java -ea -Xmx8000000000 -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc ../../../trunk/examples/toolchains/AutomizerC.xml -s ../../../trunk/examples/settings/default/automizer/svcomp-Reach-32bit-Automizer_Bitvector-Const.epf -i ../../../trunk/examples/svcomp/forester-heap/sll-01_false-unreach-call_false-valid-deref.i -------------------------------------------------------------------------------- This is Ultimate 0.1.23-370d6ab [2018-11-14 18:15:00,976 INFO L170 SettingsManager]: Resetting all preferences to default values... [2018-11-14 18:15:00,978 INFO L174 SettingsManager]: Resetting UltimateCore preferences to default values [2018-11-14 18:15:00,990 INFO L177 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2018-11-14 18:15:00,991 INFO L174 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2018-11-14 18:15:00,992 INFO L174 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2018-11-14 18:15:00,993 INFO L174 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2018-11-14 18:15:00,996 INFO L174 SettingsManager]: Resetting LassoRanker preferences to default values [2018-11-14 18:15:00,999 INFO L174 SettingsManager]: Resetting Reaching Definitions preferences to default values [2018-11-14 18:15:01,000 INFO L174 SettingsManager]: Resetting SyntaxChecker preferences to default values [2018-11-14 18:15:01,001 INFO L177 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2018-11-14 18:15:01,002 INFO L174 SettingsManager]: Resetting LTL2Aut preferences to default values [2018-11-14 18:15:01,003 INFO L174 SettingsManager]: Resetting PEA to Boogie preferences to default values [2018-11-14 18:15:01,006 INFO L174 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2018-11-14 18:15:01,008 INFO L174 SettingsManager]: Resetting ChcToBoogie preferences to default values [2018-11-14 18:15:01,009 INFO L174 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2018-11-14 18:15:01,010 INFO L174 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2018-11-14 18:15:01,019 INFO L174 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2018-11-14 18:15:01,021 INFO L174 SettingsManager]: Resetting CodeCheck preferences to default values [2018-11-14 18:15:01,025 INFO L174 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2018-11-14 18:15:01,026 INFO L174 SettingsManager]: Resetting RCFGBuilder preferences to default values [2018-11-14 18:15:01,031 INFO L174 SettingsManager]: Resetting TraceAbstraction preferences to default values [2018-11-14 18:15:01,037 INFO L177 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2018-11-14 18:15:01,037 INFO L177 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2018-11-14 18:15:01,038 INFO L174 SettingsManager]: Resetting TreeAutomizer preferences to default values [2018-11-14 18:15:01,039 INFO L174 SettingsManager]: Resetting IcfgTransformer preferences to default values [2018-11-14 18:15:01,039 INFO L174 SettingsManager]: Resetting Boogie Printer preferences to default values [2018-11-14 18:15:01,041 INFO L174 SettingsManager]: Resetting ReqPrinter preferences to default values [2018-11-14 18:15:01,042 INFO L174 SettingsManager]: Resetting Witness Printer preferences to default values [2018-11-14 18:15:01,043 INFO L177 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2018-11-14 18:15:01,043 INFO L174 SettingsManager]: Resetting CDTParser preferences to default values [2018-11-14 18:15:01,044 INFO L177 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2018-11-14 18:15:01,044 INFO L177 SettingsManager]: ReqParser provides no preferences, ignoring... [2018-11-14 18:15:01,044 INFO L174 SettingsManager]: Resetting SmtParser preferences to default values [2018-11-14 18:15:01,046 INFO L174 SettingsManager]: Resetting Witness Parser preferences to default values [2018-11-14 18:15:01,048 INFO L181 SettingsManager]: Finished resetting all preferences to default values... [2018-11-14 18:15:01,048 INFO L98 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/settings/default/automizer/svcomp-Reach-32bit-Automizer_Bitvector-Const.epf [2018-11-14 18:15:01,073 INFO L110 SettingsManager]: Loading preferences was successful [2018-11-14 18:15:01,074 INFO L112 SettingsManager]: Preferences different from defaults after loading the file: [2018-11-14 18:15:01,074 INFO L131 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2018-11-14 18:15:01,075 INFO L133 SettingsManager]: * to procedures, called more than once=true [2018-11-14 18:15:01,075 INFO L131 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2018-11-14 18:15:01,075 INFO L133 SettingsManager]: * Create parallel compositions if possible=false [2018-11-14 18:15:01,076 INFO L133 SettingsManager]: * Use SBE=true [2018-11-14 18:15:01,076 INFO L131 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2018-11-14 18:15:01,076 INFO L133 SettingsManager]: * sizeof long=4 [2018-11-14 18:15:01,076 INFO L133 SettingsManager]: * sizeof POINTER=4 [2018-11-14 18:15:01,077 INFO L133 SettingsManager]: * Check division by zero=IGNORE [2018-11-14 18:15:01,077 INFO L133 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2018-11-14 18:15:01,077 INFO L133 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2018-11-14 18:15:01,077 INFO L133 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2018-11-14 18:15:01,077 INFO L133 SettingsManager]: * Use bitvectors instead of ints=true [2018-11-14 18:15:01,077 INFO L133 SettingsManager]: * Memory model=HoenickeLindenmann_4ByteResolution [2018-11-14 18:15:01,078 INFO L133 SettingsManager]: * sizeof long double=12 [2018-11-14 18:15:01,078 INFO L133 SettingsManager]: * Check if freed pointer was valid=false [2018-11-14 18:15:01,078 INFO L133 SettingsManager]: * Use constant arrays=true [2018-11-14 18:15:01,078 INFO L133 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2018-11-14 18:15:01,078 INFO L131 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2018-11-14 18:15:01,079 INFO L133 SettingsManager]: * Size of a code block=SequenceOfStatements [2018-11-14 18:15:01,079 INFO L133 SettingsManager]: * To the following directory=./dump/ [2018-11-14 18:15:01,079 INFO L133 SettingsManager]: * SMT solver=External_DefaultMode [2018-11-14 18:15:01,079 INFO L133 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2018-11-14 18:15:01,079 INFO L131 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2018-11-14 18:15:01,080 INFO L133 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2018-11-14 18:15:01,080 INFO L133 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2018-11-14 18:15:01,080 INFO L133 SettingsManager]: * Trace refinement strategy=WOLF [2018-11-14 18:15:01,080 INFO L133 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2018-11-14 18:15:01,081 INFO L133 SettingsManager]: * Command for external solver=cvc4nyu --tear-down-incremental --rewrite-divk --print-success --lang smt [2018-11-14 18:15:01,081 INFO L133 SettingsManager]: * Logic for external solver=AUFBV [2018-11-14 18:15:01,081 INFO L133 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2018-11-14 18:15:01,138 INFO L81 nceAwareModelManager]: Repository-Root is: /tmp [2018-11-14 18:15:01,157 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2018-11-14 18:15:01,160 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2018-11-14 18:15:01,161 INFO L271 PluginConnector]: Initializing CDTParser... [2018-11-14 18:15:01,162 INFO L276 PluginConnector]: CDTParser initialized [2018-11-14 18:15:01,162 INFO L418 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/svcomp/forester-heap/sll-01_false-unreach-call_false-valid-deref.i [2018-11-14 18:15:01,225 INFO L218 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/8aaab5752/5bcf13dc3712453e9711cbe67c3468c9/FLAGddfda2c73 [2018-11-14 18:15:01,772 INFO L298 CDTParser]: Found 1 translation units. [2018-11-14 18:15:01,773 INFO L158 CDTParser]: Scanning /storage/repos/ultimate/trunk/examples/svcomp/forester-heap/sll-01_false-unreach-call_false-valid-deref.i [2018-11-14 18:15:01,788 INFO L346 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/8aaab5752/5bcf13dc3712453e9711cbe67c3468c9/FLAGddfda2c73 [2018-11-14 18:15:01,802 INFO L354 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/8aaab5752/5bcf13dc3712453e9711cbe67c3468c9 [2018-11-14 18:15:01,813 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2018-11-14 18:15:01,814 INFO L131 ToolchainWalker]: Walking toolchain with 4 elements. [2018-11-14 18:15:01,815 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2018-11-14 18:15:01,816 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2018-11-14 18:15:01,819 INFO L276 PluginConnector]: CACSL2BoogieTranslator initialized [2018-11-14 18:15:01,821 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 14.11 06:15:01" (1/1) ... [2018-11-14 18:15:01,824 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@2b2414e9 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.11 06:15:01, skipping insertion in model container [2018-11-14 18:15:01,824 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 14.11 06:15:01" (1/1) ... [2018-11-14 18:15:01,834 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2018-11-14 18:15:01,885 INFO L176 MainTranslator]: Built tables and reachable declarations [2018-11-14 18:15:02,346 INFO L201 PostProcessor]: Analyzing one entry point: main [2018-11-14 18:15:02,362 INFO L191 MainTranslator]: Completed pre-run [2018-11-14 18:15:02,468 INFO L201 PostProcessor]: Analyzing one entry point: main [2018-11-14 18:15:02,621 INFO L195 MainTranslator]: Completed translation [2018-11-14 18:15:02,621 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.11 06:15:02 WrapperNode [2018-11-14 18:15:02,622 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2018-11-14 18:15:02,623 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2018-11-14 18:15:02,623 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2018-11-14 18:15:02,623 INFO L276 PluginConnector]: Boogie Preprocessor initialized [2018-11-14 18:15:02,639 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.11 06:15:02" (1/1) ... [2018-11-14 18:15:02,639 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.11 06:15:02" (1/1) ... [2018-11-14 18:15:02,665 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.11 06:15:02" (1/1) ... [2018-11-14 18:15:02,665 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.11 06:15:02" (1/1) ... [2018-11-14 18:15:02,718 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.11 06:15:02" (1/1) ... [2018-11-14 18:15:02,740 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.11 06:15:02" (1/1) ... [2018-11-14 18:15:02,745 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.11 06:15:02" (1/1) ... [2018-11-14 18:15:02,754 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2018-11-14 18:15:02,755 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2018-11-14 18:15:02,755 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2018-11-14 18:15:02,755 INFO L276 PluginConnector]: RCFGBuilder initialized [2018-11-14 18:15:02,756 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.11 06:15:02" (1/1) ... No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 Starting monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2018-11-14 18:15:02,828 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.init [2018-11-14 18:15:02,828 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2018-11-14 18:15:02,828 INFO L138 BoogieDeclarations]: Found implementation of procedure main [2018-11-14 18:15:02,828 INFO L130 BoogieDeclarations]: Found specification of procedure __ctype_get_mb_cur_max [2018-11-14 18:15:02,829 INFO L130 BoogieDeclarations]: Found specification of procedure atof [2018-11-14 18:15:02,829 INFO L130 BoogieDeclarations]: Found specification of procedure atoi [2018-11-14 18:15:02,829 INFO L130 BoogieDeclarations]: Found specification of procedure atol [2018-11-14 18:15:02,829 INFO L130 BoogieDeclarations]: Found specification of procedure atoll [2018-11-14 18:15:02,829 INFO L130 BoogieDeclarations]: Found specification of procedure strtod [2018-11-14 18:15:02,829 INFO L130 BoogieDeclarations]: Found specification of procedure strtof [2018-11-14 18:15:02,830 INFO L130 BoogieDeclarations]: Found specification of procedure strtold [2018-11-14 18:15:02,830 INFO L130 BoogieDeclarations]: Found specification of procedure strtol [2018-11-14 18:15:02,830 INFO L130 BoogieDeclarations]: Found specification of procedure strtoul [2018-11-14 18:15:02,830 INFO L130 BoogieDeclarations]: Found specification of procedure strtoq [2018-11-14 18:15:02,830 INFO L130 BoogieDeclarations]: Found specification of procedure strtouq [2018-11-14 18:15:02,830 INFO L130 BoogieDeclarations]: Found specification of procedure strtoll [2018-11-14 18:15:02,830 INFO L130 BoogieDeclarations]: Found specification of procedure strtoull [2018-11-14 18:15:02,831 INFO L130 BoogieDeclarations]: Found specification of procedure l64a [2018-11-14 18:15:02,831 INFO L130 BoogieDeclarations]: Found specification of procedure a64l [2018-11-14 18:15:02,831 INFO L130 BoogieDeclarations]: Found specification of procedure select [2018-11-14 18:15:02,831 INFO L130 BoogieDeclarations]: Found specification of procedure pselect [2018-11-14 18:15:02,831 INFO L130 BoogieDeclarations]: Found specification of procedure gnu_dev_major [2018-11-14 18:15:02,831 INFO L130 BoogieDeclarations]: Found specification of procedure gnu_dev_minor [2018-11-14 18:15:02,831 INFO L130 BoogieDeclarations]: Found specification of procedure gnu_dev_makedev [2018-11-14 18:15:02,831 INFO L130 BoogieDeclarations]: Found specification of procedure random [2018-11-14 18:15:02,831 INFO L130 BoogieDeclarations]: Found specification of procedure srandom [2018-11-14 18:15:02,832 INFO L130 BoogieDeclarations]: Found specification of procedure initstate [2018-11-14 18:15:02,832 INFO L130 BoogieDeclarations]: Found specification of procedure setstate [2018-11-14 18:15:02,832 INFO L130 BoogieDeclarations]: Found specification of procedure random_r [2018-11-14 18:15:02,832 INFO L130 BoogieDeclarations]: Found specification of procedure srandom_r [2018-11-14 18:15:02,832 INFO L130 BoogieDeclarations]: Found specification of procedure initstate_r [2018-11-14 18:15:02,832 INFO L130 BoogieDeclarations]: Found specification of procedure setstate_r [2018-11-14 18:15:02,833 INFO L130 BoogieDeclarations]: Found specification of procedure rand [2018-11-14 18:15:02,833 INFO L130 BoogieDeclarations]: Found specification of procedure srand [2018-11-14 18:15:02,833 INFO L130 BoogieDeclarations]: Found specification of procedure rand_r [2018-11-14 18:15:02,833 INFO L130 BoogieDeclarations]: Found specification of procedure drand48 [2018-11-14 18:15:02,833 INFO L130 BoogieDeclarations]: Found specification of procedure erand48 [2018-11-14 18:15:02,833 INFO L130 BoogieDeclarations]: Found specification of procedure lrand48 [2018-11-14 18:15:02,833 INFO L130 BoogieDeclarations]: Found specification of procedure nrand48 [2018-11-14 18:15:02,833 INFO L130 BoogieDeclarations]: Found specification of procedure mrand48 [2018-11-14 18:15:02,834 INFO L130 BoogieDeclarations]: Found specification of procedure jrand48 [2018-11-14 18:15:02,834 INFO L130 BoogieDeclarations]: Found specification of procedure srand48 [2018-11-14 18:15:02,834 INFO L130 BoogieDeclarations]: Found specification of procedure seed48 [2018-11-14 18:15:02,834 INFO L130 BoogieDeclarations]: Found specification of procedure lcong48 [2018-11-14 18:15:02,834 INFO L130 BoogieDeclarations]: Found specification of procedure drand48_r [2018-11-14 18:15:02,834 INFO L130 BoogieDeclarations]: Found specification of procedure erand48_r [2018-11-14 18:15:02,834 INFO L130 BoogieDeclarations]: Found specification of procedure lrand48_r [2018-11-14 18:15:02,834 INFO L130 BoogieDeclarations]: Found specification of procedure nrand48_r [2018-11-14 18:15:02,834 INFO L130 BoogieDeclarations]: Found specification of procedure mrand48_r [2018-11-14 18:15:02,835 INFO L130 BoogieDeclarations]: Found specification of procedure jrand48_r [2018-11-14 18:15:02,835 INFO L130 BoogieDeclarations]: Found specification of procedure srand48_r [2018-11-14 18:15:02,835 INFO L130 BoogieDeclarations]: Found specification of procedure seed48_r [2018-11-14 18:15:02,835 INFO L130 BoogieDeclarations]: Found specification of procedure lcong48_r [2018-11-14 18:15:02,835 INFO L130 BoogieDeclarations]: Found specification of procedure malloc [2018-11-14 18:15:02,835 INFO L130 BoogieDeclarations]: Found specification of procedure calloc [2018-11-14 18:15:02,836 INFO L130 BoogieDeclarations]: Found specification of procedure realloc [2018-11-14 18:15:02,836 INFO L130 BoogieDeclarations]: Found specification of procedure free [2018-11-14 18:15:02,836 INFO L130 BoogieDeclarations]: Found specification of procedure cfree [2018-11-14 18:15:02,836 INFO L130 BoogieDeclarations]: Found specification of procedure alloca [2018-11-14 18:15:02,836 INFO L130 BoogieDeclarations]: Found specification of procedure valloc [2018-11-14 18:15:02,836 INFO L130 BoogieDeclarations]: Found specification of procedure posix_memalign [2018-11-14 18:15:02,836 INFO L130 BoogieDeclarations]: Found specification of procedure aligned_alloc [2018-11-14 18:15:02,837 INFO L130 BoogieDeclarations]: Found specification of procedure abort [2018-11-14 18:15:02,837 INFO L130 BoogieDeclarations]: Found specification of procedure atexit [2018-11-14 18:15:02,837 INFO L130 BoogieDeclarations]: Found specification of procedure at_quick_exit [2018-11-14 18:15:02,837 INFO L130 BoogieDeclarations]: Found specification of procedure on_exit [2018-11-14 18:15:02,837 INFO L130 BoogieDeclarations]: Found specification of procedure exit [2018-11-14 18:15:02,837 INFO L130 BoogieDeclarations]: Found specification of procedure quick_exit [2018-11-14 18:15:02,838 INFO L130 BoogieDeclarations]: Found specification of procedure _Exit [2018-11-14 18:15:02,838 INFO L130 BoogieDeclarations]: Found specification of procedure getenv [2018-11-14 18:15:02,838 INFO L130 BoogieDeclarations]: Found specification of procedure putenv [2018-11-14 18:15:02,838 INFO L130 BoogieDeclarations]: Found specification of procedure setenv [2018-11-14 18:15:02,838 INFO L130 BoogieDeclarations]: Found specification of procedure unsetenv [2018-11-14 18:15:02,839 INFO L130 BoogieDeclarations]: Found specification of procedure clearenv [2018-11-14 18:15:02,839 INFO L130 BoogieDeclarations]: Found specification of procedure mktemp [2018-11-14 18:15:02,839 INFO L130 BoogieDeclarations]: Found specification of procedure mkstemp [2018-11-14 18:15:02,839 INFO L130 BoogieDeclarations]: Found specification of procedure mkstemps [2018-11-14 18:15:02,839 INFO L130 BoogieDeclarations]: Found specification of procedure mkdtemp [2018-11-14 18:15:02,840 INFO L130 BoogieDeclarations]: Found specification of procedure system [2018-11-14 18:15:02,840 INFO L130 BoogieDeclarations]: Found specification of procedure realpath [2018-11-14 18:15:02,840 INFO L130 BoogieDeclarations]: Found specification of procedure bsearch [2018-11-14 18:15:02,840 INFO L130 BoogieDeclarations]: Found specification of procedure qsort [2018-11-14 18:15:02,840 INFO L130 BoogieDeclarations]: Found specification of procedure abs [2018-11-14 18:15:02,840 INFO L130 BoogieDeclarations]: Found specification of procedure labs [2018-11-14 18:15:02,841 INFO L130 BoogieDeclarations]: Found specification of procedure llabs [2018-11-14 18:15:02,841 INFO L130 BoogieDeclarations]: Found specification of procedure div [2018-11-14 18:15:02,841 INFO L130 BoogieDeclarations]: Found specification of procedure ldiv [2018-11-14 18:15:02,841 INFO L130 BoogieDeclarations]: Found specification of procedure lldiv [2018-11-14 18:15:02,841 INFO L130 BoogieDeclarations]: Found specification of procedure ecvt [2018-11-14 18:15:02,842 INFO L130 BoogieDeclarations]: Found specification of procedure fcvt [2018-11-14 18:15:02,842 INFO L130 BoogieDeclarations]: Found specification of procedure gcvt [2018-11-14 18:15:02,842 INFO L130 BoogieDeclarations]: Found specification of procedure qecvt [2018-11-14 18:15:02,842 INFO L130 BoogieDeclarations]: Found specification of procedure qfcvt [2018-11-14 18:15:02,842 INFO L130 BoogieDeclarations]: Found specification of procedure qgcvt [2018-11-14 18:15:02,842 INFO L130 BoogieDeclarations]: Found specification of procedure ecvt_r [2018-11-14 18:15:02,843 INFO L130 BoogieDeclarations]: Found specification of procedure fcvt_r [2018-11-14 18:15:02,843 INFO L130 BoogieDeclarations]: Found specification of procedure qecvt_r [2018-11-14 18:15:02,843 INFO L130 BoogieDeclarations]: Found specification of procedure qfcvt_r [2018-11-14 18:15:02,843 INFO L130 BoogieDeclarations]: Found specification of procedure mblen [2018-11-14 18:15:02,843 INFO L130 BoogieDeclarations]: Found specification of procedure mbtowc [2018-11-14 18:15:02,843 INFO L130 BoogieDeclarations]: Found specification of procedure wctomb [2018-11-14 18:15:02,844 INFO L130 BoogieDeclarations]: Found specification of procedure mbstowcs [2018-11-14 18:15:02,844 INFO L130 BoogieDeclarations]: Found specification of procedure wcstombs [2018-11-14 18:15:02,844 INFO L130 BoogieDeclarations]: Found specification of procedure rpmatch [2018-11-14 18:15:02,844 INFO L130 BoogieDeclarations]: Found specification of procedure getsubopt [2018-11-14 18:15:02,844 INFO L130 BoogieDeclarations]: Found specification of procedure getloadavg [2018-11-14 18:15:02,844 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_int [2018-11-14 18:15:02,845 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_error [2018-11-14 18:15:02,845 INFO L130 BoogieDeclarations]: Found specification of procedure main [2018-11-14 18:15:02,845 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.alloc [2018-11-14 18:15:02,845 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2018-11-14 18:15:02,845 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2018-11-14 18:15:02,845 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2018-11-14 18:15:02,846 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.init [2018-11-14 18:15:02,846 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2018-11-14 18:15:04,871 INFO L278 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2018-11-14 18:15:04,872 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 14.11 06:15:04 BoogieIcfgContainer [2018-11-14 18:15:04,873 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2018-11-14 18:15:04,874 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2018-11-14 18:15:04,874 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2018-11-14 18:15:04,877 INFO L276 PluginConnector]: TraceAbstraction initialized [2018-11-14 18:15:04,878 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 14.11 06:15:01" (1/3) ... [2018-11-14 18:15:04,878 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@377d3b85 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 14.11 06:15:04, skipping insertion in model container [2018-11-14 18:15:04,879 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.11 06:15:02" (2/3) ... [2018-11-14 18:15:04,879 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@377d3b85 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 14.11 06:15:04, skipping insertion in model container [2018-11-14 18:15:04,879 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 14.11 06:15:04" (3/3) ... [2018-11-14 18:15:04,881 INFO L112 eAbstractionObserver]: Analyzing ICFG sll-01_false-unreach-call_false-valid-deref.i [2018-11-14 18:15:04,892 INFO L136 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2018-11-14 18:15:04,903 INFO L148 ceAbstractionStarter]: Appying trace abstraction to program that has 13 error locations. [2018-11-14 18:15:04,921 INFO L257 AbstractCegarLoop]: Starting to check reachability of 13 error locations. [2018-11-14 18:15:04,954 INFO L133 ementStrategyFactory]: Using default assertion order modulation [2018-11-14 18:15:04,955 INFO L382 AbstractCegarLoop]: Interprodecural is true [2018-11-14 18:15:04,955 INFO L383 AbstractCegarLoop]: Hoare is true [2018-11-14 18:15:04,955 INFO L384 AbstractCegarLoop]: Compute interpolants for FPandBP [2018-11-14 18:15:04,955 INFO L385 AbstractCegarLoop]: Backedges is STRAIGHT_LINE [2018-11-14 18:15:04,956 INFO L386 AbstractCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2018-11-14 18:15:04,956 INFO L387 AbstractCegarLoop]: Difference is false [2018-11-14 18:15:04,956 INFO L388 AbstractCegarLoop]: Minimize is MINIMIZE_SEVPA [2018-11-14 18:15:04,956 INFO L393 AbstractCegarLoop]: ======== Iteration 0==of CEGAR loop == AllErrorsAtOnce======== [2018-11-14 18:15:04,993 INFO L276 IsEmpty]: Start isEmpty. Operand 97 states. [2018-11-14 18:15:05,003 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 10 [2018-11-14 18:15:05,003 INFO L367 BasicCegarLoop]: Found error trace [2018-11-14 18:15:05,004 INFO L375 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-14 18:15:05,008 INFO L423 AbstractCegarLoop]: === Iteration 1 === [mainErr8ASSERT_VIOLATIONERROR_FUNCTION, mainErr10ASSERT_VIOLATIONERROR_FUNCTION, mainErr11ASSERT_VIOLATIONERROR_FUNCTION, mainErr1ASSERT_VIOLATIONERROR_FUNCTION, mainErr5ASSERT_VIOLATIONERROR_FUNCTION, mainErr7ASSERT_VIOLATIONERROR_FUNCTION, mainErr9ASSERT_VIOLATIONERROR_FUNCTION, mainErr12ASSERT_VIOLATIONERROR_FUNCTION, mainErr2ASSERT_VIOLATIONERROR_FUNCTION, mainErr3ASSERT_VIOLATIONERROR_FUNCTION, mainErr0ASSERT_VIOLATIONERROR_FUNCTION, mainErr4ASSERT_VIOLATIONERROR_FUNCTION, mainErr6ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-14 18:15:05,015 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-14 18:15:05,015 INFO L82 PathProgramCache]: Analyzing trace with hash 1665752427, now seen corresponding path program 1 times [2018-11-14 18:15:05,020 INFO L223 ckRefinementStrategy]: Switched to mode CVC4_FPBP [2018-11-14 18:15:05,021 INFO L69 tionRefinementEngine]: Using refinement strategy WolfRefinementStrategy No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/cvc4nyu Starting monitored process 2 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 2 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk [2018-11-14 18:15:05,049 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-14 18:15:05,095 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-14 18:15:05,110 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-14 18:15:05,114 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-14 18:15:05,182 INFO L256 TraceCheckUtils]: 0: Hoare triple {100#true} call ULTIMATE.init(); {100#true} is VALID [2018-11-14 18:15:05,185 INFO L273 TraceCheckUtils]: 1: Hoare triple {100#true} #NULL.base, #NULL.offset := 0bv32, 0bv32;#valid := #valid[0bv32 := 0bv1]; {100#true} is VALID [2018-11-14 18:15:05,186 INFO L273 TraceCheckUtils]: 2: Hoare triple {100#true} assume true; {100#true} is VALID [2018-11-14 18:15:05,186 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {100#true} {100#true} #358#return; {100#true} is VALID [2018-11-14 18:15:05,187 INFO L256 TraceCheckUtils]: 4: Hoare triple {100#true} call #t~ret28 := main(); {100#true} is VALID [2018-11-14 18:15:05,206 INFO L273 TraceCheckUtils]: 5: Hoare triple {100#true} call #t~malloc0.base, #t~malloc0.offset := #Ultimate.alloc(8bv32);~list~0.base, ~list~0.offset := #t~malloc0.base, #t~malloc0.offset;call write~$Pointer$(0bv32, 0bv32, ~list~0.base, ~list~0.offset, 4bv32); {120#(not (= (_ bv0 32) main_~list~0.base))} is VALID [2018-11-14 18:15:05,221 INFO L273 TraceCheckUtils]: 6: Hoare triple {120#(not (= (_ bv0 32) main_~list~0.base))} assume true; {120#(not (= (_ bv0 32) main_~list~0.base))} is VALID [2018-11-14 18:15:05,223 INFO L273 TraceCheckUtils]: 7: Hoare triple {120#(not (= (_ bv0 32) main_~list~0.base))} assume !(~list~0.base != 0bv32 || ~list~0.offset != 0bv32); {101#false} is VALID [2018-11-14 18:15:05,223 INFO L273 TraceCheckUtils]: 8: Hoare triple {101#false} assume !false; {101#false} is VALID [2018-11-14 18:15:05,225 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-14 18:15:05,226 INFO L312 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2018-11-14 18:15:05,230 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-14 18:15:05,231 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-14 18:15:05,236 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 9 [2018-11-14 18:15:05,239 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-14 18:15:05,243 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states. [2018-11-14 18:15:05,293 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 9 edges. 9 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 18:15:05,294 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-14 18:15:05,303 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-14 18:15:05,304 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-14 18:15:05,306 INFO L87 Difference]: Start difference. First operand 97 states. Second operand 3 states. [2018-11-14 18:15:06,289 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 18:15:06,289 INFO L93 Difference]: Finished difference Result 206 states and 324 transitions. [2018-11-14 18:15:06,290 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-14 18:15:06,290 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 9 [2018-11-14 18:15:06,290 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-14 18:15:06,293 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2018-11-14 18:15:06,320 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 324 transitions. [2018-11-14 18:15:06,321 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2018-11-14 18:15:06,329 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 324 transitions. [2018-11-14 18:15:06,329 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 324 transitions. [2018-11-14 18:15:07,034 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 324 edges. 324 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 18:15:07,051 INFO L225 Difference]: With dead ends: 206 [2018-11-14 18:15:07,052 INFO L226 Difference]: Without dead ends: 110 [2018-11-14 18:15:07,056 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 7 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-14 18:15:07,075 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 110 states. [2018-11-14 18:15:07,122 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 110 to 90. [2018-11-14 18:15:07,122 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-14 18:15:07,123 INFO L82 GeneralOperation]: Start isEquivalent. First operand 110 states. Second operand 90 states. [2018-11-14 18:15:07,124 INFO L74 IsIncluded]: Start isIncluded. First operand 110 states. Second operand 90 states. [2018-11-14 18:15:07,124 INFO L87 Difference]: Start difference. First operand 110 states. Second operand 90 states. [2018-11-14 18:15:07,133 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 18:15:07,134 INFO L93 Difference]: Finished difference Result 110 states and 121 transitions. [2018-11-14 18:15:07,134 INFO L276 IsEmpty]: Start isEmpty. Operand 110 states and 121 transitions. [2018-11-14 18:15:07,135 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 18:15:07,136 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 18:15:07,136 INFO L74 IsIncluded]: Start isIncluded. First operand 90 states. Second operand 110 states. [2018-11-14 18:15:07,136 INFO L87 Difference]: Start difference. First operand 90 states. Second operand 110 states. [2018-11-14 18:15:07,145 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 18:15:07,145 INFO L93 Difference]: Finished difference Result 110 states and 121 transitions. [2018-11-14 18:15:07,145 INFO L276 IsEmpty]: Start isEmpty. Operand 110 states and 121 transitions. [2018-11-14 18:15:07,147 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 18:15:07,147 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 18:15:07,147 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-14 18:15:07,147 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-14 18:15:07,148 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 90 states. [2018-11-14 18:15:07,160 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 90 states to 90 states and 100 transitions. [2018-11-14 18:15:07,165 INFO L78 Accepts]: Start accepts. Automaton has 90 states and 100 transitions. Word has length 9 [2018-11-14 18:15:07,166 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-14 18:15:07,166 INFO L480 AbstractCegarLoop]: Abstraction has 90 states and 100 transitions. [2018-11-14 18:15:07,166 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-14 18:15:07,166 INFO L276 IsEmpty]: Start isEmpty. Operand 90 states and 100 transitions. [2018-11-14 18:15:07,167 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 15 [2018-11-14 18:15:07,167 INFO L367 BasicCegarLoop]: Found error trace [2018-11-14 18:15:07,167 INFO L375 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-14 18:15:07,168 INFO L423 AbstractCegarLoop]: === Iteration 2 === [mainErr8ASSERT_VIOLATIONERROR_FUNCTION, mainErr10ASSERT_VIOLATIONERROR_FUNCTION, mainErr11ASSERT_VIOLATIONERROR_FUNCTION, mainErr1ASSERT_VIOLATIONERROR_FUNCTION, mainErr5ASSERT_VIOLATIONERROR_FUNCTION, mainErr7ASSERT_VIOLATIONERROR_FUNCTION, mainErr9ASSERT_VIOLATIONERROR_FUNCTION, mainErr12ASSERT_VIOLATIONERROR_FUNCTION, mainErr2ASSERT_VIOLATIONERROR_FUNCTION, mainErr3ASSERT_VIOLATIONERROR_FUNCTION, mainErr0ASSERT_VIOLATIONERROR_FUNCTION, mainErr4ASSERT_VIOLATIONERROR_FUNCTION, mainErr6ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-14 18:15:07,168 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-14 18:15:07,168 INFO L82 PathProgramCache]: Analyzing trace with hash -1936126321, now seen corresponding path program 1 times [2018-11-14 18:15:07,170 INFO L223 ckRefinementStrategy]: Switched to mode CVC4_FPBP [2018-11-14 18:15:07,170 INFO L69 tionRefinementEngine]: Using refinement strategy WolfRefinementStrategy No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/cvc4nyu Starting monitored process 3 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 3 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk [2018-11-14 18:15:07,197 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-14 18:15:07,220 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-14 18:15:07,229 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-14 18:15:07,230 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-14 18:15:07,262 INFO L256 TraceCheckUtils]: 0: Hoare triple {672#true} call ULTIMATE.init(); {672#true} is VALID [2018-11-14 18:15:07,262 INFO L273 TraceCheckUtils]: 1: Hoare triple {672#true} #NULL.base, #NULL.offset := 0bv32, 0bv32;#valid := #valid[0bv32 := 0bv1]; {672#true} is VALID [2018-11-14 18:15:07,262 INFO L273 TraceCheckUtils]: 2: Hoare triple {672#true} assume true; {672#true} is VALID [2018-11-14 18:15:07,263 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {672#true} {672#true} #358#return; {672#true} is VALID [2018-11-14 18:15:07,263 INFO L256 TraceCheckUtils]: 4: Hoare triple {672#true} call #t~ret28 := main(); {672#true} is VALID [2018-11-14 18:15:07,263 INFO L273 TraceCheckUtils]: 5: Hoare triple {672#true} call #t~malloc0.base, #t~malloc0.offset := #Ultimate.alloc(8bv32);~list~0.base, ~list~0.offset := #t~malloc0.base, #t~malloc0.offset;call write~$Pointer$(0bv32, 0bv32, ~list~0.base, ~list~0.offset, 4bv32); {672#true} is VALID [2018-11-14 18:15:07,264 INFO L273 TraceCheckUtils]: 6: Hoare triple {672#true} assume true; {672#true} is VALID [2018-11-14 18:15:07,264 INFO L273 TraceCheckUtils]: 7: Hoare triple {672#true} assume !!(~list~0.base != 0bv32 || ~list~0.offset != 0bv32); {672#true} is VALID [2018-11-14 18:15:07,264 INFO L273 TraceCheckUtils]: 8: Hoare triple {672#true} assume true; {672#true} is VALID [2018-11-14 18:15:07,265 INFO L273 TraceCheckUtils]: 9: Hoare triple {672#true} assume #t~nondet1 != 0bv32;havoc #t~nondet1;call write~$Pointer$(0bv32, 0bv32, ~list~0.base, ~bvadd32(4bv32, ~list~0.offset), 4bv32); {672#true} is VALID [2018-11-14 18:15:07,265 INFO L273 TraceCheckUtils]: 10: Hoare triple {672#true} assume true;call #t~mem5.base, #t~mem5.offset := read~$Pointer$(~list~0.base, ~bvadd32(4bv32, ~list~0.offset), 4bv32);#t~short7 := #t~mem5.base != 0bv32 || #t~mem5.offset != 0bv32; {672#true} is VALID [2018-11-14 18:15:07,266 INFO L273 TraceCheckUtils]: 11: Hoare triple {672#true} assume #t~short7; {710#|main_#t~short7|} is VALID [2018-11-14 18:15:07,270 INFO L273 TraceCheckUtils]: 12: Hoare triple {710#|main_#t~short7|} assume !#t~short7;havoc #t~mem5.base, #t~mem5.offset;havoc #t~mem6.base, #t~mem6.offset;havoc #t~short7; {673#false} is VALID [2018-11-14 18:15:07,270 INFO L273 TraceCheckUtils]: 13: Hoare triple {673#false} assume !false; {673#false} is VALID [2018-11-14 18:15:07,271 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-14 18:15:07,271 INFO L312 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2018-11-14 18:15:07,274 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-14 18:15:07,275 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-14 18:15:07,276 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 14 [2018-11-14 18:15:07,277 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-14 18:15:07,277 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states. [2018-11-14 18:15:07,300 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 14 edges. 14 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 18:15:07,300 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-14 18:15:07,301 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-14 18:15:07,301 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-14 18:15:07,302 INFO L87 Difference]: Start difference. First operand 90 states and 100 transitions. Second operand 3 states. [2018-11-14 18:15:07,675 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 18:15:07,675 INFO L93 Difference]: Finished difference Result 93 states and 103 transitions. [2018-11-14 18:15:07,675 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-14 18:15:07,675 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 14 [2018-11-14 18:15:07,676 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-14 18:15:07,676 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2018-11-14 18:15:07,678 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 103 transitions. [2018-11-14 18:15:07,678 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2018-11-14 18:15:07,680 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 103 transitions. [2018-11-14 18:15:07,681 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 103 transitions. [2018-11-14 18:15:07,876 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 103 edges. 103 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 18:15:07,880 INFO L225 Difference]: With dead ends: 93 [2018-11-14 18:15:07,880 INFO L226 Difference]: Without dead ends: 91 [2018-11-14 18:15:07,881 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 13 GetRequests, 12 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-14 18:15:07,882 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 91 states. [2018-11-14 18:15:07,910 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 91 to 91. [2018-11-14 18:15:07,911 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-14 18:15:07,911 INFO L82 GeneralOperation]: Start isEquivalent. First operand 91 states. Second operand 91 states. [2018-11-14 18:15:07,911 INFO L74 IsIncluded]: Start isIncluded. First operand 91 states. Second operand 91 states. [2018-11-14 18:15:07,912 INFO L87 Difference]: Start difference. First operand 91 states. Second operand 91 states. [2018-11-14 18:15:07,917 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 18:15:07,917 INFO L93 Difference]: Finished difference Result 91 states and 101 transitions. [2018-11-14 18:15:07,917 INFO L276 IsEmpty]: Start isEmpty. Operand 91 states and 101 transitions. [2018-11-14 18:15:07,919 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 18:15:07,919 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 18:15:07,919 INFO L74 IsIncluded]: Start isIncluded. First operand 91 states. Second operand 91 states. [2018-11-14 18:15:07,919 INFO L87 Difference]: Start difference. First operand 91 states. Second operand 91 states. [2018-11-14 18:15:07,923 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 18:15:07,924 INFO L93 Difference]: Finished difference Result 91 states and 101 transitions. [2018-11-14 18:15:07,924 INFO L276 IsEmpty]: Start isEmpty. Operand 91 states and 101 transitions. [2018-11-14 18:15:07,925 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 18:15:07,925 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 18:15:07,925 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-14 18:15:07,926 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-14 18:15:07,926 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 91 states. [2018-11-14 18:15:07,929 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 91 states to 91 states and 101 transitions. [2018-11-14 18:15:07,929 INFO L78 Accepts]: Start accepts. Automaton has 91 states and 101 transitions. Word has length 14 [2018-11-14 18:15:07,930 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-14 18:15:07,930 INFO L480 AbstractCegarLoop]: Abstraction has 91 states and 101 transitions. [2018-11-14 18:15:07,930 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-14 18:15:07,930 INFO L276 IsEmpty]: Start isEmpty. Operand 91 states and 101 transitions. [2018-11-14 18:15:07,931 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 15 [2018-11-14 18:15:07,931 INFO L367 BasicCegarLoop]: Found error trace [2018-11-14 18:15:07,931 INFO L375 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-14 18:15:07,932 INFO L423 AbstractCegarLoop]: === Iteration 3 === [mainErr8ASSERT_VIOLATIONERROR_FUNCTION, mainErr10ASSERT_VIOLATIONERROR_FUNCTION, mainErr11ASSERT_VIOLATIONERROR_FUNCTION, mainErr1ASSERT_VIOLATIONERROR_FUNCTION, mainErr5ASSERT_VIOLATIONERROR_FUNCTION, mainErr7ASSERT_VIOLATIONERROR_FUNCTION, mainErr9ASSERT_VIOLATIONERROR_FUNCTION, mainErr12ASSERT_VIOLATIONERROR_FUNCTION, mainErr2ASSERT_VIOLATIONERROR_FUNCTION, mainErr3ASSERT_VIOLATIONERROR_FUNCTION, mainErr0ASSERT_VIOLATIONERROR_FUNCTION, mainErr4ASSERT_VIOLATIONERROR_FUNCTION, mainErr6ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-14 18:15:07,932 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-14 18:15:07,932 INFO L82 PathProgramCache]: Analyzing trace with hash -1936124399, now seen corresponding path program 1 times [2018-11-14 18:15:07,932 INFO L223 ckRefinementStrategy]: Switched to mode CVC4_FPBP [2018-11-14 18:15:07,933 INFO L69 tionRefinementEngine]: Using refinement strategy WolfRefinementStrategy No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/cvc4nyu Starting monitored process 4 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 4 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk [2018-11-14 18:15:07,958 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-14 18:15:07,983 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-14 18:15:07,997 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-14 18:15:07,998 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-14 18:15:08,172 INFO L256 TraceCheckUtils]: 0: Hoare triple {1102#true} call ULTIMATE.init(); {1102#true} is VALID [2018-11-14 18:15:08,172 INFO L273 TraceCheckUtils]: 1: Hoare triple {1102#true} #NULL.base, #NULL.offset := 0bv32, 0bv32;#valid := #valid[0bv32 := 0bv1]; {1102#true} is VALID [2018-11-14 18:15:08,173 INFO L273 TraceCheckUtils]: 2: Hoare triple {1102#true} assume true; {1102#true} is VALID [2018-11-14 18:15:08,173 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {1102#true} {1102#true} #358#return; {1102#true} is VALID [2018-11-14 18:15:08,173 INFO L256 TraceCheckUtils]: 4: Hoare triple {1102#true} call #t~ret28 := main(); {1102#true} is VALID [2018-11-14 18:15:08,173 INFO L273 TraceCheckUtils]: 5: Hoare triple {1102#true} call #t~malloc0.base, #t~malloc0.offset := #Ultimate.alloc(8bv32);~list~0.base, ~list~0.offset := #t~malloc0.base, #t~malloc0.offset;call write~$Pointer$(0bv32, 0bv32, ~list~0.base, ~list~0.offset, 4bv32); {1102#true} is VALID [2018-11-14 18:15:08,174 INFO L273 TraceCheckUtils]: 6: Hoare triple {1102#true} assume true; {1102#true} is VALID [2018-11-14 18:15:08,174 INFO L273 TraceCheckUtils]: 7: Hoare triple {1102#true} assume !!(~list~0.base != 0bv32 || ~list~0.offset != 0bv32); {1102#true} is VALID [2018-11-14 18:15:08,174 INFO L273 TraceCheckUtils]: 8: Hoare triple {1102#true} assume true; {1102#true} is VALID [2018-11-14 18:15:08,174 INFO L273 TraceCheckUtils]: 9: Hoare triple {1102#true} assume #t~nondet1 != 0bv32;havoc #t~nondet1;call write~$Pointer$(0bv32, 0bv32, ~list~0.base, ~bvadd32(4bv32, ~list~0.offset), 4bv32); {1102#true} is VALID [2018-11-14 18:15:08,176 INFO L273 TraceCheckUtils]: 10: Hoare triple {1102#true} assume true;call #t~mem5.base, #t~mem5.offset := read~$Pointer$(~list~0.base, ~bvadd32(4bv32, ~list~0.offset), 4bv32);#t~short7 := #t~mem5.base != 0bv32 || #t~mem5.offset != 0bv32; {1137#(or (and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (not |main_#t~short7|)) (and |main_#t~short7| (or (not (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32))) (not (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32))))))} is VALID [2018-11-14 18:15:08,177 INFO L273 TraceCheckUtils]: 11: Hoare triple {1137#(or (and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (not |main_#t~short7|)) (and |main_#t~short7| (or (not (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32))) (not (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32))))))} assume !#t~short7;call #t~mem6.base, #t~mem6.offset := read~$Pointer$(~list~0.base, ~bvadd32(4bv32, ~list~0.offset), 4bv32);#t~short7 := #t~mem6.base == 0bv32 && #t~mem6.offset == 0bv32; {1141#|main_#t~short7|} is VALID [2018-11-14 18:15:08,178 INFO L273 TraceCheckUtils]: 12: Hoare triple {1141#|main_#t~short7|} assume !#t~short7;havoc #t~mem5.base, #t~mem5.offset;havoc #t~mem6.base, #t~mem6.offset;havoc #t~short7; {1103#false} is VALID [2018-11-14 18:15:08,178 INFO L273 TraceCheckUtils]: 13: Hoare triple {1103#false} assume !false; {1103#false} is VALID [2018-11-14 18:15:08,180 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-14 18:15:08,180 INFO L312 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2018-11-14 18:15:08,183 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-14 18:15:08,183 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-14 18:15:08,183 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 14 [2018-11-14 18:15:08,184 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-14 18:15:08,184 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-14 18:15:08,212 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 14 edges. 14 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 18:15:08,212 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-14 18:15:08,213 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-14 18:15:08,213 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-14 18:15:08,213 INFO L87 Difference]: Start difference. First operand 91 states and 101 transitions. Second operand 4 states. [2018-11-14 18:15:09,092 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 18:15:09,092 INFO L93 Difference]: Finished difference Result 91 states and 101 transitions. [2018-11-14 18:15:09,093 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2018-11-14 18:15:09,093 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 14 [2018-11-14 18:15:09,093 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-14 18:15:09,093 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-14 18:15:09,095 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 101 transitions. [2018-11-14 18:15:09,096 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-14 18:15:09,098 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 101 transitions. [2018-11-14 18:15:09,098 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states and 101 transitions. [2018-11-14 18:15:09,227 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 101 edges. 