./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/product-lines/email_spec9_productSimulator.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 8fc3dc66 Calling Ultimate with: /root/.sdkman/candidates/java/21.0.5-tem/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.6.800.v20240513-1750.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/product-lines/email_spec9_productSimulator.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash a46e94d21677d8e787ff51041171bb0d6a97c638f1cb1f2181c1b14c15718344 --- Real Ultimate output --- This is Ultimate 0.3.0-?-8fc3dc6-m [2025-03-16 18:46:48,284 INFO L188 SettingsManager]: Resetting all preferences to default values... [2025-03-16 18:46:48,351 INFO L114 SettingsManager]: Loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf [2025-03-16 18:46:48,358 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2025-03-16 18:46:48,359 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2025-03-16 18:46:48,383 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2025-03-16 18:46:48,385 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2025-03-16 18:46:48,385 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2025-03-16 18:46:48,385 INFO L151 SettingsManager]: Preferences of Boogie Preprocessor differ from their defaults: [2025-03-16 18:46:48,385 INFO L153 SettingsManager]: * Use memory slicer=true [2025-03-16 18:46:48,386 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2025-03-16 18:46:48,386 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2025-03-16 18:46:48,387 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2025-03-16 18:46:48,387 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2025-03-16 18:46:48,387 INFO L153 SettingsManager]: * Use SBE=true [2025-03-16 18:46:48,387 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2025-03-16 18:46:48,387 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2025-03-16 18:46:48,387 INFO L153 SettingsManager]: * sizeof long=4 [2025-03-16 18:46:48,387 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2025-03-16 18:46:48,387 INFO L153 SettingsManager]: * sizeof POINTER=4 [2025-03-16 18:46:48,387 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2025-03-16 18:46:48,387 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2025-03-16 18:46:48,387 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2025-03-16 18:46:48,387 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2025-03-16 18:46:48,387 INFO L153 SettingsManager]: * sizeof long double=12 [2025-03-16 18:46:48,387 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2025-03-16 18:46:48,387 INFO L153 SettingsManager]: * Behaviour of calls to undefined functions=OVERAPPROXIMATE_BEHAVIOUR [2025-03-16 18:46:48,387 INFO L153 SettingsManager]: * Use constant arrays=true [2025-03-16 18:46:48,387 INFO L151 SettingsManager]: Preferences of IcfgBuilder differ from their defaults: [2025-03-16 18:46:48,387 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2025-03-16 18:46:48,388 INFO L153 SettingsManager]: * Only consider context switches at boundaries of atomic blocks=true [2025-03-16 18:46:48,388 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2025-03-16 18:46:48,388 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2025-03-16 18:46:48,388 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2025-03-16 18:46:48,388 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2025-03-16 18:46:48,388 INFO L153 SettingsManager]: * Compute procedure contracts=false [2025-03-16 18:46:48,388 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopHeads [2025-03-16 18:46:48,388 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2025-03-16 18:46:48,388 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2025-03-16 18:46:48,388 INFO L153 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2025-03-16 18:46:48,388 INFO L153 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2025-03-16 18:46:48,388 INFO L153 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2025-03-16 18:46:48,388 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2025-03-16 18:46:48,388 INFO L153 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> a46e94d21677d8e787ff51041171bb0d6a97c638f1cb1f2181c1b14c15718344 [2025-03-16 18:46:48,644 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2025-03-16 18:46:48,651 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2025-03-16 18:46:48,654 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2025-03-16 18:46:48,655 INFO L270 PluginConnector]: Initializing CDTParser... [2025-03-16 18:46:48,655 INFO L274 PluginConnector]: CDTParser initialized [2025-03-16 18:46:48,656 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/email_spec9_productSimulator.cil.c [2025-03-16 18:46:49,743 INFO L533 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/d5a8a1685/81f13db4e5084590b7b06ef0a12aacf9/FLAG995cdd787 [2025-03-16 18:46:50,100 INFO L384 CDTParser]: Found 1 translation units. [2025-03-16 18:46:50,101 INFO L180 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/email_spec9_productSimulator.cil.c [2025-03-16 18:46:50,128 INFO L427 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/d5a8a1685/81f13db4e5084590b7b06ef0a12aacf9/FLAG995cdd787 [2025-03-16 18:46:50,144 INFO L435 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/d5a8a1685/81f13db4e5084590b7b06ef0a12aacf9 [2025-03-16 18:46:50,146 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2025-03-16 18:46:50,148 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2025-03-16 18:46:50,152 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2025-03-16 18:46:50,152 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2025-03-16 18:46:50,156 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2025-03-16 18:46:50,156 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 16.03 06:46:50" (1/1) ... [2025-03-16 18:46:50,157 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@49807c08 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.03 06:46:50, skipping insertion in model container [2025-03-16 18:46:50,157 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 16.03 06:46:50" (1/1) ... [2025-03-16 18:46:50,208 INFO L175 MainTranslator]: Built tables and reachable declarations [2025-03-16 18:46:50,514 WARN L250 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/email_spec9_productSimulator.cil.c[31629,31642] [2025-03-16 18:46:50,627 INFO L210 PostProcessor]: Analyzing one entry point: main [2025-03-16 18:46:50,640 INFO L200 MainTranslator]: Completed pre-run [2025-03-16 18:46:50,646 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [48] [2025-03-16 18:46:50,647 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"EmailLib.i","") [335] [2025-03-16 18:46:50,647 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Client.i","") [747] [2025-03-16 18:46:50,647 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [1323] [2025-03-16 18:46:50,648 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [1686] [2025-03-16 18:46:50,648 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [1695] [2025-03-16 18:46:50,648 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"EncryptForward_spec.i","") [2061] [2025-03-16 18:46:50,648 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [2103] [2025-03-16 18:46:50,649 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Email.i","") [2210] [2025-03-16 18:46:50,649 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Util.i","") [2414] [2025-03-16 18:46:50,650 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"ClientLib.i","") [2431] [2025-03-16 18:46:50,693 WARN L250 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/email_spec9_productSimulator.cil.c[31629,31642] [2025-03-16 18:46:50,743 INFO L210 PostProcessor]: Analyzing one entry point: main [2025-03-16 18:46:50,770 INFO L204 MainTranslator]: Completed translation [2025-03-16 18:46:50,771 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.03 06:46:50 WrapperNode [2025-03-16 18:46:50,771 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2025-03-16 18:46:50,771 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2025-03-16 18:46:50,772 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2025-03-16 18:46:50,772 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2025-03-16 18:46:50,775 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.03 06:46:50" (1/1) ... [2025-03-16 18:46:50,790 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.03 06:46:50" (1/1) ... [2025-03-16 18:46:50,839 INFO L138 Inliner]: procedures = 152, calls = 266, calls flagged for inlining = 68, calls inlined = 65, statements flattened = 1328 [2025-03-16 18:46:50,840 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2025-03-16 18:46:50,841 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2025-03-16 18:46:50,842 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2025-03-16 18:46:50,842 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2025-03-16 18:46:50,849 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.03 06:46:50" (1/1) ... [2025-03-16 18:46:50,849 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.03 06:46:50" (1/1) ... [2025-03-16 18:46:50,854 INFO L184 PluginConnector]: Executing the observer MemorySlicer from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.03 06:46:50" (1/1) ... [2025-03-16 18:46:50,883 INFO L175 MemorySlicer]: Split 14 memory accesses to 4 slices as follows [2, 4, 4, 4]. 29 percent of accesses are in the largest equivalence class. The 14 initializations are split as follows [2, 4, 4, 4]. The 0 writes are split as follows [0, 0, 0, 0]. [2025-03-16 18:46:50,886 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.03 06:46:50" (1/1) ... [2025-03-16 18:46:50,887 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.03 06:46:50" (1/1) ... [2025-03-16 18:46:50,904 INFO L184 PluginConnector]: Executing the observer ReplaceArrayAssignments from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.03 06:46:50" (1/1) ... [2025-03-16 18:46:50,913 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.03 06:46:50" (1/1) ... [2025-03-16 18:46:50,919 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.03 06:46:50" (1/1) ... [2025-03-16 18:46:50,925 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.03 06:46:50" (1/1) ... [2025-03-16 18:46:50,938 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2025-03-16 18:46:50,940 INFO L112 PluginConnector]: ------------------------IcfgBuilder---------------------------- [2025-03-16 18:46:50,940 INFO L270 PluginConnector]: Initializing IcfgBuilder... [2025-03-16 18:46:50,940 INFO L274 PluginConnector]: IcfgBuilder initialized [2025-03-16 18:46:50,941 INFO L184 PluginConnector]: Executing the observer IcfgBuilderObserver from plugin IcfgBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.03 06:46:50" (1/1) ... [2025-03-16 18:46:50,945 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2025-03-16 18:46:50,955 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-16 18:46:50,968 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (exit command is (exit), workingDir is null) [2025-03-16 18:46:50,972 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (1)] Waiting until timeout for monitored process [2025-03-16 18:46:50,989 INFO L130 BoogieDeclarations]: Found specification of procedure getClientPrivateKey [2025-03-16 18:46:50,990 INFO L138 BoogieDeclarations]: Found implementation of procedure getClientPrivateKey [2025-03-16 18:46:50,990 INFO L130 BoogieDeclarations]: Found specification of procedure setup_chuck__before__Keys [2025-03-16 18:46:50,990 INFO L138 BoogieDeclarations]: Found implementation of procedure setup_chuck__before__Keys [2025-03-16 18:46:50,990 INFO L130 BoogieDeclarations]: Found specification of procedure outgoing__before__Sign [2025-03-16 18:46:50,990 INFO L138 BoogieDeclarations]: Found implementation of procedure outgoing__before__Sign [2025-03-16 18:46:50,990 INFO L130 BoogieDeclarations]: Found specification of procedure getClientAddressBookSize [2025-03-16 18:46:50,990 INFO L138 BoogieDeclarations]: Found implementation of procedure getClientAddressBookSize [2025-03-16 18:46:50,991 INFO L130 BoogieDeclarations]: Found specification of procedure setEmailEncryptionKey [2025-03-16 18:46:50,991 INFO L138 BoogieDeclarations]: Found implementation of procedure setEmailEncryptionKey [2025-03-16 18:46:50,991 INFO L130 BoogieDeclarations]: Found specification of procedure setClientAddressBookAddress [2025-03-16 18:46:50,991 INFO L138 BoogieDeclarations]: Found implementation of procedure setClientAddressBookAddress [2025-03-16 18:46:50,991 INFO L130 BoogieDeclarations]: Found specification of procedure getEmailEncryptionKey [2025-03-16 18:46:50,991 INFO L138 BoogieDeclarations]: Found implementation of procedure getEmailEncryptionKey [2025-03-16 18:46:50,991 INFO L130 BoogieDeclarations]: Found specification of procedure printMail__before__Verify [2025-03-16 18:46:50,991 INFO L138 BoogieDeclarations]: Found implementation of procedure printMail__before__Verify [2025-03-16 18:46:50,992 INFO L130 BoogieDeclarations]: Found specification of procedure getEmailTo [2025-03-16 18:46:50,992 INFO L138 BoogieDeclarations]: Found implementation of procedure getEmailTo [2025-03-16 18:46:50,992 INFO L130 BoogieDeclarations]: Found specification of procedure setup_bob__before__Keys [2025-03-16 18:46:50,992 INFO L138 BoogieDeclarations]: Found implementation of procedure setup_bob__before__Keys [2025-03-16 18:46:50,992 INFO L130 BoogieDeclarations]: Found specification of procedure setEmailFrom [2025-03-16 18:46:50,992 INFO L138 BoogieDeclarations]: Found implementation of procedure setEmailFrom [2025-03-16 18:46:50,992 INFO L130 BoogieDeclarations]: Found specification of procedure isReadable [2025-03-16 18:46:50,992 INFO L138 BoogieDeclarations]: Found implementation of procedure isReadable [2025-03-16 18:46:50,993 INFO L130 BoogieDeclarations]: Found specification of procedure createClientKeyringEntry [2025-03-16 18:46:50,993 INFO L138 BoogieDeclarations]: Found implementation of procedure createClientKeyringEntry [2025-03-16 18:46:50,993 INFO L130 BoogieDeclarations]: Found specification of procedure incoming__before__Decrypt [2025-03-16 18:46:50,993 INFO L138 BoogieDeclarations]: Found implementation of procedure incoming__before__Decrypt [2025-03-16 18:46:50,993 INFO L130 BoogieDeclarations]: Found specification of procedure outgoing__before__Encrypt [2025-03-16 18:46:50,993 INFO L138 BoogieDeclarations]: Found implementation of procedure outgoing__before__Encrypt [2025-03-16 18:46:50,993 INFO L130 BoogieDeclarations]: Found specification of procedure setEmailIsEncrypted [2025-03-16 18:46:50,994 INFO L138 BoogieDeclarations]: Found implementation of procedure setEmailIsEncrypted [2025-03-16 18:46:50,994 INFO L130 BoogieDeclarations]: Found specification of procedure getEmailSignKey [2025-03-16 18:46:50,994 INFO L138 BoogieDeclarations]: Found implementation of procedure getEmailSignKey [2025-03-16 18:46:50,994 INFO L130 BoogieDeclarations]: Found specification of procedure chuckKeyAdd [2025-03-16 18:46:50,994 INFO L138 BoogieDeclarations]: Found implementation of procedure chuckKeyAdd [2025-03-16 18:46:50,994 INFO L130 BoogieDeclarations]: Found specification of procedure incoming__before__Forward [2025-03-16 18:46:50,994 INFO L138 BoogieDeclarations]: Found implementation of procedure incoming__before__Forward [2025-03-16 18:46:50,994 INFO L130 BoogieDeclarations]: Found specification of procedure getEmailFrom [2025-03-16 18:46:50,994 INFO L138 BoogieDeclarations]: Found implementation of procedure getEmailFrom [2025-03-16 18:46:50,995 INFO L130 BoogieDeclarations]: Found specification of procedure queue [2025-03-16 18:46:50,995 INFO L138 BoogieDeclarations]: Found implementation of procedure queue [2025-03-16 18:46:50,995 INFO L130 BoogieDeclarations]: Found specification of procedure setClientId [2025-03-16 18:46:50,995 INFO L138 BoogieDeclarations]: Found implementation of procedure setClientId [2025-03-16 18:46:50,995 INFO L130 BoogieDeclarations]: Found specification of procedure isReadable__before__Encrypt [2025-03-16 18:46:50,995 INFO L138 BoogieDeclarations]: Found implementation of procedure isReadable__before__Encrypt [2025-03-16 18:46:50,995 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2025-03-16 18:46:50,996 INFO L130 BoogieDeclarations]: Found specification of procedure isSigned [2025-03-16 18:46:50,996 INFO L138 BoogieDeclarations]: Found implementation of procedure isSigned [2025-03-16 18:46:50,996 INFO L130 BoogieDeclarations]: Found specification of procedure isKeyPairValid [2025-03-16 18:46:50,996 INFO L138 BoogieDeclarations]: Found implementation of procedure isKeyPairValid [2025-03-16 18:46:50,996 INFO L130 BoogieDeclarations]: Found specification of procedure outgoing__before__AddressBook [2025-03-16 18:46:50,996 INFO L138 BoogieDeclarations]: Found implementation of procedure outgoing__before__AddressBook [2025-03-16 18:46:50,996 INFO L130 BoogieDeclarations]: Found specification of procedure printMail__before__Encrypt [2025-03-16 18:46:50,996 INFO L138 BoogieDeclarations]: Found implementation of procedure printMail__before__Encrypt [2025-03-16 18:46:50,996 INFO L130 BoogieDeclarations]: Found specification of procedure incoming__before__AutoResponder [2025-03-16 18:46:50,996 INFO L138 BoogieDeclarations]: Found implementation of procedure incoming__before__AutoResponder [2025-03-16 18:46:50,996 INFO L130 BoogieDeclarations]: Found specification of procedure setClientAddressBookSize [2025-03-16 18:46:50,996 INFO L138 BoogieDeclarations]: Found implementation of procedure setClientAddressBookSize [2025-03-16 18:46:50,996 INFO L130 BoogieDeclarations]: Found specification of procedure setClientKeyringUser [2025-03-16 18:46:50,996 INFO L138 BoogieDeclarations]: Found implementation of procedure setClientKeyringUser [2025-03-16 18:46:50,996 INFO L130 BoogieDeclarations]: Found specification of procedure setClientKeyringPublicKey [2025-03-16 18:46:50,996 INFO L138 BoogieDeclarations]: Found implementation of procedure setClientKeyringPublicKey [2025-03-16 18:46:50,996 INFO L130 BoogieDeclarations]: Found specification of procedure outgoing [2025-03-16 18:46:50,996 INFO L138 BoogieDeclarations]: Found implementation of procedure outgoing [2025-03-16 18:46:50,996 INFO L130 BoogieDeclarations]: Found specification of procedure findPublicKey [2025-03-16 18:46:50,996 INFO L138 BoogieDeclarations]: Found implementation of procedure findPublicKey [2025-03-16 18:46:50,996 INFO L130 BoogieDeclarations]: Found specification of procedure sendEmail [2025-03-16 18:46:50,996 INFO L138 BoogieDeclarations]: Found implementation of procedure sendEmail [2025-03-16 18:46:50,996 INFO L130 BoogieDeclarations]: Found specification of procedure isEncrypted [2025-03-16 18:46:50,996 INFO L138 BoogieDeclarations]: Found implementation of procedure isEncrypted [2025-03-16 18:46:50,996 INFO L130 BoogieDeclarations]: Found specification of procedure setup_rjh__before__Keys [2025-03-16 18:46:50,996 INFO L138 BoogieDeclarations]: Found implementation of procedure setup_rjh__before__Keys [2025-03-16 18:46:50,996 INFO L130 BoogieDeclarations]: Found specification of procedure incoming__before__Verify [2025-03-16 18:46:50,996 INFO L138 BoogieDeclarations]: Found implementation of procedure incoming__before__Verify [2025-03-16 18:46:50,996 INFO L130 BoogieDeclarations]: Found specification of procedure setClientPrivateKey [2025-03-16 18:46:50,996 INFO L138 BoogieDeclarations]: Found implementation of procedure setClientPrivateKey [2025-03-16 18:46:50,996 INFO L130 BoogieDeclarations]: Found specification of procedure setEmailTo [2025-03-16 18:46:50,996 INFO L138 BoogieDeclarations]: Found implementation of procedure setEmailTo [2025-03-16 18:46:50,996 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#0 [2025-03-16 18:46:50,996 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#1 [2025-03-16 18:46:50,996 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#2 [2025-03-16 18:46:50,996 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#3 [2025-03-16 18:46:50,996 INFO L130 BoogieDeclarations]: Found specification of procedure generateKeyPair [2025-03-16 18:46:50,996 INFO L138 BoogieDeclarations]: Found implementation of procedure generateKeyPair [2025-03-16 18:46:50,997 INFO L130 BoogieDeclarations]: Found specification of procedure printMail__before__Sign [2025-03-16 18:46:50,997 INFO L138 BoogieDeclarations]: Found implementation of procedure printMail__before__Sign [2025-03-16 18:46:50,997 INFO L130 BoogieDeclarations]: Found specification of procedure select_one [2025-03-16 18:46:50,997 INFO L138 BoogieDeclarations]: Found implementation of procedure select_one [2025-03-16 18:46:50,997 INFO L130 BoogieDeclarations]: Found specification of procedure getClientAddressBookAddress [2025-03-16 18:46:50,997 INFO L138 BoogieDeclarations]: Found implementation of procedure getClientAddressBookAddress [2025-03-16 18:46:50,997 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2025-03-16 18:46:50,997 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2025-03-16 18:46:51,186 INFO L256 CfgBuilder]: Building ICFG [2025-03-16 18:46:51,187 INFO L286 CfgBuilder]: Building CFG for each procedure with an implementation [2025-03-16 18:46:51,248 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2349: #res := ~retValue_acc~22; [2025-03-16 18:46:51,260 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L654: #res := ~retValue_acc~8; [2025-03-16 18:46:51,274 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1207: #res := ~retValue_acc~15; [2025-03-16 18:46:51,294 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3033: #res := ~retValue_acc~37; [2025-03-16 18:46:51,374 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2577: #res := ~retValue_acc~31; [2025-03-16 18:46:51,436 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L391-1: getEmailId_#res#1 := getEmailId_~retValue_acc~1#1; [2025-03-16 18:46:51,490 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L617: #res := ~retValue_acc~7; [2025-03-16 18:46:51,514 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L465: #res := ~retValue_acc~3; [2025-03-16 18:46:51,570 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2369-1: isReadable__role__Encrypt_#res#1 := isReadable__role__Encrypt_~retValue_acc~23#1; [2025-03-16 18:46:51,570 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2387: #res#1 := ~retValue_acc~24#1; [2025-03-16 