./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/email_spec4_productSimulator.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 6497de01 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f9ad7185-4106-4d64-9266-9d286afa45e8/bin/uautomizer-verify-LYvppIcaGC/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f9ad7185-4106-4d64-9266-9d286afa45e8/bin/uautomizer-verify-LYvppIcaGC/plugins/org.eclipse.equinox.launcher_1.6.800.v20240513-1750.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f9ad7185-4106-4d64-9266-9d286afa45e8/bin/uautomizer-verify-LYvppIcaGC/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f9ad7185-4106-4d64-9266-9d286afa45e8/bin/uautomizer-verify-LYvppIcaGC/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/email_spec4_productSimulator.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f9ad7185-4106-4d64-9266-9d286afa45e8/bin/uautomizer-verify-LYvppIcaGC/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f9ad7185-4106-4d64-9266-9d286afa45e8/bin/uautomizer-verify-LYvppIcaGC --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash cf397912a53dab4d44f4df9c274fc7c69b1023a0a0a29a356bc73a744537daa6 --- Real Ultimate output --- This is Ultimate 0.3.0-dev-6497de0 [2024-11-24 00:43:35,696 INFO L188 SettingsManager]: Resetting all preferences to default values... [2024-11-24 00:43:35,767 INFO L114 SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f9ad7185-4106-4d64-9266-9d286afa45e8/bin/uautomizer-verify-LYvppIcaGC/config/svcomp-Reach-32bit-Automizer_Default.epf [2024-11-24 00:43:35,774 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2024-11-24 00:43:35,774 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2024-11-24 00:43:35,803 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2024-11-24 00:43:35,803 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2024-11-24 00:43:35,803 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2024-11-24 00:43:35,804 INFO L151 SettingsManager]: Preferences of Boogie Preprocessor differ from their defaults: [2024-11-24 00:43:35,804 INFO L153 SettingsManager]: * Use memory slicer=true [2024-11-24 00:43:35,804 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2024-11-24 00:43:35,804 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2024-11-24 00:43:35,805 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2024-11-24 00:43:35,805 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2024-11-24 00:43:35,805 INFO L153 SettingsManager]: * Use SBE=true [2024-11-24 00:43:35,805 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2024-11-24 00:43:35,805 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2024-11-24 00:43:35,805 INFO L153 SettingsManager]: * sizeof long=4 [2024-11-24 00:43:35,807 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2024-11-24 00:43:35,807 INFO L153 SettingsManager]: * sizeof POINTER=4 [2024-11-24 00:43:35,807 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2024-11-24 00:43:35,807 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2024-11-24 00:43:35,807 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2024-11-24 00:43:35,807 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2024-11-24 00:43:35,807 INFO L153 SettingsManager]: * sizeof long double=12 [2024-11-24 00:43:35,807 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2024-11-24 00:43:35,807 INFO L153 SettingsManager]: * Behaviour of calls to undefined functions=OVERAPPROXIMATE_BEHAVIOUR [2024-11-24 00:43:35,808 INFO L153 SettingsManager]: * Use constant arrays=true [2024-11-24 00:43:35,808 INFO L151 SettingsManager]: Preferences of IcfgBuilder differ from their defaults: [2024-11-24 00:43:35,808 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2024-11-24 00:43:35,808 INFO L153 SettingsManager]: * Only consider context switches at boundaries of atomic blocks=true [2024-11-24 00:43:35,808 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2024-11-24 00:43:35,808 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2024-11-24 00:43:35,808 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2024-11-24 00:43:35,808 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2024-11-24 00:43:35,808 INFO L153 SettingsManager]: * Only consider context switches at boundaries of atomic blocks=true [2024-11-24 00:43:35,809 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2024-11-24 00:43:35,809 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2024-11-24 00:43:35,809 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2024-11-24 00:43:35,809 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2024-11-24 00:43:35,809 INFO L153 SettingsManager]: * Compute procedure contracts=false [2024-11-24 00:43:35,809 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopHeads [2024-11-24 00:43:35,809 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2024-11-24 00:43:35,809 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2024-11-24 00:43:35,809 INFO L153 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2024-11-24 00:43:35,810 INFO L153 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2024-11-24 00:43:35,810 INFO L153 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2024-11-24 00:43:35,810 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2024-11-24 00:43:35,810 INFO L153 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f9ad7185-4106-4d64-9266-9d286afa45e8/bin/uautomizer-verify-LYvppIcaGC Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> cf397912a53dab4d44f4df9c274fc7c69b1023a0a0a29a356bc73a744537daa6 [2024-11-24 00:43:36,131 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2024-11-24 00:43:36,143 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2024-11-24 00:43:36,146 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2024-11-24 00:43:36,151 INFO L270 PluginConnector]: Initializing CDTParser... [2024-11-24 00:43:36,152 INFO L274 PluginConnector]: CDTParser initialized [2024-11-24 00:43:36,153 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f9ad7185-4106-4d64-9266-9d286afa45e8/bin/uautomizer-verify-LYvppIcaGC/../../sv-benchmarks/c/product-lines/email_spec4_productSimulator.cil.c [2024-11-24 00:43:39,230 INFO L533 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f9ad7185-4106-4d64-9266-9d286afa45e8/bin/uautomizer-verify-LYvppIcaGC/data/6436578e8/79544bc772344547b319dc6a6a48cd6d/FLAG1d89b411d [2024-11-24 00:43:39,765 INFO L384 CDTParser]: Found 1 translation units. [2024-11-24 00:43:39,765 INFO L180 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f9ad7185-4106-4d64-9266-9d286afa45e8/sv-benchmarks/c/product-lines/email_spec4_productSimulator.cil.c [2024-11-24 00:43:39,792 INFO L427 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f9ad7185-4106-4d64-9266-9d286afa45e8/bin/uautomizer-verify-LYvppIcaGC/data/6436578e8/79544bc772344547b319dc6a6a48cd6d/FLAG1d89b411d [2024-11-24 00:43:39,810 INFO L435 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f9ad7185-4106-4d64-9266-9d286afa45e8/bin/uautomizer-verify-LYvppIcaGC/data/6436578e8/79544bc772344547b319dc6a6a48cd6d [2024-11-24 00:43:39,813 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2024-11-24 00:43:39,814 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2024-11-24 00:43:39,816 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2024-11-24 00:43:39,816 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2024-11-24 00:43:39,821 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2024-11-24 00:43:39,822 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 24.11 12:43:39" (1/1) ... [2024-11-24 00:43:39,823 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@380d612d and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 24.11 12:43:39, skipping insertion in model container [2024-11-24 00:43:39,824 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 24.11 12:43:39" (1/1) ... [2024-11-24 00:43:39,899 INFO L175 MainTranslator]: Built tables and reachable declarations [2024-11-24 00:43:40,448 WARN L250 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f9ad7185-4106-4d64-9266-9d286afa45e8/sv-benchmarks/c/product-lines/email_spec4_productSimulator.cil.c[18883,18896] [2024-11-24 00:43:40,847 INFO L210 PostProcessor]: Analyzing one entry point: main [2024-11-24 00:43:40,871 INFO L200 MainTranslator]: Completed pre-run [2024-11-24 00:43:40,884 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [48] [2024-11-24 00:43:40,886 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Util.i","") [335] [2024-11-24 00:43:40,886 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Client.i","") [353] [2024-11-24 00:43:40,886 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [938] [2024-11-24 00:43:40,887 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"ClientLib.i","") [947] [2024-11-24 00:43:40,887 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [2018] [2024-11-24 00:43:40,887 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"EmailLib.i","") [2128] [2024-11-24 00:43:40,889 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [2527] [2024-11-24 00:43:40,890 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Email.i","") [2876] [2024-11-24 00:43:40,890 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [3080] [2024-11-24 00:43:40,890 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"SignForward_spec.i","") [3446] [2024-11-24 00:43:40,956 WARN L250 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f9ad7185-4106-4d64-9266-9d286afa45e8/sv-benchmarks/c/product-lines/email_spec4_productSimulator.cil.c[18883,18896] [2024-11-24 00:43:41,057 INFO L210 PostProcessor]: Analyzing one entry point: main [2024-11-24 00:43:41,101 INFO L204 MainTranslator]: Completed translation [2024-11-24 00:43:41,101 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 24.11 12:43:41 WrapperNode [2024-11-24 00:43:41,102 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2024-11-24 00:43:41,103 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2024-11-24 00:43:41,103 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2024-11-24 00:43:41,103 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2024-11-24 00:43:41,111 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 24.11 12:43:41" (1/1) ... [2024-11-24 00:43:41,151 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 24.11 12:43:41" (1/1) ... [2024-11-24 00:43:41,230 INFO L138 Inliner]: procedures = 151, calls = 263, calls flagged for inlining = 67, calls inlined = 64, statements flattened = 1316 [2024-11-24 00:43:41,230 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2024-11-24 00:43:41,231 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2024-11-24 00:43:41,231 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2024-11-24 00:43:41,231 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2024-11-24 00:43:41,243 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 24.11 12:43:41" (1/1) ... [2024-11-24 00:43:41,243 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 24.11 12:43:41" (1/1) ... [2024-11-24 00:43:41,252 INFO L184 PluginConnector]: Executing the observer MemorySlicer from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 24.11 12:43:41" (1/1) ... [2024-11-24 00:43:41,318 INFO L175 MemorySlicer]: Split 14 memory accesses to 4 slices as follows [2, 4, 4, 4]. 29 percent of accesses are in the largest equivalence class. The 14 initializations are split as follows [2, 4, 4, 4]. The 0 writes are split as follows [0, 0, 0, 0]. [2024-11-24 00:43:41,318 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 24.11 12:43:41" (1/1) ... [2024-11-24 00:43:41,318 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 24.11 12:43:41" (1/1) ... [2024-11-24 00:43:41,390 INFO L184 PluginConnector]: Executing the observer ReplaceArrayAssignments from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 24.11 12:43:41" (1/1) ... [2024-11-24 00:43:41,393 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 24.11 12:43:41" (1/1) ... [2024-11-24 00:43:41,405 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 24.11 12:43:41" (1/1) ... [2024-11-24 00:43:41,412 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 24.11 12:43:41" (1/1) ... [2024-11-24 00:43:41,417 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 24.11 12:43:41" (1/1) ... [2024-11-24 00:43:41,437 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2024-11-24 00:43:41,438 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2024-11-24 00:43:41,438 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2024-11-24 00:43:41,438 INFO L274 PluginConnector]: RCFGBuilder initialized [2024-11-24 00:43:41,439 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 24.11 12:43:41" (1/1) ... [2024-11-24 00:43:41,453 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2024-11-24 00:43:41,488 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f9ad7185-4106-4d64-9266-9d286afa45e8/bin/uautomizer-verify-LYvppIcaGC/z3 [2024-11-24 00:43:41,506 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f9ad7185-4106-4d64-9266-9d286afa45e8/bin/uautomizer-verify-LYvppIcaGC/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (exit command is (exit), workingDir is null) [2024-11-24 00:43:41,511 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f9ad7185-4106-4d64-9266-9d286afa45e8/bin/uautomizer-verify-LYvppIcaGC/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (1)] Waiting until timeout for monitored process [2024-11-24 00:43:41,544 INFO L130 BoogieDeclarations]: Found specification of procedure getClientPrivateKey [2024-11-24 00:43:41,545 INFO L138 BoogieDeclarations]: Found implementation of procedure getClientPrivateKey [2024-11-24 00:43:41,545 INFO L130 BoogieDeclarations]: Found specification of procedure setup_chuck__before__Keys [2024-11-24 00:43:41,545 INFO L138 BoogieDeclarations]: Found implementation of procedure setup_chuck__before__Keys [2024-11-24 00:43:41,546 INFO L130 BoogieDeclarations]: Found specification of procedure outgoing__before__Sign [2024-11-24 00:43:41,546 INFO L138 BoogieDeclarations]: Found implementation of procedure outgoing__before__Sign [2024-11-24 00:43:41,546 INFO L130 BoogieDeclarations]: Found specification of procedure getClientAddressBookSize [2024-11-24 00:43:41,546 INFO L138 BoogieDeclarations]: Found implementation of procedure getClientAddressBookSize [2024-11-24 00:43:41,546 INFO L130 BoogieDeclarations]: Found specification of procedure setEmailEncryptionKey [2024-11-24 00:43:41,548 INFO L138 BoogieDeclarations]: Found implementation of procedure setEmailEncryptionKey [2024-11-24 00:43:41,548 INFO L130 BoogieDeclarations]: Found specification of procedure setClientAddressBookAddress [2024-11-24 00:43:41,548 INFO L138 BoogieDeclarations]: Found implementation of procedure setClientAddressBookAddress [2024-11-24 00:43:41,548 INFO L130 BoogieDeclarations]: Found specification of procedure getEmailEncryptionKey [2024-11-24 00:43:41,548 INFO L138 BoogieDeclarations]: Found implementation of procedure getEmailEncryptionKey [2024-11-24 00:43:41,549 INFO L130 BoogieDeclarations]: Found specification of procedure printMail__before__Verify [2024-11-24 00:43:41,549 INFO L138 BoogieDeclarations]: Found implementation of procedure printMail__before__Verify [2024-11-24 00:43:41,549 INFO L130 BoogieDeclarations]: Found specification of procedure getEmailTo [2024-11-24 00:43:41,549 INFO L138 BoogieDeclarations]: Found implementation of procedure getEmailTo [2024-11-24 00:43:41,549 INFO L130 BoogieDeclarations]: Found specification of procedure setup_bob__before__Keys [2024-11-24 00:43:41,552 INFO L138 BoogieDeclarations]: Found implementation of procedure setup_bob__before__Keys [2024-11-24 00:43:41,553 INFO L130 BoogieDeclarations]: Found specification of procedure setEmailFrom [2024-11-24 00:43:41,553 INFO L138 BoogieDeclarations]: Found implementation of procedure setEmailFrom [2024-11-24 00:43:41,553 INFO L130 BoogieDeclarations]: Found specification of procedure isReadable [2024-11-24 00:43:41,553 INFO L138 BoogieDeclarations]: Found implementation of procedure isReadable [2024-11-24 00:43:41,553 INFO L130 BoogieDeclarations]: Found specification of procedure createClientKeyringEntry [2024-11-24 00:43:41,553 INFO L138 BoogieDeclarations]: Found implementation of procedure createClientKeyringEntry [2024-11-24 00:43:41,553 INFO L130 BoogieDeclarations]: Found specification of procedure incoming__before__Decrypt [2024-11-24 00:43:41,553 INFO L138 BoogieDeclarations]: Found implementation of procedure incoming__before__Decrypt [2024-11-24 00:43:41,553 INFO L130 BoogieDeclarations]: Found specification of procedure outgoing__before__Encrypt [2024-11-24 00:43:41,553 INFO L138 BoogieDeclarations]: Found implementation of procedure outgoing__before__Encrypt [2024-11-24 00:43:41,554 INFO L130 BoogieDeclarations]: Found specification of procedure setEmailIsEncrypted [2024-11-24 00:43:41,554 INFO L138 BoogieDeclarations]: Found implementation of procedure setEmailIsEncrypted [2024-11-24 00:43:41,554 INFO L130 BoogieDeclarations]: Found specification of procedure getEmailSignKey [2024-11-24 00:43:41,554 INFO L138 BoogieDeclarations]: Found implementation of procedure getEmailSignKey [2024-11-24 00:43:41,554 INFO L130 BoogieDeclarations]: Found specification of procedure chuckKeyAdd [2024-11-24 00:43:41,554 INFO L138 BoogieDeclarations]: Found implementation of procedure chuckKeyAdd [2024-11-24 00:43:41,554 INFO L130 BoogieDeclarations]: Found specification of procedure incoming__before__Forward [2024-11-24 00:43:41,554 INFO L138 BoogieDeclarations]: Found implementation of procedure incoming__before__Forward [2024-11-24 00:43:41,554 INFO L130 BoogieDeclarations]: Found specification of procedure getEmailFrom [2024-11-24 00:43:41,554 INFO L138 BoogieDeclarations]: Found implementation of procedure getEmailFrom [2024-11-24 00:43:41,554 INFO L130 BoogieDeclarations]: Found specification of procedure queue [2024-11-24 00:43:41,554 INFO L138 BoogieDeclarations]: Found implementation of procedure queue [2024-11-24 00:43:41,554 INFO L130 BoogieDeclarations]: Found specification of procedure setClientId [2024-11-24 00:43:41,554 INFO L138 BoogieDeclarations]: Found implementation of procedure setClientId [2024-11-24 00:43:41,554 INFO L130 BoogieDeclarations]: Found specification of procedure isReadable__before__Encrypt [2024-11-24 00:43:41,555 INFO L138 BoogieDeclarations]: Found implementation of procedure isReadable__before__Encrypt [2024-11-24 00:43:41,555 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2024-11-24 00:43:41,555 INFO L130 BoogieDeclarations]: Found specification of procedure isSigned [2024-11-24 00:43:41,555 INFO L138 BoogieDeclarations]: Found implementation of procedure isSigned [2024-11-24 00:43:41,555 INFO L130 BoogieDeclarations]: Found specification of procedure isKeyPairValid [2024-11-24 00:43:41,555 INFO L138 BoogieDeclarations]: Found implementation of procedure isKeyPairValid [2024-11-24 00:43:41,555 INFO L130 BoogieDeclarations]: Found specification of procedure outgoing__before__AddressBook [2024-11-24 00:43:41,555 INFO L138 BoogieDeclarations]: Found implementation of procedure outgoing__before__AddressBook [2024-11-24 00:43:41,555 INFO L130 BoogieDeclarations]: Found specification of procedure printMail__before__Encrypt [2024-11-24 00:43:41,555 INFO L138 BoogieDeclarations]: Found implementation of procedure printMail__before__Encrypt [2024-11-24 00:43:41,555 INFO L130 BoogieDeclarations]: Found specification of procedure incoming__before__AutoResponder [2024-11-24 00:43:41,555 INFO L138 BoogieDeclarations]: Found implementation of procedure incoming__before__AutoResponder [2024-11-24 00:43:41,555 INFO L130 BoogieDeclarations]: Found specification of procedure setClientAddressBookSize [2024-11-24 00:43:41,555 INFO L138 BoogieDeclarations]: Found implementation of procedure setClientAddressBookSize [2024-11-24 00:43:41,556 INFO L130 BoogieDeclarations]: Found specification of procedure setClientKeyringUser [2024-11-24 00:43:41,556 INFO L138 BoogieDeclarations]: Found implementation of procedure setClientKeyringUser [2024-11-24 00:43:41,556 INFO L130 BoogieDeclarations]: Found specification of procedure setClientKeyringPublicKey [2024-11-24 00:43:41,556 INFO L138 BoogieDeclarations]: Found implementation of procedure setClientKeyringPublicKey [2024-11-24 00:43:41,556 INFO L130 BoogieDeclarations]: Found specification of procedure outgoing [2024-11-24 00:43:41,556 INFO L138 BoogieDeclarations]: Found implementation of procedure outgoing [2024-11-24 00:43:41,556 INFO L130 BoogieDeclarations]: Found specification of procedure findPublicKey [2024-11-24 00:43:41,556 INFO L138 BoogieDeclarations]: Found implementation of procedure findPublicKey [2024-11-24 00:43:41,556 INFO L130 BoogieDeclarations]: Found specification of procedure sendEmail [2024-11-24 00:43:41,556 INFO L138 BoogieDeclarations]: Found implementation of procedure sendEmail [2024-11-24 00:43:41,556 INFO L130 BoogieDeclarations]: Found specification of procedure isEncrypted [2024-11-24 00:43:41,556 INFO L138 BoogieDeclarations]: Found implementation of procedure isEncrypted [2024-11-24 00:43:41,556 INFO L130 BoogieDeclarations]: Found specification of procedure setup_rjh__before__Keys [2024-11-24 00:43:41,556 INFO L138 BoogieDeclarations]: Found implementation of procedure setup_rjh__before__Keys [2024-11-24 00:43:41,560 INFO L130 BoogieDeclarations]: Found specification of procedure incoming__before__Verify [2024-11-24 00:43:41,561 INFO L138 BoogieDeclarations]: Found implementation of procedure incoming__before__Verify [2024-11-24 00:43:41,561 INFO L130 BoogieDeclarations]: Found specification of procedure setClientPrivateKey [2024-11-24 00:43:41,561 INFO L138 BoogieDeclarations]: Found implementation of procedure setClientPrivateKey [2024-11-24 00:43:41,561 INFO L130 BoogieDeclarations]: Found specification of procedure setEmailTo [2024-11-24 00:43:41,561 INFO L138 BoogieDeclarations]: Found implementation of procedure setEmailTo [2024-11-24 00:43:41,561 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#0 [2024-11-24 00:43:41,561 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#1 [2024-11-24 00:43:41,561 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#2 [2024-11-24 00:43:41,561 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#3 [2024-11-24 00:43:41,562 INFO L130 BoogieDeclarations]: Found specification of procedure generateKeyPair [2024-11-24 00:43:41,562 INFO L138 BoogieDeclarations]: Found implementation of procedure generateKeyPair [2024-11-24 00:43:41,562 INFO L130 BoogieDeclarations]: Found specification of procedure printMail__before__Sign [2024-11-24 00:43:41,562 INFO L138 BoogieDeclarations]: Found implementation of procedure printMail__before__Sign [2024-11-24 00:43:41,562 INFO L130 BoogieDeclarations]: Found specification of procedure select_one [2024-11-24 00:43:41,562 INFO L138 BoogieDeclarations]: Found implementation of procedure select_one [2024-11-24 00:43:41,562 INFO L130 BoogieDeclarations]: Found specification of procedure getClientAddressBookAddress [2024-11-24 00:43:41,562 INFO L138 BoogieDeclarations]: Found implementation of procedure getClientAddressBookAddress [2024-11-24 00:43:41,563 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2024-11-24 00:43:41,563 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2024-11-24 00:43:41,956 INFO L234 CfgBuilder]: Building ICFG [2024-11-24 00:43:41,961 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2024-11-24 00:43:44,039 INFO L? ?]: Removed 627 outVars from TransFormulas that were not future-live. [2024-11-24 00:43:44,039 INFO L283 CfgBuilder]: Performing block encoding [2024-11-24 00:43:44,073 INFO L307 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2024-11-24 00:43:44,073 INFO L312 CfgBuilder]: Removed 2 assume(true) statements. [2024-11-24 00:43:44,074 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 24.11 12:43:44 BoogieIcfgContainer [2024-11-24 00:43:44,074 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2024-11-24 00:43:44,077 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2024-11-24 00:43:44,077 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2024-11-24 00:43:44,082 INFO L274 PluginConnector]: TraceAbstraction initialized [2024-11-24 00:43:44,083 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 24.11 12:43:39" (1/3) ... [2024-11-24 00:43:44,083 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@723eca7b and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 24.11 12:43:44, skipping insertion in model container [2024-11-24 00:43:44,083 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 24.11 12:43:41" (2/3) ... [2024-11-24 00:43:44,084 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@723eca7b and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 24.11 12:43:44, skipping insertion in model container [2024-11-24 00:43:44,084 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 24.11 12:43:44" (3/3) ... [2024-11-24 00:43:44,085 INFO L128 eAbstractionObserver]: Analyzing ICFG email_spec4_productSimulator.cil.c [2024-11-24 00:43:44,104 INFO L216 ceAbstractionStarter]: Automizer settings: Hoare:LoopHeads NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2024-11-24 00:43:44,110 INFO L151 ceAbstractionStarter]: Applying trace abstraction to ICFG email_spec4_productSimulator.cil.c that has 44 procedures, 602 locations, 1 initial locations, 1 loop locations, and 1 error locations. [2024-11-24 00:43:44,231 INFO L332 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2024-11-24 00:43:44,251 INFO L333 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopHeads, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@34ea637f, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2024-11-24 00:43:44,251 INFO L334 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2024-11-24 00:43:44,261 INFO L276 IsEmpty]: Start isEmpty. Operand has 602 states, 447 states have (on average 1.516778523489933) internal successors, (678), 467 states have internal predecessors, (678), 110 states have call successors, (110), 43 states have call predecessors, (110), 43 states have return successors, (110), 109 states have call predecessors, (110), 110 states have call successors, (110) [2024-11-24 00:43:44,293 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 134 [2024-11-24 00:43:44,293 INFO L210 NwaCegarLoop]: Found error trace [2024-11-24 00:43:44,294 INFO L218 NwaCegarLoop]: trace histogram [8, 8, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-24 00:43:44,294 INFO L396 AbstractCegarLoop]: === Iteration 1 === Targeting outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION === [outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-24 00:43:44,299 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-24 00:43:44,299 INFO L85 PathProgramCache]: Analyzing trace with hash -1187125968, now seen corresponding path program 1 times [2024-11-24 00:43:44,308 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-24 00:43:44,308 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1059248797] [2024-11-24 00:43:44,309 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-24 00:43:44,309 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-24 00:43:44,626 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-24 00:43:44,954 INFO L134 CoverageAnalysis]: Checked inductivity of 100 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 100 trivial. 