101 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 18:15:09,233 INFO L225 Difference]: With dead ends: 91 [2018-11-14 18:15:09,233 INFO L226 Difference]: Without dead ends: 89 [2018-11-14 18:15:09,234 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 14 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-14 18:15:09,234 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 89 states. [2018-11-14 18:15:09,269 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 89 to 88. [2018-11-14 18:15:09,269 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-14 18:15:09,270 INFO L82 GeneralOperation]: Start isEquivalent. First operand 89 states. Second operand 88 states. [2018-11-14 18:15:09,270 INFO L74 IsIncluded]: Start isIncluded. First operand 89 states. Second operand 88 states. [2018-11-14 18:15:09,270 INFO L87 Difference]: Start difference. First operand 89 states. Second operand 88 states. [2018-11-14 18:15:09,273 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 18:15:09,274 INFO L93 Difference]: Finished difference Result 89 states and 99 transitions. [2018-11-14 18:15:09,274 INFO L276 IsEmpty]: Start isEmpty. Operand 89 states and 99 transitions. [2018-11-14 18:15:09,275 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 18:15:09,275 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 18:15:09,275 INFO L74 IsIncluded]: Start isIncluded. First operand 88 states. Second operand 89 states. [2018-11-14 18:15:09,275 INFO L87 Difference]: Start difference. First operand 88 states. Second operand 89 states. [2018-11-14 18:15:09,279 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 18:15:09,279 INFO L93 Difference]: Finished difference Result 89 states and 99 transitions. [2018-11-14 18:15:09,280 INFO L276 IsEmpty]: Start isEmpty. Operand 89 states and 99 transitions. [2018-11-14 18:15:09,280 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 18:15:09,281 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 18:15:09,281 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-14 18:15:09,281 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-14 18:15:09,281 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 88 states. [2018-11-14 18:15:09,284 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 88 states to 88 states and 98 transitions. [2018-11-14 18:15:09,285 INFO L78 Accepts]: Start accepts. Automaton has 88 states and 98 transitions. Word has length 14 [2018-11-14 18:15:09,285 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-14 18:15:09,285 INFO L480 AbstractCegarLoop]: Abstraction has 88 states and 98 transitions. [2018-11-14 18:15:09,285 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-14 18:15:09,285 INFO L276 IsEmpty]: Start isEmpty. Operand 88 states and 98 transitions. [2018-11-14 18:15:09,286 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2018-11-14 18:15:09,286 INFO L367 BasicCegarLoop]: Found error trace [2018-11-14 18:15:09,286 INFO L375 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-14 18:15:09,287 INFO L423 AbstractCegarLoop]: === Iteration 4 === [mainErr8ASSERT_VIOLATIONERROR_FUNCTION, mainErr10ASSERT_VIOLATIONERROR_FUNCTION, mainErr11ASSERT_VIOLATIONERROR_FUNCTION, mainErr1ASSERT_VIOLATIONERROR_FUNCTION, mainErr5ASSERT_VIOLATIONERROR_FUNCTION, mainErr7ASSERT_VIOLATIONERROR_FUNCTION, mainErr9ASSERT_VIOLATIONERROR_FUNCTION, mainErr12ASSERT_VIOLATIONERROR_FUNCTION, mainErr2ASSERT_VIOLATIONERROR_FUNCTION, mainErr3ASSERT_VIOLATIONERROR_FUNCTION, mainErr0ASSERT_VIOLATIONERROR_FUNCTION, mainErr4ASSERT_VIOLATIONERROR_FUNCTION, mainErr6ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-14 18:15:09,287 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-14 18:15:09,287 INFO L82 PathProgramCache]: Analyzing trace with hash -1963516357, now seen corresponding path program 1 times [2018-11-14 18:15:09,288 INFO L223 ckRefinementStrategy]: Switched to mode CVC4_FPBP [2018-11-14 18:15:09,288 INFO L69 tionRefinementEngine]: Using refinement strategy WolfRefinementStrategy No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/cvc4nyu Starting monitored process 5 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 5 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk [2018-11-14 18:15:09,316 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-14 18:15:09,342 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-14 18:15:09,373 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-14 18:15:09,374 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-14 18:15:09,505 INFO L256 TraceCheckUtils]: 0: Hoare triple {1526#true} call ULTIMATE.init(); {1526#true} is VALID [2018-11-14 18:15:09,506 INFO L273 TraceCheckUtils]: 1: Hoare triple {1526#true} #NULL.base, #NULL.offset := 0bv32, 0bv32;#valid := #valid[0bv32 := 0bv1]; {1526#true} is VALID [2018-11-14 18:15:09,506 INFO L273 TraceCheckUtils]: 2: Hoare triple {1526#true} assume true; {1526#true} is VALID [2018-11-14 18:15:09,507 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {1526#true} {1526#true} #358#return; {1526#true} is VALID [2018-11-14 18:15:09,508 INFO L256 TraceCheckUtils]: 4: Hoare triple {1526#true} call #t~ret28 := main(); {1526#true} is VALID [2018-11-14 18:15:09,508 INFO L273 TraceCheckUtils]: 5: Hoare triple {1526#true} call #t~malloc0.base, #t~malloc0.offset := #Ultimate.alloc(8bv32);~list~0.base, ~list~0.offset := #t~malloc0.base, #t~malloc0.offset;call write~$Pointer$(0bv32, 0bv32, ~list~0.base, ~list~0.offset, 4bv32); {1526#true} is VALID [2018-11-14 18:15:09,508 INFO L273 TraceCheckUtils]: 6: Hoare triple {1526#true} assume true; {1526#true} is VALID [2018-11-14 18:15:09,509 INFO L273 TraceCheckUtils]: 7: Hoare triple {1526#true} assume !!(~list~0.base != 0bv32 || ~list~0.offset != 0bv32); {1526#true} is VALID [2018-11-14 18:15:09,509 INFO L273 TraceCheckUtils]: 8: Hoare triple {1526#true} assume true; {1526#true} is VALID [2018-11-14 18:15:09,509 INFO L273 TraceCheckUtils]: 9: Hoare triple {1526#true} assume #t~nondet1 != 0bv32;havoc #t~nondet1;call write~$Pointer$(0bv32, 0bv32, ~list~0.base, ~bvadd32(4bv32, ~list~0.offset), 4bv32); {1526#true} is VALID [2018-11-14 18:15:09,510 INFO L273 TraceCheckUtils]: 10: Hoare triple {1526#true} assume true;call #t~mem5.base, #t~mem5.offset := read~$Pointer$(~list~0.base, ~bvadd32(4bv32, ~list~0.offset), 4bv32);#t~short7 := #t~mem5.base != 0bv32 || #t~mem5.offset != 0bv32; {1526#true} is VALID [2018-11-14 18:15:09,510 INFO L273 TraceCheckUtils]: 11: Hoare triple {1526#true} assume #t~short7; {1526#true} is VALID [2018-11-14 18:15:09,510 INFO L273 TraceCheckUtils]: 12: Hoare triple {1526#true} assume !!#t~short7;havoc #t~mem5.base, #t~mem5.offset;havoc #t~mem6.base, #t~mem6.offset;havoc #t~short7; {1526#true} is VALID [2018-11-14 18:15:09,511 INFO L273 TraceCheckUtils]: 13: Hoare triple {1526#true} assume true; {1526#true} is VALID [2018-11-14 18:15:09,511 INFO L273 TraceCheckUtils]: 14: Hoare triple {1526#true} ~end~0.base, ~end~0.offset := ~list~0.base, ~list~0.offset; {1526#true} is VALID [2018-11-14 18:15:09,511 INFO L273 TraceCheckUtils]: 15: Hoare triple {1526#true} assume true; {1526#true} is VALID [2018-11-14 18:15:09,515 INFO L273 TraceCheckUtils]: 16: Hoare triple {1526#true} assume !!(#t~nondet8 != 0bv32);havoc #t~nondet8;call #t~malloc9.base, #t~malloc9.offset := #Ultimate.alloc(8bv32);call write~$Pointer$(#t~malloc9.base, #t~malloc9.offset, ~end~0.base, ~end~0.offset, 4bv32);call #t~mem10.base, #t~mem10.offset := read~$Pointer$(~end~0.base, ~end~0.offset, 4bv32);~end~0.base, ~end~0.offset := #t~mem10.base, #t~mem10.offset;havoc #t~mem10.base, #t~mem10.offset;call write~$Pointer$(0bv32, 0bv32, ~end~0.base, ~end~0.offset, 4bv32); {1579#(not (= (_ bv0 32) main_~end~0.base))} is VALID [2018-11-14 18:15:09,517 INFO L273 TraceCheckUtils]: 17: Hoare triple {1579#(not (= (_ bv0 32) main_~end~0.base))} assume true; {1579#(not (= (_ bv0 32) main_~end~0.base))} is VALID [2018-11-14 18:15:09,519 INFO L273 TraceCheckUtils]: 18: Hoare triple {1579#(not (= (_ bv0 32) main_~end~0.base))} assume !(0bv32 != ~end~0.base || 0bv32 != ~end~0.offset); {1527#false} is VALID [2018-11-14 18:15:09,519 INFO L273 TraceCheckUtils]: 19: Hoare triple {1527#false} assume !false; {1527#false} is VALID [2018-11-14 18:15:09,520 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-14 18:15:09,520 INFO L312 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2018-11-14 18:15:09,522 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-14 18:15:09,522 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-14 18:15:09,522 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 20 [2018-11-14 18:15:09,522 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-14 18:15:09,522 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states. [2018-11-14 18:15:09,549 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 20 edges. 20 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 18:15:09,549 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-14 18:15:09,550 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-14 18:15:09,550 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-14 18:15:09,550 INFO L87 Difference]: Start difference. First operand 88 states and 98 transitions. Second operand 3 states. [2018-11-14 18:15:09,960 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 18:15:09,960 INFO L93 Difference]: Finished difference Result 91 states and 102 transitions. [2018-11-14 18:15:09,960 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-14 18:15:09,960 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 20 [2018-11-14 18:15:09,960 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-14 18:15:09,961 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2018-11-14 18:15:09,962 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 102 transitions. [2018-11-14 18:15:09,963 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2018-11-14 18:15:09,964 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 102 transitions. [2018-11-14 18:15:09,964 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 102 transitions. [2018-11-14 18:15:10,142 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 102 edges. 102 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 18:15:10,146 INFO L225 Difference]: With dead ends: 91 [2018-11-14 18:15:10,146 INFO L226 Difference]: Without dead ends: 87 [2018-11-14 18:15:10,147 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 18 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-14 18:15:10,148 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 87 states. [2018-11-14 18:15:10,185 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 87 to 84. [2018-11-14 18:15:10,185 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-14 18:15:10,185 INFO L82 GeneralOperation]: Start isEquivalent. First operand 87 states. Second operand 84 states. [2018-11-14 18:15:10,185 INFO L74 IsIncluded]: Start isIncluded. First operand 87 states. Second operand 84 states. [2018-11-14 18:15:10,186 INFO L87 Difference]: Start difference. First operand 87 states. Second operand 84 states. [2018-11-14 18:15:10,188 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 18:15:10,189 INFO L93 Difference]: Finished difference Result 87 states and 98 transitions. [2018-11-14 18:15:10,189 INFO L276 IsEmpty]: Start isEmpty. Operand 87 states and 98 transitions. [2018-11-14 18:15:10,190 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 18:15:10,190 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 18:15:10,190 INFO L74 IsIncluded]: Start isIncluded. First operand 84 states. Second operand 87 states. [2018-11-14 18:15:10,190 INFO L87 Difference]: Start difference. First operand 84 states. Second operand 87 states. [2018-11-14 18:15:10,193 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 18:15:10,194 INFO L93 Difference]: Finished difference Result 87 states and 98 transitions. [2018-11-14 18:15:10,194 INFO L276 IsEmpty]: Start isEmpty. Operand 87 states and 98 transitions. [2018-11-14 18:15:10,194 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 18:15:10,195 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 18:15:10,195 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-14 18:15:10,195 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-14 18:15:10,195 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 84 states. [2018-11-14 18:15:10,198 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 84 states to 84 states and 94 transitions. [2018-11-14 18:15:10,198 INFO L78 Accepts]: Start accepts. Automaton has 84 states and 94 transitions. Word has length 20 [2018-11-14 18:15:10,198 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-14 18:15:10,199 INFO L480 AbstractCegarLoop]: Abstraction has 84 states and 94 transitions. [2018-11-14 18:15:10,199 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-14 18:15:10,199 INFO L276 IsEmpty]: Start isEmpty. Operand 84 states and 94 transitions. [2018-11-14 18:15:10,199 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 22 [2018-11-14 18:15:10,200 INFO L367 BasicCegarLoop]: Found error trace [2018-11-14 18:15:10,200 INFO L375 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-14 18:15:10,200 INFO L423 AbstractCegarLoop]: === Iteration 5 === [mainErr8ASSERT_VIOLATIONERROR_FUNCTION, mainErr10ASSERT_VIOLATIONERROR_FUNCTION, mainErr11ASSERT_VIOLATIONERROR_FUNCTION, mainErr1ASSERT_VIOLATIONERROR_FUNCTION, mainErr5ASSERT_VIOLATIONERROR_FUNCTION, mainErr7ASSERT_VIOLATIONERROR_FUNCTION, mainErr9ASSERT_VIOLATIONERROR_FUNCTION, mainErr12ASSERT_VIOLATIONERROR_FUNCTION, mainErr2ASSERT_VIOLATIONERROR_FUNCTION, mainErr3ASSERT_VIOLATIONERROR_FUNCTION, mainErr0ASSERT_VIOLATIONERROR_FUNCTION, mainErr4ASSERT_VIOLATIONERROR_FUNCTION, mainErr6ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-14 18:15:10,200 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-14 18:15:10,201 INFO L82 PathProgramCache]: Analyzing trace with hash -739155955, now seen corresponding path program 1 times [2018-11-14 18:15:10,201 INFO L223 ckRefinementStrategy]: Switched to mode CVC4_FPBP [2018-11-14 18:15:10,201 INFO L69 tionRefinementEngine]: Using refinement strategy WolfRefinementStrategy No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/cvc4nyu Starting monitored process 6 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 6 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk [2018-11-14 18:15:10,224 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-14 18:15:10,246 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-14 18:15:10,258 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-14 18:15:10,259 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-14 18:15:10,309 INFO L256 TraceCheckUtils]: 0: Hoare triple {1958#true} call ULTIMATE.init(); {1958#true} is VALID [2018-11-14 18:15:10,309 INFO L273 TraceCheckUtils]: 1: Hoare triple {1958#true} #NULL.base, #NULL.offset := 0bv32, 0bv32;#valid := #valid[0bv32 := 0bv1]; {1958#true} is VALID [2018-11-14 18:15:10,310 INFO L273 TraceCheckUtils]: 2: Hoare triple {1958#true} assume true; {1958#true} is VALID [2018-11-14 18:15:10,310 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {1958#true} {1958#true} #358#return; {1958#true} is VALID [2018-11-14 18:15:10,310 INFO L256 TraceCheckUtils]: 4: Hoare triple {1958#true} call #t~ret28 := main(); {1958#true} is VALID [2018-11-14 18:15:10,313 INFO L273 TraceCheckUtils]: 5: Hoare triple {1958#true} call #t~malloc0.base, #t~malloc0.offset := #Ultimate.alloc(8bv32);~list~0.base, ~list~0.offset := #t~malloc0.base, #t~malloc0.offset;call write~$Pointer$(0bv32, 0bv32, ~list~0.base, ~list~0.offset, 4bv32); {1978#(not (= (_ bv0 32) main_~list~0.base))} is VALID [2018-11-14 18:15:10,314 INFO L273 TraceCheckUtils]: 6: Hoare triple {1978#(not (= (_ bv0 32) main_~list~0.base))} assume true; {1978#(not (= (_ bv0 32) main_~list~0.base))} is VALID [2018-11-14 18:15:10,315 INFO L273 TraceCheckUtils]: 7: Hoare triple {1978#(not (= (_ bv0 32) main_~list~0.base))} assume !!(~list~0.base != 0bv32 || ~list~0.offset != 0bv32); {1978#(not (= (_ bv0 32) main_~list~0.base))} is VALID [2018-11-14 18:15:10,315 INFO L273 TraceCheckUtils]: 8: Hoare triple {1978#(not (= (_ bv0 32) main_~list~0.base))} assume true; {1978#(not (= (_ bv0 32) main_~list~0.base))} is VALID [2018-11-14 18:15:10,315 INFO L273 TraceCheckUtils]: 9: Hoare triple {1978#(not (= (_ bv0 32) main_~list~0.base))} assume #t~nondet1 != 0bv32;havoc #t~nondet1;call write~$Pointer$(0bv32, 0bv32, ~list~0.base, ~bvadd32(4bv32, ~list~0.offset), 4bv32); {1978#(not (= (_ bv0 32) main_~list~0.base))} is VALID [2018-11-14 18:15:10,316 INFO L273 TraceCheckUtils]: 10: Hoare triple {1978#(not (= (_ bv0 32) main_~list~0.base))} assume true;call #t~mem5.base, #t~mem5.offset := read~$Pointer$(~list~0.base, ~bvadd32(4bv32, ~list~0.offset), 4bv32);#t~short7 := #t~mem5.base != 0bv32 || #t~mem5.offset != 0bv32; {1978#(not (= (_ bv0 32) main_~list~0.base))} is VALID [2018-11-14 18:15:10,316 INFO L273 TraceCheckUtils]: 11: Hoare triple {1978#(not (= (_ bv0 32) main_~list~0.base))} assume #t~short7; {1978#(not (= (_ bv0 32) main_~list~0.base))} is VALID [2018-11-14 18:15:10,317 INFO L273 TraceCheckUtils]: 12: Hoare triple {1978#(not (= (_ bv0 32) main_~list~0.base))} assume !!#t~short7;havoc #t~mem5.base, #t~mem5.offset;havoc #t~mem6.base, #t~mem6.offset;havoc #t~short7; {1978#(not (= (_ bv0 32) main_~list~0.base))} is VALID [2018-11-14 18:15:10,317 INFO L273 TraceCheckUtils]: 13: Hoare triple {1978#(not (= (_ bv0 32) main_~list~0.base))} assume true; {1978#(not (= (_ bv0 32) main_~list~0.base))} is VALID [2018-11-14 18:15:10,318 INFO L273 TraceCheckUtils]: 14: Hoare triple {1978#(not (= (_ bv0 32) main_~list~0.base))} ~end~0.base, ~end~0.offset := ~list~0.base, ~list~0.offset; {1978#(not (= (_ bv0 32) main_~list~0.base))} is VALID [2018-11-14 18:15:10,318 INFO L273 TraceCheckUtils]: 15: Hoare triple {1978#(not (= (_ bv0 32) main_~list~0.base))} assume true; {1978#(not (= (_ bv0 32) main_~list~0.base))} is VALID [2018-11-14 18:15:10,319 INFO L273 TraceCheckUtils]: 16: Hoare triple {1978#(not (= (_ bv0 32) main_~list~0.base))} assume !(#t~nondet8 != 0bv32);havoc #t~nondet8; {1978#(not (= (_ bv0 32) main_~list~0.base))} is VALID [2018-11-14 18:15:10,320 INFO L273 TraceCheckUtils]: 17: Hoare triple {1978#(not (= (_ bv0 32) main_~list~0.base))} ~end~0.base, ~end~0.offset := 0bv32, 0bv32;~end~0.base, ~end~0.offset := ~list~0.base, ~list~0.offset; {2015#(not (= (_ bv0 32) main_~end~0.base))} is VALID [2018-11-14 18:15:10,320 INFO L273 TraceCheckUtils]: 18: Hoare triple {2015#(not (= (_ bv0 32) main_~end~0.base))} assume true; {2015#(not (= (_ bv0 32) main_~end~0.base))} is VALID [2018-11-14 18:15:10,321 INFO L273 TraceCheckUtils]: 19: Hoare triple {2015#(not (= (_ bv0 32) main_~end~0.base))} assume !(0bv32 != ~end~0.base || 0bv32 != ~end~0.offset); {1959#false} is VALID [2018-11-14 18:15:10,321 INFO L273 TraceCheckUtils]: 20: Hoare triple {1959#false} assume !false; {1959#false} is VALID [2018-11-14 18:15:10,323 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-14 18:15:10,323 INFO L312 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2018-11-14 18:15:10,325 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-14 18:15:10,325 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-14 18:15:10,325 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 21 [2018-11-14 18:15:10,325 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-14 18:15:10,325 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-14 18:15:10,347 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 21 edges. 21 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 18:15:10,347 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-14 18:15:10,347 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-14 18:15:10,348 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-14 18:15:10,348 INFO L87 Difference]: Start difference. First operand 84 states and 94 transitions. Second operand 4 states. [2018-11-14 18:15:10,957 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 18:15:10,958 INFO L93 Difference]: Finished difference Result 152 states and 168 transitions. [2018-11-14 18:15:10,958 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-14 18:15:10,958 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 21 [2018-11-14 18:15:10,958 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-14 18:15:10,958 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-14 18:15:10,962 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 168 transitions. [2018-11-14 18:15:10,962 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-14 18:15:10,966 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 168 transitions. [2018-11-14 18:15:10,967 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 168 transitions. [2018-11-14 18:15:11,245 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 168 edges. 168 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 18:15:11,249 INFO L225 Difference]: With dead ends: 152 [2018-11-14 18:15:11,249 INFO L226 Difference]: Without dead ends: 130 [2018-11-14 18:15:11,250 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 21 GetRequests, 18 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-14 18:15:11,250 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 130 states. [2018-11-14 18:15:11,325 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 130 to 84. [2018-11-14 18:15:11,325 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-14 18:15:11,325 INFO L82 GeneralOperation]: Start isEquivalent. First operand 130 states. Second operand 84 states. [2018-11-14 18:15:11,326 INFO L74 IsIncluded]: Start isIncluded. First operand 130 states. Second operand 84 states. [2018-11-14 18:15:11,326 INFO L87 Difference]: Start difference. First operand 130 states. Second operand 84 states. [2018-11-14 18:15:11,329 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 18:15:11,329 INFO L93 Difference]: Finished difference Result 130 states and 144 transitions. [2018-11-14 18:15:11,330 INFO L276 IsEmpty]: Start isEmpty. Operand 130 states and 144 transitions. [2018-11-14 18:15:11,330 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 18:15:11,330 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 18:15:11,330 INFO L74 IsIncluded]: Start isIncluded. First operand 84 states. Second operand 130 states. [2018-11-14 18:15:11,331 INFO L87 Difference]: Start difference. First operand 84 states. Second operand 130 states. [2018-11-14 18:15:11,334 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 18:15:11,334 INFO L93 Difference]: Finished difference Result 130 states and 144 transitions. [2018-11-14 18:15:11,334 INFO L276 IsEmpty]: Start isEmpty. Operand 130 states and 144 transitions. [2018-11-14 18:15:11,335 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 18:15:11,335 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 18:15:11,335 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-14 18:15:11,335 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-14 18:15:11,335 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 84 states. [2018-11-14 18:15:11,338 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 84 states to 84 states and 94 transitions. [2018-11-14 18:15:11,338 INFO L78 Accepts]: Start accepts. Automaton has 84 states and 94 transitions. Word has length 21 [2018-11-14 18:15:11,338 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-14 18:15:11,338 INFO L480 AbstractCegarLoop]: Abstraction has 84 states and 94 transitions. [2018-11-14 18:15:11,339 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-14 18:15:11,339 INFO L276 IsEmpty]: Start isEmpty. Operand 84 states and 94 transitions. [2018-11-14 18:15:11,339 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 29 [2018-11-14 18:15:11,339 INFO L367 BasicCegarLoop]: Found error trace [2018-11-14 18:15:11,340 INFO L375 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-14 18:15:11,340 INFO L423 AbstractCegarLoop]: === Iteration 6 === [mainErr8ASSERT_VIOLATIONERROR_FUNCTION, mainErr10ASSERT_VIOLATIONERROR_FUNCTION, mainErr11ASSERT_VIOLATIONERROR_FUNCTION, mainErr1ASSERT_VIOLATIONERROR_FUNCTION, mainErr5ASSERT_VIOLATIONERROR_FUNCTION, mainErr7ASSERT_VIOLATIONERROR_FUNCTION, mainErr9ASSERT_VIOLATIONERROR_FUNCTION, mainErr12ASSERT_VIOLATIONERROR_FUNCTION, mainErr2ASSERT_VIOLATIONERROR_FUNCTION, mainErr3ASSERT_VIOLATIONERROR_FUNCTION, mainErr0ASSERT_VIOLATIONERROR_FUNCTION, mainErr4ASSERT_VIOLATIONERROR_FUNCTION, mainErr6ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-14 18:15:11,340 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-14 18:15:11,341 INFO L82 PathProgramCache]: Analyzing trace with hash 454611729, now seen corresponding path program 1 times [2018-11-14 18:15:11,341 INFO L223 ckRefinementStrategy]: Switched to mode CVC4_FPBP [2018-11-14 18:15:11,341 INFO L69 tionRefinementEngine]: Using refinement strategy WolfRefinementStrategy No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/cvc4nyu Starting monitored process 7 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 7 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk [2018-11-14 18:15:11,373 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-14 18:15:11,405 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-14 18:15:11,422 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-14 18:15:11,423 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-14 18:15:11,471 INFO L256 TraceCheckUtils]: 0: Hoare triple {2545#true} call ULTIMATE.init(); {2545#true} is VALID [2018-11-14 18:15:11,472 INFO L273 TraceCheckUtils]: 1: Hoare triple {2545#true} #NULL.base, #NULL.offset := 0bv32, 0bv32;#valid := #valid[0bv32 := 0bv1]; {2545#true} is VALID [2018-11-14 18:15:11,472 INFO L273 TraceCheckUtils]: 2: Hoare triple {2545#true} assume true; {2545#true} is VALID [2018-11-14 18:15:11,473 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {2545#true} {2545#true} #358#return; {2545#true} is VALID [2018-11-14 18:15:11,473 INFO L256 TraceCheckUtils]: 4: Hoare triple {2545#true} call #t~ret28 := main(); {2545#true} is VALID [2018-11-14 18:15:11,473 INFO L273 TraceCheckUtils]: 5: Hoare triple {2545#true} call #t~malloc0.base, #t~malloc0.offset := #Ultimate.alloc(8bv32);~list~0.base, ~list~0.offset := #t~malloc0.base, #t~malloc0.offset;call write~$Pointer$(0bv32, 0bv32, ~list~0.base, ~list~0.offset, 4bv32); {2545#true} is VALID [2018-11-14 18:15:11,474 INFO L273 TraceCheckUtils]: 6: Hoare triple {2545#true} assume true; {2545#true} is VALID [2018-11-14 18:15:11,474 INFO L273 TraceCheckUtils]: 7: Hoare triple {2545#true} assume !!(~list~0.base != 0bv32 || ~list~0.offset != 0bv32); {2545#true} is VALID [2018-11-14 18:15:11,474 INFO L273 TraceCheckUtils]: 8: Hoare triple {2545#true} assume true; {2545#true} is VALID [2018-11-14 18:15:11,474 INFO L273 TraceCheckUtils]: 9: Hoare triple {2545#true} assume #t~nondet1 != 0bv32;havoc #t~nondet1;call write~$Pointer$(0bv32, 0bv32, ~list~0.base, ~bvadd32(4bv32, ~list~0.offset), 4bv32); {2545#true} is VALID [2018-11-14 18:15:11,475 INFO L273 TraceCheckUtils]: 10: Hoare triple {2545#true} assume true;call #t~mem5.base, #t~mem5.offset := read~$Pointer$(~list~0.base, ~bvadd32(4bv32, ~list~0.offset), 4bv32);#t~short7 := #t~mem5.base != 0bv32 || #t~mem5.offset != 0bv32; {2545#true} is VALID [2018-11-14 18:15:11,475 INFO L273 TraceCheckUtils]: 11: Hoare triple {2545#true} assume #t~short7; {2545#true} is VALID [2018-11-14 18:15:11,475 INFO L273 TraceCheckUtils]: 12: Hoare triple {2545#true} assume !!#t~short7;havoc #t~mem5.base, #t~mem5.offset;havoc #t~mem6.base, #t~mem6.offset;havoc #t~short7; {2545#true} is VALID [2018-11-14 18:15:11,475 INFO L273 TraceCheckUtils]: 13: Hoare triple {2545#true} assume true; {2545#true} is VALID [2018-11-14 18:15:11,476 INFO L273 TraceCheckUtils]: 14: Hoare triple {2545#true} ~end~0.base, ~end~0.offset := ~list~0.base, ~list~0.offset; {2545#true} is VALID [2018-11-14 18:15:11,476 INFO L273 TraceCheckUtils]: 15: Hoare triple {2545#true} assume true; {2545#true} is VALID [2018-11-14 18:15:11,476 INFO L273 TraceCheckUtils]: 16: Hoare triple {2545#true} assume !!(#t~nondet8 != 0bv32);havoc #t~nondet8;call #t~malloc9.base, #t~malloc9.offset := #Ultimate.alloc(8bv32);call write~$Pointer$(#t~malloc9.base, #t~malloc9.offset, ~end~0.base, ~end~0.offset, 4bv32);call #t~mem10.base, #t~mem10.offset := read~$Pointer$(~end~0.base, ~end~0.offset, 4bv32);~end~0.base, ~end~0.offset := #t~mem10.base, #t~mem10.offset;havoc #t~mem10.base, #t~mem10.offset;call write~$Pointer$(0bv32, 0bv32, ~end~0.base, ~end~0.offset, 4bv32); {2545#true} is VALID [2018-11-14 18:15:11,476 INFO L273 TraceCheckUtils]: 17: Hoare triple {2545#true} assume true; {2545#true} is VALID [2018-11-14 18:15:11,477 INFO L273 TraceCheckUtils]: 18: Hoare triple {2545#true} assume !!(0bv32 != ~end~0.base || 0bv32 != ~end~0.offset); {2545#true} is VALID [2018-11-14 18:15:11,477 INFO L273 TraceCheckUtils]: 19: Hoare triple {2545#true} assume true; {2545#true} is VALID [2018-11-14 18:15:11,477 INFO L273 TraceCheckUtils]: 20: Hoare triple {2545#true} assume true; {2545#true} is VALID [2018-11-14 18:15:11,477 INFO L273 TraceCheckUtils]: 21: Hoare triple {2545#true} assume !!(~end~0.base != 0bv32 || ~end~0.offset != 0bv32); {2545#true} is VALID [2018-11-14 18:15:11,478 INFO L273 TraceCheckUtils]: 22: Hoare triple {2545#true} assume true; {2545#true} is VALID [2018-11-14 18:15:11,478 INFO L273 TraceCheckUtils]: 23: Hoare triple {2545#true} assume #t~nondet11 != 0bv32;havoc #t~nondet11;call write~$Pointer$(0bv32, 0bv32, ~end~0.base, ~bvadd32(4bv32, ~end~0.offset), 4bv32); {2545#true} is VALID [2018-11-14 18:15:11,478 INFO L273 TraceCheckUtils]: 24: Hoare triple {2545#true} assume true;call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~end~0.base, ~bvadd32(4bv32, ~end~0.offset), 4bv32);#t~short17 := #t~mem15.base != 0bv32 || #t~mem15.offset != 0bv32; {2545#true} is VALID [2018-11-14 18:15:11,479 INFO L273 TraceCheckUtils]: 25: Hoare triple {2545#true} assume #t~short17; {2625#|main_#t~short17|} is VALID [2018-11-14 18:15:11,480 INFO L273 TraceCheckUtils]: 26: Hoare triple {2625#|main_#t~short17|} assume !#t~short17;havoc #t~mem15.base, #t~mem15.offset;havoc #t~mem16.base, #t~mem16.offset;havoc #t~short17; {2546#false} is VALID [2018-11-14 18:15:11,480 INFO L273 TraceCheckUtils]: 27: Hoare triple {2546#false} assume !false; {2546#false} is VALID [2018-11-14 18:15:11,481 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-14 18:15:11,482 INFO L312 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2018-11-14 18:15:11,487 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-14 18:15:11,487 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-14 18:15:11,487 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 28 [2018-11-14 18:15:11,488 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-14 18:15:11,488 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states. [2018-11-14 18:15:11,578 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 28 edges. 28 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 18:15:11,579 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-14 18:15:11,579 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-14 18:15:11,579 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-14 18:15:11,580 INFO L87 Difference]: Start difference. First operand 84 states and 94 transitions. Second operand 3 states. [2018-11-14 18:15:12,031 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 18:15:12,031 INFO L93 Difference]: Finished difference Result 87 states and 97 transitions. [2018-11-14 18:15:12,031 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-14 18:15:12,031 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 28 [2018-11-14 18:15:12,032 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-14 18:15:12,032 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2018-11-14 18:15:12,033 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 95 transitions. [2018-11-14 18:15:12,033 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2018-11-14 18:15:12,037 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 95 transitions. [2018-11-14 18:15:12,037 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 95 transitions. [2018-11-14 18:15:12,162 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 95 edges. 95 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 18:15:12,164 INFO L225 Difference]: With dead ends: 87 [2018-11-14 18:15:12,164 INFO L226 Difference]: Without dead ends: 85 [2018-11-14 18:15:12,165 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 27 GetRequests, 26 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-14 18:15:12,165 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 85 states. [2018-11-14 18:15:12,191 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 85 to 85. [2018-11-14 18:15:12,192 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-14 18:15:12,192 INFO L82 GeneralOperation]: Start isEquivalent. First operand 85 states. Second operand 85 states. [2018-11-14 18:15:12,192 INFO L74 IsIncluded]: Start isIncluded. First operand 85 states. Second operand 85 states. [2018-11-14 18:15:12,192 INFO L87 Difference]: Start difference. First operand 85 states. Second operand 85 states. [2018-11-14 18:15:12,195 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 18:15:12,196 INFO L93 Difference]: Finished difference Result 85 states and 95 transitions. [2018-11-14 18:15:12,196 INFO L276 IsEmpty]: Start isEmpty. Operand 85 states and 95 transitions. [2018-11-14 18:15:12,196 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 18:15:12,196 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 18:15:12,196 INFO L74 IsIncluded]: Start isIncluded. First operand 85 states. Second operand 85 states. [2018-11-14 18:15:12,196 INFO L87 Difference]: Start difference. First operand 85 states. Second operand 85 states. [2018-11-14 18:15:12,198 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 18:15:12,199 INFO L93 Difference]: Finished difference Result 85 states and 95 transitions. [2018-11-14 18:15:12,199 INFO L276 IsEmpty]: Start isEmpty. Operand 85 states and 95 transitions. [2018-11-14 18:15:12,199 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 18:15:12,199 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 18:15:12,200 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-14 18:15:12,200 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-14 18:15:12,200 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 85 states. [2018-11-14 18:15:12,202 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 85 states to 85 states and 95 transitions. [2018-11-14 18:15:12,202 INFO L78 Accepts]: Start accepts. Automaton has 85 states and 95 transitions. Word has length 28 [2018-11-14 18:15:12,203 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-14 18:15:12,203 INFO L480 AbstractCegarLoop]: Abstraction has 85 states and 95 transitions. [2018-11-14 18:15:12,203 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-14 18:15:12,203 INFO L276 IsEmpty]: Start isEmpty. Operand 85 states and 95 transitions. [2018-11-14 18:15:12,204 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 29 [2018-11-14 18:15:12,204 INFO L367 BasicCegarLoop]: Found error trace [2018-11-14 18:15:12,204 INFO L375 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-14 18:15:12,204 INFO L423 AbstractCegarLoop]: === Iteration 7 === [mainErr8ASSERT_VIOLATIONERROR_FUNCTION, mainErr10ASSERT_VIOLATIONERROR_FUNCTION, mainErr11ASSERT_VIOLATIONERROR_FUNCTION, mainErr1ASSERT_VIOLATIONERROR_FUNCTION, mainErr5ASSERT_VIOLATIONERROR_FUNCTION, mainErr7ASSERT_VIOLATIONERROR_FUNCTION, mainErr9ASSERT_VIOLATIONERROR_FUNCTION, mainErr12ASSERT_VIOLATIONERROR_FUNCTION, mainErr2ASSERT_VIOLATIONERROR_FUNCTION, mainErr3ASSERT_VIOLATIONERROR_FUNCTION, mainErr0ASSERT_VIOLATIONERROR_FUNCTION, mainErr4ASSERT_VIOLATIONERROR_FUNCTION, mainErr6ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-14 18:15:12,205 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-14 18:15:12,205 INFO L82 PathProgramCache]: Analyzing trace with hash 454613651, now seen corresponding path program 1 times [2018-11-14 18:15:12,205 INFO L223 ckRefinementStrategy]: Switched to mode CVC4_FPBP [2018-11-14 18:15:12,205 INFO L69 tionRefinementEngine]: Using refinement strategy WolfRefinementStrategy No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/cvc4nyu Starting monitored process 8 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 8 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk [2018-11-14 18:15:12,227 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-14 18:15:12,273 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-14 18:15:12,290 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-14 18:15:12,291 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-14 18:15:12,433 INFO L256 TraceCheckUtils]: 0: Hoare triple {2993#true} call ULTIMATE.init(); {2993#true} is VALID [2018-11-14 18:15:12,433 INFO L273 TraceCheckUtils]: 1: Hoare triple {2993#true} #NULL.base, #NULL.offset := 0bv32, 0bv32;#valid := #valid[0bv32 := 0bv1]; {2993#true} is VALID [2018-11-14 18:15:12,433 INFO L273 TraceCheckUtils]: 2: Hoare triple {2993#true} assume true; {2993#true} is VALID [2018-11-14 18:15:12,434 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {2993#true} {2993#true} #358#return; {2993#true} is VALID [2018-11-14 18:15:12,434 INFO L256 TraceCheckUtils]: 4: Hoare triple {2993#true} call #t~ret28 := main(); {2993#true} is VALID [2018-11-14 18:15:12,434 INFO L273 TraceCheckUtils]: 5: Hoare triple {2993#true} call #t~malloc0.base, #t~malloc0.offset := #Ultimate.alloc(8bv32);~list~0.base, ~list~0.offset := #t~malloc0.base, #t~malloc0.offset;call write~$Pointer$(0bv32, 0bv32, ~list~0.base, ~list~0.offset, 4bv32); {2993#true} is VALID [2018-11-14 18:15:12,434 INFO L273 TraceCheckUtils]: 6: Hoare triple {2993#true} assume true; {2993#true} is VALID [2018-11-14 18:15:12,434 INFO L273 TraceCheckUtils]: 7: Hoare triple {2993#true} assume !!(~list~0.base != 0bv32 || ~list~0.offset != 0bv32); {2993#true} is VALID [2018-11-14 18:15:12,435 INFO L273 TraceCheckUtils]: 8: Hoare triple {2993#true} assume true; {2993#true} is VALID [2018-11-14 18:15:12,435 INFO L273 TraceCheckUtils]: 9: Hoare triple {2993#true} assume #t~nondet1 != 0bv32;havoc #t~nondet1;call write~$Pointer$(0bv32, 0bv32, ~list~0.base, ~bvadd32(4bv32, ~list~0.offset), 4bv32); {2993#true} is VALID [2018-11-14 18:15:12,435 INFO L273 TraceCheckUtils]: 10: Hoare triple {2993#true} assume true;call #t~mem5.base, #t~mem5.offset := read~$Pointer$(~list~0.base, ~bvadd32(4bv32, ~list~0.offset), 4bv32);#t~short7 := #t~mem5.base != 0bv32 || #t~mem5.offset != 0bv32; {2993#true} is VALID [2018-11-14 18:15:12,435 INFO L273 TraceCheckUtils]: 11: Hoare triple {2993#true} assume #t~short7; {2993#true} is VALID [2018-11-14 18:15:12,435 INFO L273 TraceCheckUtils]: 12: Hoare triple {2993#true} assume !!#t~short7;havoc #t~mem5.base, #t~mem5.offset;havoc #t~mem6.base, #t~mem6.offset;havoc #t~short7; {2993#true} is VALID [2018-11-14 18:15:12,436 INFO L273 TraceCheckUtils]: 13: Hoare triple {2993#true} assume true; {2993#true} is VALID [2018-11-14 18:15:12,436 INFO L273 TraceCheckUtils]: 14: Hoare triple {2993#true} ~end~0.base, ~end~0.offset := ~list~0.base, ~list~0.offset; {2993#true} is VALID [2018-11-14 18:15:12,436 INFO L273 TraceCheckUtils]: 15: Hoare triple {2993#true} assume true; {2993#true} is VALID [2018-11-14 18:15:12,436 INFO L273 TraceCheckUtils]: 16: Hoare triple {2993#true} assume !!(#t~nondet8 != 0bv32);havoc #t~nondet8;call #t~malloc9.base, #t~malloc9.offset := #Ultimate.alloc(8bv32);call write~$Pointer$(#t~malloc9.base, #t~malloc9.offset, ~end~0.base, ~end~0.offset, 4bv32);call #t~mem10.base, #t~mem10.offset := read~$Pointer$(~end~0.base, ~end~0.offset, 4bv32);~end~0.base, ~end~0.offset := #t~mem10.base, #t~mem10.offset;havoc #t~mem10.base, #t~mem10.offset;call write~$Pointer$(0bv32, 0bv32, ~end~0.base, ~end~0.offset, 4bv32); {2993#true} is VALID [2018-11-14 18:15:12,436 INFO L273 TraceCheckUtils]: 17: Hoare triple {2993#true} assume true; {2993#true} is VALID [2018-11-14 18:15:12,437 INFO L273 TraceCheckUtils]: 18: Hoare triple {2993#true} assume !!(0bv32 != ~end~0.base || 0bv32 != ~end~0.offset); {2993#true} is VALID [2018-11-14 18:15:12,437 INFO L273 TraceCheckUtils]: 19: Hoare triple {2993#true} assume true; {2993#true} is VALID [2018-11-14 18:15:12,437 INFO L273 TraceCheckUtils]: 20: Hoare triple {2993#true} assume true; {2993#true} is VALID [2018-11-14 18:15:12,437 INFO L273 TraceCheckUtils]: 21: Hoare triple {2993#true} assume !!(~end~0.base != 0bv32 || ~end~0.offset != 0bv32); {2993#true} is VALID [2018-11-14 18:15:12,438 INFO L273 TraceCheckUtils]: 22: Hoare triple {2993#true} assume true; {2993#true} is VALID [2018-11-14 18:15:12,438 INFO L273 TraceCheckUtils]: 23: Hoare triple {2993#true} assume #t~nondet11 != 0bv32;havoc #t~nondet11;call write~$Pointer$(0bv32, 0bv32, ~end~0.base, ~bvadd32(4bv32, ~end~0.offset), 4bv32); {2993#true} is VALID [2018-11-14 18:15:12,452 INFO L273 TraceCheckUtils]: 24: Hoare triple {2993#true} assume true;call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~end~0.base, ~bvadd32(4bv32, ~end~0.offset), 4bv32);#t~short17 := #t~mem15.base != 0bv32 || #t~mem15.offset != 0bv32; {3070#(or (and (not |main_#t~short17|) (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32))) (and |main_#t~short17| (or (not (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32))) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32))))))} is VALID [2018-11-14 18:15:12,454 INFO L273 TraceCheckUtils]: 25: Hoare triple {3070#(or (and (not |main_#t~short17|) (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32))) (and |main_#t~short17| (or (not (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32))) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32))))))} assume !#t~short17;call #t~mem16.base, #t~mem16.offset := read~$Pointer$(~end~0.base, ~bvadd32(4bv32, ~end~0.offset), 4bv32);#t~short17 := #t~mem16.base == 0bv32 && #t~mem16.offset == 0bv32; {3074#|main_#t~short17|} is VALID [2018-11-14 18:15:12,454 INFO L273 TraceCheckUtils]: 26: Hoare triple {3074#|main_#t~short17|} assume !#t~short17;havoc #t~mem15.base, #t~mem15.offset;havoc #t~mem16.base, #t~mem16.offset;havoc #t~short17; {2994#false} is VALID [2018-11-14 18:15:12,454 INFO L273 TraceCheckUtils]: 27: Hoare triple {2994#false} assume !false; {2994#false} is VALID [2018-11-14 18:15:12,456 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-14 18:15:12,456 INFO L312 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [MP cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk (8)] Exception during sending of exit command (exit): Broken pipe [2018-11-14 18:15:12,458 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-14 18:15:12,458 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-14 18:15:12,458 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 28 [2018-11-14 18:15:12,458 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-14 18:15:12,458 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-14 18:15:12,489 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 28 edges. 28 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 18:15:12,489 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-14 18:15:12,489 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-14 18:15:12,489 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-14 18:15:12,490 INFO L87 Difference]: Start difference. First operand 85 states and 95 transitions. Second operand 4 states. [2018-11-14 18:15:13,525 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 18:15:13,525 INFO L93 Difference]: Finished difference Result 85 states and 95 transitions. [2018-11-14 18:15:13,526 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2018-11-14 18:15:13,526 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 28 [2018-11-14 18:15:13,526 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-14 18:15:13,526 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-14 18:15:13,528 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 93 transitions. [2018-11-14 18:15:13,528 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-14 18:15:13,530 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 93 transitions. [2018-11-14 18:15:13,530 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states and 93 transitions. [2018-11-14 18:15:13,656 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 93 edges. 93 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 18:15:13,658 INFO L225 Difference]: With dead ends: 85 [2018-11-14 18:15:13,658 INFO L226 Difference]: Without dead ends: 83 [2018-11-14 18:15:13,659 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 28 GetRequests, 25 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-14 18:15:13,659 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 83 states. [2018-11-14 18:15:13,675 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 83 to 82. [2018-11-14 18:15:13,675 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-14 18:15:13,675 INFO L82 GeneralOperation]: Start isEquivalent. First operand 83 states. Second operand 82 states. [2018-11-14 18:15:13,676 INFO L74 IsIncluded]: Start isIncluded. First operand 83 states. Second operand 82 states. [2018-11-14 18:15:13,676 INFO L87 Difference]: Start difference. First operand 83 states. Second operand 82 states. [2018-11-14 18:15:13,679 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 18:15:13,679 INFO L93 Difference]: Finished difference Result 83 states and 93 transitions. [2018-11-14 18:15:13,679 INFO L276 IsEmpty]: Start isEmpty. Operand 83 states and 93 transitions. [2018-11-14 18:15:13,680 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 18:15:13,680 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 18:15:13,680 INFO L74 IsIncluded]: Start isIncluded. First operand 82 states. Second operand 83 states. [2018-11-14 18:15:13,680 INFO L87 Difference]: Start difference. First operand 82 states. Second operand 83 states. [2018-11-14 18:15:13,683 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 18:15:13,683 INFO L93 Difference]: Finished difference Result 83 states and 93 transitions. [2018-11-14 18:15:13,683 INFO L276 IsEmpty]: Start isEmpty. Operand 83 states and 93 transitions. [2018-11-14 18:15:13,684 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 18:15:13,684 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 18:15:13,684 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-14 18:15:13,684 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-14 18:15:13,685 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 82 states. [2018-11-14 18:15:13,686 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 82 states to 82 states and 92 transitions. [2018-11-14 18:15:13,687 INFO L78 Accepts]: Start accepts. Automaton has 82 states and 92 transitions. Word has length 28 [2018-11-14 18:15:13,687 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-14 18:15:13,687 INFO L480 AbstractCegarLoop]: Abstraction has 82 states and 92 transitions. [2018-11-14 18:15:13,687 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-14 18:15:13,687 INFO L276 IsEmpty]: Start isEmpty. Operand 82 states and 92 transitions. [2018-11-14 18:15:13,688 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 29 [2018-11-14 18:15:13,688 INFO L367 BasicCegarLoop]: Found error trace [2018-11-14 18:15:13,688 INFO L375 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-14 18:15:13,689 INFO L423 AbstractCegarLoop]: === Iteration 8 === [mainErr8ASSERT_VIOLATIONERROR_FUNCTION, mainErr10ASSERT_VIOLATIONERROR_FUNCTION, mainErr11ASSERT_VIOLATIONERROR_FUNCTION, mainErr1ASSERT_VIOLATIONERROR_FUNCTION, mainErr5ASSERT_VIOLATIONERROR_FUNCTION, mainErr7ASSERT_VIOLATIONERROR_FUNCTION, mainErr9ASSERT_VIOLATIONERROR_FUNCTION, mainErr12ASSERT_VIOLATIONERROR_FUNCTION, mainErr2ASSERT_VIOLATIONERROR_FUNCTION, mainErr3ASSERT_VIOLATIONERROR_FUNCTION, mainErr0ASSERT_VIOLATIONERROR_FUNCTION, mainErr4ASSERT_VIOLATIONERROR_FUNCTION, mainErr6ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-14 18:15:13,689 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-14 18:15:13,689 INFO L82 PathProgramCache]: Analyzing trace with hash 1441629924, now seen corresponding path program 1 times [2018-11-14 18:15:13,690 INFO L223 ckRefinementStrategy]: Switched to mode CVC4_FPBP [2018-11-14 18:15:13,690 INFO L69 tionRefinementEngine]: Using refinement strategy WolfRefinementStrategy No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/cvc4nyu Starting monitored process 9 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 9 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk [2018-11-14 18:15:13,716 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-14 18:15:13,750 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-14 18:15:13,781 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-14 18:15:13,782 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-14 18:15:14,043 INFO L256 TraceCheckUtils]: 0: Hoare triple {3435#true} call ULTIMATE.init(); {3435#true} is VALID [2018-11-14 18:15:14,044 INFO L273 TraceCheckUtils]: 1: Hoare triple {3435#true} #NULL.base, #NULL.offset := 0bv32, 0bv32;#valid := #valid[0bv32 := 0bv1]; {3435#true} is VALID [2018-11-14 18:15:14,044 INFO L273 TraceCheckUtils]: 2: Hoare triple {3435#true} assume true; {3435#true} is VALID [2018-11-14 18:15:14,044 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {3435#true} {3435#true} #358#return; {3435#true} is VALID [2018-11-14 18:15:14,044 INFO L256 TraceCheckUtils]: 4: Hoare triple {3435#true} call #t~ret28 := main(); {3435#true} is VALID [2018-11-14 18:15:14,044 INFO L273 TraceCheckUtils]: 5: Hoare triple {3435#true} call #t~malloc0.base, #t~malloc0.offset := #Ultimate.alloc(8bv32);~list~0.base, ~list~0.offset := #t~malloc0.base, #t~malloc0.offset;call write~$Pointer$(0bv32, 0bv32, ~list~0.base, ~list~0.offset, 4bv32); {3435#true} is VALID [2018-11-14 18:15:14,044 INFO L273 TraceCheckUtils]: 6: Hoare triple {3435#true} assume true; {3435#true} is VALID [2018-11-14 18:15:14,045 INFO L273 TraceCheckUtils]: 7: Hoare triple {3435#true} assume !!(~list~0.base != 0bv32 || ~list~0.offset != 0bv32); {3435#true} is VALID [2018-11-14 18:15:14,045 INFO L273 TraceCheckUtils]: 8: Hoare triple {3435#true} assume true; {3435#true} is VALID [2018-11-14 18:15:14,045 INFO L273 TraceCheckUtils]: 9: Hoare triple {3435#true} assume #t~nondet1 != 0bv32;havoc #t~nondet1;call write~$Pointer$(0bv32, 0bv32, ~list~0.base, ~bvadd32(4bv32, ~list~0.offset), 4bv32); {3435#true} is VALID [2018-11-14 18:15:14,045 INFO L273 TraceCheckUtils]: 10: Hoare triple {3435#true} assume true;call #t~mem5.base, #t~mem5.offset := read~$Pointer$(~list~0.base, ~bvadd32(4bv32, ~list~0.offset), 4bv32);#t~short7 := #t~mem5.base != 0bv32 || #t~mem5.offset != 0bv32; {3435#true} is VALID [2018-11-14 18:15:14,045 INFO L273 TraceCheckUtils]: 11: Hoare triple {3435#true} assume #t~short7; {3435#true} is VALID [2018-11-14 18:15:14,045 INFO L273 TraceCheckUtils]: 12: Hoare triple {3435#true} assume !!#t~short7;havoc #t~mem5.base, #t~mem5.offset;havoc #t~mem6.base, #t~mem6.offset;havoc #t~short7; {3435#true} is VALID [2018-11-14 18:15:14,046 INFO L273 TraceCheckUtils]: 13: Hoare triple {3435#true} assume true; {3435#true} is VALID [2018-11-14 18:15:14,046 INFO L273 TraceCheckUtils]: 14: Hoare triple {3435#true} ~end~0.base, ~end~0.offset := ~list~0.base, ~list~0.offset; {3435#true} is VALID [2018-11-14 18:15:14,046 INFO L273 TraceCheckUtils]: 15: Hoare triple {3435#true} assume true; {3435#true} is VALID [2018-11-14 18:15:14,046 INFO L273 TraceCheckUtils]: 16: Hoare triple {3435#true} assume !