18:46:51,640 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3125: #res#1 := ~retValue_acc~39#1; [2025-03-16 18:46:51,640 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3080-1: getClientKeyringSize_#res#1 := getClientKeyringSize_~retValue_acc~38#1; [2025-03-16 18:46:51,685 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3349: #res := ~retValue_acc~42; [2025-03-16 18:46:51,692 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2411-1: createEmail_#res#1 := createEmail_~retValue_acc~26#1; [2025-03-16 18:46:51,700 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L580: #res := ~retValue_acc~6; [2025-03-16 18:46:51,736 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3468-1: getClientId_#res#1 := getClientId_~retValue_acc~44#1; [2025-03-16 18:46:51,776 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3421-1: getClientForwardReceiver_#res#1 := getClientForwardReceiver_~retValue_acc~43#1; [2025-03-16 18:46:51,777 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L728-1: isVerified_#res#1 := isVerified_~retValue_acc~10#1; [2025-03-16 18:46:51,783 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L691: #res := ~retValue_acc~9; [2025-03-16 18:46:51,808 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2112: #res := ~retValue_acc~20; [2025-03-16 18:46:51,834 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2903: #res := ~retValue_acc~35; [2025-03-16 18:46:51,853 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2986-1: getClientAutoResponse_#res#1 := getClientAutoResponse_~retValue_acc~36#1; [2025-03-16 18:46:52,135 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1164-1: is_queue_empty_#res#1 := is_queue_empty_~retValue_acc~12#1; [2025-03-16 18:46:52,135 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3295-1: getClientKeyringPublicKey_#res#1 := getClientKeyringPublicKey_~retValue_acc~41#1; [2025-03-16 18:46:52,135 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1182-1: get_queued_email_#res#1 := get_queued_email_~retValue_acc~14#1; [2025-03-16 18:46:52,135 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2207-1: valid_product_#res#1 := valid_product_~retValue_acc~21#1; [2025-03-16 18:46:52,135 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1173-1: get_queued_client_#res#1 := get_queued_client_~retValue_acc~13#1; [2025-03-16 18:46:52,135 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3188-1: getClientKeyringUser_#res#1 := getClientKeyringUser_~retValue_acc~40#1; [2025-03-16 18:46:52,142 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L428: #res := ~retValue_acc~2; [2025-03-16 18:46:52,326 INFO L? ?]: Removed 604 outVars from TransFormulas that were not future-live. [2025-03-16 18:46:52,326 INFO L307 CfgBuilder]: Performing block encoding [2025-03-16 18:46:52,347 INFO L331 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2025-03-16 18:46:52,347 INFO L336 CfgBuilder]: Removed 0 assume(true) statements. [2025-03-16 18:46:52,348 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.icfgbuilder CFG 16.03 06:46:52 BoogieIcfgContainer [2025-03-16 18:46:52,348 INFO L131 PluginConnector]: ------------------------ END IcfgBuilder---------------------------- [2025-03-16 18:46:52,353 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2025-03-16 18:46:52,353 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2025-03-16 18:46:52,356 INFO L274 PluginConnector]: TraceAbstraction initialized [2025-03-16 18:46:52,356 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 16.03 06:46:50" (1/3) ... [2025-03-16 18:46:52,357 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@2ce77ae0 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 16.03 06:46:52, skipping insertion in model container [2025-03-16 18:46:52,357 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.03 06:46:50" (2/3) ... [2025-03-16 18:46:52,358 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@2ce77ae0 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 16.03 06:46:52, skipping insertion in model container [2025-03-16 18:46:52,358 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.icfgbuilder CFG 16.03 06:46:52" (3/3) ... [2025-03-16 18:46:52,359 INFO L128 eAbstractionObserver]: Analyzing ICFG email_spec9_productSimulator.cil.c [2025-03-16 18:46:52,370 INFO L216 ceAbstractionStarter]: Automizer settings: Hoare:LoopHeads NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2025-03-16 18:46:52,374 INFO L151 ceAbstractionStarter]: Applying trace abstraction to ICFG email_spec9_productSimulator.cil.c that has 44 procedures, 585 locations, 1 initial locations, 1 loop locations, and 1 error locations. [2025-03-16 18:46:52,431 INFO L332 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2025-03-16 18:46:52,441 INFO L333 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopHeads, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@2d50a21d, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2025-03-16 18:46:52,441 INFO L334 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2025-03-16 18:46:52,447 INFO L276 IsEmpty]: Start isEmpty. Operand has 585 states, 430 states have (on average 1.5348837209302326) internal successors, (660), 450 states have internal predecessors, (660), 110 states have call successors, (110), 43 states have call predecessors, (110), 43 states have return successors, (110), 109 states have call predecessors, (110), 110 states have call successors, (110) [2025-03-16 18:46:52,467 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 124 [2025-03-16 18:46:52,468 INFO L210 NwaCegarLoop]: Found error trace [2025-03-16 18:46:52,469 INFO L218 NwaCegarLoop]: trace histogram [8, 8, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-16 18:46:52,469 INFO L396 AbstractCegarLoop]: === Iteration 1 === Targeting outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION === [outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2025-03-16 18:46:52,472 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-16 18:46:52,473 INFO L85 PathProgramCache]: Analyzing trace with hash 1523973881, now seen corresponding path program 1 times [2025-03-16 18:46:52,478 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-16 18:46:52,478 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [279820092] [2025-03-16 18:46:52,479 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-16 18:46:52,479 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-16 18:46:52,579 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 123 statements into 1 equivalence classes. [2025-03-16 18:46:52,636 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 123 of 123 statements. [2025-03-16 18:46:52,636 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-16 18:46:52,636 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-16 18:46:53,017 INFO L134 CoverageAnalysis]: Checked inductivity of 100 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 100 trivial. 0 not checked. [2025-03-16 18:46:53,019 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-16 18:46:53,019 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [279820092] [2025-03-16 18:46:53,020 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [279820092] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-16 18:46:53,020 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-16 18:46:53,020 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2025-03-16 18:46:53,021 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [575045722] [2025-03-16 18:46:53,022 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-16 18:46:53,025 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2025-03-16 18:46:53,025 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-03-16 18:46:53,040 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2025-03-16 18:46:53,041 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2025-03-16 18:46:53,043 INFO L87 Difference]: Start difference. First operand has 585 states, 430 states have (on average 1.5348837209302326) internal successors, (660), 450 states have internal predecessors, (660), 110 states have call successors, (110), 43 states have call predecessors, (110), 43 states have return successors, (110), 109 states have call predecessors, (110), 110 states have call successors, (110) Second operand has 5 states, 5 states have (on average 11.8) internal successors, (59), 5 states have internal predecessors, (59), 2 states have call successors, (23), 2 states have call predecessors, (23), 1 states have return successors, (18), 2 states have call predecessors, (18), 2 states have call successors, (18) [2025-03-16 18:46:53,177 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-03-16 18:46:53,180 INFO L93 Difference]: Finished difference Result 1137 states and 1718 transitions. [2025-03-16 18:46:53,181 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2025-03-16 18:46:53,182 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 11.8) internal successors, (59), 5 states have internal predecessors, (59), 2 states have call successors, (23), 2 states have call predecessors, (23), 1 states have return successors, (18), 2 states have call predecessors, (18), 2 states have call successors, (18) Word has length 123 [2025-03-16 18:46:53,183 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2025-03-16 18:46:53,196 INFO L225 Difference]: With dead ends: 1137 [2025-03-16 18:46:53,196 INFO L226 Difference]: Without dead ends: 581 [2025-03-16 18:46:53,202 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2025-03-16 18:46:53,204 INFO L435 NwaCegarLoop]: 875 mSDtfsCounter, 0 mSDsluCounter, 2612 mSDsCounter, 0 mSdLazyCounter, 18 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 3487 SdHoareTripleChecker+Invalid, 24 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 18 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2025-03-16 18:46:53,206 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 3487 Invalid, 24 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 18 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2025-03-16 18:46:53,219 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 581 states. [2025-03-16 18:46:53,286 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 581 to 581. [2025-03-16 18:46:53,287 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 581 states, 427 states have (on average 1.5128805620608898) internal successors, (646), 446 states have internal predecessors, (646), 110 states have call successors, (110), 43 states have call predecessors, (110), 43 states have return successors, (109), 108 states have call predecessors, (109), 109 states have call successors, (109) [2025-03-16 18:46:53,296 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 581 states to 581 states and 865 transitions. [2025-03-16 18:46:53,299 INFO L78 Accepts]: Start accepts. Automaton has 581 states and 865 transitions. Word has length 123 [2025-03-16 18:46:53,300 INFO L84 Accepts]: Finished accepts. word is rejected. [2025-03-16 18:46:53,300 INFO L471 AbstractCegarLoop]: Abstraction has 581 states and 865 transitions. [2025-03-16 18:46:53,300 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 11.8) internal successors, (59), 5 states have internal predecessors, (59), 2 states have call successors, (23), 2 states have call predecessors, (23), 1 states have return successors, (18), 2 states have call predecessors, (18), 2 states have call successors, (18) [2025-03-16 18:46:53,301 INFO L276 IsEmpty]: Start isEmpty. Operand 581 states and 865 transitions. [2025-03-16 18:46:53,307 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 129 [2025-03-16 18:46:53,307 INFO L210 NwaCegarLoop]: Found error trace [2025-03-16 18:46:53,307 INFO L218 NwaCegarLoop]: trace histogram [8, 8, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-16 18:46:53,309 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2025-03-16 18:46:53,309 INFO L396 AbstractCegarLoop]: === Iteration 2 === Targeting outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION === [outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2025-03-16 18:46:53,309 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-16 18:46:53,309 INFO L85 PathProgramCache]: Analyzing trace with hash 1430075039, now seen corresponding path program 1 times [2025-03-16 18:46:53,309 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-16 18:46:53,309 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [432295858] [2025-03-16 18:46:53,310 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-16 18:46:53,310 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-16 18:46:53,339 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 128 statements into 1 equivalence classes. [2025-03-16 18:46:53,352 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 128 of 128 statements. [2025-03-16 18:46:53,352 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-16 18:46:53,352 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-16 18:46:53,505 INFO L134 CoverageAnalysis]: Checked inductivity of 100 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 100 trivial. 0 not checked. [2025-03-16 18:46:53,506 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-16 18:46:53,506 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [432295858] [2025-03-16 18:46:53,507 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [432295858] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-16 18:46:53,507 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-16 18:46:53,507 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2025-03-16 18:46:53,507 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [352392527] [2025-03-16 18:46:53,507 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-16 18:46:53,509 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2025-03-16 18:46:53,509 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-03-16 18:46:53,509 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2025-03-16 18:46:53,510 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2025-03-16 18:46:53,510 INFO L87 Difference]: Start difference. First operand 581 states and 865 transitions. Second operand has 3 states, 3 states have (on average 21.333333333333332) internal successors, (64), 3 states have internal predecessors, (64), 3 states have call successors, (23), 2 states have call predecessors, (23), 1 states have return successors, (18), 3 states have call predecessors, (18), 3 states have call successors, (18) [2025-03-16 18:46:53,582 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-03-16 18:46:53,583 INFO L93 Difference]: Finished difference Result 1139 states and 1715 transitions. [2025-03-16 18:46:53,583 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2025-03-16 18:46:53,583 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 21.333333333333332) internal successors, (64), 3 states have internal predecessors, (64), 3 states have call successors, (23), 2 states have call predecessors, (23), 1 states have return successors, (18), 3 states have call predecessors, (18), 3 states have call successors, (18) Word has length 128 [2025-03-16 18:46:53,583 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2025-03-16 18:46:53,588 INFO L225 Difference]: With dead ends: 1139 [2025-03-16 18:46:53,588 INFO L226 Difference]: Without dead ends: 580 [2025-03-16 18:46:53,592 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2025-03-16 18:46:53,594 INFO L435 NwaCegarLoop]: 849 mSDtfsCounter, 834 mSDsluCounter, 7 mSDsCounter, 0 mSdLazyCounter, 7 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 834 SdHoareTripleChecker+Valid, 856 SdHoareTripleChecker+Invalid, 11 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 7 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2025-03-16 18:46:53,594 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [834 Valid, 856 Invalid, 11 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 7 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2025-03-16 18:46:53,597 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 580 states. [2025-03-16 18:46:53,637 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 580 to 580. [2025-03-16 18:46:53,638 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 580 states, 428 states have (on average 1.5) internal successors, (642), 445 states have internal predecessors, (642), 107 states have call successors, (107), 44 states have call predecessors, (107), 44 states have return successors, (106), 105 states have call predecessors, (106), 106 states have call successors, (106) [2025-03-16 18:46:53,644 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 580 states to 580 states and 855 transitions. [2025-03-16 18:46:53,645 INFO L78 Accepts]: Start accepts. Automaton has 580 states and 855 transitions. Word has length 128 [2025-03-16 18:46:53,645 INFO L84 Accepts]: Finished accepts. word is rejected. [2025-03-16 18:46:53,645 INFO L471 AbstractCegarLoop]: Abstraction has 580 states and 855 transitions. [2025-03-16 18:46:53,645 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 21.333333333333332) internal successors, (64), 3 states have internal predecessors, (64), 3 states have call successors, (23), 2 states have call predecessors, (23), 1 states have return successors, (18), 3 states have call predecessors, (18), 3 states have call successors, (18) [2025-03-16 18:46:53,645 INFO L276 IsEmpty]: Start isEmpty. Operand 580 states and 855 transitions. [2025-03-16 18:46:53,649 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 152 [2025-03-16 18:46:53,649 INFO L210 NwaCegarLoop]: Found error trace [2025-03-16 18:46:53,650 INFO L218 NwaCegarLoop]: trace histogram [8, 8, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-16 18:46:53,650 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2025-03-16 18:46:53,650 INFO L396 AbstractCegarLoop]: === Iteration 3 === Targeting outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION === [outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2025-03-16 18:46:53,653 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-16 18:46:53,653 INFO L85 PathProgramCache]: Analyzing trace with hash 1272667397, now seen corresponding path program 1 times [2025-03-16 18:46:53,653 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-16 18:46:53,653 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1997477519] [2025-03-16 18:46:53,653 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-16 18:46:53,653 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-16 18:46:53,683 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 151 statements into 1 equivalence classes. [2025-03-16 18:46:53,693 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 151 of 151 statements. [2025-03-16 18:46:53,695 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-16 18:46:53,695 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-16 18:46:53,747 INFO L134 CoverageAnalysis]: Checked inductivity of 100 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 100 trivial. 0 not checked. [2025-03-16 18:46:53,747 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-16 18:46:53,747 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1997477519] [2025-03-16 18:46:53,747 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1997477519] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-16 18:46:53,747 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-16 18:46:53,747 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2025-03-16 18:46:53,747 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2067969237] [2025-03-16 18:46:53,747 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-16 18:46:53,748 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2025-03-16 18:46:53,748 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-03-16 18:46:53,748 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2025-03-16 18:46:53,748 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2025-03-16 18:46:53,748 INFO L87 Difference]: Start difference. First operand 580 states and 855 transitions. Second operand has 3 states, 3 states have (on average 27.0) internal successors, (81), 3 states have internal predecessors, (81), 2 states have call successors, (26), 2 states have call predecessors, (26), 1 states have return successors, (21), 2 states have call predecessors, (21), 2 states have call successors, (21) [2025-03-16 18:46:53,804 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-03-16 18:46:53,805 INFO L93 Difference]: Finished difference Result 1132 states and 1683 transitions. [2025-03-16 18:46:53,806 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2025-03-16 18:46:53,806 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 27.0) internal successors, (81), 3 states have internal predecessors, (81), 2 states have call successors, (26), 2 states have call predecessors, (26), 1 states have return successors, (21), 2 states have call predecessors, (21), 2 states have call successors, (21) Word has length 151 [2025-03-16 18:46:53,806 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2025-03-16 18:46:53,810 INFO L225 Difference]: With dead ends: 1132 [2025-03-16 18:46:53,811 INFO L226 Difference]: Without dead ends: 579 [2025-03-16 18:46:53,814 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2025-03-16 18:46:53,815 INFO L435 NwaCegarLoop]: 847 mSDtfsCounter, 820 mSDsluCounter, 26 mSDsCounter, 0 mSdLazyCounter, 4 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 820 SdHoareTripleChecker+Valid, 873 SdHoareTripleChecker+Invalid, 5 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 4 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2025-03-16 18:46:53,815 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [820 Valid, 873 Invalid, 5 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 4 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2025-03-16 18:46:53,817 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 579 states. [2025-03-16 18:46:53,846 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 579 to 579. [2025-03-16 18:46:53,848 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 579 states, 428 states have (on average 1.4953271028037383) internal successors, (640), 444 states have internal predecessors, (640), 106 states have call successors, (106), 44 states have call predecessors, (106), 44 states have return successors, (105), 104 states have call predecessors, (105), 105 states have call successors, (105) [2025-03-16 18:46:53,852 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 579 states to 579 states and 851 transitions. [2025-03-16 18:46:53,853 INFO L78 Accepts]: Start accepts. Automaton has 579 states and 851 transitions. Word has length 151 [2025-03-16 18:46:53,854 INFO L84 Accepts]: Finished accepts. word is rejected. [2025-03-16 18:46:53,854 INFO L471 AbstractCegarLoop]: Abstraction has 579 states and 851 transitions. [2025-03-16 18:46:53,854 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 27.0) internal successors, (81), 3 states have internal predecessors, (81), 2 states have call successors, (26), 2 states have call predecessors, (26), 1 states have return successors, (21), 2 states have call predecessors, (21), 2 states have call successors, (21) [2025-03-16 18:46:53,854 INFO L276 IsEmpty]: Start isEmpty. Operand 579 states and 851 transitions. [2025-03-16 18:46:53,857 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 153 [2025-03-16 18:46:53,857 INFO L210 NwaCegarLoop]: Found error trace [2025-03-16 18:46:53,858 INFO L218 NwaCegarLoop]: trace histogram [8, 8, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-16 18:46:53,858 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2025-03-16 18:46:53,858 INFO L396 AbstractCegarLoop]: === Iteration 4 === Targeting outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION === [outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2025-03-16 18:46:53,859 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-16 18:46:53,859 INFO L85 PathProgramCache]: Analyzing trace with hash 73550196, now seen corresponding path program 1 times [2025-03-16 18:46:53,859 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-16 18:46:53,859 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [923690453] [2025-03-16 18:46:53,859 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-16 18:46:53,859 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-16 18:46:53,886 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 152 statements into 1 equivalence classes. [2025-03-16 18:46:53,901 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 152 of 152 statements. [2025-03-16 18:46:53,901 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-16 18:46:53,901 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-16 18:46:53,983 INFO L134 CoverageAnalysis]: Checked inductivity of 100 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 100 trivial. 