~int(105, #t~string140.base, 2 + #t~string140.offset, 1);call write~init~int(0, #t~string140.base, 3 + #t~string140.offset, 1);call #t~string142.base, #t~string142.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string142.base, #t~string142.offset, 1);call write~init~int(37, #t~string142.base, 1 + #t~string142.offset, 1);call write~init~int(105, #t~string142.base, 2 + #t~string142.offset, 1);call write~init~int(0, #t~string142.base, 3 + #t~string142.offset, 1);call #t~string144.base, #t~string144.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string144.base, #t~string144.offset, 1);call write~init~int(37, #t~string144.base, 1 + #t~string144.offset, 1);call write~init~int(105, #t~string144.base, 2 + #t~string144.offset, 1);call write~init~int(0, #t~string144.base, 3 + #t~string144.offset, 1);call #t~string146.base, #t~string146.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string146.base, #t~string146.offset, 1);call write~init~int(37, #t~string146.base, 1 + #t~string146.offset, 1);call write~init~int(105, #t~string146.base, 2 + #t~string146.offset, 1);call write~init~int(0, #t~string146.base, 3 + #t~string146.offset, 1);call #t~string148.base, #t~string148.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string148.base, #t~string148.offset, 1);call write~init~int(70, #t~string148.base, 1 + #t~string148.offset, 1);call write~init~int(95, #t~string148.base, 2 + #t~string148.offset, 1);call write~init~int(112, #t~string148.base, 3 + #t~string148.offset, 1);call write~init~int(58, #t~string148.base, 4 + #t~string148.offset, 1);call write~init~int(0, #t~string148.base, 5 + #t~string148.offset, 1);call #t~string151.base, #t~string151.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string151.base, #t~string151.offset, 1);call write~init~int(37, #t~string151.base, 1 + #t~string151.offset, 1);call write~init~int(105, #t~string151.base, 2 + #t~string151.offset, 1);call write~init~int(0, #t~string151.base, 3 + #t~string151.offset, 1);call #t~string154.base, #t~string154.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string154.base, #t~string154.offset, 1);call write~init~int(37, #t~string154.base, 1 + #t~string154.offset, 1);call write~init~int(105, #t~string154.base, 2 + #t~string154.offset, 1);call write~init~int(0, #t~string154.base, 3 + #t~string154.offset, 1);call #t~string157.base, #t~string157.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string157.base, #t~string157.offset, 1);call write~init~int(37, #t~string157.base, 1 + #t~string157.offset, 1);call write~init~int(105, #t~string157.base, 2 + #t~string157.offset, 1);call write~init~int(0, #t~string157.base, 3 + #t~string157.offset, 1);call #t~string160.base, #t~string160.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string160.base, #t~string160.offset, 1);call write~init~int(37, #t~string160.base, 1 + #t~string160.offset, 1);call write~init~int(105, #t~string160.base, 2 + #t~string160.offset, 1);call write~init~int(0, #t~string160.base, 3 + #t~string160.offset, 1);call #t~string163.base, #t~string163.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string163.base, #t~string163.offset, 1);call write~init~int(37, #t~string163.base, 1 + #t~string163.offset, 1);call write~init~int(105, #t~string163.base, 2 + #t~string163.offset, 1);call write~init~int(0, #t~string163.base, 3 + #t~string163.offset, 1);call #t~string165.base, #t~string165.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string165.base, #t~string165.offset, 1);call write~init~int(0, #t~string165.base, 1 + #t~string165.offset, 1);~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 685770#L-1 havoc main_#res;havoc main_#t~ret20, main_~retValue_acc~1, main_~tmp~8;havoc main_~retValue_acc~1;havoc main_~tmp~8; 685269#L1866 havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 681229#L1874 main_#t~ret20 := valid_product_#res;main_~tmp~8 := main_#t~ret20;havoc main_#t~ret20; 681230#L395 assume 0 != main_~tmp~8; 684228#L368 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 682432#L702 havoc bobCall_#t~ret8, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 682433#L454 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 682936#L479 bobCall_#t~ret8 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret8;havoc bobCall_#t~ret8;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 681198#L980 assume 0 == initPersonOnFloor_~floor; 681199#L981 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 680554#L1088-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 685458#L772 assume !(0 == callOnFloor_~floorID); 685460#L775 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 681522#L784-2 havoc timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_#t~ret32, __utac_acc__Specification3_spec__1_#t~ret33, __utac_acc__Specification3_spec__1_#t~ret34, __utac_acc__Specification3_spec__1_#t~ret35, __utac_acc__Specification3_spec__1_#t~ret36, __utac_acc__Specification3_spec__1_#t~ret37, __utac_acc__Specification3_spec__1_#t~ret38, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 680759#L2102 __utac_acc__Specification3_spec__1_#t~ret27 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 680760#L2154 __utac_acc__Specification3_spec__1_#t~ret28 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret28;havoc __utac_acc__Specification3_spec__1_#t~ret28; 682701#L1315 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 682702#L1316 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 681751#L2119 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 680669#L2140 __utac_acc__Specification3_spec__1_#t~ret29 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret29;havoc __utac_acc__Specification3_spec__1_#t~ret29; 680670#L1320 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 681428#L1421 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret95, stopRequestedAtCurrentFloor_#t~ret96, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 681429#L709 assume !(0 == isFloorCalling_~floorID); 683220#L713 assume !(1 == isFloorCalling_~floorID); 683221#L717 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 687398#L736 stopRequestedAtCurrentFloor_#t~ret95 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret95;havoc stopRequestedAtCurrentFloor_#t~ret95; 687397#L2715 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 687396#L2119-10 assume !(0 == buttonForFloorIsPressed_~floorID); 687395#L2123-10 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 687391#L2140-10 stopRequestedAtCurrentFloor_#t~ret96 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret96;havoc stopRequestedAtCurrentFloor_#t~ret96; 687390#L2722 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 687389#L2727 timeShift_#t~ret109 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 687388#L2864 assume !(0 != timeShift_~tmp___9~3); 686144#L2955 assume !(1 == ~doorState~0); 686145#L2955-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_#t~ret87, stopRequestedInDirection_#t~ret88, stopRequestedInDirection_#t~ret89, stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 687380#L2306 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~7;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~7;isTopFloor_~retValue_acc~7 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~7; 686713#L1283 stopRequestedInDirection_#t~ret83 := isTopFloor_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret83;havoc stopRequestedInDirection_#t~ret83; 686714#L2310 assume 0 != stopRequestedInDirection_~tmp~18;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 687262#L2628 timeShift_#t~ret116 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret116;havoc timeShift_#t~ret116; 687260#L2963 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 687258#L2682 assume !(1 == ~currentHeading~0); 687257#L2692 assume !(0 == ~currentFloorID~0); 687187#L2692-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 687186#L2698-5 havoc __utac_acc__Specification3_spec__2_#t~ret39, __utac_acc__Specification3_spec__2_#t~ret40, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 687184#L1446 assume !(-1 == ~expectedDirection~0); 687180#L1458 assume !(1 == ~expectedDirection~0); 687179#L1459 havoc timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_#t~ret32, __utac_acc__Specification3_spec__1_#t~ret33, __utac_acc__Specification3_spec__1_#t~ret34, __utac_acc__Specification3_spec__1_#t~ret35, __utac_acc__Specification3_spec__1_#t~ret36, __utac_acc__Specification3_spec__1_#t~ret37, __utac_acc__Specification3_spec__1_#t~ret38, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 687178#L2102-1 __utac_acc__Specification3_spec__1_#t~ret27 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 687176#L2154-3 __utac_acc__Specification3_spec__1_#t~ret28 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret28;havoc __utac_acc__Specification3_spec__1_#t~ret28; 687143#L1315-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 687141#L1377-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 687139#L1387-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 687137#L1398-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 687123#L1409-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 687108#L1420-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 687103#L1421-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret95, stopRequestedAtCurrentFloor_#t~ret96, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 687099#L709-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 687097#L736-21 stopRequestedAtCurrentFloor_#t~ret95 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret95;havoc stopRequestedAtCurrentFloor_#t~ret95; 687095#L2715-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 687091#L2119-21 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 687083#L2140-21 stopRequestedAtCurrentFloor_#t~ret96 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret96;havoc stopRequestedAtCurrentFloor_#t~ret96; 687080#L2722-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 687077#L2727-1 timeShift_#t~ret109 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 687074#L2864-1 assume !(0 != timeShift_~tmp___9~3); 687071#L2955-3 assume !(1 == ~doorState~0); 687069#L2955-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_#t~ret87, stopRequestedInDirection_#t~ret88, stopRequestedInDirection_#t~ret89, stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 687066#L2306-2 assume !(1 == stopRequestedInDirection_~dir); 687062#L2475-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 687043#L2628-2 timeShift_#t~ret116 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret116;havoc timeShift_#t~ret116; 687028#L2963-1 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 687030#L2682-3 assume !(1 == ~currentHeading~0); 692332#L2692-9 assume !(0 == ~currentFloorID~0); 692295#L2692-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 689067#L2698-11 havoc __utac_acc__Specification3_spec__2_#t~ret39, __utac_acc__Specification3_spec__2_#t~ret40, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 689063#L1446-1 assume !(-1 == ~expectedDirection~0); 689057#L1458-1 assume !