0 not checked. [2024-11-24 00:43:44,955 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-24 00:43:44,955 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1059248797] [2024-11-24 00:43:44,956 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1059248797] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-24 00:43:44,960 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-24 00:43:44,960 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2024-11-24 00:43:44,962 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1683394249] [2024-11-24 00:43:44,963 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-24 00:43:44,968 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2024-11-24 00:43:44,969 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-24 00:43:44,995 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2024-11-24 00:43:44,995 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2024-11-24 00:43:45,000 INFO L87 Difference]: Start difference. First operand has 602 states, 447 states have (on average 1.516778523489933) internal successors, (678), 467 states have internal predecessors, (678), 110 states have call successors, (110), 43 states have call predecessors, (110), 43 states have return successors, (110), 109 states have call predecessors, (110), 110 states have call successors, (110) Second operand has 2 states, 2 states have (on average 33.5) internal successors, (67), 2 states have internal predecessors, (67), 2 states have call successors, (24), 2 states have call predecessors, (24), 1 states have return successors, (19), 2 states have call predecessors, (19), 2 states have call successors, (19) [2024-11-24 00:43:45,102 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-24 00:43:45,103 INFO L93 Difference]: Finished difference Result 936 states and 1376 transitions. [2024-11-24 00:43:45,104 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2024-11-24 00:43:45,106 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 33.5) internal successors, (67), 2 states have internal predecessors, (67), 2 states have call successors, (24), 2 states have call predecessors, (24), 1 states have return successors, (19), 2 states have call predecessors, (19), 2 states have call successors, (19) Word has length 133 [2024-11-24 00:43:45,107 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-24 00:43:45,126 INFO L225 Difference]: With dead ends: 936 [2024-11-24 00:43:45,127 INFO L226 Difference]: Without dead ends: 595 [2024-11-24 00:43:45,134 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2024-11-24 00:43:45,138 INFO L435 NwaCegarLoop]: 894 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 894 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-11-24 00:43:45,139 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 894 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-11-24 00:43:45,159 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 595 states. [2024-11-24 00:43:45,263 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 595 to 595. [2024-11-24 00:43:45,268 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 595 states, 441 states have (on average 1.5124716553287982) internal successors, (667), 460 states have internal predecessors, (667), 110 states have call successors, (110), 43 states have call predecessors, (110), 43 states have return successors, (109), 108 states have call predecessors, (109), 109 states have call successors, (109) [2024-11-24 00:43:45,287 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 595 states to 595 states and 886 transitions. [2024-11-24 00:43:45,290 INFO L78 Accepts]: Start accepts. Automaton has 595 states and 886 transitions. Word has length 133 [2024-11-24 00:43:45,294 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-24 00:43:45,294 INFO L471 AbstractCegarLoop]: Abstraction has 595 states and 886 transitions. [2024-11-24 00:43:45,295 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 33.5) internal successors, (67), 2 states have internal predecessors, (67), 2 states have call successors, (24), 2 states have call predecessors, (24), 1 states have return successors, (19), 2 states have call predecessors, (19), 2 states have call successors, (19) [2024-11-24 00:43:45,295 INFO L276 IsEmpty]: Start isEmpty. Operand 595 states and 886 transitions. [2024-11-24 00:43:45,305 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 134 [2024-11-24 00:43:45,308 INFO L210 NwaCegarLoop]: Found error trace [2024-11-24 00:43:45,308 INFO L218 NwaCegarLoop]: trace histogram [8, 8, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-24 00:43:45,309 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2024-11-24 00:43:45,309 INFO L396 AbstractCegarLoop]: === Iteration 2 === Targeting outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION === [outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-24 00:43:45,309 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-24 00:43:45,310 INFO L85 PathProgramCache]: Analyzing trace with hash 1664600554, now seen corresponding path program 1 times [2024-11-24 00:43:45,310 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-24 00:43:45,310 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2114997338] [2024-11-24 00:43:45,310 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-24 00:43:45,310 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-24 00:43:45,437 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-24 00:43:45,963 INFO L134 CoverageAnalysis]: Checked inductivity of 100 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 100 trivial. 0 not checked. [2024-11-24 00:43:45,964 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-24 00:43:45,964 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2114997338] [2024-11-24 00:43:45,964 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2114997338] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-24 00:43:45,964 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-24 00:43:45,964 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-11-24 00:43:45,964 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1224270894] [2024-11-24 00:43:45,964 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-24 00:43:45,967 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2024-11-24 00:43:45,967 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-24 00:43:45,970 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-11-24 00:43:45,970 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-11-24 00:43:45,970 INFO L87 Difference]: Start difference. First operand 595 states and 886 transitions. Second operand has 5 states, 5 states have (on average 13.4) internal successors, (67), 5 states have internal predecessors, (67), 2 states have call successors, (24), 2 states have call predecessors, (24), 1 states have return successors, (19), 2 states have call predecessors, (19), 2 states have call successors, (19) [2024-11-24 00:43:46,120 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-24 00:43:46,120 INFO L93 Difference]: Finished difference Result 1154 states and 1716 transitions. [2024-11-24 00:43:46,121 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2024-11-24 00:43:46,121 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 13.4) internal successors, (67), 5 states have internal predecessors, (67), 2 states have call successors, (24), 2 states have call predecessors, (24), 1 states have return successors, (19), 2 states have call predecessors, (19), 2 states have call successors, (19) Word has length 133 [2024-11-24 00:43:46,122 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-24 00:43:46,133 INFO L225 Difference]: With dead ends: 1154 [2024-11-24 00:43:46,136 INFO L226 Difference]: Without dead ends: 595 [2024-11-24 00:43:46,140 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-11-24 00:43:46,143 INFO L435 NwaCegarLoop]: 884 mSDtfsCounter, 0 mSDsluCounter, 2640 mSDsCounter, 0 mSdLazyCounter, 13 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 3524 SdHoareTripleChecker+Invalid, 19 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 13 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-11-24 00:43:46,144 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 3524 Invalid, 19 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 13 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-11-24 00:43:46,146 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 595 states. [2024-11-24 00:43:46,244 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 595 to 595. [2024-11-24 00:43:46,247 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 595 states, 441 states have (on average 1.4965986394557824) internal successors, (660), 460 states have internal predecessors, (660), 110 states have call successors, (110), 43 states have call predecessors, (110), 43 states have return successors, (109), 108 states have call predecessors, (109), 109 states have call successors, (109) [2024-11-24 00:43:46,256 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 595 states to 595 states and 879 transitions. [2024-11-24 00:43:46,257 INFO L78 Accepts]: Start accepts. Automaton has 595 states and 879 transitions. Word has length 133 [2024-11-24 00:43:46,259 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-24 00:43:46,260 INFO L471 AbstractCegarLoop]: Abstraction has 595 states and 879 transitions. [2024-11-24 00:43:46,260 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 13.4) internal successors, (67), 5 states have internal predecessors, (67), 2 states have call successors, (24), 2 states have call predecessors, (24), 1 states have return successors, (19), 2 states have call predecessors, (19), 2 states have call successors, (19) [2024-11-24 00:43:46,260 INFO L276 IsEmpty]: Start isEmpty. Operand 595 states and 879 transitions. [2024-11-24 00:43:46,265 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 139 [2024-11-24 00:43:46,266 INFO L210 NwaCegarLoop]: Found error trace [2024-11-24 00:43:46,267 INFO L218 NwaCegarLoop]: trace histogram [8, 8, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-24 00:43:46,267 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2024-11-24 00:43:46,267 INFO L396 AbstractCegarLoop]: === Iteration 3 === Targeting outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION === [outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-24 00:43:46,268 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-24 00:43:46,268 INFO L85 PathProgramCache]: Analyzing trace with hash -591505953, now seen corresponding path program 1 times [2024-11-24 00:43:46,268 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-24 00:43:46,268 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [878837544] [2024-11-24 00:43:46,268 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-24 00:43:46,268 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-24 00:43:46,363 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-24 00:43:46,540 INFO L134 CoverageAnalysis]: Checked inductivity of 100 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 100 trivial. 0 not checked. [2024-11-24 00:43:46,541 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-24 00:43:46,542 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [878837544] [2024-11-24 00:43:46,542 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [878837544] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-24 00:43:46,542 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-24 00:43:46,542 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-24 00:43:46,542 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1162825827] [2024-11-24 00:43:46,542 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-24 00:43:46,543 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2024-11-24 00:43:46,543 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-24 00:43:46,543 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-11-24 00:43:46,544 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-24 00:43:46,547 INFO L87 Difference]: Start difference. First operand 595 states and 879 transitions. Second operand has 3 states, 3 states have (on average 24.0) internal successors, (72), 3 states have internal predecessors, (72), 3 states have call successors, (24), 2 states have call predecessors, (24), 1 states have return successors, (19), 3 states have call predecessors, (19), 3 states have call successors, (19) [2024-11-24 00:43:46,656 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-24 00:43:46,656 INFO L93 Difference]: Finished difference Result 1160 states and 1729 transitions. [2024-11-24 00:43:46,657 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-11-24 00:43:46,657 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 24.0) internal successors, (72), 3 states have internal predecessors, (72), 3 states have call successors, (24), 2 states have call predecessors, (24), 1 states have return successors, (19), 3 states have call predecessors, (19), 3 states have call successors, (19) Word has length 138 [2024-11-24 00:43:46,658 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-24 00:43:46,665 INFO L225 Difference]: With dead ends: 1160 [2024-11-24 00:43:46,667 INFO L226 Difference]: Without dead ends: 596 [2024-11-24 00:43:46,669 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-24 00:43:46,673 INFO L435 NwaCegarLoop]: 868 mSDtfsCounter, 843 mSDsluCounter, 18 mSDsCounter, 0 mSdLazyCounter, 6 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 843 SdHoareTripleChecker+Valid, 886 SdHoareTripleChecker+Invalid, 9 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 6 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-11-24 00:43:46,674 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [843 Valid, 886 Invalid, 9 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 6 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-11-24 00:43:46,675 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 596 states. [2024-11-24 00:43:46,729 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 596 to 596. [2024-11-24 00:43:46,731 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 596 states, 443 states have (on average 1.4853273137697518) internal successors, (658), 460 states have internal predecessors, (658), 108 states have call successors, (108), 44 states have call predecessors, (108), 44 states have return successors, (107), 106 states have call predecessors, (107), 107 states have call successors, (107) [2024-11-24 00:43:46,739 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 596 states to 596 states and 873 transitions. [2024-11-24 00:43:46,741 INFO L78 Accepts]: Start accepts. Automaton has 596 states and 873 transitions. Word has length 138 [2024-11-24 00:43:46,741 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-24 00:43:46,742 INFO L471 AbstractCegarLoop]: Abstraction has 596 states and 873 transitions. [2024-11-24 00:43:46,742 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 24.0) internal successors, (72), 3 states have internal predecessors, (72), 3 states have call successors, (24), 2 states have call predecessors, (24), 1 states have return successors, (19), 3 states have call predecessors, (19), 3 states have call successors, (19) [2024-11-24 00:43:46,742 INFO L276 IsEmpty]: Start isEmpty. Operand 596 states and 873 transitions. [2024-11-24 00:43:46,746 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 149 [2024-11-24 00:43:46,747 INFO L210 NwaCegarLoop]: Found error trace [2024-11-24 00:43:46,748 INFO L218 NwaCegarLoop]: trace histogram [8, 8, 3, 3, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-24 00:43:46,748 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2024-11-24 00:43:46,748 INFO L396 AbstractCegarLoop]: === Iteration 4 === Targeting outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION === [outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-24 00:43:46,749 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-24 00:43:46,749 INFO L85 PathProgramCache]: Analyzing trace with hash 1454152009, now seen corresponding path program 1 times [2024-11-24 00:43:46,749 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-24 00:43:46,749 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [517267112] [2024-11-24 00:43:46,749 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-24 00:43:46,749 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-24 00:43:46,819 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-24 00:43:46,945 INFO L134 CoverageAnalysis]: Checked inductivity of 104 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 104 trivial. 0 not checked. [2024-11-24 00:43:46,945 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-24 00:43:46,945 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [517267112] [2024-11-24 00:43:46,946 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [517267112] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-24 00:43:46,948 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-24 00:43:46,948 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-24 00:43:46,949 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1762413846] [2024-11-24 00:43:46,949 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-24 00:43:46,949 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2024-11-24 00:43:46,949 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-24 00:43:46,950 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-11-24 00:43:46,950 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-24 00:43:46,950 INFO L87 Difference]: Start difference. First operand 596 states and 873 transitions. Second operand has 3 states, 3 states have (on average 25.666666666666668) internal successors, (77), 3 states have internal predecessors, (77), 2 states have call successors, (25), 2 states have call predecessors, (25), 1 states have return successors, (20), 2 states have call predecessors, (20), 2 states have call successors, (20) [2024-11-24 00:43:47,045 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-24 00:43:47,047 INFO L93 Difference]: Finished difference Result 1154 states and 1708 transitions. [2024-11-24 00:43:47,047 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-11-24 00:43:47,047 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 25.666666666666668) internal successors, (77), 3 states have internal predecessors, (77), 2 states have call successors, (25), 2 states have call predecessors, (25), 1 states have return successors, (20), 2 states have call predecessors, (20), 2 states have call successors, (20) Word has length 148 [2024-11-24 00:43:47,048 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-24 00:43:47,053 INFO L225 Difference]: With dead ends: 1154 [2024-11-24 00:43:47,054 INFO L226 Difference]: Without dead ends: 594 [2024-11-24 00:43:47,057 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-24 00:43:47,058 INFO L435 NwaCegarLoop]: 861 mSDtfsCounter, 823 mSDsluCounter, 38 mSDsCounter, 0 mSdLazyCounter, 5 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 823 SdHoareTripleChecker+Valid, 899 SdHoareTripleChecker+Invalid, 7 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 5 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-11-24 00:43:47,059 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [823 Valid, 899 Invalid, 7 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 5 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-11-24 00:43:47,062 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 594 states. [2024-11-24 00:43:47,129 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 594 to 594. [2024-11-24 00:43:47,132 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 594 states, 443 states have (on average 1.4785553047404063) internal successors, (655), 458 states have internal predecessors, (655), 106 states have call successors, (106), 44 states have call predecessors, (106), 44 states have return successors, (105), 104 states have call predecessors, (105), 105 states have call successors, (105) [2024-11-24 00:43:47,137 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 594 states to 594 states and 866 transitions. [2024-11-24 00:43:47,139 INFO L78 Accepts]: Start accepts. Automaton has 594 states and 866 transitions. Word has length 148 [2024-11-24 00:43:47,140 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-24 00:43:47,140 INFO L471 AbstractCegarLoop]: Abstraction has 594 states and 866 transitions. [2024-11-24 00:43:47,140 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 25.666666666666668) internal successors, (77), 3 states have internal predecessors, (77), 2 states have call successors, (25), 2 states have call predecessors, (25), 1 states have return successors, (20), 2 states have call predecessors, (20), 2 states have call successors, (20) [2024-11-24 00:43:47,142 INFO L276 IsEmpty]: Start isEmpty. Operand 594 states and 866 transitions. [2024-11-24 00:43:47,147 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 150 [2024-11-24 00:43:47,147 INFO L210 NwaCegarLoop]: Found error trace [2024-11-24 00:43:47,148 INFO L218 NwaCegarLoop]: trace histogram [8, 8, 3, 3, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-24 00:43:47,148 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2024-11-24 00:43:47,148 INFO L396 AbstractCegarLoop]: === Iteration 5 === Targeting outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION === [outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-24 00:43:47,149 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-24 00:43:47,149 INFO L85 PathProgramCache]: Analyzing trace with hash 1248049528, now seen corresponding path program 1 times [2024-11-24 00:43:47,149 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-24 00:43:47,149 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [850496837] [2024-11-24 00:43:47,150 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-24 00:43:47,150 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-24 00:43:47,217 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-24 00:43:47,315 INFO L134 CoverageAnalysis]: Checked inductivity of 104 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 104 trivial. 