(#t~nondet8 != 0bv32);havoc #t~nondet8; {3435#true} is VALID [2018-11-14 18:15:14,046 INFO L273 TraceCheckUtils]: 17: Hoare triple {3435#true} ~end~0.base, ~end~0.offset := 0bv32, 0bv32;~end~0.base, ~end~0.offset := ~list~0.base, ~list~0.offset; {3435#true} is VALID [2018-11-14 18:15:14,046 INFO L273 TraceCheckUtils]: 18: Hoare triple {3435#true} assume true; {3435#true} is VALID [2018-11-14 18:15:14,047 INFO L273 TraceCheckUtils]: 19: Hoare triple {3435#true} assume !!(0bv32 != ~end~0.base || 0bv32 != ~end~0.offset); {3435#true} is VALID [2018-11-14 18:15:14,047 INFO L273 TraceCheckUtils]: 20: Hoare triple {3435#true} assume true; {3435#true} is VALID [2018-11-14 18:15:14,047 INFO L273 TraceCheckUtils]: 21: Hoare triple {3435#true} assume true; {3435#true} is VALID [2018-11-14 18:15:14,048 INFO L273 TraceCheckUtils]: 22: Hoare triple {3435#true} assume !!(0bv32 != ~end~0.base || 0bv32 != ~end~0.offset);~len~0 := 0bv32;call #t~mem18.base, #t~mem18.offset := read~$Pointer$(~end~0.base, ~bvadd32(4bv32, ~end~0.offset), 4bv32);~inner~0.base, ~inner~0.offset := #t~mem18.base, #t~mem18.offset;havoc #t~mem18.base, #t~mem18.offset; {3506#(= main_~len~0 (_ bv0 32))} is VALID [2018-11-14 18:15:14,048 INFO L273 TraceCheckUtils]: 23: Hoare triple {3506#(= main_~len~0 (_ bv0 32))} assume true; {3506#(= main_~len~0 (_ bv0 32))} is VALID [2018-11-14 18:15:14,049 INFO L273 TraceCheckUtils]: 24: Hoare triple {3506#(= main_~len~0 (_ bv0 32))} assume !(0bv32 != ~inner~0.base || 0bv32 != ~inner~0.offset); {3506#(= main_~len~0 (_ bv0 32))} is VALID [2018-11-14 18:15:14,049 INFO L273 TraceCheckUtils]: 25: Hoare triple {3506#(= main_~len~0 (_ bv0 32))} assume true; {3506#(= main_~len~0 (_ bv0 32))} is VALID [2018-11-14 18:15:14,049 INFO L273 TraceCheckUtils]: 26: Hoare triple {3506#(= main_~len~0 (_ bv0 32))} assume !~bvsle32(~len~0, 1bv32); {3436#false} is VALID [2018-11-14 18:15:14,050 INFO L273 TraceCheckUtils]: 27: Hoare triple {3436#false} assume !false; {3436#false} is VALID [2018-11-14 18:15:14,051 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-14 18:15:14,051 INFO L312 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2018-11-14 18:15:14,053 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-14 18:15:14,053 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-14 18:15:14,053 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 28 [2018-11-14 18:15:14,053 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-14 18:15:14,054 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states. [2018-11-14 18:15:14,185 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 28 edges. 28 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 18:15:14,185 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-14 18:15:14,185 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-14 18:15:14,185 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-14 18:15:14,186 INFO L87 Difference]: Start difference. First operand 82 states and 92 transitions. Second operand 3 states. [2018-11-14 18:15:14,511 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 18:15:14,511 INFO L93 Difference]: Finished difference Result 159 states and 179 transitions. [2018-11-14 18:15:14,511 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-14 18:15:14,512 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 28 [2018-11-14 18:15:14,512 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-14 18:15:14,512 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2018-11-14 18:15:14,515 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 177 transitions. [2018-11-14 18:15:14,515 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2018-11-14 18:15:14,517 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 177 transitions. [2018-11-14 18:15:14,518 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 177 transitions. [2018-11-14 18:15:14,869 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 177 edges. 177 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 18:15:14,872 INFO L225 Difference]: With dead ends: 159 [2018-11-14 18:15:14,872 INFO L226 Difference]: Without dead ends: 111 [2018-11-14 18:15:14,873 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 27 GetRequests, 26 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-14 18:15:14,873 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 111 states. [2018-11-14 18:15:14,924 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 111 to 87. [2018-11-14 18:15:14,924 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-14 18:15:14,924 INFO L82 GeneralOperation]: Start isEquivalent. First operand 111 states. Second operand 87 states. [2018-11-14 18:15:14,924 INFO L74 IsIncluded]: Start isIncluded. First operand 111 states. Second operand 87 states. [2018-11-14 18:15:14,924 INFO L87 Difference]: Start difference. First operand 111 states. Second operand 87 states. [2018-11-14 18:15:14,928 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 18:15:14,928 INFO L93 Difference]: Finished difference Result 111 states and 124 transitions. [2018-11-14 18:15:14,928 INFO L276 IsEmpty]: Start isEmpty. Operand 111 states and 124 transitions. [2018-11-14 18:15:14,929 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 18:15:14,929 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 18:15:14,929 INFO L74 IsIncluded]: Start isIncluded. First operand 87 states. Second operand 111 states. [2018-11-14 18:15:14,929 INFO L87 Difference]: Start difference. First operand 87 states. Second operand 111 states. [2018-11-14 18:15:14,932 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 18:15:14,932 INFO L93 Difference]: Finished difference Result 111 states and 124 transitions. [2018-11-14 18:15:14,932 INFO L276 IsEmpty]: Start isEmpty. Operand 111 states and 124 transitions. [2018-11-14 18:15:14,933 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 18:15:14,933 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 18:15:14,933 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-14 18:15:14,933 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-14 18:15:14,933 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 87 states. [2018-11-14 18:15:14,936 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 87 states to 87 states and 98 transitions. [2018-11-14 18:15:14,936 INFO L78 Accepts]: Start accepts. Automaton has 87 states and 98 transitions. Word has length 28 [2018-11-14 18:15:14,936 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-14 18:15:14,936 INFO L480 AbstractCegarLoop]: Abstraction has 87 states and 98 transitions. [2018-11-14 18:15:14,936 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-14 18:15:14,936 INFO L276 IsEmpty]: Start isEmpty. Operand 87 states and 98 transitions. [2018-11-14 18:15:14,937 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 30 [2018-11-14 18:15:14,937 INFO L367 BasicCegarLoop]: Found error trace [2018-11-14 18:15:14,937 INFO L375 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-14 18:15:14,938 INFO L423 AbstractCegarLoop]: === Iteration 9 === [mainErr8ASSERT_VIOLATIONERROR_FUNCTION, mainErr10ASSERT_VIOLATIONERROR_FUNCTION, mainErr11ASSERT_VIOLATIONERROR_FUNCTION, mainErr1ASSERT_VIOLATIONERROR_FUNCTION, mainErr5ASSERT_VIOLATIONERROR_FUNCTION, mainErr7ASSERT_VIOLATIONERROR_FUNCTION, mainErr9ASSERT_VIOLATIONERROR_FUNCTION, mainErr12ASSERT_VIOLATIONERROR_FUNCTION, mainErr2ASSERT_VIOLATIONERROR_FUNCTION, mainErr3ASSERT_VIOLATIONERROR_FUNCTION, mainErr0ASSERT_VIOLATIONERROR_FUNCTION, mainErr4ASSERT_VIOLATIONERROR_FUNCTION, mainErr6ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-14 18:15:14,938 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-14 18:15:14,938 INFO L82 PathProgramCache]: Analyzing trace with hash 1740457795, now seen corresponding path program 1 times [2018-11-14 18:15:14,938 INFO L223 ckRefinementStrategy]: Switched to mode CVC4_FPBP [2018-11-14 18:15:14,938 INFO L69 tionRefinementEngine]: Using refinement strategy WolfRefinementStrategy No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/cvc4nyu Starting monitored process 10 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 10 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk [2018-11-14 18:15:14,955 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-14 18:15:14,981 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-14 18:15:14,995 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-14 18:15:14,996 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-14 18:15:15,077 INFO L256 TraceCheckUtils]: 0: Hoare triple {4014#true} call ULTIMATE.init(); {4014#true} is VALID [2018-11-14 18:15:15,077 INFO L273 TraceCheckUtils]: 1: Hoare triple {4014#true} #NULL.base, #NULL.offset := 0bv32, 0bv32;#valid := #valid[0bv32 := 0bv1]; {4014#true} is VALID [2018-11-14 18:15:15,077 INFO L273 TraceCheckUtils]: 2: Hoare triple {4014#true} assume true; {4014#true} is VALID [2018-11-14 18:15:15,078 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {4014#true} {4014#true} #358#return; {4014#true} is VALID [2018-11-14 18:15:15,078 INFO L256 TraceCheckUtils]: 4: Hoare triple {4014#true} call #t~ret28 := main(); {4014#true} is VALID [2018-11-14 18:15:15,078 INFO L273 TraceCheckUtils]: 5: Hoare triple {4014#true} call #t~malloc0.base, #t~malloc0.offset := #Ultimate.alloc(8bv32);~list~0.base, ~list~0.offset := #t~malloc0.base, #t~malloc0.offset;call write~$Pointer$(0bv32, 0bv32, ~list~0.base, ~list~0.offset, 4bv32); {4014#true} is VALID [2018-11-14 18:15:15,078 INFO L273 TraceCheckUtils]: 6: Hoare triple {4014#true} assume true; {4014#true} is VALID [2018-11-14 18:15:15,078 INFO L273 TraceCheckUtils]: 7: Hoare triple {4014#true} assume !!(~list~0.base != 0bv32 || ~list~0.offset != 0bv32); {4014#true} is VALID [2018-11-14 18:15:15,078 INFO L273 TraceCheckUtils]: 8: Hoare triple {4014#true} assume true; {4014#true} is VALID [2018-11-14 18:15:15,079 INFO L273 TraceCheckUtils]: 9: Hoare triple {4014#true} assume #t~nondet1 != 0bv32;havoc #t~nondet1;call write~$Pointer$(0bv32, 0bv32, ~list~0.base, ~bvadd32(4bv32, ~list~0.offset), 4bv32); {4014#true} is VALID [2018-11-14 18:15:15,079 INFO L273 TraceCheckUtils]: 10: Hoare triple {4014#true} assume true;call #t~mem5.base, #t~mem5.offset := read~$Pointer$(~list~0.base, ~bvadd32(4bv32, ~list~0.offset), 4bv32);#t~short7 := #t~mem5.base != 0bv32 || #t~mem5.offset != 0bv32; {4014#true} is VALID [2018-11-14 18:15:15,079 INFO L273 TraceCheckUtils]: 11: Hoare triple {4014#true} assume #t~short7; {4014#true} is VALID [2018-11-14 18:15:15,079 INFO L273 TraceCheckUtils]: 12: Hoare triple {4014#true} assume !!#t~short7;havoc #t~mem5.base, #t~mem5.offset;havoc #t~mem6.base, #t~mem6.offset;havoc #t~short7; {4014#true} is VALID [2018-11-14 18:15:15,079 INFO L273 TraceCheckUtils]: 13: Hoare triple {4014#true} assume true; {4014#true} is VALID [2018-11-14 18:15:15,079 INFO L273 TraceCheckUtils]: 14: Hoare triple {4014#true} ~end~0.base, ~end~0.offset := ~list~0.base, ~list~0.offset; {4014#true} is VALID [2018-11-14 18:15:15,080 INFO L273 TraceCheckUtils]: 15: Hoare triple {4014#true} assume true; {4014#true} is VALID [2018-11-14 18:15:15,080 INFO L273 TraceCheckUtils]: 16: Hoare triple {4014#true} assume !(#t~nondet8 != 0bv32);havoc #t~nondet8; {4014#true} is VALID [2018-11-14 18:15:15,080 INFO L273 TraceCheckUtils]: 17: Hoare triple {4014#true} ~end~0.base, ~end~0.offset := 0bv32, 0bv32;~end~0.base, ~end~0.offset := ~list~0.base, ~list~0.offset; {4014#true} is VALID [2018-11-14 18:15:15,080 INFO L273 TraceCheckUtils]: 18: Hoare triple {4014#true} assume true; {4014#true} is VALID [2018-11-14 18:15:15,080 INFO L273 TraceCheckUtils]: 19: Hoare triple {4014#true} assume !!(0bv32 != ~end~0.base || 0bv32 != ~end~0.offset); {4014#true} is VALID [2018-11-14 18:15:15,081 INFO L273 TraceCheckUtils]: 20: Hoare triple {4014#true} assume true; {4014#true} is VALID [2018-11-14 18:15:15,081 INFO L273 TraceCheckUtils]: 21: Hoare triple {4014#true} assume true; {4014#true} is VALID [2018-11-14 18:15:15,081 INFO L273 TraceCheckUtils]: 22: Hoare triple {4014#true} assume !!(0bv32 != ~end~0.base || 0bv32 != ~end~0.offset);~len~0 := 0bv32;call #t~mem18.base, #t~mem18.offset := read~$Pointer$(~end~0.base, ~bvadd32(4bv32, ~end~0.offset), 4bv32);~inner~0.base, ~inner~0.offset := #t~mem18.base, #t~mem18.offset;havoc #t~mem18.base, #t~mem18.offset; {4014#true} is VALID [2018-11-14 18:15:15,081 INFO L273 TraceCheckUtils]: 23: Hoare triple {4014#true} assume true; {4014#true} is VALID [2018-11-14 18:15:15,086 INFO L273 TraceCheckUtils]: 24: Hoare triple {4014#true} assume !!(0bv32 != ~inner~0.base || 0bv32 != ~inner~0.offset); {4091#(or (not (= (_ bv0 32) main_~inner~0.offset)) (not (= main_~inner~0.base (_ bv0 32))))} is VALID [2018-11-14 18:15:15,088 INFO L273 TraceCheckUtils]: 25: Hoare triple {4091#(or (not (= (_ bv0 32) main_~inner~0.offset)) (not (= main_~inner~0.base (_ bv0 32))))} assume ~len~0 == 0bv32;~len~0 := 1bv32; {4091#(or (not (= (_ bv0 32) main_~inner~0.offset)) (not (= main_~inner~0.base (_ bv0 32))))} is VALID [2018-11-14 18:15:15,096 INFO L273 TraceCheckUtils]: 26: Hoare triple {4091#(or (not (= (_ bv0 32) main_~inner~0.offset)) (not (= main_~inner~0.base (_ bv0 32))))} assume true; {4091#(or (not (= (_ bv0 32) main_~inner~0.offset)) (not (= main_~inner~0.base (_ bv0 32))))} is VALID [2018-11-14 18:15:15,099 INFO L273 TraceCheckUtils]: 27: Hoare triple {4091#(or (not (= (_ bv0 32) main_~inner~0.offset)) (not (= main_~inner~0.base (_ bv0 32))))} assume !(0bv32 != ~inner~0.base || 0bv32 != ~inner~0.offset); {4015#false} is VALID [2018-11-14 18:15:15,099 INFO L273 TraceCheckUtils]: 28: Hoare triple {4015#false} assume !false; {4015#false} is VALID [2018-11-14 18:15:15,101 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-14 18:15:15,101 INFO L312 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2018-11-14 18:15:15,105 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-14 18:15:15,105 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-14 18:15:15,105 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 29 [2018-11-14 18:15:15,106 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-14 18:15:15,106 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states. [2018-11-14 18:15:15,181 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 29 edges. 29 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 18:15:15,181 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-14 18:15:15,181 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-14 18:15:15,181 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-14 18:15:15,182 INFO L87 Difference]: Start difference. First operand 87 states and 98 transitions. Second operand 3 states. [2018-11-14 18:15:15,489 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 18:15:15,489 INFO L93 Difference]: Finished difference Result 87 states and 98 transitions. [2018-11-14 18:15:15,490 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-14 18:15:15,490 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 29 [2018-11-14 18:15:15,490 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-14 18:15:15,490 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2018-11-14 18:15:15,492 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 90 transitions. [2018-11-14 18:15:15,492 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2018-11-14 18:15:15,493 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 90 transitions. [2018-11-14 18:15:15,493 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 90 transitions. [2018-11-14 18:15:15,609 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 90 edges. 90 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 18:15:15,611 INFO L225 Difference]: With dead ends: 87 [2018-11-14 18:15:15,611 INFO L226 Difference]: Without dead ends: 85 [2018-11-14 18:15:15,612 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 28 GetRequests, 27 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-14 18:15:15,612 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 85 states. [2018-11-14 18:15:15,629 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 85 to 85. [2018-11-14 18:15:15,629 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-14 18:15:15,629 INFO L82 GeneralOperation]: Start isEquivalent. First operand 85 states. Second operand 85 states. [2018-11-14 18:15:15,629 INFO L74 IsIncluded]: Start isIncluded. First operand 85 states. Second operand 85 states. [2018-11-14 18:15:15,629 INFO L87 Difference]: Start difference. First operand 85 states. Second operand 85 states. [2018-11-14 18:15:15,633 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 18:15:15,633 INFO L93 Difference]: Finished difference Result 85 states and 96 transitions. [2018-11-14 18:15:15,634 INFO L276 IsEmpty]: Start isEmpty. Operand 85 states and 96 transitions. [2018-11-14 18:15:15,634 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 18:15:15,634 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 18:15:15,634 INFO L74 IsIncluded]: Start isIncluded. First operand 85 states. Second operand 85 states. [2018-11-14 18:15:15,634 INFO L87 Difference]: Start difference. First operand 85 states. Second operand 85 states. [2018-11-14 18:15:15,637 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 18:15:15,637 INFO L93 Difference]: Finished difference Result 85 states and 96 transitions. [2018-11-14 18:15:15,637 INFO L276 IsEmpty]: Start isEmpty. Operand 85 states and 96 transitions. [2018-11-14 18:15:15,638 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 18:15:15,638 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 18:15:15,638 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-14 18:15:15,638 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-14 18:15:15,638 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 85 states. [2018-11-14 18:15:15,640 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 85 states to 85 states and 96 transitions. [2018-11-14 18:15:15,641 INFO L78 Accepts]: Start accepts. Automaton has 85 states and 96 transitions. Word has length 29 [2018-11-14 18:15:15,641 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-14 18:15:15,641 INFO L480 AbstractCegarLoop]: Abstraction has 85 states and 96 transitions. [2018-11-14 18:15:15,641 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-14 18:15:15,641 INFO L276 IsEmpty]: Start isEmpty. Operand 85 states and 96 transitions. [2018-11-14 18:15:15,642 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2018-11-14 18:15:15,642 INFO L367 BasicCegarLoop]: Found error trace [2018-11-14 18:15:15,642 INFO L375 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-14 18:15:15,643 INFO L423 AbstractCegarLoop]: === Iteration 10 === [mainErr8ASSERT_VIOLATIONERROR_FUNCTION, mainErr10ASSERT_VIOLATIONERROR_FUNCTION, mainErr11ASSERT_VIOLATIONERROR_FUNCTION, mainErr1ASSERT_VIOLATIONERROR_FUNCTION, mainErr5ASSERT_VIOLATIONERROR_FUNCTION, mainErr7ASSERT_VIOLATIONERROR_FUNCTION, mainErr9ASSERT_VIOLATIONERROR_FUNCTION, mainErr12ASSERT_VIOLATIONERROR_FUNCTION, mainErr2ASSERT_VIOLATIONERROR_FUNCTION, mainErr3ASSERT_VIOLATIONERROR_FUNCTION, mainErr0ASSERT_VIOLATIONERROR_FUNCTION, mainErr4ASSERT_VIOLATIONERROR_FUNCTION, mainErr6ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-14 18:15:15,643 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-14 18:15:15,643 INFO L82 PathProgramCache]: Analyzing trace with hash 1137079816, now seen corresponding path program 1 times [2018-11-14 18:15:15,643 INFO L223 ckRefinementStrategy]: Switched to mode CVC4_FPBP [2018-11-14 18:15:15,643 INFO L69 tionRefinementEngine]: Using refinement strategy WolfRefinementStrategy No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/cvc4nyu Starting monitored process 11 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 11 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk [2018-11-14 18:15:15,660 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-14 18:15:15,696 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-14 18:15:15,714 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-14 18:15:15,715 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-14 18:15:15,779 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 10 [2018-11-14 18:15:15,788 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 9 [2018-11-14 18:15:15,789 INFO L267 ElimStorePlain]: Start of recursive call 3: End of recursive call: and 1 xjuncts. [2018-11-14 18:15:15,793 INFO L267 ElimStorePlain]: Start of recursive call 2: 1 dim-1 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:15:15,819 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 10 [2018-11-14 18:15:15,825 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 9 [2018-11-14 18:15:15,826 INFO L267 ElimStorePlain]: Start of recursive call 5: End of recursive call: and 1 xjuncts. [2018-11-14 18:15:15,834 INFO L267 ElimStorePlain]: Start of recursive call 4: 1 dim-1 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:15:15,844 INFO L267 ElimStorePlain]: Start of recursive call 1: 2 dim-2 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:15:15,844 INFO L202 ElimStorePlain]: Needed 5 recursive calls to eliminate 2 variables, input treesize:27, output treesize:19 [2018-11-14 18:15:15,903 INFO L256 TraceCheckUtils]: 0: Hoare triple {4467#true} call ULTIMATE.init(); {4467#true} is VALID [2018-11-14 18:15:15,904 INFO L273 TraceCheckUtils]: 1: Hoare triple {4467#true} #NULL.base, #NULL.offset := 0bv32, 0bv32;#valid := #valid[0bv32 := 0bv1]; {4467#true} is VALID [2018-11-14 18:15:15,904 INFO L273 TraceCheckUtils]: 2: Hoare triple {4467#true} assume true; {4467#true} is VALID [2018-11-14 18:15:15,905 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {4467#true} {4467#true} #358#return; {4467#true} is VALID [2018-11-14 18:15:15,905 INFO L256 TraceCheckUtils]: 4: Hoare triple {4467#true} call #t~ret28 := main(); {4467#true} is VALID [2018-11-14 18:15:15,906 INFO L273 TraceCheckUtils]: 5: Hoare triple {4467#true} call #t~malloc0.base, #t~malloc0.offset := #Ultimate.alloc(8bv32);~list~0.base, ~list~0.offset := #t~malloc0.base, #t~malloc0.offset;call write~$Pointer$(0bv32, 0bv32, ~list~0.base, ~list~0.offset, 4bv32); {4467#true} is VALID [2018-11-14 18:15:15,906 INFO L273 TraceCheckUtils]: 6: Hoare triple {4467#true} assume true; {4467#true} is VALID [2018-11-14 18:15:15,907 INFO L273 TraceCheckUtils]: 7: Hoare triple {4467#true} assume !!(~list~0.base != 0bv32 || ~list~0.offset != 0bv32); {4467#true} is VALID [2018-11-14 18:15:15,907 INFO L273 TraceCheckUtils]: 8: Hoare triple {4467#true} assume true; {4467#true} is VALID [2018-11-14 18:15:15,912 INFO L273 TraceCheckUtils]: 9: Hoare triple {4467#true} assume #t~nondet1 != 0bv32;havoc #t~nondet1;call write~$Pointer$(0bv32, 0bv32, ~list~0.base, ~bvadd32(4bv32, ~list~0.offset), 4bv32); {4499#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)))} is VALID [2018-11-14 18:15:15,913 INFO L273 TraceCheckUtils]: 10: Hoare triple {4499#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)))} assume true;call #t~mem5.base, #t~mem5.offset := read~$Pointer$(~list~0.base, ~bvadd32(4bv32, ~list~0.offset), 4bv32);#t~short7 := #t~mem5.base != 0bv32 || #t~mem5.offset != 0bv32; {4503#(not |main_#t~short7|)} is VALID [2018-11-14 18:15:15,913 INFO L273 TraceCheckUtils]: 11: Hoare triple {4503#(not |main_#t~short7|)} assume #t~short7; {4468#false} is VALID [2018-11-14 18:15:15,914 INFO L273 TraceCheckUtils]: 12: Hoare triple {4468#false} assume !!#t~short7;havoc #t~mem5.base, #t~mem5.offset;havoc #t~mem6.base, #t~mem6.offset;havoc #t~short7; {4468#false} is VALID [2018-11-14 18:15:15,914 INFO L273 TraceCheckUtils]: 13: Hoare triple {4468#false} assume true; {4468#false} is VALID [2018-11-14 18:15:15,914 INFO L273 TraceCheckUtils]: 14: Hoare triple {4468#false} ~end~0.base, ~end~0.offset := ~list~0.base, ~list~0.offset; {4468#false} is VALID [2018-11-14 18:15:15,914 INFO L273 TraceCheckUtils]: 15: Hoare triple {4468#false} assume true; {4468#false} is VALID [2018-11-14 18:15:15,915 INFO L273 TraceCheckUtils]: 16: Hoare triple {4468#false} assume !(#t~nondet8 != 0bv32);havoc #t~nondet8; {4468#false} is VALID [2018-11-14 18:15:15,915 INFO L273 TraceCheckUtils]: 17: Hoare triple {4468#false} ~end~0.base, ~end~0.offset := 0bv32, 0bv32;~end~0.base, ~end~0.offset := ~list~0.base, ~list~0.offset; {4468#false} is VALID [2018-11-14 18:15:15,915 INFO L273 TraceCheckUtils]: 18: Hoare triple {4468#false} assume true; {4468#false} is VALID [2018-11-14 18:15:15,916 INFO L273 TraceCheckUtils]: 19: Hoare triple {4468#false} assume !!(0bv32 != ~end~0.base || 0bv32 != ~end~0.offset); {4468#false} is VALID [2018-11-14 18:15:15,916 INFO L273 TraceCheckUtils]: 20: Hoare triple {4468#false} assume true; {4468#false} is VALID [2018-11-14 18:15:15,916 INFO L273 TraceCheckUtils]: 21: Hoare triple {4468#false} assume true; {4468#false} is VALID [2018-11-14 18:15:15,916 INFO L273 TraceCheckUtils]: 22: Hoare triple {4468#false} assume !!(0bv32 != ~end~0.base || 0bv32 != ~end~0.offset);~len~0 := 0bv32;call #t~mem18.base, #t~mem18.offset := read~$Pointer$(~end~0.base, ~bvadd32(4bv32, ~end~0.offset), 4bv32);~inner~0.base, ~inner~0.offset := #t~mem18.base, #t~mem18.offset;havoc #t~mem18.base, #t~mem18.offset; {4468#false} is VALID [2018-11-14 18:15:15,917 INFO L273 TraceCheckUtils]: 23: Hoare triple {4468#false} assume true; {4468#false} is VALID [2018-11-14 18:15:15,917 INFO L273 TraceCheckUtils]: 24: Hoare triple {4468#false} assume !!(0bv32 != ~inner~0.base || 0bv32 != ~inner~0.offset); {4468#false} is VALID [2018-11-14 18:15:15,917 INFO L273 TraceCheckUtils]: 25: Hoare triple {4468#false} assume ~len~0 == 0bv32;~len~0 := 1bv32; {4468#false} is VALID [2018-11-14 18:15:15,917 INFO L273 TraceCheckUtils]: 26: Hoare triple {4468#false} assume true; {4468#false} is VALID [2018-11-14 18:15:15,918 INFO L273 TraceCheckUtils]: 27: Hoare triple {4468#false} assume !!(0bv32 != ~inner~0.base || 0bv32 != ~inner~0.offset); {4468#false} is VALID [2018-11-14 18:15:15,918 INFO L273 TraceCheckUtils]: 28: Hoare triple {4468#false} assume true; {4468#false} is VALID [2018-11-14 18:15:15,918 INFO L273 TraceCheckUtils]: 29: Hoare triple {4468#false} assume true;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~inner~0.base, ~bvadd32(4bv32, ~inner~0.offset), 4bv32); {4468#false} is VALID [2018-11-14 18:15:15,918 INFO L273 TraceCheckUtils]: 30: Hoare triple {4468#false} assume !(0bv32 == #t~mem19.base && 0bv32 == #t~mem19.offset);havoc #t~mem19.base, #t~mem19.offset; {4468#false} is VALID [2018-11-14 18:15:15,919 INFO L273 TraceCheckUtils]: 31: Hoare triple {4468#false} assume !false; {4468#false} is VALID [2018-11-14 18:15:15,921 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-14 18:15:15,921 INFO L312 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [MP cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk (11)] Exception during sending of exit command (exit): Broken pipe [2018-11-14 18:15:15,925 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-14 18:15:15,925 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-14 18:15:15,926 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 32 [2018-11-14 18:15:15,926 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-14 18:15:15,926 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-14 18:15:15,962 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 32 edges. 32 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 18:15:15,962 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-14 18:15:15,962 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-14 18:15:15,962 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-14 18:15:15,963 INFO L87 Difference]: Start difference. First operand 85 states and 96 transitions. Second operand 4 states. [2018-11-14 18:15:17,260 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 18:15:17,260 INFO L93 Difference]: Finished difference Result 222 states and 250 transitions. [2018-11-14 18:15:17,260 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-14 18:15:17,260 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 32 [2018-11-14 18:15:17,260 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-14 18:15:17,260 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-14 18:15:17,263 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 226 transitions. [2018-11-14 18:15:17,263 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-14 18:15:17,265 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 226 transitions. [2018-11-14 18:15:17,266 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 226 transitions. [2018-11-14 18:15:17,583 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 226 edges. 226 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 18:15:17,586 INFO L225 Difference]: With dead ends: 222 [2018-11-14 18:15:17,586 INFO L226 Difference]: Without dead ends: 149 [2018-11-14 18:15:17,586 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 32 GetRequests, 29 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-14 18:15:17,587 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 149 states. [2018-11-14 18:15:17,614 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 149 to 87. [2018-11-14 18:15:17,615 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-14 18:15:17,615 INFO L82 GeneralOperation]: Start isEquivalent. First operand 149 states. Second operand 87 states. [2018-11-14 18:15:17,615 INFO L74 IsIncluded]: Start isIncluded. First operand 149 states. Second operand 87 states. [2018-11-14 18:15:17,615 INFO L87 Difference]: Start difference. First operand 149 states. Second operand 87 states. [2018-11-14 18:15:17,618 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 18:15:17,618 INFO L93 Difference]: Finished difference Result 149 states and 167 transitions. [2018-11-14 18:15:17,618 INFO L276 IsEmpty]: Start isEmpty. Operand 149 states and 167 transitions. [2018-11-14 18:15:17,618 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 18:15:17,618 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 18:15:17,619 INFO L74 IsIncluded]: Start isIncluded. First operand 87 states. Second operand 149 states. [2018-11-14 18:15:17,619 INFO L87 Difference]: Start difference. First operand 87 states. Second operand 149 states. [2018-11-14 18:15:17,622 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 18:15:17,622 INFO L93 Difference]: Finished difference Result 149 states and 167 transitions. [2018-11-14 18:15:17,622 INFO L276 IsEmpty]: Start isEmpty. Operand 149 states and 167 transitions. [2018-11-14 18:15:17,623 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 18:15:17,623 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 18:15:17,623 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-14 18:15:17,623 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-14 18:15:17,623 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 87 states. [2018-11-14 18:15:17,625 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 87 states to 87 states and 98 transitions. [2018-11-14 18:15:17,625 INFO L78 Accepts]: Start accepts. Automaton has 87 states and 98 transitions. Word has length 32 [2018-11-14 18:15:17,625 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-14 18:15:17,625 INFO L480 AbstractCegarLoop]: Abstraction has 87 states and 98 transitions. [2018-11-14 18:15:17,626 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-14 18:15:17,626 INFO L276 IsEmpty]: Start isEmpty. Operand 87 states and 98 transitions. [2018-11-14 18:15:17,626 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2018-11-14 18:15:17,626 INFO L367 BasicCegarLoop]: Found error trace [2018-11-14 18:15:17,626 INFO L375 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-14 18:15:17,627 INFO L423 AbstractCegarLoop]: === Iteration 11 === [mainErr8ASSERT_VIOLATIONERROR_FUNCTION, mainErr10ASSERT_VIOLATIONERROR_FUNCTION, mainErr11ASSERT_VIOLATIONERROR_FUNCTION, mainErr1ASSERT_VIOLATIONERROR_FUNCTION, mainErr5ASSERT_VIOLATIONERROR_FUNCTION, mainErr7ASSERT_VIOLATIONERROR_FUNCTION, mainErr9ASSERT_VIOLATIONERROR_FUNCTION, mainErr12ASSERT_VIOLATIONERROR_FUNCTION, mainErr2ASSERT_VIOLATIONERROR_FUNCTION, mainErr3ASSERT_VIOLATIONERROR_FUNCTION, mainErr0ASSERT_VIOLATIONERROR_FUNCTION, mainErr4ASSERT_VIOLATIONERROR_FUNCTION, mainErr6ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-14 18:15:17,627 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-14 18:15:17,627 INFO L82 PathProgramCache]: Analyzing trace with hash 1559781642, now seen corresponding path program 1 times [2018-11-14 18:15:17,628 INFO L223 ckRefinementStrategy]: Switched to mode CVC4_FPBP [2018-11-14 18:15:17,628 INFO L69 tionRefinementEngine]: Using refinement strategy WolfRefinementStrategy No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/cvc4nyu Starting monitored process 12 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 12 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk [2018-11-14 18:15:17,657 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-14 18:15:17,690 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-14 18:15:17,703 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-14 18:15:17,704 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-14 18:15:17,782 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 10 [2018-11-14 18:15:17,788 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 9 [2018-11-14 18:15:17,789 INFO L267 ElimStorePlain]: Start of recursive call 3: End of recursive call: and 1 xjuncts. [2018-11-14 18:15:17,793 INFO L267 ElimStorePlain]: Start of recursive call 2: 1 dim-1 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:15:17,813 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 10 [2018-11-14 18:15:17,817 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 9 [2018-11-14 18:15:17,819 INFO L267 ElimStorePlain]: Start of recursive call 5: End of recursive call: and 1 xjuncts. [2018-11-14 18:15:17,822 INFO L267 ElimStorePlain]: Start of recursive call 4: 1 dim-1 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:15:17,834 INFO L267 ElimStorePlain]: Start of recursive call 1: 2 dim-2 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:15:17,834 INFO L202 ElimStorePlain]: Needed 5 recursive calls to eliminate 2 variables, input treesize:30, output treesize:22 [2018-11-14 18:15:17,985 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 11 [2018-11-14 18:15:17,991 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 3 [2018-11-14 18:15:17,992 INFO L267 ElimStorePlain]: Start of recursive call 3: End of recursive call: and 1 xjuncts. [2018-11-14 18:15:17,994 INFO L267 ElimStorePlain]: Start of recursive call 2: 1 dim-1 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:15:18,021 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 11 [2018-11-14 18:15:18,065 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 3 [2018-11-14 18:15:18,066 INFO L267 ElimStorePlain]: Start of recursive call 5: End of recursive call: and 1 xjuncts. [2018-11-14 18:15:18,070 INFO L267 ElimStorePlain]: Start of recursive call 4: 1 dim-1 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:15:18,074 INFO L267 ElimStorePlain]: Start of recursive call 1: 1 dim-0 vars, 2 dim-2 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:15:18,074 INFO L202 ElimStorePlain]: Needed 5 recursive calls to eliminate 3 variables, input treesize:29, output treesize:7 [2018-11-14 18:15:18,080 WARN L383 uantifierElimination]: Trying to double check SDD result, but SMT solver's response was UNKNOWN. [2018-11-14 18:15:18,122 INFO L256 TraceCheckUtils]: 0: Hoare triple {5208#true} call ULTIMATE.init(); {5208#true} is VALID [2018-11-14 18:15:18,123 INFO L273 TraceCheckUtils]: 1: Hoare triple {5208#true} #NULL.base, #NULL.offset := 0bv32, 0bv32;#valid := #valid[0bv32 := 0bv1]; {5208#true} is VALID [2018-11-14 18:15:18,123 INFO L273 TraceCheckUtils]: 2: Hoare triple {5208#true} assume true; {5208#true} is VALID [2018-11-14 18:15:18,123 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {5208#true} {5208#true} #358#return; {5208#true} is VALID [2018-11-14 18:15:18,123 INFO L256 TraceCheckUtils]: 4: Hoare triple {5208#true} call #t~ret28 := main(); {5208#true} is VALID [2018-11-14 18:15:18,124 INFO L273 TraceCheckUtils]: 5: Hoare triple {5208#true} call #t~malloc0.base, #t~malloc0.offset := #Ultimate.alloc(8bv32);~list~0.base, ~list~0.offset := #t~malloc0.base, #t~malloc0.offset;call write~$Pointer$(0bv32, 0bv32, ~list~0.base, ~list~0.offset, 4bv32); {5228#(= main_~list~0.offset (_ bv0 32))} is VALID [2018-11-14 18:15:18,124 INFO L273 TraceCheckUtils]: 6: Hoare triple {5228#(= main_~list~0.offset (_ bv0 32))} assume true; {5228#(= main_~list~0.offset (_ bv0 32))} is VALID [2018-11-14 18:15:18,126 INFO L273 TraceCheckUtils]: 7: Hoare triple {5228#(= main_~list~0.offset (_ bv0 32))} assume !!(~list~0.base != 0bv32 || ~list~0.offset != 0bv32); {5228#(= main_~list~0.offset (_ bv0 32))} is VALID [2018-11-14 18:15:18,126 INFO L273 TraceCheckUtils]: 8: Hoare triple {5228#(= main_~list~0.offset (_ bv0 32))} assume true; {5228#(= main_~list~0.offset (_ bv0 32))} is VALID [2018-11-14 18:15:18,127 INFO L273 TraceCheckUtils]: 9: Hoare triple {5228#(= main_~list~0.offset (_ bv0 32))} assume #t~nondet1 != 0bv32;havoc #t~nondet1;call write~$Pointer$(0bv32, 0bv32, ~list~0.base, ~bvadd32(4bv32, ~list~0.offset), 4bv32); {5241#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:15:18,128 INFO L273 TraceCheckUtils]: 10: Hoare triple {5241#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset (_ bv0 32)))} assume true;call #t~mem5.base, #t~mem5.offset := read~$Pointer$(~list~0.base, ~bvadd32(4bv32, ~list~0.offset), 4bv32);#t~short7 := #t~mem5.base != 0bv32 || #t~mem5.offset != 0bv32; {5241#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:15:18,129 INFO L273 TraceCheckUtils]: 11: Hoare triple {5241#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset (_ bv0 32)))} assume !#t~short7;call #t~mem6.base, #t~mem6.offset := read~$Pointer$(~list~0.base, ~bvadd32(4bv32, ~list~0.offset), 4bv32);#t~short7 := #t~mem6.base == 0bv32 && #t~mem6.offset == 0bv32; {5241#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:15:18,129 INFO L273 TraceCheckUtils]: 12: Hoare triple {5241#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset (_ bv0 32)))} assume !!#t~short7;havoc #t~mem5.base, #t~mem5.offset;havoc #t~mem6.base, #t~mem6.offset;havoc #t~short7; {5241#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:15:18,130 INFO L273 TraceCheckUtils]: 13: Hoare triple {5241#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset (_ bv0 32)))} assume true; {5241#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:15:18,131 INFO L273 TraceCheckUtils]: 14: Hoare triple {5241#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset (_ bv0 32)))} ~end~0.base, ~end~0.offset := ~list~0.base, ~list~0.offset; {5241#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:15:18,132 INFO L273 TraceCheckUtils]: 15: Hoare triple {5241#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset (_ bv0 32)))} assume true; {5241#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:15:18,133 INFO L273 TraceCheckUtils]: 16: Hoare triple {5241#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset (_ bv0 32)))} assume !(#t~nondet8 != 0bv32);havoc #t~nondet8; {5241#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:15:18,135 INFO L273 TraceCheckUtils]: 17: Hoare triple {5241#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset (_ bv0 32)))} ~end~0.base, ~end~0.offset := 0bv32, 0bv32;~end~0.base, ~end~0.offset := ~list~0.base, ~list~0.offset; {5266#(and (= main_~end~0.offset (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)))} is VALID [2018-11-14 18:15:18,136 INFO L273 TraceCheckUtils]: 18: Hoare triple {5266#(and (= main_~end~0.offset (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)))} assume true; {5266#(and (= main_~end~0.offset (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)))} is VALID [2018-11-14 18:15:18,137 INFO L273 TraceCheckUtils]: 19: Hoare triple {5266#(and (= main_~end~0.offset (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)))} assume !!(0bv32 != ~end~0.base || 0bv32 != ~end~0.offset); {5266#(and (= main_~end~0.offset (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)))} is VALID [2018-11-14 18:15:18,137 INFO L273 TraceCheckUtils]: 20: Hoare triple {5266#(and (= main_~end~0.offset (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)))} assume true; {5266#(and (= main_~end~0.offset (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)))} is VALID [2018-11-14 18:15:18,138 INFO L273 TraceCheckUtils]: 21: Hoare triple {5266#(and (= main_~end~0.offset (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)))} assume true; {5266#(and (= main_~end~0.offset (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)))} is VALID [2018-11-14 18:15:18,140 INFO L273 TraceCheckUtils]: 22: Hoare triple {5266#(and (= main_~end~0.offset (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)))} assume !!(0bv32 != ~end~0.base || 0bv32 != ~end~0.offset);~len~0 := 0bv32;call #t~mem18.base, #t~mem18.offset := read~$Pointer$(~end~0.base, ~bvadd32(4bv32, ~end~0.offset), 4bv32);~inner~0.base, ~inner~0.offset := #t~mem18.base, #t~mem18.offset;havoc #t~mem18.base, #t~mem18.offset; {5282#(and (= (_ bv0 32) main_~inner~0.offset) (= main_~inner~0.base (_ bv0 32)))} is VALID [2018-11-14 18:15:18,149 INFO L273 TraceCheckUtils]: 23: Hoare triple {5282#(and (= (_ bv0 32) main_~inner~0.offset) (= main_~inner~0.base (_ bv0 32)))} assume true; {5282#(and (= (_ bv0 32) main_~inner~0.offset) (= main_~inner~0.base (_ bv0 32)))} is VALID [2018-11-14 18:15:18,160 INFO L273 TraceCheckUtils]: 24: Hoare triple {5282#(and (= (_ bv0 32) main_~inner~0.offset) (= main_~inner~0.base (_ bv0 32)))} assume !!(0bv32 != ~inner~0.base || 0bv32 != ~inner~0.offset); {5209#false} is VALID [2018-11-14 18:15:18,161 INFO L273 TraceCheckUtils]: 25: Hoare triple {5209#false} assume ~len~0 == 0bv32;~len~0 := 1bv32; {5209#false} is VALID [2018-11-14 18:15:18,161 INFO L273 TraceCheckUtils]: 26: Hoare triple {5209#false} assume true; {5209#false} is VALID [2018-11-14 18:15:18,161 INFO L273 TraceCheckUtils]: 27: Hoare triple {5209#false} assume !!(0bv32 != ~inner~0.base || 0bv32 != ~inner~0.offset); {5209#false} is VALID [2018-11-14 18:15:18,161 INFO L273 TraceCheckUtils]: 28: Hoare triple {5209#false} assume true; {5209#false} is VALID [2018-11-14 18:15:18,161 INFO L273 TraceCheckUtils]: 29: Hoare triple {5209#false} assume true;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~inner~0.base, ~bvadd32(4bv32, ~inner~0.offset), 4bv32); {5209#false} is VALID [2018-11-14 18:15:18,162 INFO L273 TraceCheckUtils]: 30: Hoare triple {5209#false} assume !(0bv32 == #t~mem19.base && 0bv32 == #t~mem19.offset);havoc #t~mem19.base, #t~mem19.offset; {5209#false} is VALID [2018-11-14 18:15:18,162 INFO L273 TraceCheckUtils]: 31: Hoare triple {5209#false} assume !false; {5209#false} is VALID [2018-11-14 18:15:18,166 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-14 18:15:18,166 INFO L312 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2018-11-14 18:15:18,171 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-14 18:15:18,171 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2018-11-14 18:15:18,172 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 32 [2018-11-14 18:15:18,172 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-14 18:15:18,172 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 6 states. [2018-11-14 18:15:18,234 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 32 edges. 32 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 18:15:18,234 INFO L459 AbstractCegarLoop]: Interpolant automaton has 6 states [2018-11-14 18:15:18,234 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2018-11-14 18:15:18,235 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2018-11-14 18:15:18,235 INFO L87 Difference]: Start difference. First operand 87 states and 98 transitions. Second operand 6 states. [2018-11-14 18:15:20,391 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 18:15:20,391 INFO L93 Difference]: Finished difference Result 240 states and 269 transitions. [2018-11-14 18:15:20,391 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2018-11-14 18:15:20,392 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 32 [2018-11-14 18:15:20,392 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-14 18:15:20,392 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 6 states. [2018-11-14 18:15:20,394 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9 states to 9 states and 251 transitions. [2018-11-14 18:15:20,394 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 6 states. [2018-11-14 18:15:20,396 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9 states to 9 states and 251 transitions. [2018-11-14 18:15:20,397 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 9 states and 251 transitions. [2018-11-14 18:15:20,799 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 251 edges. 