(1 == ~expectedDirection~0); 689053#L1459-1 havoc timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_#t~ret32, __utac_acc__Specification3_spec__1_#t~ret33, __utac_acc__Specification3_spec__1_#t~ret34, __utac_acc__Specification3_spec__1_#t~ret35, __utac_acc__Specification3_spec__1_#t~ret36, __utac_acc__Specification3_spec__1_#t~ret37, __utac_acc__Specification3_spec__1_#t~ret38, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 689051#L2102-2 __utac_acc__Specification3_spec__1_#t~ret27 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 689049#L2154-6 __utac_acc__Specification3_spec__1_#t~ret28 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret28;havoc __utac_acc__Specification3_spec__1_#t~ret28; 689044#L1315-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 689045#L1377-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 689020#L1387-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 689014#L1398-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 689006#L1409-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 688905#L1420-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 688832#L1421-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret95, stopRequestedAtCurrentFloor_#t~ret96, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 688830#L709-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 688829#L736-42 stopRequestedAtCurrentFloor_#t~ret95 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret95;havoc stopRequestedAtCurrentFloor_#t~ret95; 688828#L2715-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 688826#L2119-32 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 688822#L2140-32 stopRequestedAtCurrentFloor_#t~ret96 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret96;havoc stopRequestedAtCurrentFloor_#t~ret96; 688820#L2722-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 688819#L2727-2 timeShift_#t~ret109 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 688817#L2864-2 assume !(0 != timeShift_~tmp___9~3); 688816#L2955-6 assume !(1 == ~doorState~0); 688815#L2955-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_#t~ret87, stopRequestedInDirection_#t~ret88, stopRequestedInDirection_#t~ret89, stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 688813#L2306-4 assume !(1 == stopRequestedInDirection_~dir); 688793#L2475-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 688791#L2628-4 timeShift_#t~ret116 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret116;havoc timeShift_#t~ret116; 688787#L2963-2 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 688788#L2682-6 assume !(1 == ~currentHeading~0); 688717#L2692-18 assume !(0 == ~currentFloorID~0); 688718#L2692-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 696322#L2698-17 havoc __utac_acc__Specification3_spec__2_#t~ret39, __utac_acc__Specification3_spec__2_#t~ret40, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 696310#L1446-2 assume !(-1 == ~expectedDirection~0); 696211#L1458-2 assume !(1 == ~expectedDirection~0); 696206#L1459-2 havoc bobCall_#t~ret8, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 696098#L454-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 696089#L479-1 bobCall_#t~ret8 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret8;havoc bobCall_#t~ret8;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 696070#L980-1 assume 0 == initPersonOnFloor_~floor; 692745#L981-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 692707#L1088-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 692704#L772-2 assume !(0 == callOnFloor_~floorID); 692699#L775-2 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 692693#L784-5 havoc cleanup_#t~ret14, cleanup_#t~ret15, cleanup_~i~0, cleanup_~tmp~6, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~0;havoc cleanup_~i~0;havoc cleanup_~tmp~6;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_#t~ret32, __utac_acc__Specification3_spec__1_#t~ret33, __utac_acc__Specification3_spec__1_#t~ret34, __utac_acc__Specification3_spec__1_#t~ret35, __utac_acc__Specification3_spec__1_#t~ret36, __utac_acc__Specification3_spec__1_#t~ret37, __utac_acc__Specification3_spec__1_#t~ret38, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 692691#L2102-3 __utac_acc__Specification3_spec__1_#t~ret27 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 692689#L2154-9 __utac_acc__Specification3_spec__1_#t~ret28 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret28;havoc __utac_acc__Specification3_spec__1_#t~ret28; 692684#L1315-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 692686#L1377-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 692668#L1387-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 692637#L1398-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 692618#L1409-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 692597#L1420-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 692583#L1421-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret95, stopRequestedAtCurrentFloor_#t~ret96, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 692581#L709-63 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 692580#L736-63 stopRequestedAtCurrentFloor_#t~ret95 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret95;havoc stopRequestedAtCurrentFloor_#t~ret95; 692579#L2715-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 692578#L2119-43 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 692574#L2140-43 stopRequestedAtCurrentFloor_#t~ret96 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret96;havoc stopRequestedAtCurrentFloor_#t~ret96; 692565#L2722-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 692567#L2727-3 timeShift_#t~ret109 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 692560#L2864-3 assume !(0 != timeShift_~tmp___9~3); 692562#L2955-9 assume !(1 == ~doorState~0); 692554#L2955-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_#t~ret87, stopRequestedInDirection_#t~ret88, stopRequestedInDirection_#t~ret89, stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 692555#L2306-6 assume !(1 == stopRequestedInDirection_~dir); 692446#L2475-6 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 692437#L2628-6 timeShift_#t~ret116 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret116;havoc timeShift_#t~ret116; 692434#L2963-3 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 692435#L2682-9 assume !(1 == ~currentHeading~0); 707526#L2692-27 assume !(0 == ~currentFloorID~0); 707507#L2692-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 707498#L2698-23 havoc __utac_acc__Specification3_spec__2_#t~ret39, __utac_acc__Specification3_spec__2_#t~ret40, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 707496#L1446-3 assume !(-1 == ~expectedDirection~0); 707493#L1458-3 assume !(1 == ~expectedDirection~0); 707491#L1459-3 cleanup_~i~0 := 0; 707488#L198-2 [2021-11-09 09:20:45,839 INFO L793 eck$LassoCheckResult]: Loop: 707488#L198-2 assume !false; 707487#L199 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 707486#L202 assume cleanup_~i~0 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 707485#L1973 cleanup_#t~ret14 := isBlocked_#res;cleanup_~tmp___0~0 := cleanup_#t~ret14;havoc cleanup_#t~ret14; 707478#L206 assume 1 != cleanup_~tmp___0~0; 707479#L206-1 havoc isIdle_#res;havoc isIdle_#t~ret82, isIdle_~retValue_acc~20, isIdle_~tmp~17;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~17;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret77, anyStopRequested_#t~ret78, anyStopRequested_#t~ret79, anyStopRequested_#t~ret80, anyStopRequested_#t~ret81, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~16, anyStopRequested_~tmp___0~6, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~16;havoc anyStopRequested_~tmp___0~6;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~1;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 707406#L709-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 707404#L736-84 anyStopRequested_#t~ret77 := isFloorCalling_#res;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret77;havoc anyStopRequested_#t~ret77; 707405#L2210 assume !(0 != anyStopRequested_~tmp___3~1); 707315#L2214 assume !(0 != ~floorButtons_0~0);isFloorCalling_#in~floorID := 1;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 707317#L709-85 assume !(0 == isFloorCalling_~floorID); 707265#L713-85 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 707262#L736-85 anyStopRequested_#t~ret78 := isFloorCalling_#res;anyStopRequested_~tmp___2~2 := anyStopRequested_#t~ret78;havoc anyStopRequested_#t~ret78; 707258#L2221 assume 0 != anyStopRequested_~tmp___2~2;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 707250#L2274 isIdle_#t~ret82 := anyStopRequested_#res;isIdle_~tmp~17 := isIdle_#t~ret82;havoc isIdle_#t~ret82;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~17 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 707249#L2287 cleanup_#t~ret15 := isIdle_#res;cleanup_~tmp~6 := cleanup_#t~ret15;havoc cleanup_#t~ret15; 707248#L218 assume !(0 != cleanup_~tmp~6);havoc timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_#t~ret32, __utac_acc__Specification3_spec__1_#t~ret33, __utac_acc__Specification3_spec__1_#t~ret34, __utac_acc__Specification3_spec__1_#t~ret35, __utac_acc__Specification3_spec__1_#t~ret36, __utac_acc__Specification3_spec__1_#t~ret37, __utac_acc__Specification3_spec__1_#t~ret38, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 707247#L2102-4 __utac_acc__Specification3_spec__1_#t~ret27 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 707246#L2154-12 __utac_acc__Specification3_spec__1_#t~ret28 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret28;havoc __utac_acc__Specification3_spec__1_#t~ret28; 707212#L1315-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 707187#L1377-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 707184#L1387-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 707171#L1398-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 707146#L1409-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 707127#L1420-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 707118#L1421-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret95, stopRequestedAtCurrentFloor_#t~ret96, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 707116#L709-89 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 707115#L736-89 stopRequestedAtCurrentFloor_#t~ret95 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret95;havoc stopRequestedAtCurrentFloor_#t~ret95; 707114#L2715-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 707113#L2119-54 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 707108#L2140-54 stopRequestedAtCurrentFloor_#t~ret96 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret96;havoc stopRequestedAtCurrentFloor_#t~ret96; 707106#L2722-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 707105#L2727-4 timeShift_#t~ret109 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 707103#L2864-4 assume !(0 != timeShift_~tmp___9~3); 707102#L2955-12 assume 1 == ~doorState~0;~doorState~0 := 0; 707101#L2955-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_#t~ret87, stopRequestedInDirection_#t~ret88, stopRequestedInDirection_#t~ret89, stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 707099#L2306-8 assume !(1 == stopRequestedInDirection_~dir); 707083#L2475-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 707078#L2628-8 timeShift_#t~ret116 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret116;havoc timeShift_#t~ret116; 707076#L2963-4 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 707077#L2682-12 assume !(1 == ~currentHeading~0); 710531#L2692-36 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 710522#L2692-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 710517#L2698-29 havoc __utac_acc__Specification3_spec__2_#t~ret39, __utac_acc__Specification3_spec__2_#t~ret40, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 710505#L1446-4 assume !(-1 == ~expectedDirection~0); 710504#L1458-4 assume !