./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/email_spec4_productSimulator.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version d790fecc Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d3b35404-e636-45a5-b527-45af5a94f135/bin/uautomizer-verify-aQ6SnzHsRB/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d3b35404-e636-45a5-b527-45af5a94f135/bin/uautomizer-verify-aQ6SnzHsRB/plugins/org.eclipse.equinox.launcher_1.6.800.v20240513-1750.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d3b35404-e636-45a5-b527-45af5a94f135/bin/uautomizer-verify-aQ6SnzHsRB/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d3b35404-e636-45a5-b527-45af5a94f135/bin/uautomizer-verify-aQ6SnzHsRB/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/email_spec4_productSimulator.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d3b35404-e636-45a5-b527-45af5a94f135/bin/uautomizer-verify-aQ6SnzHsRB/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d3b35404-e636-45a5-b527-45af5a94f135/bin/uautomizer-verify-aQ6SnzHsRB --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash cf397912a53dab4d44f4df9c274fc7c69b1023a0a0a29a356bc73a744537daa6 --- Real Ultimate output --- This is Ultimate 0.3.0-dev-d790fec [2024-11-28 03:07:49,778 INFO L188 SettingsManager]: Resetting all preferences to default values... [2024-11-28 03:07:49,866 INFO L114 SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d3b35404-e636-45a5-b527-45af5a94f135/bin/uautomizer-verify-aQ6SnzHsRB/config/svcomp-Reach-32bit-Automizer_Default.epf [2024-11-28 03:07:49,871 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2024-11-28 03:07:49,871 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2024-11-28 03:07:49,897 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2024-11-28 03:07:49,897 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2024-11-28 03:07:49,898 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2024-11-28 03:07:49,898 INFO L151 SettingsManager]: Preferences of Boogie Preprocessor differ from their defaults: [2024-11-28 03:07:49,898 INFO L153 SettingsManager]: * Use memory slicer=true [2024-11-28 03:07:49,898 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2024-11-28 03:07:49,899 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2024-11-28 03:07:49,899 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2024-11-28 03:07:49,899 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2024-11-28 03:07:49,899 INFO L153 SettingsManager]: * Use SBE=true [2024-11-28 03:07:49,900 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2024-11-28 03:07:49,900 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2024-11-28 03:07:49,900 INFO L153 SettingsManager]: * sizeof long=4 [2024-11-28 03:07:49,900 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2024-11-28 03:07:49,900 INFO L153 SettingsManager]: * sizeof POINTER=4 [2024-11-28 03:07:49,900 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2024-11-28 03:07:49,900 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2024-11-28 03:07:49,901 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2024-11-28 03:07:49,901 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2024-11-28 03:07:49,901 INFO L153 SettingsManager]: * sizeof long double=12 [2024-11-28 03:07:49,901 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2024-11-28 03:07:49,901 INFO L153 SettingsManager]: * Behaviour of calls to undefined functions=OVERAPPROXIMATE_BEHAVIOUR [2024-11-28 03:07:49,901 INFO L153 SettingsManager]: * Use constant arrays=true [2024-11-28 03:07:49,901 INFO L151 SettingsManager]: Preferences of IcfgBuilder differ from their defaults: [2024-11-28 03:07:49,902 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2024-11-28 03:07:49,902 INFO L153 SettingsManager]: * Only consider context switches at boundaries of atomic blocks=true [2024-11-28 03:07:49,902 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2024-11-28 03:07:49,902 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2024-11-28 03:07:49,902 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2024-11-28 03:07:49,902 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2024-11-28 03:07:49,902 INFO L153 SettingsManager]: * Only consider context switches at boundaries of atomic blocks=true [2024-11-28 03:07:49,903 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2024-11-28 03:07:49,903 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2024-11-28 03:07:49,903 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2024-11-28 03:07:49,903 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2024-11-28 03:07:49,903 INFO L153 SettingsManager]: * Compute procedure contracts=false [2024-11-28 03:07:49,903 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopHeads [2024-11-28 03:07:49,903 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2024-11-28 03:07:49,904 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2024-11-28 03:07:49,904 INFO L153 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2024-11-28 03:07:49,904 INFO L153 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2024-11-28 03:07:49,904 INFO L153 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2024-11-28 03:07:49,904 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2024-11-28 03:07:49,904 INFO L153 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d3b35404-e636-45a5-b527-45af5a94f135/bin/uautomizer-verify-aQ6SnzHsRB Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> cf397912a53dab4d44f4df9c274fc7c69b1023a0a0a29a356bc73a744537daa6 [2024-11-28 03:07:50,255 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2024-11-28 03:07:50,268 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2024-11-28 03:07:50,270 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2024-11-28 03:07:50,273 INFO L270 PluginConnector]: Initializing CDTParser... [2024-11-28 03:07:50,273 INFO L274 PluginConnector]: CDTParser initialized [2024-11-28 03:07:50,275 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d3b35404-e636-45a5-b527-45af5a94f135/bin/uautomizer-verify-aQ6SnzHsRB/../../sv-benchmarks/c/product-lines/email_spec4_productSimulator.cil.c [2024-11-28 03:07:53,212 INFO L533 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d3b35404-e636-45a5-b527-45af5a94f135/bin/uautomizer-verify-aQ6SnzHsRB/data/5fde3a07e/91b9ef324b4a4c38bd551bfc6357320f/FLAG8ee132490 [2024-11-28 03:07:53,689 INFO L384 CDTParser]: Found 1 translation units. [2024-11-28 03:07:53,691 INFO L180 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d3b35404-e636-45a5-b527-45af5a94f135/sv-benchmarks/c/product-lines/email_spec4_productSimulator.cil.c [2024-11-28 03:07:53,711 INFO L427 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d3b35404-e636-45a5-b527-45af5a94f135/bin/uautomizer-verify-aQ6SnzHsRB/data/5fde3a07e/91b9ef324b4a4c38bd551bfc6357320f/FLAG8ee132490 [2024-11-28 03:07:53,726 INFO L435 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d3b35404-e636-45a5-b527-45af5a94f135/bin/uautomizer-verify-aQ6SnzHsRB/data/5fde3a07e/91b9ef324b4a4c38bd551bfc6357320f [2024-11-28 03:07:53,729 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2024-11-28 03:07:53,730 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2024-11-28 03:07:53,734 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2024-11-28 03:07:53,735 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2024-11-28 03:07:53,743 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2024-11-28 03:07:53,743 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 28.11 03:07:53" (1/1) ... [2024-11-28 03:07:53,744 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@48292fe6 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 03:07:53, skipping insertion in model container [2024-11-28 03:07:53,745 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 28.11 03:07:53" (1/1) ... [2024-11-28 03:07:53,815 INFO L175 MainTranslator]: Built tables and reachable declarations [2024-11-28 03:07:54,301 WARN L250 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d3b35404-e636-45a5-b527-45af5a94f135/sv-benchmarks/c/product-lines/email_spec4_productSimulator.cil.c[18883,18896] [2024-11-28 03:07:54,630 INFO L210 PostProcessor]: Analyzing one entry point: main [2024-11-28 03:07:54,652 INFO L200 MainTranslator]: Completed pre-run [2024-11-28 03:07:54,661 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [48] [2024-11-28 03:07:54,663 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Util.i","") [335] [2024-11-28 03:07:54,664 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Client.i","") [353] [2024-11-28 03:07:54,664 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [938] [2024-11-28 03:07:54,664 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"ClientLib.i","") [947] [2024-11-28 03:07:54,664 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [2018] [2024-11-28 03:07:54,664 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"EmailLib.i","") [2128] [2024-11-28 03:07:54,665 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [2527] [2024-11-28 03:07:54,665 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Email.i","") [2876] [2024-11-28 03:07:54,667 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [3080] [2024-11-28 03:07:54,667 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"SignForward_spec.i","") [3446] [2024-11-28 03:07:54,719 WARN L250 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d3b35404-e636-45a5-b527-45af5a94f135/sv-benchmarks/c/product-lines/email_spec4_productSimulator.cil.c[18883,18896] [2024-11-28 03:07:54,816 INFO L210 PostProcessor]: Analyzing one entry point: main [2024-11-28 03:07:54,852 INFO L204 MainTranslator]: Completed translation [2024-11-28 03:07:54,853 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 03:07:54 WrapperNode [2024-11-28 03:07:54,853 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2024-11-28 03:07:54,854 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2024-11-28 03:07:54,854 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2024-11-28 03:07:54,854 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2024-11-28 03:07:54,861 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 03:07:54" (1/1) ... [2024-11-28 03:07:54,884 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 03:07:54" (1/1) ... [2024-11-28 03:07:54,974 INFO L138 Inliner]: procedures = 151, calls = 263, calls flagged for inlining = 67, calls inlined = 64, statements flattened = 1316 [2024-11-28 03:07:54,975 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2024-11-28 03:07:54,975 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2024-11-28 03:07:54,976 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2024-11-28 03:07:54,976 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2024-11-28 03:07:54,986 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 03:07:54" (1/1) ... [2024-11-28 03:07:54,986 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 03:07:54" (1/1) ... [2024-11-28 03:07:54,994 INFO L184 PluginConnector]: Executing the observer MemorySlicer from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 03:07:54" (1/1) ... [2024-11-28 03:07:55,023 INFO L175 MemorySlicer]: Split 14 memory accesses to 4 slices as follows [2, 4, 4, 4]. 29 percent of accesses are in the largest equivalence class. The 14 initializations are split as follows [2, 4, 4, 4]. The 0 writes are split as follows [0, 0, 0, 0]. [2024-11-28 03:07:55,023 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 03:07:54" (1/1) ... [2024-11-28 03:07:55,024 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 03:07:54" (1/1) ... [2024-11-28 03:07:55,085 INFO L184 PluginConnector]: Executing the observer ReplaceArrayAssignments from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 03:07:54" (1/1) ... [2024-11-28 03:07:55,092 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 03:07:54" (1/1) ... [2024-11-28 03:07:55,114 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 03:07:54" (1/1) ... [2024-11-28 03:07:55,128 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 03:07:54" (1/1) ... [2024-11-28 03:07:55,136 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 03:07:54" (1/1) ... [2024-11-28 03:07:55,152 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2024-11-28 03:07:55,153 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2024-11-28 03:07:55,153 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2024-11-28 03:07:55,153 INFO L274 PluginConnector]: RCFGBuilder initialized [2024-11-28 03:07:55,158 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 03:07:54" (1/1) ... [2024-11-28 03:07:55,163 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2024-11-28 03:07:55,193 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d3b35404-e636-45a5-b527-45af5a94f135/bin/uautomizer-verify-aQ6SnzHsRB/z3 [2024-11-28 03:07:55,214 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d3b35404-e636-45a5-b527-45af5a94f135/bin/uautomizer-verify-aQ6SnzHsRB/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (exit command is (exit), workingDir is null) [2024-11-28 03:07:55,223 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d3b35404-e636-45a5-b527-45af5a94f135/bin/uautomizer-verify-aQ6SnzHsRB/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (1)] Waiting until timeout for monitored process [2024-11-28 03:07:55,250 INFO L130 BoogieDeclarations]: Found specification of procedure getClientPrivateKey [2024-11-28 03:07:55,250 INFO L138 BoogieDeclarations]: Found implementation of procedure getClientPrivateKey [2024-11-28 03:07:55,250 INFO L130 BoogieDeclarations]: Found specification of procedure setup_chuck__before__Keys [2024-11-28 03:07:55,251 INFO L138 BoogieDeclarations]: Found implementation of procedure setup_chuck__before__Keys [2024-11-28 03:07:55,251 INFO L130 BoogieDeclarations]: Found specification of procedure outgoing__before__Sign [2024-11-28 03:07:55,251 INFO L138 BoogieDeclarations]: Found implementation of procedure outgoing__before__Sign [2024-11-28 03:07:55,251 INFO L130 BoogieDeclarations]: Found specification of procedure getClientAddressBookSize [2024-11-28 03:07:55,251 INFO L138 BoogieDeclarations]: Found implementation of procedure getClientAddressBookSize [2024-11-28 03:07:55,251 INFO L130 BoogieDeclarations]: Found specification of procedure setEmailEncryptionKey [2024-11-28 03:07:55,251 INFO L138 BoogieDeclarations]: Found implementation of procedure setEmailEncryptionKey [2024-11-28 03:07:55,251 INFO L130 BoogieDeclarations]: Found specification of procedure setClientAddressBookAddress [2024-11-28 03:07:55,251 INFO L138 BoogieDeclarations]: Found implementation of procedure setClientAddressBookAddress [2024-11-28 03:07:55,252 INFO L130 BoogieDeclarations]: Found specification of procedure getEmailEncryptionKey [2024-11-28 03:07:55,253 INFO L138 BoogieDeclarations]: Found implementation of procedure getEmailEncryptionKey [2024-11-28 03:07:55,254 INFO L130 BoogieDeclarations]: Found specification of procedure printMail__before__Verify [2024-11-28 03:07:55,254 INFO L138 BoogieDeclarations]: Found implementation of procedure printMail__before__Verify [2024-11-28 03:07:55,254 INFO L130 BoogieDeclarations]: Found specification of procedure getEmailTo [2024-11-28 03:07:55,254 INFO L138 BoogieDeclarations]: Found implementation of procedure getEmailTo [2024-11-28 03:07:55,254 INFO L130 BoogieDeclarations]: Found specification of procedure setup_bob__before__Keys [2024-11-28 03:07:55,254 INFO L138 BoogieDeclarations]: Found implementation of procedure setup_bob__before__Keys [2024-11-28 03:07:55,254 INFO L130 BoogieDeclarations]: Found specification of procedure setEmailFrom [2024-11-28 03:07:55,254 INFO L138 BoogieDeclarations]: Found implementation of procedure setEmailFrom [2024-11-28 03:07:55,254 INFO L130 BoogieDeclarations]: Found specification of procedure isReadable [2024-11-28 03:07:55,254 INFO L138 BoogieDeclarations]: Found implementation of procedure isReadable [2024-11-28 03:07:55,254 INFO L130 BoogieDeclarations]: Found specification of procedure createClientKeyringEntry [2024-11-28 03:07:55,254 INFO L138 BoogieDeclarations]: Found implementation of procedure createClientKeyringEntry [2024-11-28 03:07:55,254 INFO L130 BoogieDeclarations]: Found specification of procedure incoming__before__Decrypt [2024-11-28 03:07:55,254 INFO L138 BoogieDeclarations]: Found implementation of procedure incoming__before__Decrypt [2024-11-28 03:07:55,255 INFO L130 BoogieDeclarations]: Found specification of procedure outgoing__before__Encrypt [2024-11-28 03:07:55,255 INFO L138 BoogieDeclarations]: Found implementation of procedure outgoing__before__Encrypt [2024-11-28 03:07:55,255 INFO L130 BoogieDeclarations]: Found specification of procedure setEmailIsEncrypted [2024-11-28 03:07:55,255 INFO L138 BoogieDeclarations]: Found implementation of procedure setEmailIsEncrypted [2024-11-28 03:07:55,255 INFO L130 BoogieDeclarations]: Found specification of procedure getEmailSignKey [2024-11-28 03:07:55,255 INFO L138 BoogieDeclarations]: Found implementation of procedure getEmailSignKey [2024-11-28 03:07:55,255 INFO L130 BoogieDeclarations]: Found specification of procedure chuckKeyAdd [2024-11-28 03:07:55,255 INFO L138 BoogieDeclarations]: Found implementation of procedure chuckKeyAdd [2024-11-28 03:07:55,255 INFO L130 BoogieDeclarations]: Found specification of procedure incoming__before__Forward [2024-11-28 03:07:55,255 INFO L138 BoogieDeclarations]: Found implementation of procedure incoming__before__Forward [2024-11-28 03:07:55,255 INFO L130 BoogieDeclarations]: Found specification of procedure getEmailFrom [2024-11-28 03:07:55,255 INFO L138 BoogieDeclarations]: Found implementation of procedure getEmailFrom [2024-11-28 03:07:55,255 INFO L130 BoogieDeclarations]: Found specification of procedure queue [2024-11-28 03:07:55,255 INFO L138 BoogieDeclarations]: Found implementation of procedure queue [2024-11-28 03:07:55,255 INFO L130 BoogieDeclarations]: Found specification of procedure setClientId [2024-11-28 03:07:55,255 INFO L138 BoogieDeclarations]: Found implementation of procedure setClientId [2024-11-28 03:07:55,255 INFO L130 BoogieDeclarations]: Found specification of procedure isReadable__before__Encrypt [2024-11-28 03:07:55,255 INFO L138 BoogieDeclarations]: Found implementation of procedure isReadable__before__Encrypt [2024-11-28 03:07:55,255 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2024-11-28 03:07:55,256 INFO L130 BoogieDeclarations]: Found specification of procedure isSigned [2024-11-28 03:07:55,256 INFO L138 BoogieDeclarations]: Found implementation of procedure isSigned [2024-11-28 03:07:55,256 INFO L130 BoogieDeclarations]: Found specification of procedure isKeyPairValid [2024-11-28 03:07:55,256 INFO L138 BoogieDeclarations]: Found implementation of procedure isKeyPairValid [2024-11-28 03:07:55,257 INFO L130 BoogieDeclarations]: Found specification of procedure outgoing__before__AddressBook [2024-11-28 03:07:55,257 INFO L138 BoogieDeclarations]: Found implementation of procedure outgoing__before__AddressBook [2024-11-28 03:07:55,257 INFO L130 BoogieDeclarations]: Found specification of procedure printMail__before__Encrypt [2024-11-28 03:07:55,257 INFO L138 BoogieDeclarations]: Found implementation of procedure printMail__before__Encrypt [2024-11-28 03:07:55,257 INFO L130 BoogieDeclarations]: Found specification of procedure incoming__before__AutoResponder [2024-11-28 03:07:55,259 INFO L138 BoogieDeclarations]: Found implementation of procedure incoming__before__AutoResponder [2024-11-28 03:07:55,259 INFO L130 BoogieDeclarations]: Found specification of procedure setClientAddressBookSize [2024-11-28 03:07:55,260 INFO L138 BoogieDeclarations]: Found implementation of procedure setClientAddressBookSize [2024-11-28 03:07:55,260 INFO L130 BoogieDeclarations]: Found specification of procedure setClientKeyringUser [2024-11-28 03:07:55,260 INFO L138 BoogieDeclarations]: Found implementation of procedure setClientKeyringUser [2024-11-28 03:07:55,260 INFO L130 BoogieDeclarations]: Found specification of procedure setClientKeyringPublicKey [2024-11-28 03:07:55,260 INFO L138 BoogieDeclarations]: Found implementation of procedure setClientKeyringPublicKey [2024-11-28 03:07:55,260 INFO L130 BoogieDeclarations]: Found specification of procedure outgoing [2024-11-28 03:07:55,260 INFO L138 BoogieDeclarations]: Found implementation of procedure outgoing [2024-11-28 03:07:55,260 INFO L130 BoogieDeclarations]: Found specification of procedure findPublicKey [2024-11-28 03:07:55,260 INFO L138 BoogieDeclarations]: Found implementation of procedure findPublicKey [2024-11-28 03:07:55,260 INFO L130 BoogieDeclarations]: Found specification of procedure sendEmail [2024-11-28 03:07:55,261 INFO L138 BoogieDeclarations]: Found implementation of procedure sendEmail [2024-11-28 03:07:55,261 INFO L130 BoogieDeclarations]: Found specification of procedure isEncrypted [2024-11-28 03:07:55,261 INFO L138 BoogieDeclarations]: Found implementation of procedure isEncrypted [2024-11-28 03:07:55,261 INFO L130 BoogieDeclarations]: Found specification of procedure setup_rjh__before__Keys [2024-11-28 03:07:55,261 INFO L138 BoogieDeclarations]: Found implementation of procedure setup_rjh__before__Keys [2024-11-28 03:07:55,261 INFO L130 BoogieDeclarations]: Found specification of procedure incoming__before__Verify [2024-11-28 03:07:55,261 INFO L138 BoogieDeclarations]: Found implementation of procedure incoming__before__Verify [2024-11-28 03:07:55,261 INFO L130 BoogieDeclarations]: Found specification of procedure setClientPrivateKey [2024-11-28 03:07:55,261 INFO L138 BoogieDeclarations]: Found implementation of procedure setClientPrivateKey [2024-11-28 03:07:55,261 INFO L130 BoogieDeclarations]: Found specification of procedure setEmailTo [2024-11-28 03:07:55,261 INFO L138 BoogieDeclarations]: Found implementation of procedure setEmailTo [2024-11-28 03:07:55,261 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#0 [2024-11-28 03:07:55,261 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#1 [2024-11-28 03:07:55,261 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#2 [2024-11-28 03:07:55,261 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#3 [2024-11-28 03:07:55,261 INFO L130 BoogieDeclarations]: Found specification of procedure generateKeyPair [2024-11-28 03:07:55,262 INFO L138 BoogieDeclarations]: Found implementation of procedure generateKeyPair [2024-11-28 03:07:55,262 INFO L130 BoogieDeclarations]: Found specification of procedure printMail__before__Sign [2024-11-28 03:07:55,262 INFO L138 BoogieDeclarations]: Found implementation of procedure printMail__before__Sign [2024-11-28 03:07:55,262 INFO L130 BoogieDeclarations]: Found specification of procedure select_one [2024-11-28 03:07:55,262 INFO L138 BoogieDeclarations]: Found implementation of procedure select_one [2024-11-28 03:07:55,262 INFO L130 BoogieDeclarations]: Found specification of procedure getClientAddressBookAddress [2024-11-28 03:07:55,262 INFO L138 BoogieDeclarations]: Found implementation of procedure getClientAddressBookAddress [2024-11-28 03:07:55,262 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2024-11-28 03:07:55,262 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2024-11-28 03:07:55,560 INFO L234 CfgBuilder]: Building ICFG [2024-11-28 03:07:55,563 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2024-11-28 03:07:57,304 INFO L? ?]: Removed 627 outVars from TransFormulas that were not future-live. [2024-11-28 03:07:57,305 INFO L283 CfgBuilder]: Performing block encoding [2024-11-28 03:07:57,337 INFO L307 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2024-11-28 03:07:57,343 INFO L312 CfgBuilder]: Removed 2 assume(true) statements. [2024-11-28 03:07:57,343 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 28.11 03:07:57 BoogieIcfgContainer [2024-11-28 03:07:57,344 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2024-11-28 03:07:57,346 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2024-11-28 03:07:57,346 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2024-11-28 03:07:57,356 INFO L274 PluginConnector]: TraceAbstraction initialized [2024-11-28 03:07:57,356 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 28.11 03:07:53" (1/3) ... [2024-11-28 03:07:57,357 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@1804d252 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 28.11 03:07:57, skipping insertion in model container [2024-11-28 03:07:57,357 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 03:07:54" (2/3) ... [2024-11-28 03:07:57,357 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@1804d252 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 28.11 03:07:57, skipping insertion in model container [2024-11-28 03:07:57,357 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 28.11 03:07:57" (3/3) ... [2024-11-28 03:07:57,358 INFO L128 eAbstractionObserver]: Analyzing ICFG email_spec4_productSimulator.cil.c [2024-11-28 03:07:57,379 INFO L216 ceAbstractionStarter]: Automizer settings: Hoare:LoopHeads NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2024-11-28 03:07:57,383 INFO L151 ceAbstractionStarter]: Applying trace abstraction to ICFG email_spec4_productSimulator.cil.c that has 44 procedures, 602 locations, 1 initial locations, 1 loop locations, and 1 error locations. [2024-11-28 03:07:57,491 INFO L332 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2024-11-28 03:07:57,507 INFO L333 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopHeads, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@40c6bcbd, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2024-11-28 03:07:57,507 INFO L334 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2024-11-28 03:07:57,515 INFO L276 IsEmpty]: Start isEmpty. Operand has 602 states, 447 states have (on average 1.516778523489933) internal successors, (678), 467 states have internal predecessors, (678), 110 states have call successors, (110), 43 states have call predecessors, (110), 43 states have return successors, (110), 109 states have call predecessors, (110), 110 states have call successors, (110) [2024-11-28 03:07:57,547 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 134 [2024-11-28 03:07:57,547 INFO L210 NwaCegarLoop]: Found error trace [2024-11-28 03:07:57,548 INFO L218 NwaCegarLoop]: trace histogram [8, 8, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-28 03:07:57,549 INFO L396 AbstractCegarLoop]: === Iteration 1 === Targeting outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION === [outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-28 03:07:57,555 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-28 03:07:57,555 INFO L85 PathProgramCache]: Analyzing trace with hash -1187125968, now seen corresponding path program 1 times [2024-11-28 03:07:57,564 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-28 03:07:57,564 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2067881489] [2024-11-28 03:07:57,564 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-28 03:07:57,565 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-28 03:07:57,850 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-28 03:07:58,079 INFO L134 CoverageAnalysis]: Checked inductivity of 100 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 100 trivial. 