251 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 18:15:20,804 INFO L225 Difference]: With dead ends: 240 [2018-11-14 18:15:20,804 INFO L226 Difference]: Without dead ends: 189 [2018-11-14 18:15:20,805 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 35 GetRequests, 27 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=34, Invalid=56, Unknown=0, NotChecked=0, Total=90 [2018-11-14 18:15:20,805 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 189 states. [2018-11-14 18:15:20,959 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 189 to 113. [2018-11-14 18:15:20,959 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-14 18:15:20,959 INFO L82 GeneralOperation]: Start isEquivalent. First operand 189 states. Second operand 113 states. [2018-11-14 18:15:20,960 INFO L74 IsIncluded]: Start isIncluded. First operand 189 states. Second operand 113 states. [2018-11-14 18:15:20,960 INFO L87 Difference]: Start difference. First operand 189 states. Second operand 113 states. [2018-11-14 18:15:20,965 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 18:15:20,965 INFO L93 Difference]: Finished difference Result 189 states and 211 transitions. [2018-11-14 18:15:20,965 INFO L276 IsEmpty]: Start isEmpty. Operand 189 states and 211 transitions. [2018-11-14 18:15:20,966 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 18:15:20,966 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 18:15:20,967 INFO L74 IsIncluded]: Start isIncluded. First operand 113 states. Second operand 189 states. [2018-11-14 18:15:20,967 INFO L87 Difference]: Start difference. First operand 113 states. Second operand 189 states. [2018-11-14 18:15:20,971 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 18:15:20,972 INFO L93 Difference]: Finished difference Result 189 states and 211 transitions. [2018-11-14 18:15:20,972 INFO L276 IsEmpty]: Start isEmpty. Operand 189 states and 211 transitions. [2018-11-14 18:15:20,972 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 18:15:20,973 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 18:15:20,973 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-14 18:15:20,973 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-14 18:15:20,973 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 113 states. [2018-11-14 18:15:20,975 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 113 states to 113 states and 128 transitions. [2018-11-14 18:15:20,976 INFO L78 Accepts]: Start accepts. Automaton has 113 states and 128 transitions. Word has length 32 [2018-11-14 18:15:20,976 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-14 18:15:20,976 INFO L480 AbstractCegarLoop]: Abstraction has 113 states and 128 transitions. [2018-11-14 18:15:20,976 INFO L481 AbstractCegarLoop]: Interpolant automaton has 6 states. [2018-11-14 18:15:20,976 INFO L276 IsEmpty]: Start isEmpty. Operand 113 states and 128 transitions. [2018-11-14 18:15:20,977 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2018-11-14 18:15:20,977 INFO L367 BasicCegarLoop]: Found error trace [2018-11-14 18:15:20,977 INFO L375 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-14 18:15:20,978 INFO L423 AbstractCegarLoop]: === Iteration 12 === [mainErr8ASSERT_VIOLATIONERROR_FUNCTION, mainErr10ASSERT_VIOLATIONERROR_FUNCTION, mainErr11ASSERT_VIOLATIONERROR_FUNCTION, mainErr1ASSERT_VIOLATIONERROR_FUNCTION, mainErr5ASSERT_VIOLATIONERROR_FUNCTION, mainErr7ASSERT_VIOLATIONERROR_FUNCTION, mainErr9ASSERT_VIOLATIONERROR_FUNCTION, mainErr12ASSERT_VIOLATIONERROR_FUNCTION, mainErr2ASSERT_VIOLATIONERROR_FUNCTION, mainErr3ASSERT_VIOLATIONERROR_FUNCTION, mainErr0ASSERT_VIOLATIONERROR_FUNCTION, mainErr4ASSERT_VIOLATIONERROR_FUNCTION, mainErr6ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-14 18:15:20,978 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-14 18:15:20,978 INFO L82 PathProgramCache]: Analyzing trace with hash -668358518, now seen corresponding path program 1 times [2018-11-14 18:15:20,979 INFO L223 ckRefinementStrategy]: Switched to mode CVC4_FPBP [2018-11-14 18:15:20,979 INFO L69 tionRefinementEngine]: Using refinement strategy WolfRefinementStrategy No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/cvc4nyu Starting monitored process 13 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 13 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk [2018-11-14 18:15:21,009 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-14 18:15:21,077 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-14 18:15:21,108 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-14 18:15:21,110 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-14 18:15:21,358 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2018-11-14 18:15:21,380 INFO L267 ElimStorePlain]: Start of recursive call 2: End of recursive call: and 1 xjuncts. [2018-11-14 18:15:21,470 INFO L267 ElimStorePlain]: Start of recursive call 1: 1 dim-1 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:15:21,471 INFO L202 ElimStorePlain]: Needed 2 recursive calls to eliminate 1 variables, input treesize:10, output treesize:9 [2018-11-14 18:15:21,489 WARN L383 uantifierElimination]: Trying to double check SDD result, but SMT solver's response was UNKNOWN. [2018-11-14 18:15:21,852 INFO L700 Elim1Store]: detected not equals via solver [2018-11-14 18:15:21,887 INFO L700 Elim1Store]: detected not equals via solver [2018-11-14 18:15:21,887 INFO L303 Elim1Store]: Index analysis took 136 ms [2018-11-14 18:15:21,889 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 2 disjoint index pairs (out of 1 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 4 [2018-11-14 18:15:21,892 INFO L267 ElimStorePlain]: Start of recursive call 2: End of recursive call: and 1 xjuncts. [2018-11-14 18:15:22,268 INFO L303 Elim1Store]: Index analysis took 154 ms [2018-11-14 18:15:22,270 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 2 new quantified variables, introduced 0 case distinctions, treesize of input 343 treesize of output 233 [2018-11-14 18:15:23,824 WARN L179 SmtUtils]: Spent 1.51 s on a formula simplification that was a NOOP. DAG size: 54 [2018-11-14 18:15:23,835 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 9 [2018-11-14 18:15:23,837 INFO L267 ElimStorePlain]: Start of recursive call 4: End of recursive call: and 1 xjuncts. [2018-11-14 18:15:24,148 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 0 case distinctions, treesize of input 200 treesize of output 196 [2018-11-14 18:15:24,166 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 8 treesize of output 7 [2018-11-14 18:15:24,167 INFO L267 ElimStorePlain]: Start of recursive call 6: End of recursive call: and 1 xjuncts. [2018-11-14 18:15:24,416 INFO L303 Elim1Store]: Index analysis took 125 ms [2018-11-14 18:15:24,417 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 3 select indices, 3 select index equivalence classes, 1 disjoint index pairs (out of 3 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 191 treesize of output 178 [2018-11-14 18:15:24,431 INFO L700 Elim1Store]: detected not equals via solver [2018-11-14 18:15:24,433 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 50 treesize of output 91 [2018-11-14 18:15:24,435 INFO L267 ElimStorePlain]: Start of recursive call 8: End of recursive call: and 1 xjuncts. [2018-11-14 18:15:24,486 INFO L267 ElimStorePlain]: Start of recursive call 7: 1 dim-1 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:15:24,531 INFO L267 ElimStorePlain]: Start of recursive call 5: 1 dim-1 vars, 1 dim-2 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:15:24,573 INFO L267 ElimStorePlain]: Start of recursive call 3: 1 dim-1 vars, 1 dim-2 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:15:24,649 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 2 new quantified variables, introduced 0 case distinctions, treesize of input 159 treesize of output 89 [2018-11-14 18:15:25,520 WARN L179 SmtUtils]: Spent 189.00 ms on a formula simplification. DAG size of input: 43 DAG size of output: 28 [2018-11-14 18:15:25,529 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 9 [2018-11-14 18:15:25,531 INFO L267 ElimStorePlain]: Start of recursive call 10: End of recursive call: and 1 xjuncts. [2018-11-14 18:15:25,607 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 0 case distinctions, treesize of input 57 treesize of output 59 [2018-11-14 18:15:25,613 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 13 [2018-11-14 18:15:25,615 INFO L267 ElimStorePlain]: Start of recursive call 12: End of recursive call: and 1 xjuncts. [2018-11-14 18:15:25,662 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 54 treesize of output 47 [2018-11-14 18:15:25,708 INFO L700 Elim1Store]: detected not equals via solver [2018-11-14 18:15:25,709 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 28 treesize of output 47 [2018-11-14 18:15:25,711 INFO L267 ElimStorePlain]: Start of recursive call 14: End of recursive call: and 1 xjuncts. [2018-11-14 18:15:25,733 INFO L267 ElimStorePlain]: Start of recursive call 13: 1 dim-1 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:15:25,749 INFO L267 ElimStorePlain]: Start of recursive call 11: 1 dim-1 vars, 1 dim-2 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:15:25,765 INFO L267 ElimStorePlain]: Start of recursive call 9: 1 dim-1 vars, 1 dim-2 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:15:25,806 INFO L267 ElimStorePlain]: Start of recursive call 1: 1 dim-0 vars, 1 dim-1 vars, 2 dim-2 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:15:25,806 INFO L202 ElimStorePlain]: Needed 14 recursive calls to eliminate 4 variables, input treesize:356, output treesize:83 [2018-11-14 18:15:26,077 WARN L383 uantifierElimination]: Trying to double check SDD result, but SMT solver's response was UNKNOWN. [2018-11-14 18:15:26,748 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 0 case distinctions, treesize of input 70 treesize of output 52 [2018-11-14 18:15:26,765 INFO L700 Elim1Store]: detected not equals via solver [2018-11-14 18:15:26,766 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 24 treesize of output 12 [2018-11-14 18:15:26,768 INFO L267 ElimStorePlain]: Start of recursive call 3: End of recursive call: and 1 xjuncts. [2018-11-14 18:15:26,789 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 21 treesize of output 11 [2018-11-14 18:15:26,790 INFO L267 ElimStorePlain]: Start of recursive call 4: End of recursive call: and 1 xjuncts. [2018-11-14 18:15:26,798 INFO L267 ElimStorePlain]: Start of recursive call 2: 2 dim-1 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:15:26,822 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 3 new quantified variables, introduced 0 case distinctions, treesize of input 42 treesize of output 27 [2018-11-14 18:15:26,827 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 3 [2018-11-14 18:15:26,830 INFO L267 ElimStorePlain]: Start of recursive call 6: End of recursive call: and 1 xjuncts. [2018-11-14 18:15:26,840 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 4 [2018-11-14 18:15:26,842 INFO L267 ElimStorePlain]: Start of recursive call 7: End of recursive call: and 1 xjuncts. [2018-11-14 18:15:26,845 INFO L267 ElimStorePlain]: Start of recursive call 5: 2 dim-1 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:15:26,850 INFO L267 ElimStorePlain]: Start of recursive call 1: 1 dim-0 vars, 2 dim-2 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:15:26,850 INFO L202 ElimStorePlain]: Needed 7 recursive calls to eliminate 3 variables, input treesize:100, output treesize:7 [2018-11-14 18:15:26,859 WARN L383 uantifierElimination]: Trying to double check SDD result, but SMT solver's response was UNKNOWN. [2018-11-14 18:15:26,881 INFO L256 TraceCheckUtils]: 0: Hoare triple {6087#true} call ULTIMATE.init(); {6087#true} is VALID [2018-11-14 18:15:26,881 INFO L273 TraceCheckUtils]: 1: Hoare triple {6087#true} #NULL.base, #NULL.offset := 0bv32, 0bv32;#valid := #valid[0bv32 := 0bv1]; {6087#true} is VALID [2018-11-14 18:15:26,882 INFO L273 TraceCheckUtils]: 2: Hoare triple {6087#true} assume true; {6087#true} is VALID [2018-11-14 18:15:26,882 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {6087#true} {6087#true} #358#return; {6087#true} is VALID [2018-11-14 18:15:26,882 INFO L256 TraceCheckUtils]: 4: Hoare triple {6087#true} call #t~ret28 := main(); {6087#true} is VALID [2018-11-14 18:15:26,886 INFO L273 TraceCheckUtils]: 5: Hoare triple {6087#true} call #t~malloc0.base, #t~malloc0.offset := #Ultimate.alloc(8bv32);~list~0.base, ~list~0.offset := #t~malloc0.base, #t~malloc0.offset;call write~$Pointer$(0bv32, 0bv32, ~list~0.base, ~list~0.offset, 4bv32); {6107#(and (= (_ bv1 1) (select |#valid| main_~list~0.base)) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:15:26,887 INFO L273 TraceCheckUtils]: 6: Hoare triple {6107#(and (= (_ bv1 1) (select |#valid| main_~list~0.base)) (= main_~list~0.offset (_ bv0 32)))} assume true; {6107#(and (= (_ bv1 1) (select |#valid| main_~list~0.base)) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:15:26,888 INFO L273 TraceCheckUtils]: 7: Hoare triple {6107#(and (= (_ bv1 1) (select |#valid| main_~list~0.base)) (= main_~list~0.offset (_ bv0 32)))} assume !!(~list~0.base != 0bv32 || ~list~0.offset != 0bv32); {6107#(and (= (_ bv1 1) (select |#valid| main_~list~0.base)) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:15:26,888 INFO L273 TraceCheckUtils]: 8: Hoare triple {6107#(and (= (_ bv1 1) (select |#valid| main_~list~0.base)) (= main_~list~0.offset (_ bv0 32)))} assume true; {6107#(and (= (_ bv1 1) (select |#valid| main_~list~0.base)) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:15:26,893 INFO L273 TraceCheckUtils]: 9: Hoare triple {6107#(and (= (_ bv1 1) (select |#valid| main_~list~0.base)) (= main_~list~0.offset (_ bv0 32)))} assume !(#t~nondet1 != 0bv32);havoc #t~nondet1;call #t~malloc2.base, #t~malloc2.offset := #Ultimate.alloc(8bv32);call write~$Pointer$(#t~malloc2.base, #t~malloc2.offset, ~list~0.base, ~bvadd32(4bv32, ~list~0.offset), 4bv32);call #t~mem3.base, #t~mem3.offset := read~$Pointer$(~list~0.base, ~bvadd32(4bv32, ~list~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, #t~mem3.base, #t~mem3.offset, 4bv32);havoc #t~mem3.base, #t~mem3.offset;call #t~mem4.base, #t~mem4.offset := read~$Pointer$(~list~0.base, ~bvadd32(4bv32, ~list~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, #t~mem4.base, ~bvadd32(4bv32, #t~mem4.offset), 4bv32);havoc #t~mem4.base, #t~mem4.offset; {6120#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) main_~list~0.base)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv0 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv4 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv0 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (bvadd (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv4 32)))) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:15:26,895 INFO L273 TraceCheckUtils]: 10: Hoare triple {6120#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) main_~list~0.base)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv0 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv4 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv0 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (bvadd (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv4 32)))) (= main_~list~0.offset (_ bv0 32)))} assume true;call #t~mem5.base, #t~mem5.offset := read~$Pointer$(~list~0.base, ~bvadd32(4bv32, ~list~0.offset), 4bv32);#t~short7 := #t~mem5.base != 0bv32 || #t~mem5.offset != 0bv32; {6120#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) main_~list~0.base)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv0 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv4 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv0 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (bvadd (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv4 32)))) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:15:26,896 INFO L273 TraceCheckUtils]: 11: Hoare triple {6120#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) main_~list~0.base)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv0 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv4 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv0 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (bvadd (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv4 32)))) (= main_~list~0.offset (_ bv0 32)))} assume #t~short7; {6120#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) main_~list~0.base)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv0 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv4 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv0 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (bvadd (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv4 32)))) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:15:26,897 INFO L273 TraceCheckUtils]: 12: Hoare triple {6120#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) main_~list~0.base)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv0 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv4 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv0 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (bvadd (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv4 32)))) (= main_~list~0.offset (_ bv0 32)))} assume !!#t~short7;havoc #t~mem5.base, #t~mem5.offset;havoc #t~mem6.base, #t~mem6.offset;havoc #t~short7; {6120#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) main_~list~0.base)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv0 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv4 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv0 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (bvadd (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv4 32)))) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:15:26,898 INFO L273 TraceCheckUtils]: 13: Hoare triple {6120#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) main_~list~0.base)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv0 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv4 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv0 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (bvadd (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv4 32)))) (= main_~list~0.offset (_ bv0 32)))} assume true; {6120#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) main_~list~0.base)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv0 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv4 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv0 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (bvadd (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv4 32)))) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:15:26,900 INFO L273 TraceCheckUtils]: 14: Hoare triple {6120#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) main_~list~0.base)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv0 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv4 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv0 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (bvadd (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv4 32)))) (= main_~list~0.offset (_ bv0 32)))} ~end~0.base, ~end~0.offset := ~list~0.base, ~list~0.offset; {6120#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) main_~list~0.base)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv0 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv4 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv0 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (bvadd (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv4 32)))) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:15:26,902 INFO L273 TraceCheckUtils]: 15: Hoare triple {6120#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) main_~list~0.base)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv0 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv4 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv0 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (bvadd (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv4 32)))) (= main_~list~0.offset (_ bv0 32)))} assume true; {6120#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) main_~list~0.base)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv0 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv4 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv0 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (bvadd (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv4 32)))) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:15:26,903 INFO L273 TraceCheckUtils]: 16: Hoare triple {6120#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) main_~list~0.base)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv0 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv4 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv0 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (bvadd (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv4 32)))) (= main_~list~0.offset (_ bv0 32)))} assume !(#t~nondet8 != 0bv32);havoc #t~nondet8; {6120#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) main_~list~0.base)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv0 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv4 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv0 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (bvadd (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv4 32)))) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:15:26,906 INFO L273 TraceCheckUtils]: 17: Hoare triple {6120#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) main_~list~0.base)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv0 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv4 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv0 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (bvadd (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv4 32)))) (= main_~list~0.offset (_ bv0 32)))} ~end~0.base, ~end~0.offset := 0bv32, 0bv32;~end~0.base, ~end~0.offset := ~list~0.base, ~list~0.offset; {6145#(and (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) main_~end~0.base)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (bvadd (select (select |#memory_$Pointer$.offset| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv4 32)))) (= main_~end~0.offset (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv4 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)))} is VALID [2018-11-14 18:15:26,908 INFO L273 TraceCheckUtils]: 18: Hoare triple {6145#(and (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) main_~end~0.base)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (bvadd (select (select |#memory_$Pointer$.offset| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv4 32)))) (= main_~end~0.offset (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv4 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)))} assume true; {6145#(and (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) main_~end~0.base)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (bvadd (select (select |#memory_$Pointer$.offset| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv4 32)))) (= main_~end~0.offset (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv4 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)))} is VALID [2018-11-14 18:15:26,909 INFO L273 TraceCheckUtils]: 19: Hoare triple {6145#(and (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) main_~end~0.base)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (bvadd (select (select |#memory_$Pointer$.offset| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv4 32)))) (= main_~end~0.offset (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv4 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)))} assume !!(0bv32 != ~end~0.base || 0bv32 != ~end~0.offset); {6145#(and (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) main_~end~0.base)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (bvadd (select (select |#memory_$Pointer$.offset| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv4 32)))) (= main_~end~0.offset (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv4 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)))} is VALID [2018-11-14 18:15:26,910 INFO L273 TraceCheckUtils]: 20: Hoare triple {6145#(and (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) main_~end~0.base)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (bvadd (select (select |#memory_$Pointer$.offset| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv4 32)))) (= main_~end~0.offset (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv4 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)))} assume true; {6145#(and (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) main_~end~0.base)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (bvadd (select (select |#memory_$Pointer$.offset| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv4 32)))) (= main_~end~0.offset (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv4 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)))} is VALID [2018-11-14 18:15:26,911 INFO L273 TraceCheckUtils]: 21: Hoare triple {6145#(and (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) main_~end~0.base)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (bvadd (select (select |#memory_$Pointer$.offset| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv4 32)))) (= main_~end~0.offset (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv4 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)))} assume true; {6145#(and (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) main_~end~0.base)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (bvadd (select (select |#memory_$Pointer$.offset| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv4 32)))) (= main_~end~0.offset (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv4 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)))} is VALID [2018-11-14 18:15:26,915 INFO L273 TraceCheckUtils]: 22: Hoare triple {6145#(and (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) main_~end~0.base)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (bvadd (select (select |#memory_$Pointer$.offset| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv4 32)))) (= main_~end~0.offset (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv4 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)))} assume !!(0bv32 != ~end~0.base || 0bv32 != ~end~0.offset);~len~0 := 0bv32;call #t~mem18.base, #t~mem18.offset := read~$Pointer$(~end~0.base, ~bvadd32(4bv32, ~end~0.offset), 4bv32);~inner~0.base, ~inner~0.offset := #t~mem18.base, #t~mem18.offset;havoc #t~mem18.base, #t~mem18.offset; {6161#(exists ((main_~end~0.base (_ BitVec 32))) (and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (bvadd (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) (_ bv4 32)))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv0 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv0 32)) (_ bv0 32)) (= main_~inner~0.base (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv4 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) main_~inner~0.offset) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32)) main_~end~0.base))))} is VALID [2018-11-14 18:15:26,916 INFO L273 TraceCheckUtils]: 23: Hoare triple {6161#(exists ((main_~end~0.base (_ BitVec 32))) (and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (bvadd (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) (_ bv4 32)))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv0 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv0 32)) (_ bv0 32)) (= main_~inner~0.base (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv4 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) main_~inner~0.offset) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32)) main_~end~0.base))))} assume true; {6161#(exists ((main_~end~0.base (_ BitVec 32))) (and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (bvadd (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) (_ bv4 32)))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv0 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv0 32)) (_ bv0 32)) (= main_~inner~0.base (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv4 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) main_~inner~0.offset) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32)) main_~end~0.base))))} is VALID [2018-11-14 18:15:26,916 INFO L273 TraceCheckUtils]: 24: Hoare triple {6161#(exists ((main_~end~0.base (_ BitVec 32))) (and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (bvadd (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) (_ bv4 32)))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv0 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv0 32)) (_ bv0 32)) (= main_~inner~0.base (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv4 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) main_~inner~0.offset) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32)) main_~end~0.base))))} assume !!(0bv32 != ~inner~0.base || 0bv32 != ~inner~0.offset); {6161#(exists ((main_~end~0.base (_ BitVec 32))) (and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (bvadd (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) (_ bv4 32)))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv0 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv0 32)) (_ bv0 32)) (= main_~inner~0.base (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv4 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) main_~inner~0.offset) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32)) main_~end~0.base))))} is VALID [2018-11-14 18:15:26,917 INFO L273 TraceCheckUtils]: 25: Hoare triple {6161#(exists ((main_~end~0.base (_ BitVec 32))) (and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (bvadd (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) (_ bv4 32)))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv0 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv0 32)) (_ bv0 32)) (= main_~inner~0.base (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv4 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) main_~inner~0.offset) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32)) main_~end~0.base))))} assume ~len~0 == 0bv32;~len~0 := 1bv32; {6161#(exists ((main_~end~0.base (_ BitVec 32))) (and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (bvadd (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) (_ bv4 32)))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv0 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv0 32)) (_ bv0 32)) (= main_~inner~0.base (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv4 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) main_~inner~0.offset) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32)) main_~end~0.base))))} is VALID [2018-11-14 18:15:26,917 INFO L273 TraceCheckUtils]: 26: Hoare triple {6161#(exists ((main_~end~0.base (_ BitVec 32))) (and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (bvadd (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) (_ bv4 32)))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv0 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv0 32)) (_ bv0 32)) (= main_~inner~0.base (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv4 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) main_~inner~0.offset) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32)) main_~end~0.base))))} assume true; {6161#(exists ((main_~end~0.base (_ BitVec 32))) (and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (bvadd (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) (_ bv4 32)))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv0 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv0 32)) (_ bv0 32)) (= main_~inner~0.base (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv4 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) main_~inner~0.offset) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32)) main_~end~0.base))))} is VALID [2018-11-14 18:15:26,918 INFO L273 TraceCheckUtils]: 27: Hoare triple {6161#(exists ((main_~end~0.base (_ BitVec 32))) (and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (bvadd (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) (_ bv4 32)))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv0 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv0 32)) (_ bv0 32)) (= main_~inner~0.base (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv4 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) main_~inner~0.offset) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32)) main_~end~0.base))))} assume !!(0bv32 != ~inner~0.base || 0bv32 != ~inner~0.offset); {6161#(exists ((main_~end~0.base (_ BitVec 32))) (and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (bvadd (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) (_ bv4 32)))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv0 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv0 32)) (_ bv0 32)) (= main_~inner~0.base (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv4 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) main_~inner~0.offset) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32)) main_~end~0.base))))} is VALID [2018-11-14 18:15:26,918 INFO L273 TraceCheckUtils]: 28: Hoare triple {6161#(exists ((main_~end~0.base (_ BitVec 32))) (and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (bvadd (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) (_ bv4 32)))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv0 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv0 32)) (_ bv0 32)) (= main_~inner~0.base (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv4 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) main_~inner~0.offset) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32)) main_~end~0.base))))} assume true; {6161#(exists ((main_~end~0.base (_ BitVec 32))) (and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (bvadd (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) (_ bv4 32)))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv0 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv0 32)) (_ bv0 32)) (= main_~inner~0.base (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv4 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) main_~inner~0.offset) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32)) main_~end~0.base))))} is VALID [2018-11-14 18:15:26,921 INFO L273 TraceCheckUtils]: 29: Hoare triple {6161#(exists ((main_~end~0.base (_ BitVec 32))) (and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (bvadd (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) (_ bv4 32)))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv0 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv0 32)) (_ bv0 32)) (= main_~inner~0.base (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv4 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) main_~inner~0.offset) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32)) main_~end~0.base))))} assume true;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~inner~0.base, ~bvadd32(4bv32, ~inner~0.offset), 4bv32); {6183#(and (= |main_#t~mem19.base| (_ bv0 32)) (= (_ bv0 32) |main_#t~mem19.offset|))} is VALID [2018-11-14 18:15:26,922 INFO L273 TraceCheckUtils]: 30: Hoare triple {6183#(and (= |main_#t~mem19.base| (_ bv0 32)) (= (_ bv0 32) |main_#t~mem19.offset|))} assume !(0bv32 == #t~mem19.base && 0bv32 == #t~mem19.offset);havoc #t~mem19.base, #t~mem19.offset; {6088#false} is VALID [2018-11-14 18:15:26,922 INFO L273 TraceCheckUtils]: 31: Hoare triple {6088#false} assume !false; {6088#false} is VALID [2018-11-14 18:15:26,932 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-14 18:15:26,932 INFO L312 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2018-11-14 18:15:26,939 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-14 18:15:26,939 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2018-11-14 18:15:26,939 INFO L78 Accepts]: Start accepts. Automaton has 7 states. Word has length 32 [2018-11-14 18:15:26,940 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-14 18:15:26,940 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 7 states. [2018-11-14 18:15:27,053 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 32 edges. 32 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 18:15:27,053 INFO L459 AbstractCegarLoop]: Interpolant automaton has 7 states [2018-11-14 18:15:27,054 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2018-11-14 18:15:27,054 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2018-11-14 18:15:27,054 INFO L87 Difference]: Start difference. First operand 113 states and 128 transitions. Second operand 7 states. [2018-11-14 18:15:29,007 WARN L179 SmtUtils]: Spent 121.00 ms on a formula simplification that was a NOOP. DAG size: 75 [2018-11-14 18:15:30,627 WARN L179 SmtUtils]: Spent 140.00 ms on a formula simplification that was a NOOP. DAG size: 79 [2018-11-14 18:15:33,558 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 18:15:33,558 INFO L93 Difference]: Finished difference Result 281 states and 311 transitions. [2018-11-14 18:15:33,558 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2018-11-14 18:15:33,559 INFO L78 Accepts]: Start accepts. Automaton has 7 states. Word has length 32 [2018-11-14 18:15:33,559 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-14 18:15:33,559 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 7 states. [2018-11-14 18:15:33,561 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11 states to 11 states and 270 transitions. [2018-11-14 18:15:33,562 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 7 states. [2018-11-14 18:15:33,564 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11 states to 11 states and 270 transitions. [2018-11-14 18:15:33,564 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 11 states and 270 transitions. [2018-11-14 18:15:34,723 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 270 edges. 270 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 18:15:34,731 INFO L225 Difference]: With dead ends: 281 [2018-11-14 18:15:34,731 INFO L226 Difference]: Without dead ends: 279 [2018-11-14 18:15:34,731 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 37 GetRequests, 26 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 9 ImplicationChecksByTransitivity, 1.2s TimeCoverageRelationStatistics Valid=54, Invalid=102, Unknown=0, NotChecked=0, Total=156 [2018-11-14 18:15:34,732 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 279 states. [2018-11-14 18:15:34,899 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 279 to 129. [2018-11-14 18:15:34,899 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-14 18:15:34,899 INFO L82 GeneralOperation]: Start isEquivalent. First operand 279 states. Second operand 129 states. [2018-11-14 18:15:34,899 INFO L74 IsIncluded]: Start isIncluded. First operand 279 states. Second operand 129 states. [2018-11-14 18:15:34,900 INFO L87 Difference]: Start difference. First operand 279 states. Second operand 129 states. [2018-11-14 18:15:34,906 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 18:15:34,906 INFO L93 Difference]: Finished difference Result 279 states and 309 transitions. [2018-11-14 18:15:34,906 INFO L276 IsEmpty]: Start isEmpty. Operand 279 states and 309 transitions. [2018-11-14 18:15:34,907 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 18:15:34,907 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 18:15:34,908 INFO L74 IsIncluded]: Start isIncluded. First operand 129 states. Second operand 279 states. [2018-11-14 18:15:34,908 INFO L87 Difference]: Start difference. First operand 129 states. Second operand 279 states. [2018-11-14 18:15:34,914 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 18:15:34,915 INFO L93 Difference]: Finished difference Result 279 states and 309 transitions. [2018-11-14 18:15:34,915 INFO L276 IsEmpty]: Start isEmpty. Operand 279 states and 309 transitions. [2018-11-14 18:15:34,916 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 18:15:34,916 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 18:15:34,916 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-14 18:15:34,916 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-14 18:15:34,916 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 129 states. [2018-11-14 18:15:34,918 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 129 states to 129 states and 146 transitions. [2018-11-14 18:15:34,919 INFO L78 Accepts]: Start accepts. Automaton has 129 states and 146 transitions. Word has length 32 [2018-11-14 18:15:34,919 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-14 18:15:34,919 INFO L480 AbstractCegarLoop]: Abstraction has 129 states and 146 transitions. [2018-11-14 18:15:34,919 INFO L481 AbstractCegarLoop]: Interpolant automaton has 7 states. [2018-11-14 18:15:34,919 INFO L276 IsEmpty]: Start isEmpty. Operand 129 states and 146 transitions. [2018-11-14 18:15:34,920 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 36 [2018-11-14 18:15:34,920 INFO L367 BasicCegarLoop]: Found error trace [2018-11-14 18:15:34,920 INFO L375 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-14 18:15:34,921 INFO L423 AbstractCegarLoop]: === Iteration 13 === [mainErr8ASSERT_VIOLATIONERROR_FUNCTION, mainErr10ASSERT_VIOLATIONERROR_FUNCTION, mainErr11ASSERT_VIOLATIONERROR_FUNCTION, mainErr1ASSERT_VIOLATIONERROR_FUNCTION, mainErr5ASSERT_VIOLATIONERROR_FUNCTION, mainErr7ASSERT_VIOLATIONERROR_FUNCTION, mainErr9ASSERT_VIOLATIONERROR_FUNCTION, mainErr12ASSERT_VIOLATIONERROR_FUNCTION, mainErr2ASSERT_VIOLATIONERROR_FUNCTION, mainErr3ASSERT_VIOLATIONERROR_FUNCTION, mainErr0ASSERT_VIOLATIONERROR_FUNCTION, mainErr4ASSERT_VIOLATIONERROR_FUNCTION, mainErr6ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-14 18:15:34,921 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-14 18:15:34,921 INFO L82 PathProgramCache]: Analyzing trace with hash 403899668, now seen corresponding path program 1 times [2018-11-14 18:15:34,921 INFO L223 ckRefinementStrategy]: Switched to mode CVC4_FPBP [2018-11-14 18:15:34,921 INFO L69 tionRefinementEngine]: Using refinement strategy WolfRefinementStrategy No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/cvc4nyu Starting monitored process 14 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 14 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk [2018-11-14 18:15:34,951 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-14 18:15:35,025 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-14 18:15:35,061 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-14 18:15:35,064 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-14 18:15:35,301 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2018-11-14 18:15:35,329 INFO L267 ElimStorePlain]: Start of recursive call 2: End of recursive call: and 1 xjuncts. [2018-11-14 18:15:35,402 INFO L267 ElimStorePlain]: Start of recursive call 1: 1 dim-1 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:15:35,402 INFO L202 ElimStorePlain]: Needed 2 recursive calls to eliminate 1 variables, input treesize:10, output treesize:9 [2018-11-14 18:15:35,405 WARN L383 uantifierElimination]: Trying to double check SDD result, but SMT solver's response was UNKNOWN. [2018-11-14 18:15:35,511 INFO L700 Elim1Store]: detected not equals via solver [2018-11-14 18:15:35,539 INFO L700 Elim1Store]: detected not equals via solver [2018-11-14 18:15:35,540 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 2 disjoint index pairs (out of 1 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 4 [2018-11-14 18:15:35,542 INFO L267 ElimStorePlain]: Start of recursive call 2: End of recursive call: and 1 xjuncts. [2018-11-14 18:15:35,922 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 2 new quantified variables, introduced 0 case distinctions, treesize of input 343 treesize of output 233 [2018-11-14 18:15:37,967 WARN L179 SmtUtils]: Spent 2.02 s on a formula simplification that was a NOOP. DAG size: 54 [2018-11-14 18:15:37,990 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 9 [2018-11-14 18:15:37,991 INFO L267 ElimStorePlain]: Start of recursive call 4: End of recursive call: and 1 xjuncts. [2018-11-14 18:15:38,409 INFO L303 Elim1Store]: Index analysis took 107 ms [2018-11-14 18:15:38,410 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 0 case distinctions, treesize of input 200 treesize of output 196 [2018-11-14 18:15:38,425 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 8 treesize of output 7 [2018-11-14 18:15:38,427 INFO L267 ElimStorePlain]: Start of recursive call 6: End of recursive call: and 1 xjuncts. [2018-11-14 18:15:38,741 INFO L303 Elim1Store]: Index analysis took 109 ms [2018-11-14 18:15:38,742 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 3 select indices, 3 select index equivalence classes, 1 disjoint index pairs (out of 3 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 191 treesize of output 178 [2018-11-14 18:15:38,760 INFO L700 Elim1Store]: detected not equals via solver [2018-11-14 18:15:38,761 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 50 treesize of output 91 [2018-11-14 18:15:38,764 INFO L267 ElimStorePlain]: Start of recursive call 8: End of recursive call: and 1 xjuncts. [2018-11-14 18:15:38,837 INFO L267 ElimStorePlain]: Start of recursive call 7: 1 dim-1 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:15:38,903 INFO L267 ElimStorePlain]: Start of recursive call 5: 1 dim-1 vars, 1 dim-2 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:15:38,965 INFO L267 ElimStorePlain]: Start of recursive call 3: 1 dim-1 vars, 1 dim-2 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:15:39,072 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 2 new quantified variables, introduced 0 case distinctions, treesize of input 159 treesize of output 89 [2018-11-14 18:15:39,437 WARN L179 SmtUtils]: Spent 168.00 ms on a formula simplification. DAG size of input: 43 DAG size of output: 26 [2018-11-14 18:15:39,442 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 9 [2018-11-14 18:15:39,446 INFO L267 ElimStorePlain]: Start of recursive call 10: End of recursive call: and 1 xjuncts. [2018-11-14 18:15:39,593 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 0 case distinctions, treesize of input 49 treesize of output 51 [2018-11-14 18:15:39,634 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 13 [2018-11-14 18:15:39,649 INFO L267 ElimStorePlain]: Start of recursive call 12: End of recursive call: and 1 xjuncts. [2018-11-14 18:15:39,694 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 46 treesize of output 39 [2018-11-14 18:15:39,701 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 20 treesize of output 27 [2018-11-14 18:15:39,705 INFO L267 ElimStorePlain]: Start of recursive call 14: End of recursive call: and 1 xjuncts. [2018-11-14 18:15:39,720 INFO L267 ElimStorePlain]: Start of recursive call 13: 1 dim-1 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:15:39,733 INFO L267 ElimStorePlain]: Start of recursive call 11: 1 dim-1 vars, 1 dim-2 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:15:39,752 INFO L267 ElimStorePlain]: Start of recursive call 9: 1 dim-1 vars, 1 dim-2 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:15:39,787 INFO L267 ElimStorePlain]: Start of recursive call 1: 1 dim-0 vars, 1 dim-1 vars, 2 dim-2 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:15:39,788 INFO L202 ElimStorePlain]: Needed 14 recursive calls to eliminate 4 variables, input treesize:356, output treesize:75 [2018-11-14 18:15:40,112 WARN L383 uantifierElimination]: Trying to double check SDD result, but SMT solver's response was UNKNOWN. [2018-11-14 18:15:40,910 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 0 case distinctions, treesize of input 60 treesize of output 44 [2018-11-14 18:15:40,926 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 3 select indices, 3 select index equivalence classes, 1 disjoint index pairs (out of 3 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 18 treesize of output 15 [2018-11-14 18:15:40,940 INFO L267 ElimStorePlain]: Start of recursive call 3: End of recursive call: and 1 xjuncts. [2018-11-14 18:15:40,957 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 19 treesize of output 11 [2018-11-14 18:15:40,959 INFO L267 ElimStorePlain]: Start of recursive call 4: End of recursive call: and 1 xjuncts. [2018-11-14 18:15:40,968 INFO L267 ElimStorePlain]: Start of recursive call 2: 2 dim-1 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:15:40,994 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 3 new quantified variables, introduced 0 case distinctions, treesize of input 42 treesize of output 27 [2018-11-14 18:15:41,001 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 3 [2018-11-14 18:15:41,002 INFO L267 ElimStorePlain]: Start of recursive call 6: End of recursive call: and 1 xjuncts. [2018-11-14 18:15:41,013 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 4 [2018-11-14 18:15:41,015 INFO L267 ElimStorePlain]: Start of recursive call 7: End of recursive call: and 1 xjuncts. [2018-11-14 18:15:41,018 INFO L267 ElimStorePlain]: Start of recursive call 5: 2 dim-1 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:15:41,024 INFO L267 ElimStorePlain]: Start of recursive call 1: 1 dim-0 vars, 2 dim-2 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:15:41,024 INFO L202 ElimStorePlain]: Needed 7 recursive calls to eliminate 3 variables, input treesize:90, output treesize:7 [2018-11-14 18:15:41,032 WARN L383 uantifierElimination]: Trying to double check SDD result, but SMT solver's response was UNKNOWN. [2018-11-14 18:15:41,054 INFO L256 TraceCheckUtils]: 0: Hoare triple {7214#true} call ULTIMATE.init(); {7214#true} is VALID [2018-11-14 18:15:41,054 INFO L273 TraceCheckUtils]: 1: Hoare triple {7214#true} #NULL.base, #NULL.offset := 0bv32, 0bv32;#valid := #valid[0bv32 := 0bv1]; {7214#true} is VALID [2018-11-14 18:15:41,055 INFO L273 TraceCheckUtils]: 2: Hoare triple {7214#true} assume true; {7214#true} is VALID [2018-11-14 18:15:41,055 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {7214#true} {7214#true} #358#return; {7214#true} is VALID [2018-11-14 18:15:41,055 INFO L256 TraceCheckUtils]: 4: Hoare triple {7214#true} call #t~ret28 := main(); {7214#true} is VALID [2018-11-14 18:15:41,057 INFO L273 TraceCheckUtils]: 5: Hoare triple {7214#true} call #t~malloc0.base, #t~malloc0.offset := #Ultimate.alloc(8bv32);~list~0.base, ~list~0.offset := #t~malloc0.base, #t~malloc0.offset;call write~$Pointer$(0bv32, 0bv32, ~list~0.base, ~list~0.offset, 4bv32); {7234#(and (= (_ bv1 1) (select |#valid| main_~list~0.base)) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:15:41,057 INFO L273 TraceCheckUtils]: 6: Hoare triple {7234#(and (= (_ bv1 1) (select |#valid| main_~list~0.base)) (= main_~list~0.offset (_ bv0 32)))} assume true; {7234#(and (= (_ bv1 1) (select |#valid| main_~list~0.base)) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:15:41,058 INFO L273 TraceCheckUtils]: 7: Hoare triple {7234#(and (= (_ bv1 1) (select |#valid| main_~list~0.base)) (= main_~list~0.offset (_ bv0 32)))} assume !!(~list~0.base != 0bv32 || ~list~0.offset != 0bv32); {7234#(and (= (_ bv1 1) (select |#valid| main_~list~0.base)) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:15:41,060 INFO L273 TraceCheckUtils]: 8: Hoare triple {7234#(and (= (_ bv1 1) (select |#valid| main_~list~0.base)) (= main_~list~0.offset (_ bv0 32)))} assume true; {7234#(and (= (_ bv1 1) (select |#valid| main_~list~0.base)) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:15:41,066 INFO L273 TraceCheckUtils]: 9: Hoare triple {7234#(and (= (_ bv1 1) (select |#valid| main_~list~0.base)) (= main_~list~0.offset (_ bv0 32)))} assume !(#t~nondet1 != 0bv32);havoc #t~nondet1;call #t~malloc2.base, #t~malloc2.offset := #Ultimate.alloc(8bv32);call write~$Pointer$(#t~malloc2.base, #t~malloc2.offset, ~list~0.base, ~bvadd32(4bv32, ~list~0.offset), 4bv32);call #t~mem3.base, #t~mem3.offset := read~$Pointer$(~list~0.base, ~bvadd32(4bv32, ~list~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, #t~mem3.base, #t~mem3.offset, 4bv32);havoc #t~mem3.base, #t~mem3.offset;call #t~mem4.base, #t~mem4.offset := read~$Pointer$(~list~0.base, ~bvadd32(4bv32, ~list~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, #t~mem4.base, ~bvadd32(4bv32, #t~mem4.offset), 4bv32);havoc #t~mem4.base, #t~mem4.offset; {7247#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) main_~list~0.base)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv0 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv4 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv4 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv0 32))) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:15:41,067 INFO L273 TraceCheckUtils]: 10: Hoare triple {7247#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) main_~list~0.base)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv0 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv4 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv4 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv0 32))) (= main_~list~0.offset (_ bv0 32)))} assume true;call #t~mem5.base, #t~mem5.offset := read~$Pointer$(~list~0.base, ~bvadd32(4bv32, ~list~0.offset), 4bv32);#t~short7 := #t~mem5.base != 0bv32 || #t~mem5.offset != 0bv32; {7247#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) main_~list~0.base)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv0 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv4 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv4 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv0 32))) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:15:41,073 INFO L273 TraceCheckUtils]: 11: Hoare triple {7247#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) main_~list~0.base)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv0 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv4 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv4 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv0 32))) (= main_~list~0.offset (_ bv0 32)))} assume #t~short7; {7247#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) main_~list~0.base)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv0 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv4 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv4 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv0 32))) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:15:41,074 INFO L273 TraceCheckUtils]: 12: Hoare triple {7247#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) main_~list~0.base)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv0 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv4 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv4 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv0 32))) (= main_~list~0.offset (_ bv0 32)))} assume !!