0 not checked. [2024-11-24 00:43:47,315 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-24 00:43:47,315 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [850496837] [2024-11-24 00:43:47,315 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [850496837] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-24 00:43:47,315 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-24 00:43:47,315 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-24 00:43:47,316 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [985070061] [2024-11-24 00:43:47,316 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-24 00:43:47,316 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2024-11-24 00:43:47,317 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-24 00:43:47,318 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-11-24 00:43:47,318 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-24 00:43:47,318 INFO L87 Difference]: Start difference. First operand 594 states and 866 transitions. Second operand has 3 states, 3 states have (on average 26.0) internal successors, (78), 3 states have internal predecessors, (78), 2 states have call successors, (25), 2 states have call predecessors, (25), 1 states have return successors, (20), 2 states have call predecessors, (20), 2 states have call successors, (20) [2024-11-24 00:43:47,440 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-24 00:43:47,441 INFO L93 Difference]: Finished difference Result 1145 states and 1674 transitions. [2024-11-24 00:43:47,441 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-11-24 00:43:47,441 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 26.0) internal successors, (78), 3 states have internal predecessors, (78), 2 states have call successors, (25), 2 states have call predecessors, (25), 1 states have return successors, (20), 2 states have call predecessors, (20), 2 states have call successors, (20) Word has length 149 [2024-11-24 00:43:47,442 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-24 00:43:47,452 INFO L225 Difference]: With dead ends: 1145 [2024-11-24 00:43:47,453 INFO L226 Difference]: Without dead ends: 597 [2024-11-24 00:43:47,456 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-24 00:43:47,457 INFO L435 NwaCegarLoop]: 841 mSDtfsCounter, 803 mSDsluCounter, 41 mSDsCounter, 0 mSdLazyCounter, 14 mSolverCounterSat, 11 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 803 SdHoareTripleChecker+Valid, 882 SdHoareTripleChecker+Invalid, 25 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 11 IncrementalHoareTripleChecker+Valid, 14 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-11-24 00:43:47,457 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [803 Valid, 882 Invalid, 25 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [11 Valid, 14 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-11-24 00:43:47,461 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 597 states. [2024-11-24 00:43:47,524 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 597 to 591. [2024-11-24 00:43:47,526 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 591 states, 443 states have (on average 1.4537246049661399) internal successors, (644), 453 states have internal predecessors, (644), 103 states have call successors, (103), 44 states have call predecessors, (103), 44 states have return successors, (102), 101 states have call predecessors, (102), 102 states have call successors, (102) [2024-11-24 00:43:47,532 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 591 states to 591 states and 849 transitions. [2024-11-24 00:43:47,534 INFO L78 Accepts]: Start accepts. Automaton has 591 states and 849 transitions. Word has length 149 [2024-11-24 00:43:47,534 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-24 00:43:47,535 INFO L471 AbstractCegarLoop]: Abstraction has 591 states and 849 transitions. [2024-11-24 00:43:47,535 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 26.0) internal successors, (78), 3 states have internal predecessors, (78), 2 states have call successors, (25), 2 states have call predecessors, (25), 1 states have return successors, (20), 2 states have call predecessors, (20), 2 states have call successors, (20) [2024-11-24 00:43:47,535 INFO L276 IsEmpty]: Start isEmpty. Operand 591 states and 849 transitions. [2024-11-24 00:43:47,540 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 168 [2024-11-24 00:43:47,540 INFO L210 NwaCegarLoop]: Found error trace [2024-11-24 00:43:47,540 INFO L218 NwaCegarLoop]: trace histogram [8, 8, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-24 00:43:47,540 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2024-11-24 00:43:47,541 INFO L396 AbstractCegarLoop]: === Iteration 6 === Targeting outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION === [outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-24 00:43:47,541 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-24 00:43:47,541 INFO L85 PathProgramCache]: Analyzing trace with hash 1736586693, now seen corresponding path program 1 times [2024-11-24 00:43:47,541 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-24 00:43:47,541 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1042980498] [2024-11-24 00:43:47,541 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-24 00:43:47,542 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-24 00:43:47,666 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-24 00:43:48,081 INFO L134 CoverageAnalysis]: Checked inductivity of 116 backedges. 3 proven. 3 refuted. 0 times theorem prover too weak. 110 trivial. 0 not checked. [2024-11-24 00:43:48,081 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-24 00:43:48,081 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1042980498] [2024-11-24 00:43:48,081 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1042980498] provided 0 perfect and 1 imperfect interpolant sequences [2024-11-24 00:43:48,081 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [257521338] [2024-11-24 00:43:48,082 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-24 00:43:48,082 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-11-24 00:43:48,083 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f9ad7185-4106-4d64-9266-9d286afa45e8/bin/uautomizer-verify-LYvppIcaGC/z3 [2024-11-24 00:43:48,087 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f9ad7185-4106-4d64-9266-9d286afa45e8/bin/uautomizer-verify-LYvppIcaGC/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-11-24 00:43:48,090 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f9ad7185-4106-4d64-9266-9d286afa45e8/bin/uautomizer-verify-LYvppIcaGC/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2024-11-24 00:43:48,646 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-24 00:43:48,653 INFO L256 TraceCheckSpWp]: Trace formula consists of 1356 conjuncts, 2 conjuncts are in the unsatisfiable core [2024-11-24 00:43:48,663 INFO L279 TraceCheckSpWp]: Computing forward predicates... [2024-11-24 00:43:48,726 INFO L134 CoverageAnalysis]: Checked inductivity of 116 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 116 trivial. 0 not checked. [2024-11-24 00:43:48,726 INFO L308 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2024-11-24 00:43:48,726 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [257521338] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-24 00:43:48,726 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2024-11-24 00:43:48,726 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [8] total 9 [2024-11-24 00:43:48,727 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [342368128] [2024-11-24 00:43:48,727 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-24 00:43:48,727 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2024-11-24 00:43:48,727 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-24 00:43:48,728 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-11-24 00:43:48,728 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=57, Unknown=0, NotChecked=0, Total=72 [2024-11-24 00:43:48,728 INFO L87 Difference]: Start difference. First operand 591 states and 849 transitions. Second operand has 3 states, 3 states have (on average 28.0) internal successors, (84), 3 states have internal predecessors, (84), 2 states have call successors, (28), 2 states have call predecessors, (28), 2 states have return successors, (23), 2 states have call predecessors, (23), 2 states have call successors, (23) [2024-11-24 00:43:48,816 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-24 00:43:48,817 INFO L93 Difference]: Finished difference Result 917 states and 1299 transitions. [2024-11-24 00:43:48,817 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-11-24 00:43:48,817 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 28.0) internal successors, (84), 3 states have internal predecessors, (84), 2 states have call successors, (28), 2 states have call predecessors, (28), 2 states have return successors, (23), 2 states have call predecessors, (23), 2 states have call successors, (23) Word has length 167 [2024-11-24 00:43:48,818 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-24 00:43:48,824 INFO L225 Difference]: With dead ends: 917 [2024-11-24 00:43:48,824 INFO L226 Difference]: Without dead ends: 593 [2024-11-24 00:43:48,826 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 174 GetRequests, 167 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=15, Invalid=57, Unknown=0, NotChecked=0, Total=72 [2024-11-24 00:43:48,827 INFO L435 NwaCegarLoop]: 845 mSDtfsCounter, 1 mSDsluCounter, 843 mSDsCounter, 0 mSdLazyCounter, 5 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1 SdHoareTripleChecker+Valid, 1688 SdHoareTripleChecker+Invalid, 5 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 5 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-11-24 00:43:48,829 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [1 Valid, 1688 Invalid, 5 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 5 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-11-24 00:43:48,831 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 593 states. [2024-11-24 00:43:48,884 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 593 to 592. [2024-11-24 00:43:48,886 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 592 states, 444 states have (on average 1.4527027027027026) internal successors, (645), 454 states have internal predecessors, (645), 103 states have call successors, (103), 44 states have call predecessors, (103), 44 states have return successors, (102), 101 states have call predecessors, (102), 102 states have call successors, (102) [2024-11-24 00:43:48,892 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 592 states to 592 states and 850 transitions. [2024-11-24 00:43:48,894 INFO L78 Accepts]: Start accepts. Automaton has 592 states and 850 transitions. Word has length 167 [2024-11-24 00:43:48,898 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-24 00:43:48,898 INFO L471 AbstractCegarLoop]: Abstraction has 592 states and 850 transitions. [2024-11-24 00:43:48,899 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 28.0) internal successors, (84), 3 states have internal predecessors, (84), 2 states have call successors, (28), 2 states have call predecessors, (28), 2 states have return successors, (23), 2 states have call predecessors, (23), 2 states have call successors, (23) [2024-11-24 00:43:48,899 INFO L276 IsEmpty]: Start isEmpty. Operand 592 states and 850 transitions. [2024-11-24 00:43:48,905 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 175 [2024-11-24 00:43:48,905 INFO L210 NwaCegarLoop]: Found error trace [2024-11-24 00:43:48,906 INFO L218 NwaCegarLoop]: trace histogram [8, 8, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-24 00:43:48,919 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f9ad7185-4106-4d64-9266-9d286afa45e8/bin/uautomizer-verify-LYvppIcaGC/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2024-11-24 00:43:49,110 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f9ad7185-4106-4d64-9266-9d286afa45e8/bin/uautomizer-verify-LYvppIcaGC/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-11-24 00:43:49,110 INFO L396 AbstractCegarLoop]: === Iteration 7 === Targeting outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION === [outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-24 00:43:49,110 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-24 00:43:49,111 INFO L85 PathProgramCache]: Analyzing trace with hash 766527307, now seen corresponding path program 1 times [2024-11-24 00:43:49,111 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-24 00:43:49,111 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1092909015] [2024-11-24 00:43:49,111 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-24 00:43:49,111 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-24 00:43:49,179 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-24 00:43:49,659 INFO L134 CoverageAnalysis]: Checked inductivity of 117 backedges. 3 proven. 3 refuted. 0 times theorem prover too weak. 111 trivial. 0 not checked. [2024-11-24 00:43:49,659 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-24 00:43:49,660 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1092909015] [2024-11-24 00:43:49,660 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1092909015] provided 0 perfect and 1 imperfect interpolant sequences [2024-11-24 00:43:49,660 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2073932005] [2024-11-24 00:43:49,660 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-24 00:43:49,660 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-11-24 00:43:49,660 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f9ad7185-4106-4d64-9266-9d286afa45e8/bin/uautomizer-verify-LYvppIcaGC/z3 [2024-11-24 00:43:49,663 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f9ad7185-4106-4d64-9266-9d286afa45e8/bin/uautomizer-verify-LYvppIcaGC/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-11-24 00:43:49,667 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f9ad7185-4106-4d64-9266-9d286afa45e8/bin/uautomizer-verify-LYvppIcaGC/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2024-11-24 00:43:50,174 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-24 00:43:50,180 INFO L256 TraceCheckSpWp]: Trace formula consists of 1369 conjuncts, 3 conjuncts are in the unsatisfiable core [2024-11-24 00:43:50,192 INFO L279 TraceCheckSpWp]: Computing forward predicates... [2024-11-24 00:43:50,240 INFO L134 CoverageAnalysis]: Checked inductivity of 117 backedges. 1 proven. 0 refuted. 0 times theorem prover too weak. 116 trivial. 0 not checked. [2024-11-24 00:43:50,240 INFO L308 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2024-11-24 00:43:50,240 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2073932005] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-24 00:43:50,241 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2024-11-24 00:43:50,241 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [8] total 9 [2024-11-24 00:43:50,241 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [511913213] [2024-11-24 00:43:50,241 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-24 00:43:50,241 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2024-11-24 00:43:50,242 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-24 00:43:50,242 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-11-24 00:43:50,242 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=57, Unknown=0, NotChecked=0, Total=72 [2024-11-24 00:43:50,243 INFO L87 Difference]: Start difference. First operand 592 states and 850 transitions. Second operand has 3 states, 3 states have (on average 30.333333333333332) internal successors, (91), 3 states have internal predecessors, (91), 2 states have call successors, (28), 2 states have call predecessors, (28), 2 states have return successors, (23), 2 states have call predecessors, (23), 2 states have call successors, (23) [2024-11-24 00:43:50,335 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-24 00:43:50,336 INFO L93 Difference]: Finished difference Result 1204 states and 1761 transitions. [2024-11-24 00:43:50,336 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-11-24 00:43:50,336 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 30.333333333333332) internal successors, (91), 3 states have internal predecessors, (91), 2 states have call successors, (28), 2 states have call predecessors, (28), 2 states have return successors, (23), 2 states have call predecessors, (23), 2 states have call successors, (23) Word has length 174 [2024-11-24 00:43:50,337 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-24 00:43:50,344 INFO L225 Difference]: With dead ends: 1204 [2024-11-24 00:43:50,344 INFO L226 Difference]: Without dead ends: 689 [2024-11-24 00:43:50,347 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 181 GetRequests, 174 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=57, Unknown=0, NotChecked=0, Total=72 [2024-11-24 00:43:50,349 INFO L435 NwaCegarLoop]: 851 mSDtfsCounter, 165 mSDsluCounter, 797 mSDsCounter, 0 mSdLazyCounter, 3 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 183 SdHoareTripleChecker+Valid, 1648 SdHoareTripleChecker+Invalid, 4 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 3 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-11-24 00:43:50,350 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [183 Valid, 1648 Invalid, 4 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 3 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-11-24 00:43:50,352 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 689 states. [2024-11-24 00:43:50,411 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 689 to 681. [2024-11-24 00:43:50,413 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 681 states, 519 states have (on average 1.4682080924855492) internal successors, (762), 529 states have internal predecessors, (762), 117 states have call successors, (117), 44 states have call predecessors, (117), 44 states have return successors, (116), 115 states have call predecessors, (116), 116 states have call successors, (116) [2024-11-24 00:43:50,421 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 681 states to 681 states and 995 transitions. [2024-11-24 00:43:50,422 INFO L78 Accepts]: Start accepts. Automaton has 681 states and 995 transitions. Word has length 174 [2024-11-24 00:43:50,423 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-24 00:43:50,423 INFO L471 AbstractCegarLoop]: Abstraction has 681 states and 995 transitions. [2024-11-24 00:43:50,423 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 30.333333333333332) internal successors, (91), 3 states have internal predecessors, (91), 2 states have call successors, (28), 2 states have call predecessors, (28), 2 states have return successors, (23), 2 states have call predecessors, (23), 2 states have call successors, (23) [2024-11-24 00:43:50,423 INFO L276 IsEmpty]: Start isEmpty. Operand 681 states and 995 transitions. [2024-11-24 00:43:50,427 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 176 [2024-11-24 00:43:50,427 INFO L210 NwaCegarLoop]: Found error trace [2024-11-24 00:43:50,428 INFO L218 NwaCegarLoop]: trace histogram [8, 8, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-24 00:43:50,439 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f9ad7185-4106-4d64-9266-9d286afa45e8/bin/uautomizer-verify-LYvppIcaGC/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Ended with exit code 0 [2024-11-24 00:43:50,628 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6,3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f9ad7185-4106-4d64-9266-9d286afa45e8/bin/uautomizer-verify-LYvppIcaGC/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-11-24 00:43:50,629 INFO L396 AbstractCegarLoop]: === Iteration 8 === Targeting outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION === [outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-24 00:43:50,629 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-24 00:43:50,629 INFO L85 PathProgramCache]: Analyzing trace with hash 995560095, now seen corresponding path program 1 times [2024-11-24 00:43:50,629 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-24 00:43:50,629 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [141314788] [2024-11-24 00:43:50,630 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-24 00:43:50,630 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-24 00:43:50,705 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-24 00:43:51,147 INFO L134 CoverageAnalysis]: Checked inductivity of 117 backedges. 3 proven. 3 refuted. 0 times theorem prover too weak. 111 trivial. 0 not checked. [2024-11-24 00:43:51,148 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-24 00:43:51,148 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [141314788] [2024-11-24 00:43:51,148 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [141314788] provided 0 perfect and 1 imperfect interpolant sequences [2024-11-24 00:43:51,148 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [601157669] [2024-11-24 00:43:51,148 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-24 00:43:51,148 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-11-24 00:43:51,148 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f9ad7185-4106-4d64-9266-9d286afa45e8/bin/uautomizer-verify-LYvppIcaGC/z3 [2024-11-24 00:43:51,151 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f9ad7185-4106-4d64-9266-9d286afa45e8/bin/uautomizer-verify-LYvppIcaGC/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-11-24 00:43:51,155 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f9ad7185-4106-4d64-9266-9d286afa45e8/bin/uautomizer-verify-LYvppIcaGC/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2024-11-24 00:43:51,683 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-24 00:43:51,690 INFO L256 TraceCheckSpWp]: Trace formula consists of 1374 conjuncts, 10 conjuncts are in the unsatisfiable core [2024-11-24 00:43:51,700 INFO L279 TraceCheckSpWp]: Computing forward predicates... [2024-11-24 00:43:51,863 INFO L134 CoverageAnalysis]: Checked inductivity of 117 backedges. 19 proven. 0 refuted. 0 times theorem prover too weak. 98 trivial. 