./Ultimate.py --spec ../sv-benchmarks/c/properties/termination.prp --file ../sv-benchmarks/c/seq-mthreaded/pals_STARTPALS_ActiveStandby.5.ufo.UNBOUNDED.pals.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for termination Using default analysis Version 3a877d22 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerTermination.xml -i ../sv-benchmarks/c/seq-mthreaded/pals_STARTPALS_ActiveStandby.5.ufo.UNBOUNDED.pals.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Termination-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(F end) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 0a05a45e59c4449e0f919ee265abbb6a4949f64a9be713d749d79d0baffd63df --- Real Ultimate output --- This is Ultimate 0.2.2-3a877d227dc491413fd706022d0c47cd97beb353-3a877d2 [2021-12-15 17:22:06,265 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-12-15 17:22:06,282 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-12-15 17:22:06,311 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-12-15 17:22:06,311 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-12-15 17:22:06,312 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-12-15 17:22:06,314 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-12-15 17:22:06,315 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-12-15 17:22:06,317 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-12-15 17:22:06,318 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-12-15 17:22:06,319 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-12-15 17:22:06,320 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-12-15 17:22:06,320 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-12-15 17:22:06,321 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-12-15 17:22:06,322 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-12-15 17:22:06,323 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-12-15 17:22:06,324 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-12-15 17:22:06,325 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-12-15 17:22:06,326 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-12-15 17:22:06,328 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-12-15 17:22:06,329 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-12-15 17:22:06,330 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-12-15 17:22:06,331 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-12-15 17:22:06,332 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-12-15 17:22:06,336 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-12-15 17:22:06,337 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-12-15 17:22:06,337 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-12-15 17:22:06,338 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-12-15 17:22:06,338 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-12-15 17:22:06,339 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-12-15 17:22:06,339 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-12-15 17:22:06,340 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-12-15 17:22:06,341 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-12-15 17:22:06,342 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-12-15 17:22:06,342 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-12-15 17:22:06,343 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-12-15 17:22:06,343 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-12-15 17:22:06,344 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-12-15 17:22:06,344 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-12-15 17:22:06,345 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-12-15 17:22:06,346 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-12-15 17:22:06,347 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Termination-32bit-Automizer_Default.epf [2021-12-15 17:22:06,366 INFO L113 SettingsManager]: Loading preferences was successful [2021-12-15 17:22:06,367 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-12-15 17:22:06,367 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-12-15 17:22:06,367 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-12-15 17:22:06,368 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-12-15 17:22:06,369 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-12-15 17:22:06,369 INFO L138 SettingsManager]: * Use SBE=true [2021-12-15 17:22:06,369 INFO L136 SettingsManager]: Preferences of BuchiAutomizer differ from their defaults: [2021-12-15 17:22:06,369 INFO L138 SettingsManager]: * NCSB implementation=INTSET_LAZY3 [2021-12-15 17:22:06,370 INFO L138 SettingsManager]: * Use old map elimination=false [2021-12-15 17:22:06,370 INFO L138 SettingsManager]: * Use external solver (rank synthesis)=false [2021-12-15 17:22:06,370 INFO L138 SettingsManager]: * Use only trivial implications for array writes=true [2021-12-15 17:22:06,370 INFO L138 SettingsManager]: * Rank analysis=LINEAR_WITH_GUESSES [2021-12-15 17:22:06,371 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-12-15 17:22:06,371 INFO L138 SettingsManager]: * sizeof long=4 [2021-12-15 17:22:06,371 INFO L138 SettingsManager]: * Check unreachability of error function in SV-COMP mode=false [2021-12-15 17:22:06,371 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-12-15 17:22:06,372 INFO L138 SettingsManager]: * sizeof POINTER=4 [2021-12-15 17:22:06,372 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-12-15 17:22:06,372 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=ASSUME [2021-12-15 17:22:06,372 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=ASSUME [2021-12-15 17:22:06,373 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=ASSUME [2021-12-15 17:22:06,373 INFO L138 SettingsManager]: * sizeof long double=12 [2021-12-15 17:22:06,373 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-12-15 17:22:06,373 INFO L138 SettingsManager]: * Assume nondeterminstic values are in range=false [2021-12-15 17:22:06,374 INFO L138 SettingsManager]: * Use constant arrays=true [2021-12-15 17:22:06,374 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=ASSUME [2021-12-15 17:22:06,374 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-12-15 17:22:06,374 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-12-15 17:22:06,375 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-12-15 17:22:06,375 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2021-12-15 17:22:06,375 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-12-15 17:22:06,376 INFO L136 SettingsManager]: Preferences of IcfgTransformer differ from their defaults: [2021-12-15 17:22:06,376 INFO L138 SettingsManager]: * TransformationType=MODULO_NEIGHBOR WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(F end) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 0a05a45e59c4449e0f919ee265abbb6a4949f64a9be713d749d79d0baffd63df [2021-12-15 17:22:06,567 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-12-15 17:22:06,591 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-12-15 17:22:06,593 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-12-15 17:22:06,594 INFO L271 PluginConnector]: Initializing CDTParser... [2021-12-15 17:22:06,595 INFO L275 PluginConnector]: CDTParser initialized [2021-12-15 17:22:06,597 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/seq-mthreaded/pals_STARTPALS_ActiveStandby.5.ufo.UNBOUNDED.pals.c [2021-12-15 17:22:06,664 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/f1ab1790d/50906c8cc43c4027aa5d464834748e76/FLAGd59680365 [2021-12-15 17:22:07,128 INFO L306 CDTParser]: Found 1 translation units. [2021-12-15 17:22:07,128 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/seq-mthreaded/pals_STARTPALS_ActiveStandby.5.ufo.UNBOUNDED.pals.c [2021-12-15 17:22:07,136 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/f1ab1790d/50906c8cc43c4027aa5d464834748e76/FLAGd59680365 [2021-12-15 17:22:07,452 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/f1ab1790d/50906c8cc43c4027aa5d464834748e76 [2021-12-15 17:22:07,454 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-12-15 17:22:07,455 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-12-15 17:22:07,456 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-12-15 17:22:07,457 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-12-15 17:22:07,459 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-12-15 17:22:07,460 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 15.12 05:22:07" (1/1) ... [2021-12-15 17:22:07,460 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@3334a2c6 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.12 05:22:07, skipping insertion in model container [2021-12-15 17:22:07,461 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 15.12 05:22:07" (1/1) ... [2021-12-15 17:22:07,468 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-12-15 17:22:07,494 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-12-15 17:22:07,723 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/seq-mthreaded/pals_STARTPALS_ActiveStandby.5.ufo.UNBOUNDED.pals.c[14577,14590] [2021-12-15 17:22:07,724 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-15 17:22:07,731 INFO L203 MainTranslator]: Completed pre-run [2021-12-15 17:22:07,780 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/seq-mthreaded/pals_STARTPALS_ActiveStandby.5.ufo.UNBOUNDED.pals.c[14577,14590] [2021-12-15 17:22:07,781 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-15 17:22:07,794 INFO L208 MainTranslator]: Completed translation [2021-12-15 17:22:07,795 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.12 05:22:07 WrapperNode [2021-12-15 17:22:07,795 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-12-15 17:22:07,796 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-12-15 17:22:07,796 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-12-15 17:22:07,797 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-12-15 17:22:07,803 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.12 05:22:07" (1/1) ... [2021-12-15 17:22:07,826 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.12 05:22:07" (1/1) ... [2021-12-15 17:22:07,884 INFO L137 Inliner]: procedures = 32, calls = 47, calls flagged for inlining = 42, calls inlined = 60, statements flattened = 923 [2021-12-15 17:22:07,885 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-12-15 17:22:07,886 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-12-15 17:22:07,886 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-12-15 17:22:07,886 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-12-15 17:22:07,893 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.12 05:22:07" (1/1) ... [2021-12-15 17:22:07,893 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.12 05:22:07" (1/1) ... [2021-12-15 17:22:07,901 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.12 05:22:07" (1/1) ... [2021-12-15 17:22:07,902 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.12 05:22:07" (1/1) ... [2021-12-15 17:22:07,923 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.12 05:22:07" (1/1) ... [2021-12-15 17:22:07,932 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.12 05:22:07" (1/1) ... [2021-12-15 17:22:07,936 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.12 05:22:07" (1/1) ... [2021-12-15 17:22:07,942 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-12-15 17:22:07,943 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-12-15 17:22:07,943 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-12-15 17:22:07,943 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-12-15 17:22:07,944 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.12 05:22:07" (1/1) ... [2021-12-15 17:22:07,951 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-15 17:22:07,975 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-15 17:22:07,988 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-15 17:22:08,018 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (1)] Waiting until timeout for monitored process [2021-12-15 17:22:08,035 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-12-15 17:22:08,036 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-12-15 17:22:08,036 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-12-15 17:22:08,036 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-12-15 17:22:08,173 INFO L236 CfgBuilder]: Building ICFG [2021-12-15 17:22:08,174 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2021-12-15 17:22:08,754 INFO L277 CfgBuilder]: Performing block encoding [2021-12-15 17:22:08,762 INFO L296 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-12-15 17:22:08,763 INFO L301 CfgBuilder]: Removed 1 assume(true) statements. [2021-12-15 17:22:08,765 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 15.12 05:22:08 BoogieIcfgContainer [2021-12-15 17:22:08,765 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-12-15 17:22:08,766 INFO L113 PluginConnector]: ------------------------BuchiAutomizer---------------------------- [2021-12-15 17:22:08,766 INFO L271 PluginConnector]: Initializing BuchiAutomizer... [2021-12-15 17:22:08,769 INFO L275 PluginConnector]: BuchiAutomizer initialized [2021-12-15 17:22:08,769 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2021-12-15 17:22:08,769 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "CDTParser AST 15.12 05:22:07" (1/3) ... [2021-12-15 17:22:08,772 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@1746afad and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 15.12 05:22:08, skipping insertion in model container [2021-12-15 17:22:08,773 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2021-12-15 17:22:08,773 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.12 05:22:07" (2/3) ... [2021-12-15 17:22:08,773 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@1746afad and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 15.12 05:22:08, skipping insertion in model container [2021-12-15 17:22:08,773 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2021-12-15 17:22:08,773 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 15.12 05:22:08" (3/3) ... [2021-12-15 17:22:08,774 INFO L388 chiAutomizerObserver]: Analyzing ICFG pals_STARTPALS_ActiveStandby.5.ufo.UNBOUNDED.pals.c [2021-12-15 17:22:08,814 INFO L359 BuchiCegarLoop]: Interprodecural is true [2021-12-15 17:22:08,814 INFO L360 BuchiCegarLoop]: Hoare is false [2021-12-15 17:22:08,814 INFO L361 BuchiCegarLoop]: Compute interpolants for ForwardPredicates [2021-12-15 17:22:08,814 INFO L362 BuchiCegarLoop]: Backedges is STRAIGHT_LINE [2021-12-15 17:22:08,814 INFO L363 BuchiCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2021-12-15 17:22:08,814 INFO L364 BuchiCegarLoop]: Difference is false [2021-12-15 17:22:08,815 INFO L365 BuchiCegarLoop]: Minimize is MINIMIZE_SEVPA [2021-12-15 17:22:08,815 INFO L368 BuchiCegarLoop]: ======== Iteration 0==of CEGAR loop == BuchiCegarLoop======== [2021-12-15 17:22:08,832 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 274 states, 273 states have (on average 1.6117216117216118) internal successors, (440), 273 states have internal predecessors, (440), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-15 17:22:08,863 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 253 [2021-12-15 17:22:08,863 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-15 17:22:08,863 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-15 17:22:08,872 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1] [2021-12-15 17:22:08,872 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-15 17:22:08,872 INFO L425 BuchiCegarLoop]: ======== Iteration 1============ [2021-12-15 17:22:08,874 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 274 states, 273 states have (on average 1.6117216117216118) internal successors, (440), 273 states have internal predecessors, (440), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-15 17:22:08,885 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 253 [2021-12-15 17:22:08,885 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-15 17:22:08,885 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-15 17:22:08,888 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1] [2021-12-15 17:22:08,888 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-15 17:22:08,894 INFO L791 eck$LassoCheckResult]: Stem: 270#ULTIMATE.startENTRYtrue assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(52, 2);call #Ultimate.allocInit(12, 3);~nomsg~0 := -1;~cs1~0 := 0;~cs1_old~0 := 0;~cs1_new~0 := 0;~cs2~0 := 0;~cs2_old~0 := 0;~cs2_new~0 := 0;~s1s2~0 := 0;~s1s2_old~0 := 0;~s1s2_new~0 := 0;~s1s1~0 := 0;~s1s1_old~0 := 0;~s1s1_new~0 := 0;~s2s1~0 := 0;~s2s1_old~0 := 0;~s2s1_new~0 := 0;~s2s2~0 := 0;~s2s2_old~0 := 0;~s2s2_new~0 := 0;~s1p~0 := 0;~s1p_old~0 := 0;~s1p_new~0 := 0;~s2p~0 := 0;~s2p_old~0 := 0;~s2p_new~0 := 0;~side1Failed~0 := 0;~side2Failed~0 := 0;~side1_written~0 := 0;~side2_written~0 := 0;~side1Failed_History_0~0 := 0;~side1Failed_History_1~0 := 0;~side1Failed_History_2~0 := 0;~side2Failed_History_0~0 := 0;~side2Failed_History_1~0 := 0;~side2Failed_History_2~0 := 0;~active_side_History_0~0 := 0;~active_side_History_1~0 := 0;~active_side_History_2~0 := 0;~manual_selection_History_0~0 := 0;~manual_selection_History_1~0 := 0;~manual_selection_History_2~0 := 0; 177#L-1true assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~nondet44#1, main_#t~nondet45#1, main_#t~nondet46#1, main_#t~nondet47#1, main_#t~nondet48#1, main_#t~nondet49#1, main_#t~nondet50#1, main_#t~nondet51#1, main_#t~nondet52#1, main_#t~nondet53#1, main_#t~nondet54#1, main_#t~nondet55#1, main_#t~nondet56#1, main_#t~nondet57#1, main_#t~nondet58#1, main_#t~nondet59#1, main_#t~ret60#1, main_#t~ret61#1, main_~c1~0#1, main_~i2~0#1;havoc main_~c1~0#1;havoc main_~i2~0#1;main_~c1~0#1 := 0;~side1Failed~0 := main_#t~nondet44#1;havoc main_#t~nondet44#1;~side2Failed~0 := main_#t~nondet45#1;havoc main_#t~nondet45#1;~side1_written~0 := main_#t~nondet46#1;havoc main_#t~nondet46#1;~side2_written~0 := main_#t~nondet47#1;havoc main_#t~nondet47#1;~side1Failed_History_0~0 := main_#t~nondet48#1;havoc main_#t~nondet48#1;~side1Failed_History_1~0 := main_#t~nondet49#1;havoc main_#t~nondet49#1;~side1Failed_History_2~0 := main_#t~nondet50#1;havoc main_#t~nondet50#1;~side2Failed_History_0~0 := main_#t~nondet51#1;havoc main_#t~nondet51#1;~side2Failed_History_1~0 := main_#t~nondet52#1;havoc main_#t~nondet52#1;~side2Failed_History_2~0 := main_#t~nondet53#1;havoc main_#t~nondet53#1;~active_side_History_0~0 := main_#t~nondet54#1;havoc main_#t~nondet54#1;~active_side_History_1~0 := main_#t~nondet55#1;havoc main_#t~nondet55#1;~active_side_History_2~0 := main_#t~nondet56#1;havoc main_#t~nondet56#1;~manual_selection_History_0~0 := main_#t~nondet57#1;havoc main_#t~nondet57#1;~manual_selection_History_1~0 := main_#t~nondet58#1;havoc main_#t~nondet58#1;~manual_selection_History_2~0 := main_#t~nondet59#1;havoc main_#t~nondet59#1;assume { :begin_inline_init } true;havoc init_#res#1; 69#L197true assume 0 != ~side1Failed_History_0~0 % 256;init_#res#1 := 0; 62#L233true main_#t~ret60#1 := init_#res#1;assume { :end_inline_init } true;main_~i2~0#1 := main_#t~ret60#1;havoc main_#t~ret60#1;assume { :begin_inline_assume_abort_if_not } true;assume_abort_if_not_#in~cond#1 := main_~i2~0#1;havoc assume_abort_if_not_~cond#1;assume_abort_if_not_~cond#1 := assume_abort_if_not_#in~cond#1; 176#L58true assume !(0 == assume_abort_if_not_~cond#1); 136#L57true assume { :end_inline_assume_abort_if_not } true;~cs1_old~0 := ~nomsg~0;~cs1_new~0 := ~nomsg~0;~cs2_old~0 := ~nomsg~0;~cs2_new~0 := ~nomsg~0;~s1s2_old~0 := ~nomsg~0;~s1s2_new~0 := ~nomsg~0;~s1s1_old~0 := ~nomsg~0;~s1s1_new~0 := ~nomsg~0;~s2s1_old~0 := ~nomsg~0;~s2s1_new~0 := ~nomsg~0;~s2s2_old~0 := ~nomsg~0;~s2s2_new~0 := ~nomsg~0;~s1p_old~0 := ~nomsg~0;~s1p_new~0 := ~nomsg~0;~s2p_old~0 := ~nomsg~0;~s2p_new~0 := ~nomsg~0;main_~i2~0#1 := 0; 113#L578-2true [2021-12-15 17:22:08,895 INFO L793 eck$LassoCheckResult]: Loop: 113#L578-2true assume !false;assume { :begin_inline_Console_task_each_pals_period } true;havoc Console_task_each_pals_period_#t~nondet4#1, Console_task_each_pals_period_#t~ite5#1, Console_task_each_pals_period_#t~ite6#1, Console_task_each_pals_period_~manual_selection~0#1, Console_task_each_pals_period_~tmp~1#1;havoc Console_task_each_pals_period_~manual_selection~0#1;havoc Console_task_each_pals_period_~tmp~1#1;Console_task_each_pals_period_~tmp~1#1 := Console_task_each_pals_period_#t~nondet4#1;havoc Console_task_each_pals_period_#t~nondet4#1;Console_task_each_pals_period_~manual_selection~0#1 := Console_task_each_pals_period_~tmp~1#1;assume { :begin_inline_write_manual_selection_history } true;write_manual_selection_history_#in~val#1 := Console_task_each_pals_period_~manual_selection~0#1;havoc write_manual_selection_history_~val#1;write_manual_selection_history_~val#1 := write_manual_selection_history_#in~val#1;~manual_selection_History_2~0 := ~manual_selection_History_1~0;~manual_selection_History_1~0 := ~manual_selection_History_0~0;~manual_selection_History_0~0 := write_manual_selection_history_~val#1; 202#L170true assume { :end_inline_write_manual_selection_history } true; 168#L258true assume Console_task_each_pals_period_~manual_selection~0#1 != ~nomsg~0 && ~cs1_new~0 == ~nomsg~0;Console_task_each_pals_period_#t~ite5#1 := Console_task_each_pals_period_~manual_selection~0#1; 212#L258-2true ~cs1_new~0 := (if Console_task_each_pals_period_#t~ite5#1 % 256 <= 127 then Console_task_each_pals_period_#t~ite5#1 % 256 else Console_task_each_pals_period_#t~ite5#1 % 256 - 256);havoc Console_task_each_pals_period_#t~ite5#1; 205#L259true assume Console_task_each_pals_period_~manual_selection~0#1 != ~nomsg~0 && ~cs2_new~0 == ~nomsg~0;Console_task_each_pals_period_#t~ite6#1 := Console_task_each_pals_period_~manual_selection~0#1; 260#L259-2true ~cs2_new~0 := (if Console_task_each_pals_period_#t~ite6#1 % 256 <= 127 then Console_task_each_pals_period_#t~ite6#1 % 256 else Console_task_each_pals_period_#t~ite6#1 % 256 - 256);havoc Console_task_each_pals_period_#t~ite6#1;Console_task_each_pals_period_~manual_selection~0#1 := 0; 139#L261true assume { :end_inline_Console_task_each_pals_period } true;assume { :begin_inline_Side1_activestandby_task_each_pals_period } true;havoc Side1_activestandby_task_each_pals_period_#t~nondet7#1, Side1_activestandby_task_each_pals_period_#t~ite8#1, Side1_activestandby_task_each_pals_period_#t~ite9#1, Side1_activestandby_task_each_pals_period_#t~ite10#1, Side1_activestandby_task_each_pals_period_#t~ite11#1, Side1_activestandby_task_each_pals_period_#t~ite12#1, Side1_activestandby_task_each_pals_period_#t~ite13#1, Side1_activestandby_task_each_pals_period_~side1~0#1, Side1_activestandby_task_each_pals_period_~side2~0#1, Side1_activestandby_task_each_pals_period_~manual_selection~1#1, Side1_activestandby_task_each_pals_period_~next_state~0#1;havoc Side1_activestandby_task_each_pals_period_~side1~0#1;havoc Side1_activestandby_task_each_pals_period_~side2~0#1;havoc Side1_activestandby_task_each_pals_period_~manual_selection~1#1;havoc Side1_activestandby_task_each_pals_period_~next_state~0#1;Side1_activestandby_task_each_pals_period_~side1~0#1 := ~nomsg~0;Side1_activestandby_task_each_pals_period_~side2~0#1 := ~nomsg~0;Side1_activestandby_task_each_pals_period_~manual_selection~1#1 := 0;~side1Failed~0 := Side1_activestandby_task_each_pals_period_#t~nondet7#1;havoc Side1_activestandby_task_each_pals_period_#t~nondet7#1;assume { :begin_inline_write_side1_failed_history } true;write_side1_failed_history_#in~val#1 := ~side1Failed~0;havoc write_side1_failed_history_~val#1;write_side1_failed_history_~val#1 := write_side1_failed_history_#in~val#1;~side1Failed_History_2~0 := ~side1Failed_History_1~0;~side1Failed_History_1~0 := ~side1Failed_History_0~0;~side1Failed_History_0~0 := write_side1_failed_history_~val#1; 149#L80true assume { :end_inline_write_side1_failed_history } true; 129#L277true assume 0 != ~side1Failed~0 % 256; 138#L278true assume ~nomsg~0 != ~nomsg~0 && ~s1s1_new~0 == ~nomsg~0;Side1_activestandby_task_each_pals_period_#t~ite8#1 := ~nomsg~0; 143#L278-2true ~s1s1_new~0 := (if Side1_activestandby_task_each_pals_period_#t~ite8#1 % 256 <= 127 then Side1_activestandby_task_each_pals_period_#t~ite8#1 % 256 else Side1_activestandby_task_each_pals_period_#t~ite8#1 % 256 - 256);havoc Side1_activestandby_task_each_pals_period_#t~ite8#1; 50#L279true assume ~nomsg~0 != ~nomsg~0 && ~s1s2_new~0 == ~nomsg~0;Side1_activestandby_task_each_pals_period_#t~ite9#1 := ~nomsg~0; 31#L279-2true ~s1s2_new~0 := (if Side1_activestandby_task_each_pals_period_#t~ite9#1 % 256 <= 127 then Side1_activestandby_task_each_pals_period_#t~ite9#1 % 256 else Side1_activestandby_task_each_pals_period_#t~ite9#1 % 256 - 256);havoc Side1_activestandby_task_each_pals_period_#t~ite9#1; 234#L280true assume ~nomsg~0 != ~nomsg~0 && ~s1p_new~0 == ~nomsg~0;Side1_activestandby_task_each_pals_period_#t~ite10#1 := ~nomsg~0; 103#L280-2true ~s1p_new~0 := (if Side1_activestandby_task_each_pals_period_#t~ite10#1 % 256 <= 127 then Side1_activestandby_task_each_pals_period_#t~ite10#1 % 256 else Side1_activestandby_task_each_pals_period_#t~ite10#1 % 256 - 256);havoc Side1_activestandby_task_each_pals_period_#t~ite10#1;~side1_written~0 := ~nomsg~0; 250#L314true assume { :end_inline_Side1_activestandby_task_each_pals_period } true;assume { :begin_inline_Side2_activestandby_task_each_pals_period } true;havoc Side2_activestandby_task_each_pals_period_#t~nondet14#1, Side2_activestandby_task_each_pals_period_#t~ite15#1, Side2_activestandby_task_each_pals_period_#t~ite16#1, Side2_activestandby_task_each_pals_period_#t~ite17#1, Side2_activestandby_task_each_pals_period_#t~ret18#1, Side2_activestandby_task_each_pals_period_#t~ite19#1, Side2_activestandby_task_each_pals_period_#t~ite20#1, Side2_activestandby_task_each_pals_period_#t~ite21#1, Side2_activestandby_task_each_pals_period_~side1~1#1, Side2_activestandby_task_each_pals_period_~side2~1#1, Side2_activestandby_task_each_pals_period_~manual_selection~2#1, Side2_activestandby_task_each_pals_period_~next_state~1#1;havoc Side2_activestandby_task_each_pals_period_~side1~1#1;havoc Side2_activestandby_task_each_pals_period_~side2~1#1;havoc Side2_activestandby_task_each_pals_period_~manual_selection~2#1;havoc Side2_activestandby_task_each_pals_period_~next_state~1#1;Side2_activestandby_task_each_pals_period_~side1~1#1 := ~nomsg~0;Side2_activestandby_task_each_pals_period_~side2~1#1 := ~nomsg~0;Side2_activestandby_task_each_pals_period_~manual_selection~2#1 := 0;~side2Failed~0 := Side2_activestandby_task_each_pals_period_#t~nondet14#1;havoc Side2_activestandby_task_each_pals_period_#t~nondet14#1;assume { :begin_inline_write_side2_failed_history } true;write_side2_failed_history_#in~val#1 := ~side2Failed~0;havoc write_side2_failed_history_~val#1;write_side2_failed_history_~val#1 := write_side2_failed_history_#in~val#1;~side2Failed_History_2~0 := ~side2Failed_History_1~0;~side2Failed_History_1~0 := ~side2Failed_History_0~0;~side2Failed_History_0~0 := write_side2_failed_history_~val#1; 67#L110true assume { :end_inline_write_side2_failed_history } true; 46#L330true assume 0 != ~side2Failed~0 % 256; 150#L331true assume ~nomsg~0 != ~nomsg~0 && ~s2s1_new~0 == ~nomsg~0;Side2_activestandby_task_each_pals_period_#t~ite15#1 := ~nomsg~0; 115#L331-2true ~s2s1_new~0 := (if Side2_activestandby_task_each_pals_period_#t~ite15#1 % 256 <= 127 then Side2_activestandby_task_each_pals_period_#t~ite15#1 % 256 else Side2_activestandby_task_each_pals_period_#t~ite15#1 % 256 - 256);havoc Side2_activestandby_task_each_pals_period_#t~ite15#1; 167#L332true assume ~nomsg~0 != ~nomsg~0 && ~s2s2_new~0 == ~nomsg~0;Side2_activestandby_task_each_pals_period_#t~ite16#1 := ~nomsg~0; 84#L332-2true ~s2s2_new~0 := (if Side2_activestandby_task_each_pals_period_#t~ite16#1 % 256 <= 127 then Side2_activestandby_task_each_pals_period_#t~ite16#1 % 256 else Side2_activestandby_task_each_pals_period_#t~ite16#1 % 256 - 256);havoc Side2_activestandby_task_each_pals_period_#t~ite16#1; 198#L333true assume ~nomsg~0 != ~nomsg~0 && ~s2p_new~0 == ~nomsg~0;Side2_activestandby_task_each_pals_period_#t~ite17#1 := ~nomsg~0; 208#L333-2true ~s2p_new~0 := (if Side2_activestandby_task_each_pals_period_#t~ite17#1 % 256 <= 127 then Side2_activestandby_task_each_pals_period_#t~ite17#1 % 256 else Side2_activestandby_task_each_pals_period_#t~ite17#1 % 256 - 256);havoc Side2_activestandby_task_each_pals_period_#t~ite17#1;~side2_written~0 := ~nomsg~0; 199#L371true assume { :end_inline_Side2_activestandby_task_each_pals_period } true;assume { :begin_inline_Pendulum_prism_task_each_pals_period } true;havoc Pendulum_prism_task_each_pals_period_#t~ret22#1, Pendulum_prism_task_each_pals_period_~active_side~0#1, Pendulum_prism_task_each_pals_period_~tmp~2#1, Pendulum_prism_task_each_pals_period_~side1~2#1, Pendulum_prism_task_each_pals_period_~side2~2#1;havoc Pendulum_prism_task_each_pals_period_~active_side~0#1;havoc Pendulum_prism_task_each_pals_period_~tmp~2#1;havoc Pendulum_prism_task_each_pals_period_~side1~2#1;havoc Pendulum_prism_task_each_pals_period_~side2~2#1;assume { :begin_inline_read_active_side_history } true;read_active_side_history_#in~index#1 := 0;havoc read_active_side_history_#res#1;havoc read_active_side_history_~index#1;read_active_side_history_~index#1 := read_active_side_history_#in~index#1; 28#L148true assume 0 == read_active_side_history_~index#1 % 256;read_active_side_history_#res#1 := ~active_side_History_0~0; 155#L158true Pendulum_prism_task_each_pals_period_#t~ret22#1 := read_active_side_history_#res#1;assume { :end_inline_read_active_side_history } true;Pendulum_prism_task_each_pals_period_~tmp~2#1 := Pendulum_prism_task_each_pals_period_#t~ret22#1;havoc Pendulum_prism_task_each_pals_period_#t~ret22#1;Pendulum_prism_task_each_pals_period_~active_side~0#1 := Pendulum_prism_task_each_pals_period_~tmp~2#1;Pendulum_prism_task_each_pals_period_~side1~2#1 := ~nomsg~0;Pendulum_prism_task_each_pals_period_~side2~2#1 := ~nomsg~0;Pendulum_prism_task_each_pals_period_~side1~2#1 := ~s1p_old~0;~s1p_old~0 := ~nomsg~0;Pendulum_prism_task_each_pals_period_~side2~2#1 := ~s2p_old~0;~s2p_old~0 := ~nomsg~0; 233#L390true assume 1 == Pendulum_prism_task_each_pals_period_~side1~2#1;Pendulum_prism_task_each_pals_period_~active_side~0#1 := 1; 109#L404true assume { :begin_inline_write_active_side_history } true;write_active_side_history_#in~val#1 := Pendulum_prism_task_each_pals_period_~active_side~0#1;havoc write_active_side_history_~val#1;write_active_side_history_~val#1 := write_active_side_history_#in~val#1;~active_side_History_2~0 := ~active_side_History_1~0;~active_side_History_1~0 := ~active_side_History_0~0;~active_side_History_0~0 := write_active_side_history_~val#1; 53#L140true assume { :end_inline_write_active_side_history } true; 272#L414true assume { :end_inline_Pendulum_prism_task_each_pals_period } true;~cs1_old~0 := ~cs1_new~0;~cs1_new~0 := ~nomsg~0;~cs2_old~0 := ~cs2_new~0;~cs2_new~0 := ~nomsg~0;~s1s2_old~0 := ~s1s2_new~0;~s1s2_new~0 := ~nomsg~0;~s1s1_old~0 := ~s1s1_new~0;~s1s1_new~0 := ~nomsg~0;~s2s1_old~0 := ~s2s1_new~0;~s2s1_new~0 := ~nomsg~0;~s2s2_old~0 := ~s2s2_new~0;~s2s2_new~0 := ~nomsg~0;~s1p_old~0 := ~s1p_new~0;~s1p_new~0 := ~nomsg~0;~s2p_old~0 := ~s2p_new~0;~s2p_new~0 := ~nomsg~0;assume { :begin_inline_check } true;havoc check_#res#1;havoc check_#t~ret23#1, check_#t~ret24#1, check_#t~ret25#1, check_#t~ret26#1, check_#t~ret27#1, check_#t~ret28#1, check_#t~ret29#1, check_#t~ret30#1, check_#t~ret31#1, check_#t~ret32#1, check_#t~ret33#1, check_#t~ret34#1, check_#t~ret35#1, check_#t~ret36#1, check_#t~ret37#1, check_#t~ret38#1, check_#t~ret39#1, check_#t~ret40#1, check_#t~ret41#1, check_#t~ret42#1, check_#t~ret43#1, check_~tmp~3#1, check_~tmp___0~0#1, check_~tmp___1~0#1, check_~tmp___2~0#1, check_~tmp___3~0#1, check_~tmp___4~0#1, check_~tmp___5~0#1, check_~tmp___6~0#1, check_~tmp___7~0#1, check_~tmp___8~0#1, check_~tmp___9~0#1, check_~tmp___10~0#1, check_~tmp___11~0#1, check_~tmp___12~0#1, check_~tmp___13~0#1, check_~tmp___14~0#1, check_~tmp___15~0#1, check_~tmp___16~0#1, check_~tmp___17~0#1, check_~tmp___18~0#1, check_~tmp___19~0#1, check_~tmp___20~0#1;havoc check_~tmp~3#1;havoc check_~tmp___0~0#1;havoc check_~tmp___1~0#1;havoc check_~tmp___2~0#1;havoc check_~tmp___3~0#1;havoc check_~tmp___4~0#1;havoc check_~tmp___5~0#1;havoc check_~tmp___6~0#1;havoc check_~tmp___7~0#1;havoc check_~tmp___8~0#1;havoc check_~tmp___9~0#1;havoc check_~tmp___10~0#1;havoc check_~tmp___11~0#1;havoc check_~tmp___12~0#1;havoc check_~tmp___13~0#1;havoc check_~tmp___14~0#1;havoc check_~tmp___15~0#1;havoc check_~tmp___16~0#1;havoc check_~tmp___17~0#1;havoc check_~tmp___18~0#1;havoc check_~tmp___19~0#1;havoc check_~tmp___20~0#1; 57#L443true assume 0 == ~side1Failed~0 % 256;check_~tmp~3#1 := 1; 58#L446-2true assume { :begin_inline_assume_abort_if_not } true;assume_abort_if_not_#in~cond#1 := (if 0 == check_~tmp~3#1 then 0 else 1) % 256;havoc assume_abort_if_not_~cond#1;assume_abort_if_not_~cond#1 := assume_abort_if_not_#in~cond#1; 153#L58-2true assume 0 == assume_abort_if_not_~cond#1;assume false; 17#L57-1true assume { :end_inline_assume_abort_if_not } true;assume { :begin_inline_read_manual_selection_history } true;read_manual_selection_history_#in~index#1 := 1;havoc read_manual_selection_history_#res#1;havoc read_manual_selection_history_~index#1;read_manual_selection_history_~index#1 := read_manual_selection_history_#in~index#1; 27#L178true assume 0 == read_manual_selection_history_~index#1 % 256;read_manual_selection_history_#res#1 := ~manual_selection_History_0~0; 19#L188true check_#t~ret23#1 := read_manual_selection_history_#res#1;assume { :end_inline_read_manual_selection_history } true;check_~tmp___0~0#1 := check_#t~ret23#1;havoc check_#t~ret23#1; 183#L453true assume !(0 == check_~tmp___0~0#1); 171#L453-1true assume { :begin_inline_read_side1_failed_history } true;read_side1_failed_history_#in~index#1 := 1;havoc read_side1_failed_history_#res#1;havoc read_side1_failed_history_~index#1;read_side1_failed_history_~index#1 := read_side1_failed_history_#in~index#1; 14#L88-2true assume 0 == read_side1_failed_history_~index#1 % 256;read_side1_failed_history_#res#1 := ~side1Failed_History_0~0; 223#L98-2true check_#t~ret28#1 := read_side1_failed_history_#res#1;assume { :end_inline_read_side1_failed_history } true;check_~tmp___7~0#1 := check_#t~ret28#1;havoc check_#t~ret28#1; 240#L483true assume 0 != check_~tmp___7~0#1 % 256;assume { :begin_inline_read_side2_failed_history } true;read_side2_failed_history_#in~index#1 := 1;havoc read_side2_failed_history_#res#1;havoc read_side2_failed_history_~index#1;read_side2_failed_history_~index#1 := read_side2_failed_history_#in~index#1; 54#L118-2true assume 0 == read_side2_failed_history_~index#1 % 256;read_side2_failed_history_#res#1 := ~side2Failed_History_0~0; 276#L128-2true check_#t~ret29#1 := read_side2_failed_history_#res#1;assume { :end_inline_read_side2_failed_history } true;check_~tmp___8~0#1 := check_#t~ret29#1;havoc check_#t~ret29#1; 93#L485true assume 0 == check_~tmp___8~0#1 % 256;assume { :begin_inline_read_active_side_history } true;read_active_side_history_#in~index#1 := 0;havoc read_active_side_history_#res#1;havoc read_active_side_history_~index#1;read_active_side_history_~index#1 := read_active_side_history_#in~index#1; 245#L148-1true assume 0 == read_active_side_history_~index#1 % 256;read_active_side_history_#res#1 := ~active_side_History_0~0; 232#L158-1true check_#t~ret30#1 := read_active_side_history_#res#1;assume { :end_inline_read_active_side_history } true;check_~tmp___5~0#1 := check_#t~ret30#1;havoc check_#t~ret30#1; 156#L487true assume !(2 == check_~tmp___5~0#1);check_#res#1 := 0; 122#L533true main_#t~ret61#1 := check_#res#1;assume { :end_inline_check } true;main_~c1~0#1 := main_#t~ret61#1;havoc main_#t~ret61#1;assume { :begin_inline_assert } true;assert_#in~arg#1 := (if 0 == main_~c1~0#1 then 0 else 1);havoc assert_~arg#1;assert_~arg#1 := assert_#in~arg#1; 236#L612-44true assume !(0 == assert_~arg#1 % 256); 66#L607-22true assume { :end_inline_assert } true; 113#L578-2true [2021-12-15 17:22:08,900 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-15 17:22:08,900 INFO L85 PathProgramCache]: Analyzing trace with hash 889563392, now seen corresponding path program 1 times [2021-12-15 17:22:08,906 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-15 17:22:08,906 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1499478346] [2021-12-15 17:22:08,907 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-15 17:22:08,907 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-15 17:22:08,981 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-15 17:22:09,043 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-15 17:22:09,044 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-15 17:22:09,044 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1499478346] [2021-12-15 17:22:09,044 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1499478346] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-15 17:22:09,045 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-15 17:22:09,045 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-12-15 17:22:09,046 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1791053828] [2021-12-15 17:22:09,047 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-15 17:22:09,050 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-15 17:22:09,050 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-15 17:22:09,051 INFO L85 PathProgramCache]: Analyzing trace with hash 2084702382, now seen corresponding path program 1 times [2021-12-15 17:22:09,051 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-15 17:22:09,051 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2058621755] [2021-12-15 17:22:09,051 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-15 17:22:09,051 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-15 17:22:09,090 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-15 17:22:09,116 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-15 17:22:09,117 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-15 17:22:09,117 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2058621755] [2021-12-15 17:22:09,117 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2058621755] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-15 17:22:09,117 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-15 17:22:09,117 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-12-15 17:22:09,118 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [85570598] [2021-12-15 17:22:09,118 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-15 17:22:09,119 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-12-15 17:22:09,120 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-15 17:22:09,149 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-12-15 17:22:09,150 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-12-15 17:22:09,152 INFO L87 Difference]: Start difference. First operand has 274 states, 273 states have (on average 1.6117216117216118) internal successors, (440), 273 states have internal predecessors, (440), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 4 states, 4 states have (on average 1.5) internal successors, (6), 4 states have internal predecessors, (6), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-15 17:22:09,244 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-15 17:22:09,244 INFO L93 Difference]: Finished difference Result 272 states and 405 transitions. [2021-12-15 17:22:09,248 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2021-12-15 17:22:09,253 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 272 states and 405 transitions. [2021-12-15 17:22:09,258 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 230 [2021-12-15 17:22:09,263 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 272 states to 247 states and 369 transitions. [2021-12-15 17:22:09,264 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 247 [2021-12-15 17:22:09,265 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 247 [2021-12-15 17:22:09,265 INFO L73 IsDeterministic]: Start isDeterministic. Operand 247 states and 369 transitions. [2021-12-15 17:22:09,266 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-12-15 17:22:09,266 INFO L681 BuchiCegarLoop]: Abstraction has 247 states and 369 transitions. [2021-12-15 17:22:09,281 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 247 states and 369 transitions. [2021-12-15 17:22:09,298 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 247 to 247. [2021-12-15 17:22:09,299 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 247 states, 247 states have (on average 1.4939271255060729) internal successors, (369), 246 states have internal predecessors, (369), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-15 17:22:09,300 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 247 states to 247 states and 369 transitions. [2021-12-15 17:22:09,301 INFO L704 BuchiCegarLoop]: Abstraction has 247 states and 369 transitions. [2021-12-15 17:22:09,301 INFO L587 BuchiCegarLoop]: Abstraction has 247 states and 369 transitions. [2021-12-15 17:22:09,301 INFO L425 BuchiCegarLoop]: ======== Iteration 2============ [2021-12-15 17:22:09,302 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 247 states and 369 transitions. [2021-12-15 17:22:09,303 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 230 [2021-12-15 17:22:09,304 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-15 17:22:09,304 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-15 17:22:09,305 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-15 17:22:09,305 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-15 17:22:09,306 INFO L791 eck$LassoCheckResult]: Stem: 804#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(52, 2);call #Ultimate.allocInit(12, 3);~nomsg~0 := -1;~cs1~0 := 0;~cs1_old~0 := 0;~cs1_new~0 := 0;~cs2~0 := 0;~cs2_old~0 := 0;~cs2_new~0 := 0;~s1s2~0 := 0;~s1s2_old~0 := 0;~s1s2_new~0 := 0;~s1s1~0 := 0;~s1s1_old~0 := 0;~s1s1_new~0 := 0;~s2s1~0 := 0;~s2s1_old~0 := 0;~s2s1_new~0 := 0;~s2s2~0 := 0;~s2s2_old~0 := 0;~s2s2_new~0 := 0;~s1p~0 := 0;~s1p_old~0 := 0;~s1p_new~0 := 0;~s2p~0 := 0;~s2p_old~0 := 0;~s2p_new~0 := 0;~side1Failed~0 := 0;~side2Failed~0 := 0;~side1_written~0 := 0;~side2_written~0 := 0;~side1Failed_History_0~0 := 0;~side1Failed_History_1~0 := 0;~side1Failed_History_2~0 := 0;~side2Failed_History_0~0 := 0;~side2Failed_History_1~0 := 0;~side2Failed_History_2~0 := 0;~active_side_History_0~0 := 0;~active_side_History_1~0 := 0;~active_side_History_2~0 := 0;~manual_selection_History_0~0 := 0;~manual_selection_History_1~0 := 0;~manual_selection_History_2~0 := 0; 783#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~nondet44#1, main_#t~nondet45#1, main_#t~nondet46#1, main_#t~nondet47#1, main_#t~nondet48#1, main_#t~nondet49#1, main_#t~nondet50#1, main_#t~nondet51#1, main_#t~nondet52#1, main_#t~nondet53#1, main_#t~nondet54#1, main_#t~nondet55#1, main_#t~nondet56#1, main_#t~nondet57#1, main_#t~nondet58#1, main_#t~nondet59#1, main_#t~ret60#1, main_#t~ret61#1, main_~c1~0#1, main_~i2~0#1;havoc main_~c1~0#1;havoc main_~i2~0#1;main_~c1~0#1 := 0;~side1Failed~0 := main_#t~nondet44#1;havoc main_#t~nondet44#1;~side2Failed~0 := main_#t~nondet45#1;havoc main_#t~nondet45#1;~side1_written~0 := main_#t~nondet46#1;havoc main_#t~nondet46#1;~side2_written~0 := main_#t~nondet47#1;havoc main_#t~nondet47#1;~side1Failed_History_0~0 := main_#t~nondet48#1;havoc main_#t~nondet48#1;~side1Failed_History_1~0 := main_#t~nondet49#1;havoc main_#t~nondet49#1;~side1Failed_History_2~0 := main_#t~nondet50#1;havoc main_#t~nondet50#1;~side2Failed_History_0~0 := main_#t~nondet51#1;havoc main_#t~nondet51#1;~side2Failed_History_1~0 := main_#t~nondet52#1;havoc main_#t~nondet52#1;~side2Failed_History_2~0 := main_#t~nondet53#1;havoc main_#t~nondet53#1;~active_side_History_0~0 := main_#t~nondet54#1;havoc main_#t~nondet54#1;~active_side_History_1~0 := main_#t~nondet55#1;havoc main_#t~nondet55#1;~active_side_History_2~0 := main_#t~nondet56#1;havoc main_#t~nondet56#1;~manual_selection_History_0~0 := main_#t~nondet57#1;havoc main_#t~nondet57#1;~manual_selection_History_1~0 := main_#t~nondet58#1;havoc main_#t~nondet58#1;~manual_selection_History_2~0 := main_#t~nondet59#1;havoc main_#t~nondet59#1;assume { :begin_inline_init } true;havoc init_#res#1; 677#L197 assume !