#t~short7;havoc #t~mem5.base, #t~mem5.offset;havoc #t~mem6.base, #t~mem6.offset;havoc #t~short7; {7247#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) main_~list~0.base)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv0 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv4 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv4 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv0 32))) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:15:41,075 INFO L273 TraceCheckUtils]: 13: Hoare triple {7247#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) main_~list~0.base)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv0 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv4 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv4 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv0 32))) (= main_~list~0.offset (_ bv0 32)))} assume true; {7247#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) main_~list~0.base)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv0 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv4 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv4 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv0 32))) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:15:41,077 INFO L273 TraceCheckUtils]: 14: Hoare triple {7247#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) main_~list~0.base)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv0 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv4 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv4 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv0 32))) (= main_~list~0.offset (_ bv0 32)))} ~end~0.base, ~end~0.offset := ~list~0.base, ~list~0.offset; {7247#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) main_~list~0.base)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv0 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv4 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv4 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv0 32))) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:15:41,079 INFO L273 TraceCheckUtils]: 15: Hoare triple {7247#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) main_~list~0.base)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv0 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv4 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv4 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv0 32))) (= main_~list~0.offset (_ bv0 32)))} assume true; {7247#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) main_~list~0.base)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv0 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv4 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv4 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv0 32))) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:15:41,080 INFO L273 TraceCheckUtils]: 16: Hoare triple {7247#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) main_~list~0.base)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv0 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv4 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv4 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv0 32))) (= main_~list~0.offset (_ bv0 32)))} assume !(#t~nondet8 != 0bv32);havoc #t~nondet8; {7247#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) main_~list~0.base)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv0 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv4 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv4 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv0 32))) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:15:41,082 INFO L273 TraceCheckUtils]: 17: Hoare triple {7247#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) main_~list~0.base)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv0 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv4 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv4 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv0 32))) (= main_~list~0.offset (_ bv0 32)))} ~end~0.base, ~end~0.offset := 0bv32, 0bv32;~end~0.base, ~end~0.offset := ~list~0.base, ~list~0.offset; {7272#(and (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv4 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) main_~end~0.base)) (= main_~end~0.offset (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv4 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)))} is VALID [2018-11-14 18:15:41,084 INFO L273 TraceCheckUtils]: 18: Hoare triple {7272#(and (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv4 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) main_~end~0.base)) (= main_~end~0.offset (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv4 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)))} assume true; {7272#(and (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv4 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) main_~end~0.base)) (= main_~end~0.offset (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv4 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)))} is VALID [2018-11-14 18:15:41,085 INFO L273 TraceCheckUtils]: 19: Hoare triple {7272#(and (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv4 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) main_~end~0.base)) (= main_~end~0.offset (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv4 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)))} assume !!(0bv32 != ~end~0.base || 0bv32 != ~end~0.offset); {7272#(and (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv4 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) main_~end~0.base)) (= main_~end~0.offset (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv4 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)))} is VALID [2018-11-14 18:15:41,087 INFO L273 TraceCheckUtils]: 20: Hoare triple {7272#(and (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv4 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) main_~end~0.base)) (= main_~end~0.offset (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv4 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)))} assume true; {7272#(and (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv4 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) main_~end~0.base)) (= main_~end~0.offset (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv4 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)))} is VALID [2018-11-14 18:15:41,089 INFO L273 TraceCheckUtils]: 21: Hoare triple {7272#(and (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv4 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) main_~end~0.base)) (= main_~end~0.offset (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv4 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)))} assume true; {7272#(and (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv4 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) main_~end~0.base)) (= main_~end~0.offset (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv4 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)))} is VALID [2018-11-14 18:15:41,092 INFO L273 TraceCheckUtils]: 22: Hoare triple {7272#(and (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv4 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) main_~end~0.base)) (= main_~end~0.offset (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv4 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)))} assume !!(0bv32 != ~end~0.base || 0bv32 != ~end~0.offset);~len~0 := 0bv32;call #t~mem18.base, #t~mem18.offset := read~$Pointer$(~end~0.base, ~bvadd32(4bv32, ~end~0.offset), 4bv32);~inner~0.base, ~inner~0.offset := #t~mem18.base, #t~mem18.offset;havoc #t~mem18.base, #t~mem18.offset; {7288#(exists ((main_~end~0.base (_ BitVec 32))) (and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv0 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv0 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv4 32)) (_ bv0 32)) (= main_~inner~0.base (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv4 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) main_~inner~0.offset) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32)) main_~end~0.base))))} is VALID [2018-11-14 18:15:41,093 INFO L273 TraceCheckUtils]: 23: Hoare triple {7288#(exists ((main_~end~0.base (_ BitVec 32))) (and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv0 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv0 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv4 32)) (_ bv0 32)) (= main_~inner~0.base (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv4 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) main_~inner~0.offset) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32)) main_~end~0.base))))} assume true; {7288#(exists ((main_~end~0.base (_ BitVec 32))) (and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv0 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv0 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv4 32)) (_ bv0 32)) (= main_~inner~0.base (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv4 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) main_~inner~0.offset) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32)) main_~end~0.base))))} is VALID [2018-11-14 18:15:41,093 INFO L273 TraceCheckUtils]: 24: Hoare triple {7288#(exists ((main_~end~0.base (_ BitVec 32))) (and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv0 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv0 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv4 32)) (_ bv0 32)) (= main_~inner~0.base (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv4 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) main_~inner~0.offset) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32)) main_~end~0.base))))} assume !!(0bv32 != ~inner~0.base || 0bv32 != ~inner~0.offset); {7288#(exists ((main_~end~0.base (_ BitVec 32))) (and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv0 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv0 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv4 32)) (_ bv0 32)) (= main_~inner~0.base (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv4 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) main_~inner~0.offset) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32)) main_~end~0.base))))} is VALID [2018-11-14 18:15:41,094 INFO L273 TraceCheckUtils]: 25: Hoare triple {7288#(exists ((main_~end~0.base (_ BitVec 32))) (and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv0 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv0 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv4 32)) (_ bv0 32)) (= main_~inner~0.base (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv4 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) main_~inner~0.offset) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32)) main_~end~0.base))))} assume ~len~0 == 0bv32;~len~0 := 1bv32; {7288#(exists ((main_~end~0.base (_ BitVec 32))) (and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv0 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv0 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv4 32)) (_ bv0 32)) (= main_~inner~0.base (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv4 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) main_~inner~0.offset) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32)) main_~end~0.base))))} is VALID [2018-11-14 18:15:41,094 INFO L273 TraceCheckUtils]: 26: Hoare triple {7288#(exists ((main_~end~0.base (_ BitVec 32))) (and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv0 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv0 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv4 32)) (_ bv0 32)) (= main_~inner~0.base (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv4 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) main_~inner~0.offset) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32)) main_~end~0.base))))} assume true; {7288#(exists ((main_~end~0.base (_ BitVec 32))) (and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv0 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv0 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv4 32)) (_ bv0 32)) (= main_~inner~0.base (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv4 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) main_~inner~0.offset) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32)) main_~end~0.base))))} is VALID [2018-11-14 18:15:41,094 INFO L273 TraceCheckUtils]: 27: Hoare triple {7288#(exists ((main_~end~0.base (_ BitVec 32))) (and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv0 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv0 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv4 32)) (_ bv0 32)) (= main_~inner~0.base (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv4 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) main_~inner~0.offset) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32)) main_~end~0.base))))} assume !!(0bv32 != ~inner~0.base || 0bv32 != ~inner~0.offset); {7288#(exists ((main_~end~0.base (_ BitVec 32))) (and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv0 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv0 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv4 32)) (_ bv0 32)) (= main_~inner~0.base (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv4 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) main_~inner~0.offset) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32)) main_~end~0.base))))} is VALID [2018-11-14 18:15:41,095 INFO L273 TraceCheckUtils]: 28: Hoare triple {7288#(exists ((main_~end~0.base (_ BitVec 32))) (and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv0 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv0 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv4 32)) (_ bv0 32)) (= main_~inner~0.base (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv4 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) main_~inner~0.offset) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32)) main_~end~0.base))))} assume true; {7288#(exists ((main_~end~0.base (_ BitVec 32))) (and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv0 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv0 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv4 32)) (_ bv0 32)) (= main_~inner~0.base (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv4 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) main_~inner~0.offset) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32)) main_~end~0.base))))} is VALID [2018-11-14 18:15:41,095 INFO L273 TraceCheckUtils]: 29: Hoare triple {7288#(exists ((main_~end~0.base (_ BitVec 32))) (and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv0 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv0 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv4 32)) (_ bv0 32)) (= main_~inner~0.base (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv4 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) main_~inner~0.offset) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32)) main_~end~0.base))))} assume true;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~inner~0.base, ~bvadd32(4bv32, ~inner~0.offset), 4bv32); {7288#(exists ((main_~end~0.base (_ BitVec 32))) (and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv0 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv0 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv4 32)) (_ bv0 32)) (= main_~inner~0.base (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv4 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) main_~inner~0.offset) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32)) main_~end~0.base))))} is VALID [2018-11-14 18:15:41,096 INFO L273 TraceCheckUtils]: 30: Hoare triple {7288#(exists ((main_~end~0.base (_ BitVec 32))) (and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv0 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv0 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv4 32)) (_ bv0 32)) (= main_~inner~0.base (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv4 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) main_~inner~0.offset) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32)) main_~end~0.base))))} assume !!(0bv32 == #t~mem19.base && 0bv32 == #t~mem19.offset);havoc #t~mem19.base, #t~mem19.offset; {7288#(exists ((main_~end~0.base (_ BitVec 32))) (and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv0 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv0 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv4 32)) (_ bv0 32)) (= main_~inner~0.base (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv4 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) main_~inner~0.offset) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32)) main_~end~0.base))))} is VALID [2018-11-14 18:15:41,097 INFO L273 TraceCheckUtils]: 31: Hoare triple {7288#(exists ((main_~end~0.base (_ BitVec 32))) (and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv0 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv0 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv4 32)) (_ bv0 32)) (= main_~inner~0.base (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv4 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) main_~inner~0.offset) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32)) main_~end~0.base))))} assume true; {7288#(exists ((main_~end~0.base (_ BitVec 32))) (and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv0 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv0 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv4 32)) (_ bv0 32)) (= main_~inner~0.base (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv4 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) main_~inner~0.offset) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32)) main_~end~0.base))))} is VALID [2018-11-14 18:15:41,099 INFO L273 TraceCheckUtils]: 32: Hoare triple {7288#(exists ((main_~end~0.base (_ BitVec 32))) (and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv0 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv0 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv4 32)) (_ bv0 32)) (= main_~inner~0.base (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv4 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) main_~inner~0.offset) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32)) main_~end~0.base))))} assume true;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~inner~0.base, ~inner~0.offset, 4bv32); {7319#(and (= |main_#t~mem20.base| (_ bv0 32)) (= (_ bv0 32) |main_#t~mem20.offset|))} is VALID [2018-11-14 18:15:41,100 INFO L273 TraceCheckUtils]: 33: Hoare triple {7319#(and (= |main_#t~mem20.base| (_ bv0 32)) (= (_ bv0 32) |main_#t~mem20.offset|))} assume !(0bv32 == #t~mem20.base && 0bv32 == #t~mem20.offset);havoc #t~mem20.base, #t~mem20.offset; {7215#false} is VALID [2018-11-14 18:15:41,100 INFO L273 TraceCheckUtils]: 34: Hoare triple {7215#false} assume !false; {7215#false} is VALID [2018-11-14 18:15:41,110 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-14 18:15:41,110 INFO L312 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2018-11-14 18:15:41,111 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-14 18:15:41,112 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2018-11-14 18:15:41,112 INFO L78 Accepts]: Start accepts. Automaton has 7 states. Word has length 35 [2018-11-14 18:15:41,112 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-14 18:15:41,112 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 7 states. [2018-11-14 18:15:41,191 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 35 edges. 35 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 18:15:41,191 INFO L459 AbstractCegarLoop]: Interpolant automaton has 7 states [2018-11-14 18:15:41,192 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2018-11-14 18:15:41,192 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2018-11-14 18:15:41,192 INFO L87 Difference]: Start difference. First operand 129 states and 146 transitions. Second operand 7 states. [2018-11-14 18:15:43,630 WARN L179 SmtUtils]: Spent 117.00 ms on a formula simplification that was a NOOP. DAG size: 72 [2018-11-14 18:15:45,110 WARN L179 SmtUtils]: Spent 116.00 ms on a formula simplification that was a NOOP. DAG size: 76 [2018-11-14 18:15:47,833 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 18:15:47,834 INFO L93 Difference]: Finished difference Result 279 states and 309 transitions. [2018-11-14 18:15:47,834 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2018-11-14 18:15:47,834 INFO L78 Accepts]: Start accepts. Automaton has 7 states. Word has length 35 [2018-11-14 18:15:47,834 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-14 18:15:47,834 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 7 states. [2018-11-14 18:15:47,837 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11 states to 11 states and 268 transitions. [2018-11-14 18:15:47,837 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 7 states. [2018-11-14 18:15:47,839 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11 states to 11 states and 268 transitions. [2018-11-14 18:15:47,839 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 11 states and 268 transitions. [2018-11-14 18:15:48,750 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 268 edges. 268 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 18:15:48,756 INFO L225 Difference]: With dead ends: 279 [2018-11-14 18:15:48,756 INFO L226 Difference]: Without dead ends: 277 [2018-11-14 18:15:48,756 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 40 GetRequests, 29 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 9 ImplicationChecksByTransitivity, 1.1s TimeCoverageRelationStatistics Valid=54, Invalid=102, Unknown=0, NotChecked=0, Total=156 [2018-11-14 18:15:48,757 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 277 states. [2018-11-14 18:15:48,922 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 277 to 132. [2018-11-14 18:15:48,922 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-14 18:15:48,922 INFO L82 GeneralOperation]: Start isEquivalent. First operand 277 states. Second operand 132 states. [2018-11-14 18:15:48,923 INFO L74 IsIncluded]: Start isIncluded. First operand 277 states. Second operand 132 states. [2018-11-14 18:15:48,923 INFO L87 Difference]: Start difference. First operand 277 states. Second operand 132 states. [2018-11-14 18:15:48,931 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 18:15:48,931 INFO L93 Difference]: Finished difference Result 277 states and 307 transitions. [2018-11-14 18:15:48,931 INFO L276 IsEmpty]: Start isEmpty. Operand 277 states and 307 transitions. [2018-11-14 18:15:48,932 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 18:15:48,932 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 18:15:48,932 INFO L74 IsIncluded]: Start isIncluded. First operand 132 states. Second operand 277 states. [2018-11-14 18:15:48,932 INFO L87 Difference]: Start difference. First operand 132 states. Second operand 277 states. [2018-11-14 18:15:48,939 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 18:15:48,940 INFO L93 Difference]: Finished difference Result 277 states and 307 transitions. [2018-11-14 18:15:48,940 INFO L276 IsEmpty]: Start isEmpty. Operand 277 states and 307 transitions. [2018-11-14 18:15:48,941 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 18:15:48,941 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 18:15:48,941 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-14 18:15:48,941 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-14 18:15:48,941 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 132 states. [2018-11-14 18:15:48,944 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 132 states to 132 states and 149 transitions. [2018-11-14 18:15:48,944 INFO L78 Accepts]: Start accepts. Automaton has 132 states and 149 transitions. Word has length 35 [2018-11-14 18:15:48,944 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-14 18:15:48,944 INFO L480 AbstractCegarLoop]: Abstraction has 132 states and 149 transitions. [2018-11-14 18:15:48,944 INFO L481 AbstractCegarLoop]: Interpolant automaton has 7 states. [2018-11-14 18:15:48,944 INFO L276 IsEmpty]: Start isEmpty. Operand 132 states and 149 transitions. [2018-11-14 18:15:48,945 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 38 [2018-11-14 18:15:48,945 INFO L367 BasicCegarLoop]: Found error trace [2018-11-14 18:15:48,945 INFO L375 BasicCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-14 18:15:48,946 INFO L423 AbstractCegarLoop]: === Iteration 14 === [mainErr8ASSERT_VIOLATIONERROR_FUNCTION, mainErr10ASSERT_VIOLATIONERROR_FUNCTION, mainErr11ASSERT_VIOLATIONERROR_FUNCTION, mainErr1ASSERT_VIOLATIONERROR_FUNCTION, mainErr5ASSERT_VIOLATIONERROR_FUNCTION, mainErr7ASSERT_VIOLATIONERROR_FUNCTION, mainErr9ASSERT_VIOLATIONERROR_FUNCTION, mainErr12ASSERT_VIOLATIONERROR_FUNCTION, mainErr2ASSERT_VIOLATIONERROR_FUNCTION, mainErr3ASSERT_VIOLATIONERROR_FUNCTION, mainErr0ASSERT_VIOLATIONERROR_FUNCTION, mainErr4ASSERT_VIOLATIONERROR_FUNCTION, mainErr6ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-14 18:15:48,946 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-14 18:15:48,946 INFO L82 PathProgramCache]: Analyzing trace with hash -1060282988, now seen corresponding path program 1 times [2018-11-14 18:15:48,946 INFO L223 ckRefinementStrategy]: Switched to mode CVC4_FPBP [2018-11-14 18:15:48,947 INFO L69 tionRefinementEngine]: Using refinement strategy WolfRefinementStrategy No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/cvc4nyu Starting monitored process 15 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 15 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk [2018-11-14 18:15:48,973 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-14 18:15:49,000 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-14 18:15:49,036 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-14 18:15:49,037 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-14 18:15:49,497 INFO L256 TraceCheckUtils]: 0: Hoare triple {8347#true} call ULTIMATE.init(); {8347#true} is VALID [2018-11-14 18:15:49,497 INFO L273 TraceCheckUtils]: 1: Hoare triple {8347#true} #NULL.base, #NULL.offset := 0bv32, 0bv32;#valid := #valid[0bv32 := 0bv1]; {8347#true} is VALID [2018-11-14 18:15:49,497 INFO L273 TraceCheckUtils]: 2: Hoare triple {8347#true} assume true; {8347#true} is VALID [2018-11-14 18:15:49,498 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {8347#true} {8347#true} #358#return; {8347#true} is VALID [2018-11-14 18:15:49,498 INFO L256 TraceCheckUtils]: 4: Hoare triple {8347#true} call #t~ret28 := main(); {8347#true} is VALID [2018-11-14 18:15:49,498 INFO L273 TraceCheckUtils]: 5: Hoare triple {8347#true} call #t~malloc0.base, #t~malloc0.offset := #Ultimate.alloc(8bv32);~list~0.base, ~list~0.offset := #t~malloc0.base, #t~malloc0.offset;call write~$Pointer$(0bv32, 0bv32, ~list~0.base, ~list~0.offset, 4bv32); {8347#true} is VALID [2018-11-14 18:15:49,498 INFO L273 TraceCheckUtils]: 6: Hoare triple {8347#true} assume true; {8347#true} is VALID [2018-11-14 18:15:49,499 INFO L273 TraceCheckUtils]: 7: Hoare triple {8347#true} assume !!(~list~0.base != 0bv32 || ~list~0.offset != 0bv32); {8347#true} is VALID [2018-11-14 18:15:49,499 INFO L273 TraceCheckUtils]: 8: Hoare triple {8347#true} assume true; {8347#true} is VALID [2018-11-14 18:15:49,499 INFO L273 TraceCheckUtils]: 9: Hoare triple {8347#true} assume #t~nondet1 != 0bv32;havoc #t~nondet1;call write~$Pointer$(0bv32, 0bv32, ~list~0.base, ~bvadd32(4bv32, ~list~0.offset), 4bv32); {8347#true} is VALID [2018-11-14 18:15:49,499 INFO L273 TraceCheckUtils]: 10: Hoare triple {8347#true} assume true;call #t~mem5.base, #t~mem5.offset := read~$Pointer$(~list~0.base, ~bvadd32(4bv32, ~list~0.offset), 4bv32);#t~short7 := #t~mem5.base != 0bv32 || #t~mem5.offset != 0bv32; {8347#true} is VALID [2018-11-14 18:15:49,500 INFO L273 TraceCheckUtils]: 11: Hoare triple {8347#true} assume !#t~short7;call #t~mem6.base, #t~mem6.offset := read~$Pointer$(~list~0.base, ~bvadd32(4bv32, ~list~0.offset), 4bv32);#t~short7 := #t~mem6.base == 0bv32 && #t~mem6.offset == 0bv32; {8347#true} is VALID [2018-11-14 18:15:49,500 INFO L273 TraceCheckUtils]: 12: Hoare triple {8347#true} assume !!#t~short7;havoc #t~mem5.base, #t~mem5.offset;havoc #t~mem6.base, #t~mem6.offset;havoc #t~short7; {8347#true} is VALID [2018-11-14 18:15:49,500 INFO L273 TraceCheckUtils]: 13: Hoare triple {8347#true} assume true; {8347#true} is VALID [2018-11-14 18:15:49,500 INFO L273 TraceCheckUtils]: 14: Hoare triple {8347#true} ~end~0.base, ~end~0.offset := ~list~0.base, ~list~0.offset; {8347#true} is VALID [2018-11-14 18:15:49,500 INFO L273 TraceCheckUtils]: 15: Hoare triple {8347#true} assume true; {8347#true} is VALID [2018-11-14 18:15:49,500 INFO L273 TraceCheckUtils]: 16: Hoare triple {8347#true} assume !(#t~nondet8 != 0bv32);havoc #t~nondet8; {8347#true} is VALID [2018-11-14 18:15:49,501 INFO L273 TraceCheckUtils]: 17: Hoare triple {8347#true} ~end~0.base, ~end~0.offset := 0bv32, 0bv32;~end~0.base, ~end~0.offset := ~list~0.base, ~list~0.offset; {8347#true} is VALID [2018-11-14 18:15:49,501 INFO L273 TraceCheckUtils]: 18: Hoare triple {8347#true} assume true; {8347#true} is VALID [2018-11-14 18:15:49,501 INFO L273 TraceCheckUtils]: 19: Hoare triple {8347#true} assume !!(0bv32 != ~end~0.base || 0bv32 != ~end~0.offset); {8347#true} is VALID [2018-11-14 18:15:49,501 INFO L273 TraceCheckUtils]: 20: Hoare triple {8347#true} assume true; {8347#true} is VALID [2018-11-14 18:15:49,501 INFO L273 TraceCheckUtils]: 21: Hoare triple {8347#true} assume true; {8347#true} is VALID [2018-11-14 18:15:49,501 INFO L273 TraceCheckUtils]: 22: Hoare triple {8347#true} assume !!(0bv32 != ~end~0.base || 0bv32 != ~end~0.offset);~len~0 := 0bv32;call #t~mem18.base, #t~mem18.offset := read~$Pointer$(~end~0.base, ~bvadd32(4bv32, ~end~0.offset), 4bv32);~inner~0.base, ~inner~0.offset := #t~mem18.base, #t~mem18.offset;havoc #t~mem18.base, #t~mem18.offset; {8347#true} is VALID [2018-11-14 18:15:49,501 INFO L273 TraceCheckUtils]: 23: Hoare triple {8347#true} assume true; {8347#true} is VALID [2018-11-14 18:15:49,502 INFO L273 TraceCheckUtils]: 24: Hoare triple {8347#true} assume !(0bv32 != ~inner~0.base || 0bv32 != ~inner~0.offset); {8347#true} is VALID [2018-11-14 18:15:49,502 INFO L273 TraceCheckUtils]: 25: Hoare triple {8347#true} assume true; {8347#true} is VALID [2018-11-14 18:15:49,502 INFO L273 TraceCheckUtils]: 26: Hoare triple {8347#true} assume !!~bvsle32(~len~0, 1bv32); {8347#true} is VALID [2018-11-14 18:15:49,502 INFO L273 TraceCheckUtils]: 27: Hoare triple {8347#true} assume true; {8347#true} is VALID [2018-11-14 18:15:49,502 INFO L273 TraceCheckUtils]: 28: Hoare triple {8347#true} call #t~mem23.base, #t~mem23.offset := read~$Pointer$(~end~0.base, ~end~0.offset, 4bv32);~end~0.base, ~end~0.offset := #t~mem23.base, #t~mem23.offset;havoc #t~mem23.base, #t~mem23.offset; {8347#true} is VALID [2018-11-14 18:15:49,502 INFO L273 TraceCheckUtils]: 29: Hoare triple {8347#true} assume true; {8347#true} is VALID [2018-11-14 18:15:49,502 INFO L273 TraceCheckUtils]: 30: Hoare triple {8347#true} assume !(0bv32 != ~end~0.base || 0bv32 != ~end~0.offset); {8347#true} is VALID [2018-11-14 18:15:49,503 INFO L273 TraceCheckUtils]: 31: Hoare triple {8347#true} assume true; {8347#true} is VALID [2018-11-14 18:15:49,503 INFO L273 TraceCheckUtils]: 32: Hoare triple {8347#true} assume !!(0bv32 != ~list~0.base || 0bv32 != ~list~0.offset);call #t~mem24.base, #t~mem24.offset := read~$Pointer$(~list~0.base, ~bvadd32(4bv32, ~list~0.offset), 4bv32);~end~0.base, ~end~0.offset := #t~mem24.base, #t~mem24.offset;havoc #t~mem24.base, #t~mem24.offset; {8347#true} is VALID [2018-11-14 18:15:49,503 INFO L273 TraceCheckUtils]: 33: Hoare triple {8347#true} assume 0bv32 != ~end~0.base || 0bv32 != ~end~0.offset; {8451#(or (not (= main_~end~0.offset (_ bv0 32))) (not (= (_ bv0 32) main_~end~0.base)))} is VALID [2018-11-14 18:15:49,504 INFO L273 TraceCheckUtils]: 34: Hoare triple {8451#(or (not (= main_~end~0.offset (_ bv0 32))) (not (= (_ bv0 32) main_~end~0.base)))} assume true; {8451#(or (not (= main_~end~0.offset (_ bv0 32))) (not (= (_ bv0 32) main_~end~0.base)))} is VALID [2018-11-14 18:15:49,504 INFO L273 TraceCheckUtils]: 35: Hoare triple {8451#(or (not (= main_~end~0.offset (_ bv0 32))) (not (= (_ bv0 32) main_~end~0.base)))} assume !(0bv32 != ~end~0.base || 0bv32 != ~end~0.offset); {8348#false} is VALID [2018-11-14 18:15:49,504 INFO L273 TraceCheckUtils]: 36: Hoare triple {8348#false} assume !false; {8348#false} is VALID [2018-11-14 18:15:49,505 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2018-11-14 18:15:49,505 INFO L312 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2018-11-14 18:15:49,506 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-14 18:15:49,507 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-14 18:15:49,507 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 37 [2018-11-14 18:15:49,507 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-14 18:15:49,507 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states. [2018-11-14 18:15:49,541 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 36 edges. 36 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 18:15:49,541 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-14 18:15:49,541 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-14 18:15:49,542 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-14 18:15:49,542 INFO L87 Difference]: Start difference. First operand 132 states and 149 transitions. Second operand 3 states. [2018-11-14 18:15:50,108 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 18:15:50,108 INFO L93 Difference]: Finished difference Result 133 states and 150 transitions. [2018-11-14 18:15:50,108 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-14 18:15:50,109 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 37 [2018-11-14 18:15:50,109 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-14 18:15:50,109 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2018-11-14 18:15:50,111 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 94 transitions. [2018-11-14 18:15:50,111 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2018-11-14 18:15:50,112 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 94 transitions. [2018-11-14 18:15:50,112 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 94 transitions. [2018-11-14 18:15:50,219 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 94 edges. 94 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 18:15:50,221 INFO L225 Difference]: With dead ends: 133 [2018-11-14 18:15:50,221 INFO L226 Difference]: Without dead ends: 131 [2018-11-14 18:15:50,222 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 36 GetRequests, 35 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-14 18:15:50,222 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 131 states. [2018-11-14 18:15:50,499 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 131 to 130. [2018-11-14 18:15:50,500 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-14 18:15:50,500 INFO L82 GeneralOperation]: Start isEquivalent. First operand 131 states. Second operand 130 states. [2018-11-14 18:15:50,500 INFO L74 IsIncluded]: Start isIncluded. First operand 131 states. Second operand 130 states. [2018-11-14 18:15:50,500 INFO L87 Difference]: Start difference. First operand 131 states. Second operand 130 states. [2018-11-14 18:15:50,502 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 18:15:50,502 INFO L93 Difference]: Finished difference Result 131 states and 148 transitions. [2018-11-14 18:15:50,502 INFO L276 IsEmpty]: Start isEmpty. Operand 131 states and 148 transitions. [2018-11-14 18:15:50,502 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 18:15:50,502 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 18:15:50,503 INFO L74 IsIncluded]: Start isIncluded. First operand 130 states. Second operand 131 states. [2018-11-14 18:15:50,503 INFO L87 Difference]: Start difference. First operand 130 states. Second operand 131 states. [2018-11-14 18:15:50,505 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 18:15:50,505 INFO L93 Difference]: Finished difference Result 131 states and 148 transitions. [2018-11-14 18:15:50,505 INFO L276 IsEmpty]: Start isEmpty. Operand 131 states and 148 transitions. [2018-11-14 18:15:50,506 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 18:15:50,506 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 18:15:50,506 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-14 18:15:50,506 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-14 18:15:50,506 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 130 states. [2018-11-14 18:15:50,508 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 130 states to 130 states and 147 transitions. [2018-11-14 18:15:50,508 INFO L78 Accepts]: Start accepts. Automaton has 130 states and 147 transitions. Word has length 37 [2018-11-14 18:15:50,508 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-14 18:15:50,508 INFO L480 AbstractCegarLoop]: Abstraction has 130 states and 147 transitions. [2018-11-14 18:15:50,508 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-14 18:15:50,508 INFO L276 IsEmpty]: Start isEmpty. Operand 130 states and 147 transitions. [2018-11-14 18:15:50,509 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 41 [2018-11-14 18:15:50,509 INFO L367 BasicCegarLoop]: Found error trace [2018-11-14 18:15:50,509 INFO L375 BasicCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-14 18:15:50,510 INFO L423 AbstractCegarLoop]: === Iteration 15 === [mainErr8ASSERT_VIOLATIONERROR_FUNCTION, mainErr10ASSERT_VIOLATIONERROR_FUNCTION, mainErr11ASSERT_VIOLATIONERROR_FUNCTION, mainErr1ASSERT_VIOLATIONERROR_FUNCTION, mainErr5ASSERT_VIOLATIONERROR_FUNCTION, mainErr7ASSERT_VIOLATIONERROR_FUNCTION, mainErr9ASSERT_VIOLATIONERROR_FUNCTION, mainErr12ASSERT_VIOLATIONERROR_FUNCTION, mainErr2ASSERT_VIOLATIONERROR_FUNCTION, mainErr3ASSERT_VIOLATIONERROR_FUNCTION, mainErr0ASSERT_VIOLATIONERROR_FUNCTION, mainErr4ASSERT_VIOLATIONERROR_FUNCTION, mainErr6ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-14 18:15:50,510 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-14 18:15:50,510 INFO L82 PathProgramCache]: Analyzing trace with hash -1696792162, now seen corresponding path program 1 times [2018-11-14 18:15:50,510 INFO L223 ckRefinementStrategy]: Switched to mode CVC4_FPBP [2018-11-14 18:15:50,510 INFO L69 tionRefinementEngine]: Using refinement strategy WolfRefinementStrategy No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/cvc4nyu Starting monitored process 16 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 16 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk [2018-11-14 18:15:50,527 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-14 18:15:50,566 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-14 18:15:50,579 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-14 18:15:50,580 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-14 18:15:50,824 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 19 treesize of output 15 [2018-11-14 18:15:50,831 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 3 [2018-11-14 18:15:50,836 INFO L267 ElimStorePlain]: Start of recursive call 3: End of recursive call: and 1 xjuncts. [2018-11-14 18:15:50,841 INFO L267 ElimStorePlain]: Start of recursive call 2: 1 dim-1 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:15:50,856 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 19 treesize of output 15 [2018-11-14 18:15:50,866 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 3 [2018-11-14 18:15:50,867 INFO L267 ElimStorePlain]: Start of recursive call 5: End of recursive call: and 1 xjuncts. [2018-11-14 18:15:50,872 INFO L267 ElimStorePlain]: Start of recursive call 4: 1 dim-1 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:15:50,880 INFO L267 ElimStorePlain]: Start of recursive call 1: 2 dim-0 vars, 2 dim-2 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:15:50,880 INFO L202 ElimStorePlain]: Needed 5 recursive calls to eliminate 4 variables, input treesize:37, output treesize:7 [2018-11-14 18:15:50,885 WARN L383 uantifierElimination]: Trying to double check SDD result, but SMT solver's response was UNKNOWN. [2018-11-14 18:15:50,939 INFO L256 TraceCheckUtils]: 0: Hoare triple {9023#true} call ULTIMATE.init(); {9023#true} is VALID [2018-11-14 18:15:50,939 INFO L273 TraceCheckUtils]: 1: Hoare triple {9023#true} #NULL.base, #NULL.offset := 0bv32, 0bv32;#valid := #valid[0bv32 := 0bv1]; {9023#true} is VALID [2018-11-14 18:15:50,939 INFO L273 TraceCheckUtils]: 2: Hoare triple {9023#true} assume true; {9023#true} is VALID [2018-11-14 18:15:50,939 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {9023#true} {9023#true} #358#return; {9023#true} is VALID [2018-11-14 18:15:50,940 INFO L256 TraceCheckUtils]: 4: Hoare triple {9023#true} call #t~ret28 := main(); {9023#true} is VALID [2018-11-14 18:15:50,940 INFO L273 TraceCheckUtils]: 5: Hoare triple {9023#true} call #t~malloc0.base, #t~malloc0.offset := #Ultimate.alloc(8bv32);~list~0.base, ~list~0.offset := #t~malloc0.base, #t~malloc0.offset;call write~$Pointer$(0bv32, 0bv32, ~list~0.base, ~list~0.offset, 4bv32); {9023#true} is VALID [2018-11-14 18:15:50,940 INFO L273 TraceCheckUtils]: 6: Hoare triple {9023#true} assume true; {9023#true} is VALID [2018-11-14 18:15:50,940 INFO L273 TraceCheckUtils]: 7: Hoare triple {9023#true} assume !!(~list~0.base != 0bv32 || ~list~0.offset != 0bv32); {9023#true} is VALID [2018-11-14 18:15:50,940 INFO L273 TraceCheckUtils]: 8: Hoare triple {9023#true} assume true; {9023#true} is VALID [2018-11-14 18:15:50,940 INFO L273 TraceCheckUtils]: 9: Hoare triple {9023#true} assume #t~nondet1 != 0bv32;havoc #t~nondet1;call write~$Pointer$(0bv32, 0bv32, ~list~0.base, ~bvadd32(4bv32, ~list~0.offset), 4bv32); {9023#true} is VALID [2018-11-14 18:15:50,942 INFO L273 TraceCheckUtils]: 10: Hoare triple {9023#true} assume true;call #t~mem5.base, #t~mem5.offset := read~$Pointer$(~list~0.base, ~bvadd32(4bv32, ~list~0.offset), 4bv32);#t~short7 := #t~mem5.base != 0bv32 || #t~mem5.offset != 0bv32; {9058#(or (and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (not |main_#t~short7|)) (and |main_#t~short7| (or (not (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32))) (not (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32))))))} is VALID [2018-11-14 18:15:50,943 INFO L273 TraceCheckUtils]: 11: Hoare triple {9058#(or (and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (not |main_#t~short7|)) (and |main_#t~short7| (or (not (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32))) (not (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32))))))} assume !#t~short7;call #t~mem6.base, #t~mem6.offset := read~$Pointer$(~list~0.base, ~bvadd32(4bv32, ~list~0.offset), 4bv32);#t~short7 := #t~mem6.base == 0bv32 && #t~mem6.offset == 0bv32; {9062#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)))} is VALID [2018-11-14 18:15:50,944 INFO L273 TraceCheckUtils]: 12: Hoare triple {9062#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)))} assume !!#t~short7;havoc #t~mem5.base, #t~mem5.offset;havoc #t~mem6.base, #t~mem6.offset;havoc #t~short7; {9062#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)))} is VALID [2018-11-14 18:15:50,944 INFO L273 TraceCheckUtils]: 13: Hoare triple {9062#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)))} assume true; {9062#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)))} is VALID [2018-11-14 18:15:50,945 INFO L273 TraceCheckUtils]: 14: Hoare triple {9062#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)))} ~end~0.base, ~end~0.offset := ~list~0.base, ~list~0.offset; {9062#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)))} is VALID [2018-11-14 18:15:50,946 INFO L273 TraceCheckUtils]: 15: Hoare triple {9062#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)))} assume true; {9062#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)))} is VALID [2018-11-14 18:15:50,947 INFO L273 TraceCheckUtils]: 16: Hoare triple {9062#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)))} assume !(#t~nondet8 != 0bv32);havoc #t~nondet8; {9062#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)))} is VALID [2018-11-14 18:15:50,950 INFO L273 TraceCheckUtils]: 17: Hoare triple {9062#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)))} ~end~0.base, ~end~0.offset := 0bv32, 0bv32;~end~0.base, ~end~0.offset := ~list~0.base, ~list~0.offset; {9062#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)))} is VALID [2018-11-14 18:15:50,950 INFO L273 TraceCheckUtils]: 18: Hoare triple {9062#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)))} assume true; {9062#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)))} is VALID [2018-11-14 18:15:50,956 INFO L273 TraceCheckUtils]: 19: Hoare triple {9062#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)))} assume !!(0bv32 != ~end~0.base || 0bv32 != ~end~0.offset); {9062#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)))} is VALID [2018-11-14 18:15:50,956 INFO L273 TraceCheckUtils]: 20: Hoare triple {9062#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)))} assume true; {9062#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)))} is VALID [2018-11-14 18:15:50,958 INFO L273 TraceCheckUtils]: 21: Hoare triple {9062#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)))} assume true; {9062#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)))} is VALID [2018-11-14 18:15:50,958 INFO L273 TraceCheckUtils]: 22: Hoare triple {9062#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)))} assume !!(0bv32 != ~end~0.base || 0bv32 != ~end~0.offset);~len~0 := 0bv32;call #t~mem18.base, #t~mem18.offset := read~$Pointer$(~end~0.base, ~bvadd32(4bv32, ~end~0.offset), 4bv32);~inner~0.base, ~inner~0.offset := #t~mem18.base, #t~mem18.offset;havoc #t~mem18.base, #t~mem18.offset; {9062#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)))} is VALID [2018-11-14 18:15:50,962 INFO L273 TraceCheckUtils]: 23: Hoare triple {9062#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)))} assume true; {9062#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)))} is VALID [2018-11-14 18:15:50,963 INFO L273 TraceCheckUtils]: 24: Hoare triple {9062#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)))} assume !(0bv32 != ~inner~0.base || 0bv32 != ~inner~0.offset); {9062#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)))} is VALID [2018-11-14 18:15:50,968 INFO L273 TraceCheckUtils]: 25: Hoare triple {9062#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)))} assume true; {9062#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)))} is VALID [2018-11-14 18:15:50,968 INFO L273 TraceCheckUtils]: 26: Hoare triple {9062#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)))} assume !!~bvsle32(~len~0, 1bv32); {9062#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)))} is VALID [2018-11-14 18:15:50,975 INFO L273 TraceCheckUtils]: 27: Hoare triple {9062#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)))} assume true; {9062#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)))} is VALID [2018-11-14 18:15:50,975 INFO L273 TraceCheckUtils]: 28: Hoare triple {9062#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)))} call #t~mem23.base, #t~mem23.offset := read~$Pointer$(~end~0.base, ~end~0.offset, 4bv32);~end~0.base, ~end~0.offset := #t~mem23.base, #t~mem23.offset;havoc #t~mem23.base, #t~mem23.offset; {9062#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)))} is VALID [2018-11-14 18:15:50,976 INFO L273 TraceCheckUtils]: 29: Hoare triple {9062#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)))} assume true; {9062#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)))} is VALID [2018-11-14 18:15:50,977 INFO L273 TraceCheckUtils]: 30: Hoare triple {9062#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)))} assume !(0bv32 != ~end~0.base || 0bv32 != ~end~0.offset); {9062#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)))} is VALID [2018-11-14 18:15:50,977 INFO L273 TraceCheckUtils]: 31: Hoare triple {9062#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)))} assume true; {9062#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)))} is VALID [2018-11-14 18:15:50,979 INFO L273 TraceCheckUtils]: 32: Hoare triple {9062#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)))} assume !!(0bv32 != ~list~0.base || 0bv32 != ~list~0.offset);call #t~mem24.base, #t~mem24.offset := read~$Pointer$(~list~0.base, ~bvadd32(4bv32, ~list~0.offset), 4bv32);~end~0.base, ~end~0.offset := #t~mem24.base, #t~mem24.offset;havoc #t~mem24.base, #t~mem24.offset; {9126#(and (= (_ bv0 32) main_~end~0.base) (= main_~end~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:15:50,979 INFO L273 TraceCheckUtils]: 33: Hoare triple {9126#(and (= (_ bv0 32) main_~end~0.base) (= main_~end~0.offset (_ bv0 32)))} assume 0bv32 != ~end~0.base || 0bv32 != ~end~0.offset; {9024#false} is VALID [2018-11-14 18:15:50,980 INFO L273 TraceCheckUtils]: 34: Hoare triple {9024#false} assume true; {9024#false} is VALID [2018-11-14 18:15:50,980 INFO L273 TraceCheckUtils]: 35: Hoare triple {9024#false} assume !!