0 not checked. [2024-11-24 00:43:51,866 INFO L308 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2024-11-24 00:43:51,866 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [601157669] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-24 00:43:51,867 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2024-11-24 00:43:51,867 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [8] total 14 [2024-11-24 00:43:51,867 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1580745008] [2024-11-24 00:43:51,867 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-24 00:43:51,868 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2024-11-24 00:43:51,868 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-24 00:43:51,868 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2024-11-24 00:43:51,868 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=31, Invalid=151, Unknown=0, NotChecked=0, Total=182 [2024-11-24 00:43:51,869 INFO L87 Difference]: Start difference. First operand 681 states and 995 transitions. Second operand has 8 states, 6 states have (on average 16.833333333333332) internal successors, (101), 8 states have internal predecessors, (101), 4 states have call successors, (28), 2 states have call predecessors, (28), 4 states have return successors, (23), 3 states have call predecessors, (23), 4 states have call successors, (23) [2024-11-24 00:43:52,094 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-24 00:43:52,095 INFO L93 Difference]: Finished difference Result 1309 states and 1927 transitions. [2024-11-24 00:43:52,095 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2024-11-24 00:43:52,095 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 6 states have (on average 16.833333333333332) internal successors, (101), 8 states have internal predecessors, (101), 4 states have call successors, (28), 2 states have call predecessors, (28), 4 states have return successors, (23), 3 states have call predecessors, (23), 4 states have call successors, (23) Word has length 175 [2024-11-24 00:43:52,096 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-24 00:43:52,102 INFO L225 Difference]: With dead ends: 1309 [2024-11-24 00:43:52,102 INFO L226 Difference]: Without dead ends: 683 [2024-11-24 00:43:52,104 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 183 GetRequests, 170 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 15 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=35, Invalid=175, Unknown=0, NotChecked=0, Total=210 [2024-11-24 00:43:52,105 INFO L435 NwaCegarLoop]: 836 mSDtfsCounter, 4 mSDsluCounter, 4999 mSDsCounter, 0 mSdLazyCounter, 83 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 8 SdHoareTripleChecker+Valid, 5835 SdHoareTripleChecker+Invalid, 83 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 83 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-11-24 00:43:52,105 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [8 Valid, 5835 Invalid, 83 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 83 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-11-24 00:43:52,108 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 683 states. [2024-11-24 00:43:52,158 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 683 to 683. [2024-11-24 00:43:52,160 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 683 states, 520 states have (on average 1.4673076923076922) internal successors, (763), 531 states have internal predecessors, (763), 117 states have call successors, (117), 44 states have call predecessors, (117), 45 states have return successors, (118), 115 states have call predecessors, (118), 116 states have call successors, (118) [2024-11-24 00:43:52,167 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 683 states to 683 states and 998 transitions. [2024-11-24 00:43:52,168 INFO L78 Accepts]: Start accepts. Automaton has 683 states and 998 transitions. Word has length 175 [2024-11-24 00:43:52,169 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-24 00:43:52,169 INFO L471 AbstractCegarLoop]: Abstraction has 683 states and 998 transitions. [2024-11-24 00:43:52,169 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 6 states have (on average 16.833333333333332) internal successors, (101), 8 states have internal predecessors, (101), 4 states have call successors, (28), 2 states have call predecessors, (28), 4 states have return successors, (23), 3 states have call predecessors, (23), 4 states have call successors, (23) [2024-11-24 00:43:52,169 INFO L276 IsEmpty]: Start isEmpty. Operand 683 states and 998 transitions. [2024-11-24 00:43:52,173 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 177 [2024-11-24 00:43:52,173 INFO L210 NwaCegarLoop]: Found error trace [2024-11-24 00:43:52,173 INFO L218 NwaCegarLoop]: trace histogram [8, 8, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-24 00:43:52,185 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f9ad7185-4106-4d64-9266-9d286afa45e8/bin/uautomizer-verify-LYvppIcaGC/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2024-11-24 00:43:52,378 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7,4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f9ad7185-4106-4d64-9266-9d286afa45e8/bin/uautomizer-verify-LYvppIcaGC/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-11-24 00:43:52,378 INFO L396 AbstractCegarLoop]: === Iteration 9 === Targeting outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION === [outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-24 00:43:52,379 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-24 00:43:52,379 INFO L85 PathProgramCache]: Analyzing trace with hash -1522180619, now seen corresponding path program 1 times [2024-11-24 00:43:52,379 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-24 00:43:52,379 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2004704747] [2024-11-24 00:43:52,380 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-24 00:43:52,380 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-24 00:43:52,428 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-24 00:43:52,689 INFO L134 CoverageAnalysis]: Checked inductivity of 117 backedges. 6 proven. 6 refuted. 0 times theorem prover too weak. 105 trivial. 0 not checked. [2024-11-24 00:43:52,689 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-24 00:43:52,689 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2004704747] [2024-11-24 00:43:52,689 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2004704747] provided 0 perfect and 1 imperfect interpolant sequences [2024-11-24 00:43:52,689 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1992891712] [2024-11-24 00:43:52,689 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-24 00:43:52,690 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-11-24 00:43:52,690 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f9ad7185-4106-4d64-9266-9d286afa45e8/bin/uautomizer-verify-LYvppIcaGC/z3 [2024-11-24 00:43:52,692 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f9ad7185-4106-4d64-9266-9d286afa45e8/bin/uautomizer-verify-LYvppIcaGC/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-11-24 00:43:52,694 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f9ad7185-4106-4d64-9266-9d286afa45e8/bin/uautomizer-verify-LYvppIcaGC/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2024-11-24 00:43:53,213 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-24 00:43:53,220 INFO L256 TraceCheckSpWp]: Trace formula consists of 1375 conjuncts, 8 conjuncts are in the unsatisfiable core [2024-11-24 00:43:53,226 INFO L279 TraceCheckSpWp]: Computing forward predicates... [2024-11-24 00:43:53,335 INFO L134 CoverageAnalysis]: Checked inductivity of 117 backedges. 19 proven. 0 refuted. 0 times theorem prover too weak. 98 trivial. 0 not checked. [2024-11-24 00:43:53,335 INFO L308 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2024-11-24 00:43:53,335 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1992891712] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-24 00:43:53,335 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2024-11-24 00:43:53,335 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [9] total 13 [2024-11-24 00:43:53,335 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1684298339] [2024-11-24 00:43:53,335 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-24 00:43:53,336 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2024-11-24 00:43:53,336 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-24 00:43:53,336 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2024-11-24 00:43:53,337 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=26, Invalid=130, Unknown=0, NotChecked=0, Total=156 [2024-11-24 00:43:53,337 INFO L87 Difference]: Start difference. First operand 683 states and 998 transitions. Second operand has 6 states, 5 states have (on average 20.6) internal successors, (103), 6 states have internal predecessors, (103), 3 states have call successors, (28), 2 states have call predecessors, (28), 3 states have return successors, (23), 3 states have call predecessors, (23), 3 states have call successors, (23) [2024-11-24 00:43:53,501 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-24 00:43:53,501 INFO L93 Difference]: Finished difference Result 1310 states and 1931 transitions. [2024-11-24 00:43:53,502 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2024-11-24 00:43:53,502 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 20.6) internal successors, (103), 6 states have internal predecessors, (103), 3 states have call successors, (28), 2 states have call predecessors, (28), 3 states have return successors, (23), 3 states have call predecessors, (23), 3 states have call successors, (23) Word has length 176 [2024-11-24 00:43:53,503 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-24 00:43:53,508 INFO L225 Difference]: With dead ends: 1310 [2024-11-24 00:43:53,509 INFO L226 Difference]: Without dead ends: 685 [2024-11-24 00:43:53,511 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 184 GetRequests, 173 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=26, Invalid=130, Unknown=0, NotChecked=0, Total=156 [2024-11-24 00:43:53,512 INFO L435 NwaCegarLoop]: 836 mSDtfsCounter, 2 mSDsluCounter, 3327 mSDsCounter, 0 mSdLazyCounter, 64 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 3 SdHoareTripleChecker+Valid, 4163 SdHoareTripleChecker+Invalid, 64 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 64 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-11-24 00:43:53,512 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [3 Valid, 4163 Invalid, 64 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 64 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-11-24 00:43:53,513 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 685 states. [2024-11-24 00:43:53,562 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 685 to 685. [2024-11-24 00:43:53,564 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 685 states, 521 states have (on average 1.4664107485604607) internal successors, (764), 533 states have internal predecessors, (764), 117 states have call successors, (117), 44 states have call predecessors, (117), 46 states have return successors, (123), 115 states have call predecessors, (123), 116 states have call successors, (123) [2024-11-24 00:43:53,571 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 685 states to 685 states and 1004 transitions. [2024-11-24 00:43:53,572 INFO L78 Accepts]: Start accepts. Automaton has 685 states and 1004 transitions. Word has length 176 [2024-11-24 00:43:53,573 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-24 00:43:53,573 INFO L471 AbstractCegarLoop]: Abstraction has 685 states and 1004 transitions. [2024-11-24 00:43:53,573 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 20.6) internal successors, (103), 6 states have internal predecessors, (103), 3 states have call successors, (28), 2 states have call predecessors, (28), 3 states have return successors, (23), 3 states have call predecessors, (23), 3 states have call successors, (23) [2024-11-24 00:43:53,574 INFO L276 IsEmpty]: Start isEmpty. Operand 685 states and 1004 transitions. [2024-11-24 00:43:53,578 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 178 [2024-11-24 00:43:53,578 INFO L210 NwaCegarLoop]: Found error trace [2024-11-24 00:43:53,578 INFO L218 NwaCegarLoop]: trace histogram [8, 8, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-24 00:43:53,592 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f9ad7185-4106-4d64-9266-9d286afa45e8/bin/uautomizer-verify-LYvppIcaGC/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Ended with exit code 0 [2024-11-24 00:43:53,779 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8,5 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f9ad7185-4106-4d64-9266-9d286afa45e8/bin/uautomizer-verify-LYvppIcaGC/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-11-24 00:43:53,779 INFO L396 AbstractCegarLoop]: === Iteration 10 === Targeting outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION === [outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-24 00:43:53,779 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-24 00:43:53,780 INFO L85 PathProgramCache]: Analyzing trace with hash -1964582107, now seen corresponding path program 1 times [2024-11-24 00:43:53,780 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-24 00:43:53,780 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1989234927] [2024-11-24 00:43:53,780 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-24 00:43:53,780 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-24 00:43:53,850 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-24 00:43:54,158 INFO L134 CoverageAnalysis]: Checked inductivity of 117 backedges. 6 proven. 0 refuted. 0 times theorem prover too weak. 111 trivial. 0 not checked. [2024-11-24 00:43:54,158 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-24 00:43:54,159 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1989234927] [2024-11-24 00:43:54,159 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1989234927] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-24 00:43:54,159 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-24 00:43:54,159 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2024-11-24 00:43:54,159 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1994539978] [2024-11-24 00:43:54,159 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-24 00:43:54,160 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2024-11-24 00:43:54,160 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-24 00:43:54,161 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2024-11-24 00:43:54,161 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=43, Unknown=0, NotChecked=0, Total=56 [2024-11-24 00:43:54,161 INFO L87 Difference]: Start difference. First operand 685 states and 1004 transitions. Second operand has 8 states, 6 states have (on average 16.5) internal successors, (99), 8 states have internal predecessors, (99), 4 states have call successors, (28), 2 states have call predecessors, (28), 3 states have return successors, (23), 3 states have call predecessors, (23), 4 states have call successors, (23) [2024-11-24 00:43:54,359 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-24 00:43:54,360 INFO L93 Difference]: Finished difference Result 1298 states and 1918 transitions. [2024-11-24 00:43:54,361 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2024-11-24 00:43:54,361 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 6 states have (on average 16.5) internal successors, (99), 8 states have internal predecessors, (99), 4 states have call successors, (28), 2 states have call predecessors, (28), 3 states have return successors, (23), 3 states have call predecessors, (23), 4 states have call successors, (23) Word has length 177 [2024-11-24 00:43:54,362 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-24 00:43:54,369 INFO L225 Difference]: With dead ends: 1298 [2024-11-24 00:43:54,370 INFO L226 Difference]: Without dead ends: 685 [2024-11-24 00:43:54,372 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=55, Unknown=0, NotChecked=0, Total=72 [2024-11-24 00:43:54,376 INFO L435 NwaCegarLoop]: 837 mSDtfsCounter, 4 mSDsluCounter, 5005 mSDsCounter, 0 mSdLazyCounter, 76 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 8 SdHoareTripleChecker+Valid, 5842 SdHoareTripleChecker+Invalid, 76 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 76 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-11-24 00:43:54,377 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [8 Valid, 5842 Invalid, 76 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 76 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-11-24 00:43:54,378 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 685 states. [2024-11-24 00:43:54,433 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 685 to 685. [2024-11-24 00:43:54,434 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 685 states, 521 states have (on average 1.4664107485604607) internal successors, (764), 533 states have internal predecessors, (764), 117 states have call successors, (117), 44 states have call predecessors, (117), 46 states have return successors, (122), 115 states have call predecessors, (122), 116 states have call successors, (122) [2024-11-24 00:43:54,442 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 685 states to 685 states and 1003 transitions. [2024-11-24 00:43:54,443 INFO L78 Accepts]: Start accepts. Automaton has 685 states and 1003 transitions. Word has length 177 [2024-11-24 00:43:54,444 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-24 00:43:54,444 INFO L471 AbstractCegarLoop]: Abstraction has 685 states and 1003 transitions. [2024-11-24 00:43:54,444 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 6 states have (on average 16.5) internal successors, (99), 8 states have internal predecessors, (99), 4 states have call successors, (28), 2 states have call predecessors, (28), 3 states have return successors, (23), 3 states have call predecessors, (23), 4 states have call successors, (23) [2024-11-24 00:43:54,444 INFO L276 IsEmpty]: Start isEmpty. Operand 685 states and 1003 transitions. [2024-11-24 00:43:54,449 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 179 [2024-11-24 00:43:54,449 INFO L210 NwaCegarLoop]: Found error trace [2024-11-24 00:43:54,449 INFO L218 NwaCegarLoop]: trace histogram [8, 8, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-24 00:43:54,449 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2024-11-24 00:43:54,450 INFO L396 AbstractCegarLoop]: === Iteration 11 === Targeting outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION === [outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-24 00:43:54,450 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-24 00:43:54,450 INFO L85 PathProgramCache]: Analyzing trace with hash 1220892897, now seen corresponding path program 2 times [2024-11-24 00:43:54,450 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-24 00:43:54,451 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1286112114] [2024-11-24 00:43:54,451 INFO L95 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2024-11-24 00:43:54,451 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-24 00:43:54,525 INFO L229 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 1 check-sat command(s) [2024-11-24 00:43:54,525 INFO L230 tOrderPrioritization]: Conjunction of SSA is unsat [2024-11-24 00:43:54,758 INFO L134 CoverageAnalysis]: Checked inductivity of 118 backedges. 8 proven. 0 refuted. 0 times theorem prover too weak. 110 trivial. 0 not checked. [2024-11-24 00:43:54,759 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-24 00:43:54,759 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1286112114] [2024-11-24 00:43:54,759 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1286112114] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-24 00:43:54,759 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-24 00:43:54,759 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2024-11-24 00:43:54,759 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [759998856] [2024-11-24 00:43:54,759 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-24 00:43:54,760 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2024-11-24 00:43:54,760 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-24 00:43:54,760 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2024-11-24 00:43:54,760 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=14, Invalid=42, Unknown=0, NotChecked=0, Total=56 [2024-11-24 00:43:54,761 INFO L87 Difference]: Start difference. First operand 685 states and 1003 transitions. Second operand has 8 states, 8 states have (on average 12.625) internal successors, (101), 7 states have internal predecessors, (101), 2 states have call successors, (28), 2 states have call predecessors, (28), 3 states have return successors, (23), 3 states have call predecessors, (23), 2 states have call successors, (23) [2024-11-24 00:43:55,832 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-24 00:43:55,832 INFO L93 Difference]: Finished difference Result 1132 states and 1709 transitions. [2024-11-24 00:43:55,832 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2024-11-24 00:43:55,833 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 12.625) internal successors, (101), 7 states have internal predecessors, (101), 2 states have call successors, (28), 2 states have call predecessors, (28), 3 states have return successors, (23), 3 states have call predecessors, (23), 2 states have call successors, (23) Word has length 178 [2024-11-24 00:43:55,835 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-24 00:43:55,846 INFO L225 Difference]: With dead ends: 1132 [2024-11-24 00:43:55,847 INFO L226 Difference]: Without dead ends: 1128 [2024-11-24 00:43:55,848 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 13 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=39, Invalid=117, Unknown=0, NotChecked=0, Total=156 [2024-11-24 00:43:55,849 INFO L435 NwaCegarLoop]: 864 mSDtfsCounter, 1372 mSDsluCounter, 3809 mSDsCounter, 0 mSdLazyCounter, 316 mSolverCounterSat, 193 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1375 SdHoareTripleChecker+Valid, 4673 SdHoareTripleChecker+Invalid, 509 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 193 IncrementalHoareTripleChecker+Valid, 316 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2024-11-24 00:43:55,849 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [1375 Valid, 4673 Invalid, 509 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [193 Valid, 316 Invalid, 0 Unknown, 0 Unchecked, 0.8s Time] [2024-11-24 00:43:55,852 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1128 states. [2024-11-24 00:43:55,947 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1128 to 1119. [2024-11-24 00:43:55,950 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1119 states, 872 states have (on average 1.5091743119266054) internal successors, (1316), 888 states have internal predecessors, (1316), 178 states have call successors, (178), 70 states have call predecessors, (178), 68 states have return successors, (194), 169 states have call predecessors, (194), 177 states have call successors, (194) [2024-11-24 00:43:55,961 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1119 states to 1119 states and 1688 transitions. [2024-11-24 00:43:55,963 INFO L78 Accepts]: Start accepts. Automaton has 1119 states and 1688 transitions. Word has length 178 [2024-11-24 00:43:55,965 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-24 00:43:55,965 INFO L471 AbstractCegarLoop]: Abstraction has 1119 states and 1688 transitions. [2024-11-24 00:43:55,965 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 12.625) internal successors, (101), 7 states have internal predecessors, (101), 2 states have call successors, (28), 2 states have call predecessors, (28), 3 states have return successors, (23), 3 states have call predecessors, (23), 2 states have call successors, (23) [2024-11-24 00:43:55,965 INFO L276 IsEmpty]: Start isEmpty. Operand 1119 states and 1688 transitions. [2024-11-24 00:43:55,973 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 182 [2024-11-24 00:43:55,973 INFO L210 NwaCegarLoop]: Found error trace [2024-11-24 00:43:55,974 INFO L218 NwaCegarLoop]: trace histogram [8, 8, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-24 00:43:55,974 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2024-11-24 00:43:55,974 INFO L396 AbstractCegarLoop]: === Iteration 12 === Targeting outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION === [outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-24 00:43:55,975 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-24 00:43:55,975 INFO L85 PathProgramCache]: Analyzing trace with hash -1781657637, now seen corresponding path program 1 times [2024-11-24 00:43:55,975 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-24 00:43:55,975 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1438370708] [2024-11-24 00:43:55,975 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-24 00:43:55,975 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-24 00:43:56,030 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-24 00:43:56,277 INFO L134 CoverageAnalysis]: Checked inductivity of 121 backedges. 0 proven. 8 refuted. 0 times theorem prover too weak. 113 trivial. 