(0 != ~side1Failed_History_0~0 % 256); 678#L200 assume !(0 != ~side2Failed_History_0~0 % 256); 600#L203 assume !(-2 != ~active_side_History_0~0); 601#L206 assume !(0 != ~manual_selection_History_0~0); 617#L209 assume !(0 != ~side1Failed_History_1~0 % 256); 796#L212 assume !(0 != ~side2Failed_History_1~0 % 256); 756#L215 assume !(-2 != ~active_side_History_1~0); 757#L218 assume !(0 != ~manual_selection_History_1~0); 784#L221 assume !(0 != ~side1Failed_History_2~0 % 256); 798#L224 assume !(0 != ~side2Failed_History_2~0 % 256); 718#L227 assume !(-2 != ~active_side_History_2~0); 719#L230 assume !(0 != ~manual_selection_History_2~0);init_#res#1 := 1; 667#L233 main_#t~ret60#1 := init_#res#1;assume { :end_inline_init } true;main_~i2~0#1 := main_#t~ret60#1;havoc main_#t~ret60#1;assume { :begin_inline_assume_abort_if_not } true;assume_abort_if_not_#in~cond#1 := main_~i2~0#1;havoc assume_abort_if_not_~cond#1;assume_abort_if_not_~cond#1 := assume_abort_if_not_#in~cond#1; 668#L58 assume !(0 == assume_abort_if_not_~cond#1); 758#L57 assume { :end_inline_assume_abort_if_not } true;~cs1_old~0 := ~nomsg~0;~cs1_new~0 := ~nomsg~0;~cs2_old~0 := ~nomsg~0;~cs2_new~0 := ~nomsg~0;~s1s2_old~0 := ~nomsg~0;~s1s2_new~0 := ~nomsg~0;~s1s1_old~0 := ~nomsg~0;~s1s1_new~0 := ~nomsg~0;~s2s1_old~0 := ~nomsg~0;~s2s1_new~0 := ~nomsg~0;~s2s2_old~0 := ~nomsg~0;~s2s2_new~0 := ~nomsg~0;~s1p_old~0 := ~nomsg~0;~s1p_new~0 := ~nomsg~0;~s2p_old~0 := ~nomsg~0;~s2p_new~0 := ~nomsg~0;main_~i2~0#1 := 0; 674#L578-2 [2021-12-15 17:22:09,306 INFO L793 eck$LassoCheckResult]: Loop: 674#L578-2 assume !false;assume { :begin_inline_Console_task_each_pals_period } true;havoc Console_task_each_pals_period_#t~nondet4#1, Console_task_each_pals_period_#t~ite5#1, Console_task_each_pals_period_#t~ite6#1, Console_task_each_pals_period_~manual_selection~0#1, Console_task_each_pals_period_~tmp~1#1;havoc Console_task_each_pals_period_~manual_selection~0#1;havoc Console_task_each_pals_period_~tmp~1#1;Console_task_each_pals_period_~tmp~1#1 := Console_task_each_pals_period_#t~nondet4#1;havoc Console_task_each_pals_period_#t~nondet4#1;Console_task_each_pals_period_~manual_selection~0#1 := Console_task_each_pals_period_~tmp~1#1;assume { :begin_inline_write_manual_selection_history } true;write_manual_selection_history_#in~val#1 := Console_task_each_pals_period_~manual_selection~0#1;havoc write_manual_selection_history_~val#1;write_manual_selection_history_~val#1 := write_manual_selection_history_#in~val#1;~manual_selection_History_2~0 := ~manual_selection_History_1~0;~manual_selection_History_1~0 := ~manual_selection_History_0~0;~manual_selection_History_0~0 := write_manual_selection_history_~val#1; 734#L170 assume { :end_inline_write_manual_selection_history } true; 778#L258 assume Console_task_each_pals_period_~manual_selection~0#1 != ~nomsg~0 && ~cs1_new~0 == ~nomsg~0;Console_task_each_pals_period_#t~ite5#1 := Console_task_each_pals_period_~manual_selection~0#1; 779#L258-2 ~cs1_new~0 := (if Console_task_each_pals_period_#t~ite5#1 % 256 <= 127 then Console_task_each_pals_period_#t~ite5#1 % 256 else Console_task_each_pals_period_#t~ite5#1 % 256 - 256);havoc Console_task_each_pals_period_#t~ite5#1; 794#L259 assume Console_task_each_pals_period_~manual_selection~0#1 != ~nomsg~0 && ~cs2_new~0 == ~nomsg~0;Console_task_each_pals_period_#t~ite6#1 := Console_task_each_pals_period_~manual_selection~0#1; 795#L259-2 ~cs2_new~0 := (if Console_task_each_pals_period_#t~ite6#1 % 256 <= 127 then Console_task_each_pals_period_#t~ite6#1 % 256 else Console_task_each_pals_period_#t~ite6#1 % 256 - 256);havoc Console_task_each_pals_period_#t~ite6#1;Console_task_each_pals_period_~manual_selection~0#1 := 0; 762#L261 assume { :end_inline_Console_task_each_pals_period } true;assume { :begin_inline_Side1_activestandby_task_each_pals_period } true;havoc Side1_activestandby_task_each_pals_period_#t~nondet7#1, Side1_activestandby_task_each_pals_period_#t~ite8#1, Side1_activestandby_task_each_pals_period_#t~ite9#1, Side1_activestandby_task_each_pals_period_#t~ite10#1, Side1_activestandby_task_each_pals_period_#t~ite11#1, Side1_activestandby_task_each_pals_period_#t~ite12#1, Side1_activestandby_task_each_pals_period_#t~ite13#1, Side1_activestandby_task_each_pals_period_~side1~0#1, Side1_activestandby_task_each_pals_period_~side2~0#1, Side1_activestandby_task_each_pals_period_~manual_selection~1#1, Side1_activestandby_task_each_pals_period_~next_state~0#1;havoc Side1_activestandby_task_each_pals_period_~side1~0#1;havoc Side1_activestandby_task_each_pals_period_~side2~0#1;havoc Side1_activestandby_task_each_pals_period_~manual_selection~1#1;havoc Side1_activestandby_task_each_pals_period_~next_state~0#1;Side1_activestandby_task_each_pals_period_~side1~0#1 := ~nomsg~0;Side1_activestandby_task_each_pals_period_~side2~0#1 := ~nomsg~0;Side1_activestandby_task_each_pals_period_~manual_selection~1#1 := 0;~side1Failed~0 := Side1_activestandby_task_each_pals_period_#t~nondet7#1;havoc Side1_activestandby_task_each_pals_period_#t~nondet7#1;assume { :begin_inline_write_side1_failed_history } true;write_side1_failed_history_#in~val#1 := ~side1Failed~0;havoc write_side1_failed_history_~val#1;write_side1_failed_history_~val#1 := write_side1_failed_history_#in~val#1;~side1Failed_History_2~0 := ~side1Failed_History_1~0;~side1Failed_History_1~0 := ~side1Failed_History_0~0;~side1Failed_History_0~0 := write_side1_failed_history_~val#1; 763#L80 assume { :end_inline_write_side1_failed_history } true; 750#L277 assume 0 != ~side1Failed~0 % 256; 751#L278 assume !(~nomsg~0 != ~nomsg~0 && ~s1s1_new~0 == ~nomsg~0);Side1_activestandby_task_each_pals_period_#t~ite8#1 := ~s1s1_new~0; 761#L278-2 ~s1s1_new~0 := (if Side1_activestandby_task_each_pals_period_#t~ite8#1 % 256 <= 127 then Side1_activestandby_task_each_pals_period_#t~ite8#1 % 256 else Side1_activestandby_task_each_pals_period_#t~ite8#1 % 256 - 256);havoc Side1_activestandby_task_each_pals_period_#t~ite8#1; 648#L279 assume !(~nomsg~0 != ~nomsg~0 && ~s1s2_new~0 == ~nomsg~0);Side1_activestandby_task_each_pals_period_#t~ite9#1 := ~s1s2_new~0; 612#L279-2 ~s1s2_new~0 := (if Side1_activestandby_task_each_pals_period_#t~ite9#1 % 256 <= 127 then Side1_activestandby_task_each_pals_period_#t~ite9#1 % 256 else Side1_activestandby_task_each_pals_period_#t~ite9#1 % 256 - 256);havoc Side1_activestandby_task_each_pals_period_#t~ite9#1; 613#L280 assume !(~nomsg~0 != ~nomsg~0 && ~s1p_new~0 == ~nomsg~0);Side1_activestandby_task_each_pals_period_#t~ite10#1 := ~s1p_new~0; 723#L280-2 ~s1p_new~0 := (if Side1_activestandby_task_each_pals_period_#t~ite10#1 % 256 <= 127 then Side1_activestandby_task_each_pals_period_#t~ite10#1 % 256 else Side1_activestandby_task_each_pals_period_#t~ite10#1 % 256 - 256);havoc Side1_activestandby_task_each_pals_period_#t~ite10#1;~side1_written~0 := ~nomsg~0; 691#L314 assume { :end_inline_Side1_activestandby_task_each_pals_period } true;assume { :begin_inline_Side2_activestandby_task_each_pals_period } true;havoc Side2_activestandby_task_each_pals_period_#t~nondet14#1, Side2_activestandby_task_each_pals_period_#t~ite15#1, Side2_activestandby_task_each_pals_period_#t~ite16#1, Side2_activestandby_task_each_pals_period_#t~ite17#1, Side2_activestandby_task_each_pals_period_#t~ret18#1, Side2_activestandby_task_each_pals_period_#t~ite19#1, Side2_activestandby_task_each_pals_period_#t~ite20#1, Side2_activestandby_task_each_pals_period_#t~ite21#1, Side2_activestandby_task_each_pals_period_~side1~1#1, Side2_activestandby_task_each_pals_period_~side2~1#1, Side2_activestandby_task_each_pals_period_~manual_selection~2#1, Side2_activestandby_task_each_pals_period_~next_state~1#1;havoc Side2_activestandby_task_each_pals_period_~side1~1#1;havoc Side2_activestandby_task_each_pals_period_~side2~1#1;havoc Side2_activestandby_task_each_pals_period_~manual_selection~2#1;havoc Side2_activestandby_task_each_pals_period_~next_state~1#1;Side2_activestandby_task_each_pals_period_~side1~1#1 := ~nomsg~0;Side2_activestandby_task_each_pals_period_~side2~1#1 := ~nomsg~0;Side2_activestandby_task_each_pals_period_~manual_selection~2#1 := 0;~side2Failed~0 := Side2_activestandby_task_each_pals_period_#t~nondet14#1;havoc Side2_activestandby_task_each_pals_period_#t~nondet14#1;assume { :begin_inline_write_side2_failed_history } true;write_side2_failed_history_#in~val#1 := ~side2Failed~0;havoc write_side2_failed_history_~val#1;write_side2_failed_history_~val#1 := write_side2_failed_history_#in~val#1;~side2Failed_History_2~0 := ~side2Failed_History_1~0;~side2Failed_History_1~0 := ~side2Failed_History_0~0;~side2Failed_History_0~0 := write_side2_failed_history_~val#1; 676#L110 assume { :end_inline_write_side2_failed_history } true; 641#L330 assume 0 != ~side2Failed~0 % 256; 642#L331 assume !(~nomsg~0 != ~nomsg~0 && ~s2s1_new~0 == ~nomsg~0);Side2_activestandby_task_each_pals_period_#t~ite15#1 := ~s2s1_new~0; 737#L331-2 ~s2s1_new~0 := (if Side2_activestandby_task_each_pals_period_#t~ite15#1 % 256 <= 127 then Side2_activestandby_task_each_pals_period_#t~ite15#1 % 256 else Side2_activestandby_task_each_pals_period_#t~ite15#1 % 256 - 256);havoc Side2_activestandby_task_each_pals_period_#t~ite15#1; 738#L332 assume !(~nomsg~0 != ~nomsg~0 && ~s2s2_new~0 == ~nomsg~0);Side2_activestandby_task_each_pals_period_#t~ite16#1 := ~s2s2_new~0; 702#L332-2 ~s2s2_new~0 := (if Side2_activestandby_task_each_pals_period_#t~ite16#1 % 256 <= 127 then Side2_activestandby_task_each_pals_period_#t~ite16#1 % 256 else Side2_activestandby_task_each_pals_period_#t~ite16#1 % 256 - 256);havoc Side2_activestandby_task_each_pals_period_#t~ite16#1; 703#L333 assume !(~nomsg~0 != ~nomsg~0 && ~s2p_new~0 == ~nomsg~0);Side2_activestandby_task_each_pals_period_#t~ite17#1 := ~s2p_new~0; 790#L333-2 ~s2p_new~0 := (if Side2_activestandby_task_each_pals_period_#t~ite17#1 % 256 <= 127 then Side2_activestandby_task_each_pals_period_#t~ite17#1 % 256 else Side2_activestandby_task_each_pals_period_#t~ite17#1 % 256 - 256);havoc Side2_activestandby_task_each_pals_period_#t~ite17#1;~side2_written~0 := ~nomsg~0; 689#L371 assume { :end_inline_Side2_activestandby_task_each_pals_period } true;assume { :begin_inline_Pendulum_prism_task_each_pals_period } true;havoc Pendulum_prism_task_each_pals_period_#t~ret22#1, Pendulum_prism_task_each_pals_period_~active_side~0#1, Pendulum_prism_task_each_pals_period_~tmp~2#1, Pendulum_prism_task_each_pals_period_~side1~2#1, Pendulum_prism_task_each_pals_period_~side2~2#1;havoc Pendulum_prism_task_each_pals_period_~active_side~0#1;havoc Pendulum_prism_task_each_pals_period_~tmp~2#1;havoc Pendulum_prism_task_each_pals_period_~side1~2#1;havoc Pendulum_prism_task_each_pals_period_~side2~2#1;assume { :begin_inline_read_active_side_history } true;read_active_side_history_#in~index#1 := 0;havoc read_active_side_history_#res#1;havoc read_active_side_history_~index#1;read_active_side_history_~index#1 := read_active_side_history_#in~index#1; 605#L148 assume 0 == read_active_side_history_~index#1 % 256;read_active_side_history_#res#1 := ~active_side_History_0~0; 606#L158 Pendulum_prism_task_each_pals_period_#t~ret22#1 := read_active_side_history_#res#1;assume { :end_inline_read_active_side_history } true;Pendulum_prism_task_each_pals_period_~tmp~2#1 := Pendulum_prism_task_each_pals_period_#t~ret22#1;havoc Pendulum_prism_task_each_pals_period_#t~ret22#1;Pendulum_prism_task_each_pals_period_~active_side~0#1 := Pendulum_prism_task_each_pals_period_~tmp~2#1;Pendulum_prism_task_each_pals_period_~side1~2#1 := ~nomsg~0;Pendulum_prism_task_each_pals_period_~side2~2#1 := ~nomsg~0;Pendulum_prism_task_each_pals_period_~side1~2#1 := ~s1p_old~0;~s1p_old~0 := ~nomsg~0;Pendulum_prism_task_each_pals_period_~side2~2#1 := ~s2p_old~0;~s2p_old~0 := ~nomsg~0; 770#L390 assume 1 == Pendulum_prism_task_each_pals_period_~side1~2#1;Pendulum_prism_task_each_pals_period_~active_side~0#1 := 1; 697#L404 assume { :begin_inline_write_active_side_history } true;write_active_side_history_#in~val#1 := Pendulum_prism_task_each_pals_period_~active_side~0#1;havoc write_active_side_history_~val#1;write_active_side_history_~val#1 := write_active_side_history_#in~val#1;~active_side_History_2~0 := ~active_side_History_1~0;~active_side_History_1~0 := ~active_side_History_0~0;~active_side_History_0~0 := write_active_side_history_~val#1; 651#L140 assume { :end_inline_write_active_side_history } true; 652#L414 assume { :end_inline_Pendulum_prism_task_each_pals_period } true;~cs1_old~0 := ~cs1_new~0;~cs1_new~0 := ~nomsg~0;~cs2_old~0 := ~cs2_new~0;~cs2_new~0 := ~nomsg~0;~s1s2_old~0 := ~s1s2_new~0;~s1s2_new~0 := ~nomsg~0;~s1s1_old~0 := ~s1s1_new~0;~s1s1_new~0 := ~nomsg~0;~s2s1_old~0 := ~s2s1_new~0;~s2s1_new~0 := ~nomsg~0;~s2s2_old~0 := ~s2s2_new~0;~s2s2_new~0 := ~nomsg~0;~s1p_old~0 := ~s1p_new~0;~s1p_new~0 := ~nomsg~0;~s2p_old~0 := ~s2p_new~0;~s2p_new~0 := ~nomsg~0;assume { :begin_inline_check } true;havoc check_#res#1;havoc check_#t~ret23#1, check_#t~ret24#1, check_#t~ret25#1, check_#t~ret26#1, check_#t~ret27#1, check_#t~ret28#1, check_#t~ret29#1, check_#t~ret30#1, check_#t~ret31#1, check_#t~ret32#1, check_#t~ret33#1, check_#t~ret34#1, check_#t~ret35#1, check_#t~ret36#1, check_#t~ret37#1, check_#t~ret38#1, check_#t~ret39#1, check_#t~ret40#1, check_#t~ret41#1, check_#t~ret42#1, check_#t~ret43#1, check_~tmp~3#1, check_~tmp___0~0#1, check_~tmp___1~0#1, check_~tmp___2~0#1, check_~tmp___3~0#1, check_~tmp___4~0#1, check_~tmp___5~0#1, check_~tmp___6~0#1, check_~tmp___7~0#1, check_~tmp___8~0#1, check_~tmp___9~0#1, check_~tmp___10~0#1, check_~tmp___11~0#1, check_~tmp___12~0#1, check_~tmp___13~0#1, check_~tmp___14~0#1, check_~tmp___15~0#1, check_~tmp___16~0#1, check_~tmp___17~0#1, check_~tmp___18~0#1, check_~tmp___19~0#1, check_~tmp___20~0#1;havoc check_~tmp~3#1;havoc check_~tmp___0~0#1;havoc check_~tmp___1~0#1;havoc check_~tmp___2~0#1;havoc check_~tmp___3~0#1;havoc check_~tmp___4~0#1;havoc check_~tmp___5~0#1;havoc check_~tmp___6~0#1;havoc check_~tmp___7~0#1;havoc check_~tmp___8~0#1;havoc check_~tmp___9~0#1;havoc check_~tmp___10~0#1;havoc check_~tmp___11~0#1;havoc check_~tmp___12~0#1;havoc check_~tmp___13~0#1;havoc check_~tmp___14~0#1;havoc check_~tmp___15~0#1;havoc check_~tmp___16~0#1;havoc check_~tmp___17~0#1;havoc check_~tmp___18~0#1;havoc check_~tmp___19~0#1;havoc check_~tmp___20~0#1; 660#L443 assume 0 == ~side1Failed~0 % 256;check_~tmp~3#1 := 1; 661#L446-2 assume { :begin_inline_assume_abort_if_not } true;assume_abort_if_not_#in~cond#1 := (if 0 == check_~tmp~3#1 then 0 else 1) % 256;havoc assume_abort_if_not_~cond#1;assume_abort_if_not_~cond#1 := assume_abort_if_not_#in~cond#1; 663#L58-2 assume !(0 == assume_abort_if_not_~cond#1); 586#L57-1 assume { :end_inline_assume_abort_if_not } true;assume { :begin_inline_read_manual_selection_history } true;read_manual_selection_history_#in~index#1 := 1;havoc read_manual_selection_history_#res#1;havoc read_manual_selection_history_~index#1;read_manual_selection_history_~index#1 := read_manual_selection_history_#in~index#1; 587#L178 assume 0 == read_manual_selection_history_~index#1 % 256;read_manual_selection_history_#res#1 := ~manual_selection_History_0~0; 590#L188 check_#t~ret23#1 := read_manual_selection_history_#res#1;assume { :end_inline_read_manual_selection_history } true;check_~tmp___0~0#1 := check_#t~ret23#1;havoc check_#t~ret23#1; 591#L453 assume !(0 == check_~tmp___0~0#1); 560#L453-1 assume { :begin_inline_read_side1_failed_history } true;read_side1_failed_history_#in~index#1 := 1;havoc read_side1_failed_history_#res#1;havoc read_side1_failed_history_~index#1;read_side1_failed_history_~index#1 := read_side1_failed_history_#in~index#1; 581#L88-2 assume 0 == read_side1_failed_history_~index#1 % 256;read_side1_failed_history_#res#1 := ~side1Failed_History_0~0; 582#L98-2 check_#t~ret28#1 := read_side1_failed_history_#res#1;assume { :end_inline_read_side1_failed_history } true;check_~tmp___7~0#1 := check_#t~ret28#1;havoc check_#t~ret28#1; 799#L483 assume 0 != check_~tmp___7~0#1 % 256;assume { :begin_inline_read_side2_failed_history } true;read_side2_failed_history_#in~index#1 := 1;havoc read_side2_failed_history_#res#1;havoc read_side2_failed_history_~index#1;read_side2_failed_history_~index#1 := read_side2_failed_history_#in~index#1; 653#L118-2 assume 0 == read_side2_failed_history_~index#1 % 256;read_side2_failed_history_#res#1 := ~side2Failed_History_0~0; 595#L128-2 check_#t~ret29#1 := read_side2_failed_history_#res#1;assume { :end_inline_read_side2_failed_history } true;check_~tmp___8~0#1 := check_#t~ret29#1;havoc check_#t~ret29#1; 714#L485 assume 0 == check_~tmp___8~0#1 % 256;assume { :begin_inline_read_active_side_history } true;read_active_side_history_#in~index#1 := 0;havoc read_active_side_history_#res#1;havoc read_active_side_history_~index#1;read_active_side_history_~index#1 := read_active_side_history_#in~index#1; 715#L148-1 assume 0 == read_active_side_history_~index#1 % 256;read_active_side_history_#res#1 := ~active_side_History_0~0; 574#L158-1 check_#t~ret30#1 := read_active_side_history_#res#1;assume { :end_inline_read_active_side_history } true;check_~tmp___5~0#1 := check_#t~ret30#1;havoc check_#t~ret30#1; 771#L487 assume !(2 == check_~tmp___5~0#1);check_#res#1 := 0; 593#L533 main_#t~ret61#1 := check_#res#1;assume { :end_inline_check } true;main_~c1~0#1 := main_#t~ret61#1;havoc main_#t~ret61#1;assume { :begin_inline_assert } true;assert_#in~arg#1 := (if 0 == main_~c1~0#1 then 0 else 1);havoc assert_~arg#1;assert_~arg#1 := assert_#in~arg#1; 744#L612-44 assume !(0 == assert_~arg#1 % 256); 673#L607-22 assume { :end_inline_assert } true; 674#L578-2 [2021-12-15 17:22:09,307 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-15 17:22:09,307 INFO L85 PathProgramCache]: Analyzing trace with hash -613005151, now seen corresponding path program 1 times [2021-12-15 17:22:09,307 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-15 17:22:09,308 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1159177709] [2021-12-15 17:22:09,308 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-15 17:22:09,308 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-15 17:22:09,356 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-15 17:22:09,356 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-12-15 17:22:09,375 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-15 17:22:09,395 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-12-15 17:22:09,396 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-15 17:22:09,396 INFO L85 PathProgramCache]: Analyzing trace with hash -47045716, now seen corresponding path program 1 times [2021-12-15 17:22:09,396 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-15 17:22:09,396 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [991090525] [2021-12-15 17:22:09,396 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-15 17:22:09,397 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-15 17:22:09,421 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-15 17:22:09,471 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-15 17:22:09,472 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-15 17:22:09,472 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [991090525] [2021-12-15 17:22:09,472 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [991090525] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-15 17:22:09,472 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-15 17:22:09,472 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-15 17:22:09,473 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [233779119] [2021-12-15 17:22:09,473 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-15 17:22:09,473 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-12-15 17:22:09,474 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-15 17:22:09,474 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-15 17:22:09,474 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-15 17:22:09,474 INFO L87 Difference]: Start difference. First operand 247 states and 369 transitions. cyclomatic complexity: 123 Second operand has 3 states, 3 states have (on average 17.0) internal successors, (51), 3 states have internal predecessors, (51), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-15 17:22:09,506 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-15 17:22:09,506 INFO L93 Difference]: Finished difference Result 457 states and 690 transitions. [2021-12-15 17:22:09,507 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-15 17:22:09,508 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 457 states and 690 transitions. [2021-12-15 17:22:09,511 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 440 [2021-12-15 17:22:09,515 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 457 states to 457 states and 690 transitions. [2021-12-15 17:22:09,515 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 457 [2021-12-15 17:22:09,516 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 457 [2021-12-15 17:22:09,516 INFO L73 IsDeterministic]: Start isDeterministic. Operand 457 states and 690 transitions. [2021-12-15 17:22:09,518 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-12-15 17:22:09,518 INFO L681 BuchiCegarLoop]: Abstraction has 457 states and 690 transitions. [2021-12-15 17:22:09,519 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 457 states and 690 transitions. [2021-12-15 17:22:09,535 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 457 to 288. [2021-12-15 17:22:09,535 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 288 states, 288 states have (on average 1.4930555555555556) internal successors, (430), 287 states have internal predecessors, (430), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-15 17:22:09,536 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 288 states to 288 states and 430 transitions. [2021-12-15 17:22:09,537 INFO L704 BuchiCegarLoop]: Abstraction has 288 states and 430 transitions. [2021-12-15 17:22:09,537 INFO L587 BuchiCegarLoop]: Abstraction has 288 states and 430 transitions. [2021-12-15 17:22:09,537 INFO L425 BuchiCegarLoop]: ======== Iteration 3============ [2021-12-15 17:22:09,537 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 288 states and 430 transitions. [2021-12-15 17:22:09,539 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 271 [2021-12-15 17:22:09,541 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-15 17:22:09,541 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-15 17:22:09,543 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-15 17:22:09,543 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-15 17:22:09,543 INFO L791 eck$LassoCheckResult]: Stem: 1534#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(52, 2);call #Ultimate.allocInit(12, 3);~nomsg~0 := -1;~cs1~0 := 0;~cs1_old~0 := 0;~cs1_new~0 := 0;~cs2~0 := 0;~cs2_old~0 := 0;~cs2_new~0 := 0;~s1s2~0 := 0;~s1s2_old~0 := 0;~s1s2_new~0 := 0;~s1s1~0 := 0;~s1s1_old~0 := 0;~s1s1_new~0 := 0;~s2s1~0 := 0;~s2s1_old~0 := 0;~s2s1_new~0 := 0;~s2s2~0 := 0;~s2s2_old~0 := 0;~s2s2_new~0 := 0;~s1p~0 := 0;~s1p_old~0 := 0;~s1p_new~0 := 0;~s2p~0 := 0;~s2p_old~0 := 0;~s2p_new~0 := 0;~side1Failed~0 := 0;~side2Failed~0 := 0;~side1_written~0 := 0;~side2_written~0 := 0;~side1Failed_History_0~0 := 0;~side1Failed_History_1~0 := 0;~side1Failed_History_2~0 := 0;~side2Failed_History_0~0 := 0;~side2Failed_History_1~0 := 0;~side2Failed_History_2~0 := 0;~active_side_History_0~0 := 0;~active_side_History_1~0 := 0;~active_side_History_2~0 := 0;~manual_selection_History_0~0 := 0;~manual_selection_History_1~0 := 0;~manual_selection_History_2~0 := 0; 1508#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~nondet44#1, main_#t~nondet45#1, main_#t~nondet46#1, main_#t~nondet47#1, main_#t~nondet48#1, main_#t~nondet49#1, main_#t~nondet50#1, main_#t~nondet51#1, main_#t~nondet52#1, main_#t~nondet53#1, main_#t~nondet54#1, main_#t~nondet55#1, main_#t~nondet56#1, main_#t~nondet57#1, main_#t~nondet58#1, main_#t~nondet59#1, main_#t~ret60#1, main_#t~ret61#1, main_~c1~0#1, main_~i2~0#1;havoc main_~c1~0#1;havoc main_~i2~0#1;main_~c1~0#1 := 0;~side1Failed~0 := main_#t~nondet44#1;havoc main_#t~nondet44#1;~side2Failed~0 := main_#t~nondet45#1;havoc main_#t~nondet45#1;~side1_written~0 := main_#t~nondet46#1;havoc main_#t~nondet46#1;~side2_written~0 := main_#t~nondet47#1;havoc main_#t~nondet47#1;~side1Failed_History_0~0 := main_#t~nondet48#1;havoc main_#t~nondet48#1;~side1Failed_History_1~0 := main_#t~nondet49#1;havoc main_#t~nondet49#1;~side1Failed_History_2~0 := main_#t~nondet50#1;havoc main_#t~nondet50#1;~side2Failed_History_0~0 := main_#t~nondet51#1;havoc main_#t~nondet51#1;~side2Failed_History_1~0 := main_#t~nondet52#1;havoc main_#t~nondet52#1;~side2Failed_History_2~0 := main_#t~nondet53#1;havoc main_#t~nondet53#1;~active_side_History_0~0 := main_#t~nondet54#1;havoc main_#t~nondet54#1;~active_side_History_1~0 := main_#t~nondet55#1;havoc main_#t~nondet55#1;~active_side_History_2~0 := main_#t~nondet56#1;havoc main_#t~nondet56#1;~manual_selection_History_0~0 := main_#t~nondet57#1;havoc main_#t~nondet57#1;~manual_selection_History_1~0 := main_#t~nondet58#1;havoc main_#t~nondet58#1;~manual_selection_History_2~0 := main_#t~nondet59#1;havoc main_#t~nondet59#1;assume { :begin_inline_init } true;havoc init_#res#1; 1388#L197 assume !(0 != ~side1Failed_History_0~0 % 256); 1389#L200 assume !(0 != ~side2Failed_History_0~0 % 256); 1310#L203 assume !(-2 != ~active_side_History_0~0); 1311#L206 assume !(0 != ~manual_selection_History_0~0); 1328#L209 assume !(0 != ~side1Failed_History_1~0 % 256); 1522#L212 assume !(0 != ~side2Failed_History_1~0 % 256); 1474#L215 assume !(-2 != ~active_side_History_1~0); 1475#L218 assume !(0 != ~manual_selection_History_1~0); 1509#L221 assume !(0 != ~side1Failed_History_2~0 % 256); 1524#L224 assume !(0 != ~side2Failed_History_2~0 % 256); 1431#L227 assume !(-2 != ~active_side_History_2~0); 1432#L230 assume !(0 != ~manual_selection_History_2~0);init_#res#1 := 1; 1381#L233 main_#t~ret60#1 := init_#res#1;assume { :end_inline_init } true;main_~i2~0#1 := main_#t~ret60#1;havoc main_#t~ret60#1;assume { :begin_inline_assume_abort_if_not } true;assume_abort_if_not_#in~cond#1 := main_~i2~0#1;havoc assume_abort_if_not_~cond#1;assume_abort_if_not_~cond#1 := assume_abort_if_not_#in~cond#1; 1382#L58 assume !(0 == assume_abort_if_not_~cond#1); 1478#L57 assume { :end_inline_assume_abort_if_not } true;~cs1_old~0 := ~nomsg~0;~cs1_new~0 := ~nomsg~0;~cs2_old~0 := ~nomsg~0;~cs2_new~0 := ~nomsg~0;~s1s2_old~0 := ~nomsg~0;~s1s2_new~0 := ~nomsg~0;~s1s1_old~0 := ~nomsg~0;~s1s1_new~0 := ~nomsg~0;~s2s1_old~0 := ~nomsg~0;~s2s1_new~0 := ~nomsg~0;~s2s2_old~0 := ~nomsg~0;~s2s2_new~0 := ~nomsg~0;~s1p_old~0 := ~nomsg~0;~s1p_new~0 := ~nomsg~0;~s2p_old~0 := ~nomsg~0;~s2p_new~0 := ~nomsg~0;main_~i2~0#1 := 0; 1384#L578-2 [2021-12-15 17:22:09,546 INFO L793 eck$LassoCheckResult]: Loop: 1384#L578-2 assume !false;assume { :begin_inline_Console_task_each_pals_period } true;havoc Console_task_each_pals_period_#t~nondet4#1, Console_task_each_pals_period_#t~ite5#1, Console_task_each_pals_period_#t~ite6#1, Console_task_each_pals_period_~manual_selection~0#1, Console_task_each_pals_period_~tmp~1#1;havoc Console_task_each_pals_period_~manual_selection~0#1;havoc Console_task_each_pals_period_~tmp~1#1;Console_task_each_pals_period_~tmp~1#1 := Console_task_each_pals_period_#t~nondet4#1;havoc Console_task_each_pals_period_#t~nondet4#1;Console_task_each_pals_period_~manual_selection~0#1 := Console_task_each_pals_period_~tmp~1#1;assume { :begin_inline_write_manual_selection_history } true;write_manual_selection_history_#in~val#1 := Console_task_each_pals_period_~manual_selection~0#1;havoc write_manual_selection_history_~val#1;write_manual_selection_history_~val#1 := write_manual_selection_history_#in~val#1;~manual_selection_History_2~0 := ~manual_selection_History_1~0;~manual_selection_History_1~0 := ~manual_selection_History_0~0;~manual_selection_History_0~0 := write_manual_selection_history_~val#1; 1450#L170 assume { :end_inline_write_manual_selection_history } true; 1499#L258 assume Console_task_each_pals_period_~manual_selection~0#1 != ~nomsg~0 && ~cs1_new~0 == ~nomsg~0;Console_task_each_pals_period_#t~ite5#1 := Console_task_each_pals_period_~manual_selection~0#1; 1500#L258-2 ~cs1_new~0 := (if Console_task_each_pals_period_#t~ite5#1 % 256 <= 127 then Console_task_each_pals_period_#t~ite5#1 % 256 else Console_task_each_pals_period_#t~ite5#1 % 256 - 256);havoc Console_task_each_pals_period_#t~ite5#1; 1519#L259 assume Console_task_each_pals_period_~manual_selection~0#1 != ~nomsg~0 && ~cs2_new~0 == ~nomsg~0;Console_task_each_pals_period_#t~ite6#1 := Console_task_each_pals_period_~manual_selection~0#1; 1520#L259-2 ~cs2_new~0 := (if Console_task_each_pals_period_#t~ite6#1 % 256 <= 127 then Console_task_each_pals_period_#t~ite6#1 % 256 else Console_task_each_pals_period_#t~ite6#1 % 256 - 256);havoc Console_task_each_pals_period_#t~ite6#1;Console_task_each_pals_period_~manual_selection~0#1 := 0; 1480#L261 assume { :end_inline_Console_task_each_pals_period } true;assume { :begin_inline_Side1_activestandby_task_each_pals_period } true;havoc Side1_activestandby_task_each_pals_period_#t~nondet7#1, Side1_activestandby_task_each_pals_period_#t~ite8#1, Side1_activestandby_task_each_pals_period_#t~ite9#1, Side1_activestandby_task_each_pals_period_#t~ite10#1, Side1_activestandby_task_each_pals_period_#t~ite11#1, Side1_activestandby_task_each_pals_period_#t~ite12#1, Side1_activestandby_task_each_pals_period_#t~ite13#1, Side1_activestandby_task_each_pals_period_~side1~0#1, Side1_activestandby_task_each_pals_period_~side2~0#1, Side1_activestandby_task_each_pals_period_~manual_selection~1#1, Side1_activestandby_task_each_pals_period_~next_state~0#1;havoc Side1_activestandby_task_each_pals_period_~side1~0#1;havoc Side1_activestandby_task_each_pals_period_~side2~0#1;havoc Side1_activestandby_task_each_pals_period_~manual_selection~1#1;havoc Side1_activestandby_task_each_pals_period_~next_state~0#1;Side1_activestandby_task_each_pals_period_~side1~0#1 := ~nomsg~0;Side1_activestandby_task_each_pals_period_~side2~0#1 := ~nomsg~0;Side1_activestandby_task_each_pals_period_~manual_selection~1#1 := 0;~side1Failed~0 := Side1_activestandby_task_each_pals_period_#t~nondet7#1;havoc Side1_activestandby_task_each_pals_period_#t~nondet7#1;assume { :begin_inline_write_side1_failed_history } true;write_side1_failed_history_#in~val#1 := ~side1Failed~0;havoc write_side1_failed_history_~val#1;write_side1_failed_history_~val#1 := write_side1_failed_history_#in~val#1;~side1Failed_History_2~0 := ~side1Failed_History_1~0;~side1Failed_History_1~0 := ~side1Failed_History_0~0;~side1Failed_History_0~0 := write_side1_failed_history_~val#1; 1481#L80 assume { :end_inline_write_side1_failed_history } true; 1468#L277 assume 0 != ~side1Failed~0 % 256; 1469#L278 assume !(~nomsg~0 != ~nomsg~0 && ~s1s1_new~0 == ~nomsg~0);Side1_activestandby_task_each_pals_period_#t~ite8#1 := ~s1s1_new~0; 1479#L278-2 ~s1s1_new~0 := (if Side1_activestandby_task_each_pals_period_#t~ite8#1 % 256 <= 127 then Side1_activestandby_task_each_pals_period_#t~ite8#1 % 256 else Side1_activestandby_task_each_pals_period_#t~ite8#1 % 256 - 256);havoc Side1_activestandby_task_each_pals_period_#t~ite8#1; 1360#L279 assume !(~nomsg~0 != ~nomsg~0 && ~s1s2_new~0 == ~nomsg~0);Side1_activestandby_task_each_pals_period_#t~ite9#1 := ~s1s2_new~0; 1322#L279-2 ~s1s2_new~0 := (if Side1_activestandby_task_each_pals_period_#t~ite9#1 % 256 <= 127 then Side1_activestandby_task_each_pals_period_#t~ite9#1 % 256 else Side1_activestandby_task_each_pals_period_#t~ite9#1 % 256 - 256);havoc Side1_activestandby_task_each_pals_period_#t~ite9#1; 1323#L280 assume !(~nomsg~0 != ~nomsg~0 && ~s1p_new~0 == ~nomsg~0);Side1_activestandby_task_each_pals_period_#t~ite10#1 := ~s1p_new~0; 1436#L280-2 ~s1p_new~0 := (if Side1_activestandby_task_each_pals_period_#t~ite10#1 % 256 <= 127 then Side1_activestandby_task_each_pals_period_#t~ite10#1 % 256 else Side1_activestandby_task_each_pals_period_#t~ite10#1 % 256 - 256);havoc Side1_activestandby_task_each_pals_period_#t~ite10#1;~side1_written~0 := ~nomsg~0; 1437#L314 assume { :end_inline_Side1_activestandby_task_each_pals_period } true;assume { :begin_inline_Side2_activestandby_task_each_pals_period } true;havoc Side2_activestandby_task_each_pals_period_#t~nondet14#1, Side2_activestandby_task_each_pals_period_#t~ite15#1, Side2_activestandby_task_each_pals_period_#t~ite16#1, Side2_activestandby_task_each_pals_period_#t~ite17#1, Side2_activestandby_task_each_pals_period_#t~ret18#1, Side2_activestandby_task_each_pals_period_#t~ite19#1, Side2_activestandby_task_each_pals_period_#t~ite20#1, Side2_activestandby_task_each_pals_period_#t~ite21#1, Side2_activestandby_task_each_pals_period_~side1~1#1, Side2_activestandby_task_each_pals_period_~side2~1#1, Side2_activestandby_task_each_pals_period_~manual_selection~2#1, Side2_activestandby_task_each_pals_period_~next_state~1#1;havoc Side2_activestandby_task_each_pals_period_~side1~1#1;havoc Side2_activestandby_task_each_pals_period_~side2~1#1;havoc Side2_activestandby_task_each_pals_period_~manual_selection~2#1;havoc Side2_activestandby_task_each_pals_period_~next_state~1#1;Side2_activestandby_task_each_pals_period_~side1~1#1 := ~nomsg~0;Side2_activestandby_task_each_pals_period_~side2~1#1 := ~nomsg~0;Side2_activestandby_task_each_pals_period_~manual_selection~2#1 := 0;~side2Failed~0 := Side2_activestandby_task_each_pals_period_#t~nondet14#1;havoc Side2_activestandby_task_each_pals_period_#t~nondet14#1;assume { :begin_inline_write_side2_failed_history } true;write_side2_failed_history_#in~val#1 := ~side2Failed~0;havoc write_side2_failed_history_~val#1;write_side2_failed_history_~val#1 := write_side2_failed_history_#in~val#1;~side2Failed_History_2~0 := ~side2Failed_History_1~0;~side2Failed_History_1~0 := ~side2Failed_History_0~0;~side2Failed_History_0~0 := write_side2_failed_history_~val#1; 1387#L110 assume { :end_inline_write_side2_failed_history } true; 1352#L330 assume 0 != ~side2Failed~0 % 256; 1353#L331 assume !(~nomsg~0 != ~nomsg~0 && ~s2s1_new~0 == ~nomsg~0);Side2_activestandby_task_each_pals_period_#t~ite15#1 := ~s2s1_new~0; 1454#L331-2 ~s2s1_new~0 := (if Side2_activestandby_task_each_pals_period_#t~ite15#1 % 256 <= 127 then Side2_activestandby_task_each_pals_period_#t~ite15#1 % 256 else Side2_activestandby_task_each_pals_period_#t~ite15#1 % 256 - 256);havoc Side2_activestandby_task_each_pals_period_#t~ite15#1; 1455#L332 assume !(~nomsg~0 != ~nomsg~0 && ~s2s2_new~0 == ~nomsg~0);Side2_activestandby_task_each_pals_period_#t~ite16#1 := ~s2s2_new~0; 1413#L332-2 ~s2s2_new~0 := (if Side2_activestandby_task_each_pals_period_#t~ite16#1 % 256 <= 127 then Side2_activestandby_task_each_pals_period_#t~ite16#1 % 256 else Side2_activestandby_task_each_pals_period_#t~ite16#1 % 256 - 256);havoc Side2_activestandby_task_each_pals_period_#t~ite16#1; 1414#L333 assume !(~nomsg~0 != ~nomsg~0 && ~s2p_new~0 == ~nomsg~0);Side2_activestandby_task_each_pals_period_#t~ite17#1 := ~s2p_new~0; 1515#L333-2 ~s2p_new~0 := (if Side2_activestandby_task_each_pals_period_#t~ite17#1 % 256 <= 127 then Side2_activestandby_task_each_pals_period_#t~ite17#1 % 256 else Side2_activestandby_task_each_pals_period_#t~ite17#1 % 256 - 256);havoc Side2_activestandby_task_each_pals_period_#t~ite17#1;~side2_written~0 := ~nomsg~0; 1542#L371 assume { :end_inline_Side2_activestandby_task_each_pals_period } true;assume { :begin_inline_Pendulum_prism_task_each_pals_period } true;havoc Pendulum_prism_task_each_pals_period_#t~ret22#1, Pendulum_prism_task_each_pals_period_~active_side~0#1, Pendulum_prism_task_each_pals_period_~tmp~2#1, Pendulum_prism_task_each_pals_period_~side1~2#1, Pendulum_prism_task_each_pals_period_~side2~2#1;havoc Pendulum_prism_task_each_pals_period_~active_side~0#1;havoc Pendulum_prism_task_each_pals_period_~tmp~2#1;havoc Pendulum_prism_task_each_pals_period_~side1~2#1;havoc Pendulum_prism_task_each_pals_period_~side2~2#1;assume { :begin_inline_read_active_side_history } true;read_active_side_history_#in~index#1 := 0;havoc read_active_side_history_#res#1;havoc read_active_side_history_~index#1;read_active_side_history_~index#1 := read_active_side_history_#in~index#1; 1539#L148 assume 0 == read_active_side_history_~index#1 % 256;read_active_side_history_#res#1 := ~active_side_History_0~0; 1489#L158 Pendulum_prism_task_each_pals_period_#t~ret22#1 := read_active_side_history_#res#1;assume { :end_inline_read_active_side_history } true;Pendulum_prism_task_each_pals_period_~tmp~2#1 := Pendulum_prism_task_each_pals_period_#t~ret22#1;havoc Pendulum_prism_task_each_pals_period_#t~ret22#1;Pendulum_prism_task_each_pals_period_~active_side~0#1 := Pendulum_prism_task_each_pals_period_~tmp~2#1;Pendulum_prism_task_each_pals_period_~side1~2#1 := ~nomsg~0;Pendulum_prism_task_each_pals_period_~side2~2#1 := ~nomsg~0;Pendulum_prism_task_each_pals_period_~side1~2#1 := ~s1p_old~0;~s1p_old~0 := ~nomsg~0;Pendulum_prism_task_each_pals_period_~side2~2#1 := ~s2p_old~0;~s2p_old~0 := ~nomsg~0; 1490#L390 assume 1 == Pendulum_prism_task_each_pals_period_~side1~2#1;Pendulum_prism_task_each_pals_period_~active_side~0#1 := 1; 1443#L404 assume { :begin_inline_write_active_side_history } true;write_active_side_history_#in~val#1 := Pendulum_prism_task_each_pals_period_~active_side~0#1;havoc write_active_side_history_~val#1;write_active_side_history_~val#1 := write_active_side_history_#in~val#1;~active_side_History_2~0 := ~active_side_History_1~0;~active_side_History_1~0 := ~active_side_History_0~0;~active_side_History_0~0 := write_active_side_history_~val#1; 1444#L140 assume { :end_inline_write_active_side_history } true; 1536#L414 assume { :end_inline_Pendulum_prism_task_each_pals_period } true;~cs1_old~0 := ~cs1_new~0;~cs1_new~0 := ~nomsg~0;~cs2_old~0 := ~cs2_new~0;~cs2_new~0 := ~nomsg~0;~s1s2_old~0 := ~s1s2_new~0;~s1s2_new~0 := ~nomsg~0;~s1s1_old~0 := ~s1s1_new~0;~s1s1_new~0 := ~nomsg~0;~s2s1_old~0 := ~s2s1_new~0;~s2s1_new~0 := ~nomsg~0;~s2s2_old~0 := ~s2s2_new~0;~s2s2_new~0 := ~nomsg~0;~s1p_old~0 := ~s1p_new~0;~s1p_new~0 := ~nomsg~0;~s2p_old~0 := ~s2p_new~0;~s2p_new~0 := ~nomsg~0;assume { :begin_inline_check } true;havoc check_#res#1;havoc check_#t~ret23#1, check_#t~ret24#1, check_#t~ret25#1, check_#t~ret26#1, check_#t~ret27#1, check_#t~ret28#1, check_#t~ret29#1, check_#t~ret30#1, check_#t~ret31#1, check_#t~ret32#1, check_#t~ret33#1, check_#t~ret34#1, check_#t~ret35#1, check_#t~ret36#1, check_#t~ret37#1, check_#t~ret38#1, check_#t~ret39#1, check_#t~ret40#1, check_#t~ret41#1, check_#t~ret42#1, check_#t~ret43#1, check_~tmp~3#1, check_~tmp___0~0#1, check_~tmp___1~0#1, check_~tmp___2~0#1, check_~tmp___3~0#1, check_~tmp___4~0#1, check_~tmp___5~0#1, check_~tmp___6~0#1, check_~tmp___7~0#1, check_~tmp___8~0#1, check_~tmp___9~0#1, check_~tmp___10~0#1, check_~tmp___11~0#1, check_~tmp___12~0#1, check_~tmp___13~0#1, check_~tmp___14~0#1, check_~tmp___15~0#1, check_~tmp___16~0#1, check_~tmp___17~0#1, check_~tmp___18~0#1, check_~tmp___19~0#1, check_~tmp___20~0#1;havoc check_~tmp~3#1;havoc check_~tmp___0~0#1;havoc check_~tmp___1~0#1;havoc check_~tmp___2~0#1;havoc check_~tmp___3~0#1;havoc check_~tmp___4~0#1;havoc check_~tmp___5~0#1;havoc check_~tmp___6~0#1;havoc check_~tmp___7~0#1;havoc check_~tmp___8~0#1;havoc check_~tmp___9~0#1;havoc check_~tmp___10~0#1;havoc check_~tmp___11~0#1;havoc check_~tmp___12~0#1;havoc check_~tmp___13~0#1;havoc check_~tmp___14~0#1;havoc check_~tmp___15~0#1;havoc check_~tmp___16~0#1;havoc check_~tmp___17~0#1;havoc check_~tmp___18~0#1;havoc check_~tmp___19~0#1;havoc check_~tmp___20~0#1; 1371#L443 assume !