0 not checked. [2025-03-16 18:46:53,984 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-16 18:46:53,984 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [923690453] [2025-03-16 18:46:53,984 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [923690453] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-16 18:46:53,984 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-16 18:46:53,984 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2025-03-16 18:46:53,984 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1305123822] [2025-03-16 18:46:53,984 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-16 18:46:53,985 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2025-03-16 18:46:53,985 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-03-16 18:46:53,986 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2025-03-16 18:46:53,986 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2025-03-16 18:46:53,986 INFO L87 Difference]: Start difference. First operand 579 states and 851 transitions. Second operand has 3 states, 3 states have (on average 27.333333333333332) internal successors, (82), 3 states have internal predecessors, (82), 2 states have call successors, (26), 2 states have call predecessors, (26), 1 states have return successors, (21), 2 states have call predecessors, (21), 2 states have call successors, (21) [2025-03-16 18:46:54,055 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-03-16 18:46:54,055 INFO L93 Difference]: Finished difference Result 1112 states and 1641 transitions. [2025-03-16 18:46:54,056 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2025-03-16 18:46:54,056 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 27.333333333333332) internal successors, (82), 3 states have internal predecessors, (82), 2 states have call successors, (26), 2 states have call predecessors, (26), 1 states have return successors, (21), 2 states have call predecessors, (21), 2 states have call successors, (21) Word has length 152 [2025-03-16 18:46:54,057 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2025-03-16 18:46:54,060 INFO L225 Difference]: With dead ends: 1112 [2025-03-16 18:46:54,061 INFO L226 Difference]: Without dead ends: 576 [2025-03-16 18:46:54,063 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2025-03-16 18:46:54,064 INFO L435 NwaCegarLoop]: 820 mSDtfsCounter, 792 mSDsluCounter, 30 mSDsCounter, 0 mSdLazyCounter, 14 mSolverCounterSat, 10 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 792 SdHoareTripleChecker+Valid, 850 SdHoareTripleChecker+Invalid, 24 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 10 IncrementalHoareTripleChecker+Valid, 14 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2025-03-16 18:46:54,064 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [792 Valid, 850 Invalid, 24 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [10 Valid, 14 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2025-03-16 18:46:54,067 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 576 states. [2025-03-16 18:46:54,103 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 576 to 576. [2025-03-16 18:46:54,104 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 576 states, 428 states have (on average 1.469626168224299) internal successors, (629), 439 states have internal predecessors, (629), 103 states have call successors, (103), 44 states have call predecessors, (103), 44 states have return successors, (102), 101 states have call predecessors, (102), 102 states have call successors, (102) [2025-03-16 18:46:54,111 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 576 states to 576 states and 834 transitions. [2025-03-16 18:46:54,112 INFO L78 Accepts]: Start accepts. Automaton has 576 states and 834 transitions. Word has length 152 [2025-03-16 18:46:54,112 INFO L84 Accepts]: Finished accepts. word is rejected. [2025-03-16 18:46:54,112 INFO L471 AbstractCegarLoop]: Abstraction has 576 states and 834 transitions. [2025-03-16 18:46:54,113 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 27.333333333333332) internal successors, (82), 3 states have internal predecessors, (82), 2 states have call successors, (26), 2 states have call predecessors, (26), 1 states have return successors, (21), 2 states have call predecessors, (21), 2 states have call successors, (21) [2025-03-16 18:46:54,113 INFO L276 IsEmpty]: Start isEmpty. Operand 576 states and 834 transitions. [2025-03-16 18:46:54,131 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 164 [2025-03-16 18:46:54,131 INFO L210 NwaCegarLoop]: Found error trace [2025-03-16 18:46:54,131 INFO L218 NwaCegarLoop]: trace histogram [8, 8, 3, 3, 3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-16 18:46:54,132 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2025-03-16 18:46:54,132 INFO L396 AbstractCegarLoop]: === Iteration 5 === Targeting outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION === [outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2025-03-16 18:46:54,132 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-16 18:46:54,132 INFO L85 PathProgramCache]: Analyzing trace with hash -1913319335, now seen corresponding path program 1 times [2025-03-16 18:46:54,132 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-16 18:46:54,132 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1510824059] [2025-03-16 18:46:54,133 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-16 18:46:54,133 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-16 18:46:54,159 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 163 statements into 1 equivalence classes. [2025-03-16 18:46:54,173 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 163 of 163 statements. [2025-03-16 18:46:54,173 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-16 18:46:54,173 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-16 18:46:54,400 INFO L134 CoverageAnalysis]: Checked inductivity of 112 backedges. 3 proven. 3 refuted. 0 times theorem prover too weak. 106 trivial. 0 not checked. [2025-03-16 18:46:54,400 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-16 18:46:54,401 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1510824059] [2025-03-16 18:46:54,401 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1510824059] provided 0 perfect and 1 imperfect interpolant sequences [2025-03-16 18:46:54,401 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [952839083] [2025-03-16 18:46:54,401 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-16 18:46:54,401 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2025-03-16 18:46:54,401 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-16 18:46:54,403 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2025-03-16 18:46:54,405 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2025-03-16 18:46:54,576 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 163 statements into 1 equivalence classes. [2025-03-16 18:46:54,713 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 163 of 163 statements. [2025-03-16 18:46:54,714 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-16 18:46:54,714 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-16 18:46:54,720 INFO L256 TraceCheckSpWp]: Trace formula consists of 1375 conjuncts, 2 conjuncts are in the unsatisfiable core [2025-03-16 18:46:54,728 INFO L279 TraceCheckSpWp]: Computing forward predicates... [2025-03-16 18:46:54,755 INFO L134 CoverageAnalysis]: Checked inductivity of 112 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 112 trivial. 0 not checked. [2025-03-16 18:46:54,756 INFO L308 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2025-03-16 18:46:54,756 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [952839083] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-16 18:46:54,756 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2025-03-16 18:46:54,756 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [8] total 9 [2025-03-16 18:46:54,756 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [62509894] [2025-03-16 18:46:54,756 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-16 18:46:54,757 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2025-03-16 18:46:54,757 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-03-16 18:46:54,757 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2025-03-16 18:46:54,758 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=57, Unknown=0, NotChecked=0, Total=72 [2025-03-16 18:46:54,758 INFO L87 Difference]: Start difference. First operand 576 states and 834 transitions. Second operand has 3 states, 3 states have (on average 27.666666666666668) internal successors, (83), 3 states have internal predecessors, (83), 2 states have call successors, (28), 2 states have call predecessors, (28), 2 states have return successors, (23), 2 states have call predecessors, (23), 2 states have call successors, (23) [2025-03-16 18:46:54,791 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-03-16 18:46:54,792 INFO L93 Difference]: Finished difference Result 894 states and 1276 transitions. [2025-03-16 18:46:54,792 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2025-03-16 18:46:54,792 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 27.666666666666668) internal successors, (83), 3 states have internal predecessors, (83), 2 states have call successors, (28), 2 states have call predecessors, (28), 2 states have return successors, (23), 2 states have call predecessors, (23), 2 states have call successors, (23) Word has length 163 [2025-03-16 18:46:54,793 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2025-03-16 18:46:54,796 INFO L225 Difference]: With dead ends: 894 [2025-03-16 18:46:54,796 INFO L226 Difference]: Without dead ends: 577 [2025-03-16 18:46:54,798 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 170 GetRequests, 163 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=57, Unknown=0, NotChecked=0, Total=72 [2025-03-16 18:46:54,798 INFO L435 NwaCegarLoop]: 831 mSDtfsCounter, 0 mSDsluCounter, 829 mSDsCounter, 0 mSdLazyCounter, 3 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 1660 SdHoareTripleChecker+Invalid, 3 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 3 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2025-03-16 18:46:54,798 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 1660 Invalid, 3 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 3 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2025-03-16 18:46:54,799 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 577 states. [2025-03-16 18:46:54,822 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 577 to 577. [2025-03-16 18:46:54,823 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 577 states, 429 states have (on average 1.4685314685314685) internal successors, (630), 440 states have internal predecessors, (630), 103 states have call successors, (103), 44 states have call predecessors, (103), 44 states have return successors, (102), 101 states have call predecessors, (102), 102 states have call successors, (102) [2025-03-16 18:46:54,826 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 577 states to 577 states and 835 transitions. [2025-03-16 18:46:54,827 INFO L78 Accepts]: Start accepts. Automaton has 577 states and 835 transitions. Word has length 163 [2025-03-16 18:46:54,828 INFO L84 Accepts]: Finished accepts. word is rejected. [2025-03-16 18:46:54,828 INFO L471 AbstractCegarLoop]: Abstraction has 577 states and 835 transitions. [2025-03-16 18:46:54,828 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 27.666666666666668) internal successors, (83), 3 states have internal predecessors, (83), 2 states have call successors, (28), 2 states have call predecessors, (28), 2 states have return successors, (23), 2 states have call predecessors, (23), 2 states have call successors, (23) [2025-03-16 18:46:54,828 INFO L276 IsEmpty]: Start isEmpty. Operand 577 states and 835 transitions. [2025-03-16 18:46:54,830 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 170 [2025-03-16 18:46:54,830 INFO L210 NwaCegarLoop]: Found error trace [2025-03-16 18:46:54,830 INFO L218 NwaCegarLoop]: trace histogram [8, 8, 3, 3, 3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-16 18:46:54,840 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2025-03-16 18:46:55,031 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4,2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2025-03-16 18:46:55,031 INFO L396 AbstractCegarLoop]: === Iteration 6 === Targeting outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION === [outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2025-03-16 18:46:55,032 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-16 18:46:55,032 INFO L85 PathProgramCache]: Analyzing trace with hash 670312105, now seen corresponding path program 1 times [2025-03-16 18:46:55,032 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-16 18:46:55,032 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1269399126] [2025-03-16 18:46:55,032 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-16 18:46:55,032 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-16 18:46:55,056 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 169 statements into 1 equivalence classes. [2025-03-16 18:46:55,067 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 169 of 169 statements. [2025-03-16 18:46:55,067 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-16 18:46:55,067 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-16 18:46:55,338 INFO L134 CoverageAnalysis]: Checked inductivity of 113 backedges. 3 proven. 3 refuted. 0 times theorem prover too weak. 107 trivial. 0 not checked. [2025-03-16 18:46:55,338 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-16 18:46:55,338 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1269399126] [2025-03-16 18:46:55,338 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1269399126] provided 0 perfect and 1 imperfect interpolant sequences [2025-03-16 18:46:55,338 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [449077742] [2025-03-16 18:46:55,338 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-16 18:46:55,338 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2025-03-16 18:46:55,338 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-16 18:46:55,340 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2025-03-16 18:46:55,342 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2025-03-16 18:46:55,502 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 169 statements into 1 equivalence classes. [2025-03-16 18:46:55,642 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 169 of 169 statements. [2025-03-16 18:46:55,642 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-16 18:46:55,642 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-16 18:46:55,647 INFO L256 TraceCheckSpWp]: Trace formula consists of 1388 conjuncts, 3 conjuncts are in the unsatisfiable core [2025-03-16 18:46:55,653 INFO L279 TraceCheckSpWp]: Computing forward predicates... [2025-03-16 18:46:55,678 INFO L134 CoverageAnalysis]: Checked inductivity of 113 backedges. 1 proven. 0 refuted. 0 times theorem prover too weak. 112 trivial. 0 not checked. [2025-03-16 18:46:55,679 INFO L308 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2025-03-16 18:46:55,679 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [449077742] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-16 18:46:55,679 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2025-03-16 18:46:55,679 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [8] total 9 [2025-03-16 18:46:55,679 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1371932822] [2025-03-16 18:46:55,679 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-16 18:46:55,679 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2025-03-16 18:46:55,680 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-03-16 18:46:55,680 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2025-03-16 18:46:55,680 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=57, Unknown=0, NotChecked=0, Total=72 [2025-03-16 18:46:55,680 INFO L87 Difference]: Start difference. First operand 577 states and 835 transitions. Second operand has 3 states, 3 states have (on average 29.666666666666668) internal successors, (89), 3 states have internal predecessors, (89), 2 states have call successors, (28), 2 states have call predecessors, (28), 2 states have return successors, (23), 2 states have call predecessors, (23), 2 states have call successors, (23) [2025-03-16 18:46:55,720 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-03-16 18:46:55,720 INFO L93 Difference]: Finished difference Result 1175 states and 1732 transitions. [2025-03-16 18:46:55,721 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2025-03-16 18:46:55,721 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 29.666666666666668) internal successors, (89), 3 states have internal predecessors, (89), 2 states have call successors, (28), 2 states have call predecessors, (28), 2 states have return successors, (23), 2 states have call predecessors, (23), 2 states have call successors, (23) Word has length 169 [2025-03-16 18:46:55,722 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2025-03-16 18:46:55,725 INFO L225 Difference]: With dead ends: 1175 [2025-03-16 18:46:55,725 INFO L226 Difference]: Without dead ends: 671 [2025-03-16 18:46:55,727 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 176 GetRequests, 169 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=57, Unknown=0, NotChecked=0, Total=72 [2025-03-16 18:46:55,727 INFO L435 NwaCegarLoop]: 845 mSDtfsCounter, 162 mSDsluCounter, 782 mSDsCounter, 0 mSdLazyCounter, 3 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 180 SdHoareTripleChecker+Valid, 1627 SdHoareTripleChecker+Invalid, 4 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 3 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2025-03-16 18:46:55,727 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [180 Valid, 1627 Invalid, 4 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 3 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2025-03-16 18:46:55,728 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 671 states. [2025-03-16 18:46:55,757 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 671 to 663. [2025-03-16 18:46:55,758 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 663 states, 501 states have (on average 1.4850299401197604) internal successors, (744), 512 states have internal predecessors, (744), 117 states have call successors, (117), 44 states have call predecessors, (117), 44 states have return successors, (116), 115 states have call predecessors, (116), 116 states have call successors, (116) [2025-03-16 18:46:55,761 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 663 states to 663 states and 977 transitions. [2025-03-16 18:46:55,762 INFO L78 Accepts]: Start accepts. Automaton has 663 states and 977 transitions. Word has length 169 [2025-03-16 18:46:55,763 INFO L84 Accepts]: Finished accepts. word is rejected. [2025-03-16 18:46:55,763 INFO L471 AbstractCegarLoop]: Abstraction has 663 states and 977 transitions. [2025-03-16 18:46:55,763 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 29.666666666666668) internal successors, (89), 3 states have internal predecessors, (89), 2 states have call successors, (28), 2 states have call predecessors, (28), 2 states have return successors, (23), 2 states have call predecessors, (23), 2 states have call successors, (23) [2025-03-16 18:46:55,763 INFO L276 IsEmpty]: Start isEmpty. Operand 663 states and 977 transitions. [2025-03-16 18:46:55,766 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 171 [2025-03-16 18:46:55,766 INFO L210 NwaCegarLoop]: Found error trace [2025-03-16 18:46:55,766 INFO L218 NwaCegarLoop]: trace histogram [8, 8, 3, 3, 3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-16 18:46:55,774 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2025-03-16 18:46:55,966 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable5 [2025-03-16 18:46:55,967 INFO L396 AbstractCegarLoop]: === Iteration 7 === Targeting outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION === [outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2025-03-16 18:46:55,967 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-16 18:46:55,968 INFO L85 PathProgramCache]: Analyzing trace with hash -1453259908, now seen corresponding path program 1 times [2025-03-16 18:46:55,968 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-16 18:46:55,968 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1151790704] [2025-03-16 18:46:55,968 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-16 18:46:55,968 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-16 18:46:55,989 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 170 statements into 1 equivalence classes. [2025-03-16 18:46:56,002 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 170 of 170 statements. [2025-03-16 18:46:56,003 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-16 18:46:56,003 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-16 18:46:56,222 INFO L134 CoverageAnalysis]: Checked inductivity of 113 backedges. 