(0bv32 != ~end~0.base || 0bv32 != ~end~0.offset); {9024#false} is VALID [2018-11-14 18:15:50,980 INFO L273 TraceCheckUtils]: 36: Hoare triple {9024#false} assume true; {9024#false} is VALID [2018-11-14 18:15:50,980 INFO L273 TraceCheckUtils]: 37: Hoare triple {9024#false} assume true;call #t~mem25.base, #t~mem25.offset := read~$Pointer$(~end~0.base, ~bvadd32(4bv32, ~end~0.offset), 4bv32); {9024#false} is VALID [2018-11-14 18:15:50,980 INFO L273 TraceCheckUtils]: 38: Hoare triple {9024#false} assume !(0bv32 == #t~mem25.base && 0bv32 == #t~mem25.offset);havoc #t~mem25.base, #t~mem25.offset; {9024#false} is VALID [2018-11-14 18:15:50,980 INFO L273 TraceCheckUtils]: 39: Hoare triple {9024#false} assume !false; {9024#false} is VALID [2018-11-14 18:15:50,984 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2018-11-14 18:15:50,984 INFO L312 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2018-11-14 18:15:50,992 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-14 18:15:50,992 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-14 18:15:50,993 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 40 [2018-11-14 18:15:50,993 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-14 18:15:50,993 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states. [2018-11-14 18:15:51,054 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 39 edges. 39 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 18:15:51,055 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2018-11-14 18:15:51,055 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-14 18:15:51,055 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-14 18:15:51,056 INFO L87 Difference]: Start difference. First operand 130 states and 147 transitions. Second operand 5 states. [2018-11-14 18:15:53,295 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 18:15:53,295 INFO L93 Difference]: Finished difference Result 215 states and 241 transitions. [2018-11-14 18:15:53,295 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2018-11-14 18:15:53,296 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 40 [2018-11-14 18:15:53,296 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-14 18:15:53,296 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2018-11-14 18:15:53,299 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 154 transitions. [2018-11-14 18:15:53,299 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2018-11-14 18:15:53,304 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 154 transitions. [2018-11-14 18:15:53,304 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 7 states and 154 transitions. [2018-11-14 18:15:53,493 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 154 edges. 154 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 18:15:53,498 INFO L225 Difference]: With dead ends: 215 [2018-11-14 18:15:53,498 INFO L226 Difference]: Without dead ends: 197 [2018-11-14 18:15:53,498 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 41 GetRequests, 36 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2018-11-14 18:15:53,499 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 197 states. [2018-11-14 18:15:53,864 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 197 to 188. [2018-11-14 18:15:53,864 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-14 18:15:53,864 INFO L82 GeneralOperation]: Start isEquivalent. First operand 197 states. Second operand 188 states. [2018-11-14 18:15:53,865 INFO L74 IsIncluded]: Start isIncluded. First operand 197 states. Second operand 188 states. [2018-11-14 18:15:53,865 INFO L87 Difference]: Start difference. First operand 197 states. Second operand 188 states. [2018-11-14 18:15:53,872 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 18:15:53,872 INFO L93 Difference]: Finished difference Result 197 states and 221 transitions. [2018-11-14 18:15:53,872 INFO L276 IsEmpty]: Start isEmpty. Operand 197 states and 221 transitions. [2018-11-14 18:15:53,873 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 18:15:53,873 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 18:15:53,873 INFO L74 IsIncluded]: Start isIncluded. First operand 188 states. Second operand 197 states. [2018-11-14 18:15:53,873 INFO L87 Difference]: Start difference. First operand 188 states. Second operand 197 states. [2018-11-14 18:15:53,880 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 18:15:53,881 INFO L93 Difference]: Finished difference Result 197 states and 221 transitions. [2018-11-14 18:15:53,881 INFO L276 IsEmpty]: Start isEmpty. Operand 197 states and 221 transitions. [2018-11-14 18:15:53,881 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 18:15:53,881 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 18:15:53,882 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-14 18:15:53,882 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-14 18:15:53,882 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 188 states. [2018-11-14 18:15:53,888 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 188 states to 188 states and 215 transitions. [2018-11-14 18:15:53,888 INFO L78 Accepts]: Start accepts. Automaton has 188 states and 215 transitions. Word has length 40 [2018-11-14 18:15:53,888 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-14 18:15:53,888 INFO L480 AbstractCegarLoop]: Abstraction has 188 states and 215 transitions. [2018-11-14 18:15:53,888 INFO L481 AbstractCegarLoop]: Interpolant automaton has 5 states. [2018-11-14 18:15:53,888 INFO L276 IsEmpty]: Start isEmpty. Operand 188 states and 215 transitions. [2018-11-14 18:15:53,889 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 41 [2018-11-14 18:15:53,889 INFO L367 BasicCegarLoop]: Found error trace [2018-11-14 18:15:53,889 INFO L375 BasicCegarLoop]: trace histogram [2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-14 18:15:53,890 INFO L423 AbstractCegarLoop]: === Iteration 16 === [mainErr8ASSERT_VIOLATIONERROR_FUNCTION, mainErr10ASSERT_VIOLATIONERROR_FUNCTION, mainErr11ASSERT_VIOLATIONERROR_FUNCTION, mainErr1ASSERT_VIOLATIONERROR_FUNCTION, mainErr5ASSERT_VIOLATIONERROR_FUNCTION, mainErr7ASSERT_VIOLATIONERROR_FUNCTION, mainErr9ASSERT_VIOLATIONERROR_FUNCTION, mainErr12ASSERT_VIOLATIONERROR_FUNCTION, mainErr2ASSERT_VIOLATIONERROR_FUNCTION, mainErr3ASSERT_VIOLATIONERROR_FUNCTION, mainErr0ASSERT_VIOLATIONERROR_FUNCTION, mainErr4ASSERT_VIOLATIONERROR_FUNCTION, mainErr6ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-14 18:15:53,890 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-14 18:15:53,890 INFO L82 PathProgramCache]: Analyzing trace with hash -1342854989, now seen corresponding path program 1 times [2018-11-14 18:15:53,890 INFO L223 ckRefinementStrategy]: Switched to mode CVC4_FPBP [2018-11-14 18:15:53,891 INFO L69 tionRefinementEngine]: Using refinement strategy WolfRefinementStrategy No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/cvc4nyu Starting monitored process 17 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 17 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk [2018-11-14 18:15:53,921 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-14 18:15:53,988 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-14 18:15:54,000 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-14 18:15:54,002 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-14 18:15:54,050 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 8 [2018-11-14 18:15:54,057 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 8 treesize of output 7 [2018-11-14 18:15:54,061 INFO L267 ElimStorePlain]: Start of recursive call 3: End of recursive call: and 1 xjuncts. [2018-11-14 18:15:54,064 INFO L267 ElimStorePlain]: Start of recursive call 2: 1 dim-1 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:15:54,083 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 8 [2018-11-14 18:15:54,091 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 8 treesize of output 7 [2018-11-14 18:15:54,094 INFO L267 ElimStorePlain]: Start of recursive call 5: End of recursive call: and 1 xjuncts. [2018-11-14 18:15:54,097 INFO L267 ElimStorePlain]: Start of recursive call 4: 1 dim-1 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:15:54,107 INFO L267 ElimStorePlain]: Start of recursive call 1: 2 dim-2 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:15:54,107 INFO L202 ElimStorePlain]: Needed 5 recursive calls to eliminate 2 variables, input treesize:26, output treesize:18 [2018-11-14 18:15:54,190 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 21 treesize of output 16 [2018-11-14 18:15:54,200 INFO L700 Elim1Store]: detected not equals via solver [2018-11-14 18:15:54,201 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 23 [2018-11-14 18:15:54,206 INFO L267 ElimStorePlain]: Start of recursive call 3: End of recursive call: and 1 xjuncts. [2018-11-14 18:15:54,219 INFO L267 ElimStorePlain]: Start of recursive call 2: 1 dim-1 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:15:54,254 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 21 treesize of output 16 [2018-11-14 18:15:54,266 INFO L700 Elim1Store]: detected not equals via solver [2018-11-14 18:15:54,267 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 23 [2018-11-14 18:15:54,271 INFO L267 ElimStorePlain]: Start of recursive call 5: End of recursive call: and 1 xjuncts. [2018-11-14 18:15:54,282 INFO L267 ElimStorePlain]: Start of recursive call 4: 1 dim-1 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:15:54,300 INFO L267 ElimStorePlain]: Start of recursive call 1: 2 dim-2 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:15:54,301 INFO L202 ElimStorePlain]: Needed 5 recursive calls to eliminate 2 variables, input treesize:44, output treesize:36 [2018-11-14 18:15:54,509 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 22 treesize of output 16 [2018-11-14 18:15:54,518 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 3 [2018-11-14 18:15:54,520 INFO L267 ElimStorePlain]: Start of recursive call 3: End of recursive call: and 1 xjuncts. [2018-11-14 18:15:54,522 INFO L267 ElimStorePlain]: Start of recursive call 2: 1 dim-1 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:15:54,538 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 22 treesize of output 16 [2018-11-14 18:15:54,544 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 3 [2018-11-14 18:15:54,545 INFO L267 ElimStorePlain]: Start of recursive call 5: End of recursive call: and 1 xjuncts. [2018-11-14 18:15:54,548 INFO L267 ElimStorePlain]: Start of recursive call 4: 1 dim-1 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:15:54,554 INFO L267 ElimStorePlain]: Start of recursive call 1: 1 dim-0 vars, 2 dim-2 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:15:54,554 INFO L202 ElimStorePlain]: Needed 5 recursive calls to eliminate 3 variables, input treesize:43, output treesize:7 [2018-11-14 18:15:54,560 WARN L383 uantifierElimination]: Trying to double check SDD result, but SMT solver's response was UNKNOWN. [2018-11-14 18:15:54,602 INFO L256 TraceCheckUtils]: 0: Hoare triple {10001#true} call ULTIMATE.init(); {10001#true} is VALID [2018-11-14 18:15:54,602 INFO L273 TraceCheckUtils]: 1: Hoare triple {10001#true} #NULL.base, #NULL.offset := 0bv32, 0bv32;#valid := #valid[0bv32 := 0bv1]; {10001#true} is VALID [2018-11-14 18:15:54,602 INFO L273 TraceCheckUtils]: 2: Hoare triple {10001#true} assume true; {10001#true} is VALID [2018-11-14 18:15:54,602 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {10001#true} {10001#true} #358#return; {10001#true} is VALID [2018-11-14 18:15:54,602 INFO L256 TraceCheckUtils]: 4: Hoare triple {10001#true} call #t~ret28 := main(); {10001#true} is VALID [2018-11-14 18:15:54,604 INFO L273 TraceCheckUtils]: 5: Hoare triple {10001#true} call #t~malloc0.base, #t~malloc0.offset := #Ultimate.alloc(8bv32);~list~0.base, ~list~0.offset := #t~malloc0.base, #t~malloc0.offset;call write~$Pointer$(0bv32, 0bv32, ~list~0.base, ~list~0.offset, 4bv32); {10021#(and (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:15:54,604 INFO L273 TraceCheckUtils]: 6: Hoare triple {10021#(and (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= main_~list~0.offset (_ bv0 32)))} assume true; {10021#(and (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:15:54,605 INFO L273 TraceCheckUtils]: 7: Hoare triple {10021#(and (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= main_~list~0.offset (_ bv0 32)))} assume !!(~list~0.base != 0bv32 || ~list~0.offset != 0bv32); {10021#(and (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:15:54,606 INFO L273 TraceCheckUtils]: 8: Hoare triple {10021#(and (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= main_~list~0.offset (_ bv0 32)))} assume true; {10021#(and (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:15:54,608 INFO L273 TraceCheckUtils]: 9: Hoare triple {10021#(and (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= main_~list~0.offset (_ bv0 32)))} assume #t~nondet1 != 0bv32;havoc #t~nondet1;call write~$Pointer$(0bv32, 0bv32, ~list~0.base, ~bvadd32(4bv32, ~list~0.offset), 4bv32); {10034#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:15:54,610 INFO L273 TraceCheckUtils]: 10: Hoare triple {10034#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= main_~list~0.offset (_ bv0 32)))} assume true;call #t~mem5.base, #t~mem5.offset := read~$Pointer$(~list~0.base, ~bvadd32(4bv32, ~list~0.offset), 4bv32);#t~short7 := #t~mem5.base != 0bv32 || #t~mem5.offset != 0bv32; {10034#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:15:54,611 INFO L273 TraceCheckUtils]: 11: Hoare triple {10034#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= main_~list~0.offset (_ bv0 32)))} assume !#t~short7;call #t~mem6.base, #t~mem6.offset := read~$Pointer$(~list~0.base, ~bvadd32(4bv32, ~list~0.offset), 4bv32);#t~short7 := #t~mem6.base == 0bv32 && #t~mem6.offset == 0bv32; {10034#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:15:54,612 INFO L273 TraceCheckUtils]: 12: Hoare triple {10034#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= main_~list~0.offset (_ bv0 32)))} assume !!#t~short7;havoc #t~mem5.base, #t~mem5.offset;havoc #t~mem6.base, #t~mem6.offset;havoc #t~short7; {10034#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:15:54,613 INFO L273 TraceCheckUtils]: 13: Hoare triple {10034#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= main_~list~0.offset (_ bv0 32)))} assume true; {10034#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:15:54,614 INFO L273 TraceCheckUtils]: 14: Hoare triple {10034#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= main_~list~0.offset (_ bv0 32)))} ~end~0.base, ~end~0.offset := ~list~0.base, ~list~0.offset; {10034#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:15:54,615 INFO L273 TraceCheckUtils]: 15: Hoare triple {10034#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= main_~list~0.offset (_ bv0 32)))} assume true; {10034#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:15:54,617 INFO L273 TraceCheckUtils]: 16: Hoare triple {10034#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= main_~list~0.offset (_ bv0 32)))} assume !(#t~nondet8 != 0bv32);havoc #t~nondet8; {10034#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:15:54,618 INFO L273 TraceCheckUtils]: 17: Hoare triple {10034#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= main_~list~0.offset (_ bv0 32)))} ~end~0.base, ~end~0.offset := 0bv32, 0bv32;~end~0.base, ~end~0.offset := ~list~0.base, ~list~0.offset; {10059#(and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (= main_~end~0.offset (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)))} is VALID [2018-11-14 18:15:54,619 INFO L273 TraceCheckUtils]: 18: Hoare triple {10059#(and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (= main_~end~0.offset (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)))} assume true; {10059#(and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (= main_~end~0.offset (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)))} is VALID [2018-11-14 18:15:54,620 INFO L273 TraceCheckUtils]: 19: Hoare triple {10059#(and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (= main_~end~0.offset (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)))} assume !!(0bv32 != ~end~0.base || 0bv32 != ~end~0.offset); {10059#(and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (= main_~end~0.offset (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)))} is VALID [2018-11-14 18:15:54,621 INFO L273 TraceCheckUtils]: 20: Hoare triple {10059#(and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (= main_~end~0.offset (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)))} assume true; {10059#(and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (= main_~end~0.offset (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)))} is VALID [2018-11-14 18:15:54,622 INFO L273 TraceCheckUtils]: 21: Hoare triple {10059#(and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (= main_~end~0.offset (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)))} assume true; {10059#(and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (= main_~end~0.offset (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)))} is VALID [2018-11-14 18:15:54,623 INFO L273 TraceCheckUtils]: 22: Hoare triple {10059#(and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (= main_~end~0.offset (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)))} assume !!(0bv32 != ~end~0.base || 0bv32 != ~end~0.offset);~len~0 := 0bv32;call #t~mem18.base, #t~mem18.offset := read~$Pointer$(~end~0.base, ~bvadd32(4bv32, ~end~0.offset), 4bv32);~inner~0.base, ~inner~0.offset := #t~mem18.base, #t~mem18.offset;havoc #t~mem18.base, #t~mem18.offset; {10059#(and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (= main_~end~0.offset (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)))} is VALID [2018-11-14 18:15:54,624 INFO L273 TraceCheckUtils]: 23: Hoare triple {10059#(and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (= main_~end~0.offset (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)))} assume true; {10059#(and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (= main_~end~0.offset (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)))} is VALID [2018-11-14 18:15:54,625 INFO L273 TraceCheckUtils]: 24: Hoare triple {10059#(and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (= main_~end~0.offset (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)))} assume !(0bv32 != ~inner~0.base || 0bv32 != ~inner~0.offset); {10059#(and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (= main_~end~0.offset (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)))} is VALID [2018-11-14 18:15:54,626 INFO L273 TraceCheckUtils]: 25: Hoare triple {10059#(and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (= main_~end~0.offset (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)))} assume true; {10059#(and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (= main_~end~0.offset (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)))} is VALID [2018-11-14 18:15:54,627 INFO L273 TraceCheckUtils]: 26: Hoare triple {10059#(and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (= main_~end~0.offset (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)))} assume !!~bvsle32(~len~0, 1bv32); {10059#(and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (= main_~end~0.offset (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)))} is VALID [2018-11-14 18:15:54,628 INFO L273 TraceCheckUtils]: 27: Hoare triple {10059#(and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (= main_~end~0.offset (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)))} assume true; {10059#(and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (= main_~end~0.offset (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)))} is VALID [2018-11-14 18:15:54,629 INFO L273 TraceCheckUtils]: 28: Hoare triple {10059#(and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (= main_~end~0.offset (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)))} call #t~mem23.base, #t~mem23.offset := read~$Pointer$(~end~0.base, ~end~0.offset, 4bv32);~end~0.base, ~end~0.offset := #t~mem23.base, #t~mem23.offset;havoc #t~mem23.base, #t~mem23.offset; {10093#(and (= (_ bv0 32) main_~end~0.base) (= main_~end~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:15:54,630 INFO L273 TraceCheckUtils]: 29: Hoare triple {10093#(and (= (_ bv0 32) main_~end~0.base) (= main_~end~0.offset (_ bv0 32)))} assume true; {10093#(and (= (_ bv0 32) main_~end~0.base) (= main_~end~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:15:54,631 INFO L273 TraceCheckUtils]: 30: Hoare triple {10093#(and (= (_ bv0 32) main_~end~0.base) (= main_~end~0.offset (_ bv0 32)))} assume !!(0bv32 != ~end~0.base || 0bv32 != ~end~0.offset);~len~0 := 0bv32;call #t~mem18.base, #t~mem18.offset := read~$Pointer$(~end~0.base, ~bvadd32(4bv32, ~end~0.offset), 4bv32);~inner~0.base, ~inner~0.offset := #t~mem18.base, #t~mem18.offset;havoc #t~mem18.base, #t~mem18.offset; {10002#false} is VALID [2018-11-14 18:15:54,631 INFO L273 TraceCheckUtils]: 31: Hoare triple {10002#false} assume true; {10002#false} is VALID [2018-11-14 18:15:54,631 INFO L273 TraceCheckUtils]: 32: Hoare triple {10002#false} assume !!(0bv32 != ~inner~0.base || 0bv32 != ~inner~0.offset); {10002#false} is VALID [2018-11-14 18:15:54,632 INFO L273 TraceCheckUtils]: 33: Hoare triple {10002#false} assume ~len~0 == 0bv32;~len~0 := 1bv32; {10002#false} is VALID [2018-11-14 18:15:54,632 INFO L273 TraceCheckUtils]: 34: Hoare triple {10002#false} assume true; {10002#false} is VALID [2018-11-14 18:15:54,632 INFO L273 TraceCheckUtils]: 35: Hoare triple {10002#false} assume !!(0bv32 != ~inner~0.base || 0bv32 != ~inner~0.offset); {10002#false} is VALID [2018-11-14 18:15:54,632 INFO L273 TraceCheckUtils]: 36: Hoare triple {10002#false} assume true; {10002#false} is VALID [2018-11-14 18:15:54,633 INFO L273 TraceCheckUtils]: 37: Hoare triple {10002#false} assume true;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~inner~0.base, ~bvadd32(4bv32, ~inner~0.offset), 4bv32); {10002#false} is VALID [2018-11-14 18:15:54,633 INFO L273 TraceCheckUtils]: 38: Hoare triple {10002#false} assume !(0bv32 == #t~mem19.base && 0bv32 == #t~mem19.offset);havoc #t~mem19.base, #t~mem19.offset; {10002#false} is VALID [2018-11-14 18:15:54,633 INFO L273 TraceCheckUtils]: 39: Hoare triple {10002#false} assume !false; {10002#false} is VALID [2018-11-14 18:15:54,640 INFO L134 CoverageAnalysis]: Checked inductivity of 4 backedges. 2 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-14 18:15:54,640 INFO L316 TraceCheckSpWp]: Computing backward predicates... [2018-11-14 18:15:54,836 INFO L273 TraceCheckUtils]: 39: Hoare triple {10002#false} assume !false; {10002#false} is VALID [2018-11-14 18:15:54,837 INFO L273 TraceCheckUtils]: 38: Hoare triple {10002#false} assume !(0bv32 == #t~mem19.base && 0bv32 == #t~mem19.offset);havoc #t~mem19.base, #t~mem19.offset; {10002#false} is VALID [2018-11-14 18:15:54,837 INFO L273 TraceCheckUtils]: 37: Hoare triple {10002#false} assume true;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~inner~0.base, ~bvadd32(4bv32, ~inner~0.offset), 4bv32); {10002#false} is VALID [2018-11-14 18:15:54,837 INFO L273 TraceCheckUtils]: 36: Hoare triple {10002#false} assume true; {10002#false} is VALID [2018-11-14 18:15:54,837 INFO L273 TraceCheckUtils]: 35: Hoare triple {10002#false} assume !!(0bv32 != ~inner~0.base || 0bv32 != ~inner~0.offset); {10002#false} is VALID [2018-11-14 18:15:54,838 INFO L273 TraceCheckUtils]: 34: Hoare triple {10002#false} assume true; {10002#false} is VALID [2018-11-14 18:15:54,838 INFO L273 TraceCheckUtils]: 33: Hoare triple {10002#false} assume ~len~0 == 0bv32;~len~0 := 1bv32; {10002#false} is VALID [2018-11-14 18:15:54,838 INFO L273 TraceCheckUtils]: 32: Hoare triple {10002#false} assume !!(0bv32 != ~inner~0.base || 0bv32 != ~inner~0.offset); {10002#false} is VALID [2018-11-14 18:15:54,838 INFO L273 TraceCheckUtils]: 31: Hoare triple {10002#false} assume true; {10002#false} is VALID [2018-11-14 18:15:54,839 INFO L273 TraceCheckUtils]: 30: Hoare triple {10093#(and (= (_ bv0 32) main_~end~0.base) (= main_~end~0.offset (_ bv0 32)))} assume !!(0bv32 != ~end~0.base || 0bv32 != ~end~0.offset);~len~0 := 0bv32;call #t~mem18.base, #t~mem18.offset := read~$Pointer$(~end~0.base, ~bvadd32(4bv32, ~end~0.offset), 4bv32);~inner~0.base, ~inner~0.offset := #t~mem18.base, #t~mem18.offset;havoc #t~mem18.base, #t~mem18.offset; {10002#false} is VALID [2018-11-14 18:15:54,839 INFO L273 TraceCheckUtils]: 29: Hoare triple {10093#(and (= (_ bv0 32) main_~end~0.base) (= main_~end~0.offset (_ bv0 32)))} assume true; {10093#(and (= (_ bv0 32) main_~end~0.base) (= main_~end~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:15:54,840 INFO L273 TraceCheckUtils]: 28: Hoare triple {10160#(and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)))} call #t~mem23.base, #t~mem23.offset := read~$Pointer$(~end~0.base, ~end~0.offset, 4bv32);~end~0.base, ~end~0.offset := #t~mem23.base, #t~mem23.offset;havoc #t~mem23.base, #t~mem23.offset; {10093#(and (= (_ bv0 32) main_~end~0.base) (= main_~end~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:15:54,840 INFO L273 TraceCheckUtils]: 27: Hoare triple {10160#(and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)))} assume true; {10160#(and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)))} is VALID [2018-11-14 18:15:54,841 INFO L273 TraceCheckUtils]: 26: Hoare triple {10160#(and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)))} assume !!~bvsle32(~len~0, 1bv32); {10160#(and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)))} is VALID [2018-11-14 18:15:54,842 INFO L273 TraceCheckUtils]: 25: Hoare triple {10160#(and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)))} assume true; {10160#(and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)))} is VALID [2018-11-14 18:15:54,842 INFO L273 TraceCheckUtils]: 24: Hoare triple {10160#(and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)))} assume !(0bv32 != ~inner~0.base || 0bv32 != ~inner~0.offset); {10160#(and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)))} is VALID [2018-11-14 18:15:54,843 INFO L273 TraceCheckUtils]: 23: Hoare triple {10160#(and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)))} assume true; {10160#(and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)))} is VALID [2018-11-14 18:15:54,844 INFO L273 TraceCheckUtils]: 22: Hoare triple {10160#(and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)))} assume !!(0bv32 != ~end~0.base || 0bv32 != ~end~0.offset);~len~0 := 0bv32;call #t~mem18.base, #t~mem18.offset := read~$Pointer$(~end~0.base, ~bvadd32(4bv32, ~end~0.offset), 4bv32);~inner~0.base, ~inner~0.offset := #t~mem18.base, #t~mem18.offset;havoc #t~mem18.base, #t~mem18.offset; {10160#(and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)))} is VALID [2018-11-14 18:15:54,845 INFO L273 TraceCheckUtils]: 21: Hoare triple {10160#(and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)))} assume true; {10160#(and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)))} is VALID [2018-11-14 18:15:54,845 INFO L273 TraceCheckUtils]: 20: Hoare triple {10160#(and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)))} assume true; {10160#(and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)))} is VALID [2018-11-14 18:15:54,846 INFO L273 TraceCheckUtils]: 19: Hoare triple {10160#(and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)))} assume !!(0bv32 != ~end~0.base || 0bv32 != ~end~0.offset); {10160#(and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)))} is VALID [2018-11-14 18:15:54,847 INFO L273 TraceCheckUtils]: 18: Hoare triple {10160#(and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)))} assume true; {10160#(and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)))} is VALID [2018-11-14 18:15:54,848 INFO L273 TraceCheckUtils]: 17: Hoare triple {10194#(and (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)))} ~end~0.base, ~end~0.offset := 0bv32, 0bv32;~end~0.base, ~end~0.offset := ~list~0.base, ~list~0.offset; {10160#(and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)))} is VALID [2018-11-14 18:15:54,849 INFO L273 TraceCheckUtils]: 16: Hoare triple {10194#(and (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)))} assume !(#t~nondet8 != 0bv32);havoc #t~nondet8; {10194#(and (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)))} is VALID [2018-11-14 18:15:54,850 INFO L273 TraceCheckUtils]: 15: Hoare triple {10194#(and (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)))} assume true; {10194#(and (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)))} is VALID [2018-11-14 18:15:54,850 INFO L273 TraceCheckUtils]: 14: Hoare triple {10194#(and (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)))} ~end~0.base, ~end~0.offset := ~list~0.base, ~list~0.offset; {10194#(and (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)))} is VALID [2018-11-14 18:15:54,851 INFO L273 TraceCheckUtils]: 13: Hoare triple {10194#(and (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)))} assume true; {10194#(and (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)))} is VALID [2018-11-14 18:15:54,852 INFO L273 TraceCheckUtils]: 12: Hoare triple {10194#(and (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)))} assume !!#t~short7;havoc #t~mem5.base, #t~mem5.offset;havoc #t~mem6.base, #t~mem6.offset;havoc #t~short7; {10194#(and (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)))} is VALID [2018-11-14 18:15:54,853 INFO L273 TraceCheckUtils]: 11: Hoare triple {10194#(and (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)))} assume !#t~short7;call #t~mem6.base, #t~mem6.offset := read~$Pointer$(~list~0.base, ~bvadd32(4bv32, ~list~0.offset), 4bv32);#t~short7 := #t~mem6.base == 0bv32 && #t~mem6.offset == 0bv32; {10194#(and (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)))} is VALID [2018-11-14 18:15:54,854 INFO L273 TraceCheckUtils]: 10: Hoare triple {10194#(and (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)))} assume true;call #t~mem5.base, #t~mem5.offset := read~$Pointer$(~list~0.base, ~bvadd32(4bv32, ~list~0.offset), 4bv32);#t~short7 := #t~mem5.base != 0bv32 || #t~mem5.offset != 0bv32; {10194#(and (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)))} is VALID [2018-11-14 18:15:54,856 INFO L273 TraceCheckUtils]: 9: Hoare triple {10194#(and (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)))} assume #t~nondet1 != 0bv32;havoc #t~nondet1;call write~$Pointer$(0bv32, 0bv32, ~list~0.base, ~bvadd32(4bv32, ~list~0.offset), 4bv32); {10194#(and (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)))} is VALID [2018-11-14 18:15:54,857 INFO L273 TraceCheckUtils]: 8: Hoare triple {10194#(and (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)))} assume true; {10194#(and (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)))} is VALID [2018-11-14 18:15:54,858 INFO L273 TraceCheckUtils]: 7: Hoare triple {10194#(and (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)))} assume !!(~list~0.base != 0bv32 || ~list~0.offset != 0bv32); {10194#(and (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)))} is VALID [2018-11-14 18:15:54,859 INFO L273 TraceCheckUtils]: 6: Hoare triple {10194#(and (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)))} assume true; {10194#(and (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)))} is VALID [2018-11-14 18:15:54,861 INFO L273 TraceCheckUtils]: 5: Hoare triple {10001#true} call #t~malloc0.base, #t~malloc0.offset := #Ultimate.alloc(8bv32);~list~0.base, ~list~0.offset := #t~malloc0.base, #t~malloc0.offset;call write~$Pointer$(0bv32, 0bv32, ~list~0.base, ~list~0.offset, 4bv32); {10194#(and (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)))} is VALID [2018-11-14 18:15:54,861 INFO L256 TraceCheckUtils]: 4: Hoare triple {10001#true} call #t~ret28 := main(); {10001#true} is VALID [2018-11-14 18:15:54,861 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {10001#true} {10001#true} #358#return; {10001#true} is VALID [2018-11-14 18:15:54,861 INFO L273 TraceCheckUtils]: 2: Hoare triple {10001#true} assume true; {10001#true} is VALID [2018-11-14 18:15:54,862 INFO L273 TraceCheckUtils]: 1: Hoare triple {10001#true} #NULL.base, #NULL.offset := 0bv32, 0bv32;#valid := #valid[0bv32 := 0bv1]; {10001#true} is VALID [2018-11-14 18:15:54,862 INFO L256 TraceCheckUtils]: 0: Hoare triple {10001#true} call ULTIMATE.init(); {10001#true} is VALID [2018-11-14 18:15:54,865 INFO L134 CoverageAnalysis]: Checked inductivity of 4 backedges. 2 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-14 18:15:54,867 INFO L312 seRefinementStrategy]: Constructing automaton from 0 perfect and 2 imperfect interpolant sequences. [2018-11-14 18:15:54,867 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [6, 5] total 8 [2018-11-14 18:15:54,868 INFO L78 Accepts]: Start accepts. Automaton has 8 states. Word has length 40 [2018-11-14 18:15:54,868 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-14 18:15:54,868 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 8 states. [2018-11-14 18:15:54,986 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 64 edges. 64 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 18:15:54,986 INFO L459 AbstractCegarLoop]: Interpolant automaton has 8 states [2018-11-14 18:15:54,986 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2018-11-14 18:15:54,986 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=17, Invalid=39, Unknown=0, NotChecked=0, Total=56 [2018-11-14 18:15:54,987 INFO L87 Difference]: Start difference. First operand 188 states and 215 transitions. Second operand 8 states. [2018-11-14 18:15:57,975 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 18:15:57,975 INFO L93 Difference]: Finished difference Result 320 states and 366 transitions. [2018-11-14 18:15:57,975 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2018-11-14 18:15:57,976 INFO L78 Accepts]: Start accepts. Automaton has 8 states. Word has length 40 [2018-11-14 18:15:57,976 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-14 18:15:57,976 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 8 states. [2018-11-14 18:15:57,979 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10 states to 10 states and 222 transitions. [2018-11-14 18:15:57,979 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 8 states. [2018-11-14 18:15:57,983 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10 states to 10 states and 222 transitions. [2018-11-14 18:15:57,983 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 10 states and 222 transitions. [2018-11-14 18:15:58,345 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 222 edges. 222 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 18:15:58,352 INFO L225 Difference]: With dead ends: 320 [2018-11-14 18:15:58,352 INFO L226 Difference]: Without dead ends: 243 [2018-11-14 18:15:58,353 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 83 GetRequests, 72 SyntacticMatches, 1 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 15 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=42, Invalid=90, Unknown=0, NotChecked=0, Total=132 [2018-11-14 18:15:58,353 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 243 states. [2018-11-14 18:15:58,804 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 243 to 207. [2018-11-14 18:15:58,804 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-14 18:15:58,804 INFO L82 GeneralOperation]: Start isEquivalent. First operand 243 states. Second operand 207 states. [2018-11-14 18:15:58,804 INFO L74 IsIncluded]: Start isIncluded. First operand 243 states. Second operand 207 states. [2018-11-14 18:15:58,804 INFO L87 Difference]: Start difference. First operand 243 states. Second operand 207 states. [2018-11-14 18:15:58,813 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 18:15:58,813 INFO L93 Difference]: Finished difference Result 243 states and 272 transitions. [2018-11-14 18:15:58,813 INFO L276 IsEmpty]: Start isEmpty. Operand 243 states and 272 transitions. [2018-11-14 18:15:58,814 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 18:15:58,814 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 18:15:58,814 INFO L74 IsIncluded]: Start isIncluded. First operand 207 states. Second operand 243 states. [2018-11-14 18:15:58,814 INFO L87 Difference]: Start difference. First operand 207 states. Second operand 243 states. [2018-11-14 18:15:58,822 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 18:15:58,822 INFO L93 Difference]: Finished difference Result 243 states and 272 transitions. [2018-11-14 18:15:58,822 INFO L276 IsEmpty]: Start isEmpty. Operand 243 states and 272 transitions. [2018-11-14 18:15:58,823 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 18:15:58,823 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 18:15:58,823 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-14 18:15:58,823 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-14 18:15:58,824 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 207 states. [2018-11-14 18:15:58,830 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 207 states to 207 states and 238 transitions. [2018-11-14 18:15:58,830 INFO L78 Accepts]: Start accepts. Automaton has 207 states and 238 transitions. Word has length 40 [2018-11-14 18:15:58,830 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-14 18:15:58,830 INFO L480 AbstractCegarLoop]: Abstraction has 207 states and 238 transitions. [2018-11-14 18:15:58,831 INFO L481 AbstractCegarLoop]: Interpolant automaton has 8 states. [2018-11-14 18:15:58,831 INFO L276 IsEmpty]: Start isEmpty. Operand 207 states and 238 transitions. [2018-11-14 18:15:58,831 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 41 [2018-11-14 18:15:58,832 INFO L367 BasicCegarLoop]: Found error trace [2018-11-14 18:15:58,832 INFO L375 BasicCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-14 18:15:58,832 INFO L423 AbstractCegarLoop]: === Iteration 17 === [mainErr8ASSERT_VIOLATIONERROR_FUNCTION, mainErr10ASSERT_VIOLATIONERROR_FUNCTION, mainErr11ASSERT_VIOLATIONERROR_FUNCTION, mainErr1ASSERT_VIOLATIONERROR_FUNCTION, mainErr5ASSERT_VIOLATIONERROR_FUNCTION, mainErr7ASSERT_VIOLATIONERROR_FUNCTION, mainErr9ASSERT_VIOLATIONERROR_FUNCTION, mainErr12ASSERT_VIOLATIONERROR_FUNCTION, mainErr2ASSERT_VIOLATIONERROR_FUNCTION, mainErr3ASSERT_VIOLATIONERROR_FUNCTION, mainErr0ASSERT_VIOLATIONERROR_FUNCTION, mainErr4ASSERT_VIOLATIONERROR_FUNCTION, mainErr6ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-14 18:15:58,833 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-14 18:15:58,833 INFO L82 PathProgramCache]: Analyzing trace with hash 1913571614, now seen corresponding path program 1 times [2018-11-14 18:15:58,833 INFO L223 ckRefinementStrategy]: Switched to mode CVC4_FPBP [2018-11-14 18:15:58,833 INFO L69 tionRefinementEngine]: Using refinement strategy WolfRefinementStrategy No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/cvc4nyu Starting monitored process 18 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 18 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk [2018-11-14 18:15:58,854 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-14 18:15:58,896 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-14 18:15:58,910 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-14 18:15:58,911 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-14 18:15:59,104 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 11 [2018-11-14 18:15:59,109 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 3 [2018-11-14 18:15:59,110 INFO L267 ElimStorePlain]: Start of recursive call 3: End of recursive call: and 1 xjuncts. [2018-11-14 18:15:59,113 INFO L267 ElimStorePlain]: Start of recursive call 2: 1 dim-1 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:15:59,125 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 11 [2018-11-14 18:15:59,130 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 3 [2018-11-14 18:15:59,131 INFO L267 ElimStorePlain]: Start of recursive call 5: End of recursive call: and 1 xjuncts. [2018-11-14 18:15:59,134 INFO L267 ElimStorePlain]: Start of recursive call 4: 1 dim-1 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:15:59,140 INFO L267 ElimStorePlain]: Start of recursive call 1: 1 dim-0 vars, 2 dim-2 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:15:59,140 INFO L202 ElimStorePlain]: Needed 5 recursive calls to eliminate 3 variables, input treesize:29, output treesize:7 [2018-11-14 18:15:59,145 WARN L383 uantifierElimination]: Trying to double check SDD result, but SMT solver's response was UNKNOWN. [2018-11-14 18:15:59,164 INFO L256 TraceCheckUtils]: 0: Hoare triple {11327#true} call ULTIMATE.init(); {11327#true} is VALID [2018-11-14 18:15:59,164 INFO L273 TraceCheckUtils]: 1: Hoare triple {11327#true} #NULL.base, #NULL.offset := 0bv32, 0bv32;#valid := #valid[0bv32 := 0bv1]; {11327#true} is VALID [2018-11-14 18:15:59,165 INFO L273 TraceCheckUtils]: 2: Hoare triple {11327#true} assume true; {11327#true} is VALID [2018-11-14 18:15:59,165 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {11327#true} {11327#true} #358#return; {11327#true} is VALID [2018-11-14 18:15:59,165 INFO L256 TraceCheckUtils]: 4: Hoare triple {11327#true} call #t~ret28 := main(); {11327#true} is VALID [2018-11-14 18:15:59,166 INFO L273 TraceCheckUtils]: 5: Hoare triple {11327#true} call #t~malloc0.base, #t~malloc0.offset := #Ultimate.alloc(8bv32);~list~0.base, ~list~0.offset := #t~malloc0.base, #t~malloc0.offset;call write~$Pointer$(0bv32, 0bv32, ~list~0.base, ~list~0.offset, 4bv32); {11347#(= main_~list~0.offset (_ bv0 32))} is VALID [2018-11-14 18:15:59,166 INFO L273 TraceCheckUtils]: 6: Hoare triple {11347#(= main_~list~0.offset (_ bv0 32))} assume true; {11347#(= main_~list~0.offset (_ bv0 32))} is VALID [2018-11-14 18:15:59,167 INFO L273 TraceCheckUtils]: 7: Hoare triple {11347#(= main_~list~0.offset (_ bv0 32))} assume !!(~list~0.base != 0bv32 || ~list~0.offset != 0bv32); {11347#(= main_~list~0.offset (_ bv0 32))} is VALID [2018-11-14 18:15:59,167 INFO L273 TraceCheckUtils]: 8: Hoare triple {11347#(= main_~list~0.offset (_ bv0 32))} assume true; {11347#(= main_~list~0.offset (_ bv0 32))} is VALID [2018-11-14 18:15:59,167 INFO L273 TraceCheckUtils]: 9: Hoare triple {11347#(= main_~list~0.offset (_ bv0 32))} assume !(#t~nondet1 != 0bv32);havoc #t~nondet1;call #t~malloc2.base, #t~malloc2.offset := #Ultimate.alloc(8bv32);call write~$Pointer$(#t~malloc2.base, #t~malloc2.offset, ~list~0.base, ~bvadd32(4bv32, ~list~0.offset), 4bv32);call #t~mem3.base, #t~mem3.offset := read~$Pointer$(~list~0.base, ~bvadd32(4bv32, ~list~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, #t~mem3.base, #t~mem3.offset, 4bv32);havoc #t~mem3.base, #t~mem3.offset;call #t~mem4.base, #t~mem4.offset := read~$Pointer$(~list~0.base, ~bvadd32(4bv32, ~list~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, #t~mem4.base, ~bvadd32(4bv32, #t~mem4.offset), 4bv32);havoc #t~mem4.base, #t~mem4.offset; {11347#(= main_~list~0.offset (_ bv0 32))} is VALID [2018-11-14 18:15:59,168 INFO L273 TraceCheckUtils]: 10: Hoare triple {11347#(= main_~list~0.offset (_ bv0 32))} assume true;call #t~mem5.base, #t~mem5.offset := read~$Pointer$(~list~0.base, ~bvadd32(4bv32, ~list~0.offset), 4bv32);#t~short7 := #t~mem5.base != 0bv32 || #t~mem5.offset != 0bv32; {11347#(= main_~list~0.offset (_ bv0 32))} is VALID [2018-11-14 18:15:59,168 INFO L273 TraceCheckUtils]: 11: Hoare triple {11347#(= main_~list~0.offset (_ bv0 32))} assume #t~short7; {11347#(= main_~list~0.offset (_ bv0 32))} is VALID [2018-11-14 18:15:59,168 INFO L273 TraceCheckUtils]: 12: Hoare triple {11347#(= main_~list~0.offset (_ bv0 32))} assume !!#t~short7;havoc #t~mem5.base, #t~mem5.offset;havoc #t~mem6.base, #t~mem6.offset;havoc #t~short7; {11347#(= main_~list~0.offset (_ bv0 32))} is VALID [2018-11-14 18:15:59,169 INFO L273 TraceCheckUtils]: 13: Hoare triple {11347#(= main_~list~0.offset (_ bv0 32))} assume true; {11347#(= main_~list~0.offset (_ bv0 32))} is VALID [2018-11-14 18:15:59,169 INFO L273 TraceCheckUtils]: 14: Hoare triple {11347#(= main_~list~0.offset (_ bv0 32))} ~end~0.base, ~end~0.offset := ~list~0.base, ~list~0.offset; {11347#(= main_~list~0.offset (_ bv0 32))} is VALID [2018-11-14 18:15:59,169 INFO L273 TraceCheckUtils]: 15: Hoare triple {11347#(= main_~list~0.offset (_ bv0 32))} assume true; {11347#(= main_~list~0.offset (_ bv0 32))} is VALID [2018-11-14 18:15:59,170 INFO L273 TraceCheckUtils]: 16: Hoare triple {11347#(= main_~list~0.offset (_ bv0 32))} assume !(#t~nondet8 != 0bv32);havoc #t~nondet8; {11347#(= main_~list~0.offset (_ bv0 32))} is VALID [2018-11-14 18:15:59,171 INFO L273 TraceCheckUtils]: 17: Hoare triple {11347#(= main_~list~0.offset (_ bv0 32))} ~end~0.base, ~end~0.offset := 0bv32, 0bv32;~end~0.base, ~end~0.offset := ~list~0.base, ~list~0.offset; {11384#(and (= main_~list~0.base main_~end~0.base) (= main_~list~0.offset main_~end~0.offset) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:15:59,171 INFO L273 TraceCheckUtils]: 18: Hoare triple {11384#(and (= main_~list~0.base main_~end~0.base) (= main_~list~0.offset main_~end~0.offset) (= main_~list~0.offset (_ bv0 32)))} assume true; {11384#(and (= main_~list~0.base main_~end~0.base) (= main_~list~0.offset main_~end~0.offset) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:15:59,172 INFO L273 TraceCheckUtils]: 19: Hoare triple {11384#(and (= main_~list~0.base main_~end~0.base) (= main_~list~0.offset main_~end~0.offset) (= main_~list~0.offset (_ bv0 32)))} assume !!(0bv32 != ~end~0.base || 0bv32 != ~end~0.offset); {11384#(and (= main_~list~0.base main_~end~0.base) (= main_~list~0.offset main_~end~0.offset) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:15:59,173 INFO L273 TraceCheckUtils]: 20: Hoare triple {11384#(and (= main_~list~0.base main_~end~0.base) (= main_~list~0.offset main_~end~0.offset) (= main_~list~0.offset (_ bv0 32)))} assume true; {11384#(and (= main_~list~0.base main_~end~0.base) (= main_~list~0.offset main_~end~0.offset) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:15:59,173 INFO L273 TraceCheckUtils]: 21: Hoare triple {11384#(and (= main_~list~0.base main_~end~0.base) (= main_~list~0.offset main_~end~0.offset) (= main_~list~0.offset (_ bv0 32)))} assume true; {11384#(and (= main_~list~0.base main_~end~0.base) (= main_~list~0.offset main_~end~0.offset) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:15:59,174 INFO L273 TraceCheckUtils]: 22: Hoare triple {11384#(and (= main_~list~0.base main_~end~0.base) (= main_~list~0.offset main_~end~0.offset) (= main_~list~0.offset (_ bv0 32)))} assume !!(0bv32 != ~end~0.base || 0bv32 != ~end~0.offset);~len~0 := 0bv32;call #t~mem18.base, #t~mem18.offset := read~$Pointer$(~end~0.base, ~bvadd32(4bv32, ~end~0.offset), 4bv32);~inner~0.base, ~inner~0.offset := #t~mem18.base, #t~mem18.offset;havoc #t~mem18.base, #t~mem18.offset; {11400#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) main_~inner~0.offset) (= main_~inner~0.base (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:15:59,175 INFO L273 TraceCheckUtils]: 23: Hoare triple {11400#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) main_~inner~0.offset) (= main_~inner~0.base (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (= main_~list~0.offset (_ bv0 32)))} assume true; {11400#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) main_~inner~0.offset) (= main_~inner~0.base (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:15:59,176 INFO L273 TraceCheckUtils]: 24: Hoare triple {11400#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) main_~inner~0.offset) (= main_~inner~0.base (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (= main_~list~0.offset (_ bv0 32)))} assume !(0bv32 != ~inner~0.base || 0bv32 != ~inner~0.offset); {11407#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:15:59,177 INFO L273 TraceCheckUtils]: 25: Hoare triple {11407#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset (_ bv0 32)))} assume true; {11407#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:15:59,178 INFO L273 TraceCheckUtils]: 26: Hoare triple {11407#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset (_ bv0 32)))} assume !!~bvsle32(~len~0, 1bv32); {11407#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:15:59,179 INFO L273 TraceCheckUtils]: 27: Hoare triple {11407#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset (_ bv0 32)))} assume true; {11407#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:15:59,180 INFO L273 TraceCheckUtils]: 28: Hoare triple {11407#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset (_ bv0 32)))} call #t~mem23.base, #t~mem23.offset := read~$Pointer$(~end~0.base, ~end~0.offset, 4bv32);~end~0.base, ~end~0.offset := #t~mem23.base, #t~mem23.offset;havoc #t~mem23.base, #t~mem23.offset; {11407#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:15:59,180 INFO L273 TraceCheckUtils]: 29: Hoare triple {11407#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset (_ bv0 32)))} assume true; {11407#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:15:59,181 INFO L273 TraceCheckUtils]: 30: Hoare triple {11407#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset (_ bv0 32)))} assume !(0bv32 != ~end~0.base || 0bv32 != ~end~0.offset); {11407#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:15:59,182 INFO L273 TraceCheckUtils]: 31: Hoare triple {11407#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset (_ bv0 32)))} assume true; {11407#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:15:59,183 INFO L273 TraceCheckUtils]: 32: Hoare triple {11407#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset (_ bv0 32)))} assume !!