(0 == ~side1Failed~0 % 256); 1372#L446 assume 0 == ~side2Failed~0 % 256;check_~tmp~3#1 := 1; 1373#L446-2 assume { :begin_inline_assume_abort_if_not } true;assume_abort_if_not_#in~cond#1 := (if 0 == check_~tmp~3#1 then 0 else 1) % 256;havoc assume_abort_if_not_~cond#1;assume_abort_if_not_~cond#1 := assume_abort_if_not_#in~cond#1; 1374#L58-2 assume !(0 == assume_abort_if_not_~cond#1); 1296#L57-1 assume { :end_inline_assume_abort_if_not } true;assume { :begin_inline_read_manual_selection_history } true;read_manual_selection_history_#in~index#1 := 1;havoc read_manual_selection_history_#res#1;havoc read_manual_selection_history_~index#1;read_manual_selection_history_~index#1 := read_manual_selection_history_#in~index#1; 1297#L178 assume 0 == read_manual_selection_history_~index#1 % 256;read_manual_selection_history_#res#1 := ~manual_selection_History_0~0; 1300#L188 check_#t~ret23#1 := read_manual_selection_history_#res#1;assume { :end_inline_read_manual_selection_history } true;check_~tmp___0~0#1 := check_#t~ret23#1;havoc check_#t~ret23#1; 1301#L453 assume !(0 == check_~tmp___0~0#1); 1270#L453-1 assume { :begin_inline_read_side1_failed_history } true;read_side1_failed_history_#in~index#1 := 1;havoc read_side1_failed_history_#res#1;havoc read_side1_failed_history_~index#1;read_side1_failed_history_~index#1 := read_side1_failed_history_#in~index#1; 1291#L88-2 assume 0 == read_side1_failed_history_~index#1 % 256;read_side1_failed_history_#res#1 := ~side1Failed_History_0~0; 1292#L98-2 check_#t~ret28#1 := read_side1_failed_history_#res#1;assume { :end_inline_read_side1_failed_history } true;check_~tmp___7~0#1 := check_#t~ret28#1;havoc check_#t~ret28#1; 1525#L483 assume 0 != check_~tmp___7~0#1 % 256;assume { :begin_inline_read_side2_failed_history } true;read_side2_failed_history_#in~index#1 := 1;havoc read_side2_failed_history_#res#1;havoc read_side2_failed_history_~index#1;read_side2_failed_history_~index#1 := read_side2_failed_history_#in~index#1; 1364#L118-2 assume 0 == read_side2_failed_history_~index#1 % 256;read_side2_failed_history_#res#1 := ~side2Failed_History_0~0; 1305#L128-2 check_#t~ret29#1 := read_side2_failed_history_#res#1;assume { :end_inline_read_side2_failed_history } true;check_~tmp___8~0#1 := check_#t~ret29#1;havoc check_#t~ret29#1; 1426#L485 assume 0 == check_~tmp___8~0#1 % 256;assume { :begin_inline_read_active_side_history } true;read_active_side_history_#in~index#1 := 0;havoc read_active_side_history_#res#1;havoc read_active_side_history_~index#1;read_active_side_history_~index#1 := read_active_side_history_#in~index#1; 1427#L148-1 assume 0 == read_active_side_history_~index#1 % 256;read_active_side_history_#res#1 := ~active_side_History_0~0; 1284#L158-1 check_#t~ret30#1 := read_active_side_history_#res#1;assume { :end_inline_read_active_side_history } true;check_~tmp___5~0#1 := check_#t~ret30#1;havoc check_#t~ret30#1; 1488#L487 assume !(2 == check_~tmp___5~0#1);check_#res#1 := 0; 1303#L533 main_#t~ret61#1 := check_#res#1;assume { :end_inline_check } true;main_~c1~0#1 := main_#t~ret61#1;havoc main_#t~ret61#1;assume { :begin_inline_assert } true;assert_#in~arg#1 := (if 0 == main_~c1~0#1 then 0 else 1);havoc assert_~arg#1;assert_~arg#1 := assert_#in~arg#1; 1460#L612-44 assume !(0 == assert_~arg#1 % 256); 1383#L607-22 assume { :end_inline_assert } true; 1384#L578-2 [2021-12-15 17:22:09,546 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-15 17:22:09,547 INFO L85 PathProgramCache]: Analyzing trace with hash -613005151, now seen corresponding path program 2 times [2021-12-15 17:22:09,547 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-15 17:22:09,547 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [265422364] [2021-12-15 17:22:09,547 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-15 17:22:09,547 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-15 17:22:09,562 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-15 17:22:09,570 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-12-15 17:22:09,587 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-15 17:22:09,594 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-12-15 17:22:09,594 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-15 17:22:09,594 INFO L85 PathProgramCache]: Analyzing trace with hash -277062368, now seen corresponding path program 1 times [2021-12-15 17:22:09,595 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-15 17:22:09,605 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1906680936] [2021-12-15 17:22:09,605 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-15 17:22:09,605 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-15 17:22:09,651 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-15 17:22:09,678 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-15 17:22:09,678 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-15 17:22:09,678 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1906680936] [2021-12-15 17:22:09,678 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1906680936] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-15 17:22:09,679 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-15 17:22:09,679 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-15 17:22:09,679 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1145444309] [2021-12-15 17:22:09,679 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-15 17:22:09,679 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-12-15 17:22:09,680 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-15 17:22:09,680 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-15 17:22:09,680 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-15 17:22:09,680 INFO L87 Difference]: Start difference. First operand 288 states and 430 transitions. cyclomatic complexity: 143 Second operand has 3 states, 3 states have (on average 17.333333333333332) internal successors, (52), 3 states have internal predecessors, (52), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-15 17:22:09,700 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-15 17:22:09,701 INFO L93 Difference]: Finished difference Result 513 states and 774 transitions. [2021-12-15 17:22:09,701 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-15 17:22:09,702 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 513 states and 774 transitions. [2021-12-15 17:22:09,707 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 496 [2021-12-15 17:22:09,713 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 513 states to 513 states and 774 transitions. [2021-12-15 17:22:09,713 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 513 [2021-12-15 17:22:09,714 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 513 [2021-12-15 17:22:09,714 INFO L73 IsDeterministic]: Start isDeterministic. Operand 513 states and 774 transitions. [2021-12-15 17:22:09,716 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-12-15 17:22:09,716 INFO L681 BuchiCegarLoop]: Abstraction has 513 states and 774 transitions. [2021-12-15 17:22:09,717 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 513 states and 774 transitions. [2021-12-15 17:22:09,726 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 513 to 323. [2021-12-15 17:22:09,726 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 323 states, 323 states have (on average 1.498452012383901) internal successors, (484), 322 states have internal predecessors, (484), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-15 17:22:09,727 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 323 states to 323 states and 484 transitions. [2021-12-15 17:22:09,727 INFO L704 BuchiCegarLoop]: Abstraction has 323 states and 484 transitions. [2021-12-15 17:22:09,727 INFO L587 BuchiCegarLoop]: Abstraction has 323 states and 484 transitions. [2021-12-15 17:22:09,728 INFO L425 BuchiCegarLoop]: ======== Iteration 4============ [2021-12-15 17:22:09,728 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 323 states and 484 transitions. [2021-12-15 17:22:09,729 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 306 [2021-12-15 17:22:09,729 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-15 17:22:09,729 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-15 17:22:09,730 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-15 17:22:09,730 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-15 17:22:09,731 INFO L791 eck$LassoCheckResult]: Stem: 2338#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(52, 2);call #Ultimate.allocInit(12, 3);~nomsg~0 := -1;~cs1~0 := 0;~cs1_old~0 := 0;~cs1_new~0 := 0;~cs2~0 := 0;~cs2_old~0 := 0;~cs2_new~0 := 0;~s1s2~0 := 0;~s1s2_old~0 := 0;~s1s2_new~0 := 0;~s1s1~0 := 0;~s1s1_old~0 := 0;~s1s1_new~0 := 0;~s2s1~0 := 0;~s2s1_old~0 := 0;~s2s1_new~0 := 0;~s2s2~0 := 0;~s2s2_old~0 := 0;~s2s2_new~0 := 0;~s1p~0 := 0;~s1p_old~0 := 0;~s1p_new~0 := 0;~s2p~0 := 0;~s2p_old~0 := 0;~s2p_new~0 := 0;~side1Failed~0 := 0;~side2Failed~0 := 0;~side1_written~0 := 0;~side2_written~0 := 0;~side1Failed_History_0~0 := 0;~side1Failed_History_1~0 := 0;~side1Failed_History_2~0 := 0;~side2Failed_History_0~0 := 0;~side2Failed_History_1~0 := 0;~side2Failed_History_2~0 := 0;~active_side_History_0~0 := 0;~active_side_History_1~0 := 0;~active_side_History_2~0 := 0;~manual_selection_History_0~0 := 0;~manual_selection_History_1~0 := 0;~manual_selection_History_2~0 := 0; 2308#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~nondet44#1, main_#t~nondet45#1, main_#t~nondet46#1, main_#t~nondet47#1, main_#t~nondet48#1, main_#t~nondet49#1, main_#t~nondet50#1, main_#t~nondet51#1, main_#t~nondet52#1, main_#t~nondet53#1, main_#t~nondet54#1, main_#t~nondet55#1, main_#t~nondet56#1, main_#t~nondet57#1, main_#t~nondet58#1, main_#t~nondet59#1, main_#t~ret60#1, main_#t~ret61#1, main_~c1~0#1, main_~i2~0#1;havoc main_~c1~0#1;havoc main_~i2~0#1;main_~c1~0#1 := 0;~side1Failed~0 := main_#t~nondet44#1;havoc main_#t~nondet44#1;~side2Failed~0 := main_#t~nondet45#1;havoc main_#t~nondet45#1;~side1_written~0 := main_#t~nondet46#1;havoc main_#t~nondet46#1;~side2_written~0 := main_#t~nondet47#1;havoc main_#t~nondet47#1;~side1Failed_History_0~0 := main_#t~nondet48#1;havoc main_#t~nondet48#1;~side1Failed_History_1~0 := main_#t~nondet49#1;havoc main_#t~nondet49#1;~side1Failed_History_2~0 := main_#t~nondet50#1;havoc main_#t~nondet50#1;~side2Failed_History_0~0 := main_#t~nondet51#1;havoc main_#t~nondet51#1;~side2Failed_History_1~0 := main_#t~nondet52#1;havoc main_#t~nondet52#1;~side2Failed_History_2~0 := main_#t~nondet53#1;havoc main_#t~nondet53#1;~active_side_History_0~0 := main_#t~nondet54#1;havoc main_#t~nondet54#1;~active_side_History_1~0 := main_#t~nondet55#1;havoc main_#t~nondet55#1;~active_side_History_2~0 := main_#t~nondet56#1;havoc main_#t~nondet56#1;~manual_selection_History_0~0 := main_#t~nondet57#1;havoc main_#t~nondet57#1;~manual_selection_History_1~0 := main_#t~nondet58#1;havoc main_#t~nondet58#1;~manual_selection_History_2~0 := main_#t~nondet59#1;havoc main_#t~nondet59#1;assume { :begin_inline_init } true;havoc init_#res#1; 2196#L197 assume !(0 != ~side1Failed_History_0~0 % 256); 2197#L200 assume !(0 != ~side2Failed_History_0~0 % 256); 2117#L203 assume !(-2 != ~active_side_History_0~0); 2118#L206 assume !(0 != ~manual_selection_History_0~0); 2134#L209 assume !(0 != ~side1Failed_History_1~0 % 256); 2322#L212 assume !(0 != ~side2Failed_History_1~0 % 256); 2276#L215 assume !(-2 != ~active_side_History_1~0); 2277#L218 assume !(0 != ~manual_selection_History_1~0); 2309#L221 assume !(0 != ~side1Failed_History_2~0 % 256); 2324#L224 assume !(0 != ~side2Failed_History_2~0 % 256); 2237#L227 assume !(-2 != ~active_side_History_2~0); 2238#L230 assume !(0 != ~manual_selection_History_2~0);init_#res#1 := 1; 2186#L233 main_#t~ret60#1 := init_#res#1;assume { :end_inline_init } true;main_~i2~0#1 := main_#t~ret60#1;havoc main_#t~ret60#1;assume { :begin_inline_assume_abort_if_not } true;assume_abort_if_not_#in~cond#1 := main_~i2~0#1;havoc assume_abort_if_not_~cond#1;assume_abort_if_not_~cond#1 := assume_abort_if_not_#in~cond#1; 2187#L58 assume !(0 == assume_abort_if_not_~cond#1); 2278#L57 assume { :end_inline_assume_abort_if_not } true;~cs1_old~0 := ~nomsg~0;~cs1_new~0 := ~nomsg~0;~cs2_old~0 := ~nomsg~0;~cs2_new~0 := ~nomsg~0;~s1s2_old~0 := ~nomsg~0;~s1s2_new~0 := ~nomsg~0;~s1s1_old~0 := ~nomsg~0;~s1s1_new~0 := ~nomsg~0;~s2s1_old~0 := ~nomsg~0;~s2s1_new~0 := ~nomsg~0;~s2s2_old~0 := ~nomsg~0;~s2s2_new~0 := ~nomsg~0;~s1p_old~0 := ~nomsg~0;~s1p_new~0 := ~nomsg~0;~s2p_old~0 := ~nomsg~0;~s2p_new~0 := ~nomsg~0;main_~i2~0#1 := 0; 2193#L578-2 [2021-12-15 17:22:09,731 INFO L793 eck$LassoCheckResult]: Loop: 2193#L578-2 assume !false;assume { :begin_inline_Console_task_each_pals_period } true;havoc Console_task_each_pals_period_#t~nondet4#1, Console_task_each_pals_period_#t~ite5#1, Console_task_each_pals_period_#t~ite6#1, Console_task_each_pals_period_~manual_selection~0#1, Console_task_each_pals_period_~tmp~1#1;havoc Console_task_each_pals_period_~manual_selection~0#1;havoc Console_task_each_pals_period_~tmp~1#1;Console_task_each_pals_period_~tmp~1#1 := Console_task_each_pals_period_#t~nondet4#1;havoc Console_task_each_pals_period_#t~nondet4#1;Console_task_each_pals_period_~manual_selection~0#1 := Console_task_each_pals_period_~tmp~1#1;assume { :begin_inline_write_manual_selection_history } true;write_manual_selection_history_#in~val#1 := Console_task_each_pals_period_~manual_selection~0#1;havoc write_manual_selection_history_~val#1;write_manual_selection_history_~val#1 := write_manual_selection_history_#in~val#1;~manual_selection_History_2~0 := ~manual_selection_History_1~0;~manual_selection_History_1~0 := ~manual_selection_History_0~0;~manual_selection_History_0~0 := write_manual_selection_history_~val#1; 2254#L170 assume { :end_inline_write_manual_selection_history } true; 2299#L258 assume Console_task_each_pals_period_~manual_selection~0#1 != ~nomsg~0 && ~cs1_new~0 == ~nomsg~0;Console_task_each_pals_period_#t~ite5#1 := Console_task_each_pals_period_~manual_selection~0#1; 2300#L258-2 ~cs1_new~0 := (if Console_task_each_pals_period_#t~ite5#1 % 256 <= 127 then Console_task_each_pals_period_#t~ite5#1 % 256 else Console_task_each_pals_period_#t~ite5#1 % 256 - 256);havoc Console_task_each_pals_period_#t~ite5#1; 2319#L259 assume Console_task_each_pals_period_~manual_selection~0#1 != ~nomsg~0 && ~cs2_new~0 == ~nomsg~0;Console_task_each_pals_period_#t~ite6#1 := Console_task_each_pals_period_~manual_selection~0#1; 2320#L259-2 ~cs2_new~0 := (if Console_task_each_pals_period_#t~ite6#1 % 256 <= 127 then Console_task_each_pals_period_#t~ite6#1 % 256 else Console_task_each_pals_period_#t~ite6#1 % 256 - 256);havoc Console_task_each_pals_period_#t~ite6#1;Console_task_each_pals_period_~manual_selection~0#1 := 0; 2282#L261 assume { :end_inline_Console_task_each_pals_period } true;assume { :begin_inline_Side1_activestandby_task_each_pals_period } true;havoc Side1_activestandby_task_each_pals_period_#t~nondet7#1, Side1_activestandby_task_each_pals_period_#t~ite8#1, Side1_activestandby_task_each_pals_period_#t~ite9#1, Side1_activestandby_task_each_pals_period_#t~ite10#1, Side1_activestandby_task_each_pals_period_#t~ite11#1, Side1_activestandby_task_each_pals_period_#t~ite12#1, Side1_activestandby_task_each_pals_period_#t~ite13#1, Side1_activestandby_task_each_pals_period_~side1~0#1, Side1_activestandby_task_each_pals_period_~side2~0#1, Side1_activestandby_task_each_pals_period_~manual_selection~1#1, Side1_activestandby_task_each_pals_period_~next_state~0#1;havoc Side1_activestandby_task_each_pals_period_~side1~0#1;havoc Side1_activestandby_task_each_pals_period_~side2~0#1;havoc Side1_activestandby_task_each_pals_period_~manual_selection~1#1;havoc Side1_activestandby_task_each_pals_period_~next_state~0#1;Side1_activestandby_task_each_pals_period_~side1~0#1 := ~nomsg~0;Side1_activestandby_task_each_pals_period_~side2~0#1 := ~nomsg~0;Side1_activestandby_task_each_pals_period_~manual_selection~1#1 := 0;~side1Failed~0 := Side1_activestandby_task_each_pals_period_#t~nondet7#1;havoc Side1_activestandby_task_each_pals_period_#t~nondet7#1;assume { :begin_inline_write_side1_failed_history } true;write_side1_failed_history_#in~val#1 := ~side1Failed~0;havoc write_side1_failed_history_~val#1;write_side1_failed_history_~val#1 := write_side1_failed_history_#in~val#1;~side1Failed_History_2~0 := ~side1Failed_History_1~0;~side1Failed_History_1~0 := ~side1Failed_History_0~0;~side1Failed_History_0~0 := write_side1_failed_history_~val#1; 2283#L80 assume { :end_inline_write_side1_failed_history } true; 2270#L277 assume !(0 != ~side1Failed~0 % 256);Side1_activestandby_task_each_pals_period_~side1~0#1 := ~s1s1_old~0;~s1s1_old~0 := ~nomsg~0;Side1_activestandby_task_each_pals_period_~side2~0#1 := ~s2s1_old~0;~s2s1_old~0 := ~nomsg~0;Side1_activestandby_task_each_pals_period_~manual_selection~1#1 := ~cs1_old~0;~cs1_old~0 := ~nomsg~0; 2272#L290 assume Side1_activestandby_task_each_pals_period_~side1~0#1 == Side1_activestandby_task_each_pals_period_~side2~0#1;Side1_activestandby_task_each_pals_period_~next_state~0#1 := 1; 2225#L301 assume !(Side1_activestandby_task_each_pals_period_~next_state~0#1 != ~nomsg~0 && ~s1s1_new~0 == ~nomsg~0);Side1_activestandby_task_each_pals_period_#t~ite11#1 := ~s1s1_new~0; 2226#L310-1 ~s1s1_new~0 := (if Side1_activestandby_task_each_pals_period_#t~ite11#1 % 256 <= 127 then Side1_activestandby_task_each_pals_period_#t~ite11#1 % 256 else Side1_activestandby_task_each_pals_period_#t~ite11#1 % 256 - 256);havoc Side1_activestandby_task_each_pals_period_#t~ite11#1; 2154#L311 assume Side1_activestandby_task_each_pals_period_~next_state~0#1 != ~nomsg~0 && ~s1s2_new~0 == ~nomsg~0;Side1_activestandby_task_each_pals_period_#t~ite12#1 := Side1_activestandby_task_each_pals_period_~next_state~0#1; 2155#L311-2 ~s1s2_new~0 := (if Side1_activestandby_task_each_pals_period_#t~ite12#1 % 256 <= 127 then Side1_activestandby_task_each_pals_period_#t~ite12#1 % 256 else Side1_activestandby_task_each_pals_period_#t~ite12#1 % 256 - 256);havoc Side1_activestandby_task_each_pals_period_#t~ite12#1; 2239#L312 assume Side1_activestandby_task_each_pals_period_~next_state~0#1 != ~nomsg~0 && ~s1p_new~0 == ~nomsg~0;Side1_activestandby_task_each_pals_period_#t~ite13#1 := Side1_activestandby_task_each_pals_period_~next_state~0#1; 2209#L312-2 ~s1p_new~0 := (if Side1_activestandby_task_each_pals_period_#t~ite13#1 % 256 <= 127 then Side1_activestandby_task_each_pals_period_#t~ite13#1 % 256 else Side1_activestandby_task_each_pals_period_#t~ite13#1 % 256 - 256);havoc Side1_activestandby_task_each_pals_period_#t~ite13#1;~side1_written~0 := Side1_activestandby_task_each_pals_period_~next_state~0#1; 2210#L314 assume { :end_inline_Side1_activestandby_task_each_pals_period } true;assume { :begin_inline_Side2_activestandby_task_each_pals_period } true;havoc Side2_activestandby_task_each_pals_period_#t~nondet14#1, Side2_activestandby_task_each_pals_period_#t~ite15#1, Side2_activestandby_task_each_pals_period_#t~ite16#1, Side2_activestandby_task_each_pals_period_#t~ite17#1, Side2_activestandby_task_each_pals_period_#t~ret18#1, Side2_activestandby_task_each_pals_period_#t~ite19#1, Side2_activestandby_task_each_pals_period_#t~ite20#1, Side2_activestandby_task_each_pals_period_#t~ite21#1, Side2_activestandby_task_each_pals_period_~side1~1#1, Side2_activestandby_task_each_pals_period_~side2~1#1, Side2_activestandby_task_each_pals_period_~manual_selection~2#1, Side2_activestandby_task_each_pals_period_~next_state~1#1;havoc Side2_activestandby_task_each_pals_period_~side1~1#1;havoc Side2_activestandby_task_each_pals_period_~side2~1#1;havoc Side2_activestandby_task_each_pals_period_~manual_selection~2#1;havoc Side2_activestandby_task_each_pals_period_~next_state~1#1;Side2_activestandby_task_each_pals_period_~side1~1#1 := ~nomsg~0;Side2_activestandby_task_each_pals_period_~side2~1#1 := ~nomsg~0;Side2_activestandby_task_each_pals_period_~manual_selection~2#1 := 0;~side2Failed~0 := Side2_activestandby_task_each_pals_period_#t~nondet14#1;havoc Side2_activestandby_task_each_pals_period_#t~nondet14#1;assume { :begin_inline_write_side2_failed_history } true;write_side2_failed_history_#in~val#1 := ~side2Failed~0;havoc write_side2_failed_history_~val#1;write_side2_failed_history_~val#1 := write_side2_failed_history_#in~val#1;~side2Failed_History_2~0 := ~side2Failed_History_1~0;~side2Failed_History_1~0 := ~side2Failed_History_0~0;~side2Failed_History_0~0 := write_side2_failed_history_~val#1; 2334#L110 assume { :end_inline_write_side2_failed_history } true; 2379#L330 assume 0 != ~side2Failed~0 % 256; 2378#L331 assume !(~nomsg~0 != ~nomsg~0 && ~s2s1_new~0 == ~nomsg~0);Side2_activestandby_task_each_pals_period_#t~ite15#1 := ~s2s1_new~0; 2377#L331-2 ~s2s1_new~0 := (if Side2_activestandby_task_each_pals_period_#t~ite15#1 % 256 <= 127 then Side2_activestandby_task_each_pals_period_#t~ite15#1 % 256 else Side2_activestandby_task_each_pals_period_#t~ite15#1 % 256 - 256);havoc Side2_activestandby_task_each_pals_period_#t~ite15#1; 2376#L332 assume !(~nomsg~0 != ~nomsg~0 && ~s2s2_new~0 == ~nomsg~0);Side2_activestandby_task_each_pals_period_#t~ite16#1 := ~s2s2_new~0; 2375#L332-2 ~s2s2_new~0 := (if Side2_activestandby_task_each_pals_period_#t~ite16#1 % 256 <= 127 then Side2_activestandby_task_each_pals_period_#t~ite16#1 % 256 else Side2_activestandby_task_each_pals_period_#t~ite16#1 % 256 - 256);havoc Side2_activestandby_task_each_pals_period_#t~ite16#1; 2374#L333 assume !(~nomsg~0 != ~nomsg~0 && ~s2p_new~0 == ~nomsg~0);Side2_activestandby_task_each_pals_period_#t~ite17#1 := ~s2p_new~0; 2373#L333-2 ~s2p_new~0 := (if Side2_activestandby_task_each_pals_period_#t~ite17#1 % 256 <= 127 then Side2_activestandby_task_each_pals_period_#t~ite17#1 % 256 else Side2_activestandby_task_each_pals_period_#t~ite17#1 % 256 - 256);havoc Side2_activestandby_task_each_pals_period_#t~ite17#1;~side2_written~0 := ~nomsg~0; 2367#L371 assume { :end_inline_Side2_activestandby_task_each_pals_period } true;assume { :begin_inline_Pendulum_prism_task_each_pals_period } true;havoc Pendulum_prism_task_each_pals_period_#t~ret22#1, Pendulum_prism_task_each_pals_period_~active_side~0#1, Pendulum_prism_task_each_pals_period_~tmp~2#1, Pendulum_prism_task_each_pals_period_~side1~2#1, Pendulum_prism_task_each_pals_period_~side2~2#1;havoc Pendulum_prism_task_each_pals_period_~active_side~0#1;havoc Pendulum_prism_task_each_pals_period_~tmp~2#1;havoc Pendulum_prism_task_each_pals_period_~side1~2#1;havoc Pendulum_prism_task_each_pals_period_~side2~2#1;assume { :begin_inline_read_active_side_history } true;read_active_side_history_#in~index#1 := 0;havoc read_active_side_history_#res#1;havoc read_active_side_history_~index#1;read_active_side_history_~index#1 := read_active_side_history_#in~index#1; 2361#L148 assume 0 == read_active_side_history_~index#1 % 256;read_active_side_history_#res#1 := ~active_side_History_0~0; 2360#L158 Pendulum_prism_task_each_pals_period_#t~ret22#1 := read_active_side_history_#res#1;assume { :end_inline_read_active_side_history } true;Pendulum_prism_task_each_pals_period_~tmp~2#1 := Pendulum_prism_task_each_pals_period_#t~ret22#1;havoc Pendulum_prism_task_each_pals_period_#t~ret22#1;Pendulum_prism_task_each_pals_period_~active_side~0#1 := Pendulum_prism_task_each_pals_period_~tmp~2#1;Pendulum_prism_task_each_pals_period_~side1~2#1 := ~nomsg~0;Pendulum_prism_task_each_pals_period_~side2~2#1 := ~nomsg~0;Pendulum_prism_task_each_pals_period_~side1~2#1 := ~s1p_old~0;~s1p_old~0 := ~nomsg~0;Pendulum_prism_task_each_pals_period_~side2~2#1 := ~s2p_old~0;~s2p_old~0 := ~nomsg~0; 2353#L390 assume 1 == Pendulum_prism_task_each_pals_period_~side1~2#1;Pendulum_prism_task_each_pals_period_~active_side~0#1 := 1; 2346#L404 assume { :begin_inline_write_active_side_history } true;write_active_side_history_#in~val#1 := Pendulum_prism_task_each_pals_period_~active_side~0#1;havoc write_active_side_history_~val#1;write_active_side_history_~val#1 := write_active_side_history_#in~val#1;~active_side_History_2~0 := ~active_side_History_1~0;~active_side_History_1~0 := ~active_side_History_0~0;~active_side_History_0~0 := write_active_side_history_~val#1; 2344#L140 assume { :end_inline_write_active_side_history } true; 2342#L414 assume { :end_inline_Pendulum_prism_task_each_pals_period } true;~cs1_old~0 := ~cs1_new~0;~cs1_new~0 := ~nomsg~0;~cs2_old~0 := ~cs2_new~0;~cs2_new~0 := ~nomsg~0;~s1s2_old~0 := ~s1s2_new~0;~s1s2_new~0 := ~nomsg~0;~s1s1_old~0 := ~s1s1_new~0;~s1s1_new~0 := ~nomsg~0;~s2s1_old~0 := ~s2s1_new~0;~s2s1_new~0 := ~nomsg~0;~s2s2_old~0 := ~s2s2_new~0;~s2s2_new~0 := ~nomsg~0;~s1p_old~0 := ~s1p_new~0;~s1p_new~0 := ~nomsg~0;~s2p_old~0 := ~s2p_new~0;~s2p_new~0 := ~nomsg~0;assume { :begin_inline_check } true;havoc check_#res#1;havoc check_#t~ret23#1, check_#t~ret24#1, check_#t~ret25#1, check_#t~ret26#1, check_#t~ret27#1, check_#t~ret28#1, check_#t~ret29#1, check_#t~ret30#1, check_#t~ret31#1, check_#t~ret32#1, check_#t~ret33#1, check_#t~ret34#1, check_#t~ret35#1, check_#t~ret36#1, check_#t~ret37#1, check_#t~ret38#1, check_#t~ret39#1, check_#t~ret40#1, check_#t~ret41#1, check_#t~ret42#1, check_#t~ret43#1, check_~tmp~3#1, check_~tmp___0~0#1, check_~tmp___1~0#1, check_~tmp___2~0#1, check_~tmp___3~0#1, check_~tmp___4~0#1, check_~tmp___5~0#1, check_~tmp___6~0#1, check_~tmp___7~0#1, check_~tmp___8~0#1, check_~tmp___9~0#1, check_~tmp___10~0#1, check_~tmp___11~0#1, check_~tmp___12~0#1, check_~tmp___13~0#1, check_~tmp___14~0#1, check_~tmp___15~0#1, check_~tmp___16~0#1, check_~tmp___17~0#1, check_~tmp___18~0#1, check_~tmp___19~0#1, check_~tmp___20~0#1;havoc check_~tmp~3#1;havoc check_~tmp___0~0#1;havoc check_~tmp___1~0#1;havoc check_~tmp___2~0#1;havoc check_~tmp___3~0#1;havoc check_~tmp___4~0#1;havoc check_~tmp___5~0#1;havoc check_~tmp___6~0#1;havoc check_~tmp___7~0#1;havoc check_~tmp___8~0#1;havoc check_~tmp___9~0#1;havoc check_~tmp___10~0#1;havoc check_~tmp___11~0#1;havoc check_~tmp___12~0#1;havoc check_~tmp___13~0#1;havoc check_~tmp___14~0#1;havoc check_~tmp___15~0#1;havoc check_~tmp___16~0#1;havoc check_~tmp___17~0#1;havoc check_~tmp___18~0#1;havoc check_~tmp___19~0#1;havoc check_~tmp___20~0#1; 2340#L443 assume 0 == ~side1Failed~0 % 256;check_~tmp~3#1 := 1; 2180#L446-2 assume { :begin_inline_assume_abort_if_not } true;assume_abort_if_not_#in~cond#1 := (if 0 == check_~tmp~3#1 then 0 else 1) % 256;havoc assume_abort_if_not_~cond#1;assume_abort_if_not_~cond#1 := assume_abort_if_not_#in~cond#1; 2181#L58-2 assume !(0 == assume_abort_if_not_~cond#1); 2103#L57-1 assume { :end_inline_assume_abort_if_not } true;assume { :begin_inline_read_manual_selection_history } true;read_manual_selection_history_#in~index#1 := 1;havoc read_manual_selection_history_#res#1;havoc read_manual_selection_history_~index#1;read_manual_selection_history_~index#1 := read_manual_selection_history_#in~index#1; 2104#L178 assume 0 == read_manual_selection_history_~index#1 % 256;read_manual_selection_history_#res#1 := ~manual_selection_History_0~0; 2107#L188 check_#t~ret23#1 := read_manual_selection_history_#res#1;assume { :end_inline_read_manual_selection_history } true;check_~tmp___0~0#1 := check_#t~ret23#1;havoc check_#t~ret23#1; 2108#L453 assume !(0 == check_~tmp___0~0#1); 2077#L453-1 assume { :begin_inline_read_side1_failed_history } true;read_side1_failed_history_#in~index#1 := 1;havoc read_side1_failed_history_#res#1;havoc read_side1_failed_history_~index#1;read_side1_failed_history_~index#1 := read_side1_failed_history_#in~index#1; 2098#L88-2 assume 0 == read_side1_failed_history_~index#1 % 256;read_side1_failed_history_#res#1 := ~side1Failed_History_0~0; 2099#L98-2 check_#t~ret28#1 := read_side1_failed_history_#res#1;assume { :end_inline_read_side1_failed_history } true;check_~tmp___7~0#1 := check_#t~ret28#1;havoc check_#t~ret28#1; 2325#L483 assume 0 != check_~tmp___7~0#1 % 256;assume { :begin_inline_read_side2_failed_history } true;read_side2_failed_history_#in~index#1 := 1;havoc read_side2_failed_history_#res#1;havoc read_side2_failed_history_~index#1;read_side2_failed_history_~index#1 := read_side2_failed_history_#in~index#1; 2171#L118-2 assume 0 == read_side2_failed_history_~index#1 % 256;read_side2_failed_history_#res#1 := ~side2Failed_History_0~0; 2112#L128-2 check_#t~ret29#1 := read_side2_failed_history_#res#1;assume { :end_inline_read_side2_failed_history } true;check_~tmp___8~0#1 := check_#t~ret29#1;havoc check_#t~ret29#1; 2233#L485 assume 0 == check_~tmp___8~0#1 % 256;assume { :begin_inline_read_active_side_history } true;read_active_side_history_#in~index#1 := 0;havoc read_active_side_history_#res#1;havoc read_active_side_history_~index#1;read_active_side_history_~index#1 := read_active_side_history_#in~index#1; 2234#L148-1 assume 0 == read_active_side_history_~index#1 % 256;read_active_side_history_#res#1 := ~active_side_History_0~0; 2091#L158-1 check_#t~ret30#1 := read_active_side_history_#res#1;assume { :end_inline_read_active_side_history } true;check_~tmp___5~0#1 := check_#t~ret30#1;havoc check_#t~ret30#1; 2291#L487 assume !(2 == check_~tmp___5~0#1);check_#res#1 := 0; 2110#L533 main_#t~ret61#1 := check_#res#1;assume { :end_inline_check } true;main_~c1~0#1 := main_#t~ret61#1;havoc main_#t~ret61#1;assume { :begin_inline_assert } true;assert_#in~arg#1 := (if 0 == main_~c1~0#1 then 0 else 1);havoc assert_~arg#1;assert_~arg#1 := assert_#in~arg#1; 2264#L612-44 assume !(0 == assert_~arg#1 % 256); 2192#L607-22 assume { :end_inline_assert } true; 2193#L578-2 [2021-12-15 17:22:09,732 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-15 17:22:09,732 INFO L85 PathProgramCache]: Analyzing trace with hash -613005151, now seen corresponding path program 3 times [2021-12-15 17:22:09,732 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-15 17:22:09,732 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1812218457] [2021-12-15 17:22:09,732 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-15 17:22:09,732 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-15 17:22:09,758 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-15 17:22:09,760 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-12-15 17:22:09,779 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-15 17:22:09,784 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-12-15 17:22:09,784 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-15 17:22:09,785 INFO L85 PathProgramCache]: Analyzing trace with hash 872118534, now seen corresponding path program 1 times [2021-12-15 17:22:09,785 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-15 17:22:09,785 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [961045801] [2021-12-15 17:22:09,785 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-15 17:22:09,785 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-15 17:22:09,811 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-15 17:22:09,847 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-15 17:22:09,847 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-15 17:22:09,848 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [961045801] [2021-12-15 17:22:09,848 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [961045801] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-15 17:22:09,849 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-15 17:22:09,849 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-15 17:22:09,849 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [132542450] [2021-12-15 17:22:09,850 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-15 17:22:09,851 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-12-15 17:22:09,851 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-15 17:22:09,852 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-15 17:22:09,852 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-15 17:22:09,852 INFO L87 Difference]: Start difference. First operand 323 states and 484 transitions. cyclomatic complexity: 162 Second operand has 3 states, 3 states have (on average 17.333333333333332) internal successors, (52), 3 states have internal predecessors, (52), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-15 17:22:09,872 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-15 17:22:09,872 INFO L93 Difference]: Finished difference Result 471 states and 701 transitions. [2021-12-15 17:22:09,872 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-15 17:22:09,873 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 471 states and 701 transitions. [2021-12-15 17:22:09,880 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 454 [2021-12-15 17:22:09,883 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 471 states to 471 states and 701 transitions. [2021-12-15 17:22:09,883 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 471 [2021-12-15 17:22:09,884 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 471 [2021-12-15 17:22:09,885 INFO L73 IsDeterministic]: Start isDeterministic. Operand 471 states and 701 transitions. [2021-12-15 17:22:09,885 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-12-15 17:22:09,885 INFO L681 BuchiCegarLoop]: Abstraction has 471 states and 701 transitions. [2021-12-15 17:22:09,886 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 471 states and 701 transitions. [2021-12-15 17:22:09,902 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 471 to 320. [2021-12-15 17:22:09,903 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 320 states, 320 states have (on average 1.49375) internal successors, (478), 319 states have internal predecessors, (478), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-15 17:22:09,904 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 320 states to 320 states and 478 transitions. [2021-12-15 17:22:09,904 INFO L704 BuchiCegarLoop]: Abstraction has 320 states and 478 transitions. [2021-12-15 17:22:09,905 INFO L587 BuchiCegarLoop]: Abstraction has 320 states and 478 transitions. [2021-12-15 17:22:09,905 INFO L425 BuchiCegarLoop]: ======== Iteration 5============ [2021-12-15 17:22:09,905 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 320 states and 478 transitions. [2021-12-15 17:22:09,907 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 303 [2021-12-15 17:22:09,907 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-15 17:22:09,907 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-15 17:22:09,910 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-15 17:22:09,910 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-15 17:22:09,910 INFO L791 eck$LassoCheckResult]: Stem: 3124#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(52, 2);call #Ultimate.allocInit(12, 3);~nomsg~0 := -1;~cs1~0 := 0;~cs1_old~0 := 0;~cs1_new~0 := 0;~cs2~0 := 0;~cs2_old~0 := 0;~cs2_new~0 := 0;~s1s2~0 := 0;~s1s2_old~0 := 0;~s1s2_new~0 := 0;~s1s1~0 := 0;~s1s1_old~0 := 0;~s1s1_new~0 := 0;~s2s1~0 := 0;~s2s1_old~0 := 0;~s2s1_new~0 := 0;~s2s2~0 := 0;~s2s2_old~0 := 0;~s2s2_new~0 := 0;~s1p~0 := 0;~s1p_old~0 := 0;~s1p_new~0 := 0;~s2p~0 := 0;~s2p_old~0 := 0;~s2p_new~0 := 0;~side1Failed~0 := 0;~side2Failed~0 := 0;~side1_written~0 := 0;~side2_written~0 := 0;~side1Failed_History_0~0 := 0;~side1Failed_History_1~0 := 0;~side1Failed_History_2~0 := 0;~side2Failed_History_0~0 := 0;~side2Failed_History_1~0 := 0;~side2Failed_History_2~0 := 0;~active_side_History_0~0 := 0;~active_side_History_1~0 := 0;~active_side_History_2~0 := 0;~manual_selection_History_0~0 := 0;~manual_selection_History_1~0 := 0;~manual_selection_History_2~0 := 0; 3101#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~nondet44#1, main_#t~nondet45#1, main_#t~nondet46#1, main_#t~nondet47#1, main_#t~nondet48#1, main_#t~nondet49#1, main_#t~nondet50#1, main_#t~nondet51#1, main_#t~nondet52#1, main_#t~nondet53#1, main_#t~nondet54#1, main_#t~nondet55#1, main_#t~nondet56#1, main_#t~nondet57#1, main_#t~nondet58#1, main_#t~nondet59#1, main_#t~ret60#1, main_#t~ret61#1, main_~c1~0#1, main_~i2~0#1;havoc main_~c1~0#1;havoc main_~i2~0#1;main_~c1~0#1 := 0;~side1Failed~0 := main_#t~nondet44#1;havoc main_#t~nondet44#1;~side2Failed~0 := main_#t~nondet45#1;havoc main_#t~nondet45#1;~side1_written~0 := main_#t~nondet46#1;havoc main_#t~nondet46#1;~side2_written~0 := main_#t~nondet47#1;havoc main_#t~nondet47#1;~side1Failed_History_0~0 := main_#t~nondet48#1;havoc main_#t~nondet48#1;~side1Failed_History_1~0 := main_#t~nondet49#1;havoc main_#t~nondet49#1;~side1Failed_History_2~0 := main_#t~nondet50#1;havoc main_#t~nondet50#1;~side2Failed_History_0~0 := main_#t~nondet51#1;havoc main_#t~nondet51#1;~side2Failed_History_1~0 := main_#t~nondet52#1;havoc main_#t~nondet52#1;~side2Failed_History_2~0 := main_#t~nondet53#1;havoc main_#t~nondet53#1;~active_side_History_0~0 := main_#t~nondet54#1;havoc main_#t~nondet54#1;~active_side_History_1~0 := main_#t~nondet55#1;havoc main_#t~nondet55#1;~active_side_History_2~0 := main_#t~nondet56#1;havoc main_#t~nondet56#1;~manual_selection_History_0~0 := main_#t~nondet57#1;havoc main_#t~nondet57#1;~manual_selection_History_1~0 := main_#t~nondet58#1;havoc main_#t~nondet58#1;~manual_selection_History_2~0 := main_#t~nondet59#1;havoc main_#t~nondet59#1;assume { :begin_inline_init } true;havoc init_#res#1; 2994#L197 assume !(0 != ~side1Failed_History_0~0 % 256); 2995#L200 assume !(0 != ~side2Failed_History_0~0 % 256); 2917#L203 assume !(-2 != ~active_side_History_0~0); 2918#L206 assume !(0 != ~manual_selection_History_0~0); 2934#L209 assume !(0 != ~side1Failed_History_1~0 % 256); 3115#L212 assume !(0 != ~side2Failed_History_1~0 % 256); 3073#L215 assume !(-2 != ~active_side_History_1~0); 3074#L218 assume !(0 != ~manual_selection_History_1~0); 3102#L221 assume !(0 != ~side1Failed_History_2~0 % 256); 3117#L224 assume !(0 != ~side2Failed_History_2~0 % 256); 3033#L227 assume !(-2 != ~active_side_History_2~0); 3034#L230 assume !(0 != ~manual_selection_History_2~0);init_#res#1 := 1; 2984#L233 main_#t~ret60#1 := init_#res#1;assume { :end_inline_init } true;main_~i2~0#1 := main_#t~ret60#1;havoc main_#t~ret60#1;assume { :begin_inline_assume_abort_if_not } true;assume_abort_if_not_#in~cond#1 := main_~i2~0#1;havoc assume_abort_if_not_~cond#1;assume_abort_if_not_~cond#1 := assume_abort_if_not_#in~cond#1; 2985#L58 assume !