3 proven. 3 refuted. 0 times theorem prover too weak. 107 trivial. 0 not checked. [2025-03-16 18:46:56,222 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-16 18:46:56,223 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1151790704] [2025-03-16 18:46:56,223 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1151790704] provided 0 perfect and 1 imperfect interpolant sequences [2025-03-16 18:46:56,223 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1385475089] [2025-03-16 18:46:56,223 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-16 18:46:56,223 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2025-03-16 18:46:56,223 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-16 18:46:56,225 INFO L229 MonitoredProcess]: Starting monitored process 4 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2025-03-16 18:46:56,227 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2025-03-16 18:46:56,382 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 170 statements into 1 equivalence classes. [2025-03-16 18:46:56,506 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 170 of 170 statements. [2025-03-16 18:46:56,506 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-16 18:46:56,506 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-16 18:46:56,511 INFO L256 TraceCheckSpWp]: Trace formula consists of 1393 conjuncts, 10 conjuncts are in the unsatisfiable core [2025-03-16 18:46:56,515 INFO L279 TraceCheckSpWp]: Computing forward predicates... [2025-03-16 18:46:56,613 INFO L134 CoverageAnalysis]: Checked inductivity of 113 backedges. 19 proven. 0 refuted. 0 times theorem prover too weak. 94 trivial. 0 not checked. [2025-03-16 18:46:56,613 INFO L308 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2025-03-16 18:46:56,613 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1385475089] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-16 18:46:56,613 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2025-03-16 18:46:56,614 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [8] total 14 [2025-03-16 18:46:56,614 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2053554533] [2025-03-16 18:46:56,614 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-16 18:46:56,615 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2025-03-16 18:46:56,615 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-03-16 18:46:56,615 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2025-03-16 18:46:56,615 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=31, Invalid=151, Unknown=0, NotChecked=0, Total=182 [2025-03-16 18:46:56,616 INFO L87 Difference]: Start difference. First operand 663 states and 977 transitions. Second operand has 8 states, 6 states have (on average 16.5) internal successors, (99), 8 states have internal predecessors, (99), 4 states have call successors, (28), 2 states have call predecessors, (28), 4 states have return successors, (23), 3 states have call predecessors, (23), 4 states have call successors, (23) [2025-03-16 18:46:56,721 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-03-16 18:46:56,721 INFO L93 Difference]: Finished difference Result 1276 states and 1894 transitions. [2025-03-16 18:46:56,722 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2025-03-16 18:46:56,722 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 6 states have (on average 16.5) internal successors, (99), 8 states have internal predecessors, (99), 4 states have call successors, (28), 2 states have call predecessors, (28), 4 states have return successors, (23), 3 states have call predecessors, (23), 4 states have call successors, (23) Word has length 170 [2025-03-16 18:46:56,722 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2025-03-16 18:46:56,726 INFO L225 Difference]: With dead ends: 1276 [2025-03-16 18:46:56,726 INFO L226 Difference]: Without dead ends: 665 [2025-03-16 18:46:56,728 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 178 GetRequests, 165 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 15 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=35, Invalid=175, Unknown=0, NotChecked=0, Total=210 [2025-03-16 18:46:56,729 INFO L435 NwaCegarLoop]: 821 mSDtfsCounter, 4 mSDsluCounter, 4909 mSDsCounter, 0 mSdLazyCounter, 83 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 8 SdHoareTripleChecker+Valid, 5730 SdHoareTripleChecker+Invalid, 83 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 83 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2025-03-16 18:46:56,729 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [8 Valid, 5730 Invalid, 83 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 83 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2025-03-16 18:46:56,730 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 665 states. [2025-03-16 18:46:56,753 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 665 to 665. [2025-03-16 18:46:56,754 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 665 states, 502 states have (on average 1.4840637450199203) internal successors, (745), 514 states have internal predecessors, (745), 117 states have call successors, (117), 44 states have call predecessors, (117), 45 states have return successors, (118), 115 states have call predecessors, (118), 116 states have call successors, (118) [2025-03-16 18:46:56,758 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 665 states to 665 states and 980 transitions. [2025-03-16 18:46:56,759 INFO L78 Accepts]: Start accepts. Automaton has 665 states and 980 transitions. Word has length 170 [2025-03-16 18:46:56,759 INFO L84 Accepts]: Finished accepts. word is rejected. [2025-03-16 18:46:56,759 INFO L471 AbstractCegarLoop]: Abstraction has 665 states and 980 transitions. [2025-03-16 18:46:56,759 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 6 states have (on average 16.5) internal successors, (99), 8 states have internal predecessors, (99), 4 states have call successors, (28), 2 states have call predecessors, (28), 4 states have return successors, (23), 3 states have call predecessors, (23), 4 states have call successors, (23) [2025-03-16 18:46:56,759 INFO L276 IsEmpty]: Start isEmpty. Operand 665 states and 980 transitions. [2025-03-16 18:46:56,762 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 179 [2025-03-16 18:46:56,762 INFO L210 NwaCegarLoop]: Found error trace [2025-03-16 18:46:56,762 INFO L218 NwaCegarLoop]: trace histogram [8, 8, 3, 3, 3, 3, 3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-16 18:46:56,771 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Ended with exit code 0 [2025-03-16 18:46:56,966 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6,4 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2025-03-16 18:46:56,966 INFO L396 AbstractCegarLoop]: === Iteration 8 === Targeting outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION === [outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2025-03-16 18:46:56,966 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-16 18:46:56,967 INFO L85 PathProgramCache]: Analyzing trace with hash 2123795391, now seen corresponding path program 1 times [2025-03-16 18:46:56,967 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-16 18:46:56,967 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1966873523] [2025-03-16 18:46:56,967 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-16 18:46:56,967 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-16 18:46:56,986 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 178 statements into 1 equivalence classes. [2025-03-16 18:46:56,993 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 178 of 178 statements. [2025-03-16 18:46:56,993 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-16 18:46:56,993 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-16 18:46:57,188 INFO L134 CoverageAnalysis]: Checked inductivity of 113 backedges. 6 proven. 6 refuted. 0 times theorem prover too weak. 101 trivial. 0 not checked. [2025-03-16 18:46:57,188 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-16 18:46:57,188 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1966873523] [2025-03-16 18:46:57,188 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1966873523] provided 0 perfect and 1 imperfect interpolant sequences [2025-03-16 18:46:57,188 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [359811190] [2025-03-16 18:46:57,188 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-16 18:46:57,188 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2025-03-16 18:46:57,189 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-16 18:46:57,191 INFO L229 MonitoredProcess]: Starting monitored process 5 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2025-03-16 18:46:57,195 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2025-03-16 18:46:57,364 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 178 statements into 1 equivalence classes. [2025-03-16 18:46:57,492 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 178 of 178 statements. [2025-03-16 18:46:57,492 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-16 18:46:57,492 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-16 18:46:57,497 INFO L256 TraceCheckSpWp]: Trace formula consists of 1424 conjuncts, 8 conjuncts are in the unsatisfiable core [2025-03-16 18:46:57,501 INFO L279 TraceCheckSpWp]: Computing forward predicates... [2025-03-16 18:46:57,564 INFO L134 CoverageAnalysis]: Checked inductivity of 113 backedges. 19 proven. 0 refuted. 0 times theorem prover too weak. 94 trivial. 0 not checked. [2025-03-16 18:46:57,565 INFO L308 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2025-03-16 18:46:57,565 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [359811190] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-16 18:46:57,565 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2025-03-16 18:46:57,565 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [9] total 13 [2025-03-16 18:46:57,565 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1925616344] [2025-03-16 18:46:57,565 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-16 18:46:57,565 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2025-03-16 18:46:57,565 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-03-16 18:46:57,566 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2025-03-16 18:46:57,566 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=26, Invalid=130, Unknown=0, NotChecked=0, Total=156 [2025-03-16 18:46:57,566 INFO L87 Difference]: Start difference. First operand 665 states and 980 transitions. Second operand has 6 states, 5 states have (on average 21.2) internal successors, (106), 6 states have internal predecessors, (106), 3 states have call successors, (29), 2 states have call predecessors, (29), 3 states have return successors, (24), 3 states have call predecessors, (24), 3 states have call successors, (24) [2025-03-16 18:46:57,645 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-03-16 18:46:57,646 INFO L93 Difference]: Finished difference Result 1277 states and 1898 transitions. [2025-03-16 18:46:57,646 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2025-03-16 18:46:57,646 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 21.2) internal successors, (106), 6 states have internal predecessors, (106), 3 states have call successors, (29), 2 states have call predecessors, (29), 3 states have return successors, (24), 3 states have call predecessors, (24), 3 states have call successors, (24) Word has length 178 [2025-03-16 18:46:57,647 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2025-03-16 18:46:57,650 INFO L225 Difference]: With dead ends: 1277 [2025-03-16 18:46:57,650 INFO L226 Difference]: Without dead ends: 667 [2025-03-16 18:46:57,652 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 186 GetRequests, 175 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=26, Invalid=130, Unknown=0, NotChecked=0, Total=156 [2025-03-16 18:46:57,652 INFO L435 NwaCegarLoop]: 821 mSDtfsCounter, 2 mSDsluCounter, 3267 mSDsCounter, 0 mSdLazyCounter, 64 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 3 SdHoareTripleChecker+Valid, 4088 SdHoareTripleChecker+Invalid, 64 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 64 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2025-03-16 18:46:57,652 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [3 Valid, 4088 Invalid, 64 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 64 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2025-03-16 18:46:57,653 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 667 states. [2025-03-16 18:46:57,673 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 667 to 667. [2025-03-16 18:46:57,674 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 667 states, 503 states have (on average 1.4831013916500995) internal successors, (746), 516 states have internal predecessors, (746), 117 states have call successors, (117), 44 states have call predecessors, (117), 46 states have return successors, (123), 115 states have call predecessors, (123), 116 states have call successors, (123) [2025-03-16 18:46:57,677 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 667 states to 667 states and 986 transitions. [2025-03-16 18:46:57,678 INFO L78 Accepts]: Start accepts. Automaton has 667 states and 986 transitions. Word has length 178 [2025-03-16 18:46:57,679 INFO L84 Accepts]: Finished accepts. word is rejected. [2025-03-16 18:46:57,679 INFO L471 AbstractCegarLoop]: Abstraction has 667 states and 986 transitions. [2025-03-16 18:46:57,679 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 21.2) internal successors, (106), 6 states have internal predecessors, (106), 3 states have call successors, (29), 2 states have call predecessors, (29), 3 states have return successors, (24), 3 states have call predecessors, (24), 3 states have call successors, (24) [2025-03-16 18:46:57,679 INFO L276 IsEmpty]: Start isEmpty. Operand 667 states and 986 transitions. [2025-03-16 18:46:57,681 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 180 [2025-03-16 18:46:57,681 INFO L210 NwaCegarLoop]: Found error trace [2025-03-16 18:46:57,681 INFO L218 NwaCegarLoop]: trace histogram [8, 8, 3, 3, 3, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-16 18:46:57,692 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Forceful destruction successful, exit code 0 [2025-03-16 18:46:57,881 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7,5 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2025-03-16 18:46:57,882 INFO L396 AbstractCegarLoop]: === Iteration 9 === Targeting outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION === [outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2025-03-16 18:46:57,882 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-16 18:46:57,882 INFO L85 PathProgramCache]: Analyzing trace with hash 52366856, now seen corresponding path program 1 times [2025-03-16 18:46:57,882 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-16 18:46:57,882 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1076314584] [2025-03-16 18:46:57,882 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-16 18:46:57,882 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-16 18:46:57,901 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 179 statements into 1 equivalence classes. [2025-03-16 18:46:57,911 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 179 of 179 statements. [2025-03-16 18:46:57,912 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-16 18:46:57,912 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-16 18:46:58,094 INFO L134 CoverageAnalysis]: Checked inductivity of 113 backedges. 6 proven. 0 refuted. 0 times theorem prover too weak. 107 trivial. 0 not checked. [2025-03-16 18:46:58,095 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-16 18:46:58,095 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1076314584] [2025-03-16 18:46:58,095 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1076314584] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-16 18:46:58,095 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-16 18:46:58,095 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2025-03-16 18:46:58,095 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1296980475] [2025-03-16 18:46:58,095 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-16 18:46:58,095 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2025-03-16 18:46:58,095 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-03-16 18:46:58,096 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2025-03-16 18:46:58,096 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=43, Unknown=0, NotChecked=0, Total=56 [2025-03-16 18:46:58,096 INFO L87 Difference]: Start difference. First operand 667 states and 986 transitions. Second operand has 8 states, 6 states have (on average 17.0) internal successors, (102), 8 states have internal predecessors, (102), 4 states have call successors, (29), 2 states have call predecessors, (29), 3 states have return successors, (24), 3 states have call predecessors, (24), 4 states have call successors, (24) [2025-03-16 18:46:58,185 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-03-16 18:46:58,185 INFO L93 Difference]: Finished difference Result 1265 states and 1885 transitions. [2025-03-16 18:46:58,185 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2025-03-16 18:46:58,186 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 6 states have (on average 17.0) internal successors, (102), 8 states have internal predecessors, (102), 4 states have call successors, (29), 2 states have call predecessors, (29), 3 states have return successors, (24), 3 states have call predecessors, (24), 4 states have call successors, (24) Word has length 179 [2025-03-16 18:46:58,186 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2025-03-16 18:46:58,190 INFO L225 Difference]: With dead ends: 1265 [2025-03-16 18:46:58,190 INFO L226 Difference]: Without dead ends: 667 [2025-03-16 18:46:58,191 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=55, Unknown=0, NotChecked=0, Total=72 [2025-03-16 18:46:58,192 INFO L435 NwaCegarLoop]: 822 mSDtfsCounter, 4 mSDsluCounter, 4915 mSDsCounter, 0 mSdLazyCounter, 76 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 8 SdHoareTripleChecker+Valid, 5737 SdHoareTripleChecker+Invalid, 76 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 76 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2025-03-16 18:46:58,192 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [8 Valid, 5737 Invalid, 76 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 76 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2025-03-16 18:46:58,193 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 667 states. [2025-03-16 18:46:58,215 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 667 to 667. [2025-03-16 18:46:58,217 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 667 states, 503 states have (on average 1.4831013916500995) internal successors, (746), 516 states have internal predecessors, (746), 117 states have call successors, (117), 44 states have call predecessors, (117), 46 states have return successors, (122), 115 states have call predecessors, (122), 116 states have call successors, (122) [2025-03-16 18:46:58,220 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 667 states to 667 states and 985 transitions. [2025-03-16 18:46:58,221 INFO L78 Accepts]: Start accepts. Automaton has 667 states and 985 transitions. Word has length 179 [2025-03-16 18:46:58,221 INFO L84 Accepts]: Finished accepts. word is rejected. [2025-03-16 18:46:58,221 INFO L471 AbstractCegarLoop]: Abstraction has 667 states and 985 transitions. [2025-03-16 18:46:58,222 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 6 states have (on average 17.0) internal successors, (102), 8 states have internal predecessors, (102), 4 states have call successors, (29), 2 states have call predecessors, (29), 3 states have return successors, (24), 3 states have call predecessors, (24), 4 states have call successors, (24) [2025-03-16 18:46:58,222 INFO L276 IsEmpty]: Start isEmpty. Operand 667 states and 985 transitions. [2025-03-16 18:46:58,224 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 174 [2025-03-16 18:46:58,224 INFO L210 NwaCegarLoop]: Found error trace [2025-03-16 18:46:58,224 INFO L218 NwaCegarLoop]: trace histogram [8, 8, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-16 18:46:58,224 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2025-03-16 18:46:58,224 INFO L396 AbstractCegarLoop]: === Iteration 10 === Targeting outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION === [outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2025-03-16 18:46:58,224 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-16 18:46:58,224 INFO L85 PathProgramCache]: Analyzing trace with hash 822313385, now seen corresponding path program 1 times [2025-03-16 18:46:58,224 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-16 18:46:58,225 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [972551562] [2025-03-16 18:46:58,225 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-16 18:46:58,225 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-16 18:46:58,242 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 173 statements into 1 equivalence classes. [2025-03-16 18:46:58,251 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 173 of 173 statements. [2025-03-16 18:46:58,251 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-16 18:46:58,251 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-16 18:46:58,406 INFO L134 CoverageAnalysis]: Checked inductivity of 114 backedges. 