0 not checked. [2024-11-28 03:07:58,079 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-28 03:07:58,079 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2067881489] [2024-11-28 03:07:58,080 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2067881489] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-28 03:07:58,080 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-28 03:07:58,081 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2024-11-28 03:07:58,082 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1412170347] [2024-11-28 03:07:58,083 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-28 03:07:58,087 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2024-11-28 03:07:58,087 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-28 03:07:58,111 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2024-11-28 03:07:58,112 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2024-11-28 03:07:58,119 INFO L87 Difference]: Start difference. First operand has 602 states, 447 states have (on average 1.516778523489933) internal successors, (678), 467 states have internal predecessors, (678), 110 states have call successors, (110), 43 states have call predecessors, (110), 43 states have return successors, (110), 109 states have call predecessors, (110), 110 states have call successors, (110) Second operand has 2 states, 2 states have (on average 33.5) internal successors, (67), 2 states have internal predecessors, (67), 2 states have call successors, (24), 2 states have call predecessors, (24), 1 states have return successors, (19), 2 states have call predecessors, (19), 2 states have call successors, (19) [2024-11-28 03:07:58,225 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-28 03:07:58,225 INFO L93 Difference]: Finished difference Result 936 states and 1376 transitions. [2024-11-28 03:07:58,226 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2024-11-28 03:07:58,227 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 33.5) internal successors, (67), 2 states have internal predecessors, (67), 2 states have call successors, (24), 2 states have call predecessors, (24), 1 states have return successors, (19), 2 states have call predecessors, (19), 2 states have call successors, (19) Word has length 133 [2024-11-28 03:07:58,229 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-28 03:07:58,257 INFO L225 Difference]: With dead ends: 936 [2024-11-28 03:07:58,257 INFO L226 Difference]: Without dead ends: 595 [2024-11-28 03:07:58,268 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2024-11-28 03:07:58,270 INFO L435 NwaCegarLoop]: 894 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 894 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-11-28 03:07:58,273 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 894 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-11-28 03:07:58,292 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 595 states. [2024-11-28 03:07:58,362 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 595 to 595. [2024-11-28 03:07:58,364 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 595 states, 441 states have (on average 1.5124716553287982) internal successors, (667), 460 states have internal predecessors, (667), 110 states have call successors, (110), 43 states have call predecessors, (110), 43 states have return successors, (109), 108 states have call predecessors, (109), 109 states have call successors, (109) [2024-11-28 03:07:58,375 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 595 states to 595 states and 886 transitions. [2024-11-28 03:07:58,378 INFO L78 Accepts]: Start accepts. Automaton has 595 states and 886 transitions. Word has length 133 [2024-11-28 03:07:58,380 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-28 03:07:58,380 INFO L471 AbstractCegarLoop]: Abstraction has 595 states and 886 transitions. [2024-11-28 03:07:58,380 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 33.5) internal successors, (67), 2 states have internal predecessors, (67), 2 states have call successors, (24), 2 states have call predecessors, (24), 1 states have return successors, (19), 2 states have call predecessors, (19), 2 states have call successors, (19) [2024-11-28 03:07:58,380 INFO L276 IsEmpty]: Start isEmpty. Operand 595 states and 886 transitions. [2024-11-28 03:07:58,393 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 134 [2024-11-28 03:07:58,393 INFO L210 NwaCegarLoop]: Found error trace [2024-11-28 03:07:58,393 INFO L218 NwaCegarLoop]: trace histogram [8, 8, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-28 03:07:58,394 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2024-11-28 03:07:58,394 INFO L396 AbstractCegarLoop]: === Iteration 2 === Targeting outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION === [outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-28 03:07:58,394 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-28 03:07:58,394 INFO L85 PathProgramCache]: Analyzing trace with hash 1664600554, now seen corresponding path program 1 times [2024-11-28 03:07:58,395 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-28 03:07:58,395 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [605750256] [2024-11-28 03:07:58,395 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-28 03:07:58,395 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-28 03:07:58,529 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-28 03:07:58,995 INFO L134 CoverageAnalysis]: Checked inductivity of 100 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 100 trivial. 0 not checked. [2024-11-28 03:07:58,995 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-28 03:07:58,995 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [605750256] [2024-11-28 03:07:58,995 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [605750256] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-28 03:07:58,996 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-28 03:07:58,996 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-11-28 03:07:58,996 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [967347240] [2024-11-28 03:07:58,996 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-28 03:07:58,997 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2024-11-28 03:07:58,997 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-28 03:07:58,999 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-11-28 03:07:59,000 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-11-28 03:07:59,000 INFO L87 Difference]: Start difference. First operand 595 states and 886 transitions. Second operand has 5 states, 5 states have (on average 13.4) internal successors, (67), 5 states have internal predecessors, (67), 2 states have call successors, (24), 2 states have call predecessors, (24), 1 states have return successors, (19), 2 states have call predecessors, (19), 2 states have call successors, (19) [2024-11-28 03:07:59,168 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-28 03:07:59,168 INFO L93 Difference]: Finished difference Result 1154 states and 1716 transitions. [2024-11-28 03:07:59,170 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2024-11-28 03:07:59,171 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 13.4) internal successors, (67), 5 states have internal predecessors, (67), 2 states have call successors, (24), 2 states have call predecessors, (24), 1 states have return successors, (19), 2 states have call predecessors, (19), 2 states have call successors, (19) Word has length 133 [2024-11-28 03:07:59,171 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-28 03:07:59,179 INFO L225 Difference]: With dead ends: 1154 [2024-11-28 03:07:59,179 INFO L226 Difference]: Without dead ends: 595 [2024-11-28 03:07:59,183 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-11-28 03:07:59,184 INFO L435 NwaCegarLoop]: 884 mSDtfsCounter, 0 mSDsluCounter, 2640 mSDsCounter, 0 mSdLazyCounter, 13 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 3524 SdHoareTripleChecker+Invalid, 19 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 13 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-11-28 03:07:59,185 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 3524 Invalid, 19 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 13 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-11-28 03:07:59,190 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 595 states. [2024-11-28 03:07:59,274 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 595 to 595. [2024-11-28 03:07:59,276 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 595 states, 441 states have (on average 1.4965986394557824) internal successors, (660), 460 states have internal predecessors, (660), 110 states have call successors, (110), 43 states have call predecessors, (110), 43 states have return successors, (109), 108 states have call predecessors, (109), 109 states have call successors, (109) [2024-11-28 03:07:59,281 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 595 states to 595 states and 879 transitions. [2024-11-28 03:07:59,282 INFO L78 Accepts]: Start accepts. Automaton has 595 states and 879 transitions. Word has length 133 [2024-11-28 03:07:59,282 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-28 03:07:59,282 INFO L471 AbstractCegarLoop]: Abstraction has 595 states and 879 transitions. [2024-11-28 03:07:59,283 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 13.4) internal successors, (67), 5 states have internal predecessors, (67), 2 states have call successors, (24), 2 states have call predecessors, (24), 1 states have return successors, (19), 2 states have call predecessors, (19), 2 states have call successors, (19) [2024-11-28 03:07:59,283 INFO L276 IsEmpty]: Start isEmpty. Operand 595 states and 879 transitions. [2024-11-28 03:07:59,286 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 139 [2024-11-28 03:07:59,286 INFO L210 NwaCegarLoop]: Found error trace [2024-11-28 03:07:59,286 INFO L218 NwaCegarLoop]: trace histogram [8, 8, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-28 03:07:59,286 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2024-11-28 03:07:59,287 INFO L396 AbstractCegarLoop]: === Iteration 3 === Targeting outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION === [outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-28 03:07:59,287 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-28 03:07:59,287 INFO L85 PathProgramCache]: Analyzing trace with hash -591505953, now seen corresponding path program 1 times [2024-11-28 03:07:59,288 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-28 03:07:59,288 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [907103100] [2024-11-28 03:07:59,288 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-28 03:07:59,288 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-28 03:07:59,375 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-28 03:07:59,549 INFO L134 CoverageAnalysis]: Checked inductivity of 100 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 100 trivial. 0 not checked. [2024-11-28 03:07:59,549 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-28 03:07:59,549 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [907103100] [2024-11-28 03:07:59,549 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [907103100] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-28 03:07:59,549 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-28 03:07:59,549 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-28 03:07:59,549 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1062282836] [2024-11-28 03:07:59,550 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-28 03:07:59,550 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2024-11-28 03:07:59,550 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-28 03:07:59,551 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-11-28 03:07:59,551 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-28 03:07:59,551 INFO L87 Difference]: Start difference. First operand 595 states and 879 transitions. Second operand has 3 states, 3 states have (on average 24.0) internal successors, (72), 3 states have internal predecessors, (72), 3 states have call successors, (24), 2 states have call predecessors, (24), 1 states have return successors, (19), 3 states have call predecessors, (19), 3 states have call successors, (19) [2024-11-28 03:07:59,639 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-28 03:07:59,639 INFO L93 Difference]: Finished difference Result 1160 states and 1729 transitions. [2024-11-28 03:07:59,639 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-11-28 03:07:59,640 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 24.0) internal successors, (72), 3 states have internal predecessors, (72), 3 states have call successors, (24), 2 states have call predecessors, (24), 1 states have return successors, (19), 3 states have call predecessors, (19), 3 states have call successors, (19) Word has length 138 [2024-11-28 03:07:59,640 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-28 03:07:59,647 INFO L225 Difference]: With dead ends: 1160 [2024-11-28 03:07:59,647 INFO L226 Difference]: Without dead ends: 596 [2024-11-28 03:07:59,653 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-28 03:07:59,654 INFO L435 NwaCegarLoop]: 868 mSDtfsCounter, 843 mSDsluCounter, 18 mSDsCounter, 0 mSdLazyCounter, 6 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 843 SdHoareTripleChecker+Valid, 886 SdHoareTripleChecker+Invalid, 9 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 6 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-11-28 03:07:59,654 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [843 Valid, 886 Invalid, 9 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 6 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-11-28 03:07:59,655 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 596 states. [2024-11-28 03:07:59,702 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 596 to 596. [2024-11-28 03:07:59,703 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 596 states, 443 states have (on average 1.4853273137697518) internal successors, (658), 460 states have internal predecessors, (658), 108 states have call successors, (108), 44 states have call predecessors, (108), 44 states have return successors, (107), 106 states have call predecessors, (107), 107 states have call successors, (107) [2024-11-28 03:07:59,710 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 596 states to 596 states and 873 transitions. [2024-11-28 03:07:59,711 INFO L78 Accepts]: Start accepts. Automaton has 596 states and 873 transitions. Word has length 138 [2024-11-28 03:07:59,711 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-28 03:07:59,711 INFO L471 AbstractCegarLoop]: Abstraction has 596 states and 873 transitions. [2024-11-28 03:07:59,712 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 24.0) internal successors, (72), 3 states have internal predecessors, (72), 3 states have call successors, (24), 2 states have call predecessors, (24), 1 states have return successors, (19), 3 states have call predecessors, (19), 3 states have call successors, (19) [2024-11-28 03:07:59,712 INFO L276 IsEmpty]: Start isEmpty. Operand 596 states and 873 transitions. [2024-11-28 03:07:59,718 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 149 [2024-11-28 03:07:59,718 INFO L210 NwaCegarLoop]: Found error trace [2024-11-28 03:07:59,718 INFO L218 NwaCegarLoop]: trace histogram [8, 8, 3, 3, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-28 03:07:59,719 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2024-11-28 03:07:59,719 INFO L396 AbstractCegarLoop]: === Iteration 4 === Targeting outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION === [outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-28 03:07:59,719 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-28 03:07:59,719 INFO L85 PathProgramCache]: Analyzing trace with hash 1454152009, now seen corresponding path program 1 times [2024-11-28 03:07:59,719 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-28 03:07:59,720 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [288887613] [2024-11-28 03:07:59,720 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-28 03:07:59,720 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-28 03:07:59,785 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-28 03:07:59,890 INFO L134 CoverageAnalysis]: Checked inductivity of 104 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 104 trivial. 0 not checked. [2024-11-28 03:07:59,890 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-28 03:07:59,890 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [288887613] [2024-11-28 03:07:59,890 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [288887613] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-28 03:07:59,890 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-28 03:07:59,890 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-28 03:07:59,890 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [472687608] [2024-11-28 03:07:59,891 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-28 03:07:59,891 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2024-11-28 03:07:59,891 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-28 03:07:59,892 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-11-28 03:07:59,892 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-28 03:07:59,892 INFO L87 Difference]: Start difference. First operand 596 states and 873 transitions. Second operand has 3 states, 3 states have (on average 25.666666666666668) internal successors, (77), 3 states have internal predecessors, (77), 2 states have call successors, (25), 2 states have call predecessors, (25), 1 states have return successors, (20), 2 states have call predecessors, (20), 2 states have call successors, (20) [2024-11-28 03:07:59,970 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-28 03:07:59,970 INFO L93 Difference]: Finished difference Result 1154 states and 1708 transitions. [2024-11-28 03:07:59,971 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-11-28 03:07:59,971 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 25.666666666666668) internal successors, (77), 3 states have internal predecessors, (77), 2 states have call successors, (25), 2 states have call predecessors, (25), 1 states have return successors, (20), 2 states have call predecessors, (20), 2 states have call successors, (20) Word has length 148 [2024-11-28 03:07:59,972 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-28 03:07:59,979 INFO L225 Difference]: With dead ends: 1154 [2024-11-28 03:07:59,979 INFO L226 Difference]: Without dead ends: 594 [2024-11-28 03:07:59,982 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-28 03:07:59,983 INFO L435 NwaCegarLoop]: 861 mSDtfsCounter, 823 mSDsluCounter, 38 mSDsCounter, 0 mSdLazyCounter, 5 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 823 SdHoareTripleChecker+Valid, 899 SdHoareTripleChecker+Invalid, 7 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 5 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-11-28 03:07:59,983 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [823 Valid, 899 Invalid, 7 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 5 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-11-28 03:07:59,985 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 594 states. [2024-11-28 03:08:00,032 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 594 to 594. [2024-11-28 03:08:00,034 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 594 states, 443 states have (on average 1.4785553047404063) internal successors, (655), 458 states have internal predecessors, (655), 106 states have call successors, (106), 44 states have call predecessors, (106), 44 states have return successors, (105), 104 states have call predecessors, (105), 105 states have call successors, (105) [2024-11-28 03:08:00,038 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 594 states to 594 states and 866 transitions. [2024-11-28 03:08:00,039 INFO L78 Accepts]: Start accepts. Automaton has 594 states and 866 transitions. Word has length 148 [2024-11-28 03:08:00,040 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-28 03:08:00,040 INFO L471 AbstractCegarLoop]: Abstraction has 594 states and 866 transitions. [2024-11-28 03:08:00,040 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 25.666666666666668) internal successors, (77), 3 states have internal predecessors, (77), 2 states have call successors, (25), 2 states have call predecessors, (25), 1 states have return successors, (20), 2 states have call predecessors, (20), 2 states have call successors, (20) [2024-11-28 03:08:00,041 INFO L276 IsEmpty]: Start isEmpty. Operand 594 states and 866 transitions. [2024-11-28 03:08:00,043 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 150 [2024-11-28 03:08:00,043 INFO L210 NwaCegarLoop]: Found error trace [2024-11-28 03:08:00,046 INFO L218 NwaCegarLoop]: trace histogram [8, 8, 3, 3, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-28 03:08:00,046 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2024-11-28 03:08:00,046 INFO L396 AbstractCegarLoop]: === Iteration 5 === Targeting outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION === [outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-28 03:08:00,046 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-28 03:08:00,047 INFO L85 PathProgramCache]: Analyzing trace with hash 1248049528, now seen corresponding path program 1 times [2024-11-28 03:08:00,047 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-28 03:08:00,047 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [687408550] [2024-11-28 03:08:00,047 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-28 03:08:00,047 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-28 03:08:00,109 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-28 03:08:00,213 INFO L134 CoverageAnalysis]: Checked inductivity of 104 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 104 trivial. 