(0 == assume_abort_if_not_~cond#1); 3075#L57 assume { :end_inline_assume_abort_if_not } true;~cs1_old~0 := ~nomsg~0;~cs1_new~0 := ~nomsg~0;~cs2_old~0 := ~nomsg~0;~cs2_new~0 := ~nomsg~0;~s1s2_old~0 := ~nomsg~0;~s1s2_new~0 := ~nomsg~0;~s1s1_old~0 := ~nomsg~0;~s1s1_new~0 := ~nomsg~0;~s2s1_old~0 := ~nomsg~0;~s2s1_new~0 := ~nomsg~0;~s2s2_old~0 := ~nomsg~0;~s2s2_new~0 := ~nomsg~0;~s1p_old~0 := ~nomsg~0;~s1p_new~0 := ~nomsg~0;~s2p_old~0 := ~nomsg~0;~s2p_new~0 := ~nomsg~0;main_~i2~0#1 := 0; 2991#L578-2 [2021-12-15 17:22:09,912 INFO L793 eck$LassoCheckResult]: Loop: 2991#L578-2 assume !false;assume { :begin_inline_Console_task_each_pals_period } true;havoc Console_task_each_pals_period_#t~nondet4#1, Console_task_each_pals_period_#t~ite5#1, Console_task_each_pals_period_#t~ite6#1, Console_task_each_pals_period_~manual_selection~0#1, Console_task_each_pals_period_~tmp~1#1;havoc Console_task_each_pals_period_~manual_selection~0#1;havoc Console_task_each_pals_period_~tmp~1#1;Console_task_each_pals_period_~tmp~1#1 := Console_task_each_pals_period_#t~nondet4#1;havoc Console_task_each_pals_period_#t~nondet4#1;Console_task_each_pals_period_~manual_selection~0#1 := Console_task_each_pals_period_~tmp~1#1;assume { :begin_inline_write_manual_selection_history } true;write_manual_selection_history_#in~val#1 := Console_task_each_pals_period_~manual_selection~0#1;havoc write_manual_selection_history_~val#1;write_manual_selection_history_~val#1 := write_manual_selection_history_#in~val#1;~manual_selection_History_2~0 := ~manual_selection_History_1~0;~manual_selection_History_1~0 := ~manual_selection_History_0~0;~manual_selection_History_0~0 := write_manual_selection_history_~val#1; 3050#L170 assume { :end_inline_write_manual_selection_history } true; 3096#L258 assume Console_task_each_pals_period_~manual_selection~0#1 != ~nomsg~0 && ~cs1_new~0 == ~nomsg~0;Console_task_each_pals_period_#t~ite5#1 := Console_task_each_pals_period_~manual_selection~0#1; 3097#L258-2 ~cs1_new~0 := (if Console_task_each_pals_period_#t~ite5#1 % 256 <= 127 then Console_task_each_pals_period_#t~ite5#1 % 256 else Console_task_each_pals_period_#t~ite5#1 % 256 - 256);havoc Console_task_each_pals_period_#t~ite5#1; 3112#L259 assume Console_task_each_pals_period_~manual_selection~0#1 != ~nomsg~0 && ~cs2_new~0 == ~nomsg~0;Console_task_each_pals_period_#t~ite6#1 := Console_task_each_pals_period_~manual_selection~0#1; 3113#L259-2 ~cs2_new~0 := (if Console_task_each_pals_period_#t~ite6#1 % 256 <= 127 then Console_task_each_pals_period_#t~ite6#1 % 256 else Console_task_each_pals_period_#t~ite6#1 % 256 - 256);havoc Console_task_each_pals_period_#t~ite6#1;Console_task_each_pals_period_~manual_selection~0#1 := 0; 3079#L261 assume { :end_inline_Console_task_each_pals_period } true;assume { :begin_inline_Side1_activestandby_task_each_pals_period } true;havoc Side1_activestandby_task_each_pals_period_#t~nondet7#1, Side1_activestandby_task_each_pals_period_#t~ite8#1, Side1_activestandby_task_each_pals_period_#t~ite9#1, Side1_activestandby_task_each_pals_period_#t~ite10#1, Side1_activestandby_task_each_pals_period_#t~ite11#1, Side1_activestandby_task_each_pals_period_#t~ite12#1, Side1_activestandby_task_each_pals_period_#t~ite13#1, Side1_activestandby_task_each_pals_period_~side1~0#1, Side1_activestandby_task_each_pals_period_~side2~0#1, Side1_activestandby_task_each_pals_period_~manual_selection~1#1, Side1_activestandby_task_each_pals_period_~next_state~0#1;havoc Side1_activestandby_task_each_pals_period_~side1~0#1;havoc Side1_activestandby_task_each_pals_period_~side2~0#1;havoc Side1_activestandby_task_each_pals_period_~manual_selection~1#1;havoc Side1_activestandby_task_each_pals_period_~next_state~0#1;Side1_activestandby_task_each_pals_period_~side1~0#1 := ~nomsg~0;Side1_activestandby_task_each_pals_period_~side2~0#1 := ~nomsg~0;Side1_activestandby_task_each_pals_period_~manual_selection~1#1 := 0;~side1Failed~0 := Side1_activestandby_task_each_pals_period_#t~nondet7#1;havoc Side1_activestandby_task_each_pals_period_#t~nondet7#1;assume { :begin_inline_write_side1_failed_history } true;write_side1_failed_history_#in~val#1 := ~side1Failed~0;havoc write_side1_failed_history_~val#1;write_side1_failed_history_~val#1 := write_side1_failed_history_#in~val#1;~side1Failed_History_2~0 := ~side1Failed_History_1~0;~side1Failed_History_1~0 := ~side1Failed_History_0~0;~side1Failed_History_0~0 := write_side1_failed_history_~val#1; 3080#L80 assume { :end_inline_write_side1_failed_history } true; 3068#L277 assume 0 != ~side1Failed~0 % 256; 3069#L278 assume !(~nomsg~0 != ~nomsg~0 && ~s1s1_new~0 == ~nomsg~0);Side1_activestandby_task_each_pals_period_#t~ite8#1 := ~s1s1_new~0; 3078#L278-2 ~s1s1_new~0 := (if Side1_activestandby_task_each_pals_period_#t~ite8#1 % 256 <= 127 then Side1_activestandby_task_each_pals_period_#t~ite8#1 % 256 else Side1_activestandby_task_each_pals_period_#t~ite8#1 % 256 - 256);havoc Side1_activestandby_task_each_pals_period_#t~ite8#1; 2965#L279 assume !(~nomsg~0 != ~nomsg~0 && ~s1s2_new~0 == ~nomsg~0);Side1_activestandby_task_each_pals_period_#t~ite9#1 := ~s1s2_new~0; 2929#L279-2 ~s1s2_new~0 := (if Side1_activestandby_task_each_pals_period_#t~ite9#1 % 256 <= 127 then Side1_activestandby_task_each_pals_period_#t~ite9#1 % 256 else Side1_activestandby_task_each_pals_period_#t~ite9#1 % 256 - 256);havoc Side1_activestandby_task_each_pals_period_#t~ite9#1; 2930#L280 assume !(~nomsg~0 != ~nomsg~0 && ~s1p_new~0 == ~nomsg~0);Side1_activestandby_task_each_pals_period_#t~ite10#1 := ~s1p_new~0; 3038#L280-2 ~s1p_new~0 := (if Side1_activestandby_task_each_pals_period_#t~ite10#1 % 256 <= 127 then Side1_activestandby_task_each_pals_period_#t~ite10#1 % 256 else Side1_activestandby_task_each_pals_period_#t~ite10#1 % 256 - 256);havoc Side1_activestandby_task_each_pals_period_#t~ite10#1;~side1_written~0 := ~nomsg~0; 3039#L314 assume { :end_inline_Side1_activestandby_task_each_pals_period } true;assume { :begin_inline_Side2_activestandby_task_each_pals_period } true;havoc Side2_activestandby_task_each_pals_period_#t~nondet14#1, Side2_activestandby_task_each_pals_period_#t~ite15#1, Side2_activestandby_task_each_pals_period_#t~ite16#1, Side2_activestandby_task_each_pals_period_#t~ite17#1, Side2_activestandby_task_each_pals_period_#t~ret18#1, Side2_activestandby_task_each_pals_period_#t~ite19#1, Side2_activestandby_task_each_pals_period_#t~ite20#1, Side2_activestandby_task_each_pals_period_#t~ite21#1, Side2_activestandby_task_each_pals_period_~side1~1#1, Side2_activestandby_task_each_pals_period_~side2~1#1, Side2_activestandby_task_each_pals_period_~manual_selection~2#1, Side2_activestandby_task_each_pals_period_~next_state~1#1;havoc Side2_activestandby_task_each_pals_period_~side1~1#1;havoc Side2_activestandby_task_each_pals_period_~side2~1#1;havoc Side2_activestandby_task_each_pals_period_~manual_selection~2#1;havoc Side2_activestandby_task_each_pals_period_~next_state~1#1;Side2_activestandby_task_each_pals_period_~side1~1#1 := ~nomsg~0;Side2_activestandby_task_each_pals_period_~side2~1#1 := ~nomsg~0;Side2_activestandby_task_each_pals_period_~manual_selection~2#1 := 0;~side2Failed~0 := Side2_activestandby_task_each_pals_period_#t~nondet14#1;havoc Side2_activestandby_task_each_pals_period_#t~nondet14#1;assume { :begin_inline_write_side2_failed_history } true;write_side2_failed_history_#in~val#1 := ~side2Failed~0;havoc write_side2_failed_history_~val#1;write_side2_failed_history_~val#1 := write_side2_failed_history_#in~val#1;~side2Failed_History_2~0 := ~side2Failed_History_1~0;~side2Failed_History_1~0 := ~side2Failed_History_0~0;~side2Failed_History_0~0 := write_side2_failed_history_~val#1; 3173#L110 assume { :end_inline_write_side2_failed_history } true; 3171#L330 assume 0 != ~side2Failed~0 % 256; 3170#L331 assume !(~nomsg~0 != ~nomsg~0 && ~s2s1_new~0 == ~nomsg~0);Side2_activestandby_task_each_pals_period_#t~ite15#1 := ~s2s1_new~0; 3169#L331-2 ~s2s1_new~0 := (if Side2_activestandby_task_each_pals_period_#t~ite15#1 % 256 <= 127 then Side2_activestandby_task_each_pals_period_#t~ite15#1 % 256 else Side2_activestandby_task_each_pals_period_#t~ite15#1 % 256 - 256);havoc Side2_activestandby_task_each_pals_period_#t~ite15#1; 3163#L332 assume !(~nomsg~0 != ~nomsg~0 && ~s2s2_new~0 == ~nomsg~0);Side2_activestandby_task_each_pals_period_#t~ite16#1 := ~s2s2_new~0; 3161#L332-2 ~s2s2_new~0 := (if Side2_activestandby_task_each_pals_period_#t~ite16#1 % 256 <= 127 then Side2_activestandby_task_each_pals_period_#t~ite16#1 % 256 else Side2_activestandby_task_each_pals_period_#t~ite16#1 % 256 - 256);havoc Side2_activestandby_task_each_pals_period_#t~ite16#1; 3160#L333 assume !(~nomsg~0 != ~nomsg~0 && ~s2p_new~0 == ~nomsg~0);Side2_activestandby_task_each_pals_period_#t~ite17#1 := ~s2p_new~0; 3159#L333-2 ~s2p_new~0 := (if Side2_activestandby_task_each_pals_period_#t~ite17#1 % 256 <= 127 then Side2_activestandby_task_each_pals_period_#t~ite17#1 % 256 else Side2_activestandby_task_each_pals_period_#t~ite17#1 % 256 - 256);havoc Side2_activestandby_task_each_pals_period_#t~ite17#1;~side2_written~0 := ~nomsg~0; 3158#L371 assume { :end_inline_Side2_activestandby_task_each_pals_period } true;assume { :begin_inline_Pendulum_prism_task_each_pals_period } true;havoc Pendulum_prism_task_each_pals_period_#t~ret22#1, Pendulum_prism_task_each_pals_period_~active_side~0#1, Pendulum_prism_task_each_pals_period_~tmp~2#1, Pendulum_prism_task_each_pals_period_~side1~2#1, Pendulum_prism_task_each_pals_period_~side2~2#1;havoc Pendulum_prism_task_each_pals_period_~active_side~0#1;havoc Pendulum_prism_task_each_pals_period_~tmp~2#1;havoc Pendulum_prism_task_each_pals_period_~side1~2#1;havoc Pendulum_prism_task_each_pals_period_~side2~2#1;assume { :begin_inline_read_active_side_history } true;read_active_side_history_#in~index#1 := 0;havoc read_active_side_history_#res#1;havoc read_active_side_history_~index#1;read_active_side_history_~index#1 := read_active_side_history_#in~index#1; 3153#L148 assume 0 == read_active_side_history_~index#1 % 256;read_active_side_history_#res#1 := ~active_side_History_0~0; 3152#L158 Pendulum_prism_task_each_pals_period_#t~ret22#1 := read_active_side_history_#res#1;assume { :end_inline_read_active_side_history } true;Pendulum_prism_task_each_pals_period_~tmp~2#1 := Pendulum_prism_task_each_pals_period_#t~ret22#1;havoc Pendulum_prism_task_each_pals_period_#t~ret22#1;Pendulum_prism_task_each_pals_period_~active_side~0#1 := Pendulum_prism_task_each_pals_period_~tmp~2#1;Pendulum_prism_task_each_pals_period_~side1~2#1 := ~nomsg~0;Pendulum_prism_task_each_pals_period_~side2~2#1 := ~nomsg~0;Pendulum_prism_task_each_pals_period_~side1~2#1 := ~s1p_old~0;~s1p_old~0 := ~nomsg~0;Pendulum_prism_task_each_pals_period_~side2~2#1 := ~s2p_old~0;~s2p_old~0 := ~nomsg~0; 3145#L390 assume 1 == Pendulum_prism_task_each_pals_period_~side1~2#1;Pendulum_prism_task_each_pals_period_~active_side~0#1 := 1; 3135#L404 assume { :begin_inline_write_active_side_history } true;write_active_side_history_#in~val#1 := Pendulum_prism_task_each_pals_period_~active_side~0#1;havoc write_active_side_history_~val#1;write_active_side_history_~val#1 := write_active_side_history_#in~val#1;~active_side_History_2~0 := ~active_side_History_1~0;~active_side_History_1~0 := ~active_side_History_0~0;~active_side_History_0~0 := write_active_side_history_~val#1; 3132#L140 assume { :end_inline_write_active_side_history } true; 3129#L414 assume { :end_inline_Pendulum_prism_task_each_pals_period } true;~cs1_old~0 := ~cs1_new~0;~cs1_new~0 := ~nomsg~0;~cs2_old~0 := ~cs2_new~0;~cs2_new~0 := ~nomsg~0;~s1s2_old~0 := ~s1s2_new~0;~s1s2_new~0 := ~nomsg~0;~s1s1_old~0 := ~s1s1_new~0;~s1s1_new~0 := ~nomsg~0;~s2s1_old~0 := ~s2s1_new~0;~s2s1_new~0 := ~nomsg~0;~s2s2_old~0 := ~s2s2_new~0;~s2s2_new~0 := ~nomsg~0;~s1p_old~0 := ~s1p_new~0;~s1p_new~0 := ~nomsg~0;~s2p_old~0 := ~s2p_new~0;~s2p_new~0 := ~nomsg~0;assume { :begin_inline_check } true;havoc check_#res#1;havoc check_#t~ret23#1, check_#t~ret24#1, check_#t~ret25#1, check_#t~ret26#1, check_#t~ret27#1, check_#t~ret28#1, check_#t~ret29#1, check_#t~ret30#1, check_#t~ret31#1, check_#t~ret32#1, check_#t~ret33#1, check_#t~ret34#1, check_#t~ret35#1, check_#t~ret36#1, check_#t~ret37#1, check_#t~ret38#1, check_#t~ret39#1, check_#t~ret40#1, check_#t~ret41#1, check_#t~ret42#1, check_#t~ret43#1, check_~tmp~3#1, check_~tmp___0~0#1, check_~tmp___1~0#1, check_~tmp___2~0#1, check_~tmp___3~0#1, check_~tmp___4~0#1, check_~tmp___5~0#1, check_~tmp___6~0#1, check_~tmp___7~0#1, check_~tmp___8~0#1, check_~tmp___9~0#1, check_~tmp___10~0#1, check_~tmp___11~0#1, check_~tmp___12~0#1, check_~tmp___13~0#1, check_~tmp___14~0#1, check_~tmp___15~0#1, check_~tmp___16~0#1, check_~tmp___17~0#1, check_~tmp___18~0#1, check_~tmp___19~0#1, check_~tmp___20~0#1;havoc check_~tmp~3#1;havoc check_~tmp___0~0#1;havoc check_~tmp___1~0#1;havoc check_~tmp___2~0#1;havoc check_~tmp___3~0#1;havoc check_~tmp___4~0#1;havoc check_~tmp___5~0#1;havoc check_~tmp___6~0#1;havoc check_~tmp___7~0#1;havoc check_~tmp___8~0#1;havoc check_~tmp___9~0#1;havoc check_~tmp___10~0#1;havoc check_~tmp___11~0#1;havoc check_~tmp___12~0#1;havoc check_~tmp___13~0#1;havoc check_~tmp___14~0#1;havoc check_~tmp___15~0#1;havoc check_~tmp___16~0#1;havoc check_~tmp___17~0#1;havoc check_~tmp___18~0#1;havoc check_~tmp___19~0#1;havoc check_~tmp___20~0#1; 3126#L443 assume !(0 == ~side1Failed~0 % 256); 3122#L446 assume !(0 == ~side2Failed~0 % 256);check_~tmp~3#1 := 0; 2979#L446-2 assume { :begin_inline_assume_abort_if_not } true;assume_abort_if_not_#in~cond#1 := (if 0 == check_~tmp~3#1 then 0 else 1) % 256;havoc assume_abort_if_not_~cond#1;assume_abort_if_not_~cond#1 := assume_abort_if_not_#in~cond#1; 2980#L58-2 assume !(0 == assume_abort_if_not_~cond#1); 2903#L57-1 assume { :end_inline_assume_abort_if_not } true;assume { :begin_inline_read_manual_selection_history } true;read_manual_selection_history_#in~index#1 := 1;havoc read_manual_selection_history_#res#1;havoc read_manual_selection_history_~index#1;read_manual_selection_history_~index#1 := read_manual_selection_history_#in~index#1; 2904#L178 assume !(0 == read_manual_selection_history_~index#1 % 256); 2921#L181 assume 1 == read_manual_selection_history_~index#1 % 256;read_manual_selection_history_#res#1 := ~manual_selection_History_1~0; 2907#L188 check_#t~ret23#1 := read_manual_selection_history_#res#1;assume { :end_inline_read_manual_selection_history } true;check_~tmp___0~0#1 := check_#t~ret23#1;havoc check_#t~ret23#1; 2908#L453 assume !(0 == check_~tmp___0~0#1); 2877#L453-1 assume { :begin_inline_read_side1_failed_history } true;read_side1_failed_history_#in~index#1 := 1;havoc read_side1_failed_history_#res#1;havoc read_side1_failed_history_~index#1;read_side1_failed_history_~index#1 := read_side1_failed_history_#in~index#1; 2898#L88-2 assume 0 == read_side1_failed_history_~index#1 % 256;read_side1_failed_history_#res#1 := ~side1Failed_History_0~0; 2899#L98-2 check_#t~ret28#1 := read_side1_failed_history_#res#1;assume { :end_inline_read_side1_failed_history } true;check_~tmp___7~0#1 := check_#t~ret28#1;havoc check_#t~ret28#1; 3118#L483 assume 0 != check_~tmp___7~0#1 % 256;assume { :begin_inline_read_side2_failed_history } true;read_side2_failed_history_#in~index#1 := 1;havoc read_side2_failed_history_#res#1;havoc read_side2_failed_history_~index#1;read_side2_failed_history_~index#1 := read_side2_failed_history_#in~index#1; 2970#L118-2 assume 0 == read_side2_failed_history_~index#1 % 256;read_side2_failed_history_#res#1 := ~side2Failed_History_0~0; 2912#L128-2 check_#t~ret29#1 := read_side2_failed_history_#res#1;assume { :end_inline_read_side2_failed_history } true;check_~tmp___8~0#1 := check_#t~ret29#1;havoc check_#t~ret29#1; 3029#L485 assume 0 == check_~tmp___8~0#1 % 256;assume { :begin_inline_read_active_side_history } true;read_active_side_history_#in~index#1 := 0;havoc read_active_side_history_#res#1;havoc read_active_side_history_~index#1;read_active_side_history_~index#1 := read_active_side_history_#in~index#1; 3030#L148-1 assume 0 == read_active_side_history_~index#1 % 256;read_active_side_history_#res#1 := ~active_side_History_0~0; 2891#L158-1 check_#t~ret30#1 := read_active_side_history_#res#1;assume { :end_inline_read_active_side_history } true;check_~tmp___5~0#1 := check_#t~ret30#1;havoc check_#t~ret30#1; 3088#L487 assume !(2 == check_~tmp___5~0#1);check_#res#1 := 0; 2910#L533 main_#t~ret61#1 := check_#res#1;assume { :end_inline_check } true;main_~c1~0#1 := main_#t~ret61#1;havoc main_#t~ret61#1;assume { :begin_inline_assert } true;assert_#in~arg#1 := (if 0 == main_~c1~0#1 then 0 else 1);havoc assert_~arg#1;assert_~arg#1 := assert_#in~arg#1; 3060#L612-44 assume !(0 == assert_~arg#1 % 256); 2990#L607-22 assume { :end_inline_assert } true; 2991#L578-2 [2021-12-15 17:22:09,913 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-15 17:22:09,913 INFO L85 PathProgramCache]: Analyzing trace with hash -613005151, now seen corresponding path program 4 times [2021-12-15 17:22:09,913 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-15 17:22:09,914 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [503053104] [2021-12-15 17:22:09,914 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-15 17:22:09,914 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-15 17:22:09,936 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-15 17:22:09,936 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-12-15 17:22:09,949 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-15 17:22:09,962 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-12-15 17:22:09,963 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-15 17:22:09,963 INFO L85 PathProgramCache]: Analyzing trace with hash 1839399947, now seen corresponding path program 1 times [2021-12-15 17:22:09,963 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-15 17:22:09,963 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [730777967] [2021-12-15 17:22:09,963 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-15 17:22:09,964 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-15 17:22:09,991 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-15 17:22:10,035 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-15 17:22:10,038 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-15 17:22:10,039 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [730777967] [2021-12-15 17:22:10,039 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [730777967] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-15 17:22:10,039 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-15 17:22:10,039 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-15 17:22:10,040 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [542470932] [2021-12-15 17:22:10,040 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-15 17:22:10,041 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-12-15 17:22:10,041 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-15 17:22:10,042 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-15 17:22:10,042 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-15 17:22:10,042 INFO L87 Difference]: Start difference. First operand 320 states and 478 transitions. cyclomatic complexity: 159 Second operand has 3 states, 3 states have (on average 17.666666666666668) internal successors, (53), 3 states have internal predecessors, (53), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-15 17:22:10,095 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-15 17:22:10,095 INFO L93 Difference]: Finished difference Result 479 states and 706 transitions. [2021-12-15 17:22:10,096 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-15 17:22:10,098 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 479 states and 706 transitions. [2021-12-15 17:22:10,101 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 462 [2021-12-15 17:22:10,104 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 479 states to 479 states and 706 transitions. [2021-12-15 17:22:10,104 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 479 [2021-12-15 17:22:10,105 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 479 [2021-12-15 17:22:10,105 INFO L73 IsDeterministic]: Start isDeterministic. Operand 479 states and 706 transitions. [2021-12-15 17:22:10,105 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-12-15 17:22:10,106 INFO L681 BuchiCegarLoop]: Abstraction has 479 states and 706 transitions. [2021-12-15 17:22:10,106 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 479 states and 706 transitions. [2021-12-15 17:22:10,110 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 479 to 308. [2021-12-15 17:22:10,110 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 308 states, 308 states have (on average 1.474025974025974) internal successors, (454), 307 states have internal predecessors, (454), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-15 17:22:10,111 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 308 states to 308 states and 454 transitions. [2021-12-15 17:22:10,112 INFO L704 BuchiCegarLoop]: Abstraction has 308 states and 454 transitions. [2021-12-15 17:22:10,112 INFO L587 BuchiCegarLoop]: Abstraction has 308 states and 454 transitions. [2021-12-15 17:22:10,112 INFO L425 BuchiCegarLoop]: ======== Iteration 6============ [2021-12-15 17:22:10,112 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 308 states and 454 transitions. [2021-12-15 17:22:10,114 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 291 [2021-12-15 17:22:10,114 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-15 17:22:10,114 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-15 17:22:10,115 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-15 17:22:10,115 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-15 17:22:10,115 INFO L791 eck$LassoCheckResult]: Stem: 3919#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(52, 2);call #Ultimate.allocInit(12, 3);~nomsg~0 := -1;~cs1~0 := 0;~cs1_old~0 := 0;~cs1_new~0 := 0;~cs2~0 := 0;~cs2_old~0 := 0;~cs2_new~0 := 0;~s1s2~0 := 0;~s1s2_old~0 := 0;~s1s2_new~0 := 0;~s1s1~0 := 0;~s1s1_old~0 := 0;~s1s1_new~0 := 0;~s2s1~0 := 0;~s2s1_old~0 := 0;~s2s1_new~0 := 0;~s2s2~0 := 0;~s2s2_old~0 := 0;~s2s2_new~0 := 0;~s1p~0 := 0;~s1p_old~0 := 0;~s1p_new~0 := 0;~s2p~0 := 0;~s2p_old~0 := 0;~s2p_new~0 := 0;~side1Failed~0 := 0;~side2Failed~0 := 0;~side1_written~0 := 0;~side2_written~0 := 0;~side1Failed_History_0~0 := 0;~side1Failed_History_1~0 := 0;~side1Failed_History_2~0 := 0;~side2Failed_History_0~0 := 0;~side2Failed_History_1~0 := 0;~side2Failed_History_2~0 := 0;~active_side_History_0~0 := 0;~active_side_History_1~0 := 0;~active_side_History_2~0 := 0;~manual_selection_History_0~0 := 0;~manual_selection_History_1~0 := 0;~manual_selection_History_2~0 := 0; 3896#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~nondet44#1, main_#t~nondet45#1, main_#t~nondet46#1, main_#t~nondet47#1, main_#t~nondet48#1, main_#t~nondet49#1, main_#t~nondet50#1, main_#t~nondet51#1, main_#t~nondet52#1, main_#t~nondet53#1, main_#t~nondet54#1, main_#t~nondet55#1, main_#t~nondet56#1, main_#t~nondet57#1, main_#t~nondet58#1, main_#t~nondet59#1, main_#t~ret60#1, main_#t~ret61#1, main_~c1~0#1, main_~i2~0#1;havoc main_~c1~0#1;havoc main_~i2~0#1;main_~c1~0#1 := 0;~side1Failed~0 := main_#t~nondet44#1;havoc main_#t~nondet44#1;~side2Failed~0 := main_#t~nondet45#1;havoc main_#t~nondet45#1;~side1_written~0 := main_#t~nondet46#1;havoc main_#t~nondet46#1;~side2_written~0 := main_#t~nondet47#1;havoc main_#t~nondet47#1;~side1Failed_History_0~0 := main_#t~nondet48#1;havoc main_#t~nondet48#1;~side1Failed_History_1~0 := main_#t~nondet49#1;havoc main_#t~nondet49#1;~side1Failed_History_2~0 := main_#t~nondet50#1;havoc main_#t~nondet50#1;~side2Failed_History_0~0 := main_#t~nondet51#1;havoc main_#t~nondet51#1;~side2Failed_History_1~0 := main_#t~nondet52#1;havoc main_#t~nondet52#1;~side2Failed_History_2~0 := main_#t~nondet53#1;havoc main_#t~nondet53#1;~active_side_History_0~0 := main_#t~nondet54#1;havoc main_#t~nondet54#1;~active_side_History_1~0 := main_#t~nondet55#1;havoc main_#t~nondet55#1;~active_side_History_2~0 := main_#t~nondet56#1;havoc main_#t~nondet56#1;~manual_selection_History_0~0 := main_#t~nondet57#1;havoc main_#t~nondet57#1;~manual_selection_History_1~0 := main_#t~nondet58#1;havoc main_#t~nondet58#1;~manual_selection_History_2~0 := main_#t~nondet59#1;havoc main_#t~nondet59#1;assume { :begin_inline_init } true;havoc init_#res#1; 3794#L197 assume !(0 != ~side1Failed_History_0~0 % 256); 3795#L200 assume !(0 != ~side2Failed_History_0~0 % 256); 3721#L203 assume !(-2 != ~active_side_History_0~0); 3722#L206 assume !(0 != ~manual_selection_History_0~0); 3738#L209 assume !(0 != ~side1Failed_History_1~0 % 256); 3911#L212 assume !(0 != ~side2Failed_History_1~0 % 256); 3866#L215 assume !(-2 != ~active_side_History_1~0); 3867#L218 assume !(0 != ~manual_selection_History_1~0); 3897#L221 assume !(0 != ~side1Failed_History_2~0 % 256); 3913#L224 assume !(0 != ~side2Failed_History_2~0 % 256); 3832#L227 assume !(-2 != ~active_side_History_2~0); 3833#L230 assume !(0 != ~manual_selection_History_2~0);init_#res#1 := 1; 3784#L233 main_#t~ret60#1 := init_#res#1;assume { :end_inline_init } true;main_~i2~0#1 := main_#t~ret60#1;havoc main_#t~ret60#1;assume { :begin_inline_assume_abort_if_not } true;assume_abort_if_not_#in~cond#1 := main_~i2~0#1;havoc assume_abort_if_not_~cond#1;assume_abort_if_not_~cond#1 := assume_abort_if_not_#in~cond#1; 3785#L58 assume !(0 == assume_abort_if_not_~cond#1); 3868#L57 assume { :end_inline_assume_abort_if_not } true;~cs1_old~0 := ~nomsg~0;~cs1_new~0 := ~nomsg~0;~cs2_old~0 := ~nomsg~0;~cs2_new~0 := ~nomsg~0;~s1s2_old~0 := ~nomsg~0;~s1s2_new~0 := ~nomsg~0;~s1s1_old~0 := ~nomsg~0;~s1s1_new~0 := ~nomsg~0;~s2s1_old~0 := ~nomsg~0;~s2s1_new~0 := ~nomsg~0;~s2s2_old~0 := ~nomsg~0;~s2s2_new~0 := ~nomsg~0;~s1p_old~0 := ~nomsg~0;~s1p_new~0 := ~nomsg~0;~s2p_old~0 := ~nomsg~0;~s2p_new~0 := ~nomsg~0;main_~i2~0#1 := 0; 3791#L578-2 [2021-12-15 17:22:10,116 INFO L793 eck$LassoCheckResult]: Loop: 3791#L578-2 assume !false;assume { :begin_inline_Console_task_each_pals_period } true;havoc Console_task_each_pals_period_#t~nondet4#1, Console_task_each_pals_period_#t~ite5#1, Console_task_each_pals_period_#t~ite6#1, Console_task_each_pals_period_~manual_selection~0#1, Console_task_each_pals_period_~tmp~1#1;havoc Console_task_each_pals_period_~manual_selection~0#1;havoc Console_task_each_pals_period_~tmp~1#1;Console_task_each_pals_period_~tmp~1#1 := Console_task_each_pals_period_#t~nondet4#1;havoc Console_task_each_pals_period_#t~nondet4#1;Console_task_each_pals_period_~manual_selection~0#1 := Console_task_each_pals_period_~tmp~1#1;assume { :begin_inline_write_manual_selection_history } true;write_manual_selection_history_#in~val#1 := Console_task_each_pals_period_~manual_selection~0#1;havoc write_manual_selection_history_~val#1;write_manual_selection_history_~val#1 := write_manual_selection_history_#in~val#1;~manual_selection_History_2~0 := ~manual_selection_History_1~0;~manual_selection_History_1~0 := ~manual_selection_History_0~0;~manual_selection_History_0~0 := write_manual_selection_history_~val#1; 3846#L170 assume { :end_inline_write_manual_selection_history } true; 3891#L258 assume Console_task_each_pals_period_~manual_selection~0#1 != ~nomsg~0 && ~cs1_new~0 == ~nomsg~0;Console_task_each_pals_period_#t~ite5#1 := Console_task_each_pals_period_~manual_selection~0#1; 3892#L258-2 ~cs1_new~0 := (if Console_task_each_pals_period_#t~ite5#1 % 256 <= 127 then Console_task_each_pals_period_#t~ite5#1 % 256 else Console_task_each_pals_period_#t~ite5#1 % 256 - 256);havoc Console_task_each_pals_period_#t~ite5#1; 3909#L259 assume Console_task_each_pals_period_~manual_selection~0#1 != ~nomsg~0 && ~cs2_new~0 == ~nomsg~0;Console_task_each_pals_period_#t~ite6#1 := Console_task_each_pals_period_~manual_selection~0#1; 3910#L259-2 ~cs2_new~0 := (if Console_task_each_pals_period_#t~ite6#1 % 256 <= 127 then Console_task_each_pals_period_#t~ite6#1 % 256 else Console_task_each_pals_period_#t~ite6#1 % 256 - 256);havoc Console_task_each_pals_period_#t~ite6#1;Console_task_each_pals_period_~manual_selection~0#1 := 0; 3872#L261 assume { :end_inline_Console_task_each_pals_period } true;assume { :begin_inline_Side1_activestandby_task_each_pals_period } true;havoc Side1_activestandby_task_each_pals_period_#t~nondet7#1, Side1_activestandby_task_each_pals_period_#t~ite8#1, Side1_activestandby_task_each_pals_period_#t~ite9#1, Side1_activestandby_task_each_pals_period_#t~ite10#1, Side1_activestandby_task_each_pals_period_#t~ite11#1, Side1_activestandby_task_each_pals_period_#t~ite12#1, Side1_activestandby_task_each_pals_period_#t~ite13#1, Side1_activestandby_task_each_pals_period_~side1~0#1, Side1_activestandby_task_each_pals_period_~side2~0#1, Side1_activestandby_task_each_pals_period_~manual_selection~1#1, Side1_activestandby_task_each_pals_period_~next_state~0#1;havoc Side1_activestandby_task_each_pals_period_~side1~0#1;havoc Side1_activestandby_task_each_pals_period_~side2~0#1;havoc Side1_activestandby_task_each_pals_period_~manual_selection~1#1;havoc Side1_activestandby_task_each_pals_period_~next_state~0#1;Side1_activestandby_task_each_pals_period_~side1~0#1 := ~nomsg~0;Side1_activestandby_task_each_pals_period_~side2~0#1 := ~nomsg~0;Side1_activestandby_task_each_pals_period_~manual_selection~1#1 := 0;~side1Failed~0 := Side1_activestandby_task_each_pals_period_#t~nondet7#1;havoc Side1_activestandby_task_each_pals_period_#t~nondet7#1;assume { :begin_inline_write_side1_failed_history } true;write_side1_failed_history_#in~val#1 := ~side1Failed~0;havoc write_side1_failed_history_~val#1;write_side1_failed_history_~val#1 := write_side1_failed_history_#in~val#1;~side1Failed_History_2~0 := ~side1Failed_History_1~0;~side1Failed_History_1~0 := ~side1Failed_History_0~0;~side1Failed_History_0~0 := write_side1_failed_history_~val#1; 3873#L80 assume { :end_inline_write_side1_failed_history } true; 3861#L277 assume 0 != ~side1Failed~0 % 256; 3862#L278 assume !(~nomsg~0 != ~nomsg~0 && ~s1s1_new~0 == ~nomsg~0);Side1_activestandby_task_each_pals_period_#t~ite8#1 := ~s1s1_new~0; 3871#L278-2 ~s1s1_new~0 := (if Side1_activestandby_task_each_pals_period_#t~ite8#1 % 256 <= 127 then Side1_activestandby_task_each_pals_period_#t~ite8#1 % 256 else Side1_activestandby_task_each_pals_period_#t~ite8#1 % 256 - 256);havoc Side1_activestandby_task_each_pals_period_#t~ite8#1; 3767#L279 assume !(~nomsg~0 != ~nomsg~0 && ~s1s2_new~0 == ~nomsg~0);Side1_activestandby_task_each_pals_period_#t~ite9#1 := ~s1s2_new~0; 3733#L279-2 ~s1s2_new~0 := (if Side1_activestandby_task_each_pals_period_#t~ite9#1 % 256 <= 127 then Side1_activestandby_task_each_pals_period_#t~ite9#1 % 256 else Side1_activestandby_task_each_pals_period_#t~ite9#1 % 256 - 256);havoc Side1_activestandby_task_each_pals_period_#t~ite9#1; 3734#L280 assume !(~nomsg~0 != ~nomsg~0 && ~s1p_new~0 == ~nomsg~0);Side1_activestandby_task_each_pals_period_#t~ite10#1 := ~s1p_new~0; 3837#L280-2 ~s1p_new~0 := (if Side1_activestandby_task_each_pals_period_#t~ite10#1 % 256 <= 127 then Side1_activestandby_task_each_pals_period_#t~ite10#1 % 256 else Side1_activestandby_task_each_pals_period_#t~ite10#1 % 256 - 256);havoc Side1_activestandby_task_each_pals_period_#t~ite10#1;~side1_written~0 := ~nomsg~0; 3838#L314 assume { :end_inline_Side1_activestandby_task_each_pals_period } true;assume { :begin_inline_Side2_activestandby_task_each_pals_period } true;havoc Side2_activestandby_task_each_pals_period_#t~nondet14#1, Side2_activestandby_task_each_pals_period_#t~ite15#1, Side2_activestandby_task_each_pals_period_#t~ite16#1, Side2_activestandby_task_each_pals_period_#t~ite17#1, Side2_activestandby_task_each_pals_period_#t~ret18#1, Side2_activestandby_task_each_pals_period_#t~ite19#1, Side2_activestandby_task_each_pals_period_#t~ite20#1, Side2_activestandby_task_each_pals_period_#t~ite21#1, Side2_activestandby_task_each_pals_period_~side1~1#1, Side2_activestandby_task_each_pals_period_~side2~1#1, Side2_activestandby_task_each_pals_period_~manual_selection~2#1, Side2_activestandby_task_each_pals_period_~next_state~1#1;havoc Side2_activestandby_task_each_pals_period_~side1~1#1;havoc Side2_activestandby_task_each_pals_period_~side2~1#1;havoc Side2_activestandby_task_each_pals_period_~manual_selection~2#1;havoc Side2_activestandby_task_each_pals_period_~next_state~1#1;Side2_activestandby_task_each_pals_period_~side1~1#1 := ~nomsg~0;Side2_activestandby_task_each_pals_period_~side2~1#1 := ~nomsg~0;Side2_activestandby_task_each_pals_period_~manual_selection~2#1 := 0;~side2Failed~0 := Side2_activestandby_task_each_pals_period_#t~nondet14#1;havoc Side2_activestandby_task_each_pals_period_#t~nondet14#1;assume { :begin_inline_write_side2_failed_history } true;write_side2_failed_history_#in~val#1 := ~side2Failed~0;havoc write_side2_failed_history_~val#1;write_side2_failed_history_~val#1 := write_side2_failed_history_#in~val#1;~side2Failed_History_2~0 := ~side2Failed_History_1~0;~side2Failed_History_1~0 := ~side2Failed_History_0~0;~side2Failed_History_0~0 := write_side2_failed_history_~val#1; 3976#L110 assume { :end_inline_write_side2_failed_history } true; 3975#L330 assume 0 != ~side2Failed~0 % 256; 3878#L331 assume !(~nomsg~0 != ~nomsg~0 && ~s2s1_new~0 == ~nomsg~0);Side2_activestandby_task_each_pals_period_#t~ite15#1 := ~s2s1_new~0; 3849#L331-2 ~s2s1_new~0 := (if Side2_activestandby_task_each_pals_period_#t~ite15#1 % 256 <= 127 then Side2_activestandby_task_each_pals_period_#t~ite15#1 % 256 else Side2_activestandby_task_each_pals_period_#t~ite15#1 % 256 - 256);havoc Side2_activestandby_task_each_pals_period_#t~ite15#1; 3850#L332 assume !(~nomsg~0 != ~nomsg~0 && ~s2s2_new~0 == ~nomsg~0);Side2_activestandby_task_each_pals_period_#t~ite16#1 := ~s2s2_new~0; 3815#L332-2 ~s2s2_new~0 := (if Side2_activestandby_task_each_pals_period_#t~ite16#1 % 256 <= 127 then Side2_activestandby_task_each_pals_period_#t~ite16#1 % 256 else Side2_activestandby_task_each_pals_period_#t~ite16#1 % 256 - 256);havoc Side2_activestandby_task_each_pals_period_#t~ite16#1; 3816#L333 assume !(~nomsg~0 != ~nomsg~0 && ~s2p_new~0 == ~nomsg~0);Side2_activestandby_task_each_pals_period_#t~ite17#1 := ~s2p_new~0; 3903#L333-2 ~s2p_new~0 := (if Side2_activestandby_task_each_pals_period_#t~ite17#1 % 256 <= 127 then Side2_activestandby_task_each_pals_period_#t~ite17#1 % 256 else Side2_activestandby_task_each_pals_period_#t~ite17#1 % 256 - 256);havoc Side2_activestandby_task_each_pals_period_#t~ite17#1;~side2_written~0 := ~nomsg~0; 3904#L371 assume { :end_inline_Side2_activestandby_task_each_pals_period } true;assume { :begin_inline_Pendulum_prism_task_each_pals_period } true;havoc Pendulum_prism_task_each_pals_period_#t~ret22#1, Pendulum_prism_task_each_pals_period_~active_side~0#1, Pendulum_prism_task_each_pals_period_~tmp~2#1, Pendulum_prism_task_each_pals_period_~side1~2#1, Pendulum_prism_task_each_pals_period_~side2~2#1;havoc Pendulum_prism_task_each_pals_period_~active_side~0#1;havoc Pendulum_prism_task_each_pals_period_~tmp~2#1;havoc Pendulum_prism_task_each_pals_period_~side1~2#1;havoc Pendulum_prism_task_each_pals_period_~side2~2#1;assume { :begin_inline_read_active_side_history } true;read_active_side_history_#in~index#1 := 0;havoc read_active_side_history_#res#1;havoc read_active_side_history_~index#1;read_active_side_history_~index#1 := read_active_side_history_#in~index#1; 3905#L148 assume 0 == read_active_side_history_~index#1 % 256;read_active_side_history_#res#1 := ~active_side_History_0~0; 3977#L158 Pendulum_prism_task_each_pals_period_#t~ret22#1 := read_active_side_history_#res#1;assume { :end_inline_read_active_side_history } true;Pendulum_prism_task_each_pals_period_~tmp~2#1 := Pendulum_prism_task_each_pals_period_#t~ret22#1;havoc Pendulum_prism_task_each_pals_period_#t~ret22#1;Pendulum_prism_task_each_pals_period_~active_side~0#1 := Pendulum_prism_task_each_pals_period_~tmp~2#1;Pendulum_prism_task_each_pals_period_~side1~2#1 := ~nomsg~0;Pendulum_prism_task_each_pals_period_~side2~2#1 := ~nomsg~0;Pendulum_prism_task_each_pals_period_~side1~2#1 := ~s1p_old~0;~s1p_old~0 := ~nomsg~0;Pendulum_prism_task_each_pals_period_~side2~2#1 := ~s2p_old~0;~s2p_old~0 := ~nomsg~0; 3917#L390 assume 1 == Pendulum_prism_task_each_pals_period_~side1~2#1;Pendulum_prism_task_each_pals_period_~active_side~0#1 := 1; 3812#L404 assume { :begin_inline_write_active_side_history } true;write_active_side_history_#in~val#1 := Pendulum_prism_task_each_pals_period_~active_side~0#1;havoc write_active_side_history_~val#1;write_active_side_history_~val#1 := write_active_side_history_#in~val#1;~active_side_History_2~0 := ~active_side_History_1~0;~active_side_History_1~0 := ~active_side_History_0~0;~active_side_History_0~0 := write_active_side_history_~val#1; 3770#L140 assume { :end_inline_write_active_side_history } true; 3771#L414 assume { :end_inline_Pendulum_prism_task_each_pals_period } true;~cs1_old~0 := ~cs1_new~0;~cs1_new~0 := ~nomsg~0;~cs2_old~0 := ~cs2_new~0;~cs2_new~0 := ~nomsg~0;~s1s2_old~0 := ~s1s2_new~0;~s1s2_new~0 := ~nomsg~0;~s1s1_old~0 := ~s1s1_new~0;~s1s1_new~0 := ~nomsg~0;~s2s1_old~0 := ~s2s1_new~0;~s2s1_new~0 := ~nomsg~0;~s2s2_old~0 := ~s2s2_new~0;~s2s2_new~0 := ~nomsg~0;~s1p_old~0 := ~s1p_new~0;~s1p_new~0 := ~nomsg~0;~s2p_old~0 := ~s2p_new~0;~s2p_new~0 := ~nomsg~0;assume { :begin_inline_check } true;havoc check_#res#1;havoc check_#t~ret23#1, check_#t~ret24#1, check_#t~ret25#1, check_#t~ret26#1, check_#t~ret27#1, check_#t~ret28#1, check_#t~ret29#1, check_#t~ret30#1, check_#t~ret31#1, check_#t~ret32#1, check_#t~ret33#1, check_#t~ret34#1, check_#t~ret35#1, check_#t~ret36#1, check_#t~ret37#1, check_#t~ret38#1, check_#t~ret39#1, check_#t~ret40#1, check_#t~ret41#1, check_#t~ret42#1, check_#t~ret43#1, check_~tmp~3#1, check_~tmp___0~0#1, check_~tmp___1~0#1, check_~tmp___2~0#1, check_~tmp___3~0#1, check_~tmp___4~0#1, check_~tmp___5~0#1, check_~tmp___6~0#1, check_~tmp___7~0#1, check_~tmp___8~0#1, check_~tmp___9~0#1, check_~tmp___10~0#1, check_~tmp___11~0#1, check_~tmp___12~0#1, check_~tmp___13~0#1, check_~tmp___14~0#1, check_~tmp___15~0#1, check_~tmp___16~0#1, check_~tmp___17~0#1, check_~tmp___18~0#1, check_~tmp___19~0#1, check_~tmp___20~0#1;havoc check_~tmp~3#1;havoc check_~tmp___0~0#1;havoc check_~tmp___1~0#1;havoc check_~tmp___2~0#1;havoc check_~tmp___3~0#1;havoc check_~tmp___4~0#1;havoc check_~tmp___5~0#1;havoc check_~tmp___6~0#1;havoc check_~tmp___7~0#1;havoc check_~tmp___8~0#1;havoc check_~tmp___9~0#1;havoc check_~tmp___10~0#1;havoc check_~tmp___11~0#1;havoc check_~tmp___12~0#1;havoc check_~tmp___13~0#1;havoc check_~tmp___14~0#1;havoc check_~tmp___15~0#1;havoc check_~tmp___16~0#1;havoc check_~tmp___17~0#1;havoc check_~tmp___18~0#1;havoc check_~tmp___19~0#1;havoc check_~tmp___20~0#1; 3777#L443 assume !(0 == ~side1Failed~0 % 256); 3778#L446 assume !(0 == ~side2Failed~0 % 256);check_~tmp~3#1 := 0; 3779#L446-2 assume { :begin_inline_assume_abort_if_not } true;assume_abort_if_not_#in~cond#1 := (if 0 == check_~tmp~3#1 then 0 else 1) % 256;havoc assume_abort_if_not_~cond#1;assume_abort_if_not_~cond#1 := assume_abort_if_not_#in~cond#1; 3780#L58-2 assume !(0 == assume_abort_if_not_~cond#1); 3707#L57-1 assume { :end_inline_assume_abort_if_not } true;assume { :begin_inline_read_manual_selection_history } true;read_manual_selection_history_#in~index#1 := 1;havoc read_manual_selection_history_#res#1;havoc read_manual_selection_history_~index#1;read_manual_selection_history_~index#1 := read_manual_selection_history_#in~index#1; 3708#L178 assume !(0 == read_manual_selection_history_~index#1 % 256); 3725#L181 assume 1 == read_manual_selection_history_~index#1 % 256;read_manual_selection_history_#res#1 := ~manual_selection_History_1~0; 3711#L188 check_#t~ret23#1 := read_manual_selection_history_#res#1;assume { :end_inline_read_manual_selection_history } true;check_~tmp___0~0#1 := check_#t~ret23#1;havoc check_#t~ret23#1; 3712#L453 assume !(0 == check_~tmp___0~0#1); 3682#L453-1 assume { :begin_inline_read_side1_failed_history } true;read_side1_failed_history_#in~index#1 := 1;havoc read_side1_failed_history_#res#1;havoc read_side1_failed_history_~index#1;read_side1_failed_history_~index#1 := read_side1_failed_history_#in~index#1; 3703#L88-2 assume !(0 == read_side1_failed_history_~index#1 % 256); 3704#L91-2 assume 1 == read_side1_failed_history_~index#1 % 256;read_side1_failed_history_#res#1 := ~side1Failed_History_1~0; 3789#L98-2 check_#t~ret28#1 := read_side1_failed_history_#res#1;assume { :end_inline_read_side1_failed_history } true;check_~tmp___7~0#1 := check_#t~ret28#1;havoc check_#t~ret28#1; 3914#L483 assume 0 != check_~tmp___7~0#1 % 256;assume { :begin_inline_read_side2_failed_history } true;read_side2_failed_history_#in~index#1 := 1;havoc read_side2_failed_history_#res#1;havoc read_side2_failed_history_~index#1;read_side2_failed_history_~index#1 := read_side2_failed_history_#in~index#1; 3772#L118-2 assume 0 == read_side2_failed_history_~index#1 % 256;read_side2_failed_history_#res#1 := ~side2Failed_History_0~0; 3716#L128-2 check_#t~ret29#1 := read_side2_failed_history_#res#1;assume { :end_inline_read_side2_failed_history } true;check_~tmp___8~0#1 := check_#t~ret29#1;havoc check_#t~ret29#1; 3828#L485 assume 0 == check_~tmp___8~0#1 % 256;assume { :begin_inline_read_active_side_history } true;read_active_side_history_#in~index#1 := 0;havoc read_active_side_history_#res#1;havoc read_active_side_history_~index#1;read_active_side_history_~index#1 := read_active_side_history_#in~index#1; 3829#L148-1 assume 0 == read_active_side_history_~index#1 % 256;read_active_side_history_#res#1 := ~active_side_History_0~0; 3696#L158-1 check_#t~ret30#1 := read_active_side_history_#res#1;assume { :end_inline_read_active_side_history } true;check_~tmp___5~0#1 := check_#t~ret30#1;havoc check_#t~ret30#1; 3882#L487 assume !(2 == check_~tmp___5~0#1);check_#res#1 := 0; 3714#L533 main_#t~ret61#1 := check_#res#1;assume { :end_inline_check } true;main_~c1~0#1 := main_#t~ret61#1;havoc main_#t~ret61#1;assume { :begin_inline_assert } true;assert_#in~arg#1 := (if 0 == main_~c1~0#1 then 0 else 1);havoc assert_~arg#1;assert_~arg#1 := assert_#in~arg#1; 3855#L612-44 assume !