(0bv32 != ~list~0.base || 0bv32 != ~list~0.offset);call #t~mem24.base, #t~mem24.offset := read~$Pointer$(~list~0.base, ~bvadd32(4bv32, ~list~0.offset), 4bv32);~end~0.base, ~end~0.offset := #t~mem24.base, #t~mem24.offset;havoc #t~mem24.base, #t~mem24.offset; {11432#(and (= (_ bv0 32) main_~end~0.base) (= main_~end~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:15:59,198 INFO L273 TraceCheckUtils]: 33: Hoare triple {11432#(and (= (_ bv0 32) main_~end~0.base) (= main_~end~0.offset (_ bv0 32)))} assume 0bv32 != ~end~0.base || 0bv32 != ~end~0.offset; {11328#false} is VALID [2018-11-14 18:15:59,198 INFO L273 TraceCheckUtils]: 34: Hoare triple {11328#false} assume true; {11328#false} is VALID [2018-11-14 18:15:59,199 INFO L273 TraceCheckUtils]: 35: Hoare triple {11328#false} assume !!(0bv32 != ~end~0.base || 0bv32 != ~end~0.offset); {11328#false} is VALID [2018-11-14 18:15:59,199 INFO L273 TraceCheckUtils]: 36: Hoare triple {11328#false} assume true; {11328#false} is VALID [2018-11-14 18:15:59,199 INFO L273 TraceCheckUtils]: 37: Hoare triple {11328#false} assume true;call #t~mem25.base, #t~mem25.offset := read~$Pointer$(~end~0.base, ~bvadd32(4bv32, ~end~0.offset), 4bv32); {11328#false} is VALID [2018-11-14 18:15:59,199 INFO L273 TraceCheckUtils]: 38: Hoare triple {11328#false} assume !(0bv32 == #t~mem25.base && 0bv32 == #t~mem25.offset);havoc #t~mem25.base, #t~mem25.offset; {11328#false} is VALID [2018-11-14 18:15:59,199 INFO L273 TraceCheckUtils]: 39: Hoare triple {11328#false} assume !false; {11328#false} is VALID [2018-11-14 18:15:59,202 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-14 18:15:59,202 INFO L316 TraceCheckSpWp]: Computing backward predicates... [2018-11-14 18:15:59,354 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 30 treesize of output 34 [2018-11-14 18:15:59,367 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 29 treesize of output 21 [2018-11-14 18:15:59,370 INFO L267 ElimStorePlain]: Start of recursive call 3: End of recursive call: and 1 xjuncts. [2018-11-14 18:15:59,417 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 21 treesize of output 17 [2018-11-14 18:15:59,420 INFO L267 ElimStorePlain]: Start of recursive call 4: End of recursive call: and 1 xjuncts. [2018-11-14 18:15:59,462 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 2 disjoint index pairs (out of 1 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 26 treesize of output 21 [2018-11-14 18:15:59,466 INFO L267 ElimStorePlain]: Start of recursive call 5: End of recursive call: and 1 xjuncts. [2018-11-14 18:15:59,489 INFO L267 ElimStorePlain]: Start of recursive call 2: 3 dim-1 vars, End of recursive call: and 2 xjuncts. [2018-11-14 18:15:59,548 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 18 treesize of output 16 [2018-11-14 18:15:59,553 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 8 treesize of output 1 [2018-11-14 18:15:59,553 INFO L267 ElimStorePlain]: Start of recursive call 7: End of recursive call: and 1 xjuncts. [2018-11-14 18:15:59,557 INFO L267 ElimStorePlain]: Start of recursive call 6: 1 dim-1 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:15:59,562 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 12 [2018-11-14 18:15:59,567 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 8 treesize of output 1 [2018-11-14 18:15:59,567 INFO L267 ElimStorePlain]: Start of recursive call 9: End of recursive call: and 1 xjuncts. [2018-11-14 18:15:59,571 INFO L267 ElimStorePlain]: Start of recursive call 8: 1 dim-1 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:15:59,602 INFO L267 ElimStorePlain]: Start of recursive call 1: 4 dim-2 vars, End of recursive call: and 2 xjuncts. [2018-11-14 18:15:59,603 INFO L202 ElimStorePlain]: Needed 9 recursive calls to eliminate 4 variables, input treesize:61, output treesize:11 [2018-11-14 18:15:59,623 WARN L383 uantifierElimination]: Trying to double check SDD result, but SMT solver's response was UNKNOWN. [2018-11-14 18:15:59,668 INFO L273 TraceCheckUtils]: 39: Hoare triple {11328#false} assume !false; {11328#false} is VALID [2018-11-14 18:15:59,668 INFO L273 TraceCheckUtils]: 38: Hoare triple {11328#false} assume !(0bv32 == #t~mem25.base && 0bv32 == #t~mem25.offset);havoc #t~mem25.base, #t~mem25.offset; {11328#false} is VALID [2018-11-14 18:15:59,669 INFO L273 TraceCheckUtils]: 37: Hoare triple {11328#false} assume true;call #t~mem25.base, #t~mem25.offset := read~$Pointer$(~end~0.base, ~bvadd32(4bv32, ~end~0.offset), 4bv32); {11328#false} is VALID [2018-11-14 18:15:59,669 INFO L273 TraceCheckUtils]: 36: Hoare triple {11328#false} assume true; {11328#false} is VALID [2018-11-14 18:15:59,669 INFO L273 TraceCheckUtils]: 35: Hoare triple {11328#false} assume !!(0bv32 != ~end~0.base || 0bv32 != ~end~0.offset); {11328#false} is VALID [2018-11-14 18:15:59,669 INFO L273 TraceCheckUtils]: 34: Hoare triple {11328#false} assume true; {11328#false} is VALID [2018-11-14 18:15:59,669 INFO L273 TraceCheckUtils]: 33: Hoare triple {11432#(and (= (_ bv0 32) main_~end~0.base) (= main_~end~0.offset (_ bv0 32)))} assume 0bv32 != ~end~0.base || 0bv32 != ~end~0.offset; {11328#false} is VALID [2018-11-14 18:15:59,670 INFO L273 TraceCheckUtils]: 32: Hoare triple {11475#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)))} assume !!(0bv32 != ~list~0.base || 0bv32 != ~list~0.offset);call #t~mem24.base, #t~mem24.offset := read~$Pointer$(~list~0.base, ~bvadd32(4bv32, ~list~0.offset), 4bv32);~end~0.base, ~end~0.offset := #t~mem24.base, #t~mem24.offset;havoc #t~mem24.base, #t~mem24.offset; {11432#(and (= (_ bv0 32) main_~end~0.base) (= main_~end~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:15:59,670 INFO L273 TraceCheckUtils]: 31: Hoare triple {11475#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)))} assume true; {11475#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)))} is VALID [2018-11-14 18:15:59,671 INFO L273 TraceCheckUtils]: 30: Hoare triple {11475#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)))} assume !(0bv32 != ~end~0.base || 0bv32 != ~end~0.offset); {11475#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)))} is VALID [2018-11-14 18:15:59,671 INFO L273 TraceCheckUtils]: 29: Hoare triple {11475#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)))} assume true; {11475#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)))} is VALID [2018-11-14 18:15:59,672 INFO L273 TraceCheckUtils]: 28: Hoare triple {11475#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)))} call #t~mem23.base, #t~mem23.offset := read~$Pointer$(~end~0.base, ~end~0.offset, 4bv32);~end~0.base, ~end~0.offset := #t~mem23.base, #t~mem23.offset;havoc #t~mem23.base, #t~mem23.offset; {11475#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)))} is VALID [2018-11-14 18:15:59,672 INFO L273 TraceCheckUtils]: 27: Hoare triple {11475#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)))} assume true; {11475#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)))} is VALID [2018-11-14 18:15:59,673 INFO L273 TraceCheckUtils]: 26: Hoare triple {11475#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)))} assume !!~bvsle32(~len~0, 1bv32); {11475#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)))} is VALID [2018-11-14 18:15:59,674 INFO L273 TraceCheckUtils]: 25: Hoare triple {11475#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)))} assume true; {11475#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)))} is VALID [2018-11-14 18:15:59,675 INFO L273 TraceCheckUtils]: 24: Hoare triple {11500#(or (not (= (_ bv0 32) main_~inner~0.offset)) (and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32))) (not (= main_~inner~0.base (_ bv0 32))))} assume !(0bv32 != ~inner~0.base || 0bv32 != ~inner~0.offset); {11475#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)))} is VALID [2018-11-14 18:15:59,675 INFO L273 TraceCheckUtils]: 23: Hoare triple {11500#(or (not (= (_ bv0 32) main_~inner~0.offset)) (and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32))) (not (= main_~inner~0.base (_ bv0 32))))} assume true; {11500#(or (not (= (_ bv0 32) main_~inner~0.offset)) (and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32))) (not (= main_~inner~0.base (_ bv0 32))))} is VALID [2018-11-14 18:15:59,676 INFO L273 TraceCheckUtils]: 22: Hoare triple {11507#(and (= main_~list~0.base main_~end~0.base) (= main_~list~0.offset main_~end~0.offset))} assume !!(0bv32 != ~end~0.base || 0bv32 != ~end~0.offset);~len~0 := 0bv32;call #t~mem18.base, #t~mem18.offset := read~$Pointer$(~end~0.base, ~bvadd32(4bv32, ~end~0.offset), 4bv32);~inner~0.base, ~inner~0.offset := #t~mem18.base, #t~mem18.offset;havoc #t~mem18.base, #t~mem18.offset; {11500#(or (not (= (_ bv0 32) main_~inner~0.offset)) (and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32))) (not (= main_~inner~0.base (_ bv0 32))))} is VALID [2018-11-14 18:15:59,677 INFO L273 TraceCheckUtils]: 21: Hoare triple {11507#(and (= main_~list~0.base main_~end~0.base) (= main_~list~0.offset main_~end~0.offset))} assume true; {11507#(and (= main_~list~0.base main_~end~0.base) (= main_~list~0.offset main_~end~0.offset))} is VALID [2018-11-14 18:15:59,677 INFO L273 TraceCheckUtils]: 20: Hoare triple {11507#(and (= main_~list~0.base main_~end~0.base) (= main_~list~0.offset main_~end~0.offset))} assume true; {11507#(and (= main_~list~0.base main_~end~0.base) (= main_~list~0.offset main_~end~0.offset))} is VALID [2018-11-14 18:15:59,678 INFO L273 TraceCheckUtils]: 19: Hoare triple {11507#(and (= main_~list~0.base main_~end~0.base) (= main_~list~0.offset main_~end~0.offset))} assume !!(0bv32 != ~end~0.base || 0bv32 != ~end~0.offset); {11507#(and (= main_~list~0.base main_~end~0.base) (= main_~list~0.offset main_~end~0.offset))} is VALID [2018-11-14 18:15:59,679 INFO L273 TraceCheckUtils]: 18: Hoare triple {11507#(and (= main_~list~0.base main_~end~0.base) (= main_~list~0.offset main_~end~0.offset))} assume true; {11507#(and (= main_~list~0.base main_~end~0.base) (= main_~list~0.offset main_~end~0.offset))} is VALID [2018-11-14 18:15:59,679 INFO L273 TraceCheckUtils]: 17: Hoare triple {11327#true} ~end~0.base, ~end~0.offset := 0bv32, 0bv32;~end~0.base, ~end~0.offset := ~list~0.base, ~list~0.offset; {11507#(and (= main_~list~0.base main_~end~0.base) (= main_~list~0.offset main_~end~0.offset))} is VALID [2018-11-14 18:15:59,680 INFO L273 TraceCheckUtils]: 16: Hoare triple {11327#true} assume !(#t~nondet8 != 0bv32);havoc #t~nondet8; {11327#true} is VALID [2018-11-14 18:15:59,680 INFO L273 TraceCheckUtils]: 15: Hoare triple {11327#true} assume true; {11327#true} is VALID [2018-11-14 18:15:59,680 INFO L273 TraceCheckUtils]: 14: Hoare triple {11327#true} ~end~0.base, ~end~0.offset := ~list~0.base, ~list~0.offset; {11327#true} is VALID [2018-11-14 18:15:59,680 INFO L273 TraceCheckUtils]: 13: Hoare triple {11327#true} assume true; {11327#true} is VALID [2018-11-14 18:15:59,681 INFO L273 TraceCheckUtils]: 12: Hoare triple {11327#true} assume !!#t~short7;havoc #t~mem5.base, #t~mem5.offset;havoc #t~mem6.base, #t~mem6.offset;havoc #t~short7; {11327#true} is VALID [2018-11-14 18:15:59,681 INFO L273 TraceCheckUtils]: 11: Hoare triple {11327#true} assume #t~short7; {11327#true} is VALID [2018-11-14 18:15:59,681 INFO L273 TraceCheckUtils]: 10: Hoare triple {11327#true} assume true;call #t~mem5.base, #t~mem5.offset := read~$Pointer$(~list~0.base, ~bvadd32(4bv32, ~list~0.offset), 4bv32);#t~short7 := #t~mem5.base != 0bv32 || #t~mem5.offset != 0bv32; {11327#true} is VALID [2018-11-14 18:15:59,681 INFO L273 TraceCheckUtils]: 9: Hoare triple {11327#true} assume !(#t~nondet1 != 0bv32);havoc #t~nondet1;call #t~malloc2.base, #t~malloc2.offset := #Ultimate.alloc(8bv32);call write~$Pointer$(#t~malloc2.base, #t~malloc2.offset, ~list~0.base, ~bvadd32(4bv32, ~list~0.offset), 4bv32);call #t~mem3.base, #t~mem3.offset := read~$Pointer$(~list~0.base, ~bvadd32(4bv32, ~list~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, #t~mem3.base, #t~mem3.offset, 4bv32);havoc #t~mem3.base, #t~mem3.offset;call #t~mem4.base, #t~mem4.offset := read~$Pointer$(~list~0.base, ~bvadd32(4bv32, ~list~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, #t~mem4.base, ~bvadd32(4bv32, #t~mem4.offset), 4bv32);havoc #t~mem4.base, #t~mem4.offset; {11327#true} is VALID [2018-11-14 18:15:59,681 INFO L273 TraceCheckUtils]: 8: Hoare triple {11327#true} assume true; {11327#true} is VALID [2018-11-14 18:15:59,682 INFO L273 TraceCheckUtils]: 7: Hoare triple {11327#true} assume !!(~list~0.base != 0bv32 || ~list~0.offset != 0bv32); {11327#true} is VALID [2018-11-14 18:15:59,682 INFO L273 TraceCheckUtils]: 6: Hoare triple {11327#true} assume true; {11327#true} is VALID [2018-11-14 18:15:59,682 INFO L273 TraceCheckUtils]: 5: Hoare triple {11327#true} call #t~malloc0.base, #t~malloc0.offset := #Ultimate.alloc(8bv32);~list~0.base, ~list~0.offset := #t~malloc0.base, #t~malloc0.offset;call write~$Pointer$(0bv32, 0bv32, ~list~0.base, ~list~0.offset, 4bv32); {11327#true} is VALID [2018-11-14 18:15:59,682 INFO L256 TraceCheckUtils]: 4: Hoare triple {11327#true} call #t~ret28 := main(); {11327#true} is VALID [2018-11-14 18:15:59,682 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {11327#true} {11327#true} #358#return; {11327#true} is VALID [2018-11-14 18:15:59,683 INFO L273 TraceCheckUtils]: 2: Hoare triple {11327#true} assume true; {11327#true} is VALID [2018-11-14 18:15:59,683 INFO L273 TraceCheckUtils]: 1: Hoare triple {11327#true} #NULL.base, #NULL.offset := 0bv32, 0bv32;#valid := #valid[0bv32 := 0bv1]; {11327#true} is VALID [2018-11-14 18:15:59,683 INFO L256 TraceCheckUtils]: 0: Hoare triple {11327#true} call ULTIMATE.init(); {11327#true} is VALID [2018-11-14 18:15:59,686 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-14 18:15:59,688 INFO L312 seRefinementStrategy]: Constructing automaton from 0 perfect and 2 imperfect interpolant sequences. [2018-11-14 18:15:59,688 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [7, 6] total 10 [2018-11-14 18:15:59,689 INFO L78 Accepts]: Start accepts. Automaton has 10 states. Word has length 40 [2018-11-14 18:15:59,689 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-14 18:15:59,689 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 10 states. [2018-11-14 18:15:59,962 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 68 edges. 68 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 18:15:59,962 INFO L459 AbstractCegarLoop]: Interpolant automaton has 10 states [2018-11-14 18:15:59,963 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2018-11-14 18:15:59,963 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=25, Invalid=65, Unknown=0, NotChecked=0, Total=90 [2018-11-14 18:15:59,963 INFO L87 Difference]: Start difference. First operand 207 states and 238 transitions. Second operand 10 states. [2018-11-14 18:16:03,867 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 18:16:03,867 INFO L93 Difference]: Finished difference Result 338 states and 381 transitions. [2018-11-14 18:16:03,867 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2018-11-14 18:16:03,868 INFO L78 Accepts]: Start accepts. Automaton has 10 states. Word has length 40 [2018-11-14 18:16:03,868 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-14 18:16:03,868 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 10 states. [2018-11-14 18:16:03,870 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15 states to 15 states and 247 transitions. [2018-11-14 18:16:03,870 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 10 states. [2018-11-14 18:16:03,872 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15 states to 15 states and 247 transitions. [2018-11-14 18:16:03,872 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 15 states and 247 transitions. [2018-11-14 18:16:04,245 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 247 edges. 247 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 18:16:04,252 INFO L225 Difference]: With dead ends: 338 [2018-11-14 18:16:04,252 INFO L226 Difference]: Without dead ends: 320 [2018-11-14 18:16:04,253 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 88 GetRequests, 72 SyntacticMatches, 0 SemanticMatches, 16 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 46 ImplicationChecksByTransitivity, 0.5s TimeCoverageRelationStatistics Valid=94, Invalid=212, Unknown=0, NotChecked=0, Total=306 [2018-11-14 18:16:04,253 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 320 states. [2018-11-14 18:16:05,653 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 320 to 232. [2018-11-14 18:16:05,654 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-14 18:16:05,654 INFO L82 GeneralOperation]: Start isEquivalent. First operand 320 states. Second operand 232 states. [2018-11-14 18:16:05,654 INFO L74 IsIncluded]: Start isIncluded. First operand 320 states. Second operand 232 states. [2018-11-14 18:16:05,654 INFO L87 Difference]: Start difference. First operand 320 states. Second operand 232 states. [2018-11-14 18:16:05,662 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 18:16:05,662 INFO L93 Difference]: Finished difference Result 320 states and 361 transitions. [2018-11-14 18:16:05,662 INFO L276 IsEmpty]: Start isEmpty. Operand 320 states and 361 transitions. [2018-11-14 18:16:05,663 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 18:16:05,663 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 18:16:05,663 INFO L74 IsIncluded]: Start isIncluded. First operand 232 states. Second operand 320 states. [2018-11-14 18:16:05,663 INFO L87 Difference]: Start difference. First operand 232 states. Second operand 320 states. [2018-11-14 18:16:05,672 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 18:16:05,672 INFO L93 Difference]: Finished difference Result 320 states and 361 transitions. [2018-11-14 18:16:05,672 INFO L276 IsEmpty]: Start isEmpty. Operand 320 states and 361 transitions. [2018-11-14 18:16:05,673 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 18:16:05,673 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 18:16:05,673 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-14 18:16:05,673 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-14 18:16:05,674 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 232 states. [2018-11-14 18:16:05,679 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 232 states to 232 states and 272 transitions. [2018-11-14 18:16:05,679 INFO L78 Accepts]: Start accepts. Automaton has 232 states and 272 transitions. Word has length 40 [2018-11-14 18:16:05,679 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-14 18:16:05,679 INFO L480 AbstractCegarLoop]: Abstraction has 232 states and 272 transitions. [2018-11-14 18:16:05,679 INFO L481 AbstractCegarLoop]: Interpolant automaton has 10 states. [2018-11-14 18:16:05,679 INFO L276 IsEmpty]: Start isEmpty. Operand 232 states and 272 transitions. [2018-11-14 18:16:05,680 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 43 [2018-11-14 18:16:05,680 INFO L367 BasicCegarLoop]: Found error trace [2018-11-14 18:16:05,680 INFO L375 BasicCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-14 18:16:05,681 INFO L423 AbstractCegarLoop]: === Iteration 18 === [mainErr8ASSERT_VIOLATIONERROR_FUNCTION, mainErr10ASSERT_VIOLATIONERROR_FUNCTION, mainErr11ASSERT_VIOLATIONERROR_FUNCTION, mainErr1ASSERT_VIOLATIONERROR_FUNCTION, mainErr5ASSERT_VIOLATIONERROR_FUNCTION, mainErr7ASSERT_VIOLATIONERROR_FUNCTION, mainErr9ASSERT_VIOLATIONERROR_FUNCTION, mainErr12ASSERT_VIOLATIONERROR_FUNCTION, mainErr2ASSERT_VIOLATIONERROR_FUNCTION, mainErr3ASSERT_VIOLATIONERROR_FUNCTION, mainErr0ASSERT_VIOLATIONERROR_FUNCTION, mainErr4ASSERT_VIOLATIONERROR_FUNCTION, mainErr6ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-14 18:16:05,681 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-14 18:16:05,681 INFO L82 PathProgramCache]: Analyzing trace with hash 1595418656, now seen corresponding path program 1 times [2018-11-14 18:16:05,682 INFO L223 ckRefinementStrategy]: Switched to mode CVC4_FPBP [2018-11-14 18:16:05,682 INFO L69 tionRefinementEngine]: Using refinement strategy WolfRefinementStrategy No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/cvc4nyu Starting monitored process 19 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 19 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk [2018-11-14 18:16:05,708 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-14 18:16:05,761 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-14 18:16:05,791 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-14 18:16:05,792 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-14 18:16:06,225 INFO L256 TraceCheckUtils]: 0: Hoare triple {12864#true} call ULTIMATE.init(); {12864#true} is VALID [2018-11-14 18:16:06,225 INFO L273 TraceCheckUtils]: 1: Hoare triple {12864#true} #NULL.base, #NULL.offset := 0bv32, 0bv32;#valid := #valid[0bv32 := 0bv1]; {12864#true} is VALID [2018-11-14 18:16:06,225 INFO L273 TraceCheckUtils]: 2: Hoare triple {12864#true} assume true; {12864#true} is VALID [2018-11-14 18:16:06,225 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {12864#true} {12864#true} #358#return; {12864#true} is VALID [2018-11-14 18:16:06,225 INFO L256 TraceCheckUtils]: 4: Hoare triple {12864#true} call #t~ret28 := main(); {12864#true} is VALID [2018-11-14 18:16:06,226 INFO L273 TraceCheckUtils]: 5: Hoare triple {12864#true} call #t~malloc0.base, #t~malloc0.offset := #Ultimate.alloc(8bv32);~list~0.base, ~list~0.offset := #t~malloc0.base, #t~malloc0.offset;call write~$Pointer$(0bv32, 0bv32, ~list~0.base, ~list~0.offset, 4bv32); {12864#true} is VALID [2018-11-14 18:16:06,226 INFO L273 TraceCheckUtils]: 6: Hoare triple {12864#true} assume true; {12864#true} is VALID [2018-11-14 18:16:06,226 INFO L273 TraceCheckUtils]: 7: Hoare triple {12864#true} assume !!(~list~0.base != 0bv32 || ~list~0.offset != 0bv32); {12864#true} is VALID [2018-11-14 18:16:06,226 INFO L273 TraceCheckUtils]: 8: Hoare triple {12864#true} assume true; {12864#true} is VALID [2018-11-14 18:16:06,226 INFO L273 TraceCheckUtils]: 9: Hoare triple {12864#true} assume !(#t~nondet1 != 0bv32);havoc #t~nondet1;call #t~malloc2.base, #t~malloc2.offset := #Ultimate.alloc(8bv32);call write~$Pointer$(#t~malloc2.base, #t~malloc2.offset, ~list~0.base, ~bvadd32(4bv32, ~list~0.offset), 4bv32);call #t~mem3.base, #t~mem3.offset := read~$Pointer$(~list~0.base, ~bvadd32(4bv32, ~list~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, #t~mem3.base, #t~mem3.offset, 4bv32);havoc #t~mem3.base, #t~mem3.offset;call #t~mem4.base, #t~mem4.offset := read~$Pointer$(~list~0.base, ~bvadd32(4bv32, ~list~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, #t~mem4.base, ~bvadd32(4bv32, #t~mem4.offset), 4bv32);havoc #t~mem4.base, #t~mem4.offset; {12864#true} is VALID [2018-11-14 18:16:06,226 INFO L273 TraceCheckUtils]: 10: Hoare triple {12864#true} assume true;call #t~mem5.base, #t~mem5.offset := read~$Pointer$(~list~0.base, ~bvadd32(4bv32, ~list~0.offset), 4bv32);#t~short7 := #t~mem5.base != 0bv32 || #t~mem5.offset != 0bv32; {12864#true} is VALID [2018-11-14 18:16:06,226 INFO L273 TraceCheckUtils]: 11: Hoare triple {12864#true} assume #t~short7; {12864#true} is VALID [2018-11-14 18:16:06,226 INFO L273 TraceCheckUtils]: 12: Hoare triple {12864#true} assume !!#t~short7;havoc #t~mem5.base, #t~mem5.offset;havoc #t~mem6.base, #t~mem6.offset;havoc #t~short7; {12864#true} is VALID [2018-11-14 18:16:06,227 INFO L273 TraceCheckUtils]: 13: Hoare triple {12864#true} assume true; {12864#true} is VALID [2018-11-14 18:16:06,227 INFO L273 TraceCheckUtils]: 14: Hoare triple {12864#true} ~end~0.base, ~end~0.offset := ~list~0.base, ~list~0.offset; {12864#true} is VALID [2018-11-14 18:16:06,227 INFO L273 TraceCheckUtils]: 15: Hoare triple {12864#true} assume true; {12864#true} is VALID [2018-11-14 18:16:06,227 INFO L273 TraceCheckUtils]: 16: Hoare triple {12864#true} assume !(#t~nondet8 != 0bv32);havoc #t~nondet8; {12864#true} is VALID [2018-11-14 18:16:06,227 INFO L273 TraceCheckUtils]: 17: Hoare triple {12864#true} ~end~0.base, ~end~0.offset := 0bv32, 0bv32;~end~0.base, ~end~0.offset := ~list~0.base, ~list~0.offset; {12864#true} is VALID [2018-11-14 18:16:06,227 INFO L273 TraceCheckUtils]: 18: Hoare triple {12864#true} assume true; {12864#true} is VALID [2018-11-14 18:16:06,227 INFO L273 TraceCheckUtils]: 19: Hoare triple {12864#true} assume !!(0bv32 != ~end~0.base || 0bv32 != ~end~0.offset); {12864#true} is VALID [2018-11-14 18:16:06,227 INFO L273 TraceCheckUtils]: 20: Hoare triple {12864#true} assume true; {12864#true} is VALID [2018-11-14 18:16:06,228 INFO L273 TraceCheckUtils]: 21: Hoare triple {12864#true} assume true; {12864#true} is VALID [2018-11-14 18:16:06,228 INFO L273 TraceCheckUtils]: 22: Hoare triple {12864#true} assume !!(0bv32 != ~end~0.base || 0bv32 != ~end~0.offset);~len~0 := 0bv32;call #t~mem18.base, #t~mem18.offset := read~$Pointer$(~end~0.base, ~bvadd32(4bv32, ~end~0.offset), 4bv32);~inner~0.base, ~inner~0.offset := #t~mem18.base, #t~mem18.offset;havoc #t~mem18.base, #t~mem18.offset; {12864#true} is VALID [2018-11-14 18:16:06,228 INFO L273 TraceCheckUtils]: 23: Hoare triple {12864#true} assume true; {12864#true} is VALID [2018-11-14 18:16:06,228 INFO L273 TraceCheckUtils]: 24: Hoare triple {12864#true} assume !!(0bv32 != ~inner~0.base || 0bv32 != ~inner~0.offset); {12864#true} is VALID [2018-11-14 18:16:06,228 INFO L273 TraceCheckUtils]: 25: Hoare triple {12864#true} assume ~len~0 == 0bv32;~len~0 := 1bv32; {12944#(= (bvadd main_~len~0 (_ bv4294967295 32)) (_ bv0 32))} is VALID [2018-11-14 18:16:06,229 INFO L273 TraceCheckUtils]: 26: Hoare triple {12944#(= (bvadd main_~len~0 (_ bv4294967295 32)) (_ bv0 32))} assume true; {12944#(= (bvadd main_~len~0 (_ bv4294967295 32)) (_ bv0 32))} is VALID [2018-11-14 18:16:06,229 INFO L273 TraceCheckUtils]: 27: Hoare triple {12944#(= (bvadd main_~len~0 (_ bv4294967295 32)) (_ bv0 32))} assume !!(0bv32 != ~inner~0.base || 0bv32 != ~inner~0.offset); {12944#(= (bvadd main_~len~0 (_ bv4294967295 32)) (_ bv0 32))} is VALID [2018-11-14 18:16:06,229 INFO L273 TraceCheckUtils]: 28: Hoare triple {12944#(= (bvadd main_~len~0 (_ bv4294967295 32)) (_ bv0 32))} assume true; {12944#(= (bvadd main_~len~0 (_ bv4294967295 32)) (_ bv0 32))} is VALID [2018-11-14 18:16:06,230 INFO L273 TraceCheckUtils]: 29: Hoare triple {12944#(= (bvadd main_~len~0 (_ bv4294967295 32)) (_ bv0 32))} assume true;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~inner~0.base, ~bvadd32(4bv32, ~inner~0.offset), 4bv32); {12944#(= (bvadd main_~len~0 (_ bv4294967295 32)) (_ bv0 32))} is VALID [2018-11-14 18:16:06,230 INFO L273 TraceCheckUtils]: 30: Hoare triple {12944#(= (bvadd main_~len~0 (_ bv4294967295 32)) (_ bv0 32))} assume !!(0bv32 == #t~mem19.base && 0bv32 == #t~mem19.offset);havoc #t~mem19.base, #t~mem19.offset; {12944#(= (bvadd main_~len~0 (_ bv4294967295 32)) (_ bv0 32))} is VALID [2018-11-14 18:16:06,230 INFO L273 TraceCheckUtils]: 31: Hoare triple {12944#(= (bvadd main_~len~0 (_ bv4294967295 32)) (_ bv0 32))} assume true; {12944#(= (bvadd main_~len~0 (_ bv4294967295 32)) (_ bv0 32))} is VALID [2018-11-14 18:16:06,230 INFO L273 TraceCheckUtils]: 32: Hoare triple {12944#(= (bvadd main_~len~0 (_ bv4294967295 32)) (_ bv0 32))} assume true;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~inner~0.base, ~inner~0.offset, 4bv32); {12944#(= (bvadd main_~len~0 (_ bv4294967295 32)) (_ bv0 32))} is VALID [2018-11-14 18:16:06,231 INFO L273 TraceCheckUtils]: 33: Hoare triple {12944#(= (bvadd main_~len~0 (_ bv4294967295 32)) (_ bv0 32))} assume !!(0bv32 == #t~mem20.base && 0bv32 == #t~mem20.offset);havoc #t~mem20.base, #t~mem20.offset; {12944#(= (bvadd main_~len~0 (_ bv4294967295 32)) (_ bv0 32))} is VALID [2018-11-14 18:16:06,231 INFO L273 TraceCheckUtils]: 34: Hoare triple {12944#(= (bvadd main_~len~0 (_ bv4294967295 32)) (_ bv0 32))} assume true; {12944#(= (bvadd main_~len~0 (_ bv4294967295 32)) (_ bv0 32))} is VALID [2018-11-14 18:16:06,231 INFO L273 TraceCheckUtils]: 35: Hoare triple {12944#(= (bvadd main_~len~0 (_ bv4294967295 32)) (_ bv0 32))} call #t~mem21.base, #t~mem21.offset := read~$Pointer$(~inner~0.base, ~bvadd32(4bv32, ~inner~0.offset), 4bv32);~inner~0.base, ~inner~0.offset := #t~mem21.base, #t~mem21.offset;havoc #t~mem21.base, #t~mem21.offset; {12944#(= (bvadd main_~len~0 (_ bv4294967295 32)) (_ bv0 32))} is VALID [2018-11-14 18:16:06,232 INFO L273 TraceCheckUtils]: 36: Hoare triple {12944#(= (bvadd main_~len~0 (_ bv4294967295 32)) (_ bv0 32))} assume ~len~0 == 1bv32;call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~inner~0.base, ~bvadd32(4bv32, ~inner~0.offset), 4bv32);~inner~0.base, ~inner~0.offset := #t~mem22.base, #t~mem22.offset;havoc #t~mem22.base, #t~mem22.offset; {12944#(= (bvadd main_~len~0 (_ bv4294967295 32)) (_ bv0 32))} is VALID [2018-11-14 18:16:06,232 INFO L273 TraceCheckUtils]: 37: Hoare triple {12944#(= (bvadd main_~len~0 (_ bv4294967295 32)) (_ bv0 32))} assume true; {12944#(= (bvadd main_~len~0 (_ bv4294967295 32)) (_ bv0 32))} is VALID [2018-11-14 18:16:06,233 INFO L273 TraceCheckUtils]: 38: Hoare triple {12944#(= (bvadd main_~len~0 (_ bv4294967295 32)) (_ bv0 32))} assume !(0bv32 != ~inner~0.base || 0bv32 != ~inner~0.offset); {12944#(= (bvadd main_~len~0 (_ bv4294967295 32)) (_ bv0 32))} is VALID [2018-11-14 18:16:06,234 INFO L273 TraceCheckUtils]: 39: Hoare triple {12944#(= (bvadd main_~len~0 (_ bv4294967295 32)) (_ bv0 32))} assume true; {12944#(= (bvadd main_~len~0 (_ bv4294967295 32)) (_ bv0 32))} is VALID [2018-11-14 18:16:06,234 INFO L273 TraceCheckUtils]: 40: Hoare triple {12944#(= (bvadd main_~len~0 (_ bv4294967295 32)) (_ bv0 32))} assume !~bvsle32(~len~0, 1bv32); {12865#false} is VALID [2018-11-14 18:16:06,234 INFO L273 TraceCheckUtils]: 41: Hoare triple {12865#false} assume !false; {12865#false} is VALID [2018-11-14 18:16:06,237 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-14 18:16:06,237 INFO L312 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2018-11-14 18:16:06,238 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-14 18:16:06,238 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-14 18:16:06,238 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 42 [2018-11-14 18:16:06,239 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-14 18:16:06,239 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states. [2018-11-14 18:16:06,284 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 42 edges. 42 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 18:16:06,285 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-14 18:16:06,285 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-14 18:16:06,285 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-14 18:16:06,285 INFO L87 Difference]: Start difference. First operand 232 states and 272 transitions. Second operand 3 states. [2018-11-14 18:16:07,814 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 18:16:07,815 INFO L93 Difference]: Finished difference Result 454 states and 545 transitions. [2018-11-14 18:16:07,815 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-14 18:16:07,815 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 42 [2018-11-14 18:16:07,815 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-14 18:16:07,815 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2018-11-14 18:16:07,817 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 183 transitions. [2018-11-14 18:16:07,817 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2018-11-14 18:16:07,818 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 183 transitions. [2018-11-14 18:16:07,818 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 183 transitions. [2018-11-14 18:16:08,442 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 183 edges. 183 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 18:16:08,451 INFO L225 Difference]: With dead ends: 454 [2018-11-14 18:16:08,451 INFO L226 Difference]: Without dead ends: 337 [2018-11-14 18:16:08,452 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 41 GetRequests, 40 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-14 18:16:08,452 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 337 states. [2018-11-14 18:16:09,206 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 337 to 290. [2018-11-14 18:16:09,206 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-14 18:16:09,206 INFO L82 GeneralOperation]: Start isEquivalent. First operand 337 states. Second operand 290 states. [2018-11-14 18:16:09,206 INFO L74 IsIncluded]: Start isIncluded. First operand 337 states. Second operand 290 states. [2018-11-14 18:16:09,206 INFO L87 Difference]: Start difference. First operand 337 states. Second operand 290 states. [2018-11-14 18:16:09,214 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 18:16:09,214 INFO L93 Difference]: Finished difference Result 337 states and 390 transitions. [2018-11-14 18:16:09,214 INFO L276 IsEmpty]: Start isEmpty. Operand 337 states and 390 transitions. [2018-11-14 18:16:09,215 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 18:16:09,215 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 18:16:09,215 INFO L74 IsIncluded]: Start isIncluded. First operand 290 states. Second operand 337 states. [2018-11-14 18:16:09,215 INFO L87 Difference]: Start difference. First operand 290 states. Second operand 337 states. [2018-11-14 18:16:09,222 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 18:16:09,222 INFO L93 Difference]: Finished difference Result 337 states and 390 transitions. [2018-11-14 18:16:09,223 INFO L276 IsEmpty]: Start isEmpty. Operand 337 states and 390 transitions. [2018-11-14 18:16:09,223 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 18:16:09,223 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 18:16:09,224 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-14 18:16:09,224 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-14 18:16:09,224 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 290 states. [2018-11-14 18:16:09,229 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 290 states to 290 states and 342 transitions. [2018-11-14 18:16:09,230 INFO L78 Accepts]: Start accepts. Automaton has 290 states and 342 transitions. Word has length 42 [2018-11-14 18:16:09,230 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-14 18:16:09,230 INFO L480 AbstractCegarLoop]: Abstraction has 290 states and 342 transitions. [2018-11-14 18:16:09,230 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-14 18:16:09,230 INFO L276 IsEmpty]: Start isEmpty. Operand 290 states and 342 transitions. [2018-11-14 18:16:09,231 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 45 [2018-11-14 18:16:09,231 INFO L367 BasicCegarLoop]: Found error trace [2018-11-14 18:16:09,231 INFO L375 BasicCegarLoop]: trace histogram [2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-14 18:16:09,232 INFO L423 AbstractCegarLoop]: === Iteration 19 === [mainErr8ASSERT_VIOLATIONERROR_FUNCTION, mainErr10ASSERT_VIOLATIONERROR_FUNCTION, mainErr11ASSERT_VIOLATIONERROR_FUNCTION, mainErr1ASSERT_VIOLATIONERROR_FUNCTION, mainErr5ASSERT_VIOLATIONERROR_FUNCTION, mainErr7ASSERT_VIOLATIONERROR_FUNCTION, mainErr9ASSERT_VIOLATIONERROR_FUNCTION, mainErr12ASSERT_VIOLATIONERROR_FUNCTION, mainErr2ASSERT_VIOLATIONERROR_FUNCTION, mainErr3ASSERT_VIOLATIONERROR_FUNCTION, mainErr0ASSERT_VIOLATIONERROR_FUNCTION, mainErr4ASSERT_VIOLATIONERROR_FUNCTION, mainErr6ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-14 18:16:09,232 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-14 18:16:09,232 INFO L82 PathProgramCache]: Analyzing trace with hash -120161578, now seen corresponding path program 1 times [2018-11-14 18:16:09,232 INFO L223 ckRefinementStrategy]: Switched to mode CVC4_FPBP [2018-11-14 18:16:09,232 INFO L69 tionRefinementEngine]: Using refinement strategy WolfRefinementStrategy No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/cvc4nyu Starting monitored process 20 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 20 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk [2018-11-14 18:16:09,251 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-14 18:16:09,299 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-14 18:16:09,314 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-14 18:16:09,315 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-14 18:16:09,366 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 10 [2018-11-14 18:16:09,372 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 9 [2018-11-14 18:16:09,374 INFO L267 ElimStorePlain]: Start of recursive call 3: End of recursive call: and 1 xjuncts. [2018-11-14 18:16:09,378 INFO L267 ElimStorePlain]: Start of recursive call 2: 1 dim-1 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:16:09,395 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 10 [2018-11-14 18:16:09,400 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 9 [2018-11-14 18:16:09,402 INFO L267 ElimStorePlain]: Start of recursive call 5: End of recursive call: and 1 xjuncts. [2018-11-14 18:16:09,406 INFO L267 ElimStorePlain]: Start of recursive call 4: 1 dim-1 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:16:09,418 INFO L267 ElimStorePlain]: Start of recursive call 1: 2 dim-2 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:16:09,418 INFO L202 ElimStorePlain]: Needed 5 recursive calls to eliminate 2 variables, input treesize:30, output treesize:22 [2018-11-14 18:16:09,754 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 22 treesize of output 16 [2018-11-14 18:16:09,761 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 3 [2018-11-14 18:16:09,762 INFO L267 ElimStorePlain]: Start of recursive call 3: End of recursive call: and 1 xjuncts. [2018-11-14 18:16:09,765 INFO L267 ElimStorePlain]: Start of recursive call 2: 1 dim-1 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:16:09,780 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 22 treesize of output 16 [2018-11-14 18:16:09,785 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 3 [2018-11-14 18:16:09,787 INFO L267 ElimStorePlain]: Start of recursive call 5: End of recursive call: and 1 xjuncts. [2018-11-14 18:16:09,789 INFO L267 ElimStorePlain]: Start of recursive call 4: 1 dim-1 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:16:09,795 INFO L267 ElimStorePlain]: Start of recursive call 1: 1 dim-0 vars, 2 dim-2 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:16:09,796 INFO L202 ElimStorePlain]: Needed 5 recursive calls to eliminate 3 variables, input treesize:43, output treesize:7 [2018-11-14 18:16:09,801 WARN L383 uantifierElimination]: Trying to double check SDD result, but SMT solver's response was UNKNOWN. [2018-11-14 18:16:09,824 INFO L256 TraceCheckUtils]: 0: Hoare triple {14484#true} call ULTIMATE.init(); {14484#true} is VALID [2018-11-14 18:16:09,824 INFO L273 TraceCheckUtils]: 1: Hoare triple {14484#true} #NULL.base, #NULL.offset := 0bv32, 0bv32;#valid := #valid[0bv32 := 0bv1]; {14484#true} is VALID [2018-11-14 18:16:09,825 INFO L273 TraceCheckUtils]: 2: Hoare triple {14484#true} assume true; {14484#true} is VALID [2018-11-14 18:16:09,825 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {14484#true} {14484#true} #358#return; {14484#true} is VALID [2018-11-14 18:16:09,825 INFO L256 TraceCheckUtils]: 4: Hoare triple {14484#true} call #t~ret28 := main(); {14484#true} is VALID [2018-11-14 18:16:09,825 INFO L273 TraceCheckUtils]: 5: Hoare triple {14484#true} call #t~malloc0.base, #t~malloc0.offset := #Ultimate.alloc(8bv32);~list~0.base, ~list~0.offset := #t~malloc0.base, #t~malloc0.offset;call write~$Pointer$(0bv32, 0bv32, ~list~0.base, ~list~0.offset, 4bv32); {14504#(= main_~list~0.offset (_ bv0 32))} is VALID [2018-11-14 18:16:09,826 INFO L273 TraceCheckUtils]: 6: Hoare triple {14504#(= main_~list~0.offset (_ bv0 32))} assume true; {14504#(= main_~list~0.offset (_ bv0 32))} is VALID [2018-11-14 18:16:09,826 INFO L273 TraceCheckUtils]: 7: Hoare triple {14504#(= main_~list~0.offset (_ bv0 32))} assume !!(~list~0.base != 0bv32 || ~list~0.offset != 0bv32); {14504#(= main_~list~0.offset (_ bv0 32))} is VALID [2018-11-14 18:16:09,827 INFO L273 TraceCheckUtils]: 8: Hoare triple {14504#(= main_~list~0.offset (_ bv0 32))} assume true; {14504#(= main_~list~0.offset (_ bv0 32))} is VALID [2018-11-14 18:16:09,829 INFO L273 TraceCheckUtils]: 9: Hoare triple {14504#(= main_~list~0.offset (_ bv0 32))} assume #t~nondet1 != 0bv32;havoc #t~nondet1;call write~$Pointer$(0bv32, 0bv32, ~list~0.base, ~bvadd32(4bv32, ~list~0.offset), 4bv32); {14517#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:16:09,830 INFO L273 TraceCheckUtils]: 10: Hoare triple {14517#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset (_ bv0 32)))} assume true;call #t~mem5.base, #t~mem5.offset := read~$Pointer$(~list~0.base, ~bvadd32(4bv32, ~list~0.offset), 4bv32);#t~short7 := #t~mem5.base != 0bv32 || #t~mem5.offset != 0bv32; {14517#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:16:09,830 INFO L273 TraceCheckUtils]: 11: Hoare triple {14517#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset (_ bv0 32)))} assume !#t~short7;call #t~mem6.base, #t~mem6.offset := read~$Pointer$(~list~0.base, ~bvadd32(4bv32, ~list~0.offset), 4bv32);#t~short7 := #t~mem6.base == 0bv32 && #t~mem6.offset == 0bv32; {14517#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:16:09,831 INFO L273 TraceCheckUtils]: 12: Hoare triple {14517#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset (_ bv0 32)))} assume !!#t~short7;havoc #t~mem5.base, #t~mem5.offset;havoc #t~mem6.base, #t~mem6.offset;havoc #t~short7; {14517#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:16:09,832 INFO L273 TraceCheckUtils]: 13: Hoare triple {14517#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset (_ bv0 32)))} assume true; {14517#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:16:09,833 INFO L273 TraceCheckUtils]: 14: Hoare triple {14517#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset (_ bv0 32)))} ~end~0.base, ~end~0.offset := ~list~0.base, ~list~0.offset; {14517#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:16:09,834 INFO L273 TraceCheckUtils]: 15: Hoare triple {14517#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset (_ bv0 32)))} assume true; {14517#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:16:09,834 INFO L273 TraceCheckUtils]: 16: Hoare triple {14517#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset (_ bv0 32)))} assume !(#t~nondet8 != 0bv32);havoc #t~nondet8; {14517#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:16:09,835 INFO L273 TraceCheckUtils]: 17: Hoare triple {14517#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset (_ bv0 32)))} ~end~0.base, ~end~0.offset := 0bv32, 0bv32;~end~0.base, ~end~0.offset := ~list~0.base, ~list~0.offset; {14542#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.base main_~end~0.base) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset main_~end~0.offset) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:16:09,836 INFO L273 TraceCheckUtils]: 18: Hoare triple {14542#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.base main_~end~0.base) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset main_~end~0.offset) (= main_~list~0.offset (_ bv0 32)))} assume true; {14542#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.base main_~end~0.base) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset main_~end~0.offset) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:16:09,838 INFO L273 TraceCheckUtils]: 19: Hoare triple {14542#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.base main_~end~0.base) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset main_~end~0.offset) (= main_~list~0.offset (_ bv0 32)))} assume !!(0bv32 != ~end~0.base || 0bv32 != ~end~0.offset); {14542#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.base main_~end~0.base) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset main_~end~0.offset) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:16:09,839 INFO L273 TraceCheckUtils]: 20: Hoare triple {14542#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.base main_~end~0.base) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset main_~end~0.offset) (= main_~list~0.offset (_ bv0 32)))} assume true; {14542#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.base main_~end~0.base) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset main_~end~0.offset) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:16:09,840 INFO L273 TraceCheckUtils]: 21: Hoare triple {14542#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.base main_~end~0.base) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset main_~end~0.offset) (= main_~list~0.offset (_ bv0 32)))} assume true; {14542#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.base main_~end~0.base) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset main_~end~0.offset) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:16:09,842 INFO L273 TraceCheckUtils]: 22: Hoare triple {14542#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.base main_~end~0.base) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset main_~end~0.offset) (= main_~list~0.offset (_ bv0 32)))} assume !!(0bv32 != ~end~0.base || 0bv32 != ~end~0.offset);~len~0 := 0bv32;call #t~mem18.base, #t~mem18.offset := read~$Pointer$(~end~0.base, ~bvadd32(4bv32, ~end~0.offset), 4bv32);~inner~0.base, ~inner~0.offset := #t~mem18.base, #t~mem18.offset;havoc #t~mem18.base, #t~mem18.offset; {14542#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.base main_~end~0.base) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset main_~end~0.offset) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:16:09,843 INFO L273 TraceCheckUtils]: 23: Hoare triple {14542#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.base main_~end~0.base) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset main_~end~0.offset) (= main_~list~0.offset (_ bv0 32)))} assume true; {14542#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.base main_~end~0.base) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset main_~end~0.offset) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:16:09,844 INFO L273 TraceCheckUtils]: 24: Hoare triple {14542#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.base main_~end~0.base) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset main_~end~0.offset) (= main_~list~0.offset (_ bv0 32)))} assume !(0bv32 != ~inner~0.base || 0bv32 != ~inner~0.offset); {14542#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.base main_~end~0.base) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset main_~end~0.offset) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:16:09,846 INFO L273 TraceCheckUtils]: 25: Hoare triple {14542#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.base main_~end~0.base) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset main_~end~0.offset) (= main_~list~0.offset (_ bv0 32)))} assume true; {14542#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.base main_~end~0.base) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset main_~end~0.offset) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:16:09,847 INFO L273 TraceCheckUtils]: 26: Hoare triple {14542#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.base main_~end~0.base) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset main_~end~0.offset) (= main_~list~0.offset (_ bv0 32)))} assume !!~bvsle32(~len~0, 1bv32); {14542#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.base main_~end~0.base) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset main_~end~0.offset) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:16:09,848 INFO L273 TraceCheckUtils]: 27: Hoare triple {14542#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.base main_~end~0.base) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset main_~end~0.offset) (= main_~list~0.offset (_ bv0 32)))} assume true; {14542#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.base main_~end~0.base) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset main_~end~0.offset) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:16:09,850 INFO L273 TraceCheckUtils]: 28: Hoare triple {14542#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.base main_~end~0.base) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset main_~end~0.offset) (= main_~list~0.offset (_ bv0 32)))} call #t~mem23.base, #t~mem23.offset := read~$Pointer$(~end~0.base, ~end~0.offset, 4bv32);~end~0.base, ~end~0.offset := #t~mem23.base, #t~mem23.offset;havoc #t~mem23.base, #t~mem23.offset; {14576#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) main_~end~0.base) (= main_~end~0.offset (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:16:09,851 INFO L273 TraceCheckUtils]: 29: Hoare triple {14576#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) main_~end~0.base) (= main_~end~0.offset (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= main_~list~0.offset (_ bv0 32)))} assume true; {14576#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) main_~end~0.base) (= main_~end~0.offset (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:16:09,853 INFO L273 TraceCheckUtils]: 30: Hoare triple {14576#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) main_~end~0.base) (= main_~end~0.offset (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= main_~list~0.offset (_ bv0 32)))} assume !(0bv32 != ~end~0.base || 0bv32 != ~end~0.offset); {14583#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:16:09,854 INFO L273 TraceCheckUtils]: 31: Hoare triple {14583#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= main_~list~0.offset (_ bv0 32)))} assume true; {14583#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:16:09,855 INFO L273 TraceCheckUtils]: 32: Hoare triple {14583#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= main_~list~0.offset (_ bv0 32)))} assume !!(0bv32 != ~list~0.base || 0bv32 != ~list~0.offset);call #t~mem24.base, #t~mem24.offset := read~$Pointer$(~list~0.base, ~bvadd32(4bv32, ~list~0.offset), 4bv32);~end~0.base, ~end~0.offset := #t~mem24.base, #t~mem24.offset;havoc #t~mem24.base, #t~mem24.offset; {14583#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:16:09,857 INFO L273 TraceCheckUtils]: 33: Hoare triple {14583#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= main_~list~0.offset (_ bv0 32)))} assume !