(1 == ~expectedDirection~0); 707490#L1459-4 cleanup_~i~0 := 1 + cleanup_~i~0; 707488#L198-2 [2021-11-09 09:20:45,840 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-09 09:20:45,840 INFO L85 PathProgramCache]: Analyzing trace with hash -1723882246, now seen corresponding path program 4 times [2021-11-09 09:20:45,840 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-09 09:20:45,841 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1557160094] [2021-11-09 09:20:45,841 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-09 09:20:45,841 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-09 09:20:45,867 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-09 09:20:45,920 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-09 09:20:45,920 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-09 09:20:45,921 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1557160094] [2021-11-09 09:20:45,921 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1557160094] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-09 09:20:45,921 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-09 09:20:45,921 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-11-09 09:20:45,921 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [616114622] [2021-11-09 09:20:45,922 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-11-09 09:20:45,922 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-09 09:20:45,922 INFO L85 PathProgramCache]: Analyzing trace with hash -927398331, now seen corresponding path program 1 times [2021-11-09 09:20:45,923 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-09 09:20:45,923 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1222491678] [2021-11-09 09:20:45,923 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-09 09:20:45,923 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-09 09:20:45,931 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-09 09:20:45,947 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-09 09:20:45,948 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-09 09:20:45,948 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1222491678] [2021-11-09 09:20:45,948 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1222491678] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-09 09:20:45,948 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-09 09:20:45,948 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-11-09 09:20:45,949 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [524377830] [2021-11-09 09:20:45,949 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-11-09 09:20:45,949 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-09 09:20:45,950 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-11-09 09:20:45,950 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-11-09 09:20:45,950 INFO L87 Difference]: Start difference. First operand 47991 states and 89711 transitions. cyclomatic complexity: 41721 Second operand has 4 states, 4 states have (on average 11.75) internal successors, (47), 4 states have internal predecessors, (47), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-09 09:20:46,631 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-09 09:20:46,631 INFO L93 Difference]: Finished difference Result 87987 states and 165031 transitions. [2021-11-09 09:20:46,632 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-11-09 09:20:46,632 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 87987 states and 165031 transitions. [2021-11-09 09:20:46,995 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 21604 [2021-11-09 09:20:47,747 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 87987 states to 87987 states and 165031 transitions. [2021-11-09 09:20:47,748 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 87987 [2021-11-09 09:20:47,801 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 87987 [2021-11-09 09:20:47,801 INFO L73 IsDeterministic]: Start isDeterministic. Operand 87987 states and 165031 transitions. [2021-11-09 09:20:47,836 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-11-09 09:20:47,836 INFO L681 BuchiCegarLoop]: Abstraction has 87987 states and 165031 transitions. [2021-11-09 09:20:47,873 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 87987 states and 165031 transitions. [2021-11-09 09:20:48,284 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 87987 to 48043. [2021-11-09 09:20:48,319 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 48043 states, 48043 states have (on average 1.8683887350914805) internal successors, (89763), 48042 states have internal predecessors, (89763), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-09 09:20:48,405 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 48043 states to 48043 states and 89763 transitions. [2021-11-09 09:20:48,405 INFO L704 BuchiCegarLoop]: Abstraction has 48043 states and 89763 transitions. [2021-11-09 09:20:48,405 INFO L587 BuchiCegarLoop]: Abstraction has 48043 states and 89763 transitions. [2021-11-09 09:20:48,405 INFO L425 BuchiCegarLoop]: ======== Iteration 11============ [2021-11-09 09:20:48,405 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 48043 states and 89763 transitions. [2021-11-09 09:20:48,901 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 11344 [2021-11-09 09:20:48,901 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-11-09 09:20:48,901 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-11-09 09:20:48,912 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-09 09:20:48,912 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-09 09:20:48,914 INFO L791 eck$LassoCheckResult]: Stem: 821854#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(2);call write~init~int(48, #t~string4.base, #t~string4.offset, 1);call write~init~int(0, #t~string4.base, 1 + #t~string4.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(31);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(12);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(30);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(9);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(21);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(30);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(9);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(21);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(30);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(9);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(25);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(30);call #t~string72.base, #t~string72.offset := #Ultimate.allocOnStack(9);call #t~string73.base, #t~string73.offset := #Ultimate.allocOnStack(25);call #t~string120.base, #t~string120.offset := #Ultimate.allocOnStack(10);call #t~string122.base, #t~string122.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string122.base, #t~string122.offset, 1);call write~init~int(95, #t~string122.base, 1 + #t~string122.offset, 1);call write~init~int(93, #t~string122.base, 2 + #t~string122.offset, 1);call write~init~int(0, #t~string122.base, 3 + #t~string122.offset, 1);call #t~string124.base, #t~string124.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string124.base, #t~string124.offset, 1);call write~init~int(93, #t~string124.base, 1 + #t~string124.offset, 1);call write~init~int(32, #t~string124.base, 2 + #t~string124.offset, 1);call write~init~int(0, #t~string124.base, 3 + #t~string124.offset, 1);call #t~string126.base, #t~string126.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string126.base, #t~string126.offset, 1);call write~init~int(97, #t~string126.base, 1 + #t~string126.offset, 1);call write~init~int(116, #t~string126.base, 2 + #t~string126.offset, 1);call write~init~int(32, #t~string126.base, 3 + #t~string126.offset, 1);call write~init~int(0, #t~string126.base, 4 + #t~string126.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string128.base, #t~string128.offset, 1);call write~init~int(105, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 2 + #t~string128.offset, 1);call #t~string130.base, #t~string130.offset := #Ultimate.allocOnStack(10);call #t~string132.base, #t~string132.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string132.base, #t~string132.offset, 1);call write~init~int(112, #t~string132.base, 1 + #t~string132.offset, 1);call write~init~int(0, #t~string132.base, 2 + #t~string132.offset, 1);call #t~string134.base, #t~string134.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string134.base, #t~string134.offset, 1);call write~init~int(111, #t~string134.base, 1 + #t~string134.offset, 1);call write~init~int(119, #t~string134.base, 2 + #t~string134.offset, 1);call write~init~int(110, #t~string134.base, 3 + #t~string134.offset, 1);call write~init~int(0, #t~string134.base, 4 + #t~string134.offset, 1);call #t~string136.base, #t~string136.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string136.base, #t~string136.offset, 1);call write~init~int(73, #t~string136.base, 1 + #t~string136.offset, 1);call write~init~int(76, #t~string136.base, 2 + #t~string136.offset, 1);call write~init~int(95, #t~string136.base, 3 + #t~string136.offset, 1);call write~init~int(112, #t~string136.base, 4 + #t~string136.offset, 1);call write~init~int(58, #t~string136.base, 5 + #t~string136.offset, 1);call write~init~int(0, #t~string136.base, 6 + #t~string136.offset, 1);call #t~string138.base, #t~string138.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string138.base, #t~string138.offset, 1);call write~init~int(37, #t~string138.base, 1 + #t~string138.offset, 1);call write~init~int(105, #t~string138.base, 2 + #t~string138.offset, 1);call write~init~int(0, #t~string138.base, 3 + #t~string138.offset, 1);call #t~string140.base, #t~string140.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string140.base, #t~string140.offset, 1);call write~init~int(37, #t~string140.base, 1 + #t~string140.offset, 1);call write~init~int(105, #t~string140.base, 2 + #t~string140.offset, 1);call write~init~int(0, #t~string140.base, 3 + #t~string140.offset, 1);call #t~string142.base, #t~string142.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string142.base, #t~string142.offset, 1);call write~init~int(37, #t~string142.base, 1 + #t~string142.offset, 1);call write~init~int(105, #t~string142.base, 2 + #t~string142.offset, 1);call write~init~int(0, #t~string142.base, 3 + #t~string142.offset, 1);call #t~string144.base, #t~string144.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string144.base, #t~string144.offset, 1);call write~init~int(37, #t~string144.base, 1 + #t~string144.offset, 1);call write~init~int(105, #t~string144.base, 2 + #t~string144.offset, 1);call write~init~int(0, #t~string144.base, 3 + #t~string144.offset, 1);call #t~string146.base, #t~string146.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string146.base, #t~string146.offset, 1);call write~init~int(37, #t~string146.base, 1 + #t~string146.offset, 1);call write~init~int(105, #t~string146.base, 2 + #t~string146.offset, 1);call write~init~int(0, #t~string146.base, 3 + #t~string146.offset, 1);call #t~string148.base, #t~string148.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string148.base, #t~string148.offset, 1);call write~init~int(70, #t~string148.base, 1 + #t~string148.offset, 1);call write~init~int(95, #t~string148.base, 2 + #t~string148.offset, 1);call write~init~int(112, #t~string148.base, 3 + #t~string148.offset, 1);call write~init~int(58, #t~string148.base, 4 + #t~string148.offset, 1);call write~init~int(0, #t~string148.base, 5 + #t~string148.offset, 1);call #t~string151.base, #t~string151.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string151.base, #t~string151.offset, 1);call write~init~int(37, #t~string151.base, 1 + #t~string151.offset, 1);call write~init~int(105, #t~string151.base, 2 + #t~string151.offset, 1);call write~init~int(0, #t~string151.base, 3 + #t~string151.offset, 1);call #t~string154.base, #t~string154.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string154.base, #t~string154.offset, 1);call write~init~int(37, #t~string154.base, 1 + #t~string154.offset, 1);call write~init~int(105, #t~string154.base, 2 + #t~string154.offset, 1);call write~init~int(0, #t~string154.base, 3 + #t~string154.offset, 1);call #t~string157.base, #t~string157.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string157.base, #t~string157.offset, 1);call write~init~int(37, #t~string157.base, 1 + #t~string157.offset, 1);call write~init~int(105, #t~string157.base, 2 + #t~string157.offset, 1);call write~init~int(0, #t~string157.base, 3 + #t~string157.offset, 1);call #t~string160.base, #t~string160.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string160.base, #t~string160.offset, 1);call write~init~int(37, #t~string160.base, 1 + #t~string160.offset, 1);call write~init~int(105, #t~string160.base, 2 + #t~string160.offset, 1);call write~init~int(0, #t~string160.base, 3 + #t~string160.offset, 1);call #t~string163.base, #t~string163.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string163.base, #t~string163.offset, 1);call write~init~int(37, #t~string163.base, 1 + #t~string163.offset, 1);call write~init~int(105, #t~string163.base, 2 + #t~string163.offset, 1);call write~init~int(0, #t~string163.base, 3 + #t~string163.offset, 1);call #t~string165.base, #t~string165.