0 not checked. [2024-11-28 03:08:00,213 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-28 03:08:00,213 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [687408550] [2024-11-28 03:08:00,213 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [687408550] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-28 03:08:00,213 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-28 03:08:00,213 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-28 03:08:00,214 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [494473530] [2024-11-28 03:08:00,214 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-28 03:08:00,214 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2024-11-28 03:08:00,214 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-28 03:08:00,215 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-11-28 03:08:00,215 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-28 03:08:00,215 INFO L87 Difference]: Start difference. First operand 594 states and 866 transitions. Second operand has 3 states, 3 states have (on average 26.0) internal successors, (78), 3 states have internal predecessors, (78), 2 states have call successors, (25), 2 states have call predecessors, (25), 1 states have return successors, (20), 2 states have call predecessors, (20), 2 states have call successors, (20) [2024-11-28 03:08:00,321 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-28 03:08:00,321 INFO L93 Difference]: Finished difference Result 1145 states and 1674 transitions. [2024-11-28 03:08:00,322 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-11-28 03:08:00,322 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 26.0) internal successors, (78), 3 states have internal predecessors, (78), 2 states have call successors, (25), 2 states have call predecessors, (25), 1 states have return successors, (20), 2 states have call predecessors, (20), 2 states have call successors, (20) Word has length 149 [2024-11-28 03:08:00,323 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-28 03:08:00,327 INFO L225 Difference]: With dead ends: 1145 [2024-11-28 03:08:00,327 INFO L226 Difference]: Without dead ends: 597 [2024-11-28 03:08:00,329 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-28 03:08:00,330 INFO L435 NwaCegarLoop]: 841 mSDtfsCounter, 803 mSDsluCounter, 41 mSDsCounter, 0 mSdLazyCounter, 14 mSolverCounterSat, 11 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 803 SdHoareTripleChecker+Valid, 882 SdHoareTripleChecker+Invalid, 25 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 11 IncrementalHoareTripleChecker+Valid, 14 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-11-28 03:08:00,330 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [803 Valid, 882 Invalid, 25 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [11 Valid, 14 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-11-28 03:08:00,331 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 597 states. [2024-11-28 03:08:00,376 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 597 to 591. [2024-11-28 03:08:00,377 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 591 states, 443 states have (on average 1.4537246049661399) internal successors, (644), 453 states have internal predecessors, (644), 103 states have call successors, (103), 44 states have call predecessors, (103), 44 states have return successors, (102), 101 states have call predecessors, (102), 102 states have call successors, (102) [2024-11-28 03:08:00,382 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 591 states to 591 states and 849 transitions. [2024-11-28 03:08:00,383 INFO L78 Accepts]: Start accepts. Automaton has 591 states and 849 transitions. Word has length 149 [2024-11-28 03:08:00,383 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-28 03:08:00,384 INFO L471 AbstractCegarLoop]: Abstraction has 591 states and 849 transitions. [2024-11-28 03:08:00,384 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 26.0) internal successors, (78), 3 states have internal predecessors, (78), 2 states have call successors, (25), 2 states have call predecessors, (25), 1 states have return successors, (20), 2 states have call predecessors, (20), 2 states have call successors, (20) [2024-11-28 03:08:00,384 INFO L276 IsEmpty]: Start isEmpty. Operand 591 states and 849 transitions. [2024-11-28 03:08:00,388 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 168 [2024-11-28 03:08:00,388 INFO L210 NwaCegarLoop]: Found error trace [2024-11-28 03:08:00,388 INFO L218 NwaCegarLoop]: trace histogram [8, 8, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-28 03:08:00,388 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2024-11-28 03:08:00,389 INFO L396 AbstractCegarLoop]: === Iteration 6 === Targeting outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION === [outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-28 03:08:00,389 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-28 03:08:00,389 INFO L85 PathProgramCache]: Analyzing trace with hash 1736586693, now seen corresponding path program 1 times [2024-11-28 03:08:00,389 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-28 03:08:00,389 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1087772188] [2024-11-28 03:08:00,390 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-28 03:08:00,390 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-28 03:08:00,479 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-28 03:08:00,854 INFO L134 CoverageAnalysis]: Checked inductivity of 116 backedges. 3 proven. 3 refuted. 0 times theorem prover too weak. 110 trivial. 0 not checked. [2024-11-28 03:08:00,854 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-28 03:08:00,854 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1087772188] [2024-11-28 03:08:00,854 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1087772188] provided 0 perfect and 1 imperfect interpolant sequences [2024-11-28 03:08:00,854 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [415026368] [2024-11-28 03:08:00,855 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-28 03:08:00,855 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-11-28 03:08:00,855 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d3b35404-e636-45a5-b527-45af5a94f135/bin/uautomizer-verify-aQ6SnzHsRB/z3 [2024-11-28 03:08:00,859 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d3b35404-e636-45a5-b527-45af5a94f135/bin/uautomizer-verify-aQ6SnzHsRB/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-11-28 03:08:00,860 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d3b35404-e636-45a5-b527-45af5a94f135/bin/uautomizer-verify-aQ6SnzHsRB/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2024-11-28 03:08:01,314 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-28 03:08:01,321 INFO L256 TraceCheckSpWp]: Trace formula consists of 1356 conjuncts, 2 conjuncts are in the unsatisfiable core [2024-11-28 03:08:01,330 INFO L279 TraceCheckSpWp]: Computing forward predicates... [2024-11-28 03:08:01,385 INFO L134 CoverageAnalysis]: Checked inductivity of 116 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 116 trivial. 0 not checked. [2024-11-28 03:08:01,386 INFO L308 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2024-11-28 03:08:01,390 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [415026368] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-28 03:08:01,390 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2024-11-28 03:08:01,390 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [8] total 9 [2024-11-28 03:08:01,390 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1769331084] [2024-11-28 03:08:01,390 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-28 03:08:01,391 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2024-11-28 03:08:01,391 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-28 03:08:01,391 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-11-28 03:08:01,391 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=57, Unknown=0, NotChecked=0, Total=72 [2024-11-28 03:08:01,392 INFO L87 Difference]: Start difference. First operand 591 states and 849 transitions. Second operand has 3 states, 3 states have (on average 28.0) internal successors, (84), 3 states have internal predecessors, (84), 2 states have call successors, (28), 2 states have call predecessors, (28), 2 states have return successors, (23), 2 states have call predecessors, (23), 2 states have call successors, (23) [2024-11-28 03:08:01,463 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-28 03:08:01,463 INFO L93 Difference]: Finished difference Result 917 states and 1299 transitions. [2024-11-28 03:08:01,463 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-11-28 03:08:01,464 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 28.0) internal successors, (84), 3 states have internal predecessors, (84), 2 states have call successors, (28), 2 states have call predecessors, (28), 2 states have return successors, (23), 2 states have call predecessors, (23), 2 states have call successors, (23) Word has length 167 [2024-11-28 03:08:01,464 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-28 03:08:01,469 INFO L225 Difference]: With dead ends: 917 [2024-11-28 03:08:01,469 INFO L226 Difference]: Without dead ends: 593 [2024-11-28 03:08:01,471 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 174 GetRequests, 167 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=57, Unknown=0, NotChecked=0, Total=72 [2024-11-28 03:08:01,473 INFO L435 NwaCegarLoop]: 845 mSDtfsCounter, 1 mSDsluCounter, 843 mSDsCounter, 0 mSdLazyCounter, 5 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1 SdHoareTripleChecker+Valid, 1688 SdHoareTripleChecker+Invalid, 5 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 5 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-11-28 03:08:01,474 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [1 Valid, 1688 Invalid, 5 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 5 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-11-28 03:08:01,477 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 593 states. [2024-11-28 03:08:01,522 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 593 to 592. [2024-11-28 03:08:01,524 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 592 states, 444 states have (on average 1.4527027027027026) internal successors, (645), 454 states have internal predecessors, (645), 103 states have call successors, (103), 44 states have call predecessors, (103), 44 states have return successors, (102), 101 states have call predecessors, (102), 102 states have call successors, (102) [2024-11-28 03:08:01,529 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 592 states to 592 states and 850 transitions. [2024-11-28 03:08:01,531 INFO L78 Accepts]: Start accepts. Automaton has 592 states and 850 transitions. Word has length 167 [2024-11-28 03:08:01,534 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-28 03:08:01,534 INFO L471 AbstractCegarLoop]: Abstraction has 592 states and 850 transitions. [2024-11-28 03:08:01,535 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 28.0) internal successors, (84), 3 states have internal predecessors, (84), 2 states have call successors, (28), 2 states have call predecessors, (28), 2 states have return successors, (23), 2 states have call predecessors, (23), 2 states have call successors, (23) [2024-11-28 03:08:01,535 INFO L276 IsEmpty]: Start isEmpty. Operand 592 states and 850 transitions. [2024-11-28 03:08:01,539 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 175 [2024-11-28 03:08:01,540 INFO L210 NwaCegarLoop]: Found error trace [2024-11-28 03:08:01,540 INFO L218 NwaCegarLoop]: trace histogram [8, 8, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-28 03:08:01,551 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d3b35404-e636-45a5-b527-45af5a94f135/bin/uautomizer-verify-aQ6SnzHsRB/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Ended with exit code 0 [2024-11-28 03:08:01,741 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d3b35404-e636-45a5-b527-45af5a94f135/bin/uautomizer-verify-aQ6SnzHsRB/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-11-28 03:08:01,741 INFO L396 AbstractCegarLoop]: === Iteration 7 === Targeting outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION === [outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-28 03:08:01,742 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-28 03:08:01,742 INFO L85 PathProgramCache]: Analyzing trace with hash 766527307, now seen corresponding path program 1 times [2024-11-28 03:08:01,742 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-28 03:08:01,742 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1343803215] [2024-11-28 03:08:01,742 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-28 03:08:01,742 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-28 03:08:01,789 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-28 03:08:02,169 INFO L134 CoverageAnalysis]: Checked inductivity of 117 backedges. 3 proven. 3 refuted. 0 times theorem prover too weak. 111 trivial. 0 not checked. [2024-11-28 03:08:02,170 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-28 03:08:02,170 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1343803215] [2024-11-28 03:08:02,170 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1343803215] provided 0 perfect and 1 imperfect interpolant sequences [2024-11-28 03:08:02,170 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [459976666] [2024-11-28 03:08:02,170 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-28 03:08:02,170 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-11-28 03:08:02,170 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d3b35404-e636-45a5-b527-45af5a94f135/bin/uautomizer-verify-aQ6SnzHsRB/z3 [2024-11-28 03:08:02,172 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d3b35404-e636-45a5-b527-45af5a94f135/bin/uautomizer-verify-aQ6SnzHsRB/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-11-28 03:08:02,176 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d3b35404-e636-45a5-b527-45af5a94f135/bin/uautomizer-verify-aQ6SnzHsRB/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2024-11-28 03:08:02,662 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-28 03:08:02,668 INFO L256 TraceCheckSpWp]: Trace formula consists of 1369 conjuncts, 3 conjuncts are in the unsatisfiable core [2024-11-28 03:08:02,679 INFO L279 TraceCheckSpWp]: Computing forward predicates... [2024-11-28 03:08:02,722 INFO L134 CoverageAnalysis]: Checked inductivity of 117 backedges. 1 proven. 0 refuted. 0 times theorem prover too weak. 116 trivial. 0 not checked. [2024-11-28 03:08:02,724 INFO L308 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2024-11-28 03:08:02,724 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [459976666] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-28 03:08:02,724 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2024-11-28 03:08:02,724 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [8] total 9 [2024-11-28 03:08:02,725 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [252758889] [2024-11-28 03:08:02,725 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-28 03:08:02,725 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2024-11-28 03:08:02,725 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-28 03:08:02,726 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-11-28 03:08:02,726 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=57, Unknown=0, NotChecked=0, Total=72 [2024-11-28 03:08:02,726 INFO L87 Difference]: Start difference. First operand 592 states and 850 transitions. Second operand has 3 states, 3 states have (on average 30.333333333333332) internal successors, (91), 3 states have internal predecessors, (91), 2 states have call successors, (28), 2 states have call predecessors, (28), 2 states have return successors, (23), 2 states have call predecessors, (23), 2 states have call successors, (23) [2024-11-28 03:08:02,799 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-28 03:08:02,799 INFO L93 Difference]: Finished difference Result 1204 states and 1761 transitions. [2024-11-28 03:08:02,799 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-11-28 03:08:02,799 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 30.333333333333332) internal successors, (91), 3 states have internal predecessors, (91), 2 states have call successors, (28), 2 states have call predecessors, (28), 2 states have return successors, (23), 2 states have call predecessors, (23), 2 states have call successors, (23) Word has length 174 [2024-11-28 03:08:02,800 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-28 03:08:02,805 INFO L225 Difference]: With dead ends: 1204 [2024-11-28 03:08:02,805 INFO L226 Difference]: Without dead ends: 689 [2024-11-28 03:08:02,807 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 181 GetRequests, 174 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=57, Unknown=0, NotChecked=0, Total=72 [2024-11-28 03:08:02,809 INFO L435 NwaCegarLoop]: 851 mSDtfsCounter, 165 mSDsluCounter, 797 mSDsCounter, 0 mSdLazyCounter, 3 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 183 SdHoareTripleChecker+Valid, 1648 SdHoareTripleChecker+Invalid, 4 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 3 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-11-28 03:08:02,810 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [183 Valid, 1648 Invalid, 4 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 3 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-11-28 03:08:02,811 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 689 states. [2024-11-28 03:08:02,855 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 689 to 681. [2024-11-28 03:08:02,857 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 681 states, 519 states have (on average 1.4682080924855492) internal successors, (762), 529 states have internal predecessors, (762), 117 states have call successors, (117), 44 states have call predecessors, (117), 44 states have return successors, (116), 115 states have call predecessors, (116), 116 states have call successors, (116) [2024-11-28 03:08:02,863 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 681 states to 681 states and 995 transitions. [2024-11-28 03:08:02,864 INFO L78 Accepts]: Start accepts. Automaton has 681 states and 995 transitions. Word has length 174 [2024-11-28 03:08:02,864 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-28 03:08:02,864 INFO L471 AbstractCegarLoop]: Abstraction has 681 states and 995 transitions. [2024-11-28 03:08:02,865 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 30.333333333333332) internal successors, (91), 3 states have internal predecessors, (91), 2 states have call successors, (28), 2 states have call predecessors, (28), 2 states have return successors, (23), 2 states have call predecessors, (23), 2 states have call successors, (23) [2024-11-28 03:08:02,865 INFO L276 IsEmpty]: Start isEmpty. Operand 681 states and 995 transitions. [2024-11-28 03:08:02,868 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 176 [2024-11-28 03:08:02,868 INFO L210 NwaCegarLoop]: Found error trace [2024-11-28 03:08:02,869 INFO L218 NwaCegarLoop]: trace histogram [8, 8, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-28 03:08:02,880 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d3b35404-e636-45a5-b527-45af5a94f135/bin/uautomizer-verify-aQ6SnzHsRB/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Ended with exit code 0 [2024-11-28 03:08:03,069 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6,3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d3b35404-e636-45a5-b527-45af5a94f135/bin/uautomizer-verify-aQ6SnzHsRB/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-11-28 03:08:03,070 INFO L396 AbstractCegarLoop]: === Iteration 8 === Targeting outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION === [outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-28 03:08:03,070 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-28 03:08:03,070 INFO L85 PathProgramCache]: Analyzing trace with hash 995560095, now seen corresponding path program 1 times [2024-11-28 03:08:03,070 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-28 03:08:03,070 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1594250481] [2024-11-28 03:08:03,070 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-28 03:08:03,070 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-28 03:08:03,117 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-28 03:08:03,550 INFO L134 CoverageAnalysis]: Checked inductivity of 117 backedges. 3 proven. 3 refuted. 0 times theorem prover too weak. 111 trivial. 0 not checked. [2024-11-28 03:08:03,550 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-28 03:08:03,551 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1594250481] [2024-11-28 03:08:03,551 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1594250481] provided 0 perfect and 1 imperfect interpolant sequences [2024-11-28 03:08:03,551 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1579591911] [2024-11-28 03:08:03,551 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-28 03:08:03,551 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-11-28 03:08:03,551 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d3b35404-e636-45a5-b527-45af5a94f135/bin/uautomizer-verify-aQ6SnzHsRB/z3 [2024-11-28 03:08:03,553 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d3b35404-e636-45a5-b527-45af5a94f135/bin/uautomizer-verify-aQ6SnzHsRB/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-11-28 03:08:03,557 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d3b35404-e636-45a5-b527-45af5a94f135/bin/uautomizer-verify-aQ6SnzHsRB/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2024-11-28 03:08:04,047 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-28 03:08:04,055 INFO L256 TraceCheckSpWp]: Trace formula consists of 1374 conjuncts, 10 conjuncts are in the unsatisfiable core [2024-11-28 03:08:04,061 INFO L279 TraceCheckSpWp]: Computing forward predicates... [2024-11-28 03:08:04,198 INFO L134 CoverageAnalysis]: Checked inductivity of 117 backedges. 19 proven. 0 refuted. 0 times theorem prover too weak. 98 trivial. 