(0 == assert_~arg#1 % 256); 3790#L607-22 assume { :end_inline_assert } true; 3791#L578-2 [2021-12-15 17:22:10,117 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-15 17:22:10,117 INFO L85 PathProgramCache]: Analyzing trace with hash -613005151, now seen corresponding path program 5 times [2021-12-15 17:22:10,117 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-15 17:22:10,118 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1193527436] [2021-12-15 17:22:10,118 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-15 17:22:10,118 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-15 17:22:10,127 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-15 17:22:10,127 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-12-15 17:22:10,152 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-15 17:22:10,159 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-12-15 17:22:10,160 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-15 17:22:10,160 INFO L85 PathProgramCache]: Analyzing trace with hash -1391001106, now seen corresponding path program 1 times [2021-12-15 17:22:10,160 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-15 17:22:10,160 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1025405418] [2021-12-15 17:22:10,160 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-15 17:22:10,161 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-15 17:22:10,191 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-15 17:22:10,228 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-15 17:22:10,228 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-15 17:22:10,228 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1025405418] [2021-12-15 17:22:10,228 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1025405418] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-15 17:22:10,229 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-15 17:22:10,229 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-15 17:22:10,229 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [151046019] [2021-12-15 17:22:10,229 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-15 17:22:10,230 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-12-15 17:22:10,230 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-15 17:22:10,231 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-15 17:22:10,231 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-15 17:22:10,231 INFO L87 Difference]: Start difference. First operand 308 states and 454 transitions. cyclomatic complexity: 147 Second operand has 3 states, 3 states have (on average 18.0) internal successors, (54), 3 states have internal predecessors, (54), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-15 17:22:10,281 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-15 17:22:10,281 INFO L93 Difference]: Finished difference Result 497 states and 723 transitions. [2021-12-15 17:22:10,282 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-15 17:22:10,283 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 497 states and 723 transitions. [2021-12-15 17:22:10,287 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 480 [2021-12-15 17:22:10,289 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 497 states to 497 states and 723 transitions. [2021-12-15 17:22:10,290 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 497 [2021-12-15 17:22:10,290 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 497 [2021-12-15 17:22:10,290 INFO L73 IsDeterministic]: Start isDeterministic. Operand 497 states and 723 transitions. [2021-12-15 17:22:10,292 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-12-15 17:22:10,294 INFO L681 BuchiCegarLoop]: Abstraction has 497 states and 723 transitions. [2021-12-15 17:22:10,295 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 497 states and 723 transitions. [2021-12-15 17:22:10,300 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 497 to 296. [2021-12-15 17:22:10,301 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 296 states, 296 states have (on average 1.4527027027027026) internal successors, (430), 295 states have internal predecessors, (430), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-15 17:22:10,302 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 296 states to 296 states and 430 transitions. [2021-12-15 17:22:10,302 INFO L704 BuchiCegarLoop]: Abstraction has 296 states and 430 transitions. [2021-12-15 17:22:10,302 INFO L587 BuchiCegarLoop]: Abstraction has 296 states and 430 transitions. [2021-12-15 17:22:10,302 INFO L425 BuchiCegarLoop]: ======== Iteration 7============ [2021-12-15 17:22:10,302 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 296 states and 430 transitions. [2021-12-15 17:22:10,305 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 279 [2021-12-15 17:22:10,305 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-15 17:22:10,305 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-15 17:22:10,306 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-15 17:22:10,306 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-15 17:22:10,306 INFO L791 eck$LassoCheckResult]: Stem: 4718#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(52, 2);call #Ultimate.allocInit(12, 3);~nomsg~0 := -1;~cs1~0 := 0;~cs1_old~0 := 0;~cs1_new~0 := 0;~cs2~0 := 0;~cs2_old~0 := 0;~cs2_new~0 := 0;~s1s2~0 := 0;~s1s2_old~0 := 0;~s1s2_new~0 := 0;~s1s1~0 := 0;~s1s1_old~0 := 0;~s1s1_new~0 := 0;~s2s1~0 := 0;~s2s1_old~0 := 0;~s2s1_new~0 := 0;~s2s2~0 := 0;~s2s2_old~0 := 0;~s2s2_new~0 := 0;~s1p~0 := 0;~s1p_old~0 := 0;~s1p_new~0 := 0;~s2p~0 := 0;~s2p_old~0 := 0;~s2p_new~0 := 0;~side1Failed~0 := 0;~side2Failed~0 := 0;~side1_written~0 := 0;~side2_written~0 := 0;~side1Failed_History_0~0 := 0;~side1Failed_History_1~0 := 0;~side1Failed_History_2~0 := 0;~side2Failed_History_0~0 := 0;~side2Failed_History_1~0 := 0;~side2Failed_History_2~0 := 0;~active_side_History_0~0 := 0;~active_side_History_1~0 := 0;~active_side_History_2~0 := 0;~manual_selection_History_0~0 := 0;~manual_selection_History_1~0 := 0;~manual_selection_History_2~0 := 0; 4695#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~nondet44#1, main_#t~nondet45#1, main_#t~nondet46#1, main_#t~nondet47#1, main_#t~nondet48#1, main_#t~nondet49#1, main_#t~nondet50#1, main_#t~nondet51#1, main_#t~nondet52#1, main_#t~nondet53#1, main_#t~nondet54#1, main_#t~nondet55#1, main_#t~nondet56#1, main_#t~nondet57#1, main_#t~nondet58#1, main_#t~nondet59#1, main_#t~ret60#1, main_#t~ret61#1, main_~c1~0#1, main_~i2~0#1;havoc main_~c1~0#1;havoc main_~i2~0#1;main_~c1~0#1 := 0;~side1Failed~0 := main_#t~nondet44#1;havoc main_#t~nondet44#1;~side2Failed~0 := main_#t~nondet45#1;havoc main_#t~nondet45#1;~side1_written~0 := main_#t~nondet46#1;havoc main_#t~nondet46#1;~side2_written~0 := main_#t~nondet47#1;havoc main_#t~nondet47#1;~side1Failed_History_0~0 := main_#t~nondet48#1;havoc main_#t~nondet48#1;~side1Failed_History_1~0 := main_#t~nondet49#1;havoc main_#t~nondet49#1;~side1Failed_History_2~0 := main_#t~nondet50#1;havoc main_#t~nondet50#1;~side2Failed_History_0~0 := main_#t~nondet51#1;havoc main_#t~nondet51#1;~side2Failed_History_1~0 := main_#t~nondet52#1;havoc main_#t~nondet52#1;~side2Failed_History_2~0 := main_#t~nondet53#1;havoc main_#t~nondet53#1;~active_side_History_0~0 := main_#t~nondet54#1;havoc main_#t~nondet54#1;~active_side_History_1~0 := main_#t~nondet55#1;havoc main_#t~nondet55#1;~active_side_History_2~0 := main_#t~nondet56#1;havoc main_#t~nondet56#1;~manual_selection_History_0~0 := main_#t~nondet57#1;havoc main_#t~nondet57#1;~manual_selection_History_1~0 := main_#t~nondet58#1;havoc main_#t~nondet58#1;~manual_selection_History_2~0 := main_#t~nondet59#1;havoc main_#t~nondet59#1;assume { :begin_inline_init } true;havoc init_#res#1; 4597#L197 assume !(0 != ~side1Failed_History_0~0 % 256); 4598#L200 assume !(0 != ~side2Failed_History_0~0 % 256); 4526#L203 assume !(-2 != ~active_side_History_0~0); 4527#L206 assume !(0 != ~manual_selection_History_0~0); 4543#L209 assume !(0 != ~side1Failed_History_1~0 % 256); 4710#L212 assume !(0 != ~side2Failed_History_1~0 % 256); 4664#L215 assume !(-2 != ~active_side_History_1~0); 4665#L218 assume !(0 != ~manual_selection_History_1~0); 4696#L221 assume !(0 != ~side1Failed_History_2~0 % 256); 4712#L224 assume !(0 != ~side2Failed_History_2~0 % 256); 4631#L227 assume !(-2 != ~active_side_History_2~0); 4632#L230 assume !(0 != ~manual_selection_History_2~0);init_#res#1 := 1; 4590#L233 main_#t~ret60#1 := init_#res#1;assume { :end_inline_init } true;main_~i2~0#1 := main_#t~ret60#1;havoc main_#t~ret60#1;assume { :begin_inline_assume_abort_if_not } true;assume_abort_if_not_#in~cond#1 := main_~i2~0#1;havoc assume_abort_if_not_~cond#1;assume_abort_if_not_~cond#1 := assume_abort_if_not_#in~cond#1; 4591#L58 assume !(0 == assume_abort_if_not_~cond#1); 4668#L57 assume { :end_inline_assume_abort_if_not } true;~cs1_old~0 := ~nomsg~0;~cs1_new~0 := ~nomsg~0;~cs2_old~0 := ~nomsg~0;~cs2_new~0 := ~nomsg~0;~s1s2_old~0 := ~nomsg~0;~s1s2_new~0 := ~nomsg~0;~s1s1_old~0 := ~nomsg~0;~s1s1_new~0 := ~nomsg~0;~s2s1_old~0 := ~nomsg~0;~s2s1_new~0 := ~nomsg~0;~s2s2_old~0 := ~nomsg~0;~s2s2_new~0 := ~nomsg~0;~s1p_old~0 := ~nomsg~0;~s1p_new~0 := ~nomsg~0;~s2p_old~0 := ~nomsg~0;~s2p_new~0 := ~nomsg~0;main_~i2~0#1 := 0; 4594#L578-2 [2021-12-15 17:22:10,307 INFO L793 eck$LassoCheckResult]: Loop: 4594#L578-2 assume !false;assume { :begin_inline_Console_task_each_pals_period } true;havoc Console_task_each_pals_period_#t~nondet4#1, Console_task_each_pals_period_#t~ite5#1, Console_task_each_pals_period_#t~ite6#1, Console_task_each_pals_period_~manual_selection~0#1, Console_task_each_pals_period_~tmp~1#1;havoc Console_task_each_pals_period_~manual_selection~0#1;havoc Console_task_each_pals_period_~tmp~1#1;Console_task_each_pals_period_~tmp~1#1 := Console_task_each_pals_period_#t~nondet4#1;havoc Console_task_each_pals_period_#t~nondet4#1;Console_task_each_pals_period_~manual_selection~0#1 := Console_task_each_pals_period_~tmp~1#1;assume { :begin_inline_write_manual_selection_history } true;write_manual_selection_history_#in~val#1 := Console_task_each_pals_period_~manual_selection~0#1;havoc write_manual_selection_history_~val#1;write_manual_selection_history_~val#1 := write_manual_selection_history_#in~val#1;~manual_selection_History_2~0 := ~manual_selection_History_1~0;~manual_selection_History_1~0 := ~manual_selection_History_0~0;~manual_selection_History_0~0 := write_manual_selection_history_~val#1; 4644#L170 assume { :end_inline_write_manual_selection_history } true; 4690#L258 assume Console_task_each_pals_period_~manual_selection~0#1 != ~nomsg~0 && ~cs1_new~0 == ~nomsg~0;Console_task_each_pals_period_#t~ite5#1 := Console_task_each_pals_period_~manual_selection~0#1; 4691#L258-2 ~cs1_new~0 := (if Console_task_each_pals_period_#t~ite5#1 % 256 <= 127 then Console_task_each_pals_period_#t~ite5#1 % 256 else Console_task_each_pals_period_#t~ite5#1 % 256 - 256);havoc Console_task_each_pals_period_#t~ite5#1; 4707#L259 assume Console_task_each_pals_period_~manual_selection~0#1 != ~nomsg~0 && ~cs2_new~0 == ~nomsg~0;Console_task_each_pals_period_#t~ite6#1 := Console_task_each_pals_period_~manual_selection~0#1; 4708#L259-2 ~cs2_new~0 := (if Console_task_each_pals_period_#t~ite6#1 % 256 <= 127 then Console_task_each_pals_period_#t~ite6#1 % 256 else Console_task_each_pals_period_#t~ite6#1 % 256 - 256);havoc Console_task_each_pals_period_#t~ite6#1;Console_task_each_pals_period_~manual_selection~0#1 := 0; 4670#L261 assume { :end_inline_Console_task_each_pals_period } true;assume { :begin_inline_Side1_activestandby_task_each_pals_period } true;havoc Side1_activestandby_task_each_pals_period_#t~nondet7#1, Side1_activestandby_task_each_pals_period_#t~ite8#1, Side1_activestandby_task_each_pals_period_#t~ite9#1, Side1_activestandby_task_each_pals_period_#t~ite10#1, Side1_activestandby_task_each_pals_period_#t~ite11#1, Side1_activestandby_task_each_pals_period_#t~ite12#1, Side1_activestandby_task_each_pals_period_#t~ite13#1, Side1_activestandby_task_each_pals_period_~side1~0#1, Side1_activestandby_task_each_pals_period_~side2~0#1, Side1_activestandby_task_each_pals_period_~manual_selection~1#1, Side1_activestandby_task_each_pals_period_~next_state~0#1;havoc Side1_activestandby_task_each_pals_period_~side1~0#1;havoc Side1_activestandby_task_each_pals_period_~side2~0#1;havoc Side1_activestandby_task_each_pals_period_~manual_selection~1#1;havoc Side1_activestandby_task_each_pals_period_~next_state~0#1;Side1_activestandby_task_each_pals_period_~side1~0#1 := ~nomsg~0;Side1_activestandby_task_each_pals_period_~side2~0#1 := ~nomsg~0;Side1_activestandby_task_each_pals_period_~manual_selection~1#1 := 0;~side1Failed~0 := Side1_activestandby_task_each_pals_period_#t~nondet7#1;havoc Side1_activestandby_task_each_pals_period_#t~nondet7#1;assume { :begin_inline_write_side1_failed_history } true;write_side1_failed_history_#in~val#1 := ~side1Failed~0;havoc write_side1_failed_history_~val#1;write_side1_failed_history_~val#1 := write_side1_failed_history_#in~val#1;~side1Failed_History_2~0 := ~side1Failed_History_1~0;~side1Failed_History_1~0 := ~side1Failed_History_0~0;~side1Failed_History_0~0 := write_side1_failed_history_~val#1; 4671#L80 assume { :end_inline_write_side1_failed_history } true; 4659#L277 assume 0 != ~side1Failed~0 % 256; 4660#L278 assume !(~nomsg~0 != ~nomsg~0 && ~s1s1_new~0 == ~nomsg~0);Side1_activestandby_task_each_pals_period_#t~ite8#1 := ~s1s1_new~0; 4669#L278-2 ~s1s1_new~0 := (if Side1_activestandby_task_each_pals_period_#t~ite8#1 % 256 <= 127 then Side1_activestandby_task_each_pals_period_#t~ite8#1 % 256 else Side1_activestandby_task_each_pals_period_#t~ite8#1 % 256 - 256);havoc Side1_activestandby_task_each_pals_period_#t~ite8#1; 4573#L279 assume !(~nomsg~0 != ~nomsg~0 && ~s1s2_new~0 == ~nomsg~0);Side1_activestandby_task_each_pals_period_#t~ite9#1 := ~s1s2_new~0; 4538#L279-2 ~s1s2_new~0 := (if Side1_activestandby_task_each_pals_period_#t~ite9#1 % 256 <= 127 then Side1_activestandby_task_each_pals_period_#t~ite9#1 % 256 else Side1_activestandby_task_each_pals_period_#t~ite9#1 % 256 - 256);havoc Side1_activestandby_task_each_pals_period_#t~ite9#1; 4539#L280 assume !(~nomsg~0 != ~nomsg~0 && ~s1p_new~0 == ~nomsg~0);Side1_activestandby_task_each_pals_period_#t~ite10#1 := ~s1p_new~0; 4635#L280-2 ~s1p_new~0 := (if Side1_activestandby_task_each_pals_period_#t~ite10#1 % 256 <= 127 then Side1_activestandby_task_each_pals_period_#t~ite10#1 % 256 else Side1_activestandby_task_each_pals_period_#t~ite10#1 % 256 - 256);havoc Side1_activestandby_task_each_pals_period_#t~ite10#1;~side1_written~0 := ~nomsg~0; 4636#L314 assume { :end_inline_Side1_activestandby_task_each_pals_period } true;assume { :begin_inline_Side2_activestandby_task_each_pals_period } true;havoc Side2_activestandby_task_each_pals_period_#t~nondet14#1, Side2_activestandby_task_each_pals_period_#t~ite15#1, Side2_activestandby_task_each_pals_period_#t~ite16#1, Side2_activestandby_task_each_pals_period_#t~ite17#1, Side2_activestandby_task_each_pals_period_#t~ret18#1, Side2_activestandby_task_each_pals_period_#t~ite19#1, Side2_activestandby_task_each_pals_period_#t~ite20#1, Side2_activestandby_task_each_pals_period_#t~ite21#1, Side2_activestandby_task_each_pals_period_~side1~1#1, Side2_activestandby_task_each_pals_period_~side2~1#1, Side2_activestandby_task_each_pals_period_~manual_selection~2#1, Side2_activestandby_task_each_pals_period_~next_state~1#1;havoc Side2_activestandby_task_each_pals_period_~side1~1#1;havoc Side2_activestandby_task_each_pals_period_~side2~1#1;havoc Side2_activestandby_task_each_pals_period_~manual_selection~2#1;havoc Side2_activestandby_task_each_pals_period_~next_state~1#1;Side2_activestandby_task_each_pals_period_~side1~1#1 := ~nomsg~0;Side2_activestandby_task_each_pals_period_~side2~1#1 := ~nomsg~0;Side2_activestandby_task_each_pals_period_~manual_selection~2#1 := 0;~side2Failed~0 := Side2_activestandby_task_each_pals_period_#t~nondet14#1;havoc Side2_activestandby_task_each_pals_period_#t~nondet14#1;assume { :begin_inline_write_side2_failed_history } true;write_side2_failed_history_#in~val#1 := ~side2Failed~0;havoc write_side2_failed_history_~val#1;write_side2_failed_history_~val#1 := write_side2_failed_history_#in~val#1;~side2Failed_History_2~0 := ~side2Failed_History_1~0;~side2Failed_History_1~0 := ~side2Failed_History_0~0;~side2Failed_History_0~0 := write_side2_failed_history_~val#1; 4596#L110 assume { :end_inline_write_side2_failed_history } true; 4567#L330 assume 0 != ~side2Failed~0 % 256; 4568#L331 assume !(~nomsg~0 != ~nomsg~0 && ~s2s1_new~0 == ~nomsg~0);Side2_activestandby_task_each_pals_period_#t~ite15#1 := ~s2s1_new~0; 4781#L331-2 ~s2s1_new~0 := (if Side2_activestandby_task_each_pals_period_#t~ite15#1 % 256 <= 127 then Side2_activestandby_task_each_pals_period_#t~ite15#1 % 256 else Side2_activestandby_task_each_pals_period_#t~ite15#1 % 256 - 256);havoc Side2_activestandby_task_each_pals_period_#t~ite15#1; 4780#L332 assume !(~nomsg~0 != ~nomsg~0 && ~s2s2_new~0 == ~nomsg~0);Side2_activestandby_task_each_pals_period_#t~ite16#1 := ~s2s2_new~0; 4779#L332-2 ~s2s2_new~0 := (if Side2_activestandby_task_each_pals_period_#t~ite16#1 % 256 <= 127 then Side2_activestandby_task_each_pals_period_#t~ite16#1 % 256 else Side2_activestandby_task_each_pals_period_#t~ite16#1 % 256 - 256);havoc Side2_activestandby_task_each_pals_period_#t~ite16#1; 4778#L333 assume !(~nomsg~0 != ~nomsg~0 && ~s2p_new~0 == ~nomsg~0);Side2_activestandby_task_each_pals_period_#t~ite17#1 := ~s2p_new~0; 4777#L333-2 ~s2p_new~0 := (if Side2_activestandby_task_each_pals_period_#t~ite17#1 % 256 <= 127 then Side2_activestandby_task_each_pals_period_#t~ite17#1 % 256 else Side2_activestandby_task_each_pals_period_#t~ite17#1 % 256 - 256);havoc Side2_activestandby_task_each_pals_period_#t~ite17#1;~side2_written~0 := ~nomsg~0; 4776#L371 assume { :end_inline_Side2_activestandby_task_each_pals_period } true;assume { :begin_inline_Pendulum_prism_task_each_pals_period } true;havoc Pendulum_prism_task_each_pals_period_#t~ret22#1, Pendulum_prism_task_each_pals_period_~active_side~0#1, Pendulum_prism_task_each_pals_period_~tmp~2#1, Pendulum_prism_task_each_pals_period_~side1~2#1, Pendulum_prism_task_each_pals_period_~side2~2#1;havoc Pendulum_prism_task_each_pals_period_~active_side~0#1;havoc Pendulum_prism_task_each_pals_period_~tmp~2#1;havoc Pendulum_prism_task_each_pals_period_~side1~2#1;havoc Pendulum_prism_task_each_pals_period_~side2~2#1;assume { :begin_inline_read_active_side_history } true;read_active_side_history_#in~index#1 := 0;havoc read_active_side_history_#res#1;havoc read_active_side_history_~index#1;read_active_side_history_~index#1 := read_active_side_history_#in~index#1; 4771#L148 assume 0 == read_active_side_history_~index#1 % 256;read_active_side_history_#res#1 := ~active_side_History_0~0; 4770#L158 Pendulum_prism_task_each_pals_period_#t~ret22#1 := read_active_side_history_#res#1;assume { :end_inline_read_active_side_history } true;Pendulum_prism_task_each_pals_period_~tmp~2#1 := Pendulum_prism_task_each_pals_period_#t~ret22#1;havoc Pendulum_prism_task_each_pals_period_#t~ret22#1;Pendulum_prism_task_each_pals_period_~active_side~0#1 := Pendulum_prism_task_each_pals_period_~tmp~2#1;Pendulum_prism_task_each_pals_period_~side1~2#1 := ~nomsg~0;Pendulum_prism_task_each_pals_period_~side2~2#1 := ~nomsg~0;Pendulum_prism_task_each_pals_period_~side1~2#1 := ~s1p_old~0;~s1p_old~0 := ~nomsg~0;Pendulum_prism_task_each_pals_period_~side2~2#1 := ~s2p_old~0;~s2p_old~0 := ~nomsg~0; 4769#L390 assume 1 == Pendulum_prism_task_each_pals_period_~side1~2#1;Pendulum_prism_task_each_pals_period_~active_side~0#1 := 1; 4763#L404 assume { :begin_inline_write_active_side_history } true;write_active_side_history_#in~val#1 := Pendulum_prism_task_each_pals_period_~active_side~0#1;havoc write_active_side_history_~val#1;write_active_side_history_~val#1 := write_active_side_history_#in~val#1;~active_side_History_2~0 := ~active_side_History_1~0;~active_side_History_1~0 := ~active_side_History_0~0;~active_side_History_0~0 := write_active_side_history_~val#1; 4762#L140 assume { :end_inline_write_active_side_history } true; 4761#L414 assume { :end_inline_Pendulum_prism_task_each_pals_period } true;~cs1_old~0 := ~cs1_new~0;~cs1_new~0 := ~nomsg~0;~cs2_old~0 := ~cs2_new~0;~cs2_new~0 := ~nomsg~0;~s1s2_old~0 := ~s1s2_new~0;~s1s2_new~0 := ~nomsg~0;~s1s1_old~0 := ~s1s1_new~0;~s1s1_new~0 := ~nomsg~0;~s2s1_old~0 := ~s2s1_new~0;~s2s1_new~0 := ~nomsg~0;~s2s2_old~0 := ~s2s2_new~0;~s2s2_new~0 := ~nomsg~0;~s1p_old~0 := ~s1p_new~0;~s1p_new~0 := ~nomsg~0;~s2p_old~0 := ~s2p_new~0;~s2p_new~0 := ~nomsg~0;assume { :begin_inline_check } true;havoc check_#res#1;havoc check_#t~ret23#1, check_#t~ret24#1, check_#t~ret25#1, check_#t~ret26#1, check_#t~ret27#1, check_#t~ret28#1, check_#t~ret29#1, check_#t~ret30#1, check_#t~ret31#1, check_#t~ret32#1, check_#t~ret33#1, check_#t~ret34#1, check_#t~ret35#1, check_#t~ret36#1, check_#t~ret37#1, check_#t~ret38#1, check_#t~ret39#1, check_#t~ret40#1, check_#t~ret41#1, check_#t~ret42#1, check_#t~ret43#1, check_~tmp~3#1, check_~tmp___0~0#1, check_~tmp___1~0#1, check_~tmp___2~0#1, check_~tmp___3~0#1, check_~tmp___4~0#1, check_~tmp___5~0#1, check_~tmp___6~0#1, check_~tmp___7~0#1, check_~tmp___8~0#1, check_~tmp___9~0#1, check_~tmp___10~0#1, check_~tmp___11~0#1, check_~tmp___12~0#1, check_~tmp___13~0#1, check_~tmp___14~0#1, check_~tmp___15~0#1, check_~tmp___16~0#1, check_~tmp___17~0#1, check_~tmp___18~0#1, check_~tmp___19~0#1, check_~tmp___20~0#1;havoc check_~tmp~3#1;havoc check_~tmp___0~0#1;havoc check_~tmp___1~0#1;havoc check_~tmp___2~0#1;havoc check_~tmp___3~0#1;havoc check_~tmp___4~0#1;havoc check_~tmp___5~0#1;havoc check_~tmp___6~0#1;havoc check_~tmp___7~0#1;havoc check_~tmp___8~0#1;havoc check_~tmp___9~0#1;havoc check_~tmp___10~0#1;havoc check_~tmp___11~0#1;havoc check_~tmp___12~0#1;havoc check_~tmp___13~0#1;havoc check_~tmp___14~0#1;havoc check_~tmp___15~0#1;havoc check_~tmp___16~0#1;havoc check_~tmp___17~0#1;havoc check_~tmp___18~0#1;havoc check_~tmp___19~0#1;havoc check_~tmp___20~0#1; 4582#L443 assume !(0 == ~side1Failed~0 % 256); 4583#L446 assume !(0 == ~side2Failed~0 % 256);check_~tmp~3#1 := 0; 4584#L446-2 assume { :begin_inline_assume_abort_if_not } true;assume_abort_if_not_#in~cond#1 := (if 0 == check_~tmp~3#1 then 0 else 1) % 256;havoc assume_abort_if_not_~cond#1;assume_abort_if_not_~cond#1 := assume_abort_if_not_#in~cond#1; 4585#L58-2 assume !(0 == assume_abort_if_not_~cond#1); 4516#L57-1 assume { :end_inline_assume_abort_if_not } true;assume { :begin_inline_read_manual_selection_history } true;read_manual_selection_history_#in~index#1 := 1;havoc read_manual_selection_history_#res#1;havoc read_manual_selection_history_~index#1;read_manual_selection_history_~index#1 := read_manual_selection_history_#in~index#1; 4517#L178 assume !(0 == read_manual_selection_history_~index#1 % 256); 4530#L181 assume 1 == read_manual_selection_history_~index#1 % 256;read_manual_selection_history_#res#1 := ~manual_selection_History_1~0; 4518#L188 check_#t~ret23#1 := read_manual_selection_history_#res#1;assume { :end_inline_read_manual_selection_history } true;check_~tmp___0~0#1 := check_#t~ret23#1;havoc check_#t~ret23#1; 4519#L453 assume !(0 == check_~tmp___0~0#1); 4493#L453-1 assume { :begin_inline_read_side1_failed_history } true;read_side1_failed_history_#in~index#1 := 1;havoc read_side1_failed_history_#res#1;havoc read_side1_failed_history_~index#1;read_side1_failed_history_~index#1 := read_side1_failed_history_#in~index#1; 4512#L88-2 assume !(0 == read_side1_failed_history_~index#1 % 256); 4513#L91-2 assume 1 == read_side1_failed_history_~index#1 % 256;read_side1_failed_history_#res#1 := ~side1Failed_History_1~0; 4592#L98-2 check_#t~ret28#1 := read_side1_failed_history_#res#1;assume { :end_inline_read_side1_failed_history } true;check_~tmp___7~0#1 := check_#t~ret28#1;havoc check_#t~ret28#1; 4713#L483 assume 0 != check_~tmp___7~0#1 % 256;assume { :begin_inline_read_side2_failed_history } true;read_side2_failed_history_#in~index#1 := 1;havoc read_side2_failed_history_#res#1;havoc read_side2_failed_history_~index#1;read_side2_failed_history_~index#1 := read_side2_failed_history_#in~index#1; 4577#L118-2 assume !(0 == read_side2_failed_history_~index#1 % 256); 4578#L121-2 assume 1 == read_side2_failed_history_~index#1 % 256;read_side2_failed_history_#res#1 := ~side2Failed_History_1~0; 4676#L128-2 check_#t~ret29#1 := read_side2_failed_history_#res#1;assume { :end_inline_read_side2_failed_history } true;check_~tmp___8~0#1 := check_#t~ret29#1;havoc check_#t~ret29#1; 4627#L485 assume 0 == check_~tmp___8~0#1 % 256;assume { :begin_inline_read_active_side_history } true;read_active_side_history_#in~index#1 := 0;havoc read_active_side_history_#res#1;havoc read_active_side_history_~index#1;read_active_side_history_~index#1 := read_active_side_history_#in~index#1; 4628#L148-1 assume 0 == read_active_side_history_~index#1 % 256;read_active_side_history_#res#1 := ~active_side_History_0~0; 4505#L158-1 check_#t~ret30#1 := read_active_side_history_#res#1;assume { :end_inline_read_active_side_history } true;check_~tmp___5~0#1 := check_#t~ret30#1;havoc check_#t~ret30#1; 4681#L487 assume !(2 == check_~tmp___5~0#1);check_#res#1 := 0; 4521#L533 main_#t~ret61#1 := check_#res#1;assume { :end_inline_check } true;main_~c1~0#1 := main_#t~ret61#1;havoc main_#t~ret61#1;assume { :begin_inline_assert } true;assert_#in~arg#1 := (if 0 == main_~c1~0#1 then 0 else 1);havoc assert_~arg#1;assert_~arg#1 := assert_#in~arg#1; 4653#L612-44 assume !(0 == assert_~arg#1 % 256); 4593#L607-22 assume { :end_inline_assert } true; 4594#L578-2 [2021-12-15 17:22:10,307 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-15 17:22:10,307 INFO L85 PathProgramCache]: Analyzing trace with hash -613005151, now seen corresponding path program 6 times [2021-12-15 17:22:10,307 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-15 17:22:10,308 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [614868374] [2021-12-15 17:22:10,308 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-15 17:22:10,308 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-15 17:22:10,318 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-15 17:22:10,318 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-12-15 17:22:10,323 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-15 17:22:10,330 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-12-15 17:22:10,330 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-15 17:22:10,330 INFO L85 PathProgramCache]: Analyzing trace with hash 1930284282, now seen corresponding path program 1 times [2021-12-15 17:22:10,331 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-15 17:22:10,331 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [517513278] [2021-12-15 17:22:10,331 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-15 17:22:10,331 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-15 17:22:10,357 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-15 17:22:10,432 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-15 17:22:10,433 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-15 17:22:10,433 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [517513278] [2021-12-15 17:22:10,433 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [517513278] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-15 17:22:10,433 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-15 17:22:10,433 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-12-15 17:22:10,433 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [134903448] [2021-12-15 17:22:10,434 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-15 17:22:10,434 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-12-15 17:22:10,434 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-15 17:22:10,434 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-12-15 17:22:10,435 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-12-15 17:22:10,435 INFO L87 Difference]: Start difference. First operand 296 states and 430 transitions. cyclomatic complexity: 135 Second operand has 4 states, 4 states have (on average 13.75) internal successors, (55), 4 states have internal predecessors, (55), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-15 17:22:10,484 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-15 17:22:10,484 INFO L93 Difference]: Finished difference Result 282 states and 399 transitions. [2021-12-15 17:22:10,485 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-12-15 17:22:10,487 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 282 states and 399 transitions. [2021-12-15 17:22:10,489 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 247 [2021-12-15 17:22:10,490 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 282 states to 264 states and 374 transitions. [2021-12-15 17:22:10,491 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 264 [2021-12-15 17:22:10,491 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 264 [2021-12-15 17:22:10,491 INFO L73 IsDeterministic]: Start isDeterministic. Operand 264 states and 374 transitions. [2021-12-15 17:22:10,492 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-12-15 17:22:10,492 INFO L681 BuchiCegarLoop]: Abstraction has 264 states and 374 transitions. [2021-12-15 17:22:10,492 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 264 states and 374 transitions. [2021-12-15 17:22:10,495 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 264 to 264. [2021-12-15 17:22:10,495 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 264 states, 264 states have (on average 1.4166666666666667) internal successors, (374), 263 states have internal predecessors, (374), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-15 17:22:10,496 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 264 states to 264 states and 374 transitions. [2021-12-15 17:22:10,496 INFO L704 BuchiCegarLoop]: Abstraction has 264 states and 374 transitions. [2021-12-15 17:22:10,496 INFO L587 BuchiCegarLoop]: Abstraction has 264 states and 374 transitions. [2021-12-15 17:22:10,496 INFO L425 BuchiCegarLoop]: ======== Iteration 8============ [2021-12-15 17:22:10,497 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 264 states and 374 transitions. [2021-12-15 17:22:10,498 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 247 [2021-12-15 17:22:10,498 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-15 17:22:10,498 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-15 17:22:10,499 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-15 17:22:10,499 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-15 17:22:10,500 INFO L791 eck$LassoCheckResult]: Stem: 5273#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(52, 2);call #Ultimate.allocInit(12, 3);~nomsg~0 := -1;~cs1~0 := 0;~cs1_old~0 := 0;~cs1_new~0 := 0;~cs2~0 := 0;~cs2_old~0 := 0;~cs2_new~0 := 0;~s1s2~0 := 0;~s1s2_old~0 := 0;~s1s2_new~0 := 0;~s1s1~0 := 0;~s1s1_old~0 := 0;~s1s1_new~0 := 0;~s2s1~0 := 0;~s2s1_old~0 := 0;~s2s1_new~0 := 0;~s2s2~0 := 0;~s2s2_old~0 := 0;~s2s2_new~0 := 0;~s1p~0 := 0;~s1p_old~0 := 0;~s1p_new~0 := 0;~s2p~0 := 0;~s2p_old~0 := 0;~s2p_new~0 := 0;~side1Failed~0 := 0;~side2Failed~0 := 0;~side1_written~0 := 0;~side2_written~0 := 0;~side1Failed_History_0~0 := 0;~side1Failed_History_1~0 := 0;~side1Failed_History_2~0 := 0;~side2Failed_History_0~0 := 0;~side2Failed_History_1~0 := 0;~side2Failed_History_2~0 := 0;~active_side_History_0~0 := 0;~active_side_History_1~0 := 0;~active_side_History_2~0 := 0;~manual_selection_History_0~0 := 0;~manual_selection_History_1~0 := 0;~manual_selection_History_2~0 := 0; 5255#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~nondet44#1, main_#t~nondet45#1, main_#t~nondet46#1, main_#t~nondet47#1, main_#t~nondet48#1, main_#t~nondet49#1, main_#t~nondet50#1, main_#t~nondet51#1, main_#t~nondet52#1, main_#t~nondet53#1, main_#t~nondet54#1, main_#t~nondet55#1, main_#t~nondet56#1, main_#t~nondet57#1, main_#t~nondet58#1, main_#t~nondet59#1, main_#t~ret60#1, main_#t~ret61#1, main_~c1~0#1, main_~i2~0#1;havoc main_~c1~0#1;havoc main_~i2~0#1;main_~c1~0#1 := 0;~side1Failed~0 := main_#t~nondet44#1;havoc main_#t~nondet44#1;~side2Failed~0 := main_#t~nondet45#1;havoc main_#t~nondet45#1;~side1_written~0 := main_#t~nondet46#1;havoc main_#t~nondet46#1;~side2_written~0 := main_#t~nondet47#1;havoc main_#t~nondet47#1;~side1Failed_History_0~0 := main_#t~nondet48#1;havoc main_#t~nondet48#1;~side1Failed_History_1~0 := main_#t~nondet49#1;havoc main_#t~nondet49#1;~side1Failed_History_2~0 := main_#t~nondet50#1;havoc main_#t~nondet50#1;~side2Failed_History_0~0 := main_#t~nondet51#1;havoc main_#t~nondet51#1;~side2Failed_History_1~0 := main_#t~nondet52#1;havoc main_#t~nondet52#1;~side2Failed_History_2~0 := main_#t~nondet53#1;havoc main_#t~nondet53#1;~active_side_History_0~0 := main_#t~nondet54#1;havoc main_#t~nondet54#1;~active_side_History_1~0 := main_#t~nondet55#1;havoc main_#t~nondet55#1;~active_side_History_2~0 := main_#t~nondet56#1;havoc main_#t~nondet56#1;~manual_selection_History_0~0 := main_#t~nondet57#1;havoc main_#t~nondet57#1;~manual_selection_History_1~0 := main_#t~nondet58#1;havoc main_#t~nondet58#1;~manual_selection_History_2~0 := main_#t~nondet59#1;havoc main_#t~nondet59#1;assume { :begin_inline_init } true;havoc init_#res#1; 5171#L197 assume !(0 != ~side1Failed_History_0~0 % 256); 5172#L200 assume !(0 != ~side2Failed_History_0~0 % 256); 5104#L203 assume !(-2 != ~active_side_History_0~0); 5105#L206 assume !(0 != ~manual_selection_History_0~0); 5121#L209 assume !(0 != ~side1Failed_History_1~0 % 256); 5266#L212 assume !(0 != ~side2Failed_History_1~0 % 256); 5230#L215 assume !(-2 != ~active_side_History_1~0); 5231#L218 assume !(0 != ~manual_selection_History_1~0); 5256#L221 assume !(0 != ~side1Failed_History_2~0 % 256); 5268#L224 assume !(0 != ~side2Failed_History_2~0 % 256); 5203#L227 assume !(-2 != ~active_side_History_2~0); 5204#L230 assume !(0 != ~manual_selection_History_2~0);init_#res#1 := 1; 5161#L233 main_#t~ret60#1 := init_#res#1;assume { :end_inline_init } true;main_~i2~0#1 := main_#t~ret60#1;havoc main_#t~ret60#1;assume { :begin_inline_assume_abort_if_not } true;assume_abort_if_not_#in~cond#1 := main_~i2~0#1;havoc assume_abort_if_not_~cond#1;assume_abort_if_not_~cond#1 := assume_abort_if_not_#in~cond#1; 5162#L58 assume !(0 == assume_abort_if_not_~cond#1); 5232#L57 assume { :end_inline_assume_abort_if_not } true;~cs1_old~0 := ~nomsg~0;~cs1_new~0 := ~nomsg~0;~cs2_old~0 := ~nomsg~0;~cs2_new~0 := ~nomsg~0;~s1s2_old~0 := ~nomsg~0;~s1s2_new~0 := ~nomsg~0;~s1s1_old~0 := ~nomsg~0;~s1s1_new~0 := ~nomsg~0;~s2s1_old~0 := ~nomsg~0;~s2s1_new~0 := ~nomsg~0;~s2s2_old~0 := ~nomsg~0;~s2s2_new~0 := ~nomsg~0;~s1p_old~0 := ~nomsg~0;~s1p_new~0 := ~nomsg~0;~s2p_old~0 := ~nomsg~0;~s2p_new~0 := ~nomsg~0;main_~i2~0#1 := 0; 5168#L578-2 [2021-12-15 17:22:10,501 INFO L793 eck$LassoCheckResult]: Loop: 5168#L578-2 assume !false;assume { :begin_inline_Console_task_each_pals_period } true;havoc Console_task_each_pals_period_#t~nondet4#1, Console_task_each_pals_period_#t~ite5#1, Console_task_each_pals_period_#t~ite6#1, Console_task_each_pals_period_~manual_selection~0#1, Console_task_each_pals_period_~tmp~1#1;havoc Console_task_each_pals_period_~manual_selection~0#1;havoc Console_task_each_pals_period_~tmp~1#1;Console_task_each_pals_period_~tmp~1#1 := Console_task_each_pals_period_#t~nondet4#1;havoc Console_task_each_pals_period_#t~nondet4#1;Console_task_each_pals_period_~manual_selection~0#1 := Console_task_each_pals_period_~tmp~1#1;assume { :begin_inline_write_manual_selection_history } true;write_manual_selection_history_#in~val#1 := Console_task_each_pals_period_~manual_selection~0#1;havoc write_manual_selection_history_~val#1;write_manual_selection_history_~val#1 := write_manual_selection_history_#in~val#1;~manual_selection_History_2~0 := ~manual_selection_History_1~0;~manual_selection_History_1~0 := ~manual_selection_History_0~0;~manual_selection_History_0~0 := write_manual_selection_history_~val#1; 5216#L170 assume { :end_inline_write_manual_selection_history } true; 5250#L258 assume Console_task_each_pals_period_~manual_selection~0#1 != ~nomsg~0 && ~cs1_new~0 == ~nomsg~0;Console_task_each_pals_period_#t~ite5#1 := Console_task_each_pals_period_~manual_selection~0#1; 5251#L258-2 ~cs1_new~0 := (if Console_task_each_pals_period_#t~ite5#1 % 256 <= 127 then Console_task_each_pals_period_#t~ite5#1 % 256 else Console_task_each_pals_period_#t~ite5#1 % 256 - 256);havoc Console_task_each_pals_period_#t~ite5#1; 5263#L259 assume Console_task_each_pals_period_~manual_selection~0#1 != ~nomsg~0 && ~cs2_new~0 == ~nomsg~0;Console_task_each_pals_period_#t~ite6#1 := Console_task_each_pals_period_~manual_selection~0#1; 5264#L259-2 ~cs2_new~0 := (if Console_task_each_pals_period_#t~ite6#1 % 256 <= 127 then Console_task_each_pals_period_#t~ite6#1 % 256 else Console_task_each_pals_period_#t~ite6#1 % 256 - 256);havoc Console_task_each_pals_period_#t~ite6#1;Console_task_each_pals_period_~manual_selection~0#1 := 0; 5235#L261 assume { :end_inline_Console_task_each_pals_period } true;assume { :begin_inline_Side1_activestandby_task_each_pals_period } true;havoc Side1_activestandby_task_each_pals_period_#t~nondet7#1, Side1_activestandby_task_each_pals_period_#t~ite8#1, Side1_activestandby_task_each_pals_period_#t~ite9#1, Side1_activestandby_task_each_pals_period_#t~ite10#1, Side1_activestandby_task_each_pals_period_#t~ite11#1, Side1_activestandby_task_each_pals_period_#t~ite12#1, Side1_activestandby_task_each_pals_period_#t~ite13#1, Side1_activestandby_task_each_pals_period_~side1~0#1, Side1_activestandby_task_each_pals_period_~side2~0#1, Side1_activestandby_task_each_pals_period_~manual_selection~1#1, Side1_activestandby_task_each_pals_period_~next_state~0#1;havoc Side1_activestandby_task_each_pals_period_~side1~0#1;havoc Side1_activestandby_task_each_pals_period_~side2~0#1;havoc Side1_activestandby_task_each_pals_period_~manual_selection~1#1;havoc Side1_activestandby_task_each_pals_period_~next_state~0#1;Side1_activestandby_task_each_pals_period_~side1~0#1 := ~nomsg~0;Side1_activestandby_task_each_pals_period_~side2~0#1 := ~nomsg~0;Side1_activestandby_task_each_pals_period_~manual_selection~1#1 := 0;~side1Failed~0 := Side1_activestandby_task_each_pals_period_#t~nondet7#1;havoc Side1_activestandby_task_each_pals_period_#t~nondet7#1;assume { :begin_inline_write_side1_failed_history } true;write_side1_failed_history_#in~val#1 := ~side1Failed~0;havoc write_side1_failed_history_~val#1;write_side1_failed_history_~val#1 := write_side1_failed_history_#in~val#1;~side1Failed_History_2~0 := ~side1Failed_History_1~0;~side1Failed_History_1~0 := ~side1Failed_History_0~0;~side1Failed_History_0~0 := write_side1_failed_history_~val#1; 5236#L80 assume { :end_inline_write_side1_failed_history } true; 5226#L277 assume 0 != ~side1Failed~0 % 256; 5227#L278 assume !(~nomsg~0 != ~nomsg~0 && ~s1s1_new~0 == ~nomsg~0);Side1_activestandby_task_each_pals_period_#t~ite8#1 := ~s1s1_new~0; 5234#L278-2 ~s1s1_new~0 := (if Side1_activestandby_task_each_pals_period_#t~ite8#1 % 256 <= 127 then Side1_activestandby_task_each_pals_period_#t~ite8#1 % 256 else Side1_activestandby_task_each_pals_period_#t~ite8#1 % 256 - 256);havoc Side1_activestandby_task_each_pals_period_#t~ite8#1; 5147#L279 assume !(~nomsg~0 != ~nomsg~0 && ~s1s2_new~0 == ~nomsg~0);Side1_activestandby_task_each_pals_period_#t~ite9#1 := ~s1s2_new~0; 5116#L279-2 ~s1s2_new~0 := (if Side1_activestandby_task_each_pals_period_#t~ite9#1 % 256 <= 127 then Side1_activestandby_task_each_pals_period_#t~ite9#1 % 256 else Side1_activestandby_task_each_pals_period_#t~ite9#1 % 256 - 256);havoc Side1_activestandby_task_each_pals_period_#t~ite9#1; 5117#L280 assume !(~nomsg~0 != ~nomsg~0 && ~s1p_new~0 == ~nomsg~0);Side1_activestandby_task_each_pals_period_#t~ite10#1 := ~s1p_new~0; 5207#L280-2 ~s1p_new~0 := (if Side1_activestandby_task_each_pals_period_#t~ite10#1 % 256 <= 127 then Side1_activestandby_task_each_pals_period_#t~ite10#1 % 256 else Side1_activestandby_task_each_pals_period_#t~ite10#1 % 256 - 256);havoc Side1_activestandby_task_each_pals_period_#t~ite10#1;~side1_written~0 := ~nomsg~0; 5208#L314 assume { :end_inline_Side1_activestandby_task_each_pals_period } true;assume { :begin_inline_Side2_activestandby_task_each_pals_period } true;havoc Side2_activestandby_task_each_pals_period_#t~nondet14#1, Side2_activestandby_task_each_pals_period_#t~ite15#1, Side2_activestandby_task_each_pals_period_#t~ite16#1, Side2_activestandby_task_each_pals_period_#t~ite17#1, Side2_activestandby_task_each_pals_period_#t~ret18#1, Side2_activestandby_task_each_pals_period_#t~ite19#1, Side2_activestandby_task_each_pals_period_#t~ite20#1, Side2_activestandby_task_each_pals_period_#t~ite21#1, Side2_activestandby_task_each_pals_period_~side1~1#1, Side2_activestandby_task_each_pals_period_~side2~1#1, Side2_activestandby_task_each_pals_period_~manual_selection~2#1, Side2_activestandby_task_each_pals_period_~next_state~1#1;havoc Side2_activestandby_task_each_pals_period_~side1~1#1;havoc Side2_activestandby_task_each_pals_period_~side2~1#1;havoc Side2_activestandby_task_each_pals_period_~manual_selection~2#1;havoc Side2_activestandby_task_each_pals_period_~next_state~1#1;Side2_activestandby_task_each_pals_period_~side1~1#1 := ~nomsg~0;Side2_activestandby_task_each_pals_period_~side2~1#1 := ~nomsg~0;Side2_activestandby_task_each_pals_period_~manual_selection~2#1 := 0;~side2Failed~0 := Side2_activestandby_task_each_pals_period_#t~nondet14#1;havoc Side2_activestandby_task_each_pals_period_#t~nondet14#1;assume { :begin_inline_write_side2_failed_history } true;write_side2_failed_history_#in~val#1 := ~side2Failed~0;havoc write_side2_failed_history_~val#1;write_side2_failed_history_~val#1 := write_side2_failed_history_#in~val#1;~side2Failed_History_2~0 := ~side2Failed_History_1~0;~side2Failed_History_1~0 := ~side2Failed_History_0~0;~side2Failed_History_0~0 := write_side2_failed_history_~val#1; 5169#L110 assume { :end_inline_write_side2_failed_history } true; 5142#L330 assume 0 != ~side2Failed~0 % 256; 5143#L331 assume !