0 not checked. [2024-11-24 00:43:56,277 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-24 00:43:56,277 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1438370708] [2024-11-24 00:43:56,277 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1438370708] provided 0 perfect and 1 imperfect interpolant sequences [2024-11-24 00:43:56,278 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [108304367] [2024-11-24 00:43:56,278 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-24 00:43:56,278 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-11-24 00:43:56,278 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f9ad7185-4106-4d64-9266-9d286afa45e8/bin/uautomizer-verify-LYvppIcaGC/z3 [2024-11-24 00:43:56,280 INFO L229 MonitoredProcess]: Starting monitored process 6 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f9ad7185-4106-4d64-9266-9d286afa45e8/bin/uautomizer-verify-LYvppIcaGC/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-11-24 00:43:56,284 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f9ad7185-4106-4d64-9266-9d286afa45e8/bin/uautomizer-verify-LYvppIcaGC/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Waiting until timeout for monitored process [2024-11-24 00:43:56,841 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-24 00:43:56,847 INFO L256 TraceCheckSpWp]: Trace formula consists of 1380 conjuncts, 8 conjuncts are in the unsatisfiable core [2024-11-24 00:43:56,854 INFO L279 TraceCheckSpWp]: Computing forward predicates... [2024-11-24 00:43:56,927 INFO L134 CoverageAnalysis]: Checked inductivity of 121 backedges. 18 proven. 0 refuted. 0 times theorem prover too weak. 103 trivial. 0 not checked. [2024-11-24 00:43:56,928 INFO L308 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2024-11-24 00:43:56,928 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [108304367] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-24 00:43:56,928 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2024-11-24 00:43:56,928 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [6] total 10 [2024-11-24 00:43:56,928 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2077836801] [2024-11-24 00:43:56,929 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-24 00:43:56,929 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2024-11-24 00:43:56,929 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-24 00:43:56,930 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2024-11-24 00:43:56,930 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=21, Invalid=69, Unknown=0, NotChecked=0, Total=90 [2024-11-24 00:43:56,931 INFO L87 Difference]: Start difference. First operand 1119 states and 1688 transitions. Second operand has 6 states, 5 states have (on average 20.6) internal successors, (103), 6 states have internal predecessors, (103), 3 states have call successors, (28), 2 states have call predecessors, (28), 3 states have return successors, (23), 3 states have call predecessors, (23), 3 states have call successors, (23) [2024-11-24 00:43:57,115 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-24 00:43:57,116 INFO L93 Difference]: Finished difference Result 2171 states and 3298 transitions. [2024-11-24 00:43:57,116 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2024-11-24 00:43:57,117 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 20.6) internal successors, (103), 6 states have internal predecessors, (103), 3 states have call successors, (28), 2 states have call predecessors, (28), 3 states have return successors, (23), 3 states have call predecessors, (23), 3 states have call successors, (23) Word has length 181 [2024-11-24 00:43:57,117 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-24 00:43:57,127 INFO L225 Difference]: With dead ends: 2171 [2024-11-24 00:43:57,127 INFO L226 Difference]: Without dead ends: 1125 [2024-11-24 00:43:57,131 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 186 GetRequests, 178 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=21, Invalid=69, Unknown=0, NotChecked=0, Total=90 [2024-11-24 00:43:57,132 INFO L435 NwaCegarLoop]: 840 mSDtfsCounter, 1 mSDsluCounter, 3342 mSDsCounter, 0 mSdLazyCounter, 63 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2 SdHoareTripleChecker+Valid, 4182 SdHoareTripleChecker+Invalid, 64 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 63 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-11-24 00:43:57,133 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [2 Valid, 4182 Invalid, 64 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 63 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-11-24 00:43:57,135 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1125 states. [2024-11-24 00:43:57,220 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1125 to 1121. [2024-11-24 00:43:57,222 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1121 states, 873 states have (on average 1.5085910652920962) internal successors, (1317), 890 states have internal predecessors, (1317), 178 states have call successors, (178), 70 states have call predecessors, (178), 69 states have return successors, (197), 169 states have call predecessors, (197), 177 states have call successors, (197) [2024-11-24 00:43:57,232 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1121 states to 1121 states and 1692 transitions. [2024-11-24 00:43:57,234 INFO L78 Accepts]: Start accepts. Automaton has 1121 states and 1692 transitions. Word has length 181 [2024-11-24 00:43:57,234 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-24 00:43:57,235 INFO L471 AbstractCegarLoop]: Abstraction has 1121 states and 1692 transitions. [2024-11-24 00:43:57,236 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 20.6) internal successors, (103), 6 states have internal predecessors, (103), 3 states have call successors, (28), 2 states have call predecessors, (28), 3 states have return successors, (23), 3 states have call predecessors, (23), 3 states have call successors, (23) [2024-11-24 00:43:57,236 INFO L276 IsEmpty]: Start isEmpty. Operand 1121 states and 1692 transitions. [2024-11-24 00:43:57,242 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 183 [2024-11-24 00:43:57,243 INFO L210 NwaCegarLoop]: Found error trace [2024-11-24 00:43:57,243 INFO L218 NwaCegarLoop]: trace histogram [8, 8, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-24 00:43:57,255 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f9ad7185-4106-4d64-9266-9d286afa45e8/bin/uautomizer-verify-LYvppIcaGC/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Ended with exit code 0 [2024-11-24 00:43:57,447 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11,6 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f9ad7185-4106-4d64-9266-9d286afa45e8/bin/uautomizer-verify-LYvppIcaGC/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-11-24 00:43:57,447 INFO L396 AbstractCegarLoop]: === Iteration 13 === Targeting outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION === [outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-24 00:43:57,447 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-24 00:43:57,448 INFO L85 PathProgramCache]: Analyzing trace with hash 199746670, now seen corresponding path program 1 times [2024-11-24 00:43:57,448 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-24 00:43:57,448 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [962083308] [2024-11-24 00:43:57,448 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-24 00:43:57,448 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-24 00:43:57,495 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-24 00:43:57,732 INFO L134 CoverageAnalysis]: Checked inductivity of 121 backedges. 0 proven. 8 refuted. 0 times theorem prover too weak. 113 trivial. 0 not checked. [2024-11-24 00:43:57,732 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-24 00:43:57,733 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [962083308] [2024-11-24 00:43:57,733 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [962083308] provided 0 perfect and 1 imperfect interpolant sequences [2024-11-24 00:43:57,733 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [892263865] [2024-11-24 00:43:57,733 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-24 00:43:57,733 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-11-24 00:43:57,733 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f9ad7185-4106-4d64-9266-9d286afa45e8/bin/uautomizer-verify-LYvppIcaGC/z3 [2024-11-24 00:43:57,735 INFO L229 MonitoredProcess]: Starting monitored process 7 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f9ad7185-4106-4d64-9266-9d286afa45e8/bin/uautomizer-verify-LYvppIcaGC/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-11-24 00:43:57,738 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f9ad7185-4106-4d64-9266-9d286afa45e8/bin/uautomizer-verify-LYvppIcaGC/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Waiting until timeout for monitored process [2024-11-24 00:43:58,274 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-24 00:43:58,283 INFO L256 TraceCheckSpWp]: Trace formula consists of 1378 conjuncts, 10 conjuncts are in the unsatisfiable core [2024-11-24 00:43:58,290 INFO L279 TraceCheckSpWp]: Computing forward predicates... [2024-11-24 00:43:58,403 INFO L134 CoverageAnalysis]: Checked inductivity of 121 backedges. 17 proven. 0 refuted. 0 times theorem prover too weak. 104 trivial. 0 not checked. [2024-11-24 00:43:58,403 INFO L308 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2024-11-24 00:43:58,404 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [892263865] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-24 00:43:58,404 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2024-11-24 00:43:58,404 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [6] total 12 [2024-11-24 00:43:58,404 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1595586095] [2024-11-24 00:43:58,404 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-24 00:43:58,405 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2024-11-24 00:43:58,405 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-24 00:43:58,406 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2024-11-24 00:43:58,406 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=21, Invalid=111, Unknown=0, NotChecked=0, Total=132 [2024-11-24 00:43:58,406 INFO L87 Difference]: Start difference. First operand 1121 states and 1692 transitions. Second operand has 8 states, 6 states have (on average 17.833333333333332) internal successors, (107), 8 states have internal predecessors, (107), 4 states have call successors, (28), 2 states have call predecessors, (28), 4 states have return successors, (23), 3 states have call predecessors, (23), 4 states have call successors, (23) [2024-11-24 00:43:58,671 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-24 00:43:58,672 INFO L93 Difference]: Finished difference Result 2153 states and 3276 transitions. [2024-11-24 00:43:58,672 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2024-11-24 00:43:58,673 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 6 states have (on average 17.833333333333332) internal successors, (107), 8 states have internal predecessors, (107), 4 states have call successors, (28), 2 states have call predecessors, (28), 4 states have return successors, (23), 3 states have call predecessors, (23), 4 states have call successors, (23) Word has length 182 [2024-11-24 00:43:58,673 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-24 00:43:58,685 INFO L225 Difference]: With dead ends: 2153 [2024-11-24 00:43:58,685 INFO L226 Difference]: Without dead ends: 1125 [2024-11-24 00:43:58,690 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 188 GetRequests, 177 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=25, Invalid=131, Unknown=0, NotChecked=0, Total=156 [2024-11-24 00:43:58,691 INFO L435 NwaCegarLoop]: 836 mSDtfsCounter, 3 mSDsluCounter, 4999 mSDsCounter, 0 mSdLazyCounter, 82 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 7 SdHoareTripleChecker+Valid, 5835 SdHoareTripleChecker+Invalid, 83 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 82 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-11-24 00:43:58,691 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [7 Valid, 5835 Invalid, 83 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 82 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-11-24 00:43:58,694 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1125 states. [2024-11-24 00:43:58,803 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1125 to 1125. [2024-11-24 00:43:58,806 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1125 states, 875 states have (on average 1.5074285714285713) internal successors, (1319), 894 states have internal predecessors, (1319), 178 states have call successors, (178), 70 states have call predecessors, (178), 71 states have return successors, (200), 169 states have call predecessors, (200), 177 states have call successors, (200) [2024-11-24 00:43:58,820 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1125 states to 1125 states and 1697 transitions. [2024-11-24 00:43:58,823 INFO L78 Accepts]: Start accepts. Automaton has 1125 states and 1697 transitions. Word has length 182 [2024-11-24 00:43:58,824 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-24 00:43:58,824 INFO L471 AbstractCegarLoop]: Abstraction has 1125 states and 1697 transitions. [2024-11-24 00:43:58,824 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 6 states have (on average 17.833333333333332) internal successors, (107), 8 states have internal predecessors, (107), 4 states have call successors, (28), 2 states have call predecessors, (28), 4 states have return successors, (23), 3 states have call predecessors, (23), 4 states have call successors, (23) [2024-11-24 00:43:58,825 INFO L276 IsEmpty]: Start isEmpty. Operand 1125 states and 1697 transitions. [2024-11-24 00:43:58,834 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 181 [2024-11-24 00:43:58,834 INFO L210 NwaCegarLoop]: Found error trace [2024-11-24 00:43:58,835 INFO L218 NwaCegarLoop]: trace histogram [8, 8, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-24 00:43:58,849 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f9ad7185-4106-4d64-9266-9d286afa45e8/bin/uautomizer-verify-LYvppIcaGC/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Forceful destruction successful, exit code 0 [2024-11-24 00:43:59,039 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable12,7 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f9ad7185-4106-4d64-9266-9d286afa45e8/bin/uautomizer-verify-LYvppIcaGC/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-11-24 00:43:59,039 INFO L396 AbstractCegarLoop]: === Iteration 14 === Targeting outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION === [outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-24 00:43:59,040 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-24 00:43:59,040 INFO L85 PathProgramCache]: Analyzing trace with hash -1206115150, now seen corresponding path program 1 times [2024-11-24 00:43:59,040 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-24 00:43:59,040 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2000014666] [2024-11-24 00:43:59,041 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-24 00:43:59,041 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-24 00:43:59,107 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-24 00:43:59,405 INFO L134 CoverageAnalysis]: Checked inductivity of 118 backedges. 13 proven. 0 refuted. 0 times theorem prover too weak. 105 trivial. 0 not checked. [2024-11-24 00:43:59,405 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-24 00:43:59,405 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2000014666] [2024-11-24 00:43:59,405 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2000014666] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-24 00:43:59,405 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-24 00:43:59,405 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2024-11-24 00:43:59,405 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [596443994] [2024-11-24 00:43:59,405 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-24 00:43:59,406 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2024-11-24 00:43:59,406 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-24 00:43:59,407 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2024-11-24 00:43:59,407 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=57, Unknown=0, NotChecked=0, Total=72 [2024-11-24 00:43:59,407 INFO L87 Difference]: Start difference. First operand 1125 states and 1697 transitions. Second operand has 9 states, 7 states have (on average 15.142857142857142) internal successors, (106), 8 states have internal predecessors, (106), 4 states have call successors, (28), 2 states have call predecessors, (28), 4 states have return successors, (23), 4 states have call predecessors, (23), 4 states have call successors, (23) [2024-11-24 00:43:59,690 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-24 00:43:59,690 INFO L93 Difference]: Finished difference Result 2143 states and 3259 transitions. [2024-11-24 00:43:59,691 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2024-11-24 00:43:59,691 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 7 states have (on average 15.142857142857142) internal successors, (106), 8 states have internal predecessors, (106), 4 states have call successors, (28), 2 states have call predecessors, (28), 4 states have return successors, (23), 4 states have call predecessors, (23), 4 states have call successors, (23) Word has length 180 [2024-11-24 00:43:59,691 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-24 00:43:59,701 INFO L225 Difference]: With dead ends: 2143 [2024-11-24 00:43:59,702 INFO L226 Difference]: Without dead ends: 1125 [2024-11-24 00:43:59,706 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 12 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=23, Invalid=87, Unknown=0, NotChecked=0, Total=110 [2024-11-24 00:43:59,707 INFO L435 NwaCegarLoop]: 830 mSDtfsCounter, 7 mSDsluCounter, 5780 mSDsCounter, 0 mSdLazyCounter, 162 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 9 SdHoareTripleChecker+Valid, 6610 SdHoareTripleChecker+Invalid, 162 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 162 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-11-24 00:43:59,707 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [9 Valid, 6610 Invalid, 162 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 162 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-11-24 00:43:59,713 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1125 states. [2024-11-24 00:43:59,795 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1125 to 1125. [2024-11-24 00:43:59,798 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1125 states, 875 states have (on average 1.5074285714285713) internal successors, (1319), 894 states have internal predecessors, (1319), 178 states have call successors, (178), 70 states have call predecessors, (178), 71 states have return successors, (198), 169 states have call predecessors, (198), 177 states have call successors, (198) [2024-11-24 00:43:59,809 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1125 states to 1125 states and 1695 transitions. [2024-11-24 00:43:59,812 INFO L78 Accepts]: Start accepts. Automaton has 1125 states and 1695 transitions. Word has length 180 [2024-11-24 00:43:59,813 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-24 00:43:59,813 INFO L471 AbstractCegarLoop]: Abstraction has 1125 states and 1695 transitions. [2024-11-24 00:43:59,813 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 7 states have (on average 15.142857142857142) internal successors, (106), 8 states have internal predecessors, (106), 4 states have call successors, (28), 2 states have call predecessors, (28), 4 states have return successors, (23), 4 states have call predecessors, (23), 4 states have call successors, (23) [2024-11-24 00:43:59,813 INFO L276 IsEmpty]: Start isEmpty. Operand 1125 states and 1695 transitions. [2024-11-24 00:43:59,820 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 184 [2024-11-24 00:43:59,820 INFO L210 NwaCegarLoop]: Found error trace [2024-11-24 00:43:59,821 INFO L218 NwaCegarLoop]: trace histogram [8, 8, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-24 00:43:59,821 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable13 [2024-11-24 00:43:59,821 INFO L396 AbstractCegarLoop]: === Iteration 15 === Targeting outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION === [outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-24 00:43:59,822 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-24 00:43:59,822 INFO L85 PathProgramCache]: Analyzing trace with hash -686186615, now seen corresponding path program 1 times [2024-11-24 00:43:59,822 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-24 00:43:59,822 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1187309536] [2024-11-24 00:43:59,822 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-24 00:43:59,822 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-24 00:43:59,867 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-24 00:44:00,077 INFO L134 CoverageAnalysis]: Checked inductivity of 121 backedges. 0 proven. 8 refuted. 0 times theorem prover too weak. 113 trivial. 0 not checked. [2024-11-24 00:44:00,078 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-24 00:44:00,078 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1187309536] [2024-11-24 00:44:00,078 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1187309536] provided 0 perfect and 1 imperfect interpolant sequences [2024-11-24 00:44:00,078 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1414000885] [2024-11-24 00:44:00,078 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-24 00:44:00,078 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-11-24 00:44:00,079 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f9ad7185-4106-4d64-9266-9d286afa45e8/bin/uautomizer-verify-LYvppIcaGC/z3 [2024-11-24 00:44:00,081 INFO L229 MonitoredProcess]: Starting monitored process 8 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f9ad7185-4106-4d64-9266-9d286afa45e8/bin/uautomizer-verify-LYvppIcaGC/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-11-24 00:44:00,085 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f9ad7185-4106-4d64-9266-9d286afa45e8/bin/uautomizer-verify-LYvppIcaGC/z3 -smt2 -in SMTLIB2_COMPLIANT=true (8)] Waiting until timeout for monitored process [2024-11-24 00:44:00,658 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-24 00:44:00,667 INFO L256 TraceCheckSpWp]: Trace formula consists of 1379 conjuncts, 8 conjuncts are in the unsatisfiable core [2024-11-24 00:44:00,673 INFO L279 TraceCheckSpWp]: Computing forward predicates... [2024-11-24 00:44:00,748 INFO L134 CoverageAnalysis]: Checked inductivity of 121 backedges. 8 proven. 0 refuted. 0 times theorem prover too weak. 113 trivial. 