0 not checked. [2024-11-28 03:08:04,200 INFO L308 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2024-11-28 03:08:04,200 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1579591911] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-28 03:08:04,200 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2024-11-28 03:08:04,201 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [8] total 14 [2024-11-28 03:08:04,201 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [166471385] [2024-11-28 03:08:04,203 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-28 03:08:04,203 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2024-11-28 03:08:04,203 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-28 03:08:04,204 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2024-11-28 03:08:04,204 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=31, Invalid=151, Unknown=0, NotChecked=0, Total=182 [2024-11-28 03:08:04,204 INFO L87 Difference]: Start difference. First operand 681 states and 995 transitions. Second operand has 8 states, 6 states have (on average 16.833333333333332) internal successors, (101), 8 states have internal predecessors, (101), 4 states have call successors, (28), 2 states have call predecessors, (28), 4 states have return successors, (23), 3 states have call predecessors, (23), 4 states have call successors, (23) [2024-11-28 03:08:04,389 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-28 03:08:04,390 INFO L93 Difference]: Finished difference Result 1309 states and 1927 transitions. [2024-11-28 03:08:04,390 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2024-11-28 03:08:04,390 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 6 states have (on average 16.833333333333332) internal successors, (101), 8 states have internal predecessors, (101), 4 states have call successors, (28), 2 states have call predecessors, (28), 4 states have return successors, (23), 3 states have call predecessors, (23), 4 states have call successors, (23) Word has length 175 [2024-11-28 03:08:04,391 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-28 03:08:04,396 INFO L225 Difference]: With dead ends: 1309 [2024-11-28 03:08:04,396 INFO L226 Difference]: Without dead ends: 683 [2024-11-28 03:08:04,399 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 183 GetRequests, 170 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 15 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=35, Invalid=175, Unknown=0, NotChecked=0, Total=210 [2024-11-28 03:08:04,399 INFO L435 NwaCegarLoop]: 836 mSDtfsCounter, 4 mSDsluCounter, 4999 mSDsCounter, 0 mSdLazyCounter, 83 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 8 SdHoareTripleChecker+Valid, 5835 SdHoareTripleChecker+Invalid, 83 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 83 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-11-28 03:08:04,400 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [8 Valid, 5835 Invalid, 83 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 83 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-11-28 03:08:04,402 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 683 states. [2024-11-28 03:08:04,446 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 683 to 683. [2024-11-28 03:08:04,447 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 683 states, 520 states have (on average 1.4673076923076922) internal successors, (763), 531 states have internal predecessors, (763), 117 states have call successors, (117), 44 states have call predecessors, (117), 45 states have return successors, (118), 115 states have call predecessors, (118), 116 states have call successors, (118) [2024-11-28 03:08:04,453 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 683 states to 683 states and 998 transitions. [2024-11-28 03:08:04,454 INFO L78 Accepts]: Start accepts. Automaton has 683 states and 998 transitions. Word has length 175 [2024-11-28 03:08:04,454 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-28 03:08:04,455 INFO L471 AbstractCegarLoop]: Abstraction has 683 states and 998 transitions. [2024-11-28 03:08:04,455 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 6 states have (on average 16.833333333333332) internal successors, (101), 8 states have internal predecessors, (101), 4 states have call successors, (28), 2 states have call predecessors, (28), 4 states have return successors, (23), 3 states have call predecessors, (23), 4 states have call successors, (23) [2024-11-28 03:08:04,455 INFO L276 IsEmpty]: Start isEmpty. Operand 683 states and 998 transitions. [2024-11-28 03:08:04,458 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 177 [2024-11-28 03:08:04,458 INFO L210 NwaCegarLoop]: Found error trace [2024-11-28 03:08:04,459 INFO L218 NwaCegarLoop]: trace histogram [8, 8, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-28 03:08:04,470 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d3b35404-e636-45a5-b527-45af5a94f135/bin/uautomizer-verify-aQ6SnzHsRB/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2024-11-28 03:08:04,659 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d3b35404-e636-45a5-b527-45af5a94f135/bin/uautomizer-verify-aQ6SnzHsRB/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable7 [2024-11-28 03:08:04,660 INFO L396 AbstractCegarLoop]: === Iteration 9 === Targeting outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION === [outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-28 03:08:04,660 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-28 03:08:04,660 INFO L85 PathProgramCache]: Analyzing trace with hash -1522180619, now seen corresponding path program 1 times [2024-11-28 03:08:04,661 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-28 03:08:04,661 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1555712790] [2024-11-28 03:08:04,661 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-28 03:08:04,661 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-28 03:08:04,703 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-28 03:08:04,951 INFO L134 CoverageAnalysis]: Checked inductivity of 117 backedges. 6 proven. 6 refuted. 0 times theorem prover too weak. 105 trivial. 0 not checked. [2024-11-28 03:08:04,953 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-28 03:08:04,953 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1555712790] [2024-11-28 03:08:04,953 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1555712790] provided 0 perfect and 1 imperfect interpolant sequences [2024-11-28 03:08:04,953 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1902129115] [2024-11-28 03:08:04,953 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-28 03:08:04,953 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-11-28 03:08:04,953 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d3b35404-e636-45a5-b527-45af5a94f135/bin/uautomizer-verify-aQ6SnzHsRB/z3 [2024-11-28 03:08:04,955 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d3b35404-e636-45a5-b527-45af5a94f135/bin/uautomizer-verify-aQ6SnzHsRB/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-11-28 03:08:05,002 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d3b35404-e636-45a5-b527-45af5a94f135/bin/uautomizer-verify-aQ6SnzHsRB/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2024-11-28 03:08:05,434 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-28 03:08:05,442 INFO L256 TraceCheckSpWp]: Trace formula consists of 1375 conjuncts, 8 conjuncts are in the unsatisfiable core [2024-11-28 03:08:05,448 INFO L279 TraceCheckSpWp]: Computing forward predicates... [2024-11-28 03:08:05,547 INFO L134 CoverageAnalysis]: Checked inductivity of 117 backedges. 19 proven. 0 refuted. 0 times theorem prover too weak. 98 trivial. 0 not checked. [2024-11-28 03:08:05,551 INFO L308 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2024-11-28 03:08:05,552 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1902129115] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-28 03:08:05,552 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2024-11-28 03:08:05,552 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [9] total 13 [2024-11-28 03:08:05,552 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [845718167] [2024-11-28 03:08:05,552 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-28 03:08:05,553 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2024-11-28 03:08:05,553 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-28 03:08:05,553 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2024-11-28 03:08:05,553 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=26, Invalid=130, Unknown=0, NotChecked=0, Total=156 [2024-11-28 03:08:05,554 INFO L87 Difference]: Start difference. First operand 683 states and 998 transitions. Second operand has 6 states, 5 states have (on average 20.6) internal successors, (103), 6 states have internal predecessors, (103), 3 states have call successors, (28), 2 states have call predecessors, (28), 3 states have return successors, (23), 3 states have call predecessors, (23), 3 states have call successors, (23) [2024-11-28 03:08:05,688 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-28 03:08:05,688 INFO L93 Difference]: Finished difference Result 1310 states and 1931 transitions. [2024-11-28 03:08:05,689 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2024-11-28 03:08:05,689 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 20.6) internal successors, (103), 6 states have internal predecessors, (103), 3 states have call successors, (28), 2 states have call predecessors, (28), 3 states have return successors, (23), 3 states have call predecessors, (23), 3 states have call successors, (23) Word has length 176 [2024-11-28 03:08:05,689 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-28 03:08:05,695 INFO L225 Difference]: With dead ends: 1310 [2024-11-28 03:08:05,695 INFO L226 Difference]: Without dead ends: 685 [2024-11-28 03:08:05,697 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 184 GetRequests, 173 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=26, Invalid=130, Unknown=0, NotChecked=0, Total=156 [2024-11-28 03:08:05,699 INFO L435 NwaCegarLoop]: 836 mSDtfsCounter, 2 mSDsluCounter, 3327 mSDsCounter, 0 mSdLazyCounter, 64 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 3 SdHoareTripleChecker+Valid, 4163 SdHoareTripleChecker+Invalid, 64 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 64 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-11-28 03:08:05,699 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [3 Valid, 4163 Invalid, 64 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 64 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-11-28 03:08:05,701 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 685 states. [2024-11-28 03:08:05,742 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 685 to 685. [2024-11-28 03:08:05,744 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 685 states, 521 states have (on average 1.4664107485604607) internal successors, (764), 533 states have internal predecessors, (764), 117 states have call successors, (117), 44 states have call predecessors, (117), 46 states have return successors, (123), 115 states have call predecessors, (123), 116 states have call successors, (123) [2024-11-28 03:08:05,749 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 685 states to 685 states and 1004 transitions. [2024-11-28 03:08:05,751 INFO L78 Accepts]: Start accepts. Automaton has 685 states and 1004 transitions. Word has length 176 [2024-11-28 03:08:05,751 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-28 03:08:05,751 INFO L471 AbstractCegarLoop]: Abstraction has 685 states and 1004 transitions. [2024-11-28 03:08:05,751 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 20.6) internal successors, (103), 6 states have internal predecessors, (103), 3 states have call successors, (28), 2 states have call predecessors, (28), 3 states have return successors, (23), 3 states have call predecessors, (23), 3 states have call successors, (23) [2024-11-28 03:08:05,751 INFO L276 IsEmpty]: Start isEmpty. Operand 685 states and 1004 transitions. [2024-11-28 03:08:05,755 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 178 [2024-11-28 03:08:05,755 INFO L210 NwaCegarLoop]: Found error trace [2024-11-28 03:08:05,756 INFO L218 NwaCegarLoop]: trace histogram [8, 8, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-28 03:08:05,767 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d3b35404-e636-45a5-b527-45af5a94f135/bin/uautomizer-verify-aQ6SnzHsRB/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Ended with exit code 0 [2024-11-28 03:08:05,960 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8,5 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d3b35404-e636-45a5-b527-45af5a94f135/bin/uautomizer-verify-aQ6SnzHsRB/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-11-28 03:08:05,960 INFO L396 AbstractCegarLoop]: === Iteration 10 === Targeting outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION === [outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-28 03:08:05,961 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-28 03:08:05,961 INFO L85 PathProgramCache]: Analyzing trace with hash -1964582107, now seen corresponding path program 1 times [2024-11-28 03:08:05,961 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-28 03:08:05,961 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [629050293] [2024-11-28 03:08:05,961 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-28 03:08:05,961 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-28 03:08:06,005 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-28 03:08:06,272 INFO L134 CoverageAnalysis]: Checked inductivity of 117 backedges. 6 proven. 0 refuted. 0 times theorem prover too weak. 111 trivial. 0 not checked. [2024-11-28 03:08:06,272 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-28 03:08:06,273 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [629050293] [2024-11-28 03:08:06,273 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [629050293] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-28 03:08:06,273 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-28 03:08:06,273 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2024-11-28 03:08:06,273 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1222442964] [2024-11-28 03:08:06,273 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-28 03:08:06,274 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2024-11-28 03:08:06,274 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-28 03:08:06,274 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2024-11-28 03:08:06,274 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=43, Unknown=0, NotChecked=0, Total=56 [2024-11-28 03:08:06,275 INFO L87 Difference]: Start difference. First operand 685 states and 1004 transitions. Second operand has 8 states, 6 states have (on average 16.5) internal successors, (99), 8 states have internal predecessors, (99), 4 states have call successors, (28), 2 states have call predecessors, (28), 3 states have return successors, (23), 3 states have call predecessors, (23), 4 states have call successors, (23) [2024-11-28 03:08:06,441 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-28 03:08:06,441 INFO L93 Difference]: Finished difference Result 1298 states and 1918 transitions. [2024-11-28 03:08:06,442 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2024-11-28 03:08:06,442 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 6 states have (on average 16.5) internal successors, (99), 8 states have internal predecessors, (99), 4 states have call successors, (28), 2 states have call predecessors, (28), 3 states have return successors, (23), 3 states have call predecessors, (23), 4 states have call successors, (23) Word has length 177 [2024-11-28 03:08:06,442 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-28 03:08:06,447 INFO L225 Difference]: With dead ends: 1298 [2024-11-28 03:08:06,447 INFO L226 Difference]: Without dead ends: 685 [2024-11-28 03:08:06,449 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=55, Unknown=0, NotChecked=0, Total=72 [2024-11-28 03:08:06,450 INFO L435 NwaCegarLoop]: 837 mSDtfsCounter, 4 mSDsluCounter, 5005 mSDsCounter, 0 mSdLazyCounter, 76 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 8 SdHoareTripleChecker+Valid, 5842 SdHoareTripleChecker+Invalid, 76 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 76 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-11-28 03:08:06,450 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [8 Valid, 5842 Invalid, 76 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 76 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-11-28 03:08:06,451 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 685 states. [2024-11-28 03:08:06,490 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 685 to 685. [2024-11-28 03:08:06,491 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 685 states, 521 states have (on average 1.4664107485604607) internal successors, (764), 533 states have internal predecessors, (764), 117 states have call successors, (117), 44 states have call predecessors, (117), 46 states have return successors, (122), 115 states have call predecessors, (122), 116 states have call successors, (122) [2024-11-28 03:08:06,497 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 685 states to 685 states and 1003 transitions. [2024-11-28 03:08:06,498 INFO L78 Accepts]: Start accepts. Automaton has 685 states and 1003 transitions. Word has length 177 [2024-11-28 03:08:06,498 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-28 03:08:06,499 INFO L471 AbstractCegarLoop]: Abstraction has 685 states and 1003 transitions. [2024-11-28 03:08:06,499 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 6 states have (on average 16.5) internal successors, (99), 8 states have internal predecessors, (99), 4 states have call successors, (28), 2 states have call predecessors, (28), 3 states have return successors, (23), 3 states have call predecessors, (23), 4 states have call successors, (23) [2024-11-28 03:08:06,499 INFO L276 IsEmpty]: Start isEmpty. Operand 685 states and 1003 transitions. [2024-11-28 03:08:06,502 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 179 [2024-11-28 03:08:06,502 INFO L210 NwaCegarLoop]: Found error trace [2024-11-28 03:08:06,503 INFO L218 NwaCegarLoop]: trace histogram [8, 8, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-28 03:08:06,503 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2024-11-28 03:08:06,503 INFO L396 AbstractCegarLoop]: === Iteration 11 === Targeting outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION === [outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-28 03:08:06,503 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-28 03:08:06,504 INFO L85 PathProgramCache]: Analyzing trace with hash 1220892897, now seen corresponding path program 2 times [2024-11-28 03:08:06,504 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-28 03:08:06,504 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [252152290] [2024-11-28 03:08:06,504 INFO L95 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2024-11-28 03:08:06,504 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-28 03:08:06,569 INFO L229 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 1 check-sat command(s) [2024-11-28 03:08:06,569 INFO L230 tOrderPrioritization]: Conjunction of SSA is unsat [2024-11-28 03:08:06,767 INFO L134 CoverageAnalysis]: Checked inductivity of 118 backedges. 8 proven. 0 refuted. 0 times theorem prover too weak. 110 trivial. 0 not checked. [2024-11-28 03:08:06,768 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-28 03:08:06,768 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [252152290] [2024-11-28 03:08:06,768 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [252152290] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-28 03:08:06,769 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-28 03:08:06,769 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2024-11-28 03:08:06,769 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [511334917] [2024-11-28 03:08:06,769 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-28 03:08:06,769 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2024-11-28 03:08:06,770 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-28 03:08:06,770 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2024-11-28 03:08:06,771 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=14, Invalid=42, Unknown=0, NotChecked=0, Total=56 [2024-11-28 03:08:06,771 INFO L87 Difference]: Start difference. First operand 685 states and 1003 transitions. Second operand has 8 states, 8 states have (on average 12.625) internal successors, (101), 7 states have internal predecessors, (101), 2 states have call successors, (28), 2 states have call predecessors, (28), 3 states have return successors, (23), 3 states have call predecessors, (23), 2 states have call successors, (23) [2024-11-28 03:08:07,661 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-28 03:08:07,662 INFO L93 Difference]: Finished difference Result 1132 states and 1709 transitions. [2024-11-28 03:08:07,662 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2024-11-28 03:08:07,662 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 12.625) internal successors, (101), 7 states have internal predecessors, (101), 2 states have call successors, (28), 2 states have call predecessors, (28), 3 states have return successors, (23), 3 states have call predecessors, (23), 2 states have call successors, (23) Word has length 178 [2024-11-28 03:08:07,663 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-28 03:08:07,671 INFO L225 Difference]: With dead ends: 1132 [2024-11-28 03:08:07,671 INFO L226 Difference]: Without dead ends: 1128 [2024-11-28 03:08:07,672 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 13 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=39, Invalid=117, Unknown=0, NotChecked=0, Total=156 [2024-11-28 03:08:07,673 INFO L435 NwaCegarLoop]: 864 mSDtfsCounter, 1372 mSDsluCounter, 3809 mSDsCounter, 0 mSdLazyCounter, 316 mSolverCounterSat, 193 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1375 SdHoareTripleChecker+Valid, 4673 SdHoareTripleChecker+Invalid, 509 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 193 IncrementalHoareTripleChecker+Valid, 316 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2024-11-28 03:08:07,673 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [1375 Valid, 4673 Invalid, 509 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [193 Valid, 316 Invalid, 0 Unknown, 0 Unchecked, 0.7s Time] [2024-11-28 03:08:07,675 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1128 states. [2024-11-28 03:08:07,746 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1128 to 1119. [2024-11-28 03:08:07,748 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1119 states, 872 states have (on average 1.5091743119266054) internal successors, (1316), 888 states have internal predecessors, (1316), 178 states have call successors, (178), 70 states have call predecessors, (178), 68 states have return successors, (194), 169 states have call predecessors, (194), 177 states have call successors, (194) [2024-11-28 03:08:07,757 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1119 states to 1119 states and 1688 transitions. [2024-11-28 03:08:07,759 INFO L78 Accepts]: Start accepts. Automaton has 1119 states and 1688 transitions. Word has length 178 [2024-11-28 03:08:07,759 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-28 03:08:07,759 INFO L471 AbstractCegarLoop]: Abstraction has 1119 states and 1688 transitions. [2024-11-28 03:08:07,760 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 12.625) internal successors, (101), 7 states have internal predecessors, (101), 2 states have call successors, (28), 2 states have call predecessors, (28), 3 states have return successors, (23), 3 states have call predecessors, (23), 2 states have call successors, (23) [2024-11-28 03:08:07,760 INFO L276 IsEmpty]: Start isEmpty. Operand 1119 states and 1688 transitions. [2024-11-28 03:08:07,765 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 182 [2024-11-28 03:08:07,765 INFO L210 NwaCegarLoop]: Found error trace [2024-11-28 03:08:07,766 INFO L218 NwaCegarLoop]: trace histogram [8, 8, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-28 03:08:07,766 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2024-11-28 03:08:07,766 INFO L396 AbstractCegarLoop]: === Iteration 12 === Targeting outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION === [outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-28 03:08:07,766 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-28 03:08:07,767 INFO L85 PathProgramCache]: Analyzing trace with hash -1781657637, now seen corresponding path program 1 times [2024-11-28 03:08:07,767 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-28 03:08:07,767 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1887203770] [2024-11-28 03:08:07,767 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-28 03:08:07,767 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-28 03:08:07,804 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-28 03:08:08,017 INFO L134 CoverageAnalysis]: Checked inductivity of 121 backedges. 0 proven. 8 refuted. 0 times theorem prover too weak. 113 trivial. 