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string165.base, #t~string165.offset, 1);call write~init~int(0, #t~string165.base, 1 + #t~string165.offset, 1);~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 821855#L-1 havoc main_#res;havoc main_#t~ret20, main_~retValue_acc~1, main_~tmp~8;havoc main_~retValue_acc~1;havoc main_~tmp~8; 821327#L1866 havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 817219#L1874 main_#t~ret20 := valid_product_#res;main_~tmp~8 := main_#t~ret20;havoc main_#t~ret20; 817220#L395 assume 0 != main_~tmp~8; 820278#L368 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 818433#L702 havoc bobCall_#t~ret8, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 818434#L454 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 818943#L479 bobCall_#t~ret8 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret8;havoc bobCall_#t~ret8;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 817188#L980 assume 0 == initPersonOnFloor_~floor; 817189#L981 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 816544#L1088-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 821533#L772 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 817511#L784-2 havoc timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_#t~ret32, __utac_acc__Specification3_spec__1_#t~ret33, __utac_acc__Specification3_spec__1_#t~ret34, __utac_acc__Specification3_spec__1_#t~ret35, __utac_acc__Specification3_spec__1_#t~ret36, __utac_acc__Specification3_spec__1_#t~ret37, __utac_acc__Specification3_spec__1_#t~ret38, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 816749#L2102 __utac_acc__Specification3_spec__1_#t~ret27 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 816750#L2154 __utac_acc__Specification3_spec__1_#t~ret28 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret28;havoc __utac_acc__Specification3_spec__1_#t~ret28; 818708#L1315 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 818709#L1316 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 817740#L2119 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 816659#L2140 __utac_acc__Specification3_spec__1_#t~ret29 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret29;havoc __utac_acc__Specification3_spec__1_#t~ret29; 816660#L1320 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 817397#L1421 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret95, stopRequestedAtCurrentFloor_#t~ret96, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 817418#L709 assume !(0 == isFloorCalling_~floorID); 819235#L713 assume !(1 == isFloorCalling_~floorID); 819236#L717 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 816736#L736 stopRequestedAtCurrentFloor_#t~ret95 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret95;havoc stopRequestedAtCurrentFloor_#t~ret95; 818557#L2715 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 817580#L2119-10 assume !(0 == buttonForFloorIsPressed_~floorID); 817581#L2123-10 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 817201#L2140-10 stopRequestedAtCurrentFloor_#t~ret96 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret96;havoc stopRequestedAtCurrentFloor_#t~ret96; 817202#L2722 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 822813#L2727 timeShift_#t~ret109 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 823126#L2864 assume !(0 != timeShift_~tmp___9~3); 822272#L2955 assume !(1 == ~doorState~0); 820722#L2955-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_#t~ret87, stopRequestedInDirection_#t~ret88, stopRequestedInDirection_#t~ret89, stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 819283#L2306 assume !(1 == stopRequestedInDirection_~dir); 819284#L2475 assume !(0 == ~currentFloorID~0); 822590#L2481 assume !(~currentFloorID~0 > 0); 819785#L2496 assume ~currentFloorID~0 > 0; 824354#L2498 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 824353#L2499 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 821512#L2628 timeShift_#t~ret116 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret116;havoc timeShift_#t~ret116; 823700#L2963 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 823701#L2682 assume !(1 == ~currentHeading~0); 819604#L2692 assume !(0 == ~currentFloorID~0); 819605#L2692-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 828088#L2698-5 havoc __utac_acc__Specification3_spec__2_#t~ret39, __utac_acc__Specification3_spec__2_#t~ret40, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 828079#L1446 assume !(-1 == ~expectedDirection~0); 828075#L1458 assume !(1 == ~expectedDirection~0); 827661#L1459 havoc timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_#t~ret32, __utac_acc__Specification3_spec__1_#t~ret33, __utac_acc__Specification3_spec__1_#t~ret34, __utac_acc__Specification3_spec__1_#t~ret35, __utac_acc__Specification3_spec__1_#t~ret36, __utac_acc__Specification3_spec__1_#t~ret37, __utac_acc__Specification3_spec__1_#t~ret38, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 827660#L2102-1 __utac_acc__Specification3_spec__1_#t~ret27 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 827659#L2154-3 __utac_acc__Specification3_spec__1_#t~ret28 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret28;havoc __utac_acc__Specification3_spec__1_#t~ret28; 827658#L1315-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 827656#L1377-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 827657#L2119-16 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 836689#L2140-16 __utac_acc__Specification3_spec__1_#t~ret34 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret34;havoc __utac_acc__Specification3_spec__1_#t~ret34; 835364#L1381-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 818386#L1421-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret95, stopRequestedAtCurrentFloor_#t~ret96, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 818387#L709-21 assume !(0 == isFloorCalling_~floorID); 822653#L713-21 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 817122#L736-21 stopRequestedAtCurrentFloor_#t~ret95 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret95;havoc stopRequestedAtCurrentFloor_#t~ret95; 817517#L2715-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 821011#L2119-21 assume !(0 == buttonForFloorIsPressed_~floorID); 821826#L2123-21 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 816667#L2140-21 stopRequestedAtCurrentFloor_#t~ret96 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret96;havoc stopRequestedAtCurrentFloor_#t~ret96; 820710#L2722-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 819349#L2727-1 timeShift_#t~ret109 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 819350#L2864-1 assume !(0 != timeShift_~tmp___9~3); 830104#L2955-3 assume !(1 == ~doorState~0); 830396#L2955-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_#t~ret87, stopRequestedInDirection_#t~ret88, stopRequestedInDirection_#t~ret89, stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 830394#L2306-2 assume !(1 == stopRequestedInDirection_~dir); 830395#L2475-2 assume !(0 == ~currentFloorID~0); 822956#L2481-2 assume !(~currentFloorID~0 > 0); 820548#L2496-2 assume ~currentFloorID~0 > 0; 820171#L2498-2 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 818932#L2499-2 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 816711#L2628-2 timeShift_#t~ret116 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret116;havoc timeShift_#t~ret116; 817457#L2963-1 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 822066#L2682-3 assume !(1 == ~currentHeading~0); 822067#L2692-9 assume !(0 == ~currentFloorID~0); 817601#L2692-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 817296#L2698-11 havoc __utac_acc__Specification3_spec__2_#t~ret39, __utac_acc__Specification3_spec__2_#t~ret40, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 836926#L1446-1 assume !(-1 == ~expectedDirection~0); 836922#L1458-1 assume !(1 == ~expectedDirection~0); 833907#L1459-1 havoc timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_#t~ret32, __utac_acc__Specification3_spec__1_#t~ret33, __utac_acc__Specification3_spec__1_#t~ret34, __utac_acc__Specification3_spec__1_#t~ret35, __utac_acc__Specification3_spec__1_#t~ret36, __utac_acc__Specification3_spec__1_#t~ret37, __utac_acc__Specification3_spec__1_#t~ret38, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 833845#L2102-2 __utac_acc__Specification3_spec__1_#t~ret27 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 833841#L2154-6 __utac_acc__Specification3_spec__1_#t~ret28 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret28;havoc __utac_acc__Specification3_spec__1_#t~ret28; 833836#L1315-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 833837#L1377-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 840208#L2119-27 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 822165#L2140-27 __utac_acc__Specification3_spec__1_#t~ret34 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret34;havoc __utac_acc__Specification3_spec__1_#t~ret34; 822166#L1381-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 840166#L1421-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret95, stopRequestedAtCurrentFloor_#t~ret96, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 840167#L709-42 assume !(0 == isFloorCalling_~floorID); 840163#L713-42 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 816841#L736-42 stopRequestedAtCurrentFloor_#t~ret95 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret95;havoc stopRequestedAtCurrentFloor_#t~ret95; 822574#L2715-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 820702#L2119-32 assume !(0 == buttonForFloorIsPressed_~floorID); 817141#L2123-32 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 817143#L2140-32 stopRequestedAtCurrentFloor_#t~ret96 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret96;havoc stopRequestedAtCurrentFloor_#t~ret96; 841731#L2722-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 841730#L2727-2 timeShift_#t~ret109 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 841727#L2864-2 assume !(0 != timeShift_~tmp___9~3); 830106#L2955-6 assume !(1 == ~doorState~0); 837305#L2955-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_#t~ret87, stopRequestedInDirection_#t~ret88, stopRequestedInDirection_#t~ret89, stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 837304#L2306-4 assume !(1 == stopRequestedInDirection_~dir); 837303#L2475-4 assume !(0 == ~currentFloorID~0); 837302#L2481-4 assume !(~currentFloorID~0 > 0); 822773#L2496-4 assume ~currentFloorID~0 > 0; 822774#L2498-4 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 821781#L2499-4 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 817151#L2628-4 timeShift_#t~ret116 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret116;havoc timeShift_#t~ret116; 837143#L2963-2 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 837145#L2682-6 assume !(1 == ~currentHeading~0); 816669#L2692-18 assume !(0 == ~currentFloorID~0); 816670#L2692-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 840685#L2698-17 havoc __utac_acc__Specification3_spec__2_#t~ret39, __utac_acc__Specification3_spec__2_#t~ret40, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 843318#L1446-2 assume !(-1 == ~expectedDirection~0); 843315#L1458-2 assume !