0 not checked. [2024-11-24 00:44:00,749 INFO L308 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2024-11-24 00:44:00,749 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1414000885] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-24 00:44:00,749 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2024-11-24 00:44:00,749 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [6] total 10 [2024-11-24 00:44:00,749 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1278758129] [2024-11-24 00:44:00,750 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-24 00:44:00,750 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2024-11-24 00:44:00,750 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-24 00:44:00,751 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2024-11-24 00:44:00,751 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=18, Invalid=72, Unknown=0, NotChecked=0, Total=90 [2024-11-24 00:44:00,752 INFO L87 Difference]: Start difference. First operand 1125 states and 1695 transitions. Second operand has 6 states, 5 states have (on average 21.0) internal successors, (105), 6 states have internal predecessors, (105), 3 states have call successors, (28), 2 states have call predecessors, (28), 3 states have return successors, (23), 3 states have call predecessors, (23), 3 states have call successors, (23) [2024-11-24 00:44:00,921 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-24 00:44:00,921 INFO L93 Difference]: Finished difference Result 2153 states and 3274 transitions. [2024-11-24 00:44:00,922 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2024-11-24 00:44:00,923 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 21.0) internal successors, (105), 6 states have internal predecessors, (105), 3 states have call successors, (28), 2 states have call predecessors, (28), 3 states have return successors, (23), 3 states have call predecessors, (23), 3 states have call successors, (23) Word has length 183 [2024-11-24 00:44:00,923 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-24 00:44:00,933 INFO L225 Difference]: With dead ends: 2153 [2024-11-24 00:44:00,934 INFO L226 Difference]: Without dead ends: 1131 [2024-11-24 00:44:00,938 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 188 GetRequests, 180 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=18, Invalid=72, Unknown=0, NotChecked=0, Total=90 [2024-11-24 00:44:00,939 INFO L435 NwaCegarLoop]: 836 mSDtfsCounter, 1 mSDsluCounter, 3327 mSDsCounter, 0 mSdLazyCounter, 63 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2 SdHoareTripleChecker+Valid, 4163 SdHoareTripleChecker+Invalid, 64 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 63 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-11-24 00:44:00,939 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [2 Valid, 4163 Invalid, 64 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 63 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-11-24 00:44:00,941 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1131 states. [2024-11-24 00:44:01,011 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1131 to 1129. [2024-11-24 00:44:01,013 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1129 states, 877 states have (on average 1.5062713797035348) internal successors, (1321), 898 states have internal predecessors, (1321), 178 states have call successors, (178), 70 states have call predecessors, (178), 73 states have return successors, (204), 169 states have call predecessors, (204), 177 states have call successors, (204) [2024-11-24 00:44:01,023 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1129 states to 1129 states and 1703 transitions. [2024-11-24 00:44:01,026 INFO L78 Accepts]: Start accepts. Automaton has 1129 states and 1703 transitions. Word has length 183 [2024-11-24 00:44:01,027 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-24 00:44:01,027 INFO L471 AbstractCegarLoop]: Abstraction has 1129 states and 1703 transitions. [2024-11-24 00:44:01,027 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 21.0) internal successors, (105), 6 states have internal predecessors, (105), 3 states have call successors, (28), 2 states have call predecessors, (28), 3 states have return successors, (23), 3 states have call predecessors, (23), 3 states have call successors, (23) [2024-11-24 00:44:01,027 INFO L276 IsEmpty]: Start isEmpty. Operand 1129 states and 1703 transitions. [2024-11-24 00:44:01,034 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 183 [2024-11-24 00:44:01,034 INFO L210 NwaCegarLoop]: Found error trace [2024-11-24 00:44:01,034 INFO L218 NwaCegarLoop]: trace histogram [8, 8, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-24 00:44:01,048 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f9ad7185-4106-4d64-9266-9d286afa45e8/bin/uautomizer-verify-LYvppIcaGC/z3 -smt2 -in SMTLIB2_COMPLIANT=true (8)] Forceful destruction successful, exit code 0 [2024-11-24 00:44:01,239 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable14,8 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f9ad7185-4106-4d64-9266-9d286afa45e8/bin/uautomizer-verify-LYvppIcaGC/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-11-24 00:44:01,239 INFO L396 AbstractCegarLoop]: === Iteration 16 === Targeting outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION === [outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-24 00:44:01,240 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-24 00:44:01,240 INFO L85 PathProgramCache]: Analyzing trace with hash 509554551, now seen corresponding path program 1 times [2024-11-24 00:44:01,240 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-24 00:44:01,241 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [589503755] [2024-11-24 00:44:01,241 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-24 00:44:01,241 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-24 00:44:01,283 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-24 00:44:01,421 INFO L134 CoverageAnalysis]: Checked inductivity of 119 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 118 trivial. 0 not checked. [2024-11-24 00:44:01,421 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-24 00:44:01,421 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [589503755] [2024-11-24 00:44:01,421 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [589503755] provided 0 perfect and 1 imperfect interpolant sequences [2024-11-24 00:44:01,422 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [197475064] [2024-11-24 00:44:01,422 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-24 00:44:01,422 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-11-24 00:44:01,422 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f9ad7185-4106-4d64-9266-9d286afa45e8/bin/uautomizer-verify-LYvppIcaGC/z3 [2024-11-24 00:44:01,425 INFO L229 MonitoredProcess]: Starting monitored process 9 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f9ad7185-4106-4d64-9266-9d286afa45e8/bin/uautomizer-verify-LYvppIcaGC/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-11-24 00:44:01,429 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f9ad7185-4106-4d64-9266-9d286afa45e8/bin/uautomizer-verify-LYvppIcaGC/z3 -smt2 -in SMTLIB2_COMPLIANT=true (9)] Waiting until timeout for monitored process [2024-11-24 00:44:01,968 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-24 00:44:01,974 INFO L256 TraceCheckSpWp]: Trace formula consists of 1381 conjuncts, 3 conjuncts are in the unsatisfiable core [2024-11-24 00:44:01,980 INFO L279 TraceCheckSpWp]: Computing forward predicates... [2024-11-24 00:44:02,024 INFO L134 CoverageAnalysis]: Checked inductivity of 119 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 118 trivial. 0 not checked. [2024-11-24 00:44:02,024 INFO L312 TraceCheckSpWp]: Computing backward predicates... [2024-11-24 00:44:02,236 INFO L134 CoverageAnalysis]: Checked inductivity of 119 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 118 trivial. 0 not checked. [2024-11-24 00:44:02,236 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [197475064] provided 0 perfect and 2 imperfect interpolant sequences [2024-11-24 00:44:02,237 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-11-24 00:44:02,237 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [4, 4, 4] total 7 [2024-11-24 00:44:02,237 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1646888560] [2024-11-24 00:44:02,237 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-11-24 00:44:02,238 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2024-11-24 00:44:02,238 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-24 00:44:02,239 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2024-11-24 00:44:02,240 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=21, Invalid=21, Unknown=0, NotChecked=0, Total=42 [2024-11-24 00:44:02,241 INFO L87 Difference]: Start difference. First operand 1129 states and 1703 transitions. Second operand has 7 states, 7 states have (on average 18.428571428571427) internal successors, (129), 7 states have internal predecessors, (129), 2 states have call successors, (34), 2 states have call predecessors, (34), 2 states have return successors, (29), 2 states have call predecessors, (29), 2 states have call successors, (29) [2024-11-24 00:44:02,582 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-24 00:44:02,583 INFO L93 Difference]: Finished difference Result 2669 states and 4157 transitions. [2024-11-24 00:44:02,584 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2024-11-24 00:44:02,584 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 18.428571428571427) internal successors, (129), 7 states have internal predecessors, (129), 2 states have call successors, (34), 2 states have call predecessors, (34), 2 states have return successors, (29), 2 states have call predecessors, (29), 2 states have call successors, (29) Word has length 182 [2024-11-24 00:44:02,585 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-24 00:44:02,609 INFO L225 Difference]: With dead ends: 2669 [2024-11-24 00:44:02,610 INFO L226 Difference]: Without dead ends: 2225 [2024-11-24 00:44:02,613 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 366 GetRequests, 361 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=21, Invalid=21, Unknown=0, NotChecked=0, Total=42 [2024-11-24 00:44:02,615 INFO L435 NwaCegarLoop]: 888 mSDtfsCounter, 756 mSDsluCounter, 1400 mSDsCounter, 0 mSdLazyCounter, 86 mSolverCounterSat, 19 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 810 SdHoareTripleChecker+Valid, 2288 SdHoareTripleChecker+Invalid, 105 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 19 IncrementalHoareTripleChecker+Valid, 86 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2024-11-24 00:44:02,615 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [810 Valid, 2288 Invalid, 105 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [19 Valid, 86 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2024-11-24 00:44:02,619 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2225 states. [2024-11-24 00:44:02,922 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2225 to 2195. [2024-11-24 00:44:02,928 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2195 states, 1785 states have (on average 1.5445378151260505) internal successors, (2757), 1806 states have internal predecessors, (2757), 336 states have call successors, (336), 70 states have call predecessors, (336), 73 states have return successors, (387), 327 states have call predecessors, (387), 335 states have call successors, (387) [2024-11-24 00:44:02,942 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2195 states to 2195 states and 3480 transitions. [2024-11-24 00:44:02,944 INFO L78 Accepts]: Start accepts. Automaton has 2195 states and 3480 transitions. Word has length 182 [2024-11-24 00:44:02,945 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-24 00:44:02,945 INFO L471 AbstractCegarLoop]: Abstraction has 2195 states and 3480 transitions. [2024-11-24 00:44:02,945 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 18.428571428571427) internal successors, (129), 7 states have internal predecessors, (129), 2 states have call successors, (34), 2 states have call predecessors, (34), 2 states have return successors, (29), 2 states have call predecessors, (29), 2 states have call successors, (29) [2024-11-24 00:44:02,945 INFO L276 IsEmpty]: Start isEmpty. Operand 2195 states and 3480 transitions. [2024-11-24 00:44:02,957 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 190 [2024-11-24 00:44:02,957 INFO L210 NwaCegarLoop]: Found error trace [2024-11-24 00:44:02,957 INFO L218 NwaCegarLoop]: trace histogram [8, 8, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-24 00:44:02,970 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f9ad7185-4106-4d64-9266-9d286afa45e8/bin/uautomizer-verify-LYvppIcaGC/z3 -smt2 -in SMTLIB2_COMPLIANT=true (9)] Ended with exit code 0 [2024-11-24 00:44:03,157 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable15,9 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f9ad7185-4106-4d64-9266-9d286afa45e8/bin/uautomizer-verify-LYvppIcaGC/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-11-24 00:44:03,158 INFO L396 AbstractCegarLoop]: === Iteration 17 === Targeting outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION === [outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-24 00:44:03,158 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-24 00:44:03,159 INFO L85 PathProgramCache]: Analyzing trace with hash 1128034284, now seen corresponding path program 1 times [2024-11-24 00:44:03,159 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-24 00:44:03,159 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [620380225] [2024-11-24 00:44:03,159 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-24 00:44:03,159 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-24 00:44:03,207 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-24 00:44:03,417 INFO L134 CoverageAnalysis]: Checked inductivity of 121 backedges. 0 proven. 9 refuted. 0 times theorem prover too weak. 112 trivial. 0 not checked. [2024-11-24 00:44:03,417 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-24 00:44:03,418 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [620380225] [2024-11-24 00:44:03,418 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [620380225] provided 0 perfect and 1 imperfect interpolant sequences [2024-11-24 00:44:03,418 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1444681786] [2024-11-24 00:44:03,418 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-24 00:44:03,418 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-11-24 00:44:03,418 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f9ad7185-4106-4d64-9266-9d286afa45e8/bin/uautomizer-verify-LYvppIcaGC/z3 [2024-11-24 00:44:03,422 INFO L229 MonitoredProcess]: Starting monitored process 10 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f9ad7185-4106-4d64-9266-9d286afa45e8/bin/uautomizer-verify-LYvppIcaGC/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-11-24 00:44:03,427 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f9ad7185-4106-4d64-9266-9d286afa45e8/bin/uautomizer-verify-LYvppIcaGC/z3 -smt2 -in SMTLIB2_COMPLIANT=true (10)] Waiting until timeout for monitored process [2024-11-24 00:44:03,965 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-24 00:44:03,972 INFO L256 TraceCheckSpWp]: Trace formula consists of 1380 conjuncts, 3 conjuncts are in the unsatisfiable core [2024-11-24 00:44:03,982 INFO L279 TraceCheckSpWp]: Computing forward predicates... [2024-11-24 00:44:04,023 INFO L134 CoverageAnalysis]: Checked inductivity of 121 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 121 trivial. 0 not checked. [2024-11-24 00:44:04,023 INFO L308 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2024-11-24 00:44:04,023 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1444681786] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-24 00:44:04,024 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2024-11-24 00:44:04,024 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [6] total 7 [2024-11-24 00:44:04,024 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [564037875] [2024-11-24 00:44:04,024 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-24 00:44:04,025 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2024-11-24 00:44:04,025 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-24 00:44:04,025 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-11-24 00:44:04,026 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2024-11-24 00:44:04,026 INFO L87 Difference]: Start difference. First operand 2195 states and 3480 transitions. Second operand has 3 states, 3 states have (on average 35.666666666666664) internal successors, (107), 3 states have internal predecessors, (107), 2 states have call successors, (28), 2 states have call predecessors, (28), 2 states have return successors, (23), 2 states have call predecessors, (23), 2 states have call successors, (23) [2024-11-24 00:44:04,186 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-24 00:44:04,187 INFO L93 Difference]: Finished difference Result 5173 states and 8312 transitions. [2024-11-24 00:44:04,187 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-11-24 00:44:04,187 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 35.666666666666664) internal successors, (107), 3 states have internal predecessors, (107), 2 states have call successors, (28), 2 states have call predecessors, (28), 2 states have return successors, (23), 2 states have call predecessors, (23), 2 states have call successors, (23) Word has length 189 [2024-11-24 00:44:04,188 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-24 00:44:04,214 INFO L225 Difference]: With dead ends: 5173 [2024-11-24 00:44:04,214 INFO L226 Difference]: Without dead ends: 3193 [2024-11-24 00:44:04,224 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 194 GetRequests, 189 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2024-11-24 00:44:04,225 INFO L435 NwaCegarLoop]: 857 mSDtfsCounter, 163 mSDsluCounter, 832 mSDsCounter, 0 mSdLazyCounter, 3 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 181 SdHoareTripleChecker+Valid, 1689 SdHoareTripleChecker+Invalid, 4 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 3 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-11-24 00:44:04,225 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [181 Valid, 1689 Invalid, 4 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 3 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-11-24 00:44:04,230 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3193 states. [2024-11-24 00:44:04,464 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3193 to 3183. [2024-11-24 00:44:04,475 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3183 states, 2615 states have (on average 1.5506692160611855) internal successors, (4055), 2636 states have internal predecessors, (4055), 494 states have call successors, (494), 70 states have call predecessors, (494), 73 states have return successors, (570), 485 states have call predecessors, (570), 493 states have call successors, (570) [2024-11-24 00:44:04,499 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3183 states to 3183 states and 5119 transitions. [2024-11-24 00:44:04,502 INFO L78 Accepts]: Start accepts. Automaton has 3183 states and 5119 transitions. Word has length 189 [2024-11-24 00:44:04,504 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-24 00:44:04,504 INFO L471 AbstractCegarLoop]: Abstraction has 3183 states and 5119 transitions. [2024-11-24 00:44:04,505 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 35.666666666666664) internal successors, (107), 3 states have internal predecessors, (107), 2 states have call successors, (28), 2 states have call predecessors, (28), 2 states have return successors, (23), 2 states have call predecessors, (23), 2 states have call successors, (23) [2024-11-24 00:44:04,505 INFO L276 IsEmpty]: Start isEmpty. Operand 3183 states and 5119 transitions. [2024-11-24 00:44:04,525 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 191 [2024-11-24 00:44:04,525 INFO L210 NwaCegarLoop]: Found error trace [2024-11-24 00:44:04,526 INFO L218 NwaCegarLoop]: trace histogram [8, 8, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-24 00:44:04,538 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f9ad7185-4106-4d64-9266-9d286afa45e8/bin/uautomizer-verify-LYvppIcaGC/z3 -smt2 -in SMTLIB2_COMPLIANT=true (10)] Ended with exit code 0 [2024-11-24 00:44:04,726 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 10 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f9ad7185-4106-4d64-9266-9d286afa45e8/bin/uautomizer-verify-LYvppIcaGC/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable16 [2024-11-24 00:44:04,727 INFO L396 AbstractCegarLoop]: === Iteration 18 === Targeting outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION === [outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-24 00:44:04,727 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-24 00:44:04,727 INFO L85 PathProgramCache]: Analyzing trace with hash -1442746640, now seen corresponding path program 1 times [2024-11-24 00:44:04,727 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-24 00:44:04,727 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1911554097] [2024-11-24 00:44:04,728 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-24 00:44:04,728 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-24 00:44:04,767 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-24 00:44:04,946 INFO L134 CoverageAnalysis]: Checked inductivity of 121 backedges. 0 proven. 9 refuted. 0 times theorem prover too weak. 112 trivial. 0 not checked. [2024-11-24 00:44:04,947 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-24 00:44:04,947 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1911554097] [2024-11-24 00:44:04,947 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1911554097] provided 0 perfect and 1 imperfect interpolant sequences [2024-11-24 00:44:04,947 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1768859479] [2024-11-24 00:44:04,947 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-24 00:44:04,948 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-11-24 00:44:04,948 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f9ad7185-4106-4d64-9266-9d286afa45e8/bin/uautomizer-verify-LYvppIcaGC/z3 [2024-11-24 00:44:04,950 INFO L229 MonitoredProcess]: Starting monitored process 11 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f9ad7185-4106-4d64-9266-9d286afa45e8/bin/uautomizer-verify-LYvppIcaGC/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-11-24 00:44:04,953 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f9ad7185-4106-4d64-9266-9d286afa45e8/bin/uautomizer-verify-LYvppIcaGC/z3 -smt2 -in SMTLIB2_COMPLIANT=true (11)] Waiting until timeout for monitored process [2024-11-24 00:44:05,447 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-24 00:44:05,454 INFO L256 TraceCheckSpWp]: Trace formula consists of 1385 conjuncts, 3 conjuncts are in the unsatisfiable core [2024-11-24 00:44:05,461 INFO L279 TraceCheckSpWp]: Computing forward predicates... [2024-11-24 00:44:05,492 INFO L134 CoverageAnalysis]: Checked inductivity of 121 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 121 trivial. 