0 not checked. [2024-11-28 03:08:08,017 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-28 03:08:08,018 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1887203770] [2024-11-28 03:08:08,018 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1887203770] provided 0 perfect and 1 imperfect interpolant sequences [2024-11-28 03:08:08,018 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1396276468] [2024-11-28 03:08:08,018 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-28 03:08:08,018 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-11-28 03:08:08,018 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d3b35404-e636-45a5-b527-45af5a94f135/bin/uautomizer-verify-aQ6SnzHsRB/z3 [2024-11-28 03:08:08,020 INFO L229 MonitoredProcess]: Starting monitored process 6 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d3b35404-e636-45a5-b527-45af5a94f135/bin/uautomizer-verify-aQ6SnzHsRB/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-11-28 03:08:08,023 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d3b35404-e636-45a5-b527-45af5a94f135/bin/uautomizer-verify-aQ6SnzHsRB/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Waiting until timeout for monitored process [2024-11-28 03:08:08,504 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-28 03:08:08,509 INFO L256 TraceCheckSpWp]: Trace formula consists of 1380 conjuncts, 8 conjuncts are in the unsatisfiable core [2024-11-28 03:08:08,515 INFO L279 TraceCheckSpWp]: Computing forward predicates... [2024-11-28 03:08:08,580 INFO L134 CoverageAnalysis]: Checked inductivity of 121 backedges. 18 proven. 0 refuted. 0 times theorem prover too weak. 103 trivial. 0 not checked. [2024-11-28 03:08:08,580 INFO L308 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2024-11-28 03:08:08,581 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1396276468] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-28 03:08:08,581 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2024-11-28 03:08:08,581 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [6] total 10 [2024-11-28 03:08:08,581 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1900845295] [2024-11-28 03:08:08,581 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-28 03:08:08,582 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2024-11-28 03:08:08,582 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-28 03:08:08,582 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2024-11-28 03:08:08,582 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=21, Invalid=69, Unknown=0, NotChecked=0, Total=90 [2024-11-28 03:08:08,583 INFO L87 Difference]: Start difference. First operand 1119 states and 1688 transitions. Second operand has 6 states, 5 states have (on average 20.6) internal successors, (103), 6 states have internal predecessors, (103), 3 states have call successors, (28), 2 states have call predecessors, (28), 3 states have return successors, (23), 3 states have call predecessors, (23), 3 states have call successors, (23) [2024-11-28 03:08:08,744 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-28 03:08:08,744 INFO L93 Difference]: Finished difference Result 2171 states and 3298 transitions. [2024-11-28 03:08:08,744 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2024-11-28 03:08:08,745 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 20.6) internal successors, (103), 6 states have internal predecessors, (103), 3 states have call successors, (28), 2 states have call predecessors, (28), 3 states have return successors, (23), 3 states have call predecessors, (23), 3 states have call successors, (23) Word has length 181 [2024-11-28 03:08:08,745 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-28 03:08:08,754 INFO L225 Difference]: With dead ends: 2171 [2024-11-28 03:08:08,755 INFO L226 Difference]: Without dead ends: 1125 [2024-11-28 03:08:08,758 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 186 GetRequests, 178 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=21, Invalid=69, Unknown=0, NotChecked=0, Total=90 [2024-11-28 03:08:08,760 INFO L435 NwaCegarLoop]: 840 mSDtfsCounter, 1 mSDsluCounter, 3342 mSDsCounter, 0 mSdLazyCounter, 63 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2 SdHoareTripleChecker+Valid, 4182 SdHoareTripleChecker+Invalid, 64 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 63 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-11-28 03:08:08,761 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [2 Valid, 4182 Invalid, 64 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 63 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-11-28 03:08:08,763 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1125 states. [2024-11-28 03:08:08,832 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1125 to 1121. [2024-11-28 03:08:08,834 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1121 states, 873 states have (on average 1.5085910652920962) internal successors, (1317), 890 states have internal predecessors, (1317), 178 states have call successors, (178), 70 states have call predecessors, (178), 69 states have return successors, (197), 169 states have call predecessors, (197), 177 states have call successors, (197) [2024-11-28 03:08:08,843 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1121 states to 1121 states and 1692 transitions. [2024-11-28 03:08:08,845 INFO L78 Accepts]: Start accepts. Automaton has 1121 states and 1692 transitions. Word has length 181 [2024-11-28 03:08:08,845 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-28 03:08:08,845 INFO L471 AbstractCegarLoop]: Abstraction has 1121 states and 1692 transitions. [2024-11-28 03:08:08,845 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 20.6) internal successors, (103), 6 states have internal predecessors, (103), 3 states have call successors, (28), 2 states have call predecessors, (28), 3 states have return successors, (23), 3 states have call predecessors, (23), 3 states have call successors, (23) [2024-11-28 03:08:08,846 INFO L276 IsEmpty]: Start isEmpty. Operand 1121 states and 1692 transitions. [2024-11-28 03:08:08,851 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 183 [2024-11-28 03:08:08,851 INFO L210 NwaCegarLoop]: Found error trace [2024-11-28 03:08:08,851 INFO L218 NwaCegarLoop]: trace histogram [8, 8, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-28 03:08:08,862 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d3b35404-e636-45a5-b527-45af5a94f135/bin/uautomizer-verify-aQ6SnzHsRB/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Ended with exit code 0 [2024-11-28 03:08:09,052 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 6 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d3b35404-e636-45a5-b527-45af5a94f135/bin/uautomizer-verify-aQ6SnzHsRB/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable11 [2024-11-28 03:08:09,052 INFO L396 AbstractCegarLoop]: === Iteration 13 === Targeting outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION === [outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-28 03:08:09,053 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-28 03:08:09,053 INFO L85 PathProgramCache]: Analyzing trace with hash 199746670, now seen corresponding path program 1 times [2024-11-28 03:08:09,053 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-28 03:08:09,053 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1756251169] [2024-11-28 03:08:09,053 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-28 03:08:09,053 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-28 03:08:09,092 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-28 03:08:09,299 INFO L134 CoverageAnalysis]: Checked inductivity of 121 backedges. 0 proven. 8 refuted. 0 times theorem prover too weak. 113 trivial. 0 not checked. [2024-11-28 03:08:09,300 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-28 03:08:09,300 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1756251169] [2024-11-28 03:08:09,300 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1756251169] provided 0 perfect and 1 imperfect interpolant sequences [2024-11-28 03:08:09,300 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [312559601] [2024-11-28 03:08:09,300 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-28 03:08:09,300 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-11-28 03:08:09,300 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d3b35404-e636-45a5-b527-45af5a94f135/bin/uautomizer-verify-aQ6SnzHsRB/z3 [2024-11-28 03:08:09,304 INFO L229 MonitoredProcess]: Starting monitored process 7 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d3b35404-e636-45a5-b527-45af5a94f135/bin/uautomizer-verify-aQ6SnzHsRB/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-11-28 03:08:09,305 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d3b35404-e636-45a5-b527-45af5a94f135/bin/uautomizer-verify-aQ6SnzHsRB/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Waiting until timeout for monitored process [2024-11-28 03:08:09,754 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-28 03:08:09,760 INFO L256 TraceCheckSpWp]: Trace formula consists of 1378 conjuncts, 10 conjuncts are in the unsatisfiable core [2024-11-28 03:08:09,765 INFO L279 TraceCheckSpWp]: Computing forward predicates... [2024-11-28 03:08:09,859 INFO L134 CoverageAnalysis]: Checked inductivity of 121 backedges. 17 proven. 0 refuted. 0 times theorem prover too weak. 104 trivial. 0 not checked. [2024-11-28 03:08:09,859 INFO L308 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2024-11-28 03:08:09,859 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [312559601] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-28 03:08:09,859 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2024-11-28 03:08:09,860 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [6] total 12 [2024-11-28 03:08:09,860 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1693590580] [2024-11-28 03:08:09,860 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-28 03:08:09,860 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2024-11-28 03:08:09,860 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-28 03:08:09,861 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2024-11-28 03:08:09,861 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=21, Invalid=111, Unknown=0, NotChecked=0, Total=132 [2024-11-28 03:08:09,861 INFO L87 Difference]: Start difference. First operand 1121 states and 1692 transitions. Second operand has 8 states, 6 states have (on average 17.833333333333332) internal successors, (107), 8 states have internal predecessors, (107), 4 states have call successors, (28), 2 states have call predecessors, (28), 4 states have return successors, (23), 3 states have call predecessors, (23), 4 states have call successors, (23) [2024-11-28 03:08:10,081 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-28 03:08:10,082 INFO L93 Difference]: Finished difference Result 2153 states and 3276 transitions. [2024-11-28 03:08:10,082 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2024-11-28 03:08:10,082 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 6 states have (on average 17.833333333333332) internal successors, (107), 8 states have internal predecessors, (107), 4 states have call successors, (28), 2 states have call predecessors, (28), 4 states have return successors, (23), 3 states have call predecessors, (23), 4 states have call successors, (23) Word has length 182 [2024-11-28 03:08:10,083 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-28 03:08:10,092 INFO L225 Difference]: With dead ends: 2153 [2024-11-28 03:08:10,092 INFO L226 Difference]: Without dead ends: 1125 [2024-11-28 03:08:10,096 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 188 GetRequests, 177 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=25, Invalid=131, Unknown=0, NotChecked=0, Total=156 [2024-11-28 03:08:10,097 INFO L435 NwaCegarLoop]: 836 mSDtfsCounter, 3 mSDsluCounter, 4999 mSDsCounter, 0 mSdLazyCounter, 82 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 7 SdHoareTripleChecker+Valid, 5835 SdHoareTripleChecker+Invalid, 83 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 82 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-11-28 03:08:10,097 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [7 Valid, 5835 Invalid, 83 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 82 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-11-28 03:08:10,100 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1125 states. [2024-11-28 03:08:10,187 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1125 to 1125. [2024-11-28 03:08:10,190 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1125 states, 875 states have (on average 1.5074285714285713) internal successors, (1319), 894 states have internal predecessors, (1319), 178 states have call successors, (178), 70 states have call predecessors, (178), 71 states have return successors, (200), 169 states have call predecessors, (200), 177 states have call successors, (200) [2024-11-28 03:08:10,200 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1125 states to 1125 states and 1697 transitions. [2024-11-28 03:08:10,201 INFO L78 Accepts]: Start accepts. Automaton has 1125 states and 1697 transitions. Word has length 182 [2024-11-28 03:08:10,202 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-28 03:08:10,202 INFO L471 AbstractCegarLoop]: Abstraction has 1125 states and 1697 transitions. [2024-11-28 03:08:10,203 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 6 states have (on average 17.833333333333332) internal successors, (107), 8 states have internal predecessors, (107), 4 states have call successors, (28), 2 states have call predecessors, (28), 4 states have return successors, (23), 3 states have call predecessors, (23), 4 states have call successors, (23) [2024-11-28 03:08:10,203 INFO L276 IsEmpty]: Start isEmpty. Operand 1125 states and 1697 transitions. [2024-11-28 03:08:10,209 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 181 [2024-11-28 03:08:10,209 INFO L210 NwaCegarLoop]: Found error trace [2024-11-28 03:08:10,209 INFO L218 NwaCegarLoop]: trace histogram [8, 8, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-28 03:08:10,220 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d3b35404-e636-45a5-b527-45af5a94f135/bin/uautomizer-verify-aQ6SnzHsRB/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Forceful destruction successful, exit code 0 [2024-11-28 03:08:10,413 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 7 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d3b35404-e636-45a5-b527-45af5a94f135/bin/uautomizer-verify-aQ6SnzHsRB/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable12 [2024-11-28 03:08:10,413 INFO L396 AbstractCegarLoop]: === Iteration 14 === Targeting outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION === [outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-28 03:08:10,414 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-28 03:08:10,414 INFO L85 PathProgramCache]: Analyzing trace with hash -1206115150, now seen corresponding path program 1 times [2024-11-28 03:08:10,414 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-28 03:08:10,414 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1521139005] [2024-11-28 03:08:10,415 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-28 03:08:10,415 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-28 03:08:10,473 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-28 03:08:10,731 INFO L134 CoverageAnalysis]: Checked inductivity of 118 backedges. 13 proven. 0 refuted. 0 times theorem prover too weak. 105 trivial. 0 not checked. [2024-11-28 03:08:10,731 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-28 03:08:10,732 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1521139005] [2024-11-28 03:08:10,732 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1521139005] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-28 03:08:10,732 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-28 03:08:10,732 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2024-11-28 03:08:10,732 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1355326366] [2024-11-28 03:08:10,732 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-28 03:08:10,733 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2024-11-28 03:08:10,733 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-28 03:08:10,733 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2024-11-28 03:08:10,733 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=57, Unknown=0, NotChecked=0, Total=72 [2024-11-28 03:08:10,734 INFO L87 Difference]: Start difference. First operand 1125 states and 1697 transitions. Second operand has 9 states, 7 states have (on average 15.142857142857142) internal successors, (106), 8 states have internal predecessors, (106), 4 states have call successors, (28), 2 states have call predecessors, (28), 4 states have return successors, (23), 4 states have call predecessors, (23), 4 states have call successors, (23) [2024-11-28 03:08:10,961 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-28 03:08:10,962 INFO L93 Difference]: Finished difference Result 2143 states and 3259 transitions. [2024-11-28 03:08:10,962 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2024-11-28 03:08:10,962 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 7 states have (on average 15.142857142857142) internal successors, (106), 8 states have internal predecessors, (106), 4 states have call successors, (28), 2 states have call predecessors, (28), 4 states have return successors, (23), 4 states have call predecessors, (23), 4 states have call successors, (23) Word has length 180 [2024-11-28 03:08:10,963 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-28 03:08:10,970 INFO L225 Difference]: With dead ends: 2143 [2024-11-28 03:08:10,971 INFO L226 Difference]: Without dead ends: 1125 [2024-11-28 03:08:10,974 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 12 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=23, Invalid=87, Unknown=0, NotChecked=0, Total=110 [2024-11-28 03:08:10,975 INFO L435 NwaCegarLoop]: 830 mSDtfsCounter, 7 mSDsluCounter, 5780 mSDsCounter, 0 mSdLazyCounter, 162 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 9 SdHoareTripleChecker+Valid, 6610 SdHoareTripleChecker+Invalid, 162 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 162 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-11-28 03:08:10,975 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [9 Valid, 6610 Invalid, 162 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 162 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-11-28 03:08:10,977 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1125 states. [2024-11-28 03:08:11,032 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1125 to 1125. [2024-11-28 03:08:11,034 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1125 states, 875 states have (on average 1.5074285714285713) internal successors, (1319), 894 states have internal predecessors, (1319), 178 states have call successors, (178), 70 states have call predecessors, (178), 71 states have return successors, (198), 169 states have call predecessors, (198), 177 states have call successors, (198) [2024-11-28 03:08:11,042 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1125 states to 1125 states and 1695 transitions. [2024-11-28 03:08:11,045 INFO L78 Accepts]: Start accepts. Automaton has 1125 states and 1695 transitions. Word has length 180 [2024-11-28 03:08:11,045 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-28 03:08:11,045 INFO L471 AbstractCegarLoop]: Abstraction has 1125 states and 1695 transitions. [2024-11-28 03:08:11,046 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 7 states have (on average 15.142857142857142) internal successors, (106), 8 states have internal predecessors, (106), 4 states have call successors, (28), 2 states have call predecessors, (28), 4 states have return successors, (23), 4 states have call predecessors, (23), 4 states have call successors, (23) [2024-11-28 03:08:11,046 INFO L276 IsEmpty]: Start isEmpty. Operand 1125 states and 1695 transitions. [2024-11-28 03:08:11,051 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 184 [2024-11-28 03:08:11,051 INFO L210 NwaCegarLoop]: Found error trace [2024-11-28 03:08:11,052 INFO L218 NwaCegarLoop]: trace histogram [8, 8, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-28 03:08:11,052 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable13 [2024-11-28 03:08:11,052 INFO L396 AbstractCegarLoop]: === Iteration 15 === Targeting outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION === [outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-28 03:08:11,053 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-28 03:08:11,053 INFO L85 PathProgramCache]: Analyzing trace with hash -686186615, now seen corresponding path program 1 times [2024-11-28 03:08:11,053 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-28 03:08:11,053 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [248558077] [2024-11-28 03:08:11,053 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-28 03:08:11,053 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-28 03:08:11,097 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-28 03:08:11,288 INFO L134 CoverageAnalysis]: Checked inductivity of 121 backedges. 0 proven. 8 refuted. 0 times theorem prover too weak. 113 trivial. 0 not checked. [2024-11-28 03:08:11,288 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-28 03:08:11,288 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [248558077] [2024-11-28 03:08:11,288 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [248558077] provided 0 perfect and 1 imperfect interpolant sequences [2024-11-28 03:08:11,288 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1551864242] [2024-11-28 03:08:11,289 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-28 03:08:11,289 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-11-28 03:08:11,289 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d3b35404-e636-45a5-b527-45af5a94f135/bin/uautomizer-verify-aQ6SnzHsRB/z3 [2024-11-28 03:08:11,291 INFO L229 MonitoredProcess]: Starting monitored process 8 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d3b35404-e636-45a5-b527-45af5a94f135/bin/uautomizer-verify-aQ6SnzHsRB/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-11-28 03:08:11,295 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d3b35404-e636-45a5-b527-45af5a94f135/bin/uautomizer-verify-aQ6SnzHsRB/z3 -smt2 -in SMTLIB2_COMPLIANT=true (8)] Waiting until timeout for monitored process [2024-11-28 03:08:11,741 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-28 03:08:11,747 INFO L256 TraceCheckSpWp]: Trace formula consists of 1379 conjuncts, 8 conjuncts are in the unsatisfiable core [2024-11-28 03:08:11,752 INFO L279 TraceCheckSpWp]: Computing forward predicates... [2024-11-28 03:08:11,824 INFO L134 CoverageAnalysis]: Checked inductivity of 121 backedges. 8 proven. 0 refuted. 0 times theorem prover too weak. 113 trivial. 