(1 == ~expectedDirection~0); 843314#L1459-2 havoc bobCall_#t~ret8, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 843310#L454-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 843305#L479-1 bobCall_#t~ret8 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret8;havoc bobCall_#t~ret8;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 843303#L980-1 assume 0 == initPersonOnFloor_~floor; 843278#L981-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 843271#L1088-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 843266#L772-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 824812#L784-5 havoc cleanup_#t~ret14, cleanup_#t~ret15, cleanup_~i~0, cleanup_~tmp~6, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~0;havoc cleanup_~i~0;havoc cleanup_~tmp~6;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_#t~ret32, __utac_acc__Specification3_spec__1_#t~ret33, __utac_acc__Specification3_spec__1_#t~ret34, __utac_acc__Specification3_spec__1_#t~ret35, __utac_acc__Specification3_spec__1_#t~ret36, __utac_acc__Specification3_spec__1_#t~ret37, __utac_acc__Specification3_spec__1_#t~ret38, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 843170#L2102-3 __utac_acc__Specification3_spec__1_#t~ret27 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 843168#L2154-9 __utac_acc__Specification3_spec__1_#t~ret28 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret28;havoc __utac_acc__Specification3_spec__1_#t~ret28; 843164#L1315-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 843158#L1377-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 840540#L2119-38 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 840536#L2140-38 __utac_acc__Specification3_spec__1_#t~ret34 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret34;havoc __utac_acc__Specification3_spec__1_#t~ret34; 840509#L1381-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 840506#L1421-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret95, stopRequestedAtCurrentFloor_#t~ret96, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 840501#L709-63 assume !(0 == isFloorCalling_~floorID); 840502#L713-63 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 846612#L736-63 stopRequestedAtCurrentFloor_#t~ret95 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret95;havoc stopRequestedAtCurrentFloor_#t~ret95; 846610#L2715-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 846608#L2119-43 assume !(0 == buttonForFloorIsPressed_~floorID); 846609#L2123-43 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 855084#L2140-43 stopRequestedAtCurrentFloor_#t~ret96 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret96;havoc stopRequestedAtCurrentFloor_#t~ret96; 855083#L2722-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 855082#L2727-3 timeShift_#t~ret109 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 855081#L2864-3 assume !(0 != timeShift_~tmp___9~3); 824053#L2955-9 assume !(1 == ~doorState~0); 824054#L2955-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_#t~ret87, stopRequestedInDirection_#t~ret88, stopRequestedInDirection_#t~ret89, stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 817377#L2306-6 assume !(1 == stopRequestedInDirection_~dir); 817378#L2475-6 assume !(0 == ~currentFloorID~0); 824042#L2481-6 assume !(~currentFloorID~0 > 0); 824040#L2496-6 assume ~currentFloorID~0 > 0; 843533#L2498-6 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 817937#L2499-6 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 817685#L2628-6 timeShift_#t~ret116 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret116;havoc timeShift_#t~ret116; 830083#L2963-3 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 830084#L2682-9 assume !(1 == ~currentHeading~0); 820349#L2692-27 assume !(0 == ~currentFloorID~0); 820350#L2692-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 864405#L2698-23 havoc __utac_acc__Specification3_spec__2_#t~ret39, __utac_acc__Specification3_spec__2_#t~ret40, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 864403#L1446-3 assume !(-1 == ~expectedDirection~0); 864400#L1458-3 assume !(1 == ~expectedDirection~0); 864398#L1459-3 cleanup_~i~0 := 0; 864396#L198-2 [2021-11-09 09:20:48,920 INFO L793 eck$LassoCheckResult]: Loop: 864396#L198-2 assume !false; 864395#L199 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 864394#L202 assume cleanup_~i~0 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 864393#L1973 cleanup_#t~ret14 := isBlocked_#res;cleanup_~tmp___0~0 := cleanup_#t~ret14;havoc cleanup_#t~ret14; 864392#L206 assume 1 != cleanup_~tmp___0~0; 864391#L206-1 havoc isIdle_#res;havoc isIdle_#t~ret82, isIdle_~retValue_acc~20, isIdle_~tmp~17;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~17;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret77, anyStopRequested_#t~ret78, anyStopRequested_#t~ret79, anyStopRequested_#t~ret80, anyStopRequested_#t~ret81, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~16, anyStopRequested_~tmp___0~6, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~16;havoc anyStopRequested_~tmp___0~6;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~1;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 864390#L709-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 864389#L736-84 anyStopRequested_#t~ret77 := isFloorCalling_#res;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret77;havoc anyStopRequested_#t~ret77; 864387#L2210 assume 0 != anyStopRequested_~tmp___3~1;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 822046#L2274 isIdle_#t~ret82 := anyStopRequested_#res;isIdle_~tmp~17 := isIdle_#t~ret82;havoc isIdle_#t~ret82;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~17 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 822047#L2287 cleanup_#t~ret15 := isIdle_#res;cleanup_~tmp~6 := cleanup_#t~ret15;havoc cleanup_#t~ret15; 861974#L218 assume !(0 != cleanup_~tmp~6);havoc timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_#t~ret32, __utac_acc__Specification3_spec__1_#t~ret33, __utac_acc__Specification3_spec__1_#t~ret34, __utac_acc__Specification3_spec__1_#t~ret35, __utac_acc__Specification3_spec__1_#t~ret36, __utac_acc__Specification3_spec__1_#t~ret37, __utac_acc__Specification3_spec__1_#t~ret38, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 861972#L2102-4 __utac_acc__Specification3_spec__1_#t~ret27 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 861970#L2154-12 __utac_acc__Specification3_spec__1_#t~ret28 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret28;havoc __utac_acc__Specification3_spec__1_#t~ret28; 861967#L1315-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 861968#L1377-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 862018#L2119-49 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 862010#L2140-49 __utac_acc__Specification3_spec__1_#t~ret34 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret34;havoc __utac_acc__Specification3_spec__1_#t~ret34; 861930#L1381-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 861929#L1421-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret95, stopRequestedAtCurrentFloor_#t~ret96, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 861928#L709-89 assume !(0 == isFloorCalling_~floorID); 861925#L713-89 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 861919#L736-89 stopRequestedAtCurrentFloor_#t~ret95 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret95;havoc stopRequestedAtCurrentFloor_#t~ret95; 861915#L2715-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 861916#L2119-54 assume !(0 == buttonForFloorIsPressed_~floorID); 861921#L2123-54 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 861918#L2140-54 stopRequestedAtCurrentFloor_#t~ret96 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret96;havoc stopRequestedAtCurrentFloor_#t~ret96; 861917#L2722-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 861914#L2727-4 timeShift_#t~ret109 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 861910#L2864-4 assume !(0 != timeShift_~tmp___9~3); 861911#L2955-12 assume 1 == ~doorState~0;~doorState~0 := 0; 822238#L2955-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_#t~ret87, stopRequestedInDirection_#t~ret88, stopRequestedInDirection_#t~ret89, stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 822239#L2306-8 assume !(1 == stopRequestedInDirection_~dir); 817901#L2475-8 assume !(0 == ~currentFloorID~0); 817902#L2481-8 assume !(~currentFloorID~0 > 0); 823706#L2496-8 assume ~currentFloorID~0 > 0; 823704#L2498-8 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 823046#L2499-8 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 823047#L2628-8 timeShift_#t~ret116 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret116;havoc timeShift_#t~ret116; 839854#L2963-4 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 839855#L2682-12 assume !(1 == ~currentHeading~0); 821441#L2692-36 assume !(0 == ~currentFloorID~0); 819119#L2692-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 864481#L2698-29 havoc __utac_acc__Specification3_spec__2_#t~ret39, __utac_acc__Specification3_spec__2_#t~ret40, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 864479#L1446-4 assume !(-1 == ~expectedDirection~0); 864476#L1458-4 assume !(1 == ~expectedDirection~0); 864397#L1459-4 cleanup_~i~0 := 1 + cleanup_~i~0; 864396#L198-2 [2021-11-09 09:20:48,920 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-09 09:20:48,921 INFO L85 PathProgramCache]: Analyzing trace with hash 480871056, now seen corresponding path program 1 times [2021-11-09 09:20:48,921 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-09 09:20:48,921 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1966729305] [2021-11-09 09:20:48,921 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-09 09:20:48,921 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-09 09:20:48,942 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-09 09:20:48,979 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-09 09:20:48,980 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-09 09:20:48,980 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1966729305] [2021-11-09 09:20:48,980 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1966729305] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-09 09:20:48,980 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-09 09:20:48,980 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-11-09 09:20:48,980 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [430997991] [2021-11-09 09:20:48,981 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-11-09 09:20:48,981 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-09 09:20:48,981 INFO L85 PathProgramCache]: Analyzing trace with hash 1521936943, now seen corresponding path program 1 times [2021-11-09 09:20:48,982 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-09 09:20:48,982 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [61924722] [2021-11-09 09:20:48,982 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-09 09:20:48,982 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-09 09:20:48,989 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-09 09:20:49,000 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-09 09:20:49,000 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-09 09:20:49,000 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [61924722] [2021-11-09 09:20:49,000 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [61924722] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-09 09:20:49,000 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-09 09:20:49,001 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-11-09 09:20:49,001 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [103752776] [2021-11-09 09:20:49,001 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-11-09 09:20:49,001 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-09 09:20:49,002 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-09 09:20:49,002 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-09 09:20:49,002 INFO L87 Difference]: Start difference. First operand 48043 states and 89763 transitions. cyclomatic complexity: 41721 Second operand has 3 states, 3 states have (on average 15.666666666666666) internal successors, (47), 3 states have internal predecessors, (47), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-09 09:20:50,188 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-09 09:20:50,188 INFO L93 Difference]: Finished difference Result 89839 states and 167603 transitions. [2021-11-09 09:20:50,189 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-09 09:20:50,189 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 89839 states and 167603 transitions. [2021-11-09 09:20:50,944 