0 not checked. [2024-11-24 00:44:05,494 INFO L308 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2024-11-24 00:44:05,495 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1768859479] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-24 00:44:05,495 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2024-11-24 00:44:05,495 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [6] total 7 [2024-11-24 00:44:05,495 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1578873915] [2024-11-24 00:44:05,495 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-24 00:44:05,496 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2024-11-24 00:44:05,496 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-24 00:44:05,497 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-11-24 00:44:05,497 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2024-11-24 00:44:05,497 INFO L87 Difference]: Start difference. First operand 3183 states and 5119 transitions. Second operand has 3 states, 3 states have (on average 36.0) internal successors, (108), 3 states have internal predecessors, (108), 2 states have call successors, (28), 2 states have call predecessors, (28), 2 states have return successors, (23), 2 states have call predecessors, (23), 2 states have call successors, (23) [2024-11-24 00:44:05,701 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-24 00:44:05,702 INFO L93 Difference]: Finished difference Result 7633 states and 12385 transitions. [2024-11-24 00:44:05,702 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-11-24 00:44:05,706 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 36.0) internal successors, (108), 3 states have internal predecessors, (108), 2 states have call successors, (28), 2 states have call predecessors, (28), 2 states have return successors, (23), 2 states have call predecessors, (23), 2 states have call successors, (23) Word has length 190 [2024-11-24 00:44:05,711 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-24 00:44:05,746 INFO L225 Difference]: With dead ends: 7633 [2024-11-24 00:44:05,746 INFO L226 Difference]: Without dead ends: 4787 [2024-11-24 00:44:05,760 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 195 GetRequests, 190 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2024-11-24 00:44:05,761 INFO L435 NwaCegarLoop]: 848 mSDtfsCounter, 161 mSDsluCounter, 838 mSDsCounter, 0 mSdLazyCounter, 3 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 179 SdHoareTripleChecker+Valid, 1686 SdHoareTripleChecker+Invalid, 4 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 3 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-11-24 00:44:05,761 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [179 Valid, 1686 Invalid, 4 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 3 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-11-24 00:44:05,769 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 4787 states. [2024-11-24 00:44:06,140 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 4787 to 4777. [2024-11-24 00:44:06,150 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 4777 states, 3971 states have (on average 1.5590531352304204) internal successors, (6191), 3992 states have internal predecessors, (6191), 732 states have call successors, (732), 70 states have call predecessors, (732), 73 states have return successors, (824), 723 states have call predecessors, (824), 731 states have call successors, (824) [2024-11-24 00:44:06,180 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4777 states to 4777 states and 7747 transitions. [2024-11-24 00:44:06,184 INFO L78 Accepts]: Start accepts. Automaton has 4777 states and 7747 transitions. Word has length 190 [2024-11-24 00:44:06,185 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-24 00:44:06,186 INFO L471 AbstractCegarLoop]: Abstraction has 4777 states and 7747 transitions. [2024-11-24 00:44:06,186 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 36.0) internal successors, (108), 3 states have internal predecessors, (108), 2 states have call successors, (28), 2 states have call predecessors, (28), 2 states have return successors, (23), 2 states have call predecessors, (23), 2 states have call successors, (23) [2024-11-24 00:44:06,186 INFO L276 IsEmpty]: Start isEmpty. Operand 4777 states and 7747 transitions. [2024-11-24 00:44:06,219 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 190 [2024-11-24 00:44:06,220 INFO L210 NwaCegarLoop]: Found error trace [2024-11-24 00:44:06,220 INFO L218 NwaCegarLoop]: trace histogram [8, 8, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-24 00:44:06,235 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f9ad7185-4106-4d64-9266-9d286afa45e8/bin/uautomizer-verify-LYvppIcaGC/z3 -smt2 -in SMTLIB2_COMPLIANT=true (11)] Ended with exit code 0 [2024-11-24 00:44:06,420 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 11 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f9ad7185-4106-4d64-9266-9d286afa45e8/bin/uautomizer-verify-LYvppIcaGC/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable17 [2024-11-24 00:44:06,421 INFO L396 AbstractCegarLoop]: === Iteration 19 === Targeting outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION === [outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-24 00:44:06,421 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-24 00:44:06,421 INFO L85 PathProgramCache]: Analyzing trace with hash 940756172, now seen corresponding path program 1 times [2024-11-24 00:44:06,421 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-24 00:44:06,421 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1525544756] [2024-11-24 00:44:06,422 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-24 00:44:06,422 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-24 00:44:06,478 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-24 00:44:06,542 INFO L134 CoverageAnalysis]: Checked inductivity of 118 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 118 trivial. 0 not checked. [2024-11-24 00:44:06,542 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-24 00:44:06,542 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1525544756] [2024-11-24 00:44:06,542 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1525544756] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-24 00:44:06,542 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-24 00:44:06,543 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-24 00:44:06,543 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [27473250] [2024-11-24 00:44:06,543 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-24 00:44:06,544 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2024-11-24 00:44:06,544 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-24 00:44:06,545 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-11-24 00:44:06,545 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-24 00:44:06,545 INFO L87 Difference]: Start difference. First operand 4777 states and 7747 transitions. Second operand has 3 states, 3 states have (on average 36.333333333333336) internal successors, (109), 3 states have internal predecessors, (109), 2 states have call successors, (28), 2 states have call predecessors, (28), 1 states have return successors, (23), 2 states have call predecessors, (23), 2 states have call successors, (23) [2024-11-24 00:44:06,780 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-24 00:44:06,780 INFO L93 Difference]: Finished difference Result 11375 states and 18609 transitions. [2024-11-24 00:44:06,781 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-11-24 00:44:06,781 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 36.333333333333336) internal successors, (109), 3 states have internal predecessors, (109), 2 states have call successors, (28), 2 states have call predecessors, (28), 1 states have return successors, (23), 2 states have call predecessors, (23), 2 states have call successors, (23) Word has length 189 [2024-11-24 00:44:06,781 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-24 00:44:06,855 INFO L225 Difference]: With dead ends: 11375 [2024-11-24 00:44:06,855 INFO L226 Difference]: Without dead ends: 7241 [2024-11-24 00:44:06,874 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-24 00:44:06,875 INFO L435 NwaCegarLoop]: 846 mSDtfsCounter, 159 mSDsluCounter, 835 mSDsCounter, 0 mSdLazyCounter, 3 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 177 SdHoareTripleChecker+Valid, 1681 SdHoareTripleChecker+Invalid, 4 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 3 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-11-24 00:44:06,875 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [177 Valid, 1681 Invalid, 4 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 3 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-11-24 00:44:06,884 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 7241 states. [2024-11-24 00:44:07,275 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 7241 to 7231. [2024-11-24 00:44:07,288 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7231 states, 6101 states have (on average 1.5667923291263728) internal successors, (9559), 6122 states have internal predecessors, (9559), 1056 states have call successors, (1056), 70 states have call predecessors, (1056), 73 states have return successors, (1198), 1047 states have call predecessors, (1198), 1055 states have call successors, (1198) [2024-11-24 00:44:07,320 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7231 states to 7231 states and 11813 transitions. [2024-11-24 00:44:07,324 INFO L78 Accepts]: Start accepts. Automaton has 7231 states and 11813 transitions. Word has length 189 [2024-11-24 00:44:07,325 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-24 00:44:07,325 INFO L471 AbstractCegarLoop]: Abstraction has 7231 states and 11813 transitions. [2024-11-24 00:44:07,325 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 36.333333333333336) internal successors, (109), 3 states have internal predecessors, (109), 2 states have call successors, (28), 2 states have call predecessors, (28), 1 states have return successors, (23), 2 states have call predecessors, (23), 2 states have call successors, (23) [2024-11-24 00:44:07,325 INFO L276 IsEmpty]: Start isEmpty. Operand 7231 states and 11813 transitions. [2024-11-24 00:44:07,356 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 191 [2024-11-24 00:44:07,357 INFO L210 NwaCegarLoop]: Found error trace [2024-11-24 00:44:07,357 INFO L218 NwaCegarLoop]: trace histogram [8, 8, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-24 00:44:07,357 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable18 [2024-11-24 00:44:07,357 INFO L396 AbstractCegarLoop]: === Iteration 20 === Targeting outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION === [outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-24 00:44:07,358 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-24 00:44:07,358 INFO L85 PathProgramCache]: Analyzing trace with hash -984463199, now seen corresponding path program 1 times [2024-11-24 00:44:07,359 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-24 00:44:07,359 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [921593724] [2024-11-24 00:44:07,359 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-24 00:44:07,359 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-24 00:44:07,400 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-24 00:44:07,454 INFO L134 CoverageAnalysis]: Checked inductivity of 118 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 118 trivial. 0 not checked. [2024-11-24 00:44:07,455 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-24 00:44:07,455 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [921593724] [2024-11-24 00:44:07,455 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [921593724] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-24 00:44:07,455 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-24 00:44:07,455 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-24 00:44:07,455 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2079176753] [2024-11-24 00:44:07,455 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-24 00:44:07,455 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2024-11-24 00:44:07,456 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-24 00:44:07,456 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-11-24 00:44:07,456 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-24 00:44:07,456 INFO L87 Difference]: Start difference. First operand 7231 states and 11813 transitions. Second operand has 3 states, 3 states have (on average 36.666666666666664) internal successors, (110), 3 states have internal predecessors, (110), 2 states have call successors, (28), 2 states have call predecessors, (28), 1 states have return successors, (23), 2 states have call predecessors, (23), 2 states have call successors, (23) [2024-11-24 00:44:07,880 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-24 00:44:07,880 INFO L93 Difference]: Finished difference Result 17287 states and 28473 transitions. [2024-11-24 00:44:07,880 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-11-24 00:44:07,881 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 36.666666666666664) internal successors, (110), 3 states have internal predecessors, (110), 2 states have call successors, (28), 2 states have call predecessors, (28), 1 states have return successors, (23), 2 states have call predecessors, (23), 2 states have call successors, (23) Word has length 190 [2024-11-24 00:44:07,881 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-24 00:44:07,938 INFO L225 Difference]: With dead ends: 17287 [2024-11-24 00:44:07,938 INFO L226 Difference]: Without dead ends: 11203 [2024-11-24 00:44:07,956 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-24 00:44:07,960 INFO L435 NwaCegarLoop]: 846 mSDtfsCounter, 157 mSDsluCounter, 835 mSDsCounter, 0 mSdLazyCounter, 3 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 175 SdHoareTripleChecker+Valid, 1681 SdHoareTripleChecker+Invalid, 4 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 3 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-11-24 00:44:07,961 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [175 Valid, 1681 Invalid, 4 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 3 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-11-24 00:44:07,976 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 11203 states. [2024-11-24 00:44:08,448 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 11203 to 11193. [2024-11-24 00:44:08,466 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 11193 states, 9573 states have (on average 1.5736968557401023) internal successors, (15065), 9594 states have internal predecessors, (15065), 1546 states have call successors, (1546), 70 states have call predecessors, (1546), 73 states have return successors, (1771), 1537 states have call predecessors, (1771), 1545 states have call successors, (1771) [2024-11-24 00:44:08,508 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11193 states to 11193 states and 18382 transitions. [2024-11-24 00:44:08,514 INFO L78 Accepts]: Start accepts. Automaton has 11193 states and 18382 transitions. Word has length 190 [2024-11-24 00:44:08,515 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-24 00:44:08,515 INFO L471 AbstractCegarLoop]: Abstraction has 11193 states and 18382 transitions. [2024-11-24 00:44:08,515 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 36.666666666666664) internal successors, (110), 3 states have internal predecessors, (110), 2 states have call successors, (28), 2 states have call predecessors, (28), 1 states have return successors, (23), 2 states have call predecessors, (23), 2 states have call successors, (23) [2024-11-24 00:44:08,515 INFO L276 IsEmpty]: Start isEmpty. Operand 11193 states and 18382 transitions. [2024-11-24 00:44:08,547 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 194 [2024-11-24 00:44:08,547 INFO L210 NwaCegarLoop]: Found error trace [2024-11-24 00:44:08,547 INFO L218 NwaCegarLoop]: trace histogram [8, 8, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-24 00:44:08,547 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable19 [2024-11-24 00:44:08,547 INFO L396 AbstractCegarLoop]: === Iteration 21 === Targeting outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION === [outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-24 00:44:08,548 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-24 00:44:08,548 INFO L85 PathProgramCache]: Analyzing trace with hash -980528528, now seen corresponding path program 1 times [2024-11-24 00:44:08,548 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-24 00:44:08,548 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1559000059] [2024-11-24 00:44:08,548 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-24 00:44:08,548 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-24 00:44:08,581 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-24 00:44:08,806 INFO L134 CoverageAnalysis]: Checked inductivity of 121 backedges. 0 proven. 9 refuted. 0 times theorem prover too weak. 112 trivial. 0 not checked. [2024-11-24 00:44:08,806 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-24 00:44:08,806 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1559000059] [2024-11-24 00:44:08,806 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1559000059] provided 0 perfect and 1 imperfect interpolant sequences [2024-11-24 00:44:08,806 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1334124946] [2024-11-24 00:44:08,807 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-24 00:44:08,807 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-11-24 00:44:08,807 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f9ad7185-4106-4d64-9266-9d286afa45e8/bin/uautomizer-verify-LYvppIcaGC/z3 [2024-11-24 00:44:08,809 INFO L229 MonitoredProcess]: Starting monitored process 12 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f9ad7185-4106-4d64-9266-9d286afa45e8/bin/uautomizer-verify-LYvppIcaGC/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-11-24 00:44:08,812 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f9ad7185-4106-4d64-9266-9d286afa45e8/bin/uautomizer-verify-LYvppIcaGC/z3 -smt2 -in SMTLIB2_COMPLIANT=true (12)] Waiting until timeout for monitored process [2024-11-24 00:44:09,248 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-24 00:44:09,253 INFO L256 TraceCheckSpWp]: Trace formula consists of 1400 conjuncts, 3 conjuncts are in the unsatisfiable core [2024-11-24 00:44:09,259 INFO L279 TraceCheckSpWp]: Computing forward predicates... [2024-11-24 00:44:09,296 INFO L134 CoverageAnalysis]: Checked inductivity of 121 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 121 trivial. 0 not checked. [2024-11-24 00:44:09,297 INFO L308 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2024-11-24 00:44:09,297 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1334124946] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-24 00:44:09,297 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2024-11-24 00:44:09,297 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [6] total 7 [2024-11-24 00:44:09,298 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [352459750] [2024-11-24 00:44:09,298 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-24 00:44:09,299 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2024-11-24 00:44:09,299 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-24 00:44:09,299 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-11-24 00:44:09,299 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2024-11-24 00:44:09,300 INFO L87 Difference]: Start difference. First operand 11193 states and 18382 transitions. Second operand has 3 states, 3 states have (on average 37.0) internal successors, (111), 3 states have internal predecessors, (111), 2 states have call successors, (28), 2 states have call predecessors, (28), 2 states have return successors, (23), 2 states have call predecessors, (23), 2 states have call successors, (23) [2024-11-24 00:44:09,963 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-24 00:44:09,963 INFO L93 Difference]: Finished difference Result 27119 states and 44806 transitions. [2024-11-24 00:44:09,966 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-11-24 00:44:09,966 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 37.0) internal successors, (111), 3 states have internal predecessors, (111), 2 states have call successors, (28), 2 states have call predecessors, (28), 2 states have return successors, (23), 2 states have call predecessors, (23), 2 states have call successors, (23) Word has length 193 [2024-11-24 00:44:09,967 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-24 00:44:10,069 INFO L225 Difference]: With dead ends: 27119 [2024-11-24 00:44:10,069 INFO L226 Difference]: Without dead ends: 17843 [2024-11-24 00:44:10,104 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 198 GetRequests, 193 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2024-11-24 00:44:10,106 INFO L435 NwaCegarLoop]: 863 mSDtfsCounter, 155 mSDsluCounter, 832 mSDsCounter, 0 mSdLazyCounter, 3 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 173 SdHoareTripleChecker+Valid, 1695 SdHoareTripleChecker+Invalid, 4 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 3 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-11-24 00:44:10,106 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [173 Valid, 1695 Invalid, 4 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 3 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-11-24 00:44:10,133 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 17843 states. [2024-11-24 00:44:11,206 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 17843 to 17833. [2024-11-24 00:44:11,233 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 17833 states, 15227 states have (on average 1.5697773691469101) internal successors, (23903), 15248 states have internal predecessors, (23903), 2532 states have call successors, (2532), 70 states have call predecessors, (2532), 73 states have return successors, (2901), 2523 states have call predecessors, (2901), 2531 states have call successors, (2901) [2024-11-24 00:44:11,300 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 17833 states to 17833 states and 29336 transitions. [2024-11-24 00:44:11,310 INFO L78 Accepts]: Start accepts. Automaton has 17833 states and 29336 transitions. Word has length 193 [2024-11-24 00:44:11,310 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-24 00:44:11,310 INFO L471 AbstractCegarLoop]: Abstraction has 17833 states and 29336 transitions. [2024-11-24 00:44:11,311 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 37.0) internal successors, (111), 3 states have internal predecessors, (111), 2 states have call successors, (28), 2 states have call predecessors, (28), 2 states have return successors, (23), 2 states have call predecessors, (23), 2 states have call successors, (23) [2024-11-24 00:44:11,311 INFO L276 IsEmpty]: Start isEmpty. Operand 17833 states and 29336 transitions. [2024-11-24 00:44:11,346 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 195 [2024-11-24 00:44:11,347 INFO L210 NwaCegarLoop]: Found error trace [2024-11-24 00:44:11,347 INFO L218 NwaCegarLoop]: trace histogram [8, 8, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-24 00:44:11,359 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f9ad7185-4106-4d64-9266-9d286afa45e8/bin/uautomizer-verify-LYvppIcaGC/z3 -smt2 -in SMTLIB2_COMPLIANT=true (12)] Ended with exit code 0 [2024-11-24 00:44:11,547 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable20,12 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f9ad7185-4106-4d64-9266-9d286afa45e8/bin/uautomizer-verify-LYvppIcaGC/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-11-24 00:44:11,548 INFO L396 AbstractCegarLoop]: === Iteration 22 === Targeting outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION === [outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-24 00:44:11,548 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-24 00:44:11,549 INFO L85 PathProgramCache]: Analyzing trace with hash 1194612253, now seen corresponding path program 1 times [2024-11-24 00:44:11,549 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-24 00:44:11,549 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1909170722] [2024-11-24 00:44:11,549 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-24 00:44:11,549 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-24 00:44:11,581 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-24 00:44:11,817 INFO L134 CoverageAnalysis]: Checked inductivity of 121 backedges. 0 proven. 9 refuted. 0 times theorem prover too weak. 112 trivial. 0 not checked. [2024-11-24 00:44:11,818 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-24 00:44:11,818 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1909170722] [2024-11-24 00:44:11,818 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1909170722] provided 0 perfect and 1 imperfect interpolant sequences [2024-11-24 00:44:11,818 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2134961496] [2024-11-24 00:44:11,818 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-24 00:44:11,818 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-11-24 00:44:11,818 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f9ad7185-4106-4d64-9266-9d286afa45e8/bin/uautomizer-verify-LYvppIcaGC/z3 [2024-11-24 00:44:11,821 INFO L229 MonitoredProcess]: Starting monitored process 13 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f9ad7185-4106-4d64-9266-9d286afa45e8/bin/uautomizer-verify-LYvppIcaGC/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-11-24 00:44:11,825 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f9ad7185-4106-4d64-9266-9d286afa45e8/bin/uautomizer-verify-LYvppIcaGC/z3 -smt2 -in SMTLIB2_COMPLIANT=true (13)] Waiting until timeout for monitored process [2024-11-24 00:44:12,319 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-24 00:44:12,326 INFO L256 TraceCheckSpWp]: Trace formula consists of 1405 conjuncts, 3 conjuncts are in the unsatisfiable core [2024-11-24 00:44:12,331 INFO L279 TraceCheckSpWp]: Computing forward predicates... [2024-11-24 00:44:12,373 INFO L134 CoverageAnalysis]: Checked inductivity of 121 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 121 trivial. 