0 not checked. [2024-11-28 03:08:11,824 INFO L308 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2024-11-28 03:08:11,824 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1551864242] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-28 03:08:11,824 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2024-11-28 03:08:11,825 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [6] total 10 [2024-11-28 03:08:11,825 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1617398804] [2024-11-28 03:08:11,825 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-28 03:08:11,825 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2024-11-28 03:08:11,825 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-28 03:08:11,826 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2024-11-28 03:08:11,826 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=18, Invalid=72, Unknown=0, NotChecked=0, Total=90 [2024-11-28 03:08:11,826 INFO L87 Difference]: Start difference. First operand 1125 states and 1695 transitions. Second operand has 6 states, 5 states have (on average 21.0) internal successors, (105), 6 states have internal predecessors, (105), 3 states have call successors, (28), 2 states have call predecessors, (28), 3 states have return successors, (23), 3 states have call predecessors, (23), 3 states have call successors, (23) [2024-11-28 03:08:11,966 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-28 03:08:11,967 INFO L93 Difference]: Finished difference Result 2153 states and 3274 transitions. [2024-11-28 03:08:11,967 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2024-11-28 03:08:11,967 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 21.0) internal successors, (105), 6 states have internal predecessors, (105), 3 states have call successors, (28), 2 states have call predecessors, (28), 3 states have return successors, (23), 3 states have call predecessors, (23), 3 states have call successors, (23) Word has length 183 [2024-11-28 03:08:11,968 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-28 03:08:11,976 INFO L225 Difference]: With dead ends: 2153 [2024-11-28 03:08:11,977 INFO L226 Difference]: Without dead ends: 1131 [2024-11-28 03:08:11,981 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 188 GetRequests, 180 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=18, Invalid=72, Unknown=0, NotChecked=0, Total=90 [2024-11-28 03:08:11,982 INFO L435 NwaCegarLoop]: 836 mSDtfsCounter, 1 mSDsluCounter, 3327 mSDsCounter, 0 mSdLazyCounter, 63 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2 SdHoareTripleChecker+Valid, 4163 SdHoareTripleChecker+Invalid, 64 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 63 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-11-28 03:08:11,982 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [2 Valid, 4163 Invalid, 64 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 63 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-11-28 03:08:11,984 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1131 states. [2024-11-28 03:08:12,042 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1131 to 1129. [2024-11-28 03:08:12,044 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1129 states, 877 states have (on average 1.5062713797035348) internal successors, (1321), 898 states have internal predecessors, (1321), 178 states have call successors, (178), 70 states have call predecessors, (178), 73 states have return successors, (204), 169 states have call predecessors, (204), 177 states have call successors, (204) [2024-11-28 03:08:12,052 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1129 states to 1129 states and 1703 transitions. [2024-11-28 03:08:12,054 INFO L78 Accepts]: Start accepts. Automaton has 1129 states and 1703 transitions. Word has length 183 [2024-11-28 03:08:12,055 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-28 03:08:12,055 INFO L471 AbstractCegarLoop]: Abstraction has 1129 states and 1703 transitions. [2024-11-28 03:08:12,055 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 21.0) internal successors, (105), 6 states have internal predecessors, (105), 3 states have call successors, (28), 2 states have call predecessors, (28), 3 states have return successors, (23), 3 states have call predecessors, (23), 3 states have call successors, (23) [2024-11-28 03:08:12,055 INFO L276 IsEmpty]: Start isEmpty. Operand 1129 states and 1703 transitions. [2024-11-28 03:08:12,060 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 183 [2024-11-28 03:08:12,060 INFO L210 NwaCegarLoop]: Found error trace [2024-11-28 03:08:12,060 INFO L218 NwaCegarLoop]: trace histogram [8, 8, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-28 03:08:12,074 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d3b35404-e636-45a5-b527-45af5a94f135/bin/uautomizer-verify-aQ6SnzHsRB/z3 -smt2 -in SMTLIB2_COMPLIANT=true (8)] Ended with exit code 0 [2024-11-28 03:08:12,265 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 8 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d3b35404-e636-45a5-b527-45af5a94f135/bin/uautomizer-verify-aQ6SnzHsRB/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable14 [2024-11-28 03:08:12,265 INFO L396 AbstractCegarLoop]: === Iteration 16 === Targeting outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION === [outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-28 03:08:12,266 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-28 03:08:12,266 INFO L85 PathProgramCache]: Analyzing trace with hash 509554551, now seen corresponding path program 1 times [2024-11-28 03:08:12,266 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-28 03:08:12,266 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [608063407] [2024-11-28 03:08:12,266 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-28 03:08:12,266 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-28 03:08:12,305 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-28 03:08:12,432 INFO L134 CoverageAnalysis]: Checked inductivity of 119 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 118 trivial. 0 not checked. [2024-11-28 03:08:12,433 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-28 03:08:12,433 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [608063407] [2024-11-28 03:08:12,433 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [608063407] provided 0 perfect and 1 imperfect interpolant sequences [2024-11-28 03:08:12,433 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1422787301] [2024-11-28 03:08:12,433 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-28 03:08:12,433 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-11-28 03:08:12,433 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d3b35404-e636-45a5-b527-45af5a94f135/bin/uautomizer-verify-aQ6SnzHsRB/z3 [2024-11-28 03:08:12,438 INFO L229 MonitoredProcess]: Starting monitored process 9 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d3b35404-e636-45a5-b527-45af5a94f135/bin/uautomizer-verify-aQ6SnzHsRB/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-11-28 03:08:12,440 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d3b35404-e636-45a5-b527-45af5a94f135/bin/uautomizer-verify-aQ6SnzHsRB/z3 -smt2 -in SMTLIB2_COMPLIANT=true (9)] Waiting until timeout for monitored process [2024-11-28 03:08:12,870 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-28 03:08:12,876 INFO L256 TraceCheckSpWp]: Trace formula consists of 1381 conjuncts, 3 conjuncts are in the unsatisfiable core [2024-11-28 03:08:12,881 INFO L279 TraceCheckSpWp]: Computing forward predicates... [2024-11-28 03:08:12,913 INFO L134 CoverageAnalysis]: Checked inductivity of 119 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 118 trivial. 0 not checked. [2024-11-28 03:08:12,915 INFO L312 TraceCheckSpWp]: Computing backward predicates... [2024-11-28 03:08:13,085 INFO L134 CoverageAnalysis]: Checked inductivity of 119 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 118 trivial. 0 not checked. [2024-11-28 03:08:13,086 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1422787301] provided 0 perfect and 2 imperfect interpolant sequences [2024-11-28 03:08:13,086 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-11-28 03:08:13,086 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [4, 4, 4] total 7 [2024-11-28 03:08:13,086 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1623838491] [2024-11-28 03:08:13,086 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-11-28 03:08:13,088 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2024-11-28 03:08:13,088 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-28 03:08:13,088 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2024-11-28 03:08:13,089 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=21, Invalid=21, Unknown=0, NotChecked=0, Total=42 [2024-11-28 03:08:13,090 INFO L87 Difference]: Start difference. First operand 1129 states and 1703 transitions. Second operand has 7 states, 7 states have (on average 18.428571428571427) internal successors, (129), 7 states have internal predecessors, (129), 2 states have call successors, (34), 2 states have call predecessors, (34), 2 states have return successors, (29), 2 states have call predecessors, (29), 2 states have call successors, (29) [2024-11-28 03:08:13,364 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-28 03:08:13,364 INFO L93 Difference]: Finished difference Result 2669 states and 4157 transitions. [2024-11-28 03:08:13,365 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2024-11-28 03:08:13,365 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 18.428571428571427) internal successors, (129), 7 states have internal predecessors, (129), 2 states have call successors, (34), 2 states have call predecessors, (34), 2 states have return successors, (29), 2 states have call predecessors, (29), 2 states have call successors, (29) Word has length 182 [2024-11-28 03:08:13,366 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-28 03:08:13,386 INFO L225 Difference]: With dead ends: 2669 [2024-11-28 03:08:13,386 INFO L226 Difference]: Without dead ends: 2225 [2024-11-28 03:08:13,389 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 366 GetRequests, 361 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=21, Invalid=21, Unknown=0, NotChecked=0, Total=42 [2024-11-28 03:08:13,391 INFO L435 NwaCegarLoop]: 888 mSDtfsCounter, 756 mSDsluCounter, 1400 mSDsCounter, 0 mSdLazyCounter, 86 mSolverCounterSat, 19 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 810 SdHoareTripleChecker+Valid, 2288 SdHoareTripleChecker+Invalid, 105 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 19 IncrementalHoareTripleChecker+Valid, 86 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2024-11-28 03:08:13,391 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [810 Valid, 2288 Invalid, 105 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [19 Valid, 86 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2024-11-28 03:08:13,395 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2225 states. [2024-11-28 03:08:13,558 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2225 to 2195. [2024-11-28 03:08:13,562 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2195 states, 1785 states have (on average 1.5445378151260505) internal successors, (2757), 1806 states have internal predecessors, (2757), 336 states have call successors, (336), 70 states have call predecessors, (336), 73 states have return successors, (387), 327 states have call predecessors, (387), 335 states have call successors, (387) [2024-11-28 03:08:13,575 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2195 states to 2195 states and 3480 transitions. [2024-11-28 03:08:13,578 INFO L78 Accepts]: Start accepts. Automaton has 2195 states and 3480 transitions. Word has length 182 [2024-11-28 03:08:13,578 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-28 03:08:13,578 INFO L471 AbstractCegarLoop]: Abstraction has 2195 states and 3480 transitions. [2024-11-28 03:08:13,579 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 18.428571428571427) internal successors, (129), 7 states have internal predecessors, (129), 2 states have call successors, (34), 2 states have call predecessors, (34), 2 states have return successors, (29), 2 states have call predecessors, (29), 2 states have call successors, (29) [2024-11-28 03:08:13,579 INFO L276 IsEmpty]: Start isEmpty. Operand 2195 states and 3480 transitions. [2024-11-28 03:08:13,589 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 190 [2024-11-28 03:08:13,589 INFO L210 NwaCegarLoop]: Found error trace [2024-11-28 03:08:13,590 INFO L218 NwaCegarLoop]: trace histogram [8, 8, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-28 03:08:13,602 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d3b35404-e636-45a5-b527-45af5a94f135/bin/uautomizer-verify-aQ6SnzHsRB/z3 -smt2 -in SMTLIB2_COMPLIANT=true (9)] Forceful destruction successful, exit code 0 [2024-11-28 03:08:13,790 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 9 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d3b35404-e636-45a5-b527-45af5a94f135/bin/uautomizer-verify-aQ6SnzHsRB/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable15 [2024-11-28 03:08:13,790 INFO L396 AbstractCegarLoop]: === Iteration 17 === Targeting outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION === [outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-28 03:08:13,791 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-28 03:08:13,791 INFO L85 PathProgramCache]: Analyzing trace with hash 1128034284, now seen corresponding path program 1 times [2024-11-28 03:08:13,791 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-28 03:08:13,791 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [799395895] [2024-11-28 03:08:13,791 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-28 03:08:13,791 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-28 03:08:13,829 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-28 03:08:14,008 INFO L134 CoverageAnalysis]: Checked inductivity of 121 backedges. 0 proven. 9 refuted. 0 times theorem prover too weak. 112 trivial. 0 not checked. [2024-11-28 03:08:14,008 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-28 03:08:14,008 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [799395895] [2024-11-28 03:08:14,009 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [799395895] provided 0 perfect and 1 imperfect interpolant sequences [2024-11-28 03:08:14,009 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1555930147] [2024-11-28 03:08:14,009 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-28 03:08:14,009 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-11-28 03:08:14,009 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d3b35404-e636-45a5-b527-45af5a94f135/bin/uautomizer-verify-aQ6SnzHsRB/z3 [2024-11-28 03:08:14,011 INFO L229 MonitoredProcess]: Starting monitored process 10 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d3b35404-e636-45a5-b527-45af5a94f135/bin/uautomizer-verify-aQ6SnzHsRB/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-11-28 03:08:14,015 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d3b35404-e636-45a5-b527-45af5a94f135/bin/uautomizer-verify-aQ6SnzHsRB/z3 -smt2 -in SMTLIB2_COMPLIANT=true (10)] Waiting until timeout for monitored process [2024-11-28 03:08:14,455 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-28 03:08:14,461 INFO L256 TraceCheckSpWp]: Trace formula consists of 1380 conjuncts, 3 conjuncts are in the unsatisfiable core [2024-11-28 03:08:14,470 INFO L279 TraceCheckSpWp]: Computing forward predicates... [2024-11-28 03:08:14,501 INFO L134 CoverageAnalysis]: Checked inductivity of 121 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 121 trivial. 0 not checked. [2024-11-28 03:08:14,502 INFO L308 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2024-11-28 03:08:14,502 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1555930147] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-28 03:08:14,502 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2024-11-28 03:08:14,502 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [6] total 7 [2024-11-28 03:08:14,502 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1431478471] [2024-11-28 03:08:14,502 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-28 03:08:14,503 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2024-11-28 03:08:14,503 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-28 03:08:14,504 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-11-28 03:08:14,504 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2024-11-28 03:08:14,504 INFO L87 Difference]: Start difference. First operand 2195 states and 3480 transitions. Second operand has 3 states, 3 states have (on average 35.666666666666664) internal successors, (107), 3 states have internal predecessors, (107), 2 states have call successors, (28), 2 states have call predecessors, (28), 2 states have return successors, (23), 2 states have call predecessors, (23), 2 states have call successors, (23) [2024-11-28 03:08:14,625 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-28 03:08:14,626 INFO L93 Difference]: Finished difference Result 5173 states and 8312 transitions. [2024-11-28 03:08:14,626 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-11-28 03:08:14,626 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 35.666666666666664) internal successors, (107), 3 states have internal predecessors, (107), 2 states have call successors, (28), 2 states have call predecessors, (28), 2 states have return successors, (23), 2 states have call predecessors, (23), 2 states have call successors, (23) Word has length 189 [2024-11-28 03:08:14,627 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-28 03:08:14,647 INFO L225 Difference]: With dead ends: 5173 [2024-11-28 03:08:14,647 INFO L226 Difference]: Without dead ends: 3193 [2024-11-28 03:08:14,654 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 194 GetRequests, 189 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2024-11-28 03:08:14,656 INFO L435 NwaCegarLoop]: 857 mSDtfsCounter, 163 mSDsluCounter, 832 mSDsCounter, 0 mSdLazyCounter, 3 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 181 SdHoareTripleChecker+Valid, 1689 SdHoareTripleChecker+Invalid, 4 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 3 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-11-28 03:08:14,656 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [181 Valid, 1689 Invalid, 4 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 3 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-11-28 03:08:14,660 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3193 states. [2024-11-28 03:08:14,816 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3193 to 3183. [2024-11-28 03:08:14,826 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3183 states, 2615 states have (on average 1.5506692160611855) internal successors, (4055), 2636 states have internal predecessors, (4055), 494 states have call successors, (494), 70 states have call predecessors, (494), 73 states have return successors, (570), 485 states have call predecessors, (570), 493 states have call successors, (570) [2024-11-28 03:08:14,892 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3183 states to 3183 states and 5119 transitions. [2024-11-28 03:08:14,895 INFO L78 Accepts]: Start accepts. Automaton has 3183 states and 5119 transitions. Word has length 189 [2024-11-28 03:08:14,895 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-28 03:08:14,895 INFO L471 AbstractCegarLoop]: Abstraction has 3183 states and 5119 transitions. [2024-11-28 03:08:14,895 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 35.666666666666664) internal successors, (107), 3 states have internal predecessors, (107), 2 states have call successors, (28), 2 states have call predecessors, (28), 2 states have return successors, (23), 2 states have call predecessors, (23), 2 states have call successors, (23) [2024-11-28 03:08:14,896 INFO L276 IsEmpty]: Start isEmpty. Operand 3183 states and 5119 transitions. [2024-11-28 03:08:14,910 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 191 [2024-11-28 03:08:14,910 INFO L210 NwaCegarLoop]: Found error trace [2024-11-28 03:08:14,910 INFO L218 NwaCegarLoop]: trace histogram [8, 8, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-28 03:08:14,922 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d3b35404-e636-45a5-b527-45af5a94f135/bin/uautomizer-verify-aQ6SnzHsRB/z3 -smt2 -in SMTLIB2_COMPLIANT=true (10)] Forceful destruction successful, exit code 0 [2024-11-28 03:08:15,111 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 10 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d3b35404-e636-45a5-b527-45af5a94f135/bin/uautomizer-verify-aQ6SnzHsRB/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable16 [2024-11-28 03:08:15,112 INFO L396 AbstractCegarLoop]: === Iteration 18 === Targeting outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION === [outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-28 03:08:15,112 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-28 03:08:15,113 INFO L85 PathProgramCache]: Analyzing trace with hash -1442746640, now seen corresponding path program 1 times [2024-11-28 03:08:15,113 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-28 03:08:15,113 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [141303705] [2024-11-28 03:08:15,113 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-28 03:08:15,113 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-28 03:08:15,147 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-28 03:08:15,301 INFO L134 CoverageAnalysis]: Checked inductivity of 121 backedges. 0 proven. 9 refuted. 0 times theorem prover too weak. 112 trivial. 0 not checked. [2024-11-28 03:08:15,302 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-28 03:08:15,302 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [141303705] [2024-11-28 03:08:15,302 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [141303705] provided 0 perfect and 1 imperfect interpolant sequences [2024-11-28 03:08:15,302 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1169583559] [2024-11-28 03:08:15,302 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-28 03:08:15,302 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-11-28 03:08:15,302 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d3b35404-e636-45a5-b527-45af5a94f135/bin/uautomizer-verify-aQ6SnzHsRB/z3 [2024-11-28 03:08:15,304 INFO L229 MonitoredProcess]: Starting monitored process 11 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d3b35404-e636-45a5-b527-45af5a94f135/bin/uautomizer-verify-aQ6SnzHsRB/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-11-28 03:08:15,308 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d3b35404-e636-45a5-b527-45af5a94f135/bin/uautomizer-verify-aQ6SnzHsRB/z3 -smt2 -in SMTLIB2_COMPLIANT=true (11)] Waiting until timeout for monitored process [2024-11-28 03:08:15,735 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-28 03:08:15,740 INFO L256 TraceCheckSpWp]: Trace formula consists of 1385 conjuncts, 3 conjuncts are in the unsatisfiable core [2024-11-28 03:08:15,745 INFO L279 TraceCheckSpWp]: Computing forward predicates... [2024-11-28 03:08:15,771 INFO L134 CoverageAnalysis]: Checked inductivity of 121 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 121 trivial. 