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 21932 [2021-11-09 09:20:51,199 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 89839 states to 89839 states and 167603 transitions. [2021-11-09 09:20:51,200 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 89839 [2021-11-09 09:20:51,259 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 89839 [2021-11-09 09:20:51,259 INFO L73 IsDeterministic]: Start isDeterministic. Operand 89839 states and 167603 transitions. [2021-11-09 09:20:51,297 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-11-09 09:20:51,297 INFO L681 BuchiCegarLoop]: Abstraction has 89839 states and 167603 transitions. [2021-11-09 09:20:51,337 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 89839 states and 167603 transitions. [2021-11-09 09:20:52,349 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 89839 to 89839. [2021-11-09 09:20:52,406 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 89839 states, 89839 states have (on average 1.8655928939547413) internal successors, (167603), 89838 states have internal predecessors, (167603), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-09 09:20:52,620 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 89839 states to 89839 states and 167603 transitions. [2021-11-09 09:20:52,621 INFO L704 BuchiCegarLoop]: Abstraction has 89839 states and 167603 transitions. [2021-11-09 09:20:52,621 INFO L587 BuchiCegarLoop]: Abstraction has 89839 states and 167603 transitions. [2021-11-09 09:20:52,621 INFO L425 BuchiCegarLoop]: ======== Iteration 12============ [2021-11-09 09:20:52,621 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 89839 states and 167603 transitions. [2021-11-09 09:20:52,864 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 21932 [2021-11-09 09:20:52,864 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-11-09 09:20:52,864 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-11-09 09:20:52,868 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-09 09:20:52,868 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-09 09:20:52,869 INFO L791 eck$LassoCheckResult]: Stem: 959579#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(2);call write~init~int(48, #t~string4.base, #t~string4.offset, 1);call write~init~int(0, #t~string4.base, 1 + #t~string4.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(31);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(12);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(30);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(9);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(21);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(30);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(9);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(21);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(30);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(9);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(25);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(30);call #t~string72.base, #t~string72.offset := #Ultimate.allocOnStack(9);call #t~string73.base, #t~string73.offset := #Ultimate.allocOnStack(25);call #t~string120.base, #t~string120.offset := #Ultimate.allocOnStack(10);call #t~string122.base, #t~string122.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string122.base, #t~string122.offset, 1);call write~init~int(95, #t~string122.base, 1 + #t~string122.offset, 1);call write~init~int(93, #t~string122.base, 2 + #t~string122.offset, 1);call write~init~int(0, #t~string122.base, 3 + #t~string122.offset, 1);call #t~string124.base, #t~string124.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string124.base, #t~string124.offset, 1);call write~init~int(93, #t~string124.base, 1 + #t~string124.offset, 1);call write~init~int(32, #t~string124.base, 2 + #t~string124.offset, 1);call write~init~int(0, #t~string124.base, 3 + #t~string124.offset, 1);call #t~string126.base, #t~string126.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string126.base, #t~string126.offset, 1);call write~init~int(97, #t~string126.base, 1 + #t~string126.offset, 1);call write~init~int(116, #t~string126.base, 2 + #t~string126.offset, 1);call write~init~int(32, #t~string126.base, 3 + #t~string126.offset, 1);call write~init~int(0, #t~string126.base, 4 + #t~string126.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string128.base, #t~string128.offset, 1);call write~init~int(105, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 2 + #t~string128.offset, 1);call #t~string130.base, #t~string130.offset := #Ultimate.allocOnStack(10);call #t~string132.base, #t~string132.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string132.base, #t~string132.offset, 1);call write~init~int(112, #t~string132.base, 1 + #t~string132.offset, 1);call write~init~int(0, #t~string132.base, 2 + #t~string132.offset, 1);call #t~string134.base, #t~string134.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string134.base, #t~string134.offset, 1);call write~init~int(111, #t~string134.base, 1 + #t~string134.offset, 1);call write~init~int(119, #t~string134.base, 2 + #t~string134.offset, 1);call write~init~int(110, #t~string134.base, 3 + #t~string134.offset, 1);call write~init~int(0, #t~string134.base, 4 + #t~string134.offset, 1);call #t~string136.base, #t~string136.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string136.base, #t~string136.offset, 1);call write~init~int(73, #t~string136.base, 1 + #t~string136.offset, 1);call write~init~int(76, #t~string136.base, 2 + #t~string136.offset, 1);call write~init~int(95, #t~string136.base, 3 + #t~string136.offset, 1);call write~init~int(112, #t~string136.base, 4 + #t~string136.offset, 1);call write~init~int(58, #t~string136.base, 5 + #t~string136.offset, 1);call write~init~int(0, #t~string136.base, 6 + #t~string136.offset, 1);call #t~string138.base, #t~string138.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string138.base, #t~string138.offset, 1);call write~init~int(37, #t~string138.base, 1 + #t~string138.offset, 1);call write~init~int(105, #t~string138.base, 2 + #t~string138.offset, 1);call write~init~int(0, #t~string138.base, 3 + #t~string138.offset, 1);call #t~string140.base, #t~string140.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string140.base, #t~string140.offset, 1);call write~init~int(37, #t~string140.base, 1 + #t~string140.offset, 1);call write~init~int(105, #t~string140.base, 2 + #t~string140.offset, 1);call write~init~int(0, #t~string140.base, 3 + #t~string140.offset, 1);call #t~string142.base, #t~string142.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string142.base, #t~string142.offset, 1);call write~init~int(37, #t~string142.base, 1 + #t~string142.offset, 1);call write~init~int(105, #t~string142.base, 2 + #t~string142.offset, 1);call write~init~int(0, #t~string142.base, 3 + #t~string142.offset, 1);call #t~string144.base, #t~string144.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string144.base, #t~string144.offset, 1);call write~init~int(37, #t~string144.base, 1 + #t~string144.offset, 1);call write~init~int(105, #t~string144.base, 2 + #t~string144.offset, 1);call write~init~int(0, #t~string144.base, 3 + #t~string144.offset, 1);call #t~string146.base, #t~string146.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string146.base, #t~string146.offset, 1);call write~init~int(37, #t~string146.base, 1 + #t~string146.offset, 1);call write~init~int(105, #t~string146.base, 2 + #t~string146.offset, 1);call write~init~int(0, #t~string146.base, 3 + #t~string146.offset, 1);call #t~string148.base, #t~string148.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string148.base, #t~string148.offset, 1);call write~init~int(70, #t~string148.base, 1 + #t~string148.offset, 1);call write~init~int(95, #t~string148.base, 2 + #t~string148.offset, 1);call write~init~int(112, #t~string148.base, 3 + #t~string148.offset, 1);call write~init~int(58, #t~string148.base, 4 + #t~string148.offset, 1);call write~init~int(0, #t~string148.base, 5 + #t~string148.offset, 1);call #t~string151.base, #t~string151.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string151.base, #t~string151.offset, 1);call write~init~int(37, #t~string151.base, 1 + #t~string151.offset, 1);call write~init~int(105, #t~string151.base, 2 + #t~string151.offset, 1);call write~init~int(0, #t~string151.base, 3 + #t~string151.offset, 1);call #t~string154.base, #t~string154.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string154.base, #t~string154.offset, 1);call write~init~int(37, #t~string154.base, 1 + #t~string154.offset, 1);call write~init~int(105, #t~string154.base, 2 + #t~string154.offset, 1);call write~init~int(0, #t~string154.base, 3 + #t~string154.offset, 1);call #t~string157.base, #t~string157.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string157.base, #t~string157.offset, 1);call write~init~int(37, #t~string157.base, 1 + #t~string157.offset, 1);call write~init~int(105, #t~string157.base, 2 + #t~string157.offset, 1);call write~init~int(0, #t~string157.base, 3 + #t~string157.offset, 1);call #t~string160.base, #t~string160.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string160.base, #t~string160.offset, 1);call write~init~int(37, #t~string160.base, 1 + #t~string160.offset, 1);call write~init~int(105, #t~string160.base, 2 + #t~string160.offset, 1);call write~init~int(0, #t~string160.base, 3 + #t~string160.offset, 1);call #t~string163.base, #t~string163.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string163.base, #t~string163.offset, 1);call write~init~int(37, #t~string163.base, 1 + #t~string163.offset, 1);call write~init~int(105, #t~string163.base, 2 + #t~string163.offset, 1);call write~init~int(0, #t~string163.base, 3 + #t~string163.offset, 1);call #t~string165.base, #t~string165.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string165.base, #t~string165.offset, 1);call write~init~int(0, #t~string165.base, 1 + #t~string165.offset, 1);~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 959580#L-1 havoc main_#res;havoc main_#t~ret20, main_~retValue_acc~1, main_~tmp~8;havoc main_~retValue_acc~1;havoc main_~tmp~8; 959084#L1866 havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 955105#L1874 main_#t~ret20 := valid_product_#res;main_~tmp~8 := main_#t~ret20;havoc main_#t~ret20; 955106#L395 assume 0 != main_~tmp~8; 958080#L368 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 956307#L702 havoc bobCall_#t~ret8, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 956308#L454 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 956800#L479 bobCall_#t~ret8 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret8;havoc bobCall_#t~ret8;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 955074#L980 assume 0 == initPersonOnFloor_~floor; 955075#L981 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 954432#L1088-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 959272#L772 assume !(0 == callOnFloor_~floorID); 959274#L775 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 955393#L784-2 havoc timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_#t~ret32, __utac_acc__Specification3_spec__1_#t~ret33, __utac_acc__Specification3_spec__1_#t~ret34, __utac_acc__Specification3_spec__1_#t~ret35, __utac_acc__Specification3_spec__1_#t~ret36, __utac_acc__Specification3_spec__1_#t~ret37, __utac_acc__Specification3_spec__1_#t~ret38, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 954639#L2102 __utac_acc__Specification3_spec__1_#t~ret27 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 954640#L2154 __utac_acc__Specification3_spec__1_#t~ret28 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret28;havoc __utac_acc__Specification3_spec__1_#t~ret28; 956566#L1315 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 956567#L1316 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 955622#L2119 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 954549#L2140 __utac_acc__Specification3_spec__1_#t~ret29 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret29;havoc __utac_acc__Specification3_spec__1_#t~ret29; 954550#L1320 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 955279#L1421 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret95, stopRequestedAtCurrentFloor_#t~ret96, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 955300#L709 assume !