7 proven. 0 refuted. 0 times theorem prover too weak. 107 trivial. 0 not checked. [2025-03-16 18:46:58,406 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-16 18:46:58,406 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [972551562] [2025-03-16 18:46:58,406 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [972551562] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-16 18:46:58,406 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-16 18:46:58,406 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2025-03-16 18:46:58,406 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [595102244] [2025-03-16 18:46:58,407 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-16 18:46:58,407 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2025-03-16 18:46:58,407 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-03-16 18:46:58,407 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2025-03-16 18:46:58,407 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=43, Unknown=0, NotChecked=0, Total=56 [2025-03-16 18:46:58,407 INFO L87 Difference]: Start difference. First operand 667 states and 985 transitions. Second operand has 8 states, 6 states have (on average 16.333333333333332) internal successors, (98), 8 states have internal predecessors, (98), 4 states have call successors, (28), 2 states have call predecessors, (28), 3 states have return successors, (23), 3 states have call predecessors, (23), 4 states have call successors, (23) [2025-03-16 18:46:58,501 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-03-16 18:46:58,502 INFO L93 Difference]: Finished difference Result 1267 states and 1888 transitions. [2025-03-16 18:46:58,502 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2025-03-16 18:46:58,502 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 6 states have (on average 16.333333333333332) internal successors, (98), 8 states have internal predecessors, (98), 4 states have call successors, (28), 2 states have call predecessors, (28), 3 states have return successors, (23), 3 states have call predecessors, (23), 4 states have call successors, (23) Word has length 173 [2025-03-16 18:46:58,503 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2025-03-16 18:46:58,507 INFO L225 Difference]: With dead ends: 1267 [2025-03-16 18:46:58,507 INFO L226 Difference]: Without dead ends: 669 [2025-03-16 18:46:58,509 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=55, Unknown=0, NotChecked=0, Total=72 [2025-03-16 18:46:58,509 INFO L435 NwaCegarLoop]: 823 mSDtfsCounter, 3 mSDsluCounter, 4920 mSDsCounter, 0 mSdLazyCounter, 83 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 7 SdHoareTripleChecker+Valid, 5743 SdHoareTripleChecker+Invalid, 83 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 83 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2025-03-16 18:46:58,509 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [7 Valid, 5743 Invalid, 83 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 83 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2025-03-16 18:46:58,510 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 669 states. [2025-03-16 18:46:58,556 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 669 to 669. [2025-03-16 18:46:58,557 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 669 states, 504 states have (on average 1.4821428571428572) internal successors, (747), 518 states have internal predecessors, (747), 117 states have call successors, (117), 44 states have call predecessors, (117), 47 states have return successors, (124), 115 states have call predecessors, (124), 116 states have call successors, (124) [2025-03-16 18:46:58,561 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 669 states to 669 states and 988 transitions. [2025-03-16 18:46:58,562 INFO L78 Accepts]: Start accepts. Automaton has 669 states and 988 transitions. Word has length 173 [2025-03-16 18:46:58,562 INFO L84 Accepts]: Finished accepts. word is rejected. [2025-03-16 18:46:58,562 INFO L471 AbstractCegarLoop]: Abstraction has 669 states and 988 transitions. [2025-03-16 18:46:58,562 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 6 states have (on average 16.333333333333332) internal successors, (98), 8 states have internal predecessors, (98), 4 states have call successors, (28), 2 states have call predecessors, (28), 3 states have return successors, (23), 3 states have call predecessors, (23), 4 states have call successors, (23) [2025-03-16 18:46:58,562 INFO L276 IsEmpty]: Start isEmpty. Operand 669 states and 988 transitions. [2025-03-16 18:46:58,564 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 175 [2025-03-16 18:46:58,564 INFO L210 NwaCegarLoop]: Found error trace [2025-03-16 18:46:58,564 INFO L218 NwaCegarLoop]: trace histogram [8, 8, 3, 3, 3, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-16 18:46:58,564 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2025-03-16 18:46:58,564 INFO L396 AbstractCegarLoop]: === Iteration 11 === Targeting outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION === [outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2025-03-16 18:46:58,565 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-16 18:46:58,565 INFO L85 PathProgramCache]: Analyzing trace with hash -1997177434, now seen corresponding path program 1 times [2025-03-16 18:46:58,565 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-16 18:46:58,565 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1072453275] [2025-03-16 18:46:58,565 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-16 18:46:58,565 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-16 18:46:58,582 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 174 statements into 1 equivalence classes. [2025-03-16 18:46:58,591 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 174 of 174 statements. [2025-03-16 18:46:58,591 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-16 18:46:58,591 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-16 18:46:58,712 INFO L134 CoverageAnalysis]: Checked inductivity of 114 backedges. 13 proven. 0 refuted. 0 times theorem prover too weak. 101 trivial. 0 not checked. [2025-03-16 18:46:58,712 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-16 18:46:58,712 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1072453275] [2025-03-16 18:46:58,712 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1072453275] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-16 18:46:58,712 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-16 18:46:58,713 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2025-03-16 18:46:58,713 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [617332327] [2025-03-16 18:46:58,713 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-16 18:46:58,713 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2025-03-16 18:46:58,713 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-03-16 18:46:58,713 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2025-03-16 18:46:58,713 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=57, Unknown=0, NotChecked=0, Total=72 [2025-03-16 18:46:58,714 INFO L87 Difference]: Start difference. First operand 669 states and 988 transitions. Second operand has 9 states, 7 states have (on average 14.571428571428571) internal successors, (102), 8 states have internal predecessors, (102), 4 states have call successors, (28), 2 states have call predecessors, (28), 4 states have return successors, (23), 4 states have call predecessors, (23), 4 states have call successors, (23) [2025-03-16 18:46:58,851 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-03-16 18:46:58,852 INFO L93 Difference]: Finished difference Result 1264 states and 1882 transitions. [2025-03-16 18:46:58,852 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2025-03-16 18:46:58,852 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 7 states have (on average 14.571428571428571) internal successors, (102), 8 states have internal predecessors, (102), 4 states have call successors, (28), 2 states have call predecessors, (28), 4 states have return successors, (23), 4 states have call predecessors, (23), 4 states have call successors, (23) Word has length 174 [2025-03-16 18:46:58,852 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2025-03-16 18:46:58,857 INFO L225 Difference]: With dead ends: 1264 [2025-03-16 18:46:58,857 INFO L226 Difference]: Without dead ends: 669 [2025-03-16 18:46:58,858 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 12 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=23, Invalid=87, Unknown=0, NotChecked=0, Total=110 [2025-03-16 18:46:58,859 INFO L435 NwaCegarLoop]: 815 mSDtfsCounter, 7 mSDsluCounter, 5675 mSDsCounter, 0 mSdLazyCounter, 162 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 9 SdHoareTripleChecker+Valid, 6490 SdHoareTripleChecker+Invalid, 162 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 162 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2025-03-16 18:46:58,859 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [9 Valid, 6490 Invalid, 162 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 162 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2025-03-16 18:46:58,860 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 669 states. [2025-03-16 18:46:58,881 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 669 to 669. [2025-03-16 18:46:58,882 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 669 states, 504 states have (on average 1.4821428571428572) internal successors, (747), 518 states have internal predecessors, (747), 117 states have call successors, (117), 44 states have call predecessors, (117), 47 states have return successors, (123), 115 states have call predecessors, (123), 116 states have call successors, (123) [2025-03-16 18:46:58,886 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 669 states to 669 states and 987 transitions. [2025-03-16 18:46:58,886 INFO L78 Accepts]: Start accepts. Automaton has 669 states and 987 transitions. Word has length 174 [2025-03-16 18:46:58,887 INFO L84 Accepts]: Finished accepts. word is rejected. [2025-03-16 18:46:58,887 INFO L471 AbstractCegarLoop]: Abstraction has 669 states and 987 transitions. [2025-03-16 18:46:58,887 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 7 states have (on average 14.571428571428571) internal successors, (102), 8 states have internal predecessors, (102), 4 states have call successors, (28), 2 states have call predecessors, (28), 4 states have return successors, (23), 4 states have call predecessors, (23), 4 states have call successors, (23) [2025-03-16 18:46:58,887 INFO L276 IsEmpty]: Start isEmpty. Operand 669 states and 987 transitions. [2025-03-16 18:46:58,889 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 183 [2025-03-16 18:46:58,889 INFO L210 NwaCegarLoop]: Found error trace [2025-03-16 18:46:58,890 INFO L218 NwaCegarLoop]: trace histogram [8, 8, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-16 18:46:58,890 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2025-03-16 18:46:58,890 INFO L396 AbstractCegarLoop]: === Iteration 12 === Targeting outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION === [outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2025-03-16 18:46:58,890 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-16 18:46:58,890 INFO L85 PathProgramCache]: Analyzing trace with hash -1042050206, now seen corresponding path program 1 times [2025-03-16 18:46:58,890 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-16 18:46:58,891 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1534729732] [2025-03-16 18:46:58,891 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-16 18:46:58,891 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-16 18:46:58,907 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 182 statements into 1 equivalence classes. [2025-03-16 18:46:58,915 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 182 of 182 statements. [2025-03-16 18:46:58,915 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-16 18:46:58,915 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-16 18:46:59,036 INFO L134 CoverageAnalysis]: Checked inductivity of 115 backedges. 14 proven. 0 refuted. 0 times theorem prover too weak. 101 trivial. 0 not checked. [2025-03-16 18:46:59,036 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-16 18:46:59,036 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1534729732] [2025-03-16 18:46:59,036 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1534729732] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-16 18:46:59,036 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-16 18:46:59,036 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2025-03-16 18:46:59,036 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1283374216] [2025-03-16 18:46:59,036 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-16 18:46:59,036 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2025-03-16 18:46:59,036 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-03-16 18:46:59,037 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2025-03-16 18:46:59,037 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=57, Unknown=0, NotChecked=0, Total=72 [2025-03-16 18:46:59,037 INFO L87 Difference]: Start difference. First operand 669 states and 987 transitions. Second operand has 9 states, 7 states have (on average 15.428571428571429) internal successors, (108), 8 states have internal predecessors, (108), 4 states have call successors, (29), 2 states have call predecessors, (29), 4 states have return successors, (24), 4 states have call predecessors, (24), 4 states have call successors, (24) [2025-03-16 18:46:59,191 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-03-16 18:46:59,191 INFO L93 Difference]: Finished difference Result 1266 states and 1888 transitions. [2025-03-16 18:46:59,191 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2025-03-16 18:46:59,192 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 7 states have (on average 15.428571428571429) internal successors, (108), 8 states have internal predecessors, (108), 4 states have call successors, (29), 2 states have call predecessors, (29), 4 states have return successors, (24), 4 states have call predecessors, (24), 4 states have call successors, (24) Word has length 182 [2025-03-16 18:46:59,193 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2025-03-16 18:46:59,198 INFO L225 Difference]: With dead ends: 1266 [2025-03-16 18:46:59,198 INFO L226 Difference]: Without dead ends: 671 [2025-03-16 18:46:59,199 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=23, Invalid=87, Unknown=0, NotChecked=0, Total=110 [2025-03-16 18:46:59,200 INFO L435 NwaCegarLoop]: 817 mSDtfsCounter, 4 mSDsluCounter, 5689 mSDsCounter, 0 mSdLazyCounter, 171 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 6 SdHoareTripleChecker+Valid, 6506 SdHoareTripleChecker+Invalid, 172 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 171 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2025-03-16 18:46:59,200 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [6 Valid, 6506 Invalid, 172 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 171 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2025-03-16 18:46:59,201 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 671 states. [2025-03-16 18:46:59,225 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 671 to 671. [2025-03-16 18:46:59,226 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 671 states, 505 states have (on average 1.4811881188118812) internal successors, (748), 520 states have internal predecessors, (748), 117 states have call successors, (117), 44 states have call predecessors, (117), 48 states have return successors, (128), 115 states have call predecessors, (128), 116 states have call successors, (128) [2025-03-16 18:46:59,229 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 671 states to 671 states and 993 transitions. [2025-03-16 18:46:59,230 INFO L78 Accepts]: Start accepts. Automaton has 671 states and 993 transitions. Word has length 182 [2025-03-16 18:46:59,232 INFO L84 Accepts]: Finished accepts. word is rejected. [2025-03-16 18:46:59,233 INFO L471 AbstractCegarLoop]: Abstraction has 671 states and 993 transitions. [2025-03-16 18:46:59,233 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 7 states have (on average 15.428571428571429) internal successors, (108), 8 states have internal predecessors, (108), 4 states have call successors, (29), 2 states have call predecessors, (29), 4 states have return successors, (24), 4 states have call predecessors, (24), 4 states have call successors, (24) [2025-03-16 18:46:59,233 INFO L276 IsEmpty]: Start isEmpty. Operand 671 states and 993 transitions. [2025-03-16 18:46:59,235 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 184 [2025-03-16 18:46:59,235 INFO L210 NwaCegarLoop]: Found error trace [2025-03-16 18:46:59,235 INFO L218 NwaCegarLoop]: trace histogram [8, 8, 3, 3, 3, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-16 18:46:59,235 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11 [2025-03-16 18:46:59,235 INFO L396 AbstractCegarLoop]: === Iteration 13 === Targeting outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION === [outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2025-03-16 18:46:59,236 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-16 18:46:59,236 INFO L85 PathProgramCache]: Analyzing trace with hash -1815975032, now seen corresponding path program 1 times [2025-03-16 18:46:59,236 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-16 18:46:59,236 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1630009213] [2025-03-16 18:46:59,236 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-16 18:46:59,236 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-16 18:46:59,253 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 183 statements into 1 equivalence classes. [2025-03-16 18:46:59,263 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 183 of 183 statements. [2025-03-16 18:46:59,264 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-16 18:46:59,264 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-16 18:46:59,350 INFO L134 CoverageAnalysis]: Checked inductivity of 115 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 114 trivial. 0 not checked. [2025-03-16 18:46:59,350 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-16 18:46:59,350 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1630009213] [2025-03-16 18:46:59,350 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1630009213] provided 0 perfect and 1 imperfect interpolant sequences [2025-03-16 18:46:59,350 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1383786299] [2025-03-16 18:46:59,350 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-16 18:46:59,350 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2025-03-16 18:46:59,350 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-16 18:46:59,353 INFO L229 MonitoredProcess]: Starting monitored process 6 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2025-03-16 18:46:59,354 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Waiting until timeout for monitored process [2025-03-16 18:46:59,524 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 183 statements into 1 equivalence classes. [2025-03-16 18:46:59,645 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 183 of 183 statements. [2025-03-16 18:46:59,645 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-16 18:46:59,645 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-16 18:46:59,650 INFO L256 TraceCheckSpWp]: Trace formula consists of 1429 conjuncts, 3 conjuncts are in the unsatisfiable core [2025-03-16 18:46:59,654 INFO L279 TraceCheckSpWp]: Computing forward predicates... [2025-03-16 18:46:59,681 INFO L134 CoverageAnalysis]: Checked inductivity of 115 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 114 trivial. 0 not checked. [2025-03-16 18:46:59,681 INFO L312 TraceCheckSpWp]: Computing backward predicates... [2025-03-16 18:46:59,783 INFO L134 CoverageAnalysis]: Checked inductivity of 115 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 114 trivial. 