0 not checked. [2024-11-28 03:08:15,773 INFO L308 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2024-11-28 03:08:15,773 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1169583559] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-28 03:08:15,773 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2024-11-28 03:08:15,773 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [6] total 7 [2024-11-28 03:08:15,773 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [772166585] [2024-11-28 03:08:15,773 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-28 03:08:15,774 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2024-11-28 03:08:15,774 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-28 03:08:15,775 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-11-28 03:08:15,775 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2024-11-28 03:08:15,775 INFO L87 Difference]: Start difference. First operand 3183 states and 5119 transitions. Second operand has 3 states, 3 states have (on average 36.0) internal successors, (108), 3 states have internal predecessors, (108), 2 states have call successors, (28), 2 states have call predecessors, (28), 2 states have return successors, (23), 2 states have call predecessors, (23), 2 states have call successors, (23) [2024-11-28 03:08:15,926 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-28 03:08:15,926 INFO L93 Difference]: Finished difference Result 7633 states and 12385 transitions. [2024-11-28 03:08:15,926 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-11-28 03:08:15,931 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 36.0) internal successors, (108), 3 states have internal predecessors, (108), 2 states have call successors, (28), 2 states have call predecessors, (28), 2 states have return successors, (23), 2 states have call predecessors, (23), 2 states have call successors, (23) Word has length 190 [2024-11-28 03:08:15,932 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-28 03:08:15,960 INFO L225 Difference]: With dead ends: 7633 [2024-11-28 03:08:15,961 INFO L226 Difference]: Without dead ends: 4787 [2024-11-28 03:08:15,971 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 195 GetRequests, 190 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2024-11-28 03:08:15,971 INFO L435 NwaCegarLoop]: 848 mSDtfsCounter, 161 mSDsluCounter, 838 mSDsCounter, 0 mSdLazyCounter, 3 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 179 SdHoareTripleChecker+Valid, 1686 SdHoareTripleChecker+Invalid, 4 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 3 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-11-28 03:08:15,972 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [179 Valid, 1686 Invalid, 4 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 3 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-11-28 03:08:15,978 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 4787 states. [2024-11-28 03:08:16,321 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 4787 to 4777. [2024-11-28 03:08:16,330 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 4777 states, 3971 states have (on average 1.5590531352304204) internal successors, (6191), 3992 states have internal predecessors, (6191), 732 states have call successors, (732), 70 states have call predecessors, (732), 73 states have return successors, (824), 723 states have call predecessors, (824), 731 states have call successors, (824) [2024-11-28 03:08:16,357 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4777 states to 4777 states and 7747 transitions. [2024-11-28 03:08:16,360 INFO L78 Accepts]: Start accepts. Automaton has 4777 states and 7747 transitions. Word has length 190 [2024-11-28 03:08:16,361 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-28 03:08:16,362 INFO L471 AbstractCegarLoop]: Abstraction has 4777 states and 7747 transitions. [2024-11-28 03:08:16,362 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 36.0) internal successors, (108), 3 states have internal predecessors, (108), 2 states have call successors, (28), 2 states have call predecessors, (28), 2 states have return successors, (23), 2 states have call predecessors, (23), 2 states have call successors, (23) [2024-11-28 03:08:16,362 INFO L276 IsEmpty]: Start isEmpty. Operand 4777 states and 7747 transitions. [2024-11-28 03:08:16,388 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 190 [2024-11-28 03:08:16,389 INFO L210 NwaCegarLoop]: Found error trace [2024-11-28 03:08:16,389 INFO L218 NwaCegarLoop]: trace histogram [8, 8, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-28 03:08:16,400 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d3b35404-e636-45a5-b527-45af5a94f135/bin/uautomizer-verify-aQ6SnzHsRB/z3 -smt2 -in SMTLIB2_COMPLIANT=true (11)] Forceful destruction successful, exit code 0 [2024-11-28 03:08:16,589 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 11 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d3b35404-e636-45a5-b527-45af5a94f135/bin/uautomizer-verify-aQ6SnzHsRB/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable17 [2024-11-28 03:08:16,590 INFO L396 AbstractCegarLoop]: === Iteration 19 === Targeting outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION === [outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-28 03:08:16,590 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-28 03:08:16,591 INFO L85 PathProgramCache]: Analyzing trace with hash 940756172, now seen corresponding path program 1 times [2024-11-28 03:08:16,591 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-28 03:08:16,591 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1086182374] [2024-11-28 03:08:16,591 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-28 03:08:16,591 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-28 03:08:16,640 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-28 03:08:16,708 INFO L134 CoverageAnalysis]: Checked inductivity of 118 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 118 trivial. 0 not checked. [2024-11-28 03:08:16,708 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-28 03:08:16,709 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1086182374] [2024-11-28 03:08:16,709 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1086182374] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-28 03:08:16,709 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-28 03:08:16,709 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-28 03:08:16,709 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [862198655] [2024-11-28 03:08:16,709 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-28 03:08:16,710 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2024-11-28 03:08:16,710 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-28 03:08:16,711 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-11-28 03:08:16,711 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-28 03:08:16,711 INFO L87 Difference]: Start difference. First operand 4777 states and 7747 transitions. Second operand has 3 states, 3 states have (on average 36.333333333333336) internal successors, (109), 3 states have internal predecessors, (109), 2 states have call successors, (28), 2 states have call predecessors, (28), 1 states have return successors, (23), 2 states have call predecessors, (23), 2 states have call successors, (23) [2024-11-28 03:08:16,934 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-28 03:08:16,935 INFO L93 Difference]: Finished difference Result 11375 states and 18609 transitions. [2024-11-28 03:08:16,935 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-11-28 03:08:16,935 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 36.333333333333336) internal successors, (109), 3 states have internal predecessors, (109), 2 states have call successors, (28), 2 states have call predecessors, (28), 1 states have return successors, (23), 2 states have call predecessors, (23), 2 states have call successors, (23) Word has length 189 [2024-11-28 03:08:16,936 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-28 03:08:16,995 INFO L225 Difference]: With dead ends: 11375 [2024-11-28 03:08:16,996 INFO L226 Difference]: Without dead ends: 7241 [2024-11-28 03:08:17,011 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-28 03:08:17,011 INFO L435 NwaCegarLoop]: 846 mSDtfsCounter, 159 mSDsluCounter, 835 mSDsCounter, 0 mSdLazyCounter, 3 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 177 SdHoareTripleChecker+Valid, 1681 SdHoareTripleChecker+Invalid, 4 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 3 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-11-28 03:08:17,012 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [177 Valid, 1681 Invalid, 4 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 3 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-11-28 03:08:17,019 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 7241 states. [2024-11-28 03:08:17,446 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 7241 to 7231. [2024-11-28 03:08:17,457 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7231 states, 6101 states have (on average 1.5667923291263728) internal successors, (9559), 6122 states have internal predecessors, (9559), 1056 states have call successors, (1056), 70 states have call predecessors, (1056), 73 states have return successors, (1198), 1047 states have call predecessors, (1198), 1055 states have call successors, (1198) [2024-11-28 03:08:17,486 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7231 states to 7231 states and 11813 transitions. [2024-11-28 03:08:17,490 INFO L78 Accepts]: Start accepts. Automaton has 7231 states and 11813 transitions. Word has length 189 [2024-11-28 03:08:17,490 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-28 03:08:17,490 INFO L471 AbstractCegarLoop]: Abstraction has 7231 states and 11813 transitions. [2024-11-28 03:08:17,491 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 36.333333333333336) internal successors, (109), 3 states have internal predecessors, (109), 2 states have call successors, (28), 2 states have call predecessors, (28), 1 states have return successors, (23), 2 states have call predecessors, (23), 2 states have call successors, (23) [2024-11-28 03:08:17,491 INFO L276 IsEmpty]: Start isEmpty. Operand 7231 states and 11813 transitions. [2024-11-28 03:08:17,518 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 191 [2024-11-28 03:08:17,518 INFO L210 NwaCegarLoop]: Found error trace [2024-11-28 03:08:17,519 INFO L218 NwaCegarLoop]: trace histogram [8, 8, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-28 03:08:17,519 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable18 [2024-11-28 03:08:17,519 INFO L396 AbstractCegarLoop]: === Iteration 20 === Targeting outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION === [outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-28 03:08:17,519 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-28 03:08:17,520 INFO L85 PathProgramCache]: Analyzing trace with hash -984463199, now seen corresponding path program 1 times [2024-11-28 03:08:17,520 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-28 03:08:17,520 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1890941665] [2024-11-28 03:08:17,520 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-28 03:08:17,520 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-28 03:08:17,553 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-28 03:08:17,601 INFO L134 CoverageAnalysis]: Checked inductivity of 118 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 118 trivial. 0 not checked. [2024-11-28 03:08:17,601 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-28 03:08:17,602 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1890941665] [2024-11-28 03:08:17,602 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1890941665] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-28 03:08:17,602 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-28 03:08:17,602 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-28 03:08:17,602 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1648357351] [2024-11-28 03:08:17,602 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-28 03:08:17,602 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2024-11-28 03:08:17,603 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-28 03:08:17,603 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-11-28 03:08:17,603 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-28 03:08:17,603 INFO L87 Difference]: Start difference. First operand 7231 states and 11813 transitions. Second operand has 3 states, 3 states have (on average 36.666666666666664) internal successors, (110), 3 states have internal predecessors, (110), 2 states have call successors, (28), 2 states have call predecessors, (28), 1 states have return successors, (23), 2 states have call predecessors, (23), 2 states have call successors, (23) [2024-11-28 03:08:17,910 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-28 03:08:17,910 INFO L93 Difference]: Finished difference Result 17287 states and 28473 transitions. [2024-11-28 03:08:17,911 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-11-28 03:08:17,911 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 36.666666666666664) internal successors, (110), 3 states have internal predecessors, (110), 2 states have call successors, (28), 2 states have call predecessors, (28), 1 states have return successors, (23), 2 states have call predecessors, (23), 2 states have call successors, (23) Word has length 190 [2024-11-28 03:08:17,912 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-28 03:08:17,972 INFO L225 Difference]: With dead ends: 17287 [2024-11-28 03:08:17,972 INFO L226 Difference]: Without dead ends: 11203 [2024-11-28 03:08:17,993 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-28 03:08:17,996 INFO L435 NwaCegarLoop]: 846 mSDtfsCounter, 157 mSDsluCounter, 835 mSDsCounter, 0 mSdLazyCounter, 3 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 175 SdHoareTripleChecker+Valid, 1681 SdHoareTripleChecker+Invalid, 4 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 3 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-11-28 03:08:17,997 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [175 Valid, 1681 Invalid, 4 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 3 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-11-28 03:08:18,013 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 11203 states. [2024-11-28 03:08:18,544 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 11203 to 11193. [2024-11-28 03:08:18,561 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 11193 states, 9573 states have (on average 1.5736968557401023) internal successors, (15065), 9594 states have internal predecessors, (15065), 1546 states have call successors, (1546), 70 states have call predecessors, (1546), 73 states have return successors, (1771), 1537 states have call predecessors, (1771), 1545 states have call successors, (1771) [2024-11-28 03:08:18,603 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11193 states to 11193 states and 18382 transitions. [2024-11-28 03:08:18,609 INFO L78 Accepts]: Start accepts. Automaton has 11193 states and 18382 transitions. Word has length 190 [2024-11-28 03:08:18,609 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-28 03:08:18,609 INFO L471 AbstractCegarLoop]: Abstraction has 11193 states and 18382 transitions. [2024-11-28 03:08:18,609 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 36.666666666666664) internal successors, (110), 3 states have internal predecessors, (110), 2 states have call successors, (28), 2 states have call predecessors, (28), 1 states have return successors, (23), 2 states have call predecessors, (23), 2 states have call successors, (23) [2024-11-28 03:08:18,609 INFO L276 IsEmpty]: Start isEmpty. Operand 11193 states and 18382 transitions. [2024-11-28 03:08:18,647 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 194 [2024-11-28 03:08:18,648 INFO L210 NwaCegarLoop]: Found error trace [2024-11-28 03:08:18,648 INFO L218 NwaCegarLoop]: trace histogram [8, 8, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-28 03:08:18,648 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable19 [2024-11-28 03:08:18,648 INFO L396 AbstractCegarLoop]: === Iteration 21 === Targeting outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION === [outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-28 03:08:18,649 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-28 03:08:18,649 INFO L85 PathProgramCache]: Analyzing trace with hash -980528528, now seen corresponding path program 1 times [2024-11-28 03:08:18,649 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-28 03:08:18,649 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2081701684] [2024-11-28 03:08:18,649 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-28 03:08:18,649 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-28 03:08:18,684 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-28 03:08:18,899 INFO L134 CoverageAnalysis]: Checked inductivity of 121 backedges. 0 proven. 9 refuted. 0 times theorem prover too weak. 112 trivial. 0 not checked. [2024-11-28 03:08:18,900 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-28 03:08:18,900 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2081701684] [2024-11-28 03:08:18,900 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2081701684] provided 0 perfect and 1 imperfect interpolant sequences [2024-11-28 03:08:18,900 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1691382322] [2024-11-28 03:08:18,900 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-28 03:08:18,900 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-11-28 03:08:18,900 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d3b35404-e636-45a5-b527-45af5a94f135/bin/uautomizer-verify-aQ6SnzHsRB/z3 [2024-11-28 03:08:18,902 INFO L229 MonitoredProcess]: Starting monitored process 12 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d3b35404-e636-45a5-b527-45af5a94f135/bin/uautomizer-verify-aQ6SnzHsRB/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-11-28 03:08:18,906 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d3b35404-e636-45a5-b527-45af5a94f135/bin/uautomizer-verify-aQ6SnzHsRB/z3 -smt2 -in SMTLIB2_COMPLIANT=true (12)] Waiting until timeout for monitored process [2024-11-28 03:08:19,342 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-28 03:08:19,346 INFO L256 TraceCheckSpWp]: Trace formula consists of 1400 conjuncts, 3 conjuncts are in the unsatisfiable core [2024-11-28 03:08:19,351 INFO L279 TraceCheckSpWp]: Computing forward predicates... [2024-11-28 03:08:19,389 INFO L134 CoverageAnalysis]: Checked inductivity of 121 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 121 trivial. 0 not checked. [2024-11-28 03:08:19,389 INFO L308 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2024-11-28 03:08:19,389 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1691382322] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-28 03:08:19,389 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2024-11-28 03:08:19,389 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [6] total 7 [2024-11-28 03:08:19,389 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1277769490] [2024-11-28 03:08:19,389 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-28 03:08:19,390 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2024-11-28 03:08:19,390 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-28 03:08:19,391 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-11-28 03:08:19,391 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2024-11-28 03:08:19,391 INFO L87 Difference]: Start difference. First operand 11193 states and 18382 transitions. Second operand has 3 states, 3 states have (on average 37.0) internal successors, (111), 3 states have internal predecessors, (111), 2 states have call successors, (28), 2 states have call predecessors, (28), 2 states have return successors, (23), 2 states have call predecessors, (23), 2 states have call successors, (23) [2024-11-28 03:08:19,989 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-28 03:08:19,989 INFO L93 Difference]: Finished difference Result 27119 states and 44806 transitions. [2024-11-28 03:08:19,990 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-11-28 03:08:19,990 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 37.0) internal successors, (111), 3 states have internal predecessors, (111), 2 states have call successors, (28), 2 states have call predecessors, (28), 2 states have return successors, (23), 2 states have call predecessors, (23), 2 states have call successors, (23) Word has length 193 [2024-11-28 03:08:19,990 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-28 03:08:20,079 INFO L225 Difference]: With dead ends: 27119 [2024-11-28 03:08:20,079 INFO L226 Difference]: Without dead ends: 17843 [2024-11-28 03:08:20,109 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 198 GetRequests, 193 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2024-11-28 03:08:20,110 INFO L435 NwaCegarLoop]: 863 mSDtfsCounter, 155 mSDsluCounter, 832 mSDsCounter, 0 mSdLazyCounter, 3 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 173 SdHoareTripleChecker+Valid, 1695 SdHoareTripleChecker+Invalid, 4 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 3 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-11-28 03:08:20,110 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [173 Valid, 1695 Invalid, 4 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 3 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-11-28 03:08:20,129 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 17843 states. [2024-11-28 03:08:21,113 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 17843 to 17833. [2024-11-28 03:08:21,138 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 17833 states, 15227 states have (on average 1.5697773691469101) internal successors, (23903), 15248 states have internal predecessors, (23903), 2532 states have call successors, (2532), 70 states have call predecessors, (2532), 73 states have return successors, (2901), 2523 states have call predecessors, (2901), 2531 states have call successors, (2901) [2024-11-28 03:08:21,201 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 17833 states to 17833 states and 29336 transitions. [2024-11-28 03:08:21,209 INFO L78 Accepts]: Start accepts. Automaton has 17833 states and 29336 transitions. Word has length 193 [2024-11-28 03:08:21,209 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-28 03:08:21,209 INFO L471 AbstractCegarLoop]: Abstraction has 17833 states and 29336 transitions. [2024-11-28 03:08:21,209 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 37.0) internal successors, (111), 3 states have internal predecessors, (111), 2 states have call successors, (28), 2 states have call predecessors, (28), 2 states have return successors, (23), 2 states have call predecessors, (23), 2 states have call successors, (23) [2024-11-28 03:08:21,210 INFO L276 IsEmpty]: Start isEmpty. Operand 17833 states and 29336 transitions. [2024-11-28 03:08:21,242 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 195 [2024-11-28 03:08:21,242 INFO L210 NwaCegarLoop]: Found error trace [2024-11-28 03:08:21,242 INFO L218 NwaCegarLoop]: trace histogram [8, 8, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-28 03:08:21,255 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d3b35404-e636-45a5-b527-45af5a94f135/bin/uautomizer-verify-aQ6SnzHsRB/z3 -smt2 -in SMTLIB2_COMPLIANT=true (12)] Ended with exit code 0 [2024-11-28 03:08:21,443 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable20,12 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d3b35404-e636-45a5-b527-45af5a94f135/bin/uautomizer-verify-aQ6SnzHsRB/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-11-28 03:08:21,443 INFO L396 AbstractCegarLoop]: === Iteration 22 === Targeting outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION === [outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-28 03:08:21,444 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-28 03:08:21,444 INFO L85 PathProgramCache]: Analyzing trace with hash 1194612253, now seen corresponding path program 1 times [2024-11-28 03:08:21,444 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-28 03:08:21,444 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [84243624] [2024-11-28 03:08:21,444 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-28 03:08:21,444 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-28 03:08:21,475 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-28 03:08:21,718 INFO L134 CoverageAnalysis]: Checked inductivity of 121 backedges. 0 proven. 9 refuted. 0 times theorem prover too weak. 112 trivial. 0 not checked. [2024-11-28 03:08:21,718 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-28 03:08:21,718 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [84243624] [2024-11-28 03:08:21,718 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [84243624] provided 0 perfect and 1 imperfect interpolant sequences [2024-11-28 03:08:21,718 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1096837285] [2024-11-28 03:08:21,719 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-28 03:08:21,719 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-11-28 03:08:21,719 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d3b35404-e636-45a5-b527-45af5a94f135/bin/uautomizer-verify-aQ6SnzHsRB/z3 [2024-11-28 03:08:21,721 INFO L229 MonitoredProcess]: Starting monitored process 13 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d3b35404-e636-45a5-b527-45af5a94f135/bin/uautomizer-verify-aQ6SnzHsRB/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-11-28 03:08:21,725 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d3b35404-e636-45a5-b527-45af5a94f135/bin/uautomizer-verify-aQ6SnzHsRB/z3 -smt2 -in SMTLIB2_COMPLIANT=true (13)] Waiting until timeout for monitored process [2024-11-28 03:08:22,167 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-28 03:08:22,173 INFO L256 TraceCheckSpWp]: Trace formula consists of 1405 conjuncts, 3 conjuncts are in the unsatisfiable core [2024-11-28 03:08:22,177 INFO L279 TraceCheckSpWp]: Computing forward predicates... [2024-11-28 03:08:22,221 INFO L134 CoverageAnalysis]: Checked inductivity of 121 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 121 trivial. 