0 not checked. [2024-11-24 00:44:12,373 INFO L308 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2024-11-24 00:44:12,373 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2134961496] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-24 00:44:12,373 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2024-11-24 00:44:12,374 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [6] total 7 [2024-11-24 00:44:12,374 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1164052189] [2024-11-24 00:44:12,374 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-24 00:44:12,374 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2024-11-24 00:44:12,375 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-24 00:44:12,375 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-11-24 00:44:12,375 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2024-11-24 00:44:12,376 INFO L87 Difference]: Start difference. First operand 17833 states and 29336 transitions. Second operand has 3 states, 3 states have (on average 37.333333333333336) internal successors, (112), 3 states have internal predecessors, (112), 2 states have call successors, (28), 2 states have call predecessors, (28), 2 states have return successors, (23), 2 states have call predecessors, (23), 2 states have call successors, (23) [2024-11-24 00:44:13,317 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-24 00:44:13,319 INFO L93 Difference]: Finished difference Result 44759 states and 74142 transitions. [2024-11-24 00:44:13,319 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-11-24 00:44:13,319 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 37.333333333333336) internal successors, (112), 3 states have internal predecessors, (112), 2 states have call successors, (28), 2 states have call predecessors, (28), 2 states have return successors, (23), 2 states have call predecessors, (23), 2 states have call successors, (23) Word has length 194 [2024-11-24 00:44:13,320 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-24 00:44:13,444 INFO L225 Difference]: With dead ends: 44759 [2024-11-24 00:44:13,444 INFO L226 Difference]: Without dead ends: 29803 [2024-11-24 00:44:13,477 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 199 GetRequests, 194 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2024-11-24 00:44:13,479 INFO L435 NwaCegarLoop]: 846 mSDtfsCounter, 153 mSDsluCounter, 838 mSDsCounter, 0 mSdLazyCounter, 3 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 171 SdHoareTripleChecker+Valid, 1684 SdHoareTripleChecker+Invalid, 4 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 3 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-11-24 00:44:13,480 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [171 Valid, 1684 Invalid, 4 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 3 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-11-24 00:44:13,498 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 29803 states. [2024-11-24 00:44:14,622 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 29803 to 29793. [2024-11-24 00:44:14,658 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 29793 states, 25543 states have (on average 1.574560544963395) internal successors, (40219), 25564 states have internal predecessors, (40219), 4176 states have call successors, (4176), 70 states have call predecessors, (4176), 73 states have return successors, (4734), 4167 states have call predecessors, (4734), 4175 states have call successors, (4734) [2024-11-24 00:44:14,746 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 29793 states to 29793 states and 49129 transitions. [2024-11-24 00:44:14,757 INFO L78 Accepts]: Start accepts. Automaton has 29793 states and 49129 transitions. Word has length 194 [2024-11-24 00:44:14,758 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-24 00:44:14,758 INFO L471 AbstractCegarLoop]: Abstraction has 29793 states and 49129 transitions. [2024-11-24 00:44:14,758 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 37.333333333333336) internal successors, (112), 3 states have internal predecessors, (112), 2 states have call successors, (28), 2 states have call predecessors, (28), 2 states have return successors, (23), 2 states have call predecessors, (23), 2 states have call successors, (23) [2024-11-24 00:44:14,758 INFO L276 IsEmpty]: Start isEmpty. Operand 29793 states and 49129 transitions. [2024-11-24 00:44:14,797 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 194 [2024-11-24 00:44:14,797 INFO L210 NwaCegarLoop]: Found error trace [2024-11-24 00:44:14,797 INFO L218 NwaCegarLoop]: trace histogram [8, 8, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-24 00:44:14,810 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f9ad7185-4106-4d64-9266-9d286afa45e8/bin/uautomizer-verify-LYvppIcaGC/z3 -smt2 -in SMTLIB2_COMPLIANT=true (13)] Forceful destruction successful, exit code 0 [2024-11-24 00:44:15,002 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable21,13 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f9ad7185-4106-4d64-9266-9d286afa45e8/bin/uautomizer-verify-LYvppIcaGC/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-11-24 00:44:15,003 INFO L396 AbstractCegarLoop]: === Iteration 23 === Targeting outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION === [outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-24 00:44:15,003 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-24 00:44:15,004 INFO L85 PathProgramCache]: Analyzing trace with hash 36543856, now seen corresponding path program 1 times [2024-11-24 00:44:15,004 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-24 00:44:15,004 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2146398810] [2024-11-24 00:44:15,004 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-24 00:44:15,004 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-24 00:44:15,038 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-24 00:44:15,087 INFO L134 CoverageAnalysis]: Checked inductivity of 118 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 118 trivial. 0 not checked. [2024-11-24 00:44:15,087 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-24 00:44:15,088 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2146398810] [2024-11-24 00:44:15,088 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2146398810] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-24 00:44:15,088 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-24 00:44:15,088 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-24 00:44:15,088 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [358723485] [2024-11-24 00:44:15,088 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-24 00:44:15,089 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2024-11-24 00:44:15,089 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-24 00:44:15,090 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-11-24 00:44:15,090 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-24 00:44:15,090 INFO L87 Difference]: Start difference. First operand 29793 states and 49129 transitions. Second operand has 3 states, 3 states have (on average 37.666666666666664) internal successors, (113), 3 states have internal predecessors, (113), 2 states have call successors, (28), 2 states have call predecessors, (28), 1 states have return successors, (23), 2 states have call predecessors, (23), 2 states have call successors, (23) [2024-11-24 00:44:17,218 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-24 00:44:17,218 INFO L93 Difference]: Finished difference Result 71901 states and 118048 transitions. [2024-11-24 00:44:17,218 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-11-24 00:44:17,219 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 37.666666666666664) internal successors, (113), 3 states have internal predecessors, (113), 2 states have call successors, (28), 2 states have call predecessors, (28), 1 states have return successors, (23), 2 states have call predecessors, (23), 2 states have call successors, (23) Word has length 193 [2024-11-24 00:44:17,219 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-24 00:44:17,453 INFO L225 Difference]: With dead ends: 71901 [2024-11-24 00:44:17,453 INFO L226 Difference]: Without dead ends: 47209 [2024-11-24 00:44:17,517 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-24 00:44:17,518 INFO L435 NwaCegarLoop]: 866 mSDtfsCounter, 151 mSDsluCounter, 811 mSDsCounter, 0 mSdLazyCounter, 3 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 169 SdHoareTripleChecker+Valid, 1677 SdHoareTripleChecker+Invalid, 4 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 3 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-11-24 00:44:17,518 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [169 Valid, 1677 Invalid, 4 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 3 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-11-24 00:44:17,552 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 47209 states. [2024-11-24 00:44:19,883 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 47209 to 47199. [2024-11-24 00:44:19,930 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 47199 states, 40543 states have (on average 1.5470734775423625) internal successors, (62723), 40564 states have internal predecessors, (62723), 6582 states have call successors, (6582), 70 states have call predecessors, (6582), 73 states have return successors, (7565), 6573 states have call predecessors, (7565), 6581 states have call successors, (7565) [2024-11-24 00:44:20,083 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 47199 states to 47199 states and 76870 transitions. [2024-11-24 00:44:20,102 INFO L78 Accepts]: Start accepts. Automaton has 47199 states and 76870 transitions. Word has length 193 [2024-11-24 00:44:20,102 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-24 00:44:20,103 INFO L471 AbstractCegarLoop]: Abstraction has 47199 states and 76870 transitions. [2024-11-24 00:44:20,103 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 37.666666666666664) internal successors, (113), 3 states have internal predecessors, (113), 2 states have call successors, (28), 2 states have call predecessors, (28), 1 states have return successors, (23), 2 states have call predecessors, (23), 2 states have call successors, (23) [2024-11-24 00:44:20,103 INFO L276 IsEmpty]: Start isEmpty. Operand 47199 states and 76870 transitions. [2024-11-24 00:44:20,166 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 195 [2024-11-24 00:44:20,166 INFO L210 NwaCegarLoop]: Found error trace [2024-11-24 00:44:20,166 INFO L218 NwaCegarLoop]: trace histogram [8, 8, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-24 00:44:20,166 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable22 [2024-11-24 00:44:20,167 INFO L396 AbstractCegarLoop]: === Iteration 24 === Targeting outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION === [outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-24 00:44:20,167 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-24 00:44:20,167 INFO L85 PathProgramCache]: Analyzing trace with hash -1465387474, now seen corresponding path program 1 times [2024-11-24 00:44:20,167 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-24 00:44:20,167 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [780299825] [2024-11-24 00:44:20,167 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-24 00:44:20,168 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-24 00:44:20,205 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-24 00:44:20,254 INFO L134 CoverageAnalysis]: Checked inductivity of 118 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 118 trivial. 0 not checked. [2024-11-24 00:44:20,256 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-24 00:44:20,256 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [780299825] [2024-11-24 00:44:20,256 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [780299825] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-24 00:44:20,256 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-24 00:44:20,256 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-24 00:44:20,257 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [616858399] [2024-11-24 00:44:20,257 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-24 00:44:20,257 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2024-11-24 00:44:20,257 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-24 00:44:20,258 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-11-24 00:44:20,258 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-24 00:44:20,258 INFO L87 Difference]: Start difference. First operand 47199 states and 76870 transitions. Second operand has 3 states, 3 states have (on average 38.0) internal successors, (114), 3 states have internal predecessors, (114), 2 states have call successors, (28), 2 states have call predecessors, (28), 1 states have return successors, (23), 2 states have call predecessors, (23), 2 states have call successors, (23) [2024-11-24 00:44:22,993 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-24 00:44:22,993 INFO L93 Difference]: Finished difference Result 124727 states and 203867 transitions. [2024-11-24 00:44:22,993 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-11-24 00:44:22,994 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 38.0) internal successors, (114), 3 states have internal predecessors, (114), 2 states have call successors, (28), 2 states have call predecessors, (28), 1 states have return successors, (23), 2 states have call predecessors, (23), 2 states have call successors, (23) Word has length 194 [2024-11-24 00:44:22,994 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-24 00:44:23,315 INFO L225 Difference]: With dead ends: 124727 [2024-11-24 00:44:23,315 INFO L226 Difference]: Without dead ends: 84195 [2024-11-24 00:44:23,416 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-24 00:44:23,417 INFO L435 NwaCegarLoop]: 846 mSDtfsCounter, 149 mSDsluCounter, 839 mSDsCounter, 0 mSdLazyCounter, 3 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 167 SdHoareTripleChecker+Valid, 1685 SdHoareTripleChecker+Invalid, 4 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 3 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-11-24 00:44:23,418 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [167 Valid, 1685 Invalid, 4 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 3 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-11-24 00:44:23,477 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 84195 states. [2024-11-24 00:44:26,800 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 84195 to 84185. [2024-11-24 00:44:26,878 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 84185 states, 72629 states have (on average 1.546448388384805) internal successors, (112317), 72650 states have internal predecessors, (112317), 11482 states have call successors, (11482), 70 states have call predecessors, (11482), 73 states have return successors, (13279), 11473 states have call predecessors, (13279), 11481 states have call successors, (13279) [2024-11-24 00:44:27,154 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 84185 states to 84185 states and 137078 transitions. [2024-11-24 00:44:27,184 INFO L78 Accepts]: Start accepts. Automaton has 84185 states and 137078 transitions. Word has length 194 [2024-11-24 00:44:27,185 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-24 00:44:27,185 INFO L471 AbstractCegarLoop]: Abstraction has 84185 states and 137078 transitions. [2024-11-24 00:44:27,185 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 38.0) internal successors, (114), 3 states have internal predecessors, (114), 2 states have call successors, (28), 2 states have call predecessors, (28), 1 states have return successors, (23), 2 states have call predecessors, (23), 2 states have call successors, (23) [2024-11-24 00:44:27,185 INFO L276 IsEmpty]: Start isEmpty. Operand 84185 states and 137078 transitions. [2024-11-24 00:44:27,290 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 196 [2024-11-24 00:44:27,290 INFO L210 NwaCegarLoop]: Found error trace [2024-11-24 00:44:27,290 INFO L218 NwaCegarLoop]: trace histogram [8, 8, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-24 00:44:27,290 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable23 [2024-11-24 00:44:27,291 INFO L396 AbstractCegarLoop]: === Iteration 25 === Targeting outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION === [outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-24 00:44:27,291 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-24 00:44:27,291 INFO L85 PathProgramCache]: Analyzing trace with hash 1972556573, now seen corresponding path program 1 times [2024-11-24 00:44:27,292 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-24 00:44:27,292 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [271890824] [2024-11-24 00:44:27,292 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-24 00:44:27,292 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-24 00:44:27,345 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-24 00:44:27,892 INFO L134 CoverageAnalysis]: Checked inductivity of 118 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 118 trivial. 0 not checked. [2024-11-24 00:44:27,892 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-24 00:44:27,893 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [271890824] [2024-11-24 00:44:27,893 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [271890824] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-24 00:44:27,893 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-24 00:44:27,893 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-24 00:44:27,893 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [254076830] [2024-11-24 00:44:27,893 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-24 00:44:27,893 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2024-11-24 00:44:27,894 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-24 00:44:27,894 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-11-24 00:44:27,897 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-24 00:44:27,898 INFO L87 Difference]: Start difference. First operand 84185 states and 137078 transitions. Second operand has 3 states, 3 states have (on average 38.333333333333336) internal successors, (115), 3 states have internal predecessors, (115), 2 states have call successors, (28), 2 states have call predecessors, (28), 1 states have return successors, (23), 2 states have call predecessors, (23), 2 states have call successors, (23) [2024-11-24 00:44:32,031 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-24 00:44:32,031 INFO L93 Difference]: Finished difference Result 228381 states and 373261 transitions. [2024-11-24 00:44:32,031 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-11-24 00:44:32,031 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 38.333333333333336) internal successors, (115), 3 states have internal predecessors, (115), 2 states have call successors, (28), 2 states have call predecessors, (28), 1 states have return successors, (23), 2 states have call predecessors, (23), 2 states have call successors, (23) Word has length 195 [2024-11-24 00:44:32,032 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-24 00:44:32,703 INFO L225 Difference]: With dead ends: 228381 [2024-11-24 00:44:32,704 INFO L226 Difference]: Without dead ends: 153141 [2024-11-24 00:44:32,922 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-24 00:44:32,922 INFO L435 NwaCegarLoop]: 851 mSDtfsCounter, 147 mSDsluCounter, 838 mSDsCounter, 0 mSdLazyCounter, 3 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 165 SdHoareTripleChecker+Valid, 1689 SdHoareTripleChecker+Invalid, 4 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 3 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-11-24 00:44:32,922 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [165 Valid, 1689 Invalid, 4 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 3 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-11-24 00:44:33,031 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 153141 states. [2024-11-24 00:44:38,703 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 153141 to 153131. [2024-11-24 00:44:38,768 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 153131 states, 132549 states have (on average 1.5497891345841914) internal successors, (205423), 132570 states have internal predecessors, (205423), 20508 states have call successors, (20508), 70 states have call predecessors, (20508), 73 states have return successors, (23369), 20499 states have call predecessors, (23369), 20507 states have call successors, (23369) [2024-11-24 00:44:39,163 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 153131 states to 153131 states and 249300 transitions. [2024-11-24 00:44:39,209 INFO L78 Accepts]: Start accepts. Automaton has 153131 states and 249300 transitions. Word has length 195 [2024-11-24 00:44:39,209 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-24 00:44:39,209 INFO L471 AbstractCegarLoop]: Abstraction has 153131 states and 249300 transitions. [2024-11-24 00:44:39,209 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 38.333333333333336) internal successors, (115), 3 states have internal predecessors, (115), 2 states have call successors, (28), 2 states have call predecessors, (28), 1 states have return successors, (23), 2 states have call predecessors, (23), 2 states have call successors, (23) [2024-11-24 00:44:39,209 INFO L276 IsEmpty]: Start isEmpty. Operand 153131 states and 249300 transitions. [2024-11-24 00:44:39,294 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 197 [2024-11-24 00:44:39,294 INFO L210 NwaCegarLoop]: Found error trace [2024-11-24 00:44:39,294 INFO L218 NwaCegarLoop]: trace histogram [8, 8, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-24 00:44:39,295 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable24 [2024-11-24 00:44:39,295 INFO L396 AbstractCegarLoop]: === Iteration 26 === Targeting outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION === [outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-24 00:44:39,295 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-24 00:44:39,295 INFO L85 PathProgramCache]: Analyzing trace with hash -1860792472, now seen corresponding path program 1 times [2024-11-24 00:44:39,296 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-24 00:44:39,296 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1216180888] [2024-11-24 00:44:39,296 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-24 00:44:39,296 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-24 00:44:39,335 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-24 00:44:39,387 INFO L134 CoverageAnalysis]: Checked inductivity of 118 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 118 trivial. 0 not checked. [2024-11-24 00:44:39,387 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-24 00:44:39,387 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1216180888] [2024-11-24 00:44:39,388 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1216180888] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-24 00:44:39,388 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-24 00:44:39,388 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-24 00:44:39,388 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1507319322] [2024-11-24 00:44:39,388 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-24 00:44:39,388 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2024-11-24 00:44:39,389 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-24 00:44:39,389 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-11-24 00:44:39,389 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-24 00:44:39,390 INFO L87 Difference]: Start difference. First operand 153131 states and 249300 transitions. Second operand has 3 states, 3 states have (on average 38.666666666666664) internal successors, (116), 3 states have internal predecessors, (116), 2 states have call successors, (28), 2 states have call predecessors, (28), 1 states have return successors, (23), 2 states have call predecessors, (23), 2 states have call successors, (23)