(0 == isFloorCalling_~floorID); 957077#L713 assume !(1 == isFloorCalling_~floorID); 957078#L717 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 954626#L736 stopRequestedAtCurrentFloor_#t~ret95 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret95;havoc stopRequestedAtCurrentFloor_#t~ret95; 956419#L2715 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 956421#L2119-10 assume !(0 == buttonForFloorIsPressed_~floorID); 960405#L2123-10 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 955087#L2140-10 stopRequestedAtCurrentFloor_#t~ret96 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret96;havoc stopRequestedAtCurrentFloor_#t~ret96; 955088#L2722 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 960433#L2727 timeShift_#t~ret109 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 960660#L2864 assume !(0 != timeShift_~tmp___9~3); 963688#L2955 assume !(1 == ~doorState~0); 963685#L2955-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_#t~ret87, stopRequestedInDirection_#t~ret88, stopRequestedInDirection_#t~ret89, stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 963681#L2306 assume !(1 == stopRequestedInDirection_~dir); 963679#L2475 assume !(0 == ~currentFloorID~0); 963677#L2481 assume ~currentFloorID~0 > 0; 963675#L2482 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 958628#L709-6 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 958629#L736-6 stopRequestedInDirection_#t~ret89 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~1 := stopRequestedInDirection_#t~ret89;havoc stopRequestedInDirection_#t~ret89; 959802#L2486 assume 0 != stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 962925#L2628 timeShift_#t~ret116 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret116;havoc timeShift_#t~ret116; 962922#L2963 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 962918#L2682 assume !(1 == ~currentHeading~0); 962915#L2692 assume !(0 == ~currentFloorID~0); 962320#L2692-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 962317#L2698-5 havoc __utac_acc__Specification3_spec__2_#t~ret39, __utac_acc__Specification3_spec__2_#t~ret40, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 962315#L1446 assume !(-1 == ~expectedDirection~0); 962311#L1458 assume !(1 == ~expectedDirection~0); 962310#L1459 havoc timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_#t~ret32, __utac_acc__Specification3_spec__1_#t~ret33, __utac_acc__Specification3_spec__1_#t~ret34, __utac_acc__Specification3_spec__1_#t~ret35, __utac_acc__Specification3_spec__1_#t~ret36, __utac_acc__Specification3_spec__1_#t~ret37, __utac_acc__Specification3_spec__1_#t~ret38, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 962308#L2102-1 __utac_acc__Specification3_spec__1_#t~ret27 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 962306#L2154-3 __utac_acc__Specification3_spec__1_#t~ret28 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret28;havoc __utac_acc__Specification3_spec__1_#t~ret28; 962304#L1315-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 962305#L1377-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 962908#L1387-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 962905#L1398-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 962899#L1409-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 962282#L1420-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 962279#L1421-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret95, stopRequestedAtCurrentFloor_#t~ret96, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 962277#L709-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 962276#L736-21 stopRequestedAtCurrentFloor_#t~ret95 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret95;havoc stopRequestedAtCurrentFloor_#t~ret95; 962275#L2715-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 962037#L2119-21 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 962032#L2140-21 stopRequestedAtCurrentFloor_#t~ret96 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret96;havoc stopRequestedAtCurrentFloor_#t~ret96; 962028#L2722-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 962026#L2727-1 timeShift_#t~ret109 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 961842#L2864-1 assume !(0 != timeShift_~tmp___9~3); 961836#L2955-3 assume !(1 == ~doorState~0); 961827#L2955-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_#t~ret87, stopRequestedInDirection_#t~ret88, stopRequestedInDirection_#t~ret89, stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 961819#L2306-2 assume !(1 == stopRequestedInDirection_~dir); 961820#L2475-2 assume !(0 == ~currentFloorID~0); 960662#L2481-2 assume ~currentFloorID~0 > 0; 958349#L2482-2 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 958350#L709-27 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 960454#L736-27 stopRequestedInDirection_#t~ret89 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~1 := stopRequestedInDirection_#t~ret89;havoc stopRequestedInDirection_#t~ret89; 960455#L2486-2 assume 0 != stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 961561#L2628-2 timeShift_#t~ret116 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret116;havoc timeShift_#t~ret116; 961559#L2963-1 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 961557#L2682-3 assume !(1 == ~currentHeading~0); 961556#L2692-9 assume !(0 == ~currentFloorID~0); 961542#L2692-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 961535#L2698-11 havoc __utac_acc__Specification3_spec__2_#t~ret39, __utac_acc__Specification3_spec__2_#t~ret40, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 961532#L1446-1 assume !(-1 == ~expectedDirection~0); 961529#L1458-1 assume !(1 == ~expectedDirection~0); 961528#L1459-1 havoc timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_#t~ret32, __utac_acc__Specification3_spec__1_#t~ret33, __utac_acc__Specification3_spec__1_#t~ret34, __utac_acc__Specification3_spec__1_#t~ret35, __utac_acc__Specification3_spec__1_#t~ret36, __utac_acc__Specification3_spec__1_#t~ret37, __utac_acc__Specification3_spec__1_#t~ret38, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 961527#L2102-2 __utac_acc__Specification3_spec__1_#t~ret27 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 961526#L2154-6 __utac_acc__Specification3_spec__1_#t~ret28 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret28;havoc __utac_acc__Specification3_spec__1_#t~ret28; 961522#L1315-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 961523#L1377-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 961510#L1387-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 961495#L1398-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 961486#L1409-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 961478#L1420-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 961475#L1421-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret95, stopRequestedAtCurrentFloor_#t~ret96, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 961473#L709-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 961472#L736-42 stopRequestedAtCurrentFloor_#t~ret95 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret95;havoc stopRequestedAtCurrentFloor_#t~ret95; 961470#L2715-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 961466#L2119-32 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 961467#L2140-32 stopRequestedAtCurrentFloor_#t~ret96 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret96;havoc stopRequestedAtCurrentFloor_#t~ret96; 990526#L2722-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 990524#L2727-2 timeShift_#t~ret109 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 990522#L2864-2 assume !(0 != timeShift_~tmp___9~3); 990521#L2955-6 assume !(1 == ~doorState~0); 990519#L2955-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_#t~ret87, stopRequestedInDirection_#t~ret88, stopRequestedInDirection_#t~ret89, stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 990518#L2306-4 assume !(1 == stopRequestedInDirection_~dir); 990466#L2475-4 assume !(0 == ~currentFloorID~0); 960737#L2481-4 assume ~currentFloorID~0 > 0; 960734#L2482-4 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 960735#L709-48 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 960736#L736-48 stopRequestedInDirection_#t~ret89 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~1 := stopRequestedInDirection_#t~ret89;havoc stopRequestedInDirection_#t~ret89; 960733#L2486-4 assume 0 != stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 955038#L2628-4 timeShift_#t~ret116 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret116;havoc timeShift_#t~ret116; 996819#L2963-2 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 996818#L2682-6 assume !(1 == ~currentHeading~0); 996815#L2692-18 assume !(0 == ~currentFloorID~0); 990383#L2692-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 990376#L2698-17 havoc __utac_acc__Specification3_spec__2_#t~ret39, __utac_acc__Specification3_spec__2_#t~ret40, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 990373#L1446-2 assume !(-1 == ~expectedDirection~0); 990370#L1458-2 assume !(1 == ~expectedDirection~0); 990369#L1459-2 havoc bobCall_#t~ret8, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 990367#L454-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 990362#L479-1 bobCall_#t~ret8 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret8;havoc bobCall_#t~ret8;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 990359#L980-1 assume 0 == initPersonOnFloor_~floor; 990360#L981-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 994273#L1088-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 994271#L772-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 994272#L784-5 havoc cleanup_#t~ret14, cleanup_#t~ret15, cleanup_~i~0, cleanup_~tmp~6, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~0;havoc cleanup_~i~0;havoc cleanup_~tmp~6;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_#t~ret32, __utac_acc__Specification3_spec__1_#t~ret33, __utac_acc__Specification3_spec__1_#t~ret34, __utac_acc__Specification3_spec__1_#t~ret35, __utac_acc__Specification3_spec__1_#t~ret36, __utac_acc__Specification3_spec__1_#t~ret37, __utac_acc__Specification3_spec__1_#t~ret38, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 996518#L2102-3 __utac_acc__Specification3_spec__1_#t~ret27 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 996516#L2154-9 __utac_acc__Specification3_spec__1_#t~ret28 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret28;havoc __utac_acc__Specification3_spec__1_#t~ret28; 996514#L1315-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 996509#L1377-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 996508#L2119-38 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 996499#L2140-38 __utac_acc__Specification3_spec__1_#t~ret34 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret34;havoc __utac_acc__Specification3_spec__1_#t~ret34; 996486#L1381-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 996481#L1421-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret95, stopRequestedAtCurrentFloor_#t~ret96, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 996480#L709-63 assume !(0 == isFloorCalling_~floorID); 996477#L713-63 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 996475#L736-63 stopRequestedAtCurrentFloor_#t~ret95 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret95;havoc stopRequestedAtCurrentFloor_#t~ret95; 996474#L2715-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 996473#L2119-43 assume !(0 == buttonForFloorIsPressed_~floorID); 996470#L2123-43 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 996468#L2140-43 stopRequestedAtCurrentFloor_#t~ret96 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret96;havoc stopRequestedAtCurrentFloor_#t~ret96; 996466#L2722-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 996465#L2727-3 timeShift_#t~ret109 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 996464#L2864-3 assume !