(~nomsg~0 != ~nomsg~0 && ~s2s1_new~0 == ~nomsg~0);Side2_activestandby_task_each_pals_period_#t~ite15#1 := ~s2s1_new~0; 5219#L331-2 ~s2s1_new~0 := (if Side2_activestandby_task_each_pals_period_#t~ite15#1 % 256 <= 127 then Side2_activestandby_task_each_pals_period_#t~ite15#1 % 256 else Side2_activestandby_task_each_pals_period_#t~ite15#1 % 256 - 256);havoc Side2_activestandby_task_each_pals_period_#t~ite15#1; 5220#L332 assume !(~nomsg~0 != ~nomsg~0 && ~s2s2_new~0 == ~nomsg~0);Side2_activestandby_task_each_pals_period_#t~ite16#1 := ~s2s2_new~0; 5187#L332-2 ~s2s2_new~0 := (if Side2_activestandby_task_each_pals_period_#t~ite16#1 % 256 <= 127 then Side2_activestandby_task_each_pals_period_#t~ite16#1 % 256 else Side2_activestandby_task_each_pals_period_#t~ite16#1 % 256 - 256);havoc Side2_activestandby_task_each_pals_period_#t~ite16#1; 5188#L333 assume !(~nomsg~0 != ~nomsg~0 && ~s2p_new~0 == ~nomsg~0);Side2_activestandby_task_each_pals_period_#t~ite17#1 := ~s2p_new~0; 5259#L333-2 ~s2p_new~0 := (if Side2_activestandby_task_each_pals_period_#t~ite17#1 % 256 <= 127 then Side2_activestandby_task_each_pals_period_#t~ite17#1 % 256 else Side2_activestandby_task_each_pals_period_#t~ite17#1 % 256 - 256);havoc Side2_activestandby_task_each_pals_period_#t~ite17#1;~side2_written~0 := ~nomsg~0; 5260#L371 assume { :end_inline_Side2_activestandby_task_each_pals_period } true;assume { :begin_inline_Pendulum_prism_task_each_pals_period } true;havoc Pendulum_prism_task_each_pals_period_#t~ret22#1, Pendulum_prism_task_each_pals_period_~active_side~0#1, Pendulum_prism_task_each_pals_period_~tmp~2#1, Pendulum_prism_task_each_pals_period_~side1~2#1, Pendulum_prism_task_each_pals_period_~side2~2#1;havoc Pendulum_prism_task_each_pals_period_~active_side~0#1;havoc Pendulum_prism_task_each_pals_period_~tmp~2#1;havoc Pendulum_prism_task_each_pals_period_~side1~2#1;havoc Pendulum_prism_task_each_pals_period_~side2~2#1;assume { :begin_inline_read_active_side_history } true;read_active_side_history_#in~index#1 := 0;havoc read_active_side_history_#res#1;havoc read_active_side_history_~index#1;read_active_side_history_~index#1 := read_active_side_history_#in~index#1; 5109#L148 assume 0 == read_active_side_history_~index#1 % 256;read_active_side_history_#res#1 := ~active_side_History_0~0; 5110#L158 Pendulum_prism_task_each_pals_period_#t~ret22#1 := read_active_side_history_#res#1;assume { :end_inline_read_active_side_history } true;Pendulum_prism_task_each_pals_period_~tmp~2#1 := Pendulum_prism_task_each_pals_period_#t~ret22#1;havoc Pendulum_prism_task_each_pals_period_#t~ret22#1;Pendulum_prism_task_each_pals_period_~active_side~0#1 := Pendulum_prism_task_each_pals_period_~tmp~2#1;Pendulum_prism_task_each_pals_period_~side1~2#1 := ~nomsg~0;Pendulum_prism_task_each_pals_period_~side2~2#1 := ~nomsg~0;Pendulum_prism_task_each_pals_period_~side1~2#1 := ~s1p_old~0;~s1p_old~0 := ~nomsg~0;Pendulum_prism_task_each_pals_period_~side2~2#1 := ~s2p_old~0;~s2p_old~0 := ~nomsg~0; 5241#L390 assume 1 == Pendulum_prism_task_each_pals_period_~side1~2#1;Pendulum_prism_task_each_pals_period_~active_side~0#1 := 1; 5184#L404 assume { :begin_inline_write_active_side_history } true;write_active_side_history_#in~val#1 := Pendulum_prism_task_each_pals_period_~active_side~0#1;havoc write_active_side_history_~val#1;write_active_side_history_~val#1 := write_active_side_history_#in~val#1;~active_side_History_2~0 := ~active_side_History_1~0;~active_side_History_1~0 := ~active_side_History_0~0;~active_side_History_0~0 := write_active_side_history_~val#1; 5150#L140 assume { :end_inline_write_active_side_history } true; 5151#L414 assume { :end_inline_Pendulum_prism_task_each_pals_period } true;~cs1_old~0 := ~cs1_new~0;~cs1_new~0 := ~nomsg~0;~cs2_old~0 := ~cs2_new~0;~cs2_new~0 := ~nomsg~0;~s1s2_old~0 := ~s1s2_new~0;~s1s2_new~0 := ~nomsg~0;~s1s1_old~0 := ~s1s1_new~0;~s1s1_new~0 := ~nomsg~0;~s2s1_old~0 := ~s2s1_new~0;~s2s1_new~0 := ~nomsg~0;~s2s2_old~0 := ~s2s2_new~0;~s2s2_new~0 := ~nomsg~0;~s1p_old~0 := ~s1p_new~0;~s1p_new~0 := ~nomsg~0;~s2p_old~0 := ~s2p_new~0;~s2p_new~0 := ~nomsg~0;assume { :begin_inline_check } true;havoc check_#res#1;havoc check_#t~ret23#1, check_#t~ret24#1, check_#t~ret25#1, check_#t~ret26#1, check_#t~ret27#1, check_#t~ret28#1, check_#t~ret29#1, check_#t~ret30#1, check_#t~ret31#1, check_#t~ret32#1, check_#t~ret33#1, check_#t~ret34#1, check_#t~ret35#1, check_#t~ret36#1, check_#t~ret37#1, check_#t~ret38#1, check_#t~ret39#1, check_#t~ret40#1, check_#t~ret41#1, check_#t~ret42#1, check_#t~ret43#1, check_~tmp~3#1, check_~tmp___0~0#1, check_~tmp___1~0#1, check_~tmp___2~0#1, check_~tmp___3~0#1, check_~tmp___4~0#1, check_~tmp___5~0#1, check_~tmp___6~0#1, check_~tmp___7~0#1, check_~tmp___8~0#1, check_~tmp___9~0#1, check_~tmp___10~0#1, check_~tmp___11~0#1, check_~tmp___12~0#1, check_~tmp___13~0#1, check_~tmp___14~0#1, check_~tmp___15~0#1, check_~tmp___16~0#1, check_~tmp___17~0#1, check_~tmp___18~0#1, check_~tmp___19~0#1, check_~tmp___20~0#1;havoc check_~tmp~3#1;havoc check_~tmp___0~0#1;havoc check_~tmp___1~0#1;havoc check_~tmp___2~0#1;havoc check_~tmp___3~0#1;havoc check_~tmp___4~0#1;havoc check_~tmp___5~0#1;havoc check_~tmp___6~0#1;havoc check_~tmp___7~0#1;havoc check_~tmp___8~0#1;havoc check_~tmp___9~0#1;havoc check_~tmp___10~0#1;havoc check_~tmp___11~0#1;havoc check_~tmp___12~0#1;havoc check_~tmp___13~0#1;havoc check_~tmp___14~0#1;havoc check_~tmp___15~0#1;havoc check_~tmp___16~0#1;havoc check_~tmp___17~0#1;havoc check_~tmp___18~0#1;havoc check_~tmp___19~0#1;havoc check_~tmp___20~0#1; 5156#L443 assume !(0 == ~side1Failed~0 % 256); 5157#L446 assume !(0 == ~side2Failed~0 % 256);check_~tmp~3#1 := 0; 5158#L446-2 assume { :begin_inline_assume_abort_if_not } true;assume_abort_if_not_#in~cond#1 := (if 0 == check_~tmp~3#1 then 0 else 1) % 256;havoc assume_abort_if_not_~cond#1;assume_abort_if_not_~cond#1 := assume_abort_if_not_#in~cond#1; 5159#L58-2 assume !(0 == assume_abort_if_not_~cond#1); 5096#L57-1 assume { :end_inline_assume_abort_if_not } true;assume { :begin_inline_read_manual_selection_history } true;read_manual_selection_history_#in~index#1 := 1;havoc read_manual_selection_history_#res#1;havoc read_manual_selection_history_~index#1;read_manual_selection_history_~index#1 := read_manual_selection_history_#in~index#1; 5097#L178 assume !(0 == read_manual_selection_history_~index#1 % 256); 5108#L181 assume 1 == read_manual_selection_history_~index#1 % 256;read_manual_selection_history_#res#1 := ~manual_selection_History_1~0; 5098#L188 check_#t~ret23#1 := read_manual_selection_history_#res#1;assume { :end_inline_read_manual_selection_history } true;check_~tmp___0~0#1 := check_#t~ret23#1;havoc check_#t~ret23#1; 5099#L453 assume !(0 == check_~tmp___0~0#1); 5080#L453-1 assume { :begin_inline_read_side1_failed_history } true;read_side1_failed_history_#in~index#1 := 1;havoc read_side1_failed_history_#res#1;havoc read_side1_failed_history_~index#1;read_side1_failed_history_~index#1 := read_side1_failed_history_#in~index#1; 5092#L88-2 assume !(0 == read_side1_failed_history_~index#1 % 256); 5093#L91-2 assume 1 == read_side1_failed_history_~index#1 % 256;read_side1_failed_history_#res#1 := ~side1Failed_History_1~0; 5166#L98-2 check_#t~ret28#1 := read_side1_failed_history_#res#1;assume { :end_inline_read_side1_failed_history } true;check_~tmp___7~0#1 := check_#t~ret28#1;havoc check_#t~ret28#1; 5269#L483 assume !(0 != check_~tmp___7~0#1 % 256); 5085#L483-1 assume { :begin_inline_read_side1_failed_history } true;read_side1_failed_history_#in~index#1 := 1;havoc read_side1_failed_history_#res#1;havoc read_side1_failed_history_~index#1;read_side1_failed_history_~index#1 := read_side1_failed_history_#in~index#1; 5186#L88-3 assume !(0 == read_side1_failed_history_~index#1 % 256); 5225#L91-3 assume 1 == read_side1_failed_history_~index#1 % 256;read_side1_failed_history_#res#1 := ~side1Failed_History_1~0; 5205#L98-3 check_#t~ret32#1 := read_side1_failed_history_#res#1;assume { :end_inline_read_side1_failed_history } true;check_~tmp___11~0#1 := check_#t~ret32#1;havoc check_#t~ret32#1; 5132#L499 assume !(0 == check_~tmp___11~0#1 % 256); 5113#L499-1 assume { :begin_inline_read_active_side_history } true;read_active_side_history_#in~index#1 := 2;havoc read_active_side_history_#res#1;havoc read_active_side_history_~index#1;read_active_side_history_~index#1 := read_active_side_history_#in~index#1; 5131#L148-3 assume 0 == read_active_side_history_~index#1 % 256;read_active_side_history_#res#1 := ~active_side_History_0~0; 5155#L158-3 check_#t~ret36#1 := read_active_side_history_#res#1;assume { :end_inline_read_active_side_history } true;check_~tmp___20~0#1 := check_#t~ret36#1;havoc check_#t~ret36#1; 5129#L515 assume !(check_~tmp___20~0#1 > -2); 5100#L515-1 check_#res#1 := 1; 5101#L533 main_#t~ret61#1 := check_#res#1;assume { :end_inline_check } true;main_~c1~0#1 := main_#t~ret61#1;havoc main_#t~ret61#1;assume { :begin_inline_assert } true;assert_#in~arg#1 := (if 0 == main_~c1~0#1 then 0 else 1);havoc assert_~arg#1;assert_~arg#1 := assert_#in~arg#1; 5222#L612-44 assume !(0 == assert_~arg#1 % 256); 5167#L607-22 assume { :end_inline_assert } true; 5168#L578-2 [2021-12-15 17:22:10,501 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-15 17:22:10,501 INFO L85 PathProgramCache]: Analyzing trace with hash -613005151, now seen corresponding path program 7 times [2021-12-15 17:22:10,502 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-15 17:22:10,505 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1719356103] [2021-12-15 17:22:10,506 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-15 17:22:10,506 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-15 17:22:10,516 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-15 17:22:10,517 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-12-15 17:22:10,522 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-15 17:22:10,528 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-12-15 17:22:10,529 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-15 17:22:10,529 INFO L85 PathProgramCache]: Analyzing trace with hash 926488691, now seen corresponding path program 1 times [2021-12-15 17:22:10,529 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-15 17:22:10,529 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1106985449] [2021-12-15 17:22:10,530 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-15 17:22:10,530 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-15 17:22:10,543 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-15 17:22:10,587 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-15 17:22:10,588 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-15 17:22:10,588 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1106985449] [2021-12-15 17:22:10,588 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1106985449] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-15 17:22:10,588 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-15 17:22:10,588 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-15 17:22:10,590 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1959733315] [2021-12-15 17:22:10,590 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-15 17:22:10,591 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-12-15 17:22:10,591 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-15 17:22:10,592 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-15 17:22:10,592 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-15 17:22:10,592 INFO L87 Difference]: Start difference. First operand 264 states and 374 transitions. cyclomatic complexity: 111 Second operand has 6 states, 6 states have (on average 9.666666666666666) internal successors, (58), 6 states have internal predecessors, (58), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-15 17:22:10,807 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-15 17:22:10,807 INFO L93 Difference]: Finished difference Result 1099 states and 1555 transitions. [2021-12-15 17:22:10,807 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2021-12-15 17:22:10,809 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 1099 states and 1555 transitions. [2021-12-15 17:22:10,815 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1082 [2021-12-15 17:22:10,820 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 1099 states to 1099 states and 1555 transitions. [2021-12-15 17:22:10,821 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 1099 [2021-12-15 17:22:10,822 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 1099 [2021-12-15 17:22:10,822 INFO L73 IsDeterministic]: Start isDeterministic. Operand 1099 states and 1555 transitions. [2021-12-15 17:22:10,823 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-12-15 17:22:10,823 INFO L681 BuchiCegarLoop]: Abstraction has 1099 states and 1555 transitions. [2021-12-15 17:22:10,824 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1099 states and 1555 transitions. [2021-12-15 17:22:10,830 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1099 to 357. [2021-12-15 17:22:10,831 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 357 states, 357 states have (on average 1.392156862745098) internal successors, (497), 356 states have internal predecessors, (497), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-15 17:22:10,832 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 357 states to 357 states and 497 transitions. [2021-12-15 17:22:10,832 INFO L704 BuchiCegarLoop]: Abstraction has 357 states and 497 transitions. [2021-12-15 17:22:10,832 INFO L587 BuchiCegarLoop]: Abstraction has 357 states and 497 transitions. [2021-12-15 17:22:10,832 INFO L425 BuchiCegarLoop]: ======== Iteration 9============ [2021-12-15 17:22:10,832 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 357 states and 497 transitions. [2021-12-15 17:22:10,834 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 340 [2021-12-15 17:22:10,834 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-15 17:22:10,834 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-15 17:22:10,834 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-15 17:22:10,834 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-15 17:22:10,835 INFO L791 eck$LassoCheckResult]: Stem: 6697#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(52, 2);call #Ultimate.allocInit(12, 3);~nomsg~0 := -1;~cs1~0 := 0;~cs1_old~0 := 0;~cs1_new~0 := 0;~cs2~0 := 0;~cs2_old~0 := 0;~cs2_new~0 := 0;~s1s2~0 := 0;~s1s2_old~0 := 0;~s1s2_new~0 := 0;~s1s1~0 := 0;~s1s1_old~0 := 0;~s1s1_new~0 := 0;~s2s1~0 := 0;~s2s1_old~0 := 0;~s2s1_new~0 := 0;~s2s2~0 := 0;~s2s2_old~0 := 0;~s2s2_new~0 := 0;~s1p~0 := 0;~s1p_old~0 := 0;~s1p_new~0 := 0;~s2p~0 := 0;~s2p_old~0 := 0;~s2p_new~0 := 0;~side1Failed~0 := 0;~side2Failed~0 := 0;~side1_written~0 := 0;~side2_written~0 := 0;~side1Failed_History_0~0 := 0;~side1Failed_History_1~0 := 0;~side1Failed_History_2~0 := 0;~side2Failed_History_0~0 := 0;~side2Failed_History_1~0 := 0;~side2Failed_History_2~0 := 0;~active_side_History_0~0 := 0;~active_side_History_1~0 := 0;~active_side_History_2~0 := 0;~manual_selection_History_0~0 := 0;~manual_selection_History_1~0 := 0;~manual_selection_History_2~0 := 0; 6660#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~nondet44#1, main_#t~nondet45#1, main_#t~nondet46#1, main_#t~nondet47#1, main_#t~nondet48#1, main_#t~nondet49#1, main_#t~nondet50#1, main_#t~nondet51#1, main_#t~nondet52#1, main_#t~nondet53#1, main_#t~nondet54#1, main_#t~nondet55#1, main_#t~nondet56#1, main_#t~nondet57#1, main_#t~nondet58#1, main_#t~nondet59#1, main_#t~ret60#1, main_#t~ret61#1, main_~c1~0#1, main_~i2~0#1;havoc main_~c1~0#1;havoc main_~i2~0#1;main_~c1~0#1 := 0;~side1Failed~0 := main_#t~nondet44#1;havoc main_#t~nondet44#1;~side2Failed~0 := main_#t~nondet45#1;havoc main_#t~nondet45#1;~side1_written~0 := main_#t~nondet46#1;havoc main_#t~nondet46#1;~side2_written~0 := main_#t~nondet47#1;havoc main_#t~nondet47#1;~side1Failed_History_0~0 := main_#t~nondet48#1;havoc main_#t~nondet48#1;~side1Failed_History_1~0 := main_#t~nondet49#1;havoc main_#t~nondet49#1;~side1Failed_History_2~0 := main_#t~nondet50#1;havoc main_#t~nondet50#1;~side2Failed_History_0~0 := main_#t~nondet51#1;havoc main_#t~nondet51#1;~side2Failed_History_1~0 := main_#t~nondet52#1;havoc main_#t~nondet52#1;~side2Failed_History_2~0 := main_#t~nondet53#1;havoc main_#t~nondet53#1;~active_side_History_0~0 := main_#t~nondet54#1;havoc main_#t~nondet54#1;~active_side_History_1~0 := main_#t~nondet55#1;havoc main_#t~nondet55#1;~active_side_History_2~0 := main_#t~nondet56#1;havoc main_#t~nondet56#1;~manual_selection_History_0~0 := main_#t~nondet57#1;havoc main_#t~nondet57#1;~manual_selection_History_1~0 := main_#t~nondet58#1;havoc main_#t~nondet58#1;~manual_selection_History_2~0 := main_#t~nondet59#1;havoc main_#t~nondet59#1;assume { :begin_inline_init } true;havoc init_#res#1; 6567#L197 assume !(0 != ~side1Failed_History_0~0 % 256); 6568#L200 assume !(0 != ~side2Failed_History_0~0 % 256); 6499#L203 assume !(-2 != ~active_side_History_0~0); 6500#L206 assume !(0 != ~manual_selection_History_0~0); 6516#L209 assume !(0 != ~side1Failed_History_1~0 % 256); 6682#L212 assume !(0 != ~side2Failed_History_1~0 % 256); 6632#L215 assume !(-2 != ~active_side_History_1~0); 6633#L218 assume !(0 != ~manual_selection_History_1~0); 6661#L221 assume !(0 != ~side1Failed_History_2~0 % 256); 6684#L224 assume !(0 != ~side2Failed_History_2~0 % 256); 6602#L227 assume !(-2 != ~active_side_History_2~0); 6603#L230 assume !(0 != ~manual_selection_History_2~0);init_#res#1 := 1; 6557#L233 main_#t~ret60#1 := init_#res#1;assume { :end_inline_init } true;main_~i2~0#1 := main_#t~ret60#1;havoc main_#t~ret60#1;assume { :begin_inline_assume_abort_if_not } true;assume_abort_if_not_#in~cond#1 := main_~i2~0#1;havoc assume_abort_if_not_~cond#1;assume_abort_if_not_~cond#1 := assume_abort_if_not_#in~cond#1; 6558#L58 assume !(0 == assume_abort_if_not_~cond#1); 6634#L57 assume { :end_inline_assume_abort_if_not } true;~cs1_old~0 := ~nomsg~0;~cs1_new~0 := ~nomsg~0;~cs2_old~0 := ~nomsg~0;~cs2_new~0 := ~nomsg~0;~s1s2_old~0 := ~nomsg~0;~s1s2_new~0 := ~nomsg~0;~s1s1_old~0 := ~nomsg~0;~s1s1_new~0 := ~nomsg~0;~s2s1_old~0 := ~nomsg~0;~s2s1_new~0 := ~nomsg~0;~s2s2_old~0 := ~nomsg~0;~s2s2_new~0 := ~nomsg~0;~s1p_old~0 := ~nomsg~0;~s1p_new~0 := ~nomsg~0;~s2p_old~0 := ~nomsg~0;~s2p_new~0 := ~nomsg~0;main_~i2~0#1 := 0; 6564#L578-2 [2021-12-15 17:22:10,835 INFO L793 eck$LassoCheckResult]: Loop: 6564#L578-2 assume !false;assume { :begin_inline_Console_task_each_pals_period } true;havoc Console_task_each_pals_period_#t~nondet4#1, Console_task_each_pals_period_#t~ite5#1, Console_task_each_pals_period_#t~ite6#1, Console_task_each_pals_period_~manual_selection~0#1, Console_task_each_pals_period_~tmp~1#1;havoc Console_task_each_pals_period_~manual_selection~0#1;havoc Console_task_each_pals_period_~tmp~1#1;Console_task_each_pals_period_~tmp~1#1 := Console_task_each_pals_period_#t~nondet4#1;havoc Console_task_each_pals_period_#t~nondet4#1;Console_task_each_pals_period_~manual_selection~0#1 := Console_task_each_pals_period_~tmp~1#1;assume { :begin_inline_write_manual_selection_history } true;write_manual_selection_history_#in~val#1 := Console_task_each_pals_period_~manual_selection~0#1;havoc write_manual_selection_history_~val#1;write_manual_selection_history_~val#1 := write_manual_selection_history_#in~val#1;~manual_selection_History_2~0 := ~manual_selection_History_1~0;~manual_selection_History_1~0 := ~manual_selection_History_0~0;~manual_selection_History_0~0 := write_manual_selection_history_~val#1; 6619#L170 assume { :end_inline_write_manual_selection_history } true; 6655#L258 assume Console_task_each_pals_period_~manual_selection~0#1 != ~nomsg~0 && ~cs1_new~0 == ~nomsg~0;Console_task_each_pals_period_#t~ite5#1 := Console_task_each_pals_period_~manual_selection~0#1; 6656#L258-2 ~cs1_new~0 := (if Console_task_each_pals_period_#t~ite5#1 % 256 <= 127 then Console_task_each_pals_period_#t~ite5#1 % 256 else Console_task_each_pals_period_#t~ite5#1 % 256 - 256);havoc Console_task_each_pals_period_#t~ite5#1; 6676#L259 assume Console_task_each_pals_period_~manual_selection~0#1 != ~nomsg~0 && ~cs2_new~0 == ~nomsg~0;Console_task_each_pals_period_#t~ite6#1 := Console_task_each_pals_period_~manual_selection~0#1; 6677#L259-2 ~cs2_new~0 := (if Console_task_each_pals_period_#t~ite6#1 % 256 <= 127 then Console_task_each_pals_period_#t~ite6#1 % 256 else Console_task_each_pals_period_#t~ite6#1 % 256 - 256);havoc Console_task_each_pals_period_#t~ite6#1;Console_task_each_pals_period_~manual_selection~0#1 := 0; 6637#L261 assume { :end_inline_Console_task_each_pals_period } true;assume { :begin_inline_Side1_activestandby_task_each_pals_period } true;havoc Side1_activestandby_task_each_pals_period_#t~nondet7#1, Side1_activestandby_task_each_pals_period_#t~ite8#1, Side1_activestandby_task_each_pals_period_#t~ite9#1, Side1_activestandby_task_each_pals_period_#t~ite10#1, Side1_activestandby_task_each_pals_period_#t~ite11#1, Side1_activestandby_task_each_pals_period_#t~ite12#1, Side1_activestandby_task_each_pals_period_#t~ite13#1, Side1_activestandby_task_each_pals_period_~side1~0#1, Side1_activestandby_task_each_pals_period_~side2~0#1, Side1_activestandby_task_each_pals_period_~manual_selection~1#1, Side1_activestandby_task_each_pals_period_~next_state~0#1;havoc Side1_activestandby_task_each_pals_period_~side1~0#1;havoc Side1_activestandby_task_each_pals_period_~side2~0#1;havoc Side1_activestandby_task_each_pals_period_~manual_selection~1#1;havoc Side1_activestandby_task_each_pals_period_~next_state~0#1;Side1_activestandby_task_each_pals_period_~side1~0#1 := ~nomsg~0;Side1_activestandby_task_each_pals_period_~side2~0#1 := ~nomsg~0;Side1_activestandby_task_each_pals_period_~manual_selection~1#1 := 0;~side1Failed~0 := Side1_activestandby_task_each_pals_period_#t~nondet7#1;havoc Side1_activestandby_task_each_pals_period_#t~nondet7#1;assume { :begin_inline_write_side1_failed_history } true;write_side1_failed_history_#in~val#1 := ~side1Failed~0;havoc write_side1_failed_history_~val#1;write_side1_failed_history_~val#1 := write_side1_failed_history_#in~val#1;~side1Failed_History_2~0 := ~side1Failed_History_1~0;~side1Failed_History_1~0 := ~side1Failed_History_0~0;~side1Failed_History_0~0 := write_side1_failed_history_~val#1; 6638#L80 assume { :end_inline_write_side1_failed_history } true; 6628#L277 assume 0 != ~side1Failed~0 % 256; 6629#L278 assume !(~nomsg~0 != ~nomsg~0 && ~s1s1_new~0 == ~nomsg~0);Side1_activestandby_task_each_pals_period_#t~ite8#1 := ~s1s1_new~0; 6636#L278-2 ~s1s1_new~0 := (if Side1_activestandby_task_each_pals_period_#t~ite8#1 % 256 <= 127 then Side1_activestandby_task_each_pals_period_#t~ite8#1 % 256 else Side1_activestandby_task_each_pals_period_#t~ite8#1 % 256 - 256);havoc Side1_activestandby_task_each_pals_period_#t~ite8#1; 6544#L279 assume !(~nomsg~0 != ~nomsg~0 && ~s1s2_new~0 == ~nomsg~0);Side1_activestandby_task_each_pals_period_#t~ite9#1 := ~s1s2_new~0; 6511#L279-2 ~s1s2_new~0 := (if Side1_activestandby_task_each_pals_period_#t~ite9#1 % 256 <= 127 then Side1_activestandby_task_each_pals_period_#t~ite9#1 % 256 else Side1_activestandby_task_each_pals_period_#t~ite9#1 % 256 - 256);havoc Side1_activestandby_task_each_pals_period_#t~ite9#1; 6512#L280 assume !(~nomsg~0 != ~nomsg~0 && ~s1p_new~0 == ~nomsg~0);Side1_activestandby_task_each_pals_period_#t~ite10#1 := ~s1p_new~0; 6606#L280-2 ~s1p_new~0 := (if Side1_activestandby_task_each_pals_period_#t~ite10#1 % 256 <= 127 then Side1_activestandby_task_each_pals_period_#t~ite10#1 % 256 else Side1_activestandby_task_each_pals_period_#t~ite10#1 % 256 - 256);havoc Side1_activestandby_task_each_pals_period_#t~ite10#1;~side1_written~0 := ~nomsg~0; 6607#L314 assume { :end_inline_Side1_activestandby_task_each_pals_period } true;assume { :begin_inline_Side2_activestandby_task_each_pals_period } true;havoc Side2_activestandby_task_each_pals_period_#t~nondet14#1, Side2_activestandby_task_each_pals_period_#t~ite15#1, Side2_activestandby_task_each_pals_period_#t~ite16#1, Side2_activestandby_task_each_pals_period_#t~ite17#1, Side2_activestandby_task_each_pals_period_#t~ret18#1, Side2_activestandby_task_each_pals_period_#t~ite19#1, Side2_activestandby_task_each_pals_period_#t~ite20#1, Side2_activestandby_task_each_pals_period_#t~ite21#1, Side2_activestandby_task_each_pals_period_~side1~1#1, Side2_activestandby_task_each_pals_period_~side2~1#1, Side2_activestandby_task_each_pals_period_~manual_selection~2#1, Side2_activestandby_task_each_pals_period_~next_state~1#1;havoc Side2_activestandby_task_each_pals_period_~side1~1#1;havoc Side2_activestandby_task_each_pals_period_~side2~1#1;havoc Side2_activestandby_task_each_pals_period_~manual_selection~2#1;havoc Side2_activestandby_task_each_pals_period_~next_state~1#1;Side2_activestandby_task_each_pals_period_~side1~1#1 := ~nomsg~0;Side2_activestandby_task_each_pals_period_~side2~1#1 := ~nomsg~0;Side2_activestandby_task_each_pals_period_~manual_selection~2#1 := 0;~side2Failed~0 := Side2_activestandby_task_each_pals_period_#t~nondet14#1;havoc Side2_activestandby_task_each_pals_period_#t~nondet14#1;assume { :begin_inline_write_side2_failed_history } true;write_side2_failed_history_#in~val#1 := ~side2Failed~0;havoc write_side2_failed_history_~val#1;write_side2_failed_history_~val#1 := write_side2_failed_history_#in~val#1;~side2Failed_History_2~0 := ~side2Failed_History_1~0;~side2Failed_History_1~0 := ~side2Failed_History_0~0;~side2Failed_History_0~0 := write_side2_failed_history_~val#1; 6565#L110 assume { :end_inline_write_side2_failed_history } true; 6538#L330 assume 0 != ~side2Failed~0 % 256; 6539#L331 assume !(~nomsg~0 != ~nomsg~0 && ~s2s1_new~0 == ~nomsg~0);Side2_activestandby_task_each_pals_period_#t~ite15#1 := ~s2s1_new~0; 6796#L331-2 ~s2s1_new~0 := (if Side2_activestandby_task_each_pals_period_#t~ite15#1 % 256 <= 127 then Side2_activestandby_task_each_pals_period_#t~ite15#1 % 256 else Side2_activestandby_task_each_pals_period_#t~ite15#1 % 256 - 256);havoc Side2_activestandby_task_each_pals_period_#t~ite15#1; 6795#L332 assume !(~nomsg~0 != ~nomsg~0 && ~s2s2_new~0 == ~nomsg~0);Side2_activestandby_task_each_pals_period_#t~ite16#1 := ~s2s2_new~0; 6794#L332-2 ~s2s2_new~0 := (if Side2_activestandby_task_each_pals_period_#t~ite16#1 % 256 <= 127 then Side2_activestandby_task_each_pals_period_#t~ite16#1 % 256 else Side2_activestandby_task_each_pals_period_#t~ite16#1 % 256 - 256);havoc Side2_activestandby_task_each_pals_period_#t~ite16#1; 6789#L333 assume !(~nomsg~0 != ~nomsg~0 && ~s2p_new~0 == ~nomsg~0);Side2_activestandby_task_each_pals_period_#t~ite17#1 := ~s2p_new~0; 6786#L333-2 ~s2p_new~0 := (if Side2_activestandby_task_each_pals_period_#t~ite17#1 % 256 <= 127 then Side2_activestandby_task_each_pals_period_#t~ite17#1 % 256 else Side2_activestandby_task_each_pals_period_#t~ite17#1 % 256 - 256);havoc Side2_activestandby_task_each_pals_period_#t~ite17#1;~side2_written~0 := ~nomsg~0; 6785#L371 assume { :end_inline_Side2_activestandby_task_each_pals_period } true;assume { :begin_inline_Pendulum_prism_task_each_pals_period } true;havoc Pendulum_prism_task_each_pals_period_#t~ret22#1, Pendulum_prism_task_each_pals_period_~active_side~0#1, Pendulum_prism_task_each_pals_period_~tmp~2#1, Pendulum_prism_task_each_pals_period_~side1~2#1, Pendulum_prism_task_each_pals_period_~side2~2#1;havoc Pendulum_prism_task_each_pals_period_~active_side~0#1;havoc Pendulum_prism_task_each_pals_period_~tmp~2#1;havoc Pendulum_prism_task_each_pals_period_~side1~2#1;havoc Pendulum_prism_task_each_pals_period_~side2~2#1;assume { :begin_inline_read_active_side_history } true;read_active_side_history_#in~index#1 := 0;havoc read_active_side_history_#res#1;havoc read_active_side_history_~index#1;read_active_side_history_~index#1 := read_active_side_history_#in~index#1; 6782#L148 assume 0 == read_active_side_history_~index#1 % 256;read_active_side_history_#res#1 := ~active_side_History_0~0; 6781#L158 Pendulum_prism_task_each_pals_period_#t~ret22#1 := read_active_side_history_#res#1;assume { :end_inline_read_active_side_history } true;Pendulum_prism_task_each_pals_period_~tmp~2#1 := Pendulum_prism_task_each_pals_period_#t~ret22#1;havoc Pendulum_prism_task_each_pals_period_#t~ret22#1;Pendulum_prism_task_each_pals_period_~active_side~0#1 := Pendulum_prism_task_each_pals_period_~tmp~2#1;Pendulum_prism_task_each_pals_period_~side1~2#1 := ~nomsg~0;Pendulum_prism_task_each_pals_period_~side2~2#1 := ~nomsg~0;Pendulum_prism_task_each_pals_period_~side1~2#1 := ~s1p_old~0;~s1p_old~0 := ~nomsg~0;Pendulum_prism_task_each_pals_period_~side2~2#1 := ~s2p_old~0;~s2p_old~0 := ~nomsg~0; 6780#L390 assume 1 == Pendulum_prism_task_each_pals_period_~side1~2#1;Pendulum_prism_task_each_pals_period_~active_side~0#1 := 1; 6774#L404 assume { :begin_inline_write_active_side_history } true;write_active_side_history_#in~val#1 := Pendulum_prism_task_each_pals_period_~active_side~0#1;havoc write_active_side_history_~val#1;write_active_side_history_~val#1 := write_active_side_history_#in~val#1;~active_side_History_2~0 := ~active_side_History_1~0;~active_side_History_1~0 := ~active_side_History_0~0;~active_side_History_0~0 := write_active_side_history_~val#1; 6773#L140 assume { :end_inline_write_active_side_history } true; 6698#L414 assume { :end_inline_Pendulum_prism_task_each_pals_period } true;~cs1_old~0 := ~cs1_new~0;~cs1_new~0 := ~nomsg~0;~cs2_old~0 := ~cs2_new~0;~cs2_new~0 := ~nomsg~0;~s1s2_old~0 := ~s1s2_new~0;~s1s2_new~0 := ~nomsg~0;~s1s1_old~0 := ~s1s1_new~0;~s1s1_new~0 := ~nomsg~0;~s2s1_old~0 := ~s2s1_new~0;~s2s1_new~0 := ~nomsg~0;~s2s2_old~0 := ~s2s2_new~0;~s2s2_new~0 := ~nomsg~0;~s1p_old~0 := ~s1p_new~0;~s1p_new~0 := ~nomsg~0;~s2p_old~0 := ~s2p_new~0;~s2p_new~0 := ~nomsg~0;assume { :begin_inline_check } true;havoc check_#res#1;havoc check_#t~ret23#1, check_#t~ret24#1, check_#t~ret25#1, check_#t~ret26#1, check_#t~ret27#1, check_#t~ret28#1, check_#t~ret29#1, check_#t~ret30#1, check_#t~ret31#1, check_#t~ret32#1, check_#t~ret33#1, check_#t~ret34#1, check_#t~ret35#1, check_#t~ret36#1, check_#t~ret37#1, check_#t~ret38#1, check_#t~ret39#1, check_#t~ret40#1, check_#t~ret41#1, check_#t~ret42#1, check_#t~ret43#1, check_~tmp~3#1, check_~tmp___0~0#1, check_~tmp___1~0#1, check_~tmp___2~0#1, check_~tmp___3~0#1, check_~tmp___4~0#1, check_~tmp___5~0#1, check_~tmp___6~0#1, check_~tmp___7~0#1, check_~tmp___8~0#1, check_~tmp___9~0#1, check_~tmp___10~0#1, check_~tmp___11~0#1, check_~tmp___12~0#1, check_~tmp___13~0#1, check_~tmp___14~0#1, check_~tmp___15~0#1, check_~tmp___16~0#1, check_~tmp___17~0#1, check_~tmp___18~0#1, check_~tmp___19~0#1, check_~tmp___20~0#1;havoc check_~tmp~3#1;havoc check_~tmp___0~0#1;havoc check_~tmp___1~0#1;havoc check_~tmp___2~0#1;havoc check_~tmp___3~0#1;havoc check_~tmp___4~0#1;havoc check_~tmp___5~0#1;havoc check_~tmp___6~0#1;havoc check_~tmp___7~0#1;havoc check_~tmp___8~0#1;havoc check_~tmp___9~0#1;havoc check_~tmp___10~0#1;havoc check_~tmp___11~0#1;havoc check_~tmp___12~0#1;havoc check_~tmp___13~0#1;havoc check_~tmp___14~0#1;havoc check_~tmp___15~0#1;havoc check_~tmp___16~0#1;havoc check_~tmp___17~0#1;havoc check_~tmp___18~0#1;havoc check_~tmp___19~0#1;havoc check_~tmp___20~0#1; 6552#L443 assume !(0 == ~side1Failed~0 % 256); 6553#L446 assume !(0 == ~side2Failed~0 % 256);check_~tmp~3#1 := 0; 6554#L446-2 assume { :begin_inline_assume_abort_if_not } true;assume_abort_if_not_#in~cond#1 := (if 0 == check_~tmp~3#1 then 0 else 1) % 256;havoc assume_abort_if_not_~cond#1;assume_abort_if_not_~cond#1 := assume_abort_if_not_#in~cond#1; 6555#L58-2 assume !(0 == assume_abort_if_not_~cond#1); 6491#L57-1 assume { :end_inline_assume_abort_if_not } true;assume { :begin_inline_read_manual_selection_history } true;read_manual_selection_history_#in~index#1 := 1;havoc read_manual_selection_history_#res#1;havoc read_manual_selection_history_~index#1;read_manual_selection_history_~index#1 := read_manual_selection_history_#in~index#1; 6492#L178 assume !(0 == read_manual_selection_history_~index#1 % 256); 6503#L181 assume 1 == read_manual_selection_history_~index#1 % 256;read_manual_selection_history_#res#1 := ~manual_selection_History_1~0; 6599#L188 check_#t~ret23#1 := read_manual_selection_history_#res#1;assume { :end_inline_read_manual_selection_history } true;check_~tmp___0~0#1 := check_#t~ret23#1;havoc check_#t~ret23#1; 6663#L453 assume !(0 == check_~tmp___0~0#1); 6475#L453-1 assume { :begin_inline_read_side1_failed_history } true;read_side1_failed_history_#in~index#1 := 1;havoc read_side1_failed_history_#res#1;havoc read_side1_failed_history_~index#1;read_side1_failed_history_~index#1 := read_side1_failed_history_#in~index#1; 6487#L88-2 assume !(0 == read_side1_failed_history_~index#1 % 256); 6488#L91-2 assume 1 == read_side1_failed_history_~index#1 % 256;read_side1_failed_history_#res#1 := ~side1Failed_History_1~0; 6562#L98-2 check_#t~ret28#1 := read_side1_failed_history_#res#1;assume { :end_inline_read_side1_failed_history } true;check_~tmp___7~0#1 := check_#t~ret28#1;havoc check_#t~ret28#1; 6686#L483 assume !(0 != check_~tmp___7~0#1 % 256); 6583#L483-1 assume { :begin_inline_read_side1_failed_history } true;read_side1_failed_history_#in~index#1 := 1;havoc read_side1_failed_history_#res#1;havoc read_side1_failed_history_~index#1;read_side1_failed_history_~index#1 := read_side1_failed_history_#in~index#1; 6584#L88-3 assume !(0 == read_side1_failed_history_~index#1 % 256); 6626#L91-3 assume 1 == read_side1_failed_history_~index#1 % 256;read_side1_failed_history_#res#1 := ~side1Failed_History_1~0; 6627#L98-3 check_#t~ret32#1 := read_side1_failed_history_#res#1;assume { :end_inline_read_side1_failed_history } true;check_~tmp___11~0#1 := check_#t~ret32#1;havoc check_#t~ret32#1; 6709#L499 assume !(0 == check_~tmp___11~0#1 % 256); 6526#L499-1 assume { :begin_inline_read_active_side_history } true;read_active_side_history_#in~index#1 := 2;havoc read_active_side_history_#res#1;havoc read_active_side_history_~index#1;read_active_side_history_~index#1 := read_active_side_history_#in~index#1; 6527#L148-3 assume !(0 == read_active_side_history_~index#1 % 256); 6609#L151-3 assume 1 == read_active_side_history_~index#1 % 256;read_active_side_history_#res#1 := ~active_side_History_1~0; 6551#L158-3 check_#t~ret36#1 := read_active_side_history_#res#1;assume { :end_inline_read_active_side_history } true;check_~tmp___20~0#1 := check_#t~ret36#1;havoc check_#t~ret36#1; 6662#L515 assume !(check_~tmp___20~0#1 > -2); 6495#L515-1 check_#res#1 := 1; 6496#L533 main_#t~ret61#1 := check_#res#1;assume { :end_inline_check } true;main_~c1~0#1 := main_#t~ret61#1;havoc main_#t~ret61#1;assume { :begin_inline_assert } true;assert_#in~arg#1 := (if 0 == main_~c1~0#1 then 0 else 1);havoc assert_~arg#1;assert_~arg#1 := assert_#in~arg#1; 6623#L612-44 assume !(0 == assert_~arg#1 % 256); 6563#L607-22 assume { :end_inline_assert } true; 6564#L578-2 [2021-12-15 17:22:10,835 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-15 17:22:10,835 INFO L85 PathProgramCache]: Analyzing trace with hash -613005151, now seen corresponding path program 8 times [2021-12-15 17:22:10,835 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-15 17:22:10,836 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [893699014] [2021-12-15 17:22:10,836 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-15 17:22:10,836 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-15 17:22:10,843 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-15 17:22:10,843 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-12-15 17:22:10,848 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-15 17:22:10,858 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-12-15 17:22:10,859 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-15 17:22:10,859 INFO L85 PathProgramCache]: Analyzing trace with hash 1627735184, now seen corresponding path program 1 times [2021-12-15 17:22:10,859 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-15 17:22:10,859 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [864631825] [2021-12-15 17:22:10,859 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-15 17:22:10,859 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-15 17:22:10,870 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-15 17:22:10,905 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-15 17:22:10,905 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-15 17:22:10,905 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [864631825] [2021-12-15 17:22:10,905 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [864631825] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-15 17:22:10,906 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-15 17:22:10,906 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-15 17:22:10,906 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [409996132] [2021-12-15 17:22:10,906 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-15 17:22:10,906 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-12-15 17:22:10,907 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-15 17:22:10,907 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-15 17:22:10,907 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-15 17:22:10,907 INFO L87 Difference]: Start difference. First operand 357 states and 497 transitions. cyclomatic complexity: 141 Second operand has 3 states, 3 states have (on average 19.666666666666668) internal successors, (59), 3 states have internal predecessors, (59), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-15 17:22:10,947 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-15 17:22:10,947 INFO L93 Difference]: Finished difference Result 437 states and 607 transitions. [2021-12-15 17:22:10,948 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-15 17:22:10,949 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 437 states and 607 transitions. [2021-12-15 17:22:10,952 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 420 [2021-12-15 17:22:10,954 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 437 states to 437 states and 607 transitions. [2021-12-15 17:22:10,954 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 437 [2021-12-15 17:22:10,955 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 437 [2021-12-15 17:22:10,955 INFO L73 IsDeterministic]: Start isDeterministic. Operand 437 states and 607 transitions. [2021-12-15 17:22:10,955 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-12-15 17:22:10,955 INFO L681 BuchiCegarLoop]: Abstraction has 437 states and 607 transitions. [2021-12-15 17:22:10,956 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 437 states and 607 transitions. [2021-12-15 17:22:10,959 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 437 to 264. [2021-12-15 17:22:10,959 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 264 states, 264 states have (on average 1.4090909090909092) internal successors, (372), 263 states have internal predecessors, (372), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-15 17:22:10,960 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 264 states to 264 states and 372 transitions. [2021-12-15 17:22:10,960 INFO L704 BuchiCegarLoop]: Abstraction has 264 states and 372 transitions. [2021-12-15 17:22:10,960 INFO L587 BuchiCegarLoop]: Abstraction has 264 states and 372 transitions. [2021-12-15 17:22:10,960 INFO L425 BuchiCegarLoop]: ======== Iteration 10============ [2021-12-15 17:22:10,960 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 264 states and 372 transitions. [2021-12-15 17:22:10,961 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 247 [2021-12-15 17:22:10,962 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-15 17:22:10,962 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-15 17:22:10,962 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-15 17:22:10,962 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-15 17:22:10,963 INFO L791 eck$LassoCheckResult]: Stem: 7471#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(52, 2);call #Ultimate.allocInit(12, 3);~nomsg~0 := -1;~cs1~0 := 0;~cs1_old~0 := 0;~cs1_new~0 := 0;~cs2~0 := 0;~cs2_old~0 := 0;~cs2_new~0 := 0;~s1s2~0 := 0;~s1s2_old~0 := 0;~s1s2_new~0 := 0;~s1s1~0 := 0;~s1s1_old~0 := 0;~s1s1_new~0 := 0;~s2s1~0 := 0;~s2s1_old~0 := 0;~s2s1_new~0 := 0;~s2s2~0 := 0;~s2s2_old~0 := 0;~s2s2_new~0 := 0;~s1p~0 := 0;~s1p_old~0 := 0;~s1p_new~0 := 0;~s2p~0 := 0;~s2p_old~0 := 0;~s2p_new~0 := 0;~side1Failed~0 := 0;~side2Failed~0 := 0;~side1_written~0 := 0;~side2_written~0 := 0;~side1Failed_History_0~0 := 0;~side1Failed_History_1~0 := 0;~side1Failed_History_2~0 := 0;~side2Failed_History_0~0 := 0;~side2Failed_History_1~0 := 0;~side2Failed_History_2~0 := 0;~active_side_History_0~0 := 0;~active_side_History_1~0 := 0;~active_side_History_2~0 := 0;~manual_selection_History_0~0 := 0;~manual_selection_History_1~0 := 0;~manual_selection_History_2~0 := 0; 7451#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~nondet44#1, main_#t~nondet45#1, main_#t~nondet46#1, main_#t~nondet47#1, main_#t~nondet48#1, main_#t~nondet49#1, main_#t~nondet50#1, main_#t~nondet51#1, main_#t~nondet52#1, main_#t~nondet53#1, main_#t~nondet54#1, main_#t~nondet55#1, main_#t~nondet56#1, main_#t~nondet57#1, main_#t~nondet58#1, main_#t~nondet59#1, main_#t~ret60#1, main_#t~ret61#1, main_~c1~0#1, main_~i2~0#1;havoc main_~c1~0#1;havoc main_~i2~0#1;main_~c1~0#1 := 0;~side1Failed~0 := main_#t~nondet44#1;havoc main_#t~nondet44#1;~side2Failed~0 := main_#t~nondet45#1;havoc main_#t~nondet45#1;~side1_written~0 := main_#t~nondet46#1;havoc main_#t~nondet46#1;~side2_written~0 := main_#t~nondet47#1;havoc main_#t~nondet47#1;~side1Failed_History_0~0 := main_#t~nondet48#1;havoc main_#t~nondet48#1;~side1Failed_History_1~0 := main_#t~nondet49#1;havoc main_#t~nondet49#1;~side1Failed_History_2~0 := main_#t~nondet50#1;havoc main_#t~nondet50#1;~side2Failed_History_0~0 := main_#t~nondet51#1;havoc main_#t~nondet51#1;~side2Failed_History_1~0 := main_#t~nondet52#1;havoc main_#t~nondet52#1;~side2Failed_History_2~0 := main_#t~nondet53#1;havoc main_#t~nondet53#1;~active_side_History_0~0 := main_#t~nondet54#1;havoc main_#t~nondet54#1;~active_side_History_1~0 := main_#t~nondet55#1;havoc main_#t~nondet55#1;~active_side_History_2~0 := main_#t~nondet56#1;havoc main_#t~nondet56#1;~manual_selection_History_0~0 := main_#t~nondet57#1;havoc main_#t~nondet57#1;~manual_selection_History_1~0 := main_#t~nondet58#1;havoc main_#t~nondet58#1;~manual_selection_History_2~0 := main_#t~nondet59#1;havoc main_#t~nondet59#1;assume { :begin_inline_init } true;havoc init_#res#1; 7366#L197 assume !