0 not checked. [2025-03-16 18:46:59,783 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1383786299] provided 0 perfect and 2 imperfect interpolant sequences [2025-03-16 18:46:59,783 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2025-03-16 18:46:59,784 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [4, 4, 4] total 7 [2025-03-16 18:46:59,784 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [458187868] [2025-03-16 18:46:59,784 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2025-03-16 18:46:59,784 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2025-03-16 18:46:59,784 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-03-16 18:46:59,785 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2025-03-16 18:46:59,785 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=21, Invalid=21, Unknown=0, NotChecked=0, Total=42 [2025-03-16 18:46:59,785 INFO L87 Difference]: Start difference. First operand 671 states and 993 transitions. Second operand has 7 states, 7 states have (on average 19.0) internal successors, (133), 7 states have internal predecessors, (133), 2 states have call successors, (36), 2 states have call predecessors, (36), 2 states have return successors, (31), 2 states have call predecessors, (31), 2 states have call successors, (31) [2025-03-16 18:46:59,945 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-03-16 18:46:59,945 INFO L93 Difference]: Finished difference Result 1527 states and 2334 transitions. [2025-03-16 18:46:59,945 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2025-03-16 18:46:59,946 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 19.0) internal successors, (133), 7 states have internal predecessors, (133), 2 states have call successors, (36), 2 states have call predecessors, (36), 2 states have return successors, (31), 2 states have call predecessors, (31), 2 states have call successors, (31) Word has length 183 [2025-03-16 18:46:59,946 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2025-03-16 18:46:59,953 INFO L225 Difference]: With dead ends: 1527 [2025-03-16 18:46:59,953 INFO L226 Difference]: Without dead ends: 1210 [2025-03-16 18:46:59,955 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 368 GetRequests, 363 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=21, Invalid=21, Unknown=0, NotChecked=0, Total=42 [2025-03-16 18:46:59,956 INFO L435 NwaCegarLoop]: 870 mSDtfsCounter, 619 mSDsluCounter, 2854 mSDsCounter, 0 mSdLazyCounter, 91 mSolverCounterSat, 12 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 673 SdHoareTripleChecker+Valid, 3724 SdHoareTripleChecker+Invalid, 103 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 12 IncrementalHoareTripleChecker+Valid, 91 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2025-03-16 18:46:59,956 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [673 Valid, 3724 Invalid, 103 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [12 Valid, 91 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2025-03-16 18:46:59,958 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1210 states. [2025-03-16 18:47:00,024 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1210 to 1186. [2025-03-16 18:47:00,026 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1186 states, 941 states have (on average 1.538788522848034) internal successors, (1448), 956 states have internal predecessors, (1448), 196 states have call successors, (196), 44 states have call predecessors, (196), 48 states have return successors, (217), 194 states have call predecessors, (217), 195 states have call successors, (217) [2025-03-16 18:47:00,034 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1186 states to 1186 states and 1861 transitions. [2025-03-16 18:47:00,035 INFO L78 Accepts]: Start accepts. Automaton has 1186 states and 1861 transitions. Word has length 183 [2025-03-16 18:47:00,035 INFO L84 Accepts]: Finished accepts. word is rejected. [2025-03-16 18:47:00,035 INFO L471 AbstractCegarLoop]: Abstraction has 1186 states and 1861 transitions. [2025-03-16 18:47:00,035 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 19.0) internal successors, (133), 7 states have internal predecessors, (133), 2 states have call successors, (36), 2 states have call predecessors, (36), 2 states have return successors, (31), 2 states have call predecessors, (31), 2 states have call successors, (31) [2025-03-16 18:47:00,036 INFO L276 IsEmpty]: Start isEmpty. Operand 1186 states and 1861 transitions. [2025-03-16 18:47:00,040 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 182 [2025-03-16 18:47:00,040 INFO L210 NwaCegarLoop]: Found error trace [2025-03-16 18:47:00,041 INFO L218 NwaCegarLoop]: trace histogram [8, 8, 3, 3, 3, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-16 18:47:00,050 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Ended with exit code 0 [2025-03-16 18:47:00,241 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 6 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable12 [2025-03-16 18:47:00,242 INFO L396 AbstractCegarLoop]: === Iteration 14 === Targeting outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION === [outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2025-03-16 18:47:00,242 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-16 18:47:00,243 INFO L85 PathProgramCache]: Analyzing trace with hash 230390999, now seen corresponding path program 1 times [2025-03-16 18:47:00,243 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-16 18:47:00,243 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [783860254] [2025-03-16 18:47:00,243 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-16 18:47:00,243 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-16 18:47:00,263 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 181 statements into 1 equivalence classes. [2025-03-16 18:47:00,272 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 181 of 181 statements. [2025-03-16 18:47:00,272 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-16 18:47:00,272 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-16 18:47:00,316 INFO L134 CoverageAnalysis]: Checked inductivity of 114 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 114 trivial. 0 not checked. [2025-03-16 18:47:00,316 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-16 18:47:00,316 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [783860254] [2025-03-16 18:47:00,316 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [783860254] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-16 18:47:00,316 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-16 18:47:00,317 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2025-03-16 18:47:00,317 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1911289948] [2025-03-16 18:47:00,317 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-16 18:47:00,317 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2025-03-16 18:47:00,318 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-03-16 18:47:00,318 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2025-03-16 18:47:00,318 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2025-03-16 18:47:00,319 INFO L87 Difference]: Start difference. First operand 1186 states and 1861 transitions. Second operand has 3 states, 3 states have (on average 34.333333333333336) internal successors, (103), 3 states have internal predecessors, (103), 2 states have call successors, (28), 2 states have call predecessors, (28), 1 states have return successors, (23), 2 states have call predecessors, (23), 2 states have call successors, (23) [2025-03-16 18:47:00,380 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-03-16 18:47:00,380 INFO L93 Difference]: Finished difference Result 2737 states and 4362 transitions. [2025-03-16 18:47:00,381 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2025-03-16 18:47:00,381 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 34.333333333333336) internal successors, (103), 3 states have internal predecessors, (103), 2 states have call successors, (28), 2 states have call predecessors, (28), 1 states have return successors, (23), 2 states have call predecessors, (23), 2 states have call successors, (23) Word has length 181 [2025-03-16 18:47:00,381 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2025-03-16 18:47:00,392 INFO L225 Difference]: With dead ends: 2737 [2025-03-16 18:47:00,393 INFO L226 Difference]: Without dead ends: 1675 [2025-03-16 18:47:00,397 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2025-03-16 18:47:00,397 INFO L435 NwaCegarLoop]: 858 mSDtfsCounter, 160 mSDsluCounter, 820 mSDsCounter, 0 mSdLazyCounter, 3 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 178 SdHoareTripleChecker+Valid, 1678 SdHoareTripleChecker+Invalid, 4 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 3 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2025-03-16 18:47:00,398 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [178 Valid, 1678 Invalid, 4 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 3 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2025-03-16 18:47:00,399 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1675 states. [2025-03-16 18:47:00,459 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1675 to 1667. [2025-03-16 18:47:00,462 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1667 states, 1343 states have (on average 1.5517498138495904) internal successors, (2084), 1358 states have internal predecessors, (2084), 275 states have call successors, (275), 44 states have call predecessors, (275), 48 states have return successors, (306), 273 states have call predecessors, (306), 274 states have call successors, (306) [2025-03-16 18:47:00,469 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1667 states to 1667 states and 2665 transitions. [2025-03-16 18:47:00,471 INFO L78 Accepts]: Start accepts. Automaton has 1667 states and 2665 transitions. Word has length 181 [2025-03-16 18:47:00,471 INFO L84 Accepts]: Finished accepts. word is rejected. [2025-03-16 18:47:00,471 INFO L471 AbstractCegarLoop]: Abstraction has 1667 states and 2665 transitions. [2025-03-16 18:47:00,471 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 34.333333333333336) internal successors, (103), 3 states have internal predecessors, (103), 2 states have call successors, (28), 2 states have call predecessors, (28), 1 states have return successors, (23), 2 states have call predecessors, (23), 2 states have call successors, (23) [2025-03-16 18:47:00,471 INFO L276 IsEmpty]: Start isEmpty. Operand 1667 states and 2665 transitions. [2025-03-16 18:47:00,478 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 190 [2025-03-16 18:47:00,478 INFO L210 NwaCegarLoop]: Found error trace [2025-03-16 18:47:00,478 INFO L218 NwaCegarLoop]: trace histogram [8, 8, 3, 3, 3, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-16 18:47:00,478 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable13 [2025-03-16 18:47:00,478 INFO L396 AbstractCegarLoop]: === Iteration 15 === Targeting outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION === [outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2025-03-16 18:47:00,478 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-16 18:47:00,479 INFO L85 PathProgramCache]: Analyzing trace with hash 1722527732, now seen corresponding path program 1 times [2025-03-16 18:47:00,479 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-16 18:47:00,479 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [330501319] [2025-03-16 18:47:00,479 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-16 18:47:00,479 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-16 18:47:00,494 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 189 statements into 1 equivalence classes. [2025-03-16 18:47:00,503 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 189 of 189 statements. [2025-03-16 18:47:00,503 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-16 18:47:00,503 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-16 18:47:00,532 INFO L134 CoverageAnalysis]: Checked inductivity of 114 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 114 trivial. 0 not checked. [2025-03-16 18:47:00,532 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-16 18:47:00,532 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [330501319] [2025-03-16 18:47:00,533 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [330501319] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-16 18:47:00,533 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-16 18:47:00,533 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2025-03-16 18:47:00,533 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1503180883] [2025-03-16 18:47:00,533 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-16 18:47:00,533 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2025-03-16 18:47:00,533 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-03-16 18:47:00,534 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2025-03-16 18:47:00,534 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2025-03-16 18:47:00,534 INFO L87 Difference]: Start difference. First operand 1667 states and 2665 transitions. Second operand has 3 states, 3 states have (on average 36.333333333333336) internal successors, (109), 3 states have internal predecessors, (109), 2 states have call successors, (29), 2 states have call predecessors, (29), 1 states have return successors, (24), 2 states have call predecessors, (24), 2 states have call successors, (24) [2025-03-16 18:47:00,587 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-03-16 18:47:00,588 INFO L93 Difference]: Finished difference Result 3931 states and 6350 transitions. [2025-03-16 18:47:00,588 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2025-03-16 18:47:00,588 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 36.333333333333336) internal successors, (109), 3 states have internal predecessors, (109), 2 states have call successors, (29), 2 states have call predecessors, (29), 1 states have return successors, (24), 2 states have call predecessors, (24), 2 states have call successors, (24) Word has length 189 [2025-03-16 18:47:00,588 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2025-03-16 18:47:00,600 INFO L225 Difference]: With dead ends: 3931 [2025-03-16 18:47:00,600 INFO L226 Difference]: Without dead ends: 2446 [2025-03-16 18:47:00,604 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2025-03-16 18:47:00,605 INFO L435 NwaCegarLoop]: 835 mSDtfsCounter, 158 mSDsluCounter, 823 mSDsCounter, 0 mSdLazyCounter, 3 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 176 SdHoareTripleChecker+Valid, 1658 SdHoareTripleChecker+Invalid, 4 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 3 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2025-03-16 18:47:00,605 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [176 Valid, 1658 Invalid, 4 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 3 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2025-03-16 18:47:00,607 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2446 states. [2025-03-16 18:47:00,672 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2446 to 2438. [2025-03-16 18:47:00,675 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2438 states, 1995 states have (on average 1.5669172932330826) internal successors, (3126), 2010 states have internal predecessors, (3126), 394 states have call successors, (394), 44 states have call predecessors, (394), 48 states have return successors, (425), 392 states have call predecessors, (425), 393 states have call successors, (425) [2025-03-16 18:47:00,711 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2438 states to 2438 states and 3945 transitions. [2025-03-16 18:47:00,713 INFO L78 Accepts]: Start accepts. Automaton has 2438 states and 3945 transitions. Word has length 189 [2025-03-16 18:47:00,713 INFO L84 Accepts]: Finished accepts. word is rejected. [2025-03-16 18:47:00,713 INFO L471 AbstractCegarLoop]: Abstraction has 2438 states and 3945 transitions. [2025-03-16 18:47:00,714 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 36.333333333333336) internal successors, (109), 3 states have internal predecessors, (109), 2 states have call successors, (29), 2 states have call predecessors, (29), 1 states have return successors, (24), 2 states have call predecessors, (24), 2 states have call successors, (24) [2025-03-16 18:47:00,714 INFO L276 IsEmpty]: Start isEmpty. Operand 2438 states and 3945 transitions. [2025-03-16 18:47:00,722 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 184 [2025-03-16 18:47:00,722 INFO L210 NwaCegarLoop]: Found error trace [2025-03-16 18:47:00,722 INFO L218 NwaCegarLoop]: trace histogram [8, 8, 3, 3, 3, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-16 18:47:00,722 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable14 [2025-03-16 18:47:00,723 INFO L396 AbstractCegarLoop]: === Iteration 16 === Targeting outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION === [outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2025-03-16 18:47:00,723 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-16 18:47:00,723 INFO L85 PathProgramCache]: Analyzing trace with hash -243188808, now seen corresponding path program 1 times [2025-03-16 18:47:00,723 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-16 18:47:00,723 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [558903869] [2025-03-16 18:47:00,723 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-16 18:47:00,724 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-16 18:47:00,738 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 183 statements into 1 equivalence classes. [2025-03-16 18:47:00,746 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 183 of 183 statements. [2025-03-16 18:47:00,746 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-16 18:47:00,746 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-16 18:47:00,774 INFO L134 CoverageAnalysis]: Checked inductivity of 114 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 114 trivial. 0 not checked. [2025-03-16 18:47:00,774 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-16 18:47:00,774 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [558903869] [2025-03-16 18:47:00,774 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [558903869] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-16 18:47:00,774 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-16 18:47:00,774 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2025-03-16 18:47:00,774 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [615676636] [2025-03-16 18:47:00,774 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-16 18:47:00,775 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2025-03-16 18:47:00,775 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-03-16 18:47:00,775 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2025-03-16 18:47:00,775 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2025-03-16 18:47:00,775 INFO L87 Difference]: Start difference. First operand 2438 states and 3945 transitions. Second operand has 3 states, 3 states have (on average 35.0) internal successors, (105), 3 states have internal predecessors, (105), 2 states have call successors, (28), 2 states have call predecessors, (28), 1 states have return successors, (23), 2 states have call predecessors, (23), 2 states have call successors, (23) [2025-03-16 18:47:00,841 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-03-16 18:47:00,842 INFO L93 Difference]: Finished difference Result 5741 states and 9384 transitions. [2025-03-16 18:47:00,842 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2025-03-16 18:47:00,842 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 35.0) internal successors, (105), 3 states have internal predecessors, (105), 2 states have call successors, (28), 2 states have call predecessors, (28), 1 states have return successors, (23), 2 states have call predecessors, (23), 2 states have call successors, (23) Word has length 183 [2025-03-16 18:47:00,843 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2025-03-16 18:47:00,858 INFO L225 Difference]: With dead ends: 5741 [2025-03-16 18:47:00,858 INFO L226 Difference]: Without dead ends: 3631 [2025-03-16 18:47:00,864 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2025-03-16 18:47:00,865 INFO L435 NwaCegarLoop]: 831 mSDtfsCounter, 156 mSDsluCounter, 820 mSDsCounter, 0 mSdLazyCounter, 3 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 174 SdHoareTripleChecker+Valid, 1651 SdHoareTripleChecker+Invalid, 4 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 3 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2025-03-16 18:47:00,865 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [174 Valid, 1651 Invalid, 4 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 3 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2025-03-16 18:47:00,868 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3631 states. [2025-03-16 18:47:00,951 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3631 to 3623. [2025-03-16 18:47:00,956 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3623 states, 3018 states have (on average 1.5798542080848244) internal successors, (4768), 3033 states have internal predecessors, (4768), 556 states have call successors, (556), 44 states have call predecessors, (556), 48 states have return successors, (603), 554 states have call predecessors, (603), 555 states have call successors, (603) [2025-03-16 18:47:00,968 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3623 states to 3623 states and 5927 transitions. [2025-03-16 18:47:00,970 INFO L78 Accepts]: Start accepts. Automaton has 3623 states and 5927 transitions. Word has length 183 [2025-03-16 18:47:00,970 INFO L84 Accepts]: Finished accepts. word is rejected. [2025-03-16 18:47:00,971 INFO L471 AbstractCegarLoop]: Abstraction has 3623 states and 5927 transitions. [2025-03-16 18:47:00,971 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 35.0) internal successors, (105), 3 states have internal predecessors, (105), 2 states have call successors, (28), 2 states have call predecessors, (28), 1 states have return successors, (23), 2 states have call predecessors, (23), 2 states have call successors, (23) [2025-03-16 18:47:00,971 INFO L276 IsEmpty]: Start isEmpty. Operand 3623 states and 5927 transitions. [2025-03-16 18:47:00,981 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 185 [2025-03-16 18:47:00,981 INFO L210 NwaCegarLoop]: Found error trace [2025-03-16 18:47:00,981 INFO L218 NwaCegarLoop]: trace histogram [8, 8, 3, 3, 3, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-16 18:47:00,981 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable15 [2025-03-16 18:47:00,982 INFO L396 AbstractCegarLoop]: === Iteration 17 === Targeting outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION === [outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2025-03-16 18:47:00,982 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-16 18:47:00,982 INFO L85 PathProgramCache]: Analyzing trace with hash 733784374, now seen corresponding path program 1 times [2025-03-16 18:47:00,982 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-16 18:47:00,982 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1474207539] [2025-03-16 18:47:00,982 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-16 18:47:00,982 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-16 18:47:00,996 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 184 statements into 1 equivalence classes. [2025-03-16 18:47:01,005 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 184 of 184 statements. [2025-03-16 18:47:01,005 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-16 18:47:01,005 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-16 18:47:01,033 INFO L134 CoverageAnalysis]: Checked inductivity of 114 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 114 trivial. 