0 not checked. [2024-11-28 03:08:22,221 INFO L308 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2024-11-28 03:08:22,221 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1096837285] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-28 03:08:22,221 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2024-11-28 03:08:22,222 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [6] total 7 [2024-11-28 03:08:22,222 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [883318524] [2024-11-28 03:08:22,222 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-28 03:08:22,222 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2024-11-28 03:08:22,222 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-28 03:08:22,223 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-11-28 03:08:22,223 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2024-11-28 03:08:22,223 INFO L87 Difference]: Start difference. First operand 17833 states and 29336 transitions. Second operand has 3 states, 3 states have (on average 37.333333333333336) internal successors, (112), 3 states have internal predecessors, (112), 2 states have call successors, (28), 2 states have call predecessors, (28), 2 states have return successors, (23), 2 states have call predecessors, (23), 2 states have call successors, (23) [2024-11-28 03:08:23,111 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-28 03:08:23,113 INFO L93 Difference]: Finished difference Result 44759 states and 74142 transitions. [2024-11-28 03:08:23,114 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-11-28 03:08:23,114 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 37.333333333333336) internal successors, (112), 3 states have internal predecessors, (112), 2 states have call successors, (28), 2 states have call predecessors, (28), 2 states have return successors, (23), 2 states have call predecessors, (23), 2 states have call successors, (23) Word has length 194 [2024-11-28 03:08:23,114 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-28 03:08:23,248 INFO L225 Difference]: With dead ends: 44759 [2024-11-28 03:08:23,248 INFO L226 Difference]: Without dead ends: 29803 [2024-11-28 03:08:23,282 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 199 GetRequests, 194 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2024-11-28 03:08:23,285 INFO L435 NwaCegarLoop]: 846 mSDtfsCounter, 153 mSDsluCounter, 838 mSDsCounter, 0 mSdLazyCounter, 3 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 171 SdHoareTripleChecker+Valid, 1684 SdHoareTripleChecker+Invalid, 4 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 3 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-11-28 03:08:23,285 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [171 Valid, 1684 Invalid, 4 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 3 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-11-28 03:08:23,311 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 29803 states. [2024-11-28 03:08:24,499 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 29803 to 29793. [2024-11-28 03:08:24,540 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 29793 states, 25543 states have (on average 1.574560544963395) internal successors, (40219), 25564 states have internal predecessors, (40219), 4176 states have call successors, (4176), 70 states have call predecessors, (4176), 73 states have return successors, (4734), 4167 states have call predecessors, (4734), 4175 states have call successors, (4734) [2024-11-28 03:08:24,644 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 29793 states to 29793 states and 49129 transitions. [2024-11-28 03:08:24,654 INFO L78 Accepts]: Start accepts. Automaton has 29793 states and 49129 transitions. Word has length 194 [2024-11-28 03:08:24,655 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-28 03:08:24,655 INFO L471 AbstractCegarLoop]: Abstraction has 29793 states and 49129 transitions. [2024-11-28 03:08:24,655 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 37.333333333333336) internal successors, (112), 3 states have internal predecessors, (112), 2 states have call successors, (28), 2 states have call predecessors, (28), 2 states have return successors, (23), 2 states have call predecessors, (23), 2 states have call successors, (23) [2024-11-28 03:08:24,655 INFO L276 IsEmpty]: Start isEmpty. Operand 29793 states and 49129 transitions. [2024-11-28 03:08:24,698 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 194 [2024-11-28 03:08:24,698 INFO L210 NwaCegarLoop]: Found error trace [2024-11-28 03:08:24,699 INFO L218 NwaCegarLoop]: trace histogram [8, 8, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-28 03:08:24,710 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d3b35404-e636-45a5-b527-45af5a94f135/bin/uautomizer-verify-aQ6SnzHsRB/z3 -smt2 -in SMTLIB2_COMPLIANT=true (13)] Forceful destruction successful, exit code 0 [2024-11-28 03:08:24,899 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 13 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d3b35404-e636-45a5-b527-45af5a94f135/bin/uautomizer-verify-aQ6SnzHsRB/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable21 [2024-11-28 03:08:24,900 INFO L396 AbstractCegarLoop]: === Iteration 23 === Targeting outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION === [outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-28 03:08:24,900 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-28 03:08:24,901 INFO L85 PathProgramCache]: Analyzing trace with hash 36543856, now seen corresponding path program 1 times [2024-11-28 03:08:24,901 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-28 03:08:24,901 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [127988460] [2024-11-28 03:08:24,901 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-28 03:08:24,902 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-28 03:08:24,938 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-28 03:08:24,988 INFO L134 CoverageAnalysis]: Checked inductivity of 118 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 118 trivial. 0 not checked. [2024-11-28 03:08:24,988 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-28 03:08:24,988 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [127988460] [2024-11-28 03:08:24,989 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [127988460] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-28 03:08:24,989 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-28 03:08:24,989 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-28 03:08:24,989 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [772053418] [2024-11-28 03:08:24,989 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-28 03:08:24,989 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2024-11-28 03:08:24,990 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-28 03:08:24,990 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-11-28 03:08:24,990 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-28 03:08:24,990 INFO L87 Difference]: Start difference. First operand 29793 states and 49129 transitions. Second operand has 3 states, 3 states have (on average 37.666666666666664) internal successors, (113), 3 states have internal predecessors, (113), 2 states have call successors, (28), 2 states have call predecessors, (28), 1 states have return successors, (23), 2 states have call predecessors, (23), 2 states have call successors, (23) [2024-11-28 03:08:27,019 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-28 03:08:27,019 INFO L93 Difference]: Finished difference Result 71901 states and 118048 transitions. [2024-11-28 03:08:27,020 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-11-28 03:08:27,020 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 37.666666666666664) internal successors, (113), 3 states have internal predecessors, (113), 2 states have call successors, (28), 2 states have call predecessors, (28), 1 states have return successors, (23), 2 states have call predecessors, (23), 2 states have call successors, (23) Word has length 193 [2024-11-28 03:08:27,021 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-28 03:08:27,251 INFO L225 Difference]: With dead ends: 71901 [2024-11-28 03:08:27,251 INFO L226 Difference]: Without dead ends: 47209 [2024-11-28 03:08:27,320 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-28 03:08:27,321 INFO L435 NwaCegarLoop]: 866 mSDtfsCounter, 151 mSDsluCounter, 811 mSDsCounter, 0 mSdLazyCounter, 3 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 169 SdHoareTripleChecker+Valid, 1677 SdHoareTripleChecker+Invalid, 4 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 3 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-11-28 03:08:27,321 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [169 Valid, 1677 Invalid, 4 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 3 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-11-28 03:08:27,355 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 47209 states. [2024-11-28 03:08:29,346 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 47209 to 47199. [2024-11-28 03:08:29,393 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 47199 states, 40543 states have (on average 1.5470734775423625) internal successors, (62723), 40564 states have internal predecessors, (62723), 6582 states have call successors, (6582), 70 states have call predecessors, (6582), 73 states have return successors, (7565), 6573 states have call predecessors, (7565), 6581 states have call successors, (7565) [2024-11-28 03:08:29,530 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 47199 states to 47199 states and 76870 transitions. [2024-11-28 03:08:29,547 INFO L78 Accepts]: Start accepts. Automaton has 47199 states and 76870 transitions. Word has length 193 [2024-11-28 03:08:29,548 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-28 03:08:29,548 INFO L471 AbstractCegarLoop]: Abstraction has 47199 states and 76870 transitions. [2024-11-28 03:08:29,548 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 37.666666666666664) internal successors, (113), 3 states have internal predecessors, (113), 2 states have call successors, (28), 2 states have call predecessors, (28), 1 states have return successors, (23), 2 states have call predecessors, (23), 2 states have call successors, (23) [2024-11-28 03:08:29,548 INFO L276 IsEmpty]: Start isEmpty. Operand 47199 states and 76870 transitions. [2024-11-28 03:08:29,606 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 195 [2024-11-28 03:08:29,606 INFO L210 NwaCegarLoop]: Found error trace [2024-11-28 03:08:29,606 INFO L218 NwaCegarLoop]: trace histogram [8, 8, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-28 03:08:29,606 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable22 [2024-11-28 03:08:29,606 INFO L396 AbstractCegarLoop]: === Iteration 24 === Targeting outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION === [outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-28 03:08:29,607 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-28 03:08:29,607 INFO L85 PathProgramCache]: Analyzing trace with hash -1465387474, now seen corresponding path program 1 times [2024-11-28 03:08:29,607 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-28 03:08:29,607 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [399057942] [2024-11-28 03:08:29,607 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-28 03:08:29,607 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-28 03:08:29,644 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-28 03:08:29,696 INFO L134 CoverageAnalysis]: Checked inductivity of 118 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 118 trivial. 0 not checked. [2024-11-28 03:08:29,696 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-28 03:08:29,696 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [399057942] [2024-11-28 03:08:29,696 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [399057942] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-28 03:08:29,696 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-28 03:08:29,697 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-28 03:08:29,697 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [483280693] [2024-11-28 03:08:29,697 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-28 03:08:29,697 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2024-11-28 03:08:29,697 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-28 03:08:29,698 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-11-28 03:08:29,698 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-28 03:08:29,698 INFO L87 Difference]: Start difference. First operand 47199 states and 76870 transitions. Second operand has 3 states, 3 states have (on average 38.0) internal successors, (114), 3 states have internal predecessors, (114), 2 states have call successors, (28), 2 states have call predecessors, (28), 1 states have return successors, (23), 2 states have call predecessors, (23), 2 states have call successors, (23) [2024-11-28 03:08:32,672 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-28 03:08:32,672 INFO L93 Difference]: Finished difference Result 124727 states and 203867 transitions. [2024-11-28 03:08:32,673 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-11-28 03:08:32,673 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 38.0) internal successors, (114), 3 states have internal predecessors, (114), 2 states have call successors, (28), 2 states have call predecessors, (28), 1 states have return successors, (23), 2 states have call predecessors, (23), 2 states have call successors, (23) Word has length 194 [2024-11-28 03:08:32,673 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-28 03:08:33,416 INFO L225 Difference]: With dead ends: 124727 [2024-11-28 03:08:33,417 INFO L226 Difference]: Without dead ends: 84195 [2024-11-28 03:08:33,499 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-28 03:08:33,500 INFO L435 NwaCegarLoop]: 846 mSDtfsCounter, 149 mSDsluCounter, 839 mSDsCounter, 0 mSdLazyCounter, 3 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 167 SdHoareTripleChecker+Valid, 1685 SdHoareTripleChecker+Invalid, 4 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 3 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-11-28 03:08:33,500 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [167 Valid, 1685 Invalid, 4 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 3 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-11-28 03:08:33,548 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 84195 states. [2024-11-28 03:08:36,827 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 84195 to 84185. [2024-11-28 03:08:36,907 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 84185 states, 72629 states have (on average 1.546448388384805) internal successors, (112317), 72650 states have internal predecessors, (112317), 11482 states have call successors, (11482), 70 states have call predecessors, (11482), 73 states have return successors, (13279), 11473 states have call predecessors, (13279), 11481 states have call successors, (13279) [2024-11-28 03:08:37,611 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 84185 states to 84185 states and 137078 transitions. [2024-11-28 03:08:37,665 INFO L78 Accepts]: Start accepts. Automaton has 84185 states and 137078 transitions. Word has length 194 [2024-11-28 03:08:37,666 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-28 03:08:37,666 INFO L471 AbstractCegarLoop]: Abstraction has 84185 states and 137078 transitions. [2024-11-28 03:08:37,666 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 38.0) internal successors, (114), 3 states have internal predecessors, (114), 2 states have call successors, (28), 2 states have call predecessors, (28), 1 states have return successors, (23), 2 states have call predecessors, (23), 2 states have call successors, (23) [2024-11-28 03:08:37,666 INFO L276 IsEmpty]: Start isEmpty. Operand 84185 states and 137078 transitions. [2024-11-28 03:08:37,747 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 196 [2024-11-28 03:08:37,747 INFO L210 NwaCegarLoop]: Found error trace [2024-11-28 03:08:37,747 INFO L218 NwaCegarLoop]: trace histogram [8, 8, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-28 03:08:37,747 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable23 [2024-11-28 03:08:37,748 INFO L396 AbstractCegarLoop]: === Iteration 25 === Targeting outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION === [outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-28 03:08:37,748 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-28 03:08:37,748 INFO L85 PathProgramCache]: Analyzing trace with hash 1972556573, now seen corresponding path program 1 times [2024-11-28 03:08:37,748 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-28 03:08:37,748 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [48061605] [2024-11-28 03:08:37,748 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-28 03:08:37,749 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-28 03:08:37,798 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-28 03:08:37,846 INFO L134 CoverageAnalysis]: Checked inductivity of 118 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 118 trivial. 0 not checked. [2024-11-28 03:08:37,846 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-28 03:08:37,846 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [48061605] [2024-11-28 03:08:37,848 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [48061605] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-28 03:08:37,848 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-28 03:08:37,848 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-28 03:08:37,848 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [283357685] [2024-11-28 03:08:37,848 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-28 03:08:37,849 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2024-11-28 03:08:37,849 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-28 03:08:37,849 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-11-28 03:08:37,849 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-28 03:08:37,850 INFO L87 Difference]: Start difference. First operand 84185 states and 137078 transitions. Second operand has 3 states, 3 states have (on average 38.333333333333336) internal successors, (115), 3 states have internal predecessors, (115), 2 states have call successors, (28), 2 states have call predecessors, (28), 1 states have return successors, (23), 2 states have call predecessors, (23), 2 states have call successors, (23) [2024-11-28 03:08:41,919 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-28 03:08:41,919 INFO L93 Difference]: Finished difference Result 228381 states and 373261 transitions. [2024-11-28 03:08:41,919 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-11-28 03:08:41,920 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 38.333333333333336) internal successors, (115), 3 states have internal predecessors, (115), 2 states have call successors, (28), 2 states have call predecessors, (28), 1 states have return successors, (23), 2 states have call predecessors, (23), 2 states have call successors, (23) Word has length 195 [2024-11-28 03:08:41,920 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-28 03:08:42,689 INFO L225 Difference]: With dead ends: 228381 [2024-11-28 03:08:42,689 INFO L226 Difference]: Without dead ends: 153141 [2024-11-28 03:08:42,832 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-28 03:08:42,833 INFO L435 NwaCegarLoop]: 851 mSDtfsCounter, 147 mSDsluCounter, 838 mSDsCounter, 0 mSdLazyCounter, 3 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 165 SdHoareTripleChecker+Valid, 1689 SdHoareTripleChecker+Invalid, 4 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 3 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-11-28 03:08:42,834 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [165 Valid, 1689 Invalid, 4 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 3 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-11-28 03:08:42,926 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 153141 states. [2024-11-28 03:08:48,002 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 153141 to 153131. [2024-11-28 03:08:48,099 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 153131 states, 132549 states have (on average 1.5497891345841914) internal successors, (205423), 132570 states have internal predecessors, (205423), 20508 states have call successors, (20508), 70 states have call predecessors, (20508), 73 states have return successors, (23369), 20499 states have call predecessors, (23369), 20507 states have call successors, (23369) [2024-11-28 03:08:48,734 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 153131 states to 153131 states and 249300 transitions. [2024-11-28 03:08:48,788 INFO L78 Accepts]: Start accepts. Automaton has 153131 states and 249300 transitions. Word has length 195 [2024-11-28 03:08:48,789 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-28 03:08:48,789 INFO L471 AbstractCegarLoop]: Abstraction has 153131 states and 249300 transitions. [2024-11-28 03:08:48,789 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 38.333333333333336) internal successors, (115), 3 states have internal predecessors, (115), 2 states have call successors, (28), 2 states have call predecessors, (28), 1 states have return successors, (23), 2 states have call predecessors, (23), 2 states have call successors, (23) [2024-11-28 03:08:48,789 INFO L276 IsEmpty]: Start isEmpty. Operand 153131 states and 249300 transitions. [2024-11-28 03:08:48,866 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 197 [2024-11-28 03:08:48,866 INFO L210 NwaCegarLoop]: Found error trace [2024-11-28 03:08:48,866 INFO L218 NwaCegarLoop]: trace histogram [8, 8, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-28 03:08:48,866 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable24 [2024-11-28 03:08:48,867 INFO L396 AbstractCegarLoop]: === Iteration 26 === Targeting outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION === [outgoing__before__EncryptErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-28 03:08:48,867 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-28 03:08:48,867 INFO L85 PathProgramCache]: Analyzing trace with hash -1860792472, now seen corresponding path program 1 times [2024-11-28 03:08:48,867 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-28 03:08:48,867 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [447310685] [2024-11-28 03:08:48,868 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-28 03:08:48,869 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-28 03:08:48,905 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-28 03:08:48,955 INFO L134 CoverageAnalysis]: Checked inductivity of 118 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 118 trivial. 0 not checked. [2024-11-28 03:08:48,955 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-28 03:08:48,955 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [447310685] [2024-11-28 03:08:48,955 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [447310685] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-28 03:08:48,956 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-28 03:08:48,956 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-28 03:08:48,956 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2028684174] [2024-11-28 03:08:48,956 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-28 03:08:48,956 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2024-11-28 03:08:48,956 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-28 03:08:48,957 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-11-28 03:08:48,957 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-28 03:08:48,958 INFO L87 Difference]: Start difference. First operand 153131 states and 249300 transitions. Second operand has 3 states, 3 states have (on average 38.666666666666664) internal successors, (116), 3 states have internal predecessors, (116), 2 states have call successors, (28), 2 states have call predecessors, (28), 1 states have return successors, (23), 2 states have call predecessors, (23), 2 states have call successors, (23)