(0 != ~side1Failed_History_0~0 % 256); 7367#L200 assume !(0 != ~side2Failed_History_0~0 % 256); 7299#L203 assume !(-2 != ~active_side_History_0~0); 7300#L206 assume !(0 != ~manual_selection_History_0~0); 7316#L209 assume !(0 != ~side1Failed_History_1~0 % 256); 7462#L212 assume !(0 != ~side2Failed_History_1~0 % 256); 7425#L215 assume !(-2 != ~active_side_History_1~0); 7426#L218 assume !(0 != ~manual_selection_History_1~0); 7452#L221 assume !(0 != ~side1Failed_History_2~0 % 256); 7464#L224 assume !(0 != ~side2Failed_History_2~0 % 256); 7398#L227 assume !(-2 != ~active_side_History_2~0); 7399#L230 assume !(0 != ~manual_selection_History_2~0);init_#res#1 := 1; 7356#L233 main_#t~ret60#1 := init_#res#1;assume { :end_inline_init } true;main_~i2~0#1 := main_#t~ret60#1;havoc main_#t~ret60#1;assume { :begin_inline_assume_abort_if_not } true;assume_abort_if_not_#in~cond#1 := main_~i2~0#1;havoc assume_abort_if_not_~cond#1;assume_abort_if_not_~cond#1 := assume_abort_if_not_#in~cond#1; 7357#L58 assume !(0 == assume_abort_if_not_~cond#1); 7427#L57 assume { :end_inline_assume_abort_if_not } true;~cs1_old~0 := ~nomsg~0;~cs1_new~0 := ~nomsg~0;~cs2_old~0 := ~nomsg~0;~cs2_new~0 := ~nomsg~0;~s1s2_old~0 := ~nomsg~0;~s1s2_new~0 := ~nomsg~0;~s1s1_old~0 := ~nomsg~0;~s1s1_new~0 := ~nomsg~0;~s2s1_old~0 := ~nomsg~0;~s2s1_new~0 := ~nomsg~0;~s2s2_old~0 := ~nomsg~0;~s2s2_new~0 := ~nomsg~0;~s1p_old~0 := ~nomsg~0;~s1p_new~0 := ~nomsg~0;~s2p_old~0 := ~nomsg~0;~s2p_new~0 := ~nomsg~0;main_~i2~0#1 := 0; 7362#L578-2 [2021-12-15 17:22:10,963 INFO L793 eck$LassoCheckResult]: Loop: 7362#L578-2 assume !false;assume { :begin_inline_Console_task_each_pals_period } true;havoc Console_task_each_pals_period_#t~nondet4#1, Console_task_each_pals_period_#t~ite5#1, Console_task_each_pals_period_#t~ite6#1, Console_task_each_pals_period_~manual_selection~0#1, Console_task_each_pals_period_~tmp~1#1;havoc Console_task_each_pals_period_~manual_selection~0#1;havoc Console_task_each_pals_period_~tmp~1#1;Console_task_each_pals_period_~tmp~1#1 := Console_task_each_pals_period_#t~nondet4#1;havoc Console_task_each_pals_period_#t~nondet4#1;Console_task_each_pals_period_~manual_selection~0#1 := Console_task_each_pals_period_~tmp~1#1;assume { :begin_inline_write_manual_selection_history } true;write_manual_selection_history_#in~val#1 := Console_task_each_pals_period_~manual_selection~0#1;havoc write_manual_selection_history_~val#1;write_manual_selection_history_~val#1 := write_manual_selection_history_#in~val#1;~manual_selection_History_2~0 := ~manual_selection_History_1~0;~manual_selection_History_1~0 := ~manual_selection_History_0~0;~manual_selection_History_0~0 := write_manual_selection_history_~val#1; 7411#L170 assume { :end_inline_write_manual_selection_history } true; 7446#L258 assume Console_task_each_pals_period_~manual_selection~0#1 != ~nomsg~0 && ~cs1_new~0 == ~nomsg~0;Console_task_each_pals_period_#t~ite5#1 := Console_task_each_pals_period_~manual_selection~0#1; 7447#L258-2 ~cs1_new~0 := (if Console_task_each_pals_period_#t~ite5#1 % 256 <= 127 then Console_task_each_pals_period_#t~ite5#1 % 256 else Console_task_each_pals_period_#t~ite5#1 % 256 - 256);havoc Console_task_each_pals_period_#t~ite5#1; 7459#L259 assume Console_task_each_pals_period_~manual_selection~0#1 != ~nomsg~0 && ~cs2_new~0 == ~nomsg~0;Console_task_each_pals_period_#t~ite6#1 := Console_task_each_pals_period_~manual_selection~0#1; 7460#L259-2 ~cs2_new~0 := (if Console_task_each_pals_period_#t~ite6#1 % 256 <= 127 then Console_task_each_pals_period_#t~ite6#1 % 256 else Console_task_each_pals_period_#t~ite6#1 % 256 - 256);havoc Console_task_each_pals_period_#t~ite6#1;Console_task_each_pals_period_~manual_selection~0#1 := 0; 7430#L261 assume { :end_inline_Console_task_each_pals_period } true;assume { :begin_inline_Side1_activestandby_task_each_pals_period } true;havoc Side1_activestandby_task_each_pals_period_#t~nondet7#1, Side1_activestandby_task_each_pals_period_#t~ite8#1, Side1_activestandby_task_each_pals_period_#t~ite9#1, Side1_activestandby_task_each_pals_period_#t~ite10#1, Side1_activestandby_task_each_pals_period_#t~ite11#1, Side1_activestandby_task_each_pals_period_#t~ite12#1, Side1_activestandby_task_each_pals_period_#t~ite13#1, Side1_activestandby_task_each_pals_period_~side1~0#1, Side1_activestandby_task_each_pals_period_~side2~0#1, Side1_activestandby_task_each_pals_period_~manual_selection~1#1, Side1_activestandby_task_each_pals_period_~next_state~0#1;havoc Side1_activestandby_task_each_pals_period_~side1~0#1;havoc Side1_activestandby_task_each_pals_period_~side2~0#1;havoc Side1_activestandby_task_each_pals_period_~manual_selection~1#1;havoc Side1_activestandby_task_each_pals_period_~next_state~0#1;Side1_activestandby_task_each_pals_period_~side1~0#1 := ~nomsg~0;Side1_activestandby_task_each_pals_period_~side2~0#1 := ~nomsg~0;Side1_activestandby_task_each_pals_period_~manual_selection~1#1 := 0;~side1Failed~0 := Side1_activestandby_task_each_pals_period_#t~nondet7#1;havoc Side1_activestandby_task_each_pals_period_#t~nondet7#1;assume { :begin_inline_write_side1_failed_history } true;write_side1_failed_history_#in~val#1 := ~side1Failed~0;havoc write_side1_failed_history_~val#1;write_side1_failed_history_~val#1 := write_side1_failed_history_#in~val#1;~side1Failed_History_2~0 := ~side1Failed_History_1~0;~side1Failed_History_1~0 := ~side1Failed_History_0~0;~side1Failed_History_0~0 := write_side1_failed_history_~val#1; 7431#L80 assume { :end_inline_write_side1_failed_history } true; 7421#L277 assume 0 != ~side1Failed~0 % 256; 7422#L278 assume !(~nomsg~0 != ~nomsg~0 && ~s1s1_new~0 == ~nomsg~0);Side1_activestandby_task_each_pals_period_#t~ite8#1 := ~s1s1_new~0; 7429#L278-2 ~s1s1_new~0 := (if Side1_activestandby_task_each_pals_period_#t~ite8#1 % 256 <= 127 then Side1_activestandby_task_each_pals_period_#t~ite8#1 % 256 else Side1_activestandby_task_each_pals_period_#t~ite8#1 % 256 - 256);havoc Side1_activestandby_task_each_pals_period_#t~ite8#1; 7342#L279 assume !(~nomsg~0 != ~nomsg~0 && ~s1s2_new~0 == ~nomsg~0);Side1_activestandby_task_each_pals_period_#t~ite9#1 := ~s1s2_new~0; 7311#L279-2 ~s1s2_new~0 := (if Side1_activestandby_task_each_pals_period_#t~ite9#1 % 256 <= 127 then Side1_activestandby_task_each_pals_period_#t~ite9#1 % 256 else Side1_activestandby_task_each_pals_period_#t~ite9#1 % 256 - 256);havoc Side1_activestandby_task_each_pals_period_#t~ite9#1; 7312#L280 assume !(~nomsg~0 != ~nomsg~0 && ~s1p_new~0 == ~nomsg~0);Side1_activestandby_task_each_pals_period_#t~ite10#1 := ~s1p_new~0; 7402#L280-2 ~s1p_new~0 := (if Side1_activestandby_task_each_pals_period_#t~ite10#1 % 256 <= 127 then Side1_activestandby_task_each_pals_period_#t~ite10#1 % 256 else Side1_activestandby_task_each_pals_period_#t~ite10#1 % 256 - 256);havoc Side1_activestandby_task_each_pals_period_#t~ite10#1;~side1_written~0 := ~nomsg~0; 7403#L314 assume { :end_inline_Side1_activestandby_task_each_pals_period } true;assume { :begin_inline_Side2_activestandby_task_each_pals_period } true;havoc Side2_activestandby_task_each_pals_period_#t~nondet14#1, Side2_activestandby_task_each_pals_period_#t~ite15#1, Side2_activestandby_task_each_pals_period_#t~ite16#1, Side2_activestandby_task_each_pals_period_#t~ite17#1, Side2_activestandby_task_each_pals_period_#t~ret18#1, Side2_activestandby_task_each_pals_period_#t~ite19#1, Side2_activestandby_task_each_pals_period_#t~ite20#1, Side2_activestandby_task_each_pals_period_#t~ite21#1, Side2_activestandby_task_each_pals_period_~side1~1#1, Side2_activestandby_task_each_pals_period_~side2~1#1, Side2_activestandby_task_each_pals_period_~manual_selection~2#1, Side2_activestandby_task_each_pals_period_~next_state~1#1;havoc Side2_activestandby_task_each_pals_period_~side1~1#1;havoc Side2_activestandby_task_each_pals_period_~side2~1#1;havoc Side2_activestandby_task_each_pals_period_~manual_selection~2#1;havoc Side2_activestandby_task_each_pals_period_~next_state~1#1;Side2_activestandby_task_each_pals_period_~side1~1#1 := ~nomsg~0;Side2_activestandby_task_each_pals_period_~side2~1#1 := ~nomsg~0;Side2_activestandby_task_each_pals_period_~manual_selection~2#1 := 0;~side2Failed~0 := Side2_activestandby_task_each_pals_period_#t~nondet14#1;havoc Side2_activestandby_task_each_pals_period_#t~nondet14#1;assume { :begin_inline_write_side2_failed_history } true;write_side2_failed_history_#in~val#1 := ~side2Failed~0;havoc write_side2_failed_history_~val#1;write_side2_failed_history_~val#1 := write_side2_failed_history_#in~val#1;~side2Failed_History_2~0 := ~side2Failed_History_1~0;~side2Failed_History_1~0 := ~side2Failed_History_0~0;~side2Failed_History_0~0 := write_side2_failed_history_~val#1; 7365#L110 assume { :end_inline_write_side2_failed_history } true; 7337#L330 assume 0 != ~side2Failed~0 % 256; 7338#L331 assume !(~nomsg~0 != ~nomsg~0 && ~s2s1_new~0 == ~nomsg~0);Side2_activestandby_task_each_pals_period_#t~ite15#1 := ~s2s1_new~0; 7414#L331-2 ~s2s1_new~0 := (if Side2_activestandby_task_each_pals_period_#t~ite15#1 % 256 <= 127 then Side2_activestandby_task_each_pals_period_#t~ite15#1 % 256 else Side2_activestandby_task_each_pals_period_#t~ite15#1 % 256 - 256);havoc Side2_activestandby_task_each_pals_period_#t~ite15#1; 7415#L332 assume !(~nomsg~0 != ~nomsg~0 && ~s2s2_new~0 == ~nomsg~0);Side2_activestandby_task_each_pals_period_#t~ite16#1 := ~s2s2_new~0; 7445#L332-2 ~s2s2_new~0 := (if Side2_activestandby_task_each_pals_period_#t~ite16#1 % 256 <= 127 then Side2_activestandby_task_each_pals_period_#t~ite16#1 % 256 else Side2_activestandby_task_each_pals_period_#t~ite16#1 % 256 - 256);havoc Side2_activestandby_task_each_pals_period_#t~ite16#1; 7519#L333 assume !(~nomsg~0 != ~nomsg~0 && ~s2p_new~0 == ~nomsg~0);Side2_activestandby_task_each_pals_period_#t~ite17#1 := ~s2p_new~0; 7518#L333-2 ~s2p_new~0 := (if Side2_activestandby_task_each_pals_period_#t~ite17#1 % 256 <= 127 then Side2_activestandby_task_each_pals_period_#t~ite17#1 % 256 else Side2_activestandby_task_each_pals_period_#t~ite17#1 % 256 - 256);havoc Side2_activestandby_task_each_pals_period_#t~ite17#1;~side2_written~0 := ~nomsg~0; 7517#L371 assume { :end_inline_Side2_activestandby_task_each_pals_period } true;assume { :begin_inline_Pendulum_prism_task_each_pals_period } true;havoc Pendulum_prism_task_each_pals_period_#t~ret22#1, Pendulum_prism_task_each_pals_period_~active_side~0#1, Pendulum_prism_task_each_pals_period_~tmp~2#1, Pendulum_prism_task_each_pals_period_~side1~2#1, Pendulum_prism_task_each_pals_period_~side2~2#1;havoc Pendulum_prism_task_each_pals_period_~active_side~0#1;havoc Pendulum_prism_task_each_pals_period_~tmp~2#1;havoc Pendulum_prism_task_each_pals_period_~side1~2#1;havoc Pendulum_prism_task_each_pals_period_~side2~2#1;assume { :begin_inline_read_active_side_history } true;read_active_side_history_#in~index#1 := 0;havoc read_active_side_history_#res#1;havoc read_active_side_history_~index#1;read_active_side_history_~index#1 := read_active_side_history_#in~index#1; 7514#L148 assume 0 == read_active_side_history_~index#1 % 256;read_active_side_history_#res#1 := ~active_side_History_0~0; 7513#L158 Pendulum_prism_task_each_pals_period_#t~ret22#1 := read_active_side_history_#res#1;assume { :end_inline_read_active_side_history } true;Pendulum_prism_task_each_pals_period_~tmp~2#1 := Pendulum_prism_task_each_pals_period_#t~ret22#1;havoc Pendulum_prism_task_each_pals_period_#t~ret22#1;Pendulum_prism_task_each_pals_period_~active_side~0#1 := Pendulum_prism_task_each_pals_period_~tmp~2#1;Pendulum_prism_task_each_pals_period_~side1~2#1 := ~nomsg~0;Pendulum_prism_task_each_pals_period_~side2~2#1 := ~nomsg~0;Pendulum_prism_task_each_pals_period_~side1~2#1 := ~s1p_old~0;~s1p_old~0 := ~nomsg~0;Pendulum_prism_task_each_pals_period_~side2~2#1 := ~s2p_old~0;~s2p_old~0 := ~nomsg~0; 7468#L390 assume 1 == Pendulum_prism_task_each_pals_period_~side1~2#1;Pendulum_prism_task_each_pals_period_~active_side~0#1 := 1; 7379#L404 assume { :begin_inline_write_active_side_history } true;write_active_side_history_#in~val#1 := Pendulum_prism_task_each_pals_period_~active_side~0#1;havoc write_active_side_history_~val#1;write_active_side_history_~val#1 := write_active_side_history_#in~val#1;~active_side_History_2~0 := ~active_side_History_1~0;~active_side_History_1~0 := ~active_side_History_0~0;~active_side_History_0~0 := write_active_side_history_~val#1; 7345#L140 assume { :end_inline_write_active_side_history } true; 7346#L414 assume { :end_inline_Pendulum_prism_task_each_pals_period } true;~cs1_old~0 := ~cs1_new~0;~cs1_new~0 := ~nomsg~0;~cs2_old~0 := ~cs2_new~0;~cs2_new~0 := ~nomsg~0;~s1s2_old~0 := ~s1s2_new~0;~s1s2_new~0 := ~nomsg~0;~s1s1_old~0 := ~s1s1_new~0;~s1s1_new~0 := ~nomsg~0;~s2s1_old~0 := ~s2s1_new~0;~s2s1_new~0 := ~nomsg~0;~s2s2_old~0 := ~s2s2_new~0;~s2s2_new~0 := ~nomsg~0;~s1p_old~0 := ~s1p_new~0;~s1p_new~0 := ~nomsg~0;~s2p_old~0 := ~s2p_new~0;~s2p_new~0 := ~nomsg~0;assume { :begin_inline_check } true;havoc check_#res#1;havoc check_#t~ret23#1, check_#t~ret24#1, check_#t~ret25#1, check_#t~ret26#1, check_#t~ret27#1, check_#t~ret28#1, check_#t~ret29#1, check_#t~ret30#1, check_#t~ret31#1, check_#t~ret32#1, check_#t~ret33#1, check_#t~ret34#1, check_#t~ret35#1, check_#t~ret36#1, check_#t~ret37#1, check_#t~ret38#1, check_#t~ret39#1, check_#t~ret40#1, check_#t~ret41#1, check_#t~ret42#1, check_#t~ret43#1, check_~tmp~3#1, check_~tmp___0~0#1, check_~tmp___1~0#1, check_~tmp___2~0#1, check_~tmp___3~0#1, check_~tmp___4~0#1, check_~tmp___5~0#1, check_~tmp___6~0#1, check_~tmp___7~0#1, check_~tmp___8~0#1, check_~tmp___9~0#1, check_~tmp___10~0#1, check_~tmp___11~0#1, check_~tmp___12~0#1, check_~tmp___13~0#1, check_~tmp___14~0#1, check_~tmp___15~0#1, check_~tmp___16~0#1, check_~tmp___17~0#1, check_~tmp___18~0#1, check_~tmp___19~0#1, check_~tmp___20~0#1;havoc check_~tmp~3#1;havoc check_~tmp___0~0#1;havoc check_~tmp___1~0#1;havoc check_~tmp___2~0#1;havoc check_~tmp___3~0#1;havoc check_~tmp___4~0#1;havoc check_~tmp___5~0#1;havoc check_~tmp___6~0#1;havoc check_~tmp___7~0#1;havoc check_~tmp___8~0#1;havoc check_~tmp___9~0#1;havoc check_~tmp___10~0#1;havoc check_~tmp___11~0#1;havoc check_~tmp___12~0#1;havoc check_~tmp___13~0#1;havoc check_~tmp___14~0#1;havoc check_~tmp___15~0#1;havoc check_~tmp___16~0#1;havoc check_~tmp___17~0#1;havoc check_~tmp___18~0#1;havoc check_~tmp___19~0#1;havoc check_~tmp___20~0#1; 7351#L443 assume !(0 == ~side1Failed~0 % 256); 7352#L446 assume !(0 == ~side2Failed~0 % 256);check_~tmp~3#1 := 0; 7353#L446-2 assume { :begin_inline_assume_abort_if_not } true;assume_abort_if_not_#in~cond#1 := (if 0 == check_~tmp~3#1 then 0 else 1) % 256;havoc assume_abort_if_not_~cond#1;assume_abort_if_not_~cond#1 := assume_abort_if_not_#in~cond#1; 7354#L58-2 assume !(0 == assume_abort_if_not_~cond#1); 7291#L57-1 assume { :end_inline_assume_abort_if_not } true;assume { :begin_inline_read_manual_selection_history } true;read_manual_selection_history_#in~index#1 := 1;havoc read_manual_selection_history_#res#1;havoc read_manual_selection_history_~index#1;read_manual_selection_history_~index#1 := read_manual_selection_history_#in~index#1; 7292#L178 assume !(0 == read_manual_selection_history_~index#1 % 256); 7303#L181 assume 1 == read_manual_selection_history_~index#1 % 256;read_manual_selection_history_#res#1 := ~manual_selection_History_1~0; 7293#L188 check_#t~ret23#1 := read_manual_selection_history_#res#1;assume { :end_inline_read_manual_selection_history } true;check_~tmp___0~0#1 := check_#t~ret23#1;havoc check_#t~ret23#1; 7294#L453 assume !(0 == check_~tmp___0~0#1); 7275#L453-1 assume { :begin_inline_read_side1_failed_history } true;read_side1_failed_history_#in~index#1 := 1;havoc read_side1_failed_history_#res#1;havoc read_side1_failed_history_~index#1;read_side1_failed_history_~index#1 := read_side1_failed_history_#in~index#1; 7287#L88-2 assume !(0 == read_side1_failed_history_~index#1 % 256); 7288#L91-2 assume 1 == read_side1_failed_history_~index#1 % 256;read_side1_failed_history_#res#1 := ~side1Failed_History_1~0; 7363#L98-2 check_#t~ret28#1 := read_side1_failed_history_#res#1;assume { :end_inline_read_side1_failed_history } true;check_~tmp___7~0#1 := check_#t~ret28#1;havoc check_#t~ret28#1; 7465#L483 assume !(0 != check_~tmp___7~0#1 % 256); 7280#L483-1 assume { :begin_inline_read_side1_failed_history } true;read_side1_failed_history_#in~index#1 := 1;havoc read_side1_failed_history_#res#1;havoc read_side1_failed_history_~index#1;read_side1_failed_history_~index#1 := read_side1_failed_history_#in~index#1; 7381#L88-3 assume !(0 == read_side1_failed_history_~index#1 % 256); 7420#L91-3 assume 1 == read_side1_failed_history_~index#1 % 256;read_side1_failed_history_#res#1 := ~side1Failed_History_1~0; 7400#L98-3 check_#t~ret32#1 := read_side1_failed_history_#res#1;assume { :end_inline_read_side1_failed_history } true;check_~tmp___11~0#1 := check_#t~ret32#1;havoc check_#t~ret32#1; 7327#L499 assume !(0 == check_~tmp___11~0#1 % 256); 7308#L499-1 assume { :begin_inline_read_active_side_history } true;read_active_side_history_#in~index#1 := 2;havoc read_active_side_history_#res#1;havoc read_active_side_history_~index#1;read_active_side_history_~index#1 := read_active_side_history_#in~index#1; 7326#L148-3 assume !(0 == read_active_side_history_~index#1 % 256); 7404#L151-3 assume !(1 == read_active_side_history_~index#1 % 256); 7349#L154-3 assume 2 == read_active_side_history_~index#1 % 256;read_active_side_history_#res#1 := ~active_side_History_2~0; 7350#L158-3 check_#t~ret36#1 := read_active_side_history_#res#1;assume { :end_inline_read_active_side_history } true;check_~tmp___20~0#1 := check_#t~ret36#1;havoc check_#t~ret36#1; 7324#L515 assume !(check_~tmp___20~0#1 > -2); 7295#L515-1 check_#res#1 := 1; 7296#L533 main_#t~ret61#1 := check_#res#1;assume { :end_inline_check } true;main_~c1~0#1 := main_#t~ret61#1;havoc main_#t~ret61#1;assume { :begin_inline_assert } true;assert_#in~arg#1 := (if 0 == main_~c1~0#1 then 0 else 1);havoc assert_~arg#1;assert_~arg#1 := assert_#in~arg#1; 7417#L612-44 assume !(0 == assert_~arg#1 % 256); 7361#L607-22 assume { :end_inline_assert } true; 7362#L578-2 [2021-12-15 17:22:10,963 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-15 17:22:10,963 INFO L85 PathProgramCache]: Analyzing trace with hash -613005151, now seen corresponding path program 9 times [2021-12-15 17:22:10,964 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-15 17:22:10,964 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [658285945] [2021-12-15 17:22:10,964 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-15 17:22:10,964 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-15 17:22:10,979 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-15 17:22:10,979 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-12-15 17:22:10,985 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-15 17:22:10,989 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-12-15 17:22:10,990 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-15 17:22:10,990 INFO L85 PathProgramCache]: Analyzing trace with hash 2034091096, now seen corresponding path program 1 times [2021-12-15 17:22:10,991 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-15 17:22:10,991 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [401199135] [2021-12-15 17:22:10,991 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-15 17:22:10,991 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-15 17:22:11,021 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-15 17:22:11,098 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-15 17:22:11,099 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-15 17:22:11,099 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [401199135] [2021-12-15 17:22:11,099 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [401199135] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-15 17:22:11,099 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-15 17:22:11,099 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-12-15 17:22:11,099 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1198230807] [2021-12-15 17:22:11,099 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-15 17:22:11,100 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-12-15 17:22:11,100 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-15 17:22:11,100 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-12-15 17:22:11,100 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2021-12-15 17:22:11,101 INFO L87 Difference]: Start difference. First operand 264 states and 372 transitions. cyclomatic complexity: 109 Second operand has 7 states, 7 states have (on average 8.571428571428571) internal successors, (60), 7 states have internal predecessors, (60), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-15 17:22:11,307 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-15 17:22:11,307 INFO L93 Difference]: Finished difference Result 716 states and 1016 transitions. [2021-12-15 17:22:11,307 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2021-12-15 17:22:11,308 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 716 states and 1016 transitions. [2021-12-15 17:22:11,312 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 692 [2021-12-15 17:22:11,315 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 716 states to 716 states and 1016 transitions. [2021-12-15 17:22:11,315 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 716 [2021-12-15 17:22:11,316 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 716 [2021-12-15 17:22:11,316 INFO L73 IsDeterministic]: Start isDeterministic. Operand 716 states and 1016 transitions. [2021-12-15 17:22:11,317 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-12-15 17:22:11,317 INFO L681 BuchiCegarLoop]: Abstraction has 716 states and 1016 transitions. [2021-12-15 17:22:11,317 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 716 states and 1016 transitions. [2021-12-15 17:22:11,321 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 716 to 269. [2021-12-15 17:22:11,322 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 269 states, 269 states have (on average 1.4014869888475836) internal successors, (377), 268 states have internal predecessors, (377), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-15 17:22:11,322 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 269 states to 269 states and 377 transitions. [2021-12-15 17:22:11,323 INFO L704 BuchiCegarLoop]: Abstraction has 269 states and 377 transitions. [2021-12-15 17:22:11,323 INFO L587 BuchiCegarLoop]: Abstraction has 269 states and 377 transitions. [2021-12-15 17:22:11,323 INFO L425 BuchiCegarLoop]: ======== Iteration 11============ [2021-12-15 17:22:11,323 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 269 states and 377 transitions. [2021-12-15 17:22:11,324 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 252 [2021-12-15 17:22:11,324 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-15 17:22:11,324 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-15 17:22:11,325 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-15 17:22:11,325 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-15 17:22:11,325 INFO L791 eck$LassoCheckResult]: Stem: 8490#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(52, 2);call #Ultimate.allocInit(12, 3);~nomsg~0 := -1;~cs1~0 := 0;~cs1_old~0 := 0;~cs1_new~0 := 0;~cs2~0 := 0;~cs2_old~0 := 0;~cs2_new~0 := 0;~s1s2~0 := 0;~s1s2_old~0 := 0;~s1s2_new~0 := 0;~s1s1~0 := 0;~s1s1_old~0 := 0;~s1s1_new~0 := 0;~s2s1~0 := 0;~s2s1_old~0 := 0;~s2s1_new~0 := 0;~s2s2~0 := 0;~s2s2_old~0 := 0;~s2s2_new~0 := 0;~s1p~0 := 0;~s1p_old~0 := 0;~s1p_new~0 := 0;~s2p~0 := 0;~s2p_old~0 := 0;~s2p_new~0 := 0;~side1Failed~0 := 0;~side2Failed~0 := 0;~side1_written~0 := 0;~side2_written~0 := 0;~side1Failed_History_0~0 := 0;~side1Failed_History_1~0 := 0;~side1Failed_History_2~0 := 0;~side2Failed_History_0~0 := 0;~side2Failed_History_1~0 := 0;~side2Failed_History_2~0 := 0;~active_side_History_0~0 := 0;~active_side_History_1~0 := 0;~active_side_History_2~0 := 0;~manual_selection_History_0~0 := 0;~manual_selection_History_1~0 := 0;~manual_selection_History_2~0 := 0; 8467#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~nondet44#1, main_#t~nondet45#1, main_#t~nondet46#1, main_#t~nondet47#1, main_#t~nondet48#1, main_#t~nondet49#1, main_#t~nondet50#1, main_#t~nondet51#1, main_#t~nondet52#1, main_#t~nondet53#1, main_#t~nondet54#1, main_#t~nondet55#1, main_#t~nondet56#1, main_#t~nondet57#1, main_#t~nondet58#1, main_#t~nondet59#1, main_#t~ret60#1, main_#t~ret61#1, main_~c1~0#1, main_~i2~0#1;havoc main_~c1~0#1;havoc main_~i2~0#1;main_~c1~0#1 := 0;~side1Failed~0 := main_#t~nondet44#1;havoc main_#t~nondet44#1;~side2Failed~0 := main_#t~nondet45#1;havoc main_#t~nondet45#1;~side1_written~0 := main_#t~nondet46#1;havoc main_#t~nondet46#1;~side2_written~0 := main_#t~nondet47#1;havoc main_#t~nondet47#1;~side1Failed_History_0~0 := main_#t~nondet48#1;havoc main_#t~nondet48#1;~side1Failed_History_1~0 := main_#t~nondet49#1;havoc main_#t~nondet49#1;~side1Failed_History_2~0 := main_#t~nondet50#1;havoc main_#t~nondet50#1;~side2Failed_History_0~0 := main_#t~nondet51#1;havoc main_#t~nondet51#1;~side2Failed_History_1~0 := main_#t~nondet52#1;havoc main_#t~nondet52#1;~side2Failed_History_2~0 := main_#t~nondet53#1;havoc main_#t~nondet53#1;~active_side_History_0~0 := main_#t~nondet54#1;havoc main_#t~nondet54#1;~active_side_History_1~0 := main_#t~nondet55#1;havoc main_#t~nondet55#1;~active_side_History_2~0 := main_#t~nondet56#1;havoc main_#t~nondet56#1;~manual_selection_History_0~0 := main_#t~nondet57#1;havoc main_#t~nondet57#1;~manual_selection_History_1~0 := main_#t~nondet58#1;havoc main_#t~nondet58#1;~manual_selection_History_2~0 := main_#t~nondet59#1;havoc main_#t~nondet59#1;assume { :begin_inline_init } true;havoc init_#res#1; 8378#L197 assume !(0 != ~side1Failed_History_0~0 % 256); 8379#L200 assume !(0 != ~side2Failed_History_0~0 % 256); 8311#L203 assume !(-2 != ~active_side_History_0~0); 8312#L206 assume !(0 != ~manual_selection_History_0~0); 8328#L209 assume !(0 != ~side1Failed_History_1~0 % 256); 8481#L212 assume !(0 != ~side2Failed_History_1~0 % 256); 8441#L215 assume !(-2 != ~active_side_History_1~0); 8442#L218 assume !(0 != ~manual_selection_History_1~0); 8468#L221 assume !(0 != ~side1Failed_History_2~0 % 256); 8483#L224 assume !(0 != ~side2Failed_History_2~0 % 256); 8411#L227 assume !(-2 != ~active_side_History_2~0); 8412#L230 assume !(0 != ~manual_selection_History_2~0);init_#res#1 := 1; 8368#L233 main_#t~ret60#1 := init_#res#1;assume { :end_inline_init } true;main_~i2~0#1 := main_#t~ret60#1;havoc main_#t~ret60#1;assume { :begin_inline_assume_abort_if_not } true;assume_abort_if_not_#in~cond#1 := main_~i2~0#1;havoc assume_abort_if_not_~cond#1;assume_abort_if_not_~cond#1 := assume_abort_if_not_#in~cond#1; 8369#L58 assume !(0 == assume_abort_if_not_~cond#1); 8443#L57 assume { :end_inline_assume_abort_if_not } true;~cs1_old~0 := ~nomsg~0;~cs1_new~0 := ~nomsg~0;~cs2_old~0 := ~nomsg~0;~cs2_new~0 := ~nomsg~0;~s1s2_old~0 := ~nomsg~0;~s1s2_new~0 := ~nomsg~0;~s1s1_old~0 := ~nomsg~0;~s1s1_new~0 := ~nomsg~0;~s2s1_old~0 := ~nomsg~0;~s2s1_new~0 := ~nomsg~0;~s2s2_old~0 := ~nomsg~0;~s2s2_new~0 := ~nomsg~0;~s1p_old~0 := ~nomsg~0;~s1p_new~0 := ~nomsg~0;~s2p_old~0 := ~nomsg~0;~s2p_new~0 := ~nomsg~0;main_~i2~0#1 := 0; 8375#L578-2 [2021-12-15 17:22:11,325 INFO L793 eck$LassoCheckResult]: Loop: 8375#L578-2 assume !false;assume { :begin_inline_Console_task_each_pals_period } true;havoc Console_task_each_pals_period_#t~nondet4#1, Console_task_each_pals_period_#t~ite5#1, Console_task_each_pals_period_#t~ite6#1, Console_task_each_pals_period_~manual_selection~0#1, Console_task_each_pals_period_~tmp~1#1;havoc Console_task_each_pals_period_~manual_selection~0#1;havoc Console_task_each_pals_period_~tmp~1#1;Console_task_each_pals_period_~tmp~1#1 := Console_task_each_pals_period_#t~nondet4#1;havoc Console_task_each_pals_period_#t~nondet4#1;Console_task_each_pals_period_~manual_selection~0#1 := Console_task_each_pals_period_~tmp~1#1;assume { :begin_inline_write_manual_selection_history } true;write_manual_selection_history_#in~val#1 := Console_task_each_pals_period_~manual_selection~0#1;havoc write_manual_selection_history_~val#1;write_manual_selection_history_~val#1 := write_manual_selection_history_#in~val#1;~manual_selection_History_2~0 := ~manual_selection_History_1~0;~manual_selection_History_1~0 := ~manual_selection_History_0~0;~manual_selection_History_0~0 := write_manual_selection_history_~val#1; 8426#L170 assume { :end_inline_write_manual_selection_history } true; 8462#L258 assume Console_task_each_pals_period_~manual_selection~0#1 != ~nomsg~0 && ~cs1_new~0 == ~nomsg~0;Console_task_each_pals_period_#t~ite5#1 := Console_task_each_pals_period_~manual_selection~0#1; 8463#L258-2 ~cs1_new~0 := (if Console_task_each_pals_period_#t~ite5#1 % 256 <= 127 then Console_task_each_pals_period_#t~ite5#1 % 256 else Console_task_each_pals_period_#t~ite5#1 % 256 - 256);havoc Console_task_each_pals_period_#t~ite5#1; 8476#L259 assume Console_task_each_pals_period_~manual_selection~0#1 != ~nomsg~0 && ~cs2_new~0 == ~nomsg~0;Console_task_each_pals_period_#t~ite6#1 := Console_task_each_pals_period_~manual_selection~0#1; 8477#L259-2 ~cs2_new~0 := (if Console_task_each_pals_period_#t~ite6#1 % 256 <= 127 then Console_task_each_pals_period_#t~ite6#1 % 256 else Console_task_each_pals_period_#t~ite6#1 % 256 - 256);havoc Console_task_each_pals_period_#t~ite6#1;Console_task_each_pals_period_~manual_selection~0#1 := 0; 8446#L261 assume { :end_inline_Console_task_each_pals_period } true;assume { :begin_inline_Side1_activestandby_task_each_pals_period } true;havoc Side1_activestandby_task_each_pals_period_#t~nondet7#1, Side1_activestandby_task_each_pals_period_#t~ite8#1, Side1_activestandby_task_each_pals_period_#t~ite9#1, Side1_activestandby_task_each_pals_period_#t~ite10#1, Side1_activestandby_task_each_pals_period_#t~ite11#1, Side1_activestandby_task_each_pals_period_#t~ite12#1, Side1_activestandby_task_each_pals_period_#t~ite13#1, Side1_activestandby_task_each_pals_period_~side1~0#1, Side1_activestandby_task_each_pals_period_~side2~0#1, Side1_activestandby_task_each_pals_period_~manual_selection~1#1, Side1_activestandby_task_each_pals_period_~next_state~0#1;havoc Side1_activestandby_task_each_pals_period_~side1~0#1;havoc Side1_activestandby_task_each_pals_period_~side2~0#1;havoc Side1_activestandby_task_each_pals_period_~manual_selection~1#1;havoc Side1_activestandby_task_each_pals_period_~next_state~0#1;Side1_activestandby_task_each_pals_period_~side1~0#1 := ~nomsg~0;Side1_activestandby_task_each_pals_period_~side2~0#1 := ~nomsg~0;Side1_activestandby_task_each_pals_period_~manual_selection~1#1 := 0;~side1Failed~0 := Side1_activestandby_task_each_pals_period_#t~nondet7#1;havoc Side1_activestandby_task_each_pals_period_#t~nondet7#1;assume { :begin_inline_write_side1_failed_history } true;write_side1_failed_history_#in~val#1 := ~side1Failed~0;havoc write_side1_failed_history_~val#1;write_side1_failed_history_~val#1 := write_side1_failed_history_#in~val#1;~side1Failed_History_2~0 := ~side1Failed_History_1~0;~side1Failed_History_1~0 := ~side1Failed_History_0~0;~side1Failed_History_0~0 := write_side1_failed_history_~val#1; 8447#L80 assume { :end_inline_write_side1_failed_history } true; 8437#L277 assume 0 != ~side1Failed~0 % 256; 8438#L278 assume !(~nomsg~0 != ~nomsg~0 && ~s1s1_new~0 == ~nomsg~0);Side1_activestandby_task_each_pals_period_#t~ite8#1 := ~s1s1_new~0; 8445#L278-2 ~s1s1_new~0 := (if Side1_activestandby_task_each_pals_period_#t~ite8#1 % 256 <= 127 then Side1_activestandby_task_each_pals_period_#t~ite8#1 % 256 else Side1_activestandby_task_each_pals_period_#t~ite8#1 % 256 - 256);havoc Side1_activestandby_task_each_pals_period_#t~ite8#1; 8354#L279 assume !(~nomsg~0 != ~nomsg~0 && ~s1s2_new~0 == ~nomsg~0);Side1_activestandby_task_each_pals_period_#t~ite9#1 := ~s1s2_new~0; 8323#L279-2 ~s1s2_new~0 := (if Side1_activestandby_task_each_pals_period_#t~ite9#1 % 256 <= 127 then Side1_activestandby_task_each_pals_period_#t~ite9#1 % 256 else Side1_activestandby_task_each_pals_period_#t~ite9#1 % 256 - 256);havoc Side1_activestandby_task_each_pals_period_#t~ite9#1; 8324#L280 assume !(~nomsg~0 != ~nomsg~0 && ~s1p_new~0 == ~nomsg~0);Side1_activestandby_task_each_pals_period_#t~ite10#1 := ~s1p_new~0; 8416#L280-2 ~s1p_new~0 := (if Side1_activestandby_task_each_pals_period_#t~ite10#1 % 256 <= 127 then Side1_activestandby_task_each_pals_period_#t~ite10#1 % 256 else Side1_activestandby_task_each_pals_period_#t~ite10#1 % 256 - 256);havoc Side1_activestandby_task_each_pals_period_#t~ite10#1;~side1_written~0 := ~nomsg~0; 8417#L314 assume { :end_inline_Side1_activestandby_task_each_pals_period } true;assume { :begin_inline_Side2_activestandby_task_each_pals_period } true;havoc Side2_activestandby_task_each_pals_period_#t~nondet14#1, Side2_activestandby_task_each_pals_period_#t~ite15#1, Side2_activestandby_task_each_pals_period_#t~ite16#1, Side2_activestandby_task_each_pals_period_#t~ite17#1, Side2_activestandby_task_each_pals_period_#t~ret18#1, Side2_activestandby_task_each_pals_period_#t~ite19#1, Side2_activestandby_task_each_pals_period_#t~ite20#1, Side2_activestandby_task_each_pals_period_#t~ite21#1, Side2_activestandby_task_each_pals_period_~side1~1#1, Side2_activestandby_task_each_pals_period_~side2~1#1, Side2_activestandby_task_each_pals_period_~manual_selection~2#1, Side2_activestandby_task_each_pals_period_~next_state~1#1;havoc Side2_activestandby_task_each_pals_period_~side1~1#1;havoc Side2_activestandby_task_each_pals_period_~side2~1#1;havoc Side2_activestandby_task_each_pals_period_~manual_selection~2#1;havoc Side2_activestandby_task_each_pals_period_~next_state~1#1;Side2_activestandby_task_each_pals_period_~side1~1#1 := ~nomsg~0;Side2_activestandby_task_each_pals_period_~side2~1#1 := ~nomsg~0;Side2_activestandby_task_each_pals_period_~manual_selection~2#1 := 0;~side2Failed~0 := Side2_activestandby_task_each_pals_period_#t~nondet14#1;havoc Side2_activestandby_task_each_pals_period_#t~nondet14#1;assume { :begin_inline_write_side2_failed_history } true;write_side2_failed_history_#in~val#1 := ~side2Failed~0;havoc write_side2_failed_history_~val#1;write_side2_failed_history_~val#1 := write_side2_failed_history_#in~val#1;~side2Failed_History_2~0 := ~side2Failed_History_1~0;~side2Failed_History_1~0 := ~side2Failed_History_0~0;~side2Failed_History_0~0 := write_side2_failed_history_~val#1; 8376#L110 assume { :end_inline_write_side2_failed_history } true; 8349#L330 assume 0 != ~side2Failed~0 % 256; 8350#L331 assume !(~nomsg~0 != ~nomsg~0 && ~s2s1_new~0 == ~nomsg~0);Side2_activestandby_task_each_pals_period_#t~ite15#1 := ~s2s1_new~0; 8550#L331-2 ~s2s1_new~0 := (if Side2_activestandby_task_each_pals_period_#t~ite15#1 % 256 <= 127 then Side2_activestandby_task_each_pals_period_#t~ite15#1 % 256 else Side2_activestandby_task_each_pals_period_#t~ite15#1 % 256 - 256);havoc Side2_activestandby_task_each_pals_period_#t~ite15#1; 8549#L332 assume !(~nomsg~0 != ~nomsg~0 && ~s2s2_new~0 == ~nomsg~0);Side2_activestandby_task_each_pals_period_#t~ite16#1 := ~s2s2_new~0; 8542#L332-2 ~s2s2_new~0 := (if Side2_activestandby_task_each_pals_period_#t~ite16#1 % 256 <= 127 then Side2_activestandby_task_each_pals_period_#t~ite16#1 % 256 else Side2_activestandby_task_each_pals_period_#t~ite16#1 % 256 - 256);havoc Side2_activestandby_task_each_pals_period_#t~ite16#1; 8471#L333 assume !(~nomsg~0 != ~nomsg~0 && ~s2p_new~0 == ~nomsg~0);Side2_activestandby_task_each_pals_period_#t~ite17#1 := ~s2p_new~0; 8472#L333-2 ~s2p_new~0 := (if Side2_activestandby_task_each_pals_period_#t~ite17#1 % 256 <= 127 then Side2_activestandby_task_each_pals_period_#t~ite17#1 % 256 else Side2_activestandby_task_each_pals_period_#t~ite17#1 % 256 - 256);havoc Side2_activestandby_task_each_pals_period_#t~ite17#1;~side2_written~0 := ~nomsg~0; 8473#L371 assume { :end_inline_Side2_activestandby_task_each_pals_period } true;assume { :begin_inline_Pendulum_prism_task_each_pals_period } true;havoc Pendulum_prism_task_each_pals_period_#t~ret22#1, Pendulum_prism_task_each_pals_period_~active_side~0#1, Pendulum_prism_task_each_pals_period_~tmp~2#1, Pendulum_prism_task_each_pals_period_~side1~2#1, Pendulum_prism_task_each_pals_period_~side2~2#1;havoc Pendulum_prism_task_each_pals_period_~active_side~0#1;havoc Pendulum_prism_task_each_pals_period_~tmp~2#1;havoc Pendulum_prism_task_each_pals_period_~side1~2#1;havoc Pendulum_prism_task_each_pals_period_~side2~2#1;assume { :begin_inline_read_active_side_history } true;read_active_side_history_#in~index#1 := 0;havoc read_active_side_history_#res#1;havoc read_active_side_history_~index#1;read_active_side_history_~index#1 := read_active_side_history_#in~index#1; 8316#L148 assume 0 == read_active_side_history_~index#1 % 256;read_active_side_history_#res#1 := ~active_side_History_0~0; 8317#L158 Pendulum_prism_task_each_pals_period_#t~ret22#1 := read_active_side_history_#res#1;assume { :end_inline_read_active_side_history } true;Pendulum_prism_task_each_pals_period_~tmp~2#1 := Pendulum_prism_task_each_pals_period_#t~ret22#1;havoc Pendulum_prism_task_each_pals_period_#t~ret22#1;Pendulum_prism_task_each_pals_period_~active_side~0#1 := Pendulum_prism_task_each_pals_period_~tmp~2#1;Pendulum_prism_task_each_pals_period_~side1~2#1 := ~nomsg~0;Pendulum_prism_task_each_pals_period_~side2~2#1 := ~nomsg~0;Pendulum_prism_task_each_pals_period_~side1~2#1 := ~s1p_old~0;~s1p_old~0 := ~nomsg~0;Pendulum_prism_task_each_pals_period_~side2~2#1 := ~s2p_old~0;~s2p_old~0 := ~nomsg~0; 8453#L390 assume 1 == Pendulum_prism_task_each_pals_period_~side1~2#1;Pendulum_prism_task_each_pals_period_~active_side~0#1 := 1; 8422#L404 assume { :begin_inline_write_active_side_history } true;write_active_side_history_#in~val#1 := Pendulum_prism_task_each_pals_period_~active_side~0#1;havoc write_active_side_history_~val#1;write_active_side_history_~val#1 := write_active_side_history_#in~val#1;~active_side_History_2~0 := ~active_side_History_1~0;~active_side_History_1~0 := ~active_side_History_0~0;~active_side_History_0~0 := write_active_side_history_~val#1; 8356#L140 assume { :end_inline_write_active_side_history } true; 8357#L414 assume { :end_inline_Pendulum_prism_task_each_pals_period } true;~cs1_old~0 := ~cs1_new~0;~cs1_new~0 := ~nomsg~0;~cs2_old~0 := ~cs2_new~0;~cs2_new~0 := ~nomsg~0;~s1s2_old~0 := ~s1s2_new~0;~s1s2_new~0 := ~nomsg~0;~s1s1_old~0 := ~s1s1_new~0;~s1s1_new~0 := ~nomsg~0;~s2s1_old~0 := ~s2s1_new~0;~s2s1_new~0 := ~nomsg~0;~s2s2_old~0 := ~s2s2_new~0;~s2s2_new~0 := ~nomsg~0;~s1p_old~0 := ~s1p_new~0;~s1p_new~0 := ~nomsg~0;~s2p_old~0 := ~s2p_new~0;~s2p_new~0 := ~nomsg~0;assume { :begin_inline_check } true;havoc check_#res#1;havoc check_#t~ret23#1, check_#t~ret24#1, check_#t~ret25#1, check_#t~ret26#1, check_#t~ret27#1, check_#t~ret28#1, check_#t~ret29#1, check_#t~ret30#1, check_#t~ret31#1, check_#t~ret32#1, check_#t~ret33#1, check_#t~ret34#1, check_#t~ret35#1, check_#t~ret36#1, check_#t~ret37#1, check_#t~ret38#1, check_#t~ret39#1, check_#t~ret40#1, check_#t~ret41#1, check_#t~ret42#1, check_#t~ret43#1, check_~tmp~3#1, check_~tmp___0~0#1, check_~tmp___1~0#1, check_~tmp___2~0#1, check_~tmp___3~0#1, check_~tmp___4~0#1, check_~tmp___5~0#1, check_~tmp___6~0#1, check_~tmp___7~0#1, check_~tmp___8~0#1, check_~tmp___9~0#1, check_~tmp___10~0#1, check_~tmp___11~0#1, check_~tmp___12~0#1, check_~tmp___13~0#1, check_~tmp___14~0#1, check_~tmp___15~0#1, check_~tmp___16~0#1, check_~tmp___17~0#1, check_~tmp___18~0#1, check_~tmp___19~0#1, check_~tmp___20~0#1;havoc check_~tmp~3#1;havoc check_~tmp___0~0#1;havoc check_~tmp___1~0#1;havoc check_~tmp___2~0#1;havoc check_~tmp___3~0#1;havoc check_~tmp___4~0#1;havoc check_~tmp___5~0#1;havoc check_~tmp___6~0#1;havoc check_~tmp___7~0#1;havoc check_~tmp___8~0#1;havoc check_~tmp___9~0#1;havoc check_~tmp___10~0#1;havoc check_~tmp___11~0#1;havoc check_~tmp___12~0#1;havoc check_~tmp___13~0#1;havoc check_~tmp___14~0#1;havoc check_~tmp___15~0#1;havoc check_~tmp___16~0#1;havoc check_~tmp___17~0#1;havoc check_~tmp___18~0#1;havoc check_~tmp___19~0#1;havoc check_~tmp___20~0#1; 8363#L443 assume !