0 not checked. [2025-03-16 18:47:01,033 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-16 18:47:01,033 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1474207539] [2025-03-16 18:47:01,034 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1474207539] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-16 18:47:01,034 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-16 18:47:01,034 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2025-03-16 18:47:01,034 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2080853792] [2025-03-16 18:47:01,034 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-16 18:47:01,034 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2025-03-16 18:47:01,034 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-03-16 18:47:01,035 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2025-03-16 18:47:01,035 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2025-03-16 18:47:01,035 INFO L87 Difference]: Start difference. First operand 3623 states and 5927 transitions. Second operand has 3 states, 3 states have (on average 35.333333333333336) internal successors, (106), 3 states have internal predecessors, (106), 2 states have call successors, (28), 2 states have call predecessors, (28), 1 states have return successors, (23), 2 states have call predecessors, (23), 2 states have call successors, (23) [2025-03-16 18:47:01,148 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-03-16 18:47:01,149 INFO L93 Difference]: Finished difference Result 8595 states and 14188 transitions. [2025-03-16 18:47:01,149 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2025-03-16 18:47:01,149 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 35.333333333333336) internal successors, (106), 3 states have internal predecessors, (106), 2 states have call successors, (28), 2 states have call predecessors, (28), 1 states have return successors, (23), 2 states have call predecessors, (23), 2 states have call successors, (23) Word has length 184 [2025-03-16 18:47:01,149 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2025-03-16 18:47:01,172 INFO L225 Difference]: With dead ends: 8595 [2025-03-16 18:47:01,172 INFO L226 Difference]: Without dead ends: 5542 [2025-03-16 18:47:01,181 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2025-03-16 18:47:01,182 INFO L435 NwaCegarLoop]: 831 mSDtfsCounter, 154 mSDsluCounter, 820 mSDsCounter, 0 mSdLazyCounter, 3 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 172 SdHoareTripleChecker+Valid, 1651 SdHoareTripleChecker+Invalid, 4 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 3 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2025-03-16 18:47:01,182 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [172 Valid, 1651 Invalid, 4 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 3 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2025-03-16 18:47:01,186 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 5542 states. [2025-03-16 18:47:01,326 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 5542 to 5534. [2025-03-16 18:47:01,333 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5534 states, 4684 states have (on average 1.590734415029889) internal successors, (7451), 4699 states have internal predecessors, (7451), 801 states have call successors, (801), 44 states have call predecessors, (801), 48 states have return successors, (874), 799 states have call predecessors, (874), 800 states have call successors, (874) [2025-03-16 18:47:01,350 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5534 states to 5534 states and 9126 transitions. [2025-03-16 18:47:01,353 INFO L78 Accepts]: Start accepts. Automaton has 5534 states and 9126 transitions. Word has length 184 [2025-03-16 18:47:01,353 INFO L84 Accepts]: Finished accepts. word is rejected. [2025-03-16 18:47:01,353 INFO L471 AbstractCegarLoop]: Abstraction has 5534 states and 9126 transitions. [2025-03-16 18:47:01,354 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 35.333333333333336) internal successors, (106), 3 states have internal predecessors, (106), 2 states have call successors, (28), 2 states have call predecessors, (28), 1 states have return successors, (23), 2 states have call predecessors, (23), 2 states have call successors, (23) [2025-03-16 18:47:01,354 INFO L276 IsEmpty]: Start isEmpty. Operand 5534 states and 9126 transitions. [2025-03-16 18:47:01,366 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 186 [2025-03-16 18:47:01,367 INFO L210 NwaCegarLoop]: Found error trace [2025-03-16 18:47:01,367 INFO L218 NwaCegarLoop]: trace histogram [8, 8, 3, 3, 3, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-16 18:47:01,367 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable16 [2025-03-16 18:47:01,367 INFO L396 AbstractCegarLoop]: === Iteration 18 === Targeting outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION === [outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2025-03-16 18:47:01,367 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-16 18:47:01,367 INFO L85 PathProgramCache]: Analyzing trace with hash -1145637767, now seen corresponding path program 1 times [2025-03-16 18:47:01,367 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-16 18:47:01,367 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1179967621] [2025-03-16 18:47:01,367 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-16 18:47:01,367 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-16 18:47:01,381 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 185 statements into 1 equivalence classes. [2025-03-16 18:47:01,388 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 185 of 185 statements. [2025-03-16 18:47:01,388 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-16 18:47:01,388 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-16 18:47:01,443 INFO L134 CoverageAnalysis]: Checked inductivity of 114 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 114 trivial. 0 not checked. [2025-03-16 18:47:01,443 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-16 18:47:01,443 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1179967621] [2025-03-16 18:47:01,443 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1179967621] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-16 18:47:01,443 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-16 18:47:01,443 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2025-03-16 18:47:01,443 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [715342521] [2025-03-16 18:47:01,443 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-16 18:47:01,444 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2025-03-16 18:47:01,444 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-03-16 18:47:01,445 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2025-03-16 18:47:01,445 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2025-03-16 18:47:01,445 INFO L87 Difference]: Start difference. First operand 5534 states and 9126 transitions. Second operand has 3 states, 3 states have (on average 35.666666666666664) internal successors, (107), 3 states have internal predecessors, (107), 2 states have call successors, (28), 2 states have call predecessors, (28), 1 states have return successors, (23), 2 states have call predecessors, (23), 2 states have call successors, (23) [2025-03-16 18:47:01,592 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-03-16 18:47:01,592 INFO L93 Difference]: Finished difference Result 13387 states and 22185 transitions. [2025-03-16 18:47:01,592 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2025-03-16 18:47:01,592 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 35.666666666666664) internal successors, (107), 3 states have internal predecessors, (107), 2 states have call successors, (28), 2 states have call predecessors, (28), 1 states have return successors, (23), 2 states have call predecessors, (23), 2 states have call successors, (23) Word has length 185 [2025-03-16 18:47:01,593 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2025-03-16 18:47:01,637 INFO L225 Difference]: With dead ends: 13387 [2025-03-16 18:47:01,637 INFO L226 Difference]: Without dead ends: 8779 [2025-03-16 18:47:01,653 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2025-03-16 18:47:01,654 INFO L435 NwaCegarLoop]: 844 mSDtfsCounter, 152 mSDsluCounter, 820 mSDsCounter, 0 mSdLazyCounter, 3 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 170 SdHoareTripleChecker+Valid, 1664 SdHoareTripleChecker+Invalid, 4 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 3 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2025-03-16 18:47:01,654 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [170 Valid, 1664 Invalid, 4 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 3 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2025-03-16 18:47:01,662 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 8779 states. [2025-03-16 18:47:02,013 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 8779 to 8771. [2025-03-16 18:47:02,026 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 8771 states, 7428 states have (on average 1.5868336025848142) internal successors, (11787), 7443 states have internal predecessors, (11787), 1294 states have call successors, (1294), 44 states have call predecessors, (1294), 48 states have return successors, (1411), 1292 states have call predecessors, (1411), 1293 states have call successors, (1411) [2025-03-16 18:47:02,061 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8771 states to 8771 states and 14492 transitions. [2025-03-16 18:47:02,065 INFO L78 Accepts]: Start accepts. Automaton has 8771 states and 14492 transitions. Word has length 185 [2025-03-16 18:47:02,066 INFO L84 Accepts]: Finished accepts. word is rejected. [2025-03-16 18:47:02,066 INFO L471 AbstractCegarLoop]: Abstraction has 8771 states and 14492 transitions. [2025-03-16 18:47:02,066 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 35.666666666666664) internal successors, (107), 3 states have internal predecessors, (107), 2 states have call successors, (28), 2 states have call predecessors, (28), 1 states have return successors, (23), 2 states have call predecessors, (23), 2 states have call successors, (23) [2025-03-16 18:47:02,067 INFO L276 IsEmpty]: Start isEmpty. Operand 8771 states and 14492 transitions. [2025-03-16 18:47:02,088 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 187 [2025-03-16 18:47:02,088 INFO L210 NwaCegarLoop]: Found error trace [2025-03-16 18:47:02,088 INFO L218 NwaCegarLoop]: trace histogram [8, 8, 3, 3, 3, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-16 18:47:02,088 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable17 [2025-03-16 18:47:02,088 INFO L396 AbstractCegarLoop]: === Iteration 19 === Targeting outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION === [outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2025-03-16 18:47:02,088 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-16 18:47:02,089 INFO L85 PathProgramCache]: Analyzing trace with hash -1476783115, now seen corresponding path program 1 times [2025-03-16 18:47:02,089 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-16 18:47:02,089 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1703062262] [2025-03-16 18:47:02,089 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-16 18:47:02,089 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-16 18:47:02,110 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 186 statements into 1 equivalence classes. [2025-03-16 18:47:02,120 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 186 of 186 statements. [2025-03-16 18:47:02,120 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-16 18:47:02,121 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-16 18:47:02,162 INFO L134 CoverageAnalysis]: Checked inductivity of 114 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 114 trivial. 0 not checked. [2025-03-16 18:47:02,162 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-16 18:47:02,162 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1703062262] [2025-03-16 18:47:02,162 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1703062262] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-16 18:47:02,162 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-16 18:47:02,162 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2025-03-16 18:47:02,162 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [866716037] [2025-03-16 18:47:02,162 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-16 18:47:02,163 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2025-03-16 18:47:02,163 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-03-16 18:47:02,163 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2025-03-16 18:47:02,163 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2025-03-16 18:47:02,164 INFO L87 Difference]: Start difference. First operand 8771 states and 14492 transitions. Second operand has 3 states, 3 states have (on average 36.0) internal successors, (108), 3 states have internal predecessors, (108), 2 states have call successors, (28), 2 states have call predecessors, (28), 1 states have return successors, (23), 2 states have call predecessors, (23), 2 states have call successors, (23) [2025-03-16 18:47:02,452 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-03-16 18:47:02,452 INFO L93 Difference]: Finished difference Result 21951 states and 36561 transitions. [2025-03-16 18:47:02,452 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2025-03-16 18:47:02,452 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 36.0) internal successors, (108), 3 states have internal predecessors, (108), 2 states have call successors, (28), 2 states have call predecessors, (28), 1 states have return successors, (23), 2 states have call predecessors, (23), 2 states have call successors, (23) Word has length 186 [2025-03-16 18:47:02,453 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2025-03-16 18:47:02,503 INFO L225 Difference]: With dead ends: 21951 [2025-03-16 18:47:02,503 INFO L226 Difference]: Without dead ends: 14570 [2025-03-16 18:47:02,526 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2025-03-16 18:47:02,526 INFO L435 NwaCegarLoop]: 831 mSDtfsCounter, 150 mSDsluCounter, 823 mSDsCounter, 0 mSdLazyCounter, 3 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 168 SdHoareTripleChecker+Valid, 1654 SdHoareTripleChecker+Invalid, 4 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 3 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2025-03-16 18:47:02,527 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [168 Valid, 1654 Invalid, 4 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 3 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2025-03-16 18:47:02,539 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 14570 states. [2025-03-16 18:47:02,949 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 14570 to 14562. [2025-03-16 18:47:02,971 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 14562 states, 12397 states have (on average 1.593611357586513) internal successors, (19756), 12412 states have internal predecessors, (19756), 2116 states have call successors, (2116), 44 states have call predecessors, (2116), 48 states have return successors, (2311), 2114 states have call predecessors, (2311), 2115 states have call successors, (2311) [2025-03-16 18:47:03,016 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 14562 states to 14562 states and 24183 transitions. [2025-03-16 18:47:03,022 INFO L78 Accepts]: Start accepts. Automaton has 14562 states and 24183 transitions. Word has length 186 [2025-03-16 18:47:03,022 INFO L84 Accepts]: Finished accepts. word is rejected. [2025-03-16 18:47:03,022 INFO L471 AbstractCegarLoop]: Abstraction has 14562 states and 24183 transitions. [2025-03-16 18:47:03,023 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 36.0) internal successors, (108), 3 states have internal predecessors, (108), 2 states have call successors, (28), 2 states have call predecessors, (28), 1 states have return successors, (23), 2 states have call predecessors, (23), 2 states have call successors, (23) [2025-03-16 18:47:03,023 INFO L276 IsEmpty]: Start isEmpty. Operand 14562 states and 24183 transitions. [2025-03-16 18:47:03,048 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 195 [2025-03-16 18:47:03,048 INFO L210 NwaCegarLoop]: Found error trace [2025-03-16 18:47:03,048 INFO L218 NwaCegarLoop]: trace histogram [8, 8, 3, 3, 3, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-16 18:47:03,048 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable18 [2025-03-16 18:47:03,048 INFO L396 AbstractCegarLoop]: === Iteration 20 === Targeting outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION === [outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2025-03-16 18:47:03,049 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-16 18:47:03,049 INFO L85 PathProgramCache]: Analyzing trace with hash 1914787121, now seen corresponding path program 1 times [2025-03-16 18:47:03,049 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-16 18:47:03,049 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1210754889] [2025-03-16 18:47:03,049 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-16 18:47:03,050 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-16 18:47:03,066 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 194 statements into 1 equivalence classes. [2025-03-16 18:47:03,073 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 194 of 194 statements. [2025-03-16 18:47:03,073 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-16 18:47:03,074 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-16 18:47:03,103 INFO L134 CoverageAnalysis]: Checked inductivity of 114 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 114 trivial. 0 not checked. [2025-03-16 18:47:03,104 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-16 18:47:03,104 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1210754889] [2025-03-16 18:47:03,104 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1210754889] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-16 18:47:03,104 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-16 18:47:03,104 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2025-03-16 18:47:03,105 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1275538516] [2025-03-16 18:47:03,105 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-16 18:47:03,105 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2025-03-16 18:47:03,105 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-03-16 18:47:03,106 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2025-03-16 18:47:03,106 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2025-03-16 18:47:03,106 INFO L87 Difference]: Start difference. First operand 14562 states and 24183 transitions. Second operand has 3 states, 3 states have (on average 38.0) internal successors, (114), 3 states have internal predecessors, (114), 2 states have call successors, (29), 2 states have call predecessors, (29), 1 states have return successors, (24), 2 states have call predecessors, (24), 2 states have call successors, (24) [2025-03-16 18:47:03,505 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-03-16 18:47:03,505 INFO L93 Difference]: Finished difference Result 35005 states and 57909 transitions. [2025-03-16 18:47:03,506 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2025-03-16 18:47:03,506 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 38.0) internal successors, (114), 3 states have internal predecessors, (114), 2 states have call successors, (29), 2 states have call predecessors, (29), 1 states have return successors, (24), 2 states have call predecessors, (24), 2 states have call successors, (24) Word has length 194 [2025-03-16 18:47:03,506 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2025-03-16 18:47:03,598 INFO L225 Difference]: With dead ends: 35005 [2025-03-16 18:47:03,598 INFO L226 Difference]: Without dead ends: 22920 [2025-03-16 18:47:03,631 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2025-03-16 18:47:03,631 INFO L435 NwaCegarLoop]: 842 mSDtfsCounter, 148 mSDsluCounter, 795 mSDsCounter, 0 mSdLazyCounter, 3 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 166 SdHoareTripleChecker+Valid, 1637 SdHoareTripleChecker+Invalid, 4 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 3 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2025-03-16 18:47:03,632 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [166 Valid, 1637 Invalid, 4 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 3 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2025-03-16 18:47:03,650 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 22920 states. [2025-03-16 18:47:04,594 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 22920 to 22912. [2025-03-16 18:47:04,627 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 22912 states, 19544 states have (on average 1.5685120753172328) internal successors, (30655), 19559 states have internal predecessors, (30655), 3319 states have call successors, (3319), 44 states have call predecessors, (3319), 48 states have return successors, (3658), 3317 states have call predecessors, (3658), 3318 states have call successors, (3658) [2025-03-16 18:47:04,703 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 22912 states to 22912 states and 37632 transitions. [2025-03-16 18:47:04,712 INFO L78 Accepts]: Start accepts. Automaton has 22912 states and 37632 transitions. Word has length 194 [2025-03-16 18:47:04,712 INFO L84 Accepts]: Finished accepts. word is rejected. [2025-03-16 18:47:04,712 INFO L471 AbstractCegarLoop]: Abstraction has 22912 states and 37632 transitions. [2025-03-16 18:47:04,713 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 38.0) internal successors, (114), 3 states have internal predecessors, (114), 2 states have call successors, (29), 2 states have call predecessors, (29), 1 states have return successors, (24), 2 states have call predecessors, (24), 2 states have call successors, (24) [2025-03-16 18:47:04,713 INFO L276 IsEmpty]: Start isEmpty. Operand 22912 states and 37632 transitions. [2025-03-16 18:47:04,743 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 189 [2025-03-16 18:47:04,743 INFO L210 NwaCegarLoop]: Found error trace [2025-03-16 18:47:04,744 INFO L218 NwaCegarLoop]: trace histogram [8, 8, 3, 3, 3, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-16 18:47:04,744 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable19 [2025-03-16 18:47:04,744 INFO L396 AbstractCegarLoop]: === Iteration 21 === Targeting outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION === [outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2025-03-16 18:47:04,744 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-16 18:47:04,744 INFO L85 PathProgramCache]: Analyzing trace with hash 1442950100, now seen corresponding path program 1 times [2025-03-16 18:47:04,744 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-16 18:47:04,744 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1732370914] [2025-03-16 18:47:04,745 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-16 18:47:04,745 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-16 18:47:04,764 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 188 statements into 1 equivalence classes. [2025-03-16 18:47:04,775 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 188 of 188 statements. [2025-03-16 18:47:04,775 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-16 18:47:04,775 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-16 18:47:04,816 INFO L134 CoverageAnalysis]: Checked inductivity of 114 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 114 trivial. 