(0 != timeShift_~tmp___9~3); 976022#L2955-9 assume !(1 == ~doorState~0); 974434#L2955-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_#t~ret87, stopRequestedInDirection_#t~ret88, stopRequestedInDirection_#t~ret89, stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 974429#L2306-6 assume !(1 == stopRequestedInDirection_~dir); 960957#L2475-6 assume !(0 == ~currentFloorID~0); 960956#L2481-6 assume ~currentFloorID~0 > 0; 956296#L2482-6 assume !(0 != stopRequestedInDirection_~respectFloorCalls); 956297#L2496-6 assume ~currentFloorID~0 > 0; 959503#L2498-6 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 959505#L2499-6 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 973874#L2628-6 timeShift_#t~ret116 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret116;havoc timeShift_#t~ret116; 973871#L2963-3 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 973869#L2682-9 assume !(1 == ~currentHeading~0); 973864#L2692-27 assume !(0 == ~currentFloorID~0); 973856#L2692-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 973848#L2698-23 havoc __utac_acc__Specification3_spec__2_#t~ret39, __utac_acc__Specification3_spec__2_#t~ret40, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 973843#L1446-3 assume !(-1 == ~expectedDirection~0); 973837#L1458-3 assume !(1 == ~expectedDirection~0); 973835#L1459-3 cleanup_~i~0 := 0; 973830#L198-2 [2021-11-09 09:20:52,870 INFO L793 eck$LassoCheckResult]: Loop: 973830#L198-2 assume !false; 973828#L199 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 973825#L202 assume cleanup_~i~0 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 973824#L1973 cleanup_#t~ret14 := isBlocked_#res;cleanup_~tmp___0~0 := cleanup_#t~ret14;havoc cleanup_#t~ret14; 973823#L206 assume 1 != cleanup_~tmp___0~0; 973818#L206-1 havoc isIdle_#res;havoc isIdle_#t~ret82, isIdle_~retValue_acc~20, isIdle_~tmp~17;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~17;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret77, anyStopRequested_#t~ret78, anyStopRequested_#t~ret79, anyStopRequested_#t~ret80, anyStopRequested_#t~ret81, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~16, anyStopRequested_~tmp___0~6, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~16;havoc anyStopRequested_~tmp___0~6;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~1;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 973815#L709-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 973811#L736-84 anyStopRequested_#t~ret77 := isFloorCalling_#res;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret77;havoc anyStopRequested_#t~ret77; 973723#L2210 assume 0 != anyStopRequested_~tmp___3~1;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 973721#L2274 isIdle_#t~ret82 := anyStopRequested_#res;isIdle_~tmp~17 := isIdle_#t~ret82;havoc isIdle_#t~ret82;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~17 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 973720#L2287 cleanup_#t~ret15 := isIdle_#res;cleanup_~tmp~6 := cleanup_#t~ret15;havoc cleanup_#t~ret15; 972511#L218 assume !(0 != cleanup_~tmp~6);havoc timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_#t~ret32, __utac_acc__Specification3_spec__1_#t~ret33, __utac_acc__Specification3_spec__1_#t~ret34, __utac_acc__Specification3_spec__1_#t~ret35, __utac_acc__Specification3_spec__1_#t~ret36, __utac_acc__Specification3_spec__1_#t~ret37, __utac_acc__Specification3_spec__1_#t~ret38, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 972509#L2102-4 __utac_acc__Specification3_spec__1_#t~ret27 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 972507#L2154-12 __utac_acc__Specification3_spec__1_#t~ret28 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret28;havoc __utac_acc__Specification3_spec__1_#t~ret28; 972504#L1315-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 972491#L1377-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 968420#L2119-49 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 968417#L2140-49 __utac_acc__Specification3_spec__1_#t~ret34 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret34;havoc __utac_acc__Specification3_spec__1_#t~ret34; 968413#L1381-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 968376#L1421-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret95, stopRequestedAtCurrentFloor_#t~ret96, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 1040685#L709-89 assume !(0 == isFloorCalling_~floorID); 968256#L713-89 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 968254#L736-89 stopRequestedAtCurrentFloor_#t~ret95 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret95;havoc stopRequestedAtCurrentFloor_#t~ret95; 968250#L2715-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 968248#L2119-54 assume !(0 == buttonForFloorIsPressed_~floorID); 968243#L2123-54 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 961413#L2140-54 stopRequestedAtCurrentFloor_#t~ret96 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret96;havoc stopRequestedAtCurrentFloor_#t~ret96; 961295#L2722-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 960989#L2727-4 timeShift_#t~ret109 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 960990#L2864-4 assume !(0 != timeShift_~tmp___9~3); 975651#L2955-12 assume 1 == ~doorState~0;~doorState~0 := 0; 975649#L2955-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_#t~ret87, stopRequestedInDirection_#t~ret88, stopRequestedInDirection_#t~ret89, stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 975645#L2306-8 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~7;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~7;isTopFloor_~retValue_acc~7 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~7; 975646#L1283-20 stopRequestedInDirection_#t~ret83 := isTopFloor_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret83;havoc stopRequestedInDirection_#t~ret83; 976037#L2310-8 assume !(0 != stopRequestedInDirection_~tmp~18); 976038#L2316-8 assume !(~currentFloorID~0 < 0); 977029#L2331-8 assume ~currentFloorID~0 < 0; 977030#L2333-8 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 974355#L2334-8 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 974341#L2628-8 timeShift_#t~ret116 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret116;havoc timeShift_#t~ret116; 974338#L2963-4 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 974336#L2682-12 assume !(1 == ~currentHeading~0); 974330#L2692-36 assume !(0 == ~currentFloorID~0); 973861#L2692-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 973849#L2698-29 havoc __utac_acc__Specification3_spec__2_#t~ret39, __utac_acc__Specification3_spec__2_#t~ret40, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 973846#L1446-4 assume !(-1 == ~expectedDirection~0); 973840#L1458-4 assume !(1 == ~expectedDirection~0); 973834#L1459-4 cleanup_~i~0 := 1 + cleanup_~i~0; 973830#L198-2 [2021-11-09 09:20:52,871 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-09 09:20:52,871 INFO L85 PathProgramCache]: Analyzing trace with hash 484048644, now seen corresponding path program 1 times [2021-11-09 09:20:52,871 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-09 09:20:52,872 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1540191523] [2021-11-09 09:20:52,872 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-09 09:20:52,872 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-09 09:20:52,898 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-09 09:20:52,938 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-09 09:20:52,938 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-09 09:20:52,939 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1540191523] [2021-11-09 09:20:52,939 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1540191523] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-09 09:20:52,939 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-09 09:20:52,939 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-11-09 09:20:52,939 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1338062832] [2021-11-09 09:20:52,940 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-11-09 09:20:52,940 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-09 09:20:52,941 INFO L85 PathProgramCache]: Analyzing trace with hash -1833161908, now seen corresponding path program 1 times [2021-11-09 09:20:52,941 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-09 09:20:52,941 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [363651201] [2021-11-09 09:20:52,941 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-09 09:20:52,941 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-09 09:20:52,950 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-09 09:20:52,978 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-09 09:20:52,978 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-09 09:20:52,978 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [363651201] [2021-11-09 09:20:52,979 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [363651201] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-09 09:20:52,979 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-09 09:20:52,979 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-11-09 09:20:52,979 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [517568229] [2021-11-09 09:20:52,979 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-11-09 09:20:52,980 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-09 09:20:52,980 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-11-09 09:20:52,980 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-11-09 09:20:52,981 INFO L87 Difference]: Start difference. First operand 89839 states and 167603 transitions. cyclomatic complexity: 77765 Second operand has 6 states, 6 states have (on average 8.0) internal successors, (48), 6 states have internal predecessors, (48), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-09 09:20:55,712 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-09 09:20:55,712 INFO L93 Difference]: Finished difference Result 248965 states and 465709 transitions. [2021-11-09 09:20:55,713 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2021-11-09 09:20:55,713 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 248965 states and 465709 transitions. [2021-11-09 09:20:57,339 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 63324 [2021-11-09 09:20:58,632 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 248965 states to 248965 states and 465709 transitions. [2021-11-09 09:20:58,632 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 248965 [2021-11-09 09:20:58,777 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 248965 [2021-11-09 09:20:58,777 INFO L73 IsDeterministic]: Start isDeterministic. Operand 248965 states and 465709 transitions. [2021-11-09 09:20:58,876 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-11-09 09:20:58,876 INFO L681 BuchiCegarLoop]: Abstraction has 248965 states and 465709 transitions. [2021-11-09 09:20:58,979 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 248965 states and 465709 transitions. [2021-11-09 09:21:00,678 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 248965 to 129237. [2021-11-09 09:21:00,774 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 129237 states, 129237 states have (on average 1.8653868474198565) internal successors, (241077), 129236 states have internal predecessors, (241077), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-09 09:21:01,111 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 129237 states to 129237 states and 241077 transitions. [2021-11-09 09:21:01,111 INFO L704 BuchiCegarLoop]: Abstraction has 129237 states and 241077 transitions. [2021-11-09 09:21:01,111 INFO L587 BuchiCegarLoop]: Abstraction has 129237 states and 241077 transitions. [2021-11-09 09:21:01,111 INFO L425 BuchiCegarLoop]: ======== Iteration 13============ [2021-11-09 09:21:01,111 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 129237 states and 241077 transitions.