(0 == ~side1Failed~0 % 256); 8364#L446 assume !(0 == ~side2Failed~0 % 256);check_~tmp~3#1 := 0; 8365#L446-2 assume { :begin_inline_assume_abort_if_not } true;assume_abort_if_not_#in~cond#1 := (if 0 == check_~tmp~3#1 then 0 else 1) % 256;havoc assume_abort_if_not_~cond#1;assume_abort_if_not_~cond#1 := assume_abort_if_not_#in~cond#1; 8366#L58-2 assume !(0 == assume_abort_if_not_~cond#1); 8303#L57-1 assume { :end_inline_assume_abort_if_not } true;assume { :begin_inline_read_manual_selection_history } true;read_manual_selection_history_#in~index#1 := 1;havoc read_manual_selection_history_#res#1;havoc read_manual_selection_history_~index#1;read_manual_selection_history_~index#1 := read_manual_selection_history_#in~index#1; 8304#L178 assume !(0 == read_manual_selection_history_~index#1 % 256); 8315#L181 assume 1 == read_manual_selection_history_~index#1 % 256;read_manual_selection_history_#res#1 := ~manual_selection_History_1~0; 8305#L188 check_#t~ret23#1 := read_manual_selection_history_#res#1;assume { :end_inline_read_manual_selection_history } true;check_~tmp___0~0#1 := check_#t~ret23#1;havoc check_#t~ret23#1; 8306#L453 assume !(0 == check_~tmp___0~0#1); 8287#L453-1 assume { :begin_inline_read_side1_failed_history } true;read_side1_failed_history_#in~index#1 := 1;havoc read_side1_failed_history_#res#1;havoc read_side1_failed_history_~index#1;read_side1_failed_history_~index#1 := read_side1_failed_history_#in~index#1; 8299#L88-2 assume !(0 == read_side1_failed_history_~index#1 % 256); 8300#L91-2 assume 1 == read_side1_failed_history_~index#1 % 256;read_side1_failed_history_#res#1 := ~side1Failed_History_1~0; 8373#L98-2 check_#t~ret28#1 := read_side1_failed_history_#res#1;assume { :end_inline_read_side1_failed_history } true;check_~tmp___7~0#1 := check_#t~ret28#1;havoc check_#t~ret28#1; 8484#L483 assume 0 != check_~tmp___7~0#1 % 256;assume { :begin_inline_read_side2_failed_history } true;read_side2_failed_history_#in~index#1 := 1;havoc read_side2_failed_history_#res#1;havoc read_side2_failed_history_~index#1;read_side2_failed_history_~index#1 := read_side2_failed_history_#in~index#1; 8359#L118-2 assume !(0 == read_side2_failed_history_~index#1 % 256); 8360#L121-2 assume 1 == read_side2_failed_history_~index#1 % 256;read_side2_failed_history_#res#1 := ~side2Failed_History_1~0; 8450#L128-2 check_#t~ret29#1 := read_side2_failed_history_#res#1;assume { :end_inline_read_side2_failed_history } true;check_~tmp___8~0#1 := check_#t~ret29#1;havoc check_#t~ret29#1; 8407#L485 assume !(0 == check_~tmp___8~0#1 % 256); 8292#L483-1 assume { :begin_inline_read_side1_failed_history } true;read_side1_failed_history_#in~index#1 := 1;havoc read_side1_failed_history_#res#1;havoc read_side1_failed_history_~index#1;read_side1_failed_history_~index#1 := read_side1_failed_history_#in~index#1; 8478#L88-3 assume !(0 == read_side1_failed_history_~index#1 % 256); 8479#L91-3 assume 1 == read_side1_failed_history_~index#1 % 256;read_side1_failed_history_#res#1 := ~side1Failed_History_1~0; 8413#L98-3 check_#t~ret32#1 := read_side1_failed_history_#res#1;assume { :end_inline_read_side1_failed_history } true;check_~tmp___11~0#1 := check_#t~ret32#1;havoc check_#t~ret32#1; 8414#L499 assume !(0 == check_~tmp___11~0#1 % 256); 8320#L499-1 assume { :begin_inline_read_active_side_history } true;read_active_side_history_#in~index#1 := 2;havoc read_active_side_history_#res#1;havoc read_active_side_history_~index#1;read_active_side_history_~index#1 := read_active_side_history_#in~index#1; 8338#L148-3 assume !(0 == read_active_side_history_~index#1 % 256); 8418#L151-3 assume !(1 == read_active_side_history_~index#1 % 256); 8361#L154-3 assume 2 == read_active_side_history_~index#1 % 256;read_active_side_history_#res#1 := ~active_side_History_2~0; 8362#L158-3 check_#t~ret36#1 := read_active_side_history_#res#1;assume { :end_inline_read_active_side_history } true;check_~tmp___20~0#1 := check_#t~ret36#1;havoc check_#t~ret36#1; 8336#L515 assume !(check_~tmp___20~0#1 > -2); 8307#L515-1 check_#res#1 := 1; 8308#L533 main_#t~ret61#1 := check_#res#1;assume { :end_inline_check } true;main_~c1~0#1 := main_#t~ret61#1;havoc main_#t~ret61#1;assume { :begin_inline_assert } true;assert_#in~arg#1 := (if 0 == main_~c1~0#1 then 0 else 1);havoc assert_~arg#1;assert_~arg#1 := assert_#in~arg#1; 8432#L612-44 assume !(0 == assert_~arg#1 % 256); 8374#L607-22 assume { :end_inline_assert } true; 8375#L578-2 [2021-12-15 17:22:11,325 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-15 17:22:11,326 INFO L85 PathProgramCache]: Analyzing trace with hash -613005151, now seen corresponding path program 10 times [2021-12-15 17:22:11,327 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-15 17:22:11,328 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [348414623] [2021-12-15 17:22:11,328 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-15 17:22:11,328 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-15 17:22:11,335 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-15 17:22:11,335 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-12-15 17:22:11,344 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-15 17:22:11,348 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-12-15 17:22:11,348 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-15 17:22:11,348 INFO L85 PathProgramCache]: Analyzing trace with hash -758076526, now seen corresponding path program 1 times [2021-12-15 17:22:11,348 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-15 17:22:11,349 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1040403360] [2021-12-15 17:22:11,349 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-15 17:22:11,349 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-15 17:22:11,370 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-15 17:22:11,401 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-15 17:22:11,402 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-15 17:22:11,402 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1040403360] [2021-12-15 17:22:11,402 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1040403360] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-15 17:22:11,402 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-15 17:22:11,402 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-12-15 17:22:11,402 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2022603197] [2021-12-15 17:22:11,402 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-15 17:22:11,402 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-12-15 17:22:11,403 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-15 17:22:11,403 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-12-15 17:22:11,403 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-12-15 17:22:11,403 INFO L87 Difference]: Start difference. First operand 269 states and 377 transitions. cyclomatic complexity: 109 Second operand has 4 states, 4 states have (on average 16.0) internal successors, (64), 4 states have internal predecessors, (64), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-15 17:22:11,418 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-15 17:22:11,418 INFO L93 Difference]: Finished difference Result 271 states and 378 transitions. [2021-12-15 17:22:11,419 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2021-12-15 17:22:11,419 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 271 states and 378 transitions. [2021-12-15 17:22:11,421 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 230 [2021-12-15 17:22:11,422 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 271 states to 247 states and 344 transitions. [2021-12-15 17:22:11,422 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 247 [2021-12-15 17:22:11,422 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 247 [2021-12-15 17:22:11,422 INFO L73 IsDeterministic]: Start isDeterministic. Operand 247 states and 344 transitions. [2021-12-15 17:22:11,423 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-12-15 17:22:11,423 INFO L681 BuchiCegarLoop]: Abstraction has 247 states and 344 transitions. [2021-12-15 17:22:11,423 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 247 states and 344 transitions. [2021-12-15 17:22:11,425 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 247 to 247. [2021-12-15 17:22:11,426 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 247 states, 247 states have (on average 1.3927125506072875) internal successors, (344), 246 states have internal predecessors, (344), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-15 17:22:11,426 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 247 states to 247 states and 344 transitions. [2021-12-15 17:22:11,426 INFO L704 BuchiCegarLoop]: Abstraction has 247 states and 344 transitions. [2021-12-15 17:22:11,426 INFO L587 BuchiCegarLoop]: Abstraction has 247 states and 344 transitions. [2021-12-15 17:22:11,426 INFO L425 BuchiCegarLoop]: ======== Iteration 12============ [2021-12-15 17:22:11,427 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 247 states and 344 transitions. [2021-12-15 17:22:11,428 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 230 [2021-12-15 17:22:11,428 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-15 17:22:11,428 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-15 17:22:11,428 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-15 17:22:11,428 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-15 17:22:11,429 INFO L791 eck$LassoCheckResult]: Stem: 9030#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(52, 2);call #Ultimate.allocInit(12, 3);~nomsg~0 := -1;~cs1~0 := 0;~cs1_old~0 := 0;~cs1_new~0 := 0;~cs2~0 := 0;~cs2_old~0 := 0;~cs2_new~0 := 0;~s1s2~0 := 0;~s1s2_old~0 := 0;~s1s2_new~0 := 0;~s1s1~0 := 0;~s1s1_old~0 := 0;~s1s1_new~0 := 0;~s2s1~0 := 0;~s2s1_old~0 := 0;~s2s1_new~0 := 0;~s2s2~0 := 0;~s2s2_old~0 := 0;~s2s2_new~0 := 0;~s1p~0 := 0;~s1p_old~0 := 0;~s1p_new~0 := 0;~s2p~0 := 0;~s2p_old~0 := 0;~s2p_new~0 := 0;~side1Failed~0 := 0;~side2Failed~0 := 0;~side1_written~0 := 0;~side2_written~0 := 0;~side1Failed_History_0~0 := 0;~side1Failed_History_1~0 := 0;~side1Failed_History_2~0 := 0;~side2Failed_History_0~0 := 0;~side2Failed_History_1~0 := 0;~side2Failed_History_2~0 := 0;~active_side_History_0~0 := 0;~active_side_History_1~0 := 0;~active_side_History_2~0 := 0;~manual_selection_History_0~0 := 0;~manual_selection_History_1~0 := 0;~manual_selection_History_2~0 := 0; 9011#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~nondet44#1, main_#t~nondet45#1, main_#t~nondet46#1, main_#t~nondet47#1, main_#t~nondet48#1, main_#t~nondet49#1, main_#t~nondet50#1, main_#t~nondet51#1, main_#t~nondet52#1, main_#t~nondet53#1, main_#t~nondet54#1, main_#t~nondet55#1, main_#t~nondet56#1, main_#t~nondet57#1, main_#t~nondet58#1, main_#t~nondet59#1, main_#t~ret60#1, main_#t~ret61#1, main_~c1~0#1, main_~i2~0#1;havoc main_~c1~0#1;havoc main_~i2~0#1;main_~c1~0#1 := 0;~side1Failed~0 := main_#t~nondet44#1;havoc main_#t~nondet44#1;~side2Failed~0 := main_#t~nondet45#1;havoc main_#t~nondet45#1;~side1_written~0 := main_#t~nondet46#1;havoc main_#t~nondet46#1;~side2_written~0 := main_#t~nondet47#1;havoc main_#t~nondet47#1;~side1Failed_History_0~0 := main_#t~nondet48#1;havoc main_#t~nondet48#1;~side1Failed_History_1~0 := main_#t~nondet49#1;havoc main_#t~nondet49#1;~side1Failed_History_2~0 := main_#t~nondet50#1;havoc main_#t~nondet50#1;~side2Failed_History_0~0 := main_#t~nondet51#1;havoc main_#t~nondet51#1;~side2Failed_History_1~0 := main_#t~nondet52#1;havoc main_#t~nondet52#1;~side2Failed_History_2~0 := main_#t~nondet53#1;havoc main_#t~nondet53#1;~active_side_History_0~0 := main_#t~nondet54#1;havoc main_#t~nondet54#1;~active_side_History_1~0 := main_#t~nondet55#1;havoc main_#t~nondet55#1;~active_side_History_2~0 := main_#t~nondet56#1;havoc main_#t~nondet56#1;~manual_selection_History_0~0 := main_#t~nondet57#1;havoc main_#t~nondet57#1;~manual_selection_History_1~0 := main_#t~nondet58#1;havoc main_#t~nondet58#1;~manual_selection_History_2~0 := main_#t~nondet59#1;havoc main_#t~nondet59#1;assume { :begin_inline_init } true;havoc init_#res#1; 8925#L197 assume !(0 != ~side1Failed_History_0~0 % 256); 8926#L200 assume !(0 != ~side2Failed_History_0~0 % 256); 8860#L203 assume !(-2 != ~active_side_History_0~0); 8861#L206 assume !(0 != ~manual_selection_History_0~0); 8877#L209 assume !(0 != ~side1Failed_History_1~0 % 256); 9022#L212 assume !(0 != ~side2Failed_History_1~0 % 256); 8985#L215 assume !(-2 != ~active_side_History_1~0); 8986#L218 assume !(0 != ~manual_selection_History_1~0); 9012#L221 assume !(0 != ~side1Failed_History_2~0 % 256); 9024#L224 assume !(0 != ~side2Failed_History_2~0 % 256); 8958#L227 assume !(-2 != ~active_side_History_2~0); 8959#L230 assume !(0 != ~manual_selection_History_2~0);init_#res#1 := 1; 8918#L233 main_#t~ret60#1 := init_#res#1;assume { :end_inline_init } true;main_~i2~0#1 := main_#t~ret60#1;havoc main_#t~ret60#1;assume { :begin_inline_assume_abort_if_not } true;assume_abort_if_not_#in~cond#1 := main_~i2~0#1;havoc assume_abort_if_not_~cond#1;assume_abort_if_not_~cond#1 := assume_abort_if_not_#in~cond#1; 8919#L58 assume !(0 == assume_abort_if_not_~cond#1); 8988#L57 assume { :end_inline_assume_abort_if_not } true;~cs1_old~0 := ~nomsg~0;~cs1_new~0 := ~nomsg~0;~cs2_old~0 := ~nomsg~0;~cs2_new~0 := ~nomsg~0;~s1s2_old~0 := ~nomsg~0;~s1s2_new~0 := ~nomsg~0;~s1s1_old~0 := ~nomsg~0;~s1s1_new~0 := ~nomsg~0;~s2s1_old~0 := ~nomsg~0;~s2s1_new~0 := ~nomsg~0;~s2s2_old~0 := ~nomsg~0;~s2s2_new~0 := ~nomsg~0;~s1p_old~0 := ~nomsg~0;~s1p_new~0 := ~nomsg~0;~s2p_old~0 := ~nomsg~0;~s2p_new~0 := ~nomsg~0;main_~i2~0#1 := 0; 8922#L578-2 [2021-12-15 17:22:11,429 INFO L793 eck$LassoCheckResult]: Loop: 8922#L578-2 assume !false;assume { :begin_inline_Console_task_each_pals_period } true;havoc Console_task_each_pals_period_#t~nondet4#1, Console_task_each_pals_period_#t~ite5#1, Console_task_each_pals_period_#t~ite6#1, Console_task_each_pals_period_~manual_selection~0#1, Console_task_each_pals_period_~tmp~1#1;havoc Console_task_each_pals_period_~manual_selection~0#1;havoc Console_task_each_pals_period_~tmp~1#1;Console_task_each_pals_period_~tmp~1#1 := Console_task_each_pals_period_#t~nondet4#1;havoc Console_task_each_pals_period_#t~nondet4#1;Console_task_each_pals_period_~manual_selection~0#1 := Console_task_each_pals_period_~tmp~1#1;assume { :begin_inline_write_manual_selection_history } true;write_manual_selection_history_#in~val#1 := Console_task_each_pals_period_~manual_selection~0#1;havoc write_manual_selection_history_~val#1;write_manual_selection_history_~val#1 := write_manual_selection_history_#in~val#1;~manual_selection_History_2~0 := ~manual_selection_History_1~0;~manual_selection_History_1~0 := ~manual_selection_History_0~0;~manual_selection_History_0~0 := write_manual_selection_history_~val#1; 8973#L170 assume { :end_inline_write_manual_selection_history } true; 9006#L258 assume Console_task_each_pals_period_~manual_selection~0#1 != ~nomsg~0 && ~cs1_new~0 == ~nomsg~0;Console_task_each_pals_period_#t~ite5#1 := Console_task_each_pals_period_~manual_selection~0#1; 9007#L258-2 ~cs1_new~0 := (if Console_task_each_pals_period_#t~ite5#1 % 256 <= 127 then Console_task_each_pals_period_#t~ite5#1 % 256 else Console_task_each_pals_period_#t~ite5#1 % 256 - 256);havoc Console_task_each_pals_period_#t~ite5#1; 9018#L259 assume Console_task_each_pals_period_~manual_selection~0#1 != ~nomsg~0 && ~cs2_new~0 == ~nomsg~0;Console_task_each_pals_period_#t~ite6#1 := Console_task_each_pals_period_~manual_selection~0#1; 9019#L259-2 ~cs2_new~0 := (if Console_task_each_pals_period_#t~ite6#1 % 256 <= 127 then Console_task_each_pals_period_#t~ite6#1 % 256 else Console_task_each_pals_period_#t~ite6#1 % 256 - 256);havoc Console_task_each_pals_period_#t~ite6#1;Console_task_each_pals_period_~manual_selection~0#1 := 0; 8990#L261 assume { :end_inline_Console_task_each_pals_period } true;assume { :begin_inline_Side1_activestandby_task_each_pals_period } true;havoc Side1_activestandby_task_each_pals_period_#t~nondet7#1, Side1_activestandby_task_each_pals_period_#t~ite8#1, Side1_activestandby_task_each_pals_period_#t~ite9#1, Side1_activestandby_task_each_pals_period_#t~ite10#1, Side1_activestandby_task_each_pals_period_#t~ite11#1, Side1_activestandby_task_each_pals_period_#t~ite12#1, Side1_activestandby_task_each_pals_period_#t~ite13#1, Side1_activestandby_task_each_pals_period_~side1~0#1, Side1_activestandby_task_each_pals_period_~side2~0#1, Side1_activestandby_task_each_pals_period_~manual_selection~1#1, Side1_activestandby_task_each_pals_period_~next_state~0#1;havoc Side1_activestandby_task_each_pals_period_~side1~0#1;havoc Side1_activestandby_task_each_pals_period_~side2~0#1;havoc Side1_activestandby_task_each_pals_period_~manual_selection~1#1;havoc Side1_activestandby_task_each_pals_period_~next_state~0#1;Side1_activestandby_task_each_pals_period_~side1~0#1 := ~nomsg~0;Side1_activestandby_task_each_pals_period_~side2~0#1 := ~nomsg~0;Side1_activestandby_task_each_pals_period_~manual_selection~1#1 := 0;~side1Failed~0 := Side1_activestandby_task_each_pals_period_#t~nondet7#1;havoc Side1_activestandby_task_each_pals_period_#t~nondet7#1;assume { :begin_inline_write_side1_failed_history } true;write_side1_failed_history_#in~val#1 := ~side1Failed~0;havoc write_side1_failed_history_~val#1;write_side1_failed_history_~val#1 := write_side1_failed_history_#in~val#1;~side1Failed_History_2~0 := ~side1Failed_History_1~0;~side1Failed_History_1~0 := ~side1Failed_History_0~0;~side1Failed_History_0~0 := write_side1_failed_history_~val#1; 8991#L80 assume { :end_inline_write_side1_failed_history } true; 8981#L277 assume !(0 != ~side1Failed~0 % 256);Side1_activestandby_task_each_pals_period_~side1~0#1 := ~s1s1_old~0;~s1s1_old~0 := ~nomsg~0;Side1_activestandby_task_each_pals_period_~side2~0#1 := ~s2s1_old~0;~s2s1_old~0 := ~nomsg~0;Side1_activestandby_task_each_pals_period_~manual_selection~1#1 := ~cs1_old~0;~cs1_old~0 := ~nomsg~0; 8983#L290 assume Side1_activestandby_task_each_pals_period_~side1~0#1 == Side1_activestandby_task_each_pals_period_~side2~0#1;Side1_activestandby_task_each_pals_period_~next_state~0#1 := 1; 8947#L301 assume !(Side1_activestandby_task_each_pals_period_~next_state~0#1 != ~nomsg~0 && ~s1s1_new~0 == ~nomsg~0);Side1_activestandby_task_each_pals_period_#t~ite11#1 := ~s1s1_new~0; 8948#L310-1 ~s1s1_new~0 := (if Side1_activestandby_task_each_pals_period_#t~ite11#1 % 256 <= 127 then Side1_activestandby_task_each_pals_period_#t~ite11#1 % 256 else Side1_activestandby_task_each_pals_period_#t~ite11#1 % 256 - 256);havoc Side1_activestandby_task_each_pals_period_#t~ite11#1; 8896#L311 assume Side1_activestandby_task_each_pals_period_~next_state~0#1 != ~nomsg~0 && ~s1s2_new~0 == ~nomsg~0;Side1_activestandby_task_each_pals_period_#t~ite12#1 := Side1_activestandby_task_each_pals_period_~next_state~0#1; 8897#L311-2 ~s1s2_new~0 := (if Side1_activestandby_task_each_pals_period_#t~ite12#1 % 256 <= 127 then Side1_activestandby_task_each_pals_period_#t~ite12#1 % 256 else Side1_activestandby_task_each_pals_period_#t~ite12#1 % 256 - 256);havoc Side1_activestandby_task_each_pals_period_#t~ite12#1; 8961#L312 assume Side1_activestandby_task_each_pals_period_~next_state~0#1 != ~nomsg~0 && ~s1p_new~0 == ~nomsg~0;Side1_activestandby_task_each_pals_period_#t~ite13#1 := Side1_activestandby_task_each_pals_period_~next_state~0#1; 8933#L312-2 ~s1p_new~0 := (if Side1_activestandby_task_each_pals_period_#t~ite13#1 % 256 <= 127 then Side1_activestandby_task_each_pals_period_#t~ite13#1 % 256 else Side1_activestandby_task_each_pals_period_#t~ite13#1 % 256 - 256);havoc Side1_activestandby_task_each_pals_period_#t~ite13#1;~side1_written~0 := Side1_activestandby_task_each_pals_period_~next_state~0#1; 8934#L314 assume { :end_inline_Side1_activestandby_task_each_pals_period } true;assume { :begin_inline_Side2_activestandby_task_each_pals_period } true;havoc Side2_activestandby_task_each_pals_period_#t~nondet14#1, Side2_activestandby_task_each_pals_period_#t~ite15#1, Side2_activestandby_task_each_pals_period_#t~ite16#1, Side2_activestandby_task_each_pals_period_#t~ite17#1, Side2_activestandby_task_each_pals_period_#t~ret18#1, Side2_activestandby_task_each_pals_period_#t~ite19#1, Side2_activestandby_task_each_pals_period_#t~ite20#1, Side2_activestandby_task_each_pals_period_#t~ite21#1, Side2_activestandby_task_each_pals_period_~side1~1#1, Side2_activestandby_task_each_pals_period_~side2~1#1, Side2_activestandby_task_each_pals_period_~manual_selection~2#1, Side2_activestandby_task_each_pals_period_~next_state~1#1;havoc Side2_activestandby_task_each_pals_period_~side1~1#1;havoc Side2_activestandby_task_each_pals_period_~side2~1#1;havoc Side2_activestandby_task_each_pals_period_~manual_selection~2#1;havoc Side2_activestandby_task_each_pals_period_~next_state~1#1;Side2_activestandby_task_each_pals_period_~side1~1#1 := ~nomsg~0;Side2_activestandby_task_each_pals_period_~side2~1#1 := ~nomsg~0;Side2_activestandby_task_each_pals_period_~manual_selection~2#1 := 0;~side2Failed~0 := Side2_activestandby_task_each_pals_period_#t~nondet14#1;havoc Side2_activestandby_task_each_pals_period_#t~nondet14#1;assume { :begin_inline_write_side2_failed_history } true;write_side2_failed_history_#in~val#1 := ~side2Failed~0;havoc write_side2_failed_history_~val#1;write_side2_failed_history_~val#1 := write_side2_failed_history_#in~val#1;~side2Failed_History_2~0 := ~side2Failed_History_1~0;~side2Failed_History_1~0 := ~side2Failed_History_0~0;~side2Failed_History_0~0 := write_side2_failed_history_~val#1; 9047#L110 assume { :end_inline_write_side2_failed_history } true; 9045#L330 assume 0 != ~side2Failed~0 % 256; 8995#L331 assume !(~nomsg~0 != ~nomsg~0 && ~s2s1_new~0 == ~nomsg~0);Side2_activestandby_task_each_pals_period_#t~ite15#1 := ~s2s1_new~0; 8974#L331-2 ~s2s1_new~0 := (if Side2_activestandby_task_each_pals_period_#t~ite15#1 % 256 <= 127 then Side2_activestandby_task_each_pals_period_#t~ite15#1 % 256 else Side2_activestandby_task_each_pals_period_#t~ite15#1 % 256 - 256);havoc Side2_activestandby_task_each_pals_period_#t~ite15#1; 8975#L332 assume !(~nomsg~0 != ~nomsg~0 && ~s2s2_new~0 == ~nomsg~0);Side2_activestandby_task_each_pals_period_#t~ite16#1 := ~s2s2_new~0; 8942#L332-2 ~s2s2_new~0 := (if Side2_activestandby_task_each_pals_period_#t~ite16#1 % 256 <= 127 then Side2_activestandby_task_each_pals_period_#t~ite16#1 % 256 else Side2_activestandby_task_each_pals_period_#t~ite16#1 % 256 - 256);havoc Side2_activestandby_task_each_pals_period_#t~ite16#1; 8943#L333 assume !(~nomsg~0 != ~nomsg~0 && ~s2p_new~0 == ~nomsg~0);Side2_activestandby_task_each_pals_period_#t~ite17#1 := ~s2p_new~0; 9015#L333-2 ~s2p_new~0 := (if Side2_activestandby_task_each_pals_period_#t~ite17#1 % 256 <= 127 then Side2_activestandby_task_each_pals_period_#t~ite17#1 % 256 else Side2_activestandby_task_each_pals_period_#t~ite17#1 % 256 - 256);havoc Side2_activestandby_task_each_pals_period_#t~ite17#1;~side2_written~0 := ~nomsg~0; 9021#L371 assume { :end_inline_Side2_activestandby_task_each_pals_period } true;assume { :begin_inline_Pendulum_prism_task_each_pals_period } true;havoc Pendulum_prism_task_each_pals_period_#t~ret22#1, Pendulum_prism_task_each_pals_period_~active_side~0#1, Pendulum_prism_task_each_pals_period_~tmp~2#1, Pendulum_prism_task_each_pals_period_~side1~2#1, Pendulum_prism_task_each_pals_period_~side2~2#1;havoc Pendulum_prism_task_each_pals_period_~active_side~0#1;havoc Pendulum_prism_task_each_pals_period_~tmp~2#1;havoc Pendulum_prism_task_each_pals_period_~side1~2#1;havoc Pendulum_prism_task_each_pals_period_~side2~2#1;assume { :begin_inline_read_active_side_history } true;read_active_side_history_#in~index#1 := 0;havoc read_active_side_history_#res#1;havoc read_active_side_history_~index#1;read_active_side_history_~index#1 := read_active_side_history_#in~index#1; 9042#L148 assume 0 == read_active_side_history_~index#1 % 256;read_active_side_history_#res#1 := ~active_side_History_0~0; 9041#L158 Pendulum_prism_task_each_pals_period_#t~ret22#1 := read_active_side_history_#res#1;assume { :end_inline_read_active_side_history } true;Pendulum_prism_task_each_pals_period_~tmp~2#1 := Pendulum_prism_task_each_pals_period_#t~ret22#1;havoc Pendulum_prism_task_each_pals_period_#t~ret22#1;Pendulum_prism_task_each_pals_period_~active_side~0#1 := Pendulum_prism_task_each_pals_period_~tmp~2#1;Pendulum_prism_task_each_pals_period_~side1~2#1 := ~nomsg~0;Pendulum_prism_task_each_pals_period_~side2~2#1 := ~nomsg~0;Pendulum_prism_task_each_pals_period_~side1~2#1 := ~s1p_old~0;~s1p_old~0 := ~nomsg~0;Pendulum_prism_task_each_pals_period_~side2~2#1 := ~s2p_old~0;~s2p_old~0 := ~nomsg~0; 9040#L390 assume 1 == Pendulum_prism_task_each_pals_period_~side1~2#1;Pendulum_prism_task_each_pals_period_~active_side~0#1 := 1; 9034#L404 assume { :begin_inline_write_active_side_history } true;write_active_side_history_#in~val#1 := Pendulum_prism_task_each_pals_period_~active_side~0#1;havoc write_active_side_history_~val#1;write_active_side_history_~val#1 := write_active_side_history_#in~val#1;~active_side_History_2~0 := ~active_side_History_1~0;~active_side_History_1~0 := ~active_side_History_0~0;~active_side_History_0~0 := write_active_side_history_~val#1; 9033#L140 assume { :end_inline_write_active_side_history } true; 9032#L414 assume { :end_inline_Pendulum_prism_task_each_pals_period } true;~cs1_old~0 := ~cs1_new~0;~cs1_new~0 := ~nomsg~0;~cs2_old~0 := ~cs2_new~0;~cs2_new~0 := ~nomsg~0;~s1s2_old~0 := ~s1s2_new~0;~s1s2_new~0 := ~nomsg~0;~s1s1_old~0 := ~s1s1_new~0;~s1s1_new~0 := ~nomsg~0;~s2s1_old~0 := ~s2s1_new~0;~s2s1_new~0 := ~nomsg~0;~s2s2_old~0 := ~s2s2_new~0;~s2s2_new~0 := ~nomsg~0;~s1p_old~0 := ~s1p_new~0;~s1p_new~0 := ~nomsg~0;~s2p_old~0 := ~s2p_new~0;~s2p_new~0 := ~nomsg~0;assume { :begin_inline_check } true;havoc check_#res#1;havoc check_#t~ret23#1, check_#t~ret24#1, check_#t~ret25#1, check_#t~ret26#1, check_#t~ret27#1, check_#t~ret28#1, check_#t~ret29#1, check_#t~ret30#1, check_#t~ret31#1, check_#t~ret32#1, check_#t~ret33#1, check_#t~ret34#1, check_#t~ret35#1, check_#t~ret36#1, check_#t~ret37#1, check_#t~ret38#1, check_#t~ret39#1, check_#t~ret40#1, check_#t~ret41#1, check_#t~ret42#1, check_#t~ret43#1, check_~tmp~3#1, check_~tmp___0~0#1, check_~tmp___1~0#1, check_~tmp___2~0#1, check_~tmp___3~0#1, check_~tmp___4~0#1, check_~tmp___5~0#1, check_~tmp___6~0#1, check_~tmp___7~0#1, check_~tmp___8~0#1, check_~tmp___9~0#1, check_~tmp___10~0#1, check_~tmp___11~0#1, check_~tmp___12~0#1, check_~tmp___13~0#1, check_~tmp___14~0#1, check_~tmp___15~0#1, check_~tmp___16~0#1, check_~tmp___17~0#1, check_~tmp___18~0#1, check_~tmp___19~0#1, check_~tmp___20~0#1;havoc check_~tmp~3#1;havoc check_~tmp___0~0#1;havoc check_~tmp___1~0#1;havoc check_~tmp___2~0#1;havoc check_~tmp___3~0#1;havoc check_~tmp___4~0#1;havoc check_~tmp___5~0#1;havoc check_~tmp___6~0#1;havoc check_~tmp___7~0#1;havoc check_~tmp___8~0#1;havoc check_~tmp___9~0#1;havoc check_~tmp___10~0#1;havoc check_~tmp___11~0#1;havoc check_~tmp___12~0#1;havoc check_~tmp___13~0#1;havoc check_~tmp___14~0#1;havoc check_~tmp___15~0#1;havoc check_~tmp___16~0#1;havoc check_~tmp___17~0#1;havoc check_~tmp___18~0#1;havoc check_~tmp___19~0#1;havoc check_~tmp___20~0#1; 8911#L443 assume 0 == ~side1Failed~0 % 256;check_~tmp~3#1 := 1; 8912#L446-2 assume { :begin_inline_assume_abort_if_not } true;assume_abort_if_not_#in~cond#1 := (if 0 == check_~tmp~3#1 then 0 else 1) % 256;havoc assume_abort_if_not_~cond#1;assume_abort_if_not_~cond#1 := assume_abort_if_not_#in~cond#1; 8913#L58-2 assume !(0 == assume_abort_if_not_~cond#1); 8852#L57-1 assume { :end_inline_assume_abort_if_not } true;assume { :begin_inline_read_manual_selection_history } true;read_manual_selection_history_#in~index#1 := 1;havoc read_manual_selection_history_#res#1;havoc read_manual_selection_history_~index#1;read_manual_selection_history_~index#1 := read_manual_selection_history_#in~index#1; 8853#L178 assume !(0 == read_manual_selection_history_~index#1 % 256); 8864#L181 assume 1 == read_manual_selection_history_~index#1 % 256;read_manual_selection_history_#res#1 := ~manual_selection_History_1~0; 8854#L188 check_#t~ret23#1 := read_manual_selection_history_#res#1;assume { :end_inline_read_manual_selection_history } true;check_~tmp___0~0#1 := check_#t~ret23#1;havoc check_#t~ret23#1; 8855#L453 assume !(0 == check_~tmp___0~0#1); 8836#L453-1 assume { :begin_inline_read_side1_failed_history } true;read_side1_failed_history_#in~index#1 := 1;havoc read_side1_failed_history_#res#1;havoc read_side1_failed_history_~index#1;read_side1_failed_history_~index#1 := read_side1_failed_history_#in~index#1; 8848#L88-2 assume !(0 == read_side1_failed_history_~index#1 % 256); 8849#L91-2 assume 1 == read_side1_failed_history_~index#1 % 256;read_side1_failed_history_#res#1 := ~side1Failed_History_1~0; 8920#L98-2 check_#t~ret28#1 := read_side1_failed_history_#res#1;assume { :end_inline_read_side1_failed_history } true;check_~tmp___7~0#1 := check_#t~ret28#1;havoc check_#t~ret28#1; 9025#L483 assume 0 != check_~tmp___7~0#1 % 256;assume { :begin_inline_read_side2_failed_history } true;read_side2_failed_history_#in~index#1 := 1;havoc read_side2_failed_history_#res#1;havoc read_side2_failed_history_~index#1;read_side2_failed_history_~index#1 := read_side2_failed_history_#in~index#1; 8907#L118-2 assume !(0 == read_side2_failed_history_~index#1 % 256); 8908#L121-2 assume 1 == read_side2_failed_history_~index#1 % 256;read_side2_failed_history_#res#1 := ~side2Failed_History_1~0; 8994#L128-2 check_#t~ret29#1 := read_side2_failed_history_#res#1;assume { :end_inline_read_side2_failed_history } true;check_~tmp___8~0#1 := check_#t~ret29#1;havoc check_#t~ret29#1; 8954#L485 assume !(0 == check_~tmp___8~0#1 % 256); 8841#L483-1 assume { :begin_inline_read_side1_failed_history } true;read_side1_failed_history_#in~index#1 := 1;havoc read_side1_failed_history_#res#1;havoc read_side1_failed_history_~index#1;read_side1_failed_history_~index#1 := read_side1_failed_history_#in~index#1; 9080#L88-3 assume !(0 == read_side1_failed_history_~index#1 % 256); 9079#L91-3 assume 1 == read_side1_failed_history_~index#1 % 256;read_side1_failed_history_#res#1 := ~side1Failed_History_1~0; 9078#L98-3 check_#t~ret32#1 := read_side1_failed_history_#res#1;assume { :end_inline_read_side1_failed_history } true;check_~tmp___11~0#1 := check_#t~ret32#1;havoc check_#t~ret32#1; 9077#L499 assume !(0 == check_~tmp___11~0#1 % 256); 8869#L499-1 assume { :begin_inline_read_active_side_history } true;read_active_side_history_#in~index#1 := 2;havoc read_active_side_history_#res#1;havoc read_active_side_history_~index#1;read_active_side_history_~index#1 := read_active_side_history_#in~index#1; 8887#L148-3 assume !(0 == read_active_side_history_~index#1 % 256); 8964#L151-3 assume !(1 == read_active_side_history_~index#1 % 256); 8909#L154-3 assume 2 == read_active_side_history_~index#1 % 256;read_active_side_history_#res#1 := ~active_side_History_2~0; 8910#L158-3 check_#t~ret36#1 := read_active_side_history_#res#1;assume { :end_inline_read_active_side_history } true;check_~tmp___20~0#1 := check_#t~ret36#1;havoc check_#t~ret36#1; 8885#L515 assume !(check_~tmp___20~0#1 > -2); 8856#L515-1 check_#res#1 := 1; 8857#L533 main_#t~ret61#1 := check_#res#1;assume { :end_inline_check } true;main_~c1~0#1 := main_#t~ret61#1;havoc main_#t~ret61#1;assume { :begin_inline_assert } true;assert_#in~arg#1 := (if 0 == main_~c1~0#1 then 0 else 1);havoc assert_~arg#1;assert_~arg#1 := assert_#in~arg#1; 8977#L612-44 assume !(0 == assert_~arg#1 % 256); 8921#L607-22 assume { :end_inline_assert } true; 8922#L578-2 [2021-12-15 17:22:11,429 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-15 17:22:11,429 INFO L85 PathProgramCache]: Analyzing trace with hash -613005151, now seen corresponding path program 11 times [2021-12-15 17:22:11,429 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-15 17:22:11,429 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1554605997] [2021-12-15 17:22:11,429 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-15 17:22:11,430 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-15 17:22:11,435 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-15 17:22:11,435 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-12-15 17:22:11,439 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-15 17:22:11,443 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-12-15 17:22:11,443 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-15 17:22:11,443 INFO L85 PathProgramCache]: Analyzing trace with hash 1540791994, now seen corresponding path program 1 times [2021-12-15 17:22:11,443 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-15 17:22:11,443 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1454185289] [2021-12-15 17:22:11,443 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-15 17:22:11,443 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-15 17:22:11,466 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-15 17:22:11,466 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-12-15 17:22:11,493 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-15 17:22:11,503 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-12-15 17:22:11,504 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-15 17:22:11,504 INFO L85 PathProgramCache]: Analyzing trace with hash -122165414, now seen corresponding path program 1 times [2021-12-15 17:22:11,504 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-15 17:22:11,504 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [952448821] [2021-12-15 17:22:11,504 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-15 17:22:11,504 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-15 17:22:11,513 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-15 17:22:11,558 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-15 17:22:11,559 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-15 17:22:11,559 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [952448821] [2021-12-15 17:22:11,559 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [952448821] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-15 17:22:11,559 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-15 17:22:11,559 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-12-15 17:22:11,559 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1816023278] [2021-12-15 17:22:11,559 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-15 17:22:15,137 FATAL L? ?]: The Plugin de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer has thrown an exception: java.lang.UnsupportedOperationException: Set is immutable at de.uni_freiburg.informatik.ultimate.util.datastructures.ImmutableSet.retainAll(ImmutableSet.java:338) at de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.cfg.transitions.UnmodifiableTransFormula.removeSuperfluousVars(UnmodifiableTransFormula.java:212) at de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.cfg.transitions.TransFormulaBuilder.finishConstruction(TransFormulaBuilder.java:273) at de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.cfg.transitions.TransFormulaBuilder.getTrivialTransFormula(TransFormulaBuilder.java:285) at de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.LassoCheck.synthesize(LassoCheck.java:548) at de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.LassoCheck$LassoCheckResult.checkLoopTermination(LassoCheck.java:944) at de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.LassoCheck$LassoCheckResult.(LassoCheck.java:834) at de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.LassoCheck.(LassoCheck.java:252) at de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiCegarLoop.iterate(BuchiCegarLoop.java:457) at de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver.doTerminationAnalysis(BuchiAutomizerObserver.java:142) at de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver.finish(BuchiAutomizerObserver.java:397) at de.uni_freiburg.informatik.ultimate.core.coreplugin.PluginConnector.runObserver(PluginConnector.java:168) at de.uni_freiburg.informatik.ultimate.core.coreplugin.PluginConnector.runTool(PluginConnector.java:151) at de.uni_freiburg.informatik.ultimate.core.coreplugin.PluginConnector.run(PluginConnector.java:128) at de.uni_freiburg.informatik.ultimate.core.coreplugin.ToolchainWalker.executePluginConnector(ToolchainWalker.java:232) at de.uni_freiburg.informatik.ultimate.core.coreplugin.ToolchainWalker.processPlugin(ToolchainWalker.java:226) at de.uni_freiburg.informatik.ultimate.core.coreplugin.ToolchainWalker.walkUnprotected(ToolchainWalker.java:142) at de.uni_freiburg.informatik.ultimate.core.coreplugin.ToolchainWalker.walk(ToolchainWalker.java:104) at de.uni_freiburg.informatik.ultimate.core.coreplugin.ToolchainManager$Toolchain.processToolchain(ToolchainManager.java:320) at de.uni_freiburg.informatik.ultimate.core.coreplugin.toolchain.DefaultToolchainJob.run(DefaultToolchainJob.java:145) at org.eclipse.core.internal.jobs.Worker.run(Worker.java:63) [2021-12-15 17:22:15,144 INFO L158 Benchmark]: Toolchain (without parser) took 7684.63ms. Allocated memory was 92.3MB in the beginning and 172.0MB in the end (delta: 79.7MB). Free memory was 60.5MB in the beginning and 62.3MB in the end (delta: -1.8MB). Peak memory consumption was 93.9MB. Max. memory is 16.1GB. [2021-12-15 17:22:15,144 INFO L158 Benchmark]: CDTParser took 0.15ms. Allocated memory is still 92.3MB. Free memory was 48.7MB in the beginning and 48.6MB in the end (delta: 84.0kB). There was no memory consumed. Max. memory is 16.1GB. [2021-12-15 17:22:15,145 INFO L158 Benchmark]: CACSL2BoogieTranslator took 339.11ms. Allocated memory was 92.3MB in the beginning and 113.2MB in the end (delta: 21.0MB). Free memory was 60.4MB in the beginning and 83.2MB in the end (delta: -22.8MB). Peak memory consumption was 10.5MB. Max. memory is 16.1GB. [2021-12-15 17:22:15,145 INFO L158 Benchmark]: Boogie Procedure Inliner took 88.87ms. Allocated memory is still 113.2MB. Free memory was 83.2MB in the beginning and 78.4MB in the end (delta: 4.7MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. [2021-12-15 17:22:15,146 INFO L158 Benchmark]: Boogie Preprocessor took 56.40ms. Allocated memory is still 113.2MB. Free memory was 78.4MB in the beginning and 75.3MB in the end (delta: 3.1MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. [2021-12-15 17:22:15,146 INFO L158 Benchmark]: RCFGBuilder took 822.13ms. Allocated memory is still 113.2MB. Free memory was 75.3MB in the beginning and 80.5MB in the end (delta: -5.2MB). Peak memory consumption was 36.7MB. Max. memory is 16.1GB. [2021-12-15 17:22:15,149 INFO L158 Benchmark]: BuchiAutomizer took 6373.50ms. Allocated memory was 113.2MB in the beginning and 172.0MB in the end (delta: 58.7MB). Free memory was 80.5MB in the beginning and 62.3MB in the end (delta: 18.2MB). Peak memory consumption was 91.5MB. Max. memory is 16.1GB. [2021-12-15 17:22:15,151 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.15ms. Allocated memory is still 92.3MB. Free memory was 48.7MB in the beginning and 48.6MB in the end (delta: 84.0kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 339.11ms. Allocated memory was 92.3MB in the beginning and 113.2MB in the end (delta: 21.0MB). Free memory was 60.4MB in the beginning and 83.2MB in the end (delta: -22.8MB). Peak memory consumption was 10.5MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 88.87ms. Allocated memory is still 113.2MB. Free memory was 83.2MB in the beginning and 78.4MB in the end (delta: 4.7MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. * Boogie Preprocessor took 56.40ms. Allocated memory is still 113.2MB. Free memory was 78.4MB in the beginning and 75.3MB in the end (delta: 3.1MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. * RCFGBuilder took 822.13ms. Allocated memory is still 113.2MB. Free memory was 75.3MB in the beginning and 80.5MB in the end (delta: -5.2MB). Peak memory consumption was 36.7MB. Max. memory is 16.1GB. * BuchiAutomizer took 6373.50ms. Allocated memory was 113.2MB in the beginning and 172.0MB in the end (delta: 58.7MB). Free memory was 80.5MB in the beginning and 62.3MB in the end (delta: 18.2MB). Peak memory consumption was 91.5MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer: - ExceptionOrErrorResult: UnsupportedOperationException: Set is immutable de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer: UnsupportedOperationException: Set is immutable: de.uni_freiburg.informatik.ultimate.util.datastructures.ImmutableSet.retainAll(ImmutableSet.java:338) RESULT: Ultimate could not prove your program: Toolchain returned no result. [2021-12-15 17:22:15,176 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (1)] Ended with exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Using bit-precise analysis No suitable file found in config dir /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config using search string *Termination*32bit*_Bitvector*.epf No suitable settings file found using Termination*32bit*_Bitvector ERROR: UNSUPPORTED PROPERTY Writing output log to file Ultimate.log Result: ERROR: ExceptionOrErrorResult: UnsupportedOperationException: Set is immutable