0 not checked. [2025-03-16 18:47:04,817 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-16 18:47:04,817 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1732370914] [2025-03-16 18:47:04,817 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1732370914] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-16 18:47:04,817 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-16 18:47:04,817 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2025-03-16 18:47:04,817 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [106254696] [2025-03-16 18:47:04,817 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-16 18:47:04,818 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2025-03-16 18:47:04,818 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-03-16 18:47:04,818 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2025-03-16 18:47:04,818 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2025-03-16 18:47:04,818 INFO L87 Difference]: Start difference. First operand 22912 states and 37632 transitions. Second operand has 3 states, 3 states have (on average 36.666666666666664) internal successors, (110), 3 states have internal predecessors, (110), 2 states have call successors, (28), 2 states have call predecessors, (28), 1 states have return successors, (23), 2 states have call predecessors, (23), 2 states have call successors, (23) [2025-03-16 18:47:05,567 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-03-16 18:47:05,568 INFO L93 Difference]: Finished difference Result 60417 states and 99616 transitions. [2025-03-16 18:47:05,568 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2025-03-16 18:47:05,568 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 36.666666666666664) internal successors, (110), 3 states have internal predecessors, (110), 2 states have call successors, (28), 2 states have call predecessors, (28), 1 states have return successors, (23), 2 states have call predecessors, (23), 2 states have call successors, (23) Word has length 188 [2025-03-16 18:47:05,569 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2025-03-16 18:47:05,721 INFO L225 Difference]: With dead ends: 60417 [2025-03-16 18:47:05,721 INFO L226 Difference]: Without dead ends: 40736 [2025-03-16 18:47:05,771 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2025-03-16 18:47:05,772 INFO L435 NwaCegarLoop]: 831 mSDtfsCounter, 146 mSDsluCounter, 824 mSDsCounter, 0 mSdLazyCounter, 3 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 164 SdHoareTripleChecker+Valid, 1655 SdHoareTripleChecker+Invalid, 4 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 3 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2025-03-16 18:47:05,773 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [164 Valid, 1655 Invalid, 4 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 3 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2025-03-16 18:47:05,807 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 40736 states. [2025-03-16 18:47:06,904 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 40736 to 40728. [2025-03-16 18:47:06,956 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 40728 states, 34910 states have (on average 1.5690346605557146) internal successors, (54775), 34925 states have internal predecessors, (54775), 5769 states have call successors, (5769), 44 states have call predecessors, (5769), 48 states have return successors, (6382), 5767 states have call predecessors, (6382), 5768 states have call successors, (6382) [2025-03-16 18:47:07,073 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 40728 states to 40728 states and 66926 transitions. [2025-03-16 18:47:07,089 INFO L78 Accepts]: Start accepts. Automaton has 40728 states and 66926 transitions. Word has length 188 [2025-03-16 18:47:07,089 INFO L84 Accepts]: Finished accepts. word is rejected. [2025-03-16 18:47:07,089 INFO L471 AbstractCegarLoop]: Abstraction has 40728 states and 66926 transitions. [2025-03-16 18:47:07,090 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 36.666666666666664) internal successors, (110), 3 states have internal predecessors, (110), 2 states have call successors, (28), 2 states have call predecessors, (28), 1 states have return successors, (23), 2 states have call predecessors, (23), 2 states have call successors, (23) [2025-03-16 18:47:07,090 INFO L276 IsEmpty]: Start isEmpty. Operand 40728 states and 66926 transitions. [2025-03-16 18:47:07,120 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 197 [2025-03-16 18:47:07,121 INFO L210 NwaCegarLoop]: Found error trace [2025-03-16 18:47:07,121 INFO L218 NwaCegarLoop]: trace histogram [8, 8, 3, 3, 3, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-16 18:47:07,121 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable20 [2025-03-16 18:47:07,121 INFO L396 AbstractCegarLoop]: === Iteration 22 === Targeting outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION === [outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2025-03-16 18:47:07,121 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-16 18:47:07,122 INFO L85 PathProgramCache]: Analyzing trace with hash -1888611376, now seen corresponding path program 1 times [2025-03-16 18:47:07,122 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-16 18:47:07,122 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [993484021] [2025-03-16 18:47:07,122 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-16 18:47:07,122 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-16 18:47:07,136 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 196 statements into 1 equivalence classes. [2025-03-16 18:47:07,144 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 196 of 196 statements. [2025-03-16 18:47:07,144 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-16 18:47:07,144 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-16 18:47:07,174 INFO L134 CoverageAnalysis]: Checked inductivity of 114 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 114 trivial. 0 not checked. [2025-03-16 18:47:07,174 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-16 18:47:07,174 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [993484021] [2025-03-16 18:47:07,174 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [993484021] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-16 18:47:07,174 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-16 18:47:07,175 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2025-03-16 18:47:07,175 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [728001240] [2025-03-16 18:47:07,175 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-16 18:47:07,175 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2025-03-16 18:47:07,175 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-03-16 18:47:07,176 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2025-03-16 18:47:07,176 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2025-03-16 18:47:07,176 INFO L87 Difference]: Start difference. First operand 40728 states and 66926 transitions. Second operand has 3 states, 3 states have (on average 38.666666666666664) internal successors, (116), 3 states have internal predecessors, (116), 2 states have call successors, (29), 2 states have call predecessors, (29), 1 states have return successors, (24), 2 states have call predecessors, (24), 2 states have call successors, (24) [2025-03-16 18:47:09,080 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-03-16 18:47:09,081 INFO L93 Difference]: Finished difference Result 110279 states and 182238 transitions. [2025-03-16 18:47:09,082 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2025-03-16 18:47:09,082 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 38.666666666666664) internal successors, (116), 3 states have internal predecessors, (116), 2 states have call successors, (29), 2 states have call predecessors, (29), 1 states have return successors, (24), 2 states have call predecessors, (24), 2 states have call successors, (24) Word has length 196 [2025-03-16 18:47:09,082 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2025-03-16 18:47:09,605 INFO L225 Difference]: With dead ends: 110279 [2025-03-16 18:47:09,605 INFO L226 Difference]: Without dead ends: 73888 [2025-03-16 18:47:09,667 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2025-03-16 18:47:09,669 INFO L435 NwaCegarLoop]: 841 mSDtfsCounter, 144 mSDsluCounter, 824 mSDsCounter, 0 mSdLazyCounter, 3 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 162 SdHoareTripleChecker+Valid, 1665 SdHoareTripleChecker+Invalid, 4 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 3 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2025-03-16 18:47:09,669 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [162 Valid, 1665 Invalid, 4 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 3 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2025-03-16 18:47:09,698 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 73888 states. [2025-03-16 18:47:11,388 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 73888 to 73880. [2025-03-16 18:47:11,469 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 73880 states, 63549 states have (on average 1.573699035390014) internal successors, (100007), 63564 states have internal predecessors, (100007), 10282 states have call successors, (10282), 44 states have call predecessors, (10282), 48 states have return successors, (11427), 10280 states have call predecessors, (11427), 10281 states have call successors, (11427) [2025-03-16 18:47:11,717 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 73880 states to 73880 states and 121716 transitions. [2025-03-16 18:47:11,746 INFO L78 Accepts]: Start accepts. Automaton has 73880 states and 121716 transitions. Word has length 196 [2025-03-16 18:47:11,747 INFO L84 Accepts]: Finished accepts. word is rejected. [2025-03-16 18:47:11,747 INFO L471 AbstractCegarLoop]: Abstraction has 73880 states and 121716 transitions. [2025-03-16 18:47:11,747 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 38.666666666666664) internal successors, (116), 3 states have internal predecessors, (116), 2 states have call successors, (29), 2 states have call predecessors, (29), 1 states have return successors, (24), 2 states have call predecessors, (24), 2 states have call successors, (24) [2025-03-16 18:47:11,747 INFO L276 IsEmpty]: Start isEmpty. Operand 73880 states and 121716 transitions. [2025-03-16 18:47:11,788 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 191 [2025-03-16 18:47:11,788 INFO L210 NwaCegarLoop]: Found error trace [2025-03-16 18:47:11,788 INFO L218 NwaCegarLoop]: trace histogram [8, 8, 3, 3, 3, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-16 18:47:11,788 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable21 [2025-03-16 18:47:11,788 INFO L396 AbstractCegarLoop]: === Iteration 23 === Targeting outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION === [outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2025-03-16 18:47:11,789 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-16 18:47:11,789 INFO L85 PathProgramCache]: Analyzing trace with hash 1230262259, now seen corresponding path program 1 times [2025-03-16 18:47:11,789 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-16 18:47:11,789 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [624158266] [2025-03-16 18:47:11,789 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-16 18:47:11,789 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-16 18:47:11,809 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 190 statements into 1 equivalence classes. [2025-03-16 18:47:11,822 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 190 of 190 statements. [2025-03-16 18:47:11,822 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-16 18:47:11,822 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-16 18:47:11,864 INFO L134 CoverageAnalysis]: Checked inductivity of 114 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 114 trivial. 0 not checked. [2025-03-16 18:47:11,864 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-16 18:47:11,864 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [624158266] [2025-03-16 18:47:11,864 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [624158266] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-16 18:47:11,864 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-16 18:47:11,864 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2025-03-16 18:47:11,865 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [876583603] [2025-03-16 18:47:11,865 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-16 18:47:11,865 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2025-03-16 18:47:11,865 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-03-16 18:47:11,865 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2025-03-16 18:47:11,865 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2025-03-16 18:47:11,866 INFO L87 Difference]: Start difference. First operand 73880 states and 121716 transitions. Second operand has 3 states, 3 states have (on average 37.333333333333336) internal successors, (112), 3 states have internal predecessors, (112), 2 states have call successors, (28), 2 states have call predecessors, (28), 1 states have return successors, (23), 2 states have call predecessors, (23), 2 states have call successors, (23) [2025-03-16 18:47:15,176 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-03-16 18:47:15,177 INFO L93 Difference]: Finished difference Result 137940 states and 228130 transitions. [2025-03-16 18:47:15,177 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2025-03-16 18:47:15,177 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 37.333333333333336) internal successors, (112), 3 states have internal predecessors, (112), 2 states have call successors, (28), 2 states have call predecessors, (28), 1 states have return successors, (23), 2 states have call predecessors, (23), 2 states have call successors, (23) Word has length 190 [2025-03-16 18:47:15,177 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2025-03-16 18:47:15,743 INFO L225 Difference]: With dead ends: 137940 [2025-03-16 18:47:15,743 INFO L226 Difference]: Without dead ends: 137623 [2025-03-16 18:47:15,823 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2025-03-16 18:47:15,824 INFO L435 NwaCegarLoop]: 840 mSDtfsCounter, 138 mSDsluCounter, 830 mSDsCounter, 0 mSdLazyCounter, 4 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 155 SdHoareTripleChecker+Valid, 1670 SdHoareTripleChecker+Invalid, 4 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 4 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2025-03-16 18:47:15,824 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [155 Valid, 1670 Invalid, 4 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 4 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2025-03-16 18:47:15,922 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 137623 states. [2025-03-16 18:47:19,125 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 137623 to 137615. [2025-03-16 18:47:19,246 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 137615 states, 118916 states have (on average 1.573362709811968) internal successors, (187098), 118931 states have internal predecessors, (187098), 18650 states have call successors, (18650), 44 states have call predecessors, (18650), 48 states have return successors, (20841), 18648 states have call predecessors, (20841), 18649 states have call successors, (20841) [2025-03-16 18:47:19,609 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 137615 states to 137615 states and 226589 transitions. [2025-03-16 18:47:19,642 INFO L78 Accepts]: Start accepts. Automaton has 137615 states and 226589 transitions. Word has length 190 [2025-03-16 18:47:19,642 INFO L84 Accepts]: Finished accepts. word is rejected. [2025-03-16 18:47:19,642 INFO L471 AbstractCegarLoop]: Abstraction has 137615 states and 226589 transitions. [2025-03-16 18:47:19,643 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 37.333333333333336) internal successors, (112), 3 states have internal predecessors, (112), 2 states have call successors, (28), 2 states have call predecessors, (28), 1 states have return successors, (23), 2 states have call predecessors, (23), 2 states have call successors, (23) [2025-03-16 18:47:19,643 INFO L276 IsEmpty]: Start isEmpty. Operand 137615 states and 226589 transitions. [2025-03-16 18:47:19,681 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 192 [2025-03-16 18:47:19,681 INFO L210 NwaCegarLoop]: Found error trace [2025-03-16 18:47:19,681 INFO L218 NwaCegarLoop]: trace histogram [8, 8, 3, 3, 3, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-16 18:47:19,681 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable22 [2025-03-16 18:47:19,681 INFO L396 AbstractCegarLoop]: === Iteration 24 === Targeting outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION === [outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2025-03-16 18:47:19,682 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-16 18:47:19,682 INFO L85 PathProgramCache]: Analyzing trace with hash 1471224412, now seen corresponding path program 1 times [2025-03-16 18:47:19,682 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-16 18:47:19,682 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1759904172] [2025-03-16 18:47:19,682 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-16 18:47:19,682 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-16 18:47:19,698 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 191 statements into 1 equivalence classes. [2025-03-16 18:47:19,709 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 191 of 191 statements. [2025-03-16 18:47:19,709 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-16 18:47:19,709 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-16 18:47:19,969 INFO L134 CoverageAnalysis]: Checked inductivity of 114 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 114 trivial. 0 not checked. [2025-03-16 18:47:19,970 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-16 18:47:19,970 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1759904172] [2025-03-16 18:47:19,970 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1759904172] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-16 18:47:19,970 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-16 18:47:19,970 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [14] imperfect sequences [] total 14 [2025-03-16 18:47:19,970 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2140839742] [2025-03-16 18:47:19,970 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-16 18:47:19,971 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 14 states [2025-03-16 18:47:19,971 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-03-16 18:47:19,971 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 14 interpolants. [2025-03-16 18:47:19,971 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=25, Invalid=157, Unknown=0, NotChecked=0, Total=182 [2025-03-16 18:47:19,972 INFO L87 Difference]: Start difference. First operand 137615 states and 226589 transitions. Second operand has 14 states, 12 states have (on average 9.416666666666666) internal successors, (113), 12 states have internal predecessors, (113), 7 states have call successors, (28), 4 states have call predecessors, (28), 4 states have return successors, (23), 7 states have call predecessors, (23), 7 states have call successors, (23) [2025-03-16 18:47:27,145 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-03-16 18:47:27,145 INFO L93 Difference]: Finished difference Result 274286 states and 457099 transitions. [2025-03-16 18:47:27,146 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 26 states. [2025-03-16 18:47:27,146 INFO L78 Accepts]: Start accepts. Automaton has has 14 states, 12 states have (on average 9.416666666666666) internal successors, (113), 12 states have internal predecessors, (113), 7 states have call successors, (28), 4 states have call predecessors, (28), 4 states have return successors, (23), 7 states have call predecessors, (23), 7 states have call successors, (23) Word has length 191 [2025-03-16 18:47:27,146 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2025-03-16 18:47:28,288 INFO L225 Difference]: With dead ends: 274286 [2025-03-16 18:47:28,289 INFO L226 Difference]: Without dead ends: 273975 [2025-03-16 18:47:28,384 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 37 GetRequests, 7 SyntacticMatches, 0 SemanticMatches, 30 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 125 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=159, Invalid=833, Unknown=0, NotChecked=0, Total=992 [2025-03-16 18:47:28,384 INFO L435 NwaCegarLoop]: 985 mSDtfsCounter, 2065 mSDsluCounter, 9655 mSDsCounter, 0 mSdLazyCounter, 2250 mSolverCounterSat, 764 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2065 SdHoareTripleChecker+Valid, 10640 SdHoareTripleChecker+Invalid, 3014 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 764 IncrementalHoareTripleChecker+Valid, 2250 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.3s IncrementalHoareTripleChecker+Time [2025-03-16 18:47:28,384 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [2065 Valid, 10640 Invalid, 3014 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [764 Valid, 2250 Invalid, 0 Unknown, 0 Unchecked, 1.3s Time] [2025-03-16 18:47:28,565 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 273975 states.