(0bv32 != ~end~0.base || 0bv32 != ~end~0.offset); {14583#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:16:09,858 INFO L273 TraceCheckUtils]: 34: Hoare triple {14583#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= main_~list~0.offset (_ bv0 32)))} call #t~mem27.base, #t~mem27.offset := read~$Pointer$(~list~0.base, ~list~0.offset, 4bv32);~end~0.base, ~end~0.offset := #t~mem27.base, #t~mem27.offset;havoc #t~mem27.base, #t~mem27.offset;call ULTIMATE.dealloc(~list~0.base, ~list~0.offset);~list~0.base, ~list~0.offset := ~end~0.base, ~end~0.offset; {14596#(and (= (_ bv0 32) main_~list~0.base) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:16:09,859 INFO L273 TraceCheckUtils]: 35: Hoare triple {14596#(and (= (_ bv0 32) main_~list~0.base) (= main_~list~0.offset (_ bv0 32)))} assume true; {14596#(and (= (_ bv0 32) main_~list~0.base) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:16:09,859 INFO L273 TraceCheckUtils]: 36: Hoare triple {14596#(and (= (_ bv0 32) main_~list~0.base) (= main_~list~0.offset (_ bv0 32)))} assume !!(0bv32 != ~list~0.base || 0bv32 != ~list~0.offset);call #t~mem24.base, #t~mem24.offset := read~$Pointer$(~list~0.base, ~bvadd32(4bv32, ~list~0.offset), 4bv32);~end~0.base, ~end~0.offset := #t~mem24.base, #t~mem24.offset;havoc #t~mem24.base, #t~mem24.offset; {14485#false} is VALID [2018-11-14 18:16:09,860 INFO L273 TraceCheckUtils]: 37: Hoare triple {14485#false} assume 0bv32 != ~end~0.base || 0bv32 != ~end~0.offset; {14485#false} is VALID [2018-11-14 18:16:09,860 INFO L273 TraceCheckUtils]: 38: Hoare triple {14485#false} assume true; {14485#false} is VALID [2018-11-14 18:16:09,860 INFO L273 TraceCheckUtils]: 39: Hoare triple {14485#false} assume !!(0bv32 != ~end~0.base || 0bv32 != ~end~0.offset); {14485#false} is VALID [2018-11-14 18:16:09,860 INFO L273 TraceCheckUtils]: 40: Hoare triple {14485#false} assume true; {14485#false} is VALID [2018-11-14 18:16:09,860 INFO L273 TraceCheckUtils]: 41: Hoare triple {14485#false} assume true;call #t~mem25.base, #t~mem25.offset := read~$Pointer$(~end~0.base, ~bvadd32(4bv32, ~end~0.offset), 4bv32); {14485#false} is VALID [2018-11-14 18:16:09,861 INFO L273 TraceCheckUtils]: 42: Hoare triple {14485#false} assume !(0bv32 == #t~mem25.base && 0bv32 == #t~mem25.offset);havoc #t~mem25.base, #t~mem25.offset; {14485#false} is VALID [2018-11-14 18:16:09,861 INFO L273 TraceCheckUtils]: 43: Hoare triple {14485#false} assume !false; {14485#false} is VALID [2018-11-14 18:16:09,868 INFO L134 CoverageAnalysis]: Checked inductivity of 5 backedges. 1 proven. 4 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-14 18:16:09,868 INFO L316 TraceCheckSpWp]: Computing backward predicates... [2018-11-14 18:16:10,066 INFO L273 TraceCheckUtils]: 43: Hoare triple {14485#false} assume !false; {14485#false} is VALID [2018-11-14 18:16:10,067 INFO L273 TraceCheckUtils]: 42: Hoare triple {14485#false} assume !(0bv32 == #t~mem25.base && 0bv32 == #t~mem25.offset);havoc #t~mem25.base, #t~mem25.offset; {14485#false} is VALID [2018-11-14 18:16:10,067 INFO L273 TraceCheckUtils]: 41: Hoare triple {14485#false} assume true;call #t~mem25.base, #t~mem25.offset := read~$Pointer$(~end~0.base, ~bvadd32(4bv32, ~end~0.offset), 4bv32); {14485#false} is VALID [2018-11-14 18:16:10,067 INFO L273 TraceCheckUtils]: 40: Hoare triple {14485#false} assume true; {14485#false} is VALID [2018-11-14 18:16:10,067 INFO L273 TraceCheckUtils]: 39: Hoare triple {14485#false} assume !!(0bv32 != ~end~0.base || 0bv32 != ~end~0.offset); {14485#false} is VALID [2018-11-14 18:16:10,067 INFO L273 TraceCheckUtils]: 38: Hoare triple {14485#false} assume true; {14485#false} is VALID [2018-11-14 18:16:10,068 INFO L273 TraceCheckUtils]: 37: Hoare triple {14485#false} assume 0bv32 != ~end~0.base || 0bv32 != ~end~0.offset; {14485#false} is VALID [2018-11-14 18:16:10,068 INFO L273 TraceCheckUtils]: 36: Hoare triple {14596#(and (= (_ bv0 32) main_~list~0.base) (= main_~list~0.offset (_ bv0 32)))} assume !!(0bv32 != ~list~0.base || 0bv32 != ~list~0.offset);call #t~mem24.base, #t~mem24.offset := read~$Pointer$(~list~0.base, ~bvadd32(4bv32, ~list~0.offset), 4bv32);~end~0.base, ~end~0.offset := #t~mem24.base, #t~mem24.offset;havoc #t~mem24.base, #t~mem24.offset; {14485#false} is VALID [2018-11-14 18:16:10,069 INFO L273 TraceCheckUtils]: 35: Hoare triple {14596#(and (= (_ bv0 32) main_~list~0.base) (= main_~list~0.offset (_ bv0 32)))} assume true; {14596#(and (= (_ bv0 32) main_~list~0.base) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:16:10,070 INFO L273 TraceCheckUtils]: 34: Hoare triple {14651#(and (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)))} call #t~mem27.base, #t~mem27.offset := read~$Pointer$(~list~0.base, ~list~0.offset, 4bv32);~end~0.base, ~end~0.offset := #t~mem27.base, #t~mem27.offset;havoc #t~mem27.base, #t~mem27.offset;call ULTIMATE.dealloc(~list~0.base, ~list~0.offset);~list~0.base, ~list~0.offset := ~end~0.base, ~end~0.offset; {14596#(and (= (_ bv0 32) main_~list~0.base) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:16:10,070 INFO L273 TraceCheckUtils]: 33: Hoare triple {14651#(and (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)))} assume !(0bv32 != ~end~0.base || 0bv32 != ~end~0.offset); {14651#(and (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)))} is VALID [2018-11-14 18:16:10,071 INFO L273 TraceCheckUtils]: 32: Hoare triple {14651#(and (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)))} assume !!(0bv32 != ~list~0.base || 0bv32 != ~list~0.offset);call #t~mem24.base, #t~mem24.offset := read~$Pointer$(~list~0.base, ~bvadd32(4bv32, ~list~0.offset), 4bv32);~end~0.base, ~end~0.offset := #t~mem24.base, #t~mem24.offset;havoc #t~mem24.base, #t~mem24.offset; {14651#(and (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)))} is VALID [2018-11-14 18:16:10,071 INFO L273 TraceCheckUtils]: 31: Hoare triple {14651#(and (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)))} assume true; {14651#(and (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)))} is VALID [2018-11-14 18:16:10,071 INFO L273 TraceCheckUtils]: 30: Hoare triple {14664#(or (not (= main_~end~0.offset (_ bv0 32))) (not (= (_ bv0 32) main_~end~0.base)) (and (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset))))} assume !(0bv32 != ~end~0.base || 0bv32 != ~end~0.offset); {14651#(and (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)))} is VALID [2018-11-14 18:16:10,072 INFO L273 TraceCheckUtils]: 29: Hoare triple {14664#(or (not (= main_~end~0.offset (_ bv0 32))) (not (= (_ bv0 32) main_~end~0.base)) (and (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset))))} assume true; {14664#(or (not (= main_~end~0.offset (_ bv0 32))) (not (= (_ bv0 32) main_~end~0.base)) (and (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset))))} is VALID [2018-11-14 18:16:10,073 INFO L273 TraceCheckUtils]: 28: Hoare triple {14671#(or (not (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset))) (not (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset))) (and (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset))))} call #t~mem23.base, #t~mem23.offset := read~$Pointer$(~end~0.base, ~end~0.offset, 4bv32);~end~0.base, ~end~0.offset := #t~mem23.base, #t~mem23.offset;havoc #t~mem23.base, #t~mem23.offset; {14664#(or (not (= main_~end~0.offset (_ bv0 32))) (not (= (_ bv0 32) main_~end~0.base)) (and (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset))))} is VALID [2018-11-14 18:16:10,073 INFO L273 TraceCheckUtils]: 27: Hoare triple {14671#(or (not (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset))) (not (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset))) (and (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset))))} assume true; {14671#(or (not (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset))) (not (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset))) (and (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset))))} is VALID [2018-11-14 18:16:10,090 INFO L273 TraceCheckUtils]: 26: Hoare triple {14671#(or (not (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset))) (not (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset))) (and (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset))))} assume !!~bvsle32(~len~0, 1bv32); {14671#(or (not (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset))) (not (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset))) (and (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset))))} is VALID [2018-11-14 18:16:10,097 INFO L273 TraceCheckUtils]: 25: Hoare triple {14671#(or (not (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset))) (not (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset))) (and (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset))))} assume true; {14671#(or (not (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset))) (not (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset))) (and (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset))))} is VALID [2018-11-14 18:16:10,097 INFO L273 TraceCheckUtils]: 24: Hoare triple {14671#(or (not (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset))) (not (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset))) (and (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset))))} assume !(0bv32 != ~inner~0.base || 0bv32 != ~inner~0.offset); {14671#(or (not (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset))) (not (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset))) (and (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset))))} is VALID [2018-11-14 18:16:10,097 INFO L273 TraceCheckUtils]: 23: Hoare triple {14671#(or (not (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset))) (not (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset))) (and (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset))))} assume true; {14671#(or (not (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset))) (not (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset))) (and (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset))))} is VALID [2018-11-14 18:16:10,098 INFO L273 TraceCheckUtils]: 22: Hoare triple {14671#(or (not (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset))) (not (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset))) (and (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset))))} assume !!(0bv32 != ~end~0.base || 0bv32 != ~end~0.offset);~len~0 := 0bv32;call #t~mem18.base, #t~mem18.offset := read~$Pointer$(~end~0.base, ~bvadd32(4bv32, ~end~0.offset), 4bv32);~inner~0.base, ~inner~0.offset := #t~mem18.base, #t~mem18.offset;havoc #t~mem18.base, #t~mem18.offset; {14671#(or (not (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset))) (not (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset))) (and (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset))))} is VALID [2018-11-14 18:16:10,098 INFO L273 TraceCheckUtils]: 21: Hoare triple {14671#(or (not (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset))) (not (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset))) (and (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset))))} assume true; {14671#(or (not (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset))) (not (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset))) (and (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset))))} is VALID [2018-11-14 18:16:10,098 INFO L273 TraceCheckUtils]: 20: Hoare triple {14671#(or (not (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset))) (not (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset))) (and (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset))))} assume true; {14671#(or (not (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset))) (not (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset))) (and (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset))))} is VALID [2018-11-14 18:16:10,099 INFO L273 TraceCheckUtils]: 19: Hoare triple {14671#(or (not (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset))) (not (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset))) (and (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset))))} assume !!(0bv32 != ~end~0.base || 0bv32 != ~end~0.offset); {14671#(or (not (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset))) (not (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset))) (and (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset))))} is VALID [2018-11-14 18:16:10,099 INFO L273 TraceCheckUtils]: 18: Hoare triple {14671#(or (not (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset))) (not (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset))) (and (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset))))} assume true; {14671#(or (not (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset))) (not (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset))) (and (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset))))} is VALID [2018-11-14 18:16:10,100 INFO L273 TraceCheckUtils]: 17: Hoare triple {14484#true} ~end~0.base, ~end~0.offset := 0bv32, 0bv32;~end~0.base, ~end~0.offset := ~list~0.base, ~list~0.offset; {14671#(or (not (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset))) (not (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset))) (and (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset))))} is VALID [2018-11-14 18:16:10,100 INFO L273 TraceCheckUtils]: 16: Hoare triple {14484#true} assume !(#t~nondet8 != 0bv32);havoc #t~nondet8; {14484#true} is VALID [2018-11-14 18:16:10,100 INFO L273 TraceCheckUtils]: 15: Hoare triple {14484#true} assume true; {14484#true} is VALID [2018-11-14 18:16:10,100 INFO L273 TraceCheckUtils]: 14: Hoare triple {14484#true} ~end~0.base, ~end~0.offset := ~list~0.base, ~list~0.offset; {14484#true} is VALID [2018-11-14 18:16:10,100 INFO L273 TraceCheckUtils]: 13: Hoare triple {14484#true} assume true; {14484#true} is VALID [2018-11-14 18:16:10,100 INFO L273 TraceCheckUtils]: 12: Hoare triple {14484#true} assume !!#t~short7;havoc #t~mem5.base, #t~mem5.offset;havoc #t~mem6.base, #t~mem6.offset;havoc #t~short7; {14484#true} is VALID [2018-11-14 18:16:10,100 INFO L273 TraceCheckUtils]: 11: Hoare triple {14484#true} assume !#t~short7;call #t~mem6.base, #t~mem6.offset := read~$Pointer$(~list~0.base, ~bvadd32(4bv32, ~list~0.offset), 4bv32);#t~short7 := #t~mem6.base == 0bv32 && #t~mem6.offset == 0bv32; {14484#true} is VALID [2018-11-14 18:16:10,101 INFO L273 TraceCheckUtils]: 10: Hoare triple {14484#true} assume true;call #t~mem5.base, #t~mem5.offset := read~$Pointer$(~list~0.base, ~bvadd32(4bv32, ~list~0.offset), 4bv32);#t~short7 := #t~mem5.base != 0bv32 || #t~mem5.offset != 0bv32; {14484#true} is VALID [2018-11-14 18:16:10,101 INFO L273 TraceCheckUtils]: 9: Hoare triple {14484#true} assume #t~nondet1 != 0bv32;havoc #t~nondet1;call write~$Pointer$(0bv32, 0bv32, ~list~0.base, ~bvadd32(4bv32, ~list~0.offset), 4bv32); {14484#true} is VALID [2018-11-14 18:16:10,101 INFO L273 TraceCheckUtils]: 8: Hoare triple {14484#true} assume true; {14484#true} is VALID [2018-11-14 18:16:10,101 INFO L273 TraceCheckUtils]: 7: Hoare triple {14484#true} assume !!(~list~0.base != 0bv32 || ~list~0.offset != 0bv32); {14484#true} is VALID [2018-11-14 18:16:10,101 INFO L273 TraceCheckUtils]: 6: Hoare triple {14484#true} assume true; {14484#true} is VALID [2018-11-14 18:16:10,101 INFO L273 TraceCheckUtils]: 5: Hoare triple {14484#true} call #t~malloc0.base, #t~malloc0.offset := #Ultimate.alloc(8bv32);~list~0.base, ~list~0.offset := #t~malloc0.base, #t~malloc0.offset;call write~$Pointer$(0bv32, 0bv32, ~list~0.base, ~list~0.offset, 4bv32); {14484#true} is VALID [2018-11-14 18:16:10,101 INFO L256 TraceCheckUtils]: 4: Hoare triple {14484#true} call #t~ret28 := main(); {14484#true} is VALID [2018-11-14 18:16:10,102 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {14484#true} {14484#true} #358#return; {14484#true} is VALID [2018-11-14 18:16:10,102 INFO L273 TraceCheckUtils]: 2: Hoare triple {14484#true} assume true; {14484#true} is VALID [2018-11-14 18:16:10,102 INFO L273 TraceCheckUtils]: 1: Hoare triple {14484#true} #NULL.base, #NULL.offset := 0bv32, 0bv32;#valid := #valid[0bv32 := 0bv1]; {14484#true} is VALID [2018-11-14 18:16:10,102 INFO L256 TraceCheckUtils]: 0: Hoare triple {14484#true} call ULTIMATE.init(); {14484#true} is VALID [2018-11-14 18:16:10,107 INFO L134 CoverageAnalysis]: Checked inductivity of 5 backedges. 1 proven. 4 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-14 18:16:10,109 INFO L312 seRefinementStrategy]: Constructing automaton from 0 perfect and 2 imperfect interpolant sequences. [2018-11-14 18:16:10,109 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [8, 6] total 11 [2018-11-14 18:16:10,109 INFO L78 Accepts]: Start accepts. Automaton has 11 states. Word has length 44 [2018-11-14 18:16:10,110 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-14 18:16:10,110 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 11 states. [2018-11-14 18:16:10,211 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 74 edges. 74 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 18:16:10,211 INFO L459 AbstractCegarLoop]: Interpolant automaton has 11 states [2018-11-14 18:16:10,211 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 11 interpolants. [2018-11-14 18:16:10,212 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=34, Invalid=76, Unknown=0, NotChecked=0, Total=110 [2018-11-14 18:16:10,212 INFO L87 Difference]: Start difference. First operand 290 states and 342 transitions. Second operand 11 states. [2018-11-14 18:16:15,723 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 18:16:15,723 INFO L93 Difference]: Finished difference Result 512 states and 588 transitions. [2018-11-14 18:16:15,723 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 18 states. [2018-11-14 18:16:15,723 INFO L78 Accepts]: Start accepts. Automaton has 11 states. Word has length 44 [2018-11-14 18:16:15,723 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-14 18:16:15,724 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 11 states. [2018-11-14 18:16:15,727 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 18 states to 18 states and 332 transitions. [2018-11-14 18:16:15,727 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 11 states. [2018-11-14 18:16:15,729 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 18 states to 18 states and 332 transitions. [2018-11-14 18:16:15,729 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 18 states and 332 transitions. [2018-11-14 18:16:16,478 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 332 edges. 332 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 18:16:16,490 INFO L225 Difference]: With dead ends: 512 [2018-11-14 18:16:16,491 INFO L226 Difference]: Without dead ends: 462 [2018-11-14 18:16:16,491 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 100 GetRequests, 81 SyntacticMatches, 1 SemanticMatches, 18 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 67 ImplicationChecksByTransitivity, 0.7s TimeCoverageRelationStatistics Valid=118, Invalid=262, Unknown=0, NotChecked=0, Total=380 [2018-11-14 18:16:16,491 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 462 states. [2018-11-14 18:16:17,924 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 462 to 330. [2018-11-14 18:16:17,925 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-14 18:16:17,925 INFO L82 GeneralOperation]: Start isEquivalent. First operand 462 states. Second operand 330 states. [2018-11-14 18:16:17,925 INFO L74 IsIncluded]: Start isIncluded. First operand 462 states. Second operand 330 states. [2018-11-14 18:16:17,925 INFO L87 Difference]: Start difference. First operand 462 states. Second operand 330 states. [2018-11-14 18:16:17,936 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 18:16:17,936 INFO L93 Difference]: Finished difference Result 462 states and 528 transitions. [2018-11-14 18:16:17,936 INFO L276 IsEmpty]: Start isEmpty. Operand 462 states and 528 transitions. [2018-11-14 18:16:17,937 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 18:16:17,937 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 18:16:17,937 INFO L74 IsIncluded]: Start isIncluded. First operand 330 states. Second operand 462 states. [2018-11-14 18:16:17,938 INFO L87 Difference]: Start difference. First operand 330 states. Second operand 462 states. [2018-11-14 18:16:17,950 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 18:16:17,950 INFO L93 Difference]: Finished difference Result 462 states and 528 transitions. [2018-11-14 18:16:17,950 INFO L276 IsEmpty]: Start isEmpty. Operand 462 states and 528 transitions. [2018-11-14 18:16:17,951 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 18:16:17,951 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 18:16:17,952 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-14 18:16:17,952 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-14 18:16:17,952 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 330 states. [2018-11-14 18:16:17,959 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 330 states to 330 states and 388 transitions. [2018-11-14 18:16:17,959 INFO L78 Accepts]: Start accepts. Automaton has 330 states and 388 transitions. Word has length 44 [2018-11-14 18:16:17,959 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-14 18:16:17,959 INFO L480 AbstractCegarLoop]: Abstraction has 330 states and 388 transitions. [2018-11-14 18:16:17,960 INFO L481 AbstractCegarLoop]: Interpolant automaton has 11 states. [2018-11-14 18:16:17,960 INFO L276 IsEmpty]: Start isEmpty. Operand 330 states and 388 transitions. [2018-11-14 18:16:17,960 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2018-11-14 18:16:17,960 INFO L367 BasicCegarLoop]: Found error trace [2018-11-14 18:16:17,961 INFO L375 BasicCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-14 18:16:17,961 INFO L423 AbstractCegarLoop]: === Iteration 20 === [mainErr8ASSERT_VIOLATIONERROR_FUNCTION, mainErr10ASSERT_VIOLATIONERROR_FUNCTION, mainErr11ASSERT_VIOLATIONERROR_FUNCTION, mainErr1ASSERT_VIOLATIONERROR_FUNCTION, mainErr5ASSERT_VIOLATIONERROR_FUNCTION, mainErr7ASSERT_VIOLATIONERROR_FUNCTION, mainErr9ASSERT_VIOLATIONERROR_FUNCTION, mainErr12ASSERT_VIOLATIONERROR_FUNCTION, mainErr2ASSERT_VIOLATIONERROR_FUNCTION, mainErr3ASSERT_VIOLATIONERROR_FUNCTION, mainErr0ASSERT_VIOLATIONERROR_FUNCTION, mainErr4ASSERT_VIOLATIONERROR_FUNCTION, mainErr6ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-14 18:16:17,961 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-14 18:16:17,961 INFO L82 PathProgramCache]: Analyzing trace with hash 1138481492, now seen corresponding path program 1 times [2018-11-14 18:16:17,962 INFO L223 ckRefinementStrategy]: Switched to mode CVC4_FPBP [2018-11-14 18:16:17,962 INFO L69 tionRefinementEngine]: Using refinement strategy WolfRefinementStrategy No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/cvc4nyu Starting monitored process 21 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 21 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk [2018-11-14 18:16:17,989 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-14 18:16:18,075 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-14 18:16:18,108 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-14 18:16:18,110 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-14 18:16:18,124 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2018-11-14 18:16:18,133 INFO L267 ElimStorePlain]: Start of recursive call 2: End of recursive call: and 1 xjuncts. [2018-11-14 18:16:18,139 INFO L267 ElimStorePlain]: Start of recursive call 1: 1 dim-1 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:16:18,139 INFO L202 ElimStorePlain]: Needed 2 recursive calls to eliminate 1 variables, input treesize:10, output treesize:9 [2018-11-14 18:16:18,143 WARN L383 uantifierElimination]: Trying to double check SDD result, but SMT solver's response was UNKNOWN. [2018-11-14 18:16:18,186 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 10 [2018-11-14 18:16:18,193 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 9 [2018-11-14 18:16:18,195 INFO L267 ElimStorePlain]: Start of recursive call 3: End of recursive call: and 1 xjuncts. [2018-11-14 18:16:18,201 INFO L267 ElimStorePlain]: Start of recursive call 2: 1 dim-1 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:16:18,226 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 10 [2018-11-14 18:16:18,234 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 9 [2018-11-14 18:16:18,237 INFO L267 ElimStorePlain]: Start of recursive call 5: End of recursive call: and 1 xjuncts. [2018-11-14 18:16:18,241 INFO L267 ElimStorePlain]: Start of recursive call 4: 1 dim-1 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:16:18,256 INFO L267 ElimStorePlain]: Start of recursive call 1: 2 dim-2 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:16:18,256 INFO L202 ElimStorePlain]: Needed 5 recursive calls to eliminate 2 variables, input treesize:35, output treesize:27 [2018-11-14 18:16:18,441 INFO L700 Elim1Store]: detected not equals via solver [2018-11-14 18:16:18,454 INFO L700 Elim1Store]: detected not equals via solver [2018-11-14 18:16:18,455 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 2 select indices, 2 select index equivalence classes, 2 disjoint index pairs (out of 1 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 21 [2018-11-14 18:16:18,457 INFO L267 ElimStorePlain]: Start of recursive call 2: End of recursive call: and 1 xjuncts. [2018-11-14 18:16:18,807 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 2 new quantified variables, introduced 0 case distinctions, treesize of input 37 treesize of output 27 [2018-11-14 18:16:18,828 INFO L700 Elim1Store]: detected not equals via solver [2018-11-14 18:16:18,839 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 23 [2018-11-14 18:16:18,846 INFO L267 ElimStorePlain]: Start of recursive call 4: End of recursive call: and 1 xjuncts. [2018-11-14 18:16:18,939 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 28 treesize of output 29 [2018-11-14 18:16:18,949 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 8 treesize of output 7 [2018-11-14 18:16:18,952 INFO L267 ElimStorePlain]: Start of recursive call 6: End of recursive call: and 1 xjuncts. [2018-11-14 18:16:18,980 INFO L267 ElimStorePlain]: Start of recursive call 5: 1 dim-1 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:16:19,007 INFO L267 ElimStorePlain]: Start of recursive call 3: 1 dim-1 vars, 1 dim-2 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:16:19,114 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 2 new quantified variables, introduced 0 case distinctions, treesize of input 37 treesize of output 27 [2018-11-14 18:16:19,129 INFO L700 Elim1Store]: detected not equals via solver [2018-11-14 18:16:19,135 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 2 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 23 [2018-11-14 18:16:19,138 INFO L267 ElimStorePlain]: Start of recursive call 8: End of recursive call: and 1 xjuncts. [2018-11-14 18:16:19,186 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 28 treesize of output 29 [2018-11-14 18:16:19,195 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 8 treesize of output 7 [2018-11-14 18:16:19,198 INFO L267 ElimStorePlain]: Start of recursive call 10: End of recursive call: and 1 xjuncts. [2018-11-14 18:16:19,216 INFO L267 ElimStorePlain]: Start of recursive call 9: 1 dim-1 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:16:19,232 INFO L267 ElimStorePlain]: Start of recursive call 7: 1 dim-1 vars, 1 dim-2 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:16:19,277 INFO L267 ElimStorePlain]: Start of recursive call 1: 1 dim-0 vars, 1 dim-1 vars, 2 dim-2 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:16:19,277 INFO L202 ElimStorePlain]: Needed 10 recursive calls to eliminate 4 variables, input treesize:92, output treesize:57 [2018-11-14 18:16:20,565 WARN L383 uantifierElimination]: Trying to double check SDD result, but SMT solver's response was UNKNOWN. [2018-11-14 18:16:20,926 INFO L700 Elim1Store]: detected not equals via solver [2018-11-14 18:16:21,317 INFO L700 Elim1Store]: detected not equals via solver [2018-11-14 18:16:21,358 INFO L700 Elim1Store]: detected not equals via solver [2018-11-14 18:16:21,359 INFO L303 Elim1Store]: Index analysis took 565 ms [2018-11-14 18:16:21,360 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 3 select indices, 3 select index equivalence classes, 4 disjoint index pairs (out of 3 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 22 treesize of output 21 [2018-11-14 18:16:21,363 INFO L267 ElimStorePlain]: Start of recursive call 2: End of recursive call: and 1 xjuncts. [2018-11-14 18:16:23,404 INFO L303 Elim1Store]: Index analysis took 683 ms [2018-11-14 18:16:23,406 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 3 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 0 case distinctions, treesize of input 547 treesize of output 419 [2018-11-14 18:16:24,886 WARN L179 SmtUtils]: Spent 1.05 s on a formula simplification. DAG size of input: 64 DAG size of output: 45 [2018-11-14 18:16:25,103 INFO L700 Elim1Store]: detected not equals via solver [2018-11-14 18:16:25,104 INFO L303 Elim1Store]: Index analysis took 216 ms [2018-11-14 18:16:25,105 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 20 treesize of output 31 [2018-11-14 18:16:25,106 INFO L267 ElimStorePlain]: Start of recursive call 4: End of recursive call: and 1 xjuncts. [2018-11-14 18:16:25,703 INFO L303 Elim1Store]: Index analysis took 294 ms [2018-11-14 18:16:25,704 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 3 select indices, 3 select index equivalence classes, 3 disjoint index pairs (out of 3 index pairs), introduced 2 new quantified variables, introduced 0 case distinctions, treesize of input 169 treesize of output 181 [2018-11-14 18:16:25,721 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 8 treesize of output 7 [2018-11-14 18:16:25,722 INFO L267 ElimStorePlain]: Start of recursive call 6: End of recursive call: and 1 xjuncts. [2018-11-14 18:16:26,024 INFO L700 Elim1Store]: detected not equals via solver [2018-11-14 18:16:26,036 INFO L700 Elim1Store]: detected not equals via solver [2018-11-14 18:16:26,037 INFO L682 Elim1Store]: detected equality via solver [2018-11-14 18:16:26,268 INFO L303 Elim1Store]: Index analysis took 270 ms [2018-11-14 18:16:26,269 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 5 disjoint index pairs (out of 6 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 160 treesize of output 298 [2018-11-14 18:16:26,284 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 68 treesize of output 123 [2018-11-14 18:16:26,285 INFO L267 ElimStorePlain]: Start of recursive call 8: End of recursive call: and 1 xjuncts. [2018-11-14 18:16:26,417 INFO L267 ElimStorePlain]: Start of recursive call 7: 1 dim-1 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:16:26,517 INFO L267 ElimStorePlain]: Start of recursive call 5: 1 dim-1 vars, 1 dim-2 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:16:26,629 INFO L267 ElimStorePlain]: Start of recursive call 3: 1 dim-1 vars, 1 dim-2 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:16:26,861 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 3 disjoint index pairs (out of 1 index pairs), introduced 3 new quantified variables, introduced 0 case distinctions, treesize of input 390 treesize of output 185 [2018-11-14 18:16:27,181 WARN L179 SmtUtils]: Spent 288.00 ms on a formula simplification. DAG size of input: 66 DAG size of output: 44 [2018-11-14 18:16:27,193 INFO L700 Elim1Store]: detected not equals via solver [2018-11-14 18:16:27,198 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 20 treesize of output 31 [2018-11-14 18:16:27,200 INFO L267 ElimStorePlain]: Start of recursive call 10: End of recursive call: and 1 xjuncts. [2018-11-14 18:16:27,331 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 3 select indices, 3 select index equivalence classes, 3 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 0 case distinctions, treesize of input 155 treesize of output 134 [2018-11-14 18:16:27,353 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 8 treesize of output 7 [2018-11-14 18:16:27,354 INFO L267 ElimStorePlain]: Start of recursive call 12: End of recursive call: and 1 xjuncts. [2018-11-14 18:16:27,474 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 3 disjoint index pairs (out of 6 index pairs), introduced 2 new quantified variables, introduced 0 case distinctions, treesize of input 146 treesize of output 116 [2018-11-14 18:16:27,484 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 15 [2018-11-14 18:16:27,486 INFO L267 ElimStorePlain]: Start of recursive call 14: End of recursive call: and 1 xjuncts. [2018-11-14 18:16:27,538 INFO L267 ElimStorePlain]: Start of recursive call 13: 1 dim-1 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:16:27,591 INFO L267 ElimStorePlain]: Start of recursive call 11: 1 dim-1 vars, 1 dim-2 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:16:27,643 INFO L267 ElimStorePlain]: Start of recursive call 9: 1 dim-1 vars, 1 dim-2 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:16:27,725 INFO L267 ElimStorePlain]: Start of recursive call 1: 2 dim-0 vars, 1 dim-1 vars, 2 dim-2 vars, End of recursive call: 1 dim-0 vars, and 1 xjuncts. [2018-11-14 18:16:27,726 INFO L202 ElimStorePlain]: Needed 14 recursive calls to eliminate 5 variables, input treesize:599, output treesize:165 [2018-11-14 18:16:28,856 WARN L383 uantifierElimination]: Trying to double check SDD result, but SMT solver's response was UNKNOWN. [2018-11-14 18:16:29,372 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 3 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 0 case distinctions, treesize of input 73 treesize of output 73 [2018-11-14 18:16:29,386 INFO L700 Elim1Store]: detected not equals via solver [2018-11-14 18:16:29,387 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 6 [2018-11-14 18:16:29,388 INFO L267 ElimStorePlain]: Start of recursive call 3: End of recursive call: and 1 xjuncts. [2018-11-14 18:16:29,416 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 3 [2018-11-14 18:16:29,420 INFO L267 ElimStorePlain]: Start of recursive call 4: End of recursive call: and 1 xjuncts. [2018-11-14 18:16:29,427 INFO L267 ElimStorePlain]: Start of recursive call 2: 2 dim-1 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:16:29,497 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 3 disjoint index pairs (out of 3 index pairs), introduced 5 new quantified variables, introduced 0 case distinctions, treesize of input 100 treesize of output 62 [2018-11-14 18:16:29,509 INFO L700 Elim1Store]: detected not equals via solver [2018-11-14 18:16:29,512 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 3 disjoint index pairs (out of 1 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 24 treesize of output 17 [2018-11-14 18:16:29,515 INFO L267 ElimStorePlain]: Start of recursive call 6: End of recursive call: and 1 xjuncts. [2018-11-14 18:16:29,532 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 2 disjoint index pairs (out of 1 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 8 [2018-11-14 18:16:29,535 INFO L267 ElimStorePlain]: Start of recursive call 7: End of recursive call: and 1 xjuncts. [2018-11-14 18:16:29,536 INFO L267 ElimStorePlain]: Start of recursive call 5: 2 dim-1 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:16:29,541 INFO L267 ElimStorePlain]: Start of recursive call 1: 2 dim-0 vars, 2 dim-2 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:16:29,542 INFO L202 ElimStorePlain]: Needed 7 recursive calls to eliminate 4 variables, input treesize:172, output treesize:7 [2018-11-14 18:16:29,553 WARN L383 uantifierElimination]: Trying to double check SDD result, but SMT solver's response was UNKNOWN. [2018-11-14 18:16:29,584 INFO L256 TraceCheckUtils]: 0: Hoare triple {16624#true} call ULTIMATE.init(); {16624#true} is VALID [2018-11-14 18:16:29,584 INFO L273 TraceCheckUtils]: 1: Hoare triple {16624#true} #NULL.base, #NULL.offset := 0bv32, 0bv32;#valid := #valid[0bv32 := 0bv1]; {16624#true} is VALID [2018-11-14 18:16:29,584 INFO L273 TraceCheckUtils]: 2: Hoare triple {16624#true} assume true; {16624#true} is VALID [2018-11-14 18:16:29,585 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {16624#true} {16624#true} #358#return; {16624#true} is VALID [2018-11-14 18:16:29,585 INFO L256 TraceCheckUtils]: 4: Hoare triple {16624#true} call #t~ret28 := main(); {16624#true} is VALID [2018-11-14 18:16:29,605 INFO L273 TraceCheckUtils]: 5: Hoare triple {16624#true} call #t~malloc0.base, #t~malloc0.offset := #Ultimate.alloc(8bv32);~list~0.base, ~list~0.offset := #t~malloc0.base, #t~malloc0.offset;call write~$Pointer$(0bv32, 0bv32, ~list~0.base, ~list~0.offset, 4bv32); {16644#(and (= (_ bv1 1) (select |#valid| main_~list~0.base)) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:16:29,606 INFO L273 TraceCheckUtils]: 6: Hoare triple {16644#(and (= (_ bv1 1) (select |#valid| main_~list~0.base)) (= main_~list~0.offset (_ bv0 32)))} assume true; {16644#(and (= (_ bv1 1) (select |#valid| main_~list~0.base)) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:16:29,607 INFO L273 TraceCheckUtils]: 7: Hoare triple {16644#(and (= (_ bv1 1) (select |#valid| main_~list~0.base)) (= main_~list~0.offset (_ bv0 32)))} assume !!(~list~0.base != 0bv32 || ~list~0.offset != 0bv32); {16644#(and (= (_ bv1 1) (select |#valid| main_~list~0.base)) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:16:29,607 INFO L273 TraceCheckUtils]: 8: Hoare triple {16644#(and (= (_ bv1 1) (select |#valid| main_~list~0.base)) (= main_~list~0.offset (_ bv0 32)))} assume true; {16644#(and (= (_ bv1 1) (select |#valid| main_~list~0.base)) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:16:29,608 INFO L273 TraceCheckUtils]: 9: Hoare triple {16644#(and (= (_ bv1 1) (select |#valid| main_~list~0.base)) (= main_~list~0.offset (_ bv0 32)))} assume #t~nondet1 != 0bv32;havoc #t~nondet1;call write~$Pointer$(0bv32, 0bv32, ~list~0.base, ~bvadd32(4bv32, ~list~0.offset), 4bv32); {16657#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (_ bv1 1) (select |#valid| main_~list~0.base)) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:16:29,609 INFO L273 TraceCheckUtils]: 10: Hoare triple {16657#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (_ bv1 1) (select |#valid| main_~list~0.base)) (= main_~list~0.offset (_ bv0 32)))} assume true;call #t~mem5.base, #t~mem5.offset := read~$Pointer$(~list~0.base, ~bvadd32(4bv32, ~list~0.offset), 4bv32);#t~short7 := #t~mem5.base != 0bv32 || #t~mem5.offset != 0bv32; {16657#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (_ bv1 1) (select |#valid| main_~list~0.base)) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:16:29,609 INFO L273 TraceCheckUtils]: 11: Hoare triple {16657#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (_ bv1 1) (select |#valid| main_~list~0.base)) (= main_~list~0.offset (_ bv0 32)))} assume !#t~short7;call #t~mem6.base, #t~mem6.offset := read~$Pointer$(~list~0.base, ~bvadd32(4bv32, ~list~0.offset), 4bv32);#t~short7 := #t~mem6.base == 0bv32 && #t~mem6.offset == 0bv32; {16657#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (_ bv1 1) (select |#valid| main_~list~0.base)) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:16:29,610 INFO L273 TraceCheckUtils]: 12: Hoare triple {16657#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (_ bv1 1) (select |#valid| main_~list~0.base)) (= main_~list~0.offset (_ bv0 32)))} assume !!#t~short7;havoc #t~mem5.base, #t~mem5.offset;havoc #t~mem6.base, #t~mem6.offset;havoc #t~short7; {16657#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (_ bv1 1) (select |#valid| main_~list~0.base)) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:16:29,610 INFO L273 TraceCheckUtils]: 13: Hoare triple {16657#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (_ bv1 1) (select |#valid| main_~list~0.base)) (= main_~list~0.offset (_ bv0 32)))} assume true; {16657#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (_ bv1 1) (select |#valid| main_~list~0.base)) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:16:29,611 INFO L273 TraceCheckUtils]: 14: Hoare triple {16657#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (_ bv1 1) (select |#valid| main_~list~0.base)) (= main_~list~0.offset (_ bv0 32)))} ~end~0.base, ~end~0.offset := ~list~0.base, ~list~0.offset; {16673#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.base main_~end~0.base) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (_ bv1 1) (select |#valid| main_~list~0.base)) (= main_~list~0.offset main_~end~0.offset) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:16:29,612 INFO L273 TraceCheckUtils]: 15: Hoare triple {16673#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.base main_~end~0.base) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (_ bv1 1) (select |#valid| main_~list~0.base)) (= main_~list~0.offset main_~end~0.offset) (= main_~list~0.offset (_ bv0 32)))} assume true; {16673#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.base main_~end~0.base) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (_ bv1 1) (select |#valid| main_~list~0.base)) (= main_~list~0.offset main_~end~0.offset) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:16:29,617 INFO L273 TraceCheckUtils]: 16: Hoare triple {16673#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.base main_~end~0.base) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (_ bv1 1) (select |#valid| main_~list~0.base)) (= main_~list~0.offset main_~end~0.offset) (= main_~list~0.offset (_ bv0 32)))} assume !!(#t~nondet8 != 0bv32);havoc #t~nondet8;call #t~malloc9.base, #t~malloc9.offset := #Ultimate.alloc(8bv32);call write~$Pointer$(#t~malloc9.base, #t~malloc9.offset, ~end~0.base, ~end~0.offset, 4bv32);call #t~mem10.base, #t~mem10.offset := read~$Pointer$(~end~0.base, ~end~0.offset, 4bv32);~end~0.base, ~end~0.offset := #t~mem10.base, #t~mem10.offset;havoc #t~mem10.base, #t~mem10.offset;call write~$Pointer$(0bv32, 0bv32, ~end~0.base, ~end~0.offset, 4bv32); {16680#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (not (= main_~list~0.base main_~end~0.base)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) main_~end~0.base) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (= (_ bv1 1) (select |#valid| main_~end~0.base)) (= (_ bv1 1) (select |#valid| main_~list~0.base)) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:16:29,619 INFO L273 TraceCheckUtils]: 17: Hoare triple {16680#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (not (= main_~list~0.base main_~end~0.base)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) main_~end~0.base) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (= (_ bv1 1) (select |#valid| main_~end~0.base)) (= (_ bv1 1) (select |#valid| main_~list~0.base)) (= main_~list~0.offset (_ bv0 32)))} assume true; {16680#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (not (= main_~list~0.base main_~end~0.base)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) main_~end~0.base) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (= (_ bv1 1) (select |#valid| main_~end~0.base)) (= (_ bv1 1) (select |#valid| main_~list~0.base)) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:16:29,620 INFO L273 TraceCheckUtils]: 18: Hoare triple {16680#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (not (= main_~list~0.base main_~end~0.base)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) main_~end~0.base) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (= (_ bv1 1) (select |#valid| main_~end~0.base)) (= (_ bv1 1) (select |#valid| main_~list~0.base)) (= main_~list~0.offset (_ bv0 32)))} assume !!(0bv32 != ~end~0.base || 0bv32 != ~end~0.offset); {16680#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (not (= main_~list~0.base main_~end~0.base)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) main_~end~0.base) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (= (_ bv1 1) (select |#valid| main_~end~0.base)) (= (_ bv1 1) (select |#valid| main_~list~0.base)) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:16:29,621 INFO L273 TraceCheckUtils]: 19: Hoare triple {16680#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (not (= main_~list~0.base main_~end~0.base)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) main_~end~0.base) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (= (_ bv1 1) (select |#valid| main_~end~0.base)) (= (_ bv1 1) (select |#valid| main_~list~0.base)) (= main_~list~0.offset (_ bv0 32)))} assume true; {16680#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (not (= main_~list~0.base main_~end~0.base)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) main_~end~0.base) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (= (_ bv1 1) (select |#valid| main_~end~0.base)) (= (_ bv1 1) (select |#valid| main_~list~0.base)) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:16:29,623 INFO L273 TraceCheckUtils]: 20: Hoare triple {16680#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (not (= main_~list~0.base main_~end~0.base)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) main_~end~0.base) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (= (_ bv1 1) (select |#valid| main_~end~0.base)) (= (_ bv1 1) (select |#valid| main_~list~0.base)) (= main_~list~0.offset (_ bv0 32)))} assume true; {16680#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (not (= main_~list~0.base main_~end~0.base)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) main_~end~0.base) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (= (_ bv1 1) (select |#valid| main_~end~0.base)) (= (_ bv1 1) (select |#valid| main_~list~0.base)) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:16:29,625 INFO L273 TraceCheckUtils]: 21: Hoare triple {16680#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (not (= main_~list~0.base main_~end~0.base)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) main_~end~0.base) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (= (_ bv1 1) (select |#valid| main_~end~0.base)) (= (_ bv1 1) (select |#valid| main_~list~0.base)) (= main_~list~0.offset (_ bv0 32)))} assume !!(~end~0.base != 0bv32 || ~end~0.offset != 0bv32); {16680#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (not (= main_~list~0.base main_~end~0.base)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) main_~end~0.base) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (= (_ bv1 1) (select |#valid| main_~end~0.base)) (= (_ bv1 1) (select |#valid| main_~list~0.base)) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:16:29,626 INFO L273 TraceCheckUtils]: 22: Hoare triple {16680#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (not (= main_~list~0.base main_~end~0.base)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) main_~end~0.base) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (= (_ bv1 1) (select |#valid| main_~end~0.base)) (= (_ bv1 1) (select |#valid| main_~list~0.base)) (= main_~list~0.offset (_ bv0 32)))} assume true; {16680#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (not (= main_~list~0.base main_~end~0.base)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) main_~end~0.base) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (= (_ bv1 1) (select |#valid| main_~end~0.base)) (= (_ bv1 1) (select |#valid| main_~list~0.base)) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:16:29,638 INFO L273 TraceCheckUtils]: 23: Hoare triple {16680#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (not (= main_~list~0.base main_~end~0.base)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) main_~end~0.base) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (= (_ bv1 1) (select |#valid| main_~end~0.base)) (= (_ bv1 1) (select |#valid| main_~list~0.base)) (= main_~list~0.offset (_ bv0 32)))} assume !(#t~nondet11 != 0bv32);havoc #t~nondet11;call #t~malloc12.base, #t~malloc12.offset := #Ultimate.alloc(8bv32);call write~$Pointer$(#t~malloc12.base, #t~malloc12.offset, ~end~0.base, ~bvadd32(4bv32, ~end~0.offset), 4bv32);call #t~mem13.base, #t~mem13.offset := read~$Pointer$(~end~0.base, ~bvadd32(4bv32, ~end~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, #t~mem13.base, #t~mem13.offset, 4bv32);havoc #t~mem13.base, #t~mem13.offset;call #t~mem14.base, #t~mem14.offset := read~$Pointer$(~end~0.base, ~bvadd32(4bv32, ~end~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, #t~mem14.base, ~bvadd32(4bv32, #t~mem14.offset), 4bv32);havoc #t~mem14.base, #t~mem14.offset; {16702#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (exists ((main_~end~0.offset (_ BitVec 32))) (and (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv4 32)) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) main_~end~0.offset)) (not (= main_~list~0.base (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32))))) (not (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32))))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv4 32)) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) main_~end~0.offset)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv0 32))))) (not (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) main_~list~0.base)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:16:29,639 INFO L273 TraceCheckUtils]: 24: Hoare triple {16702#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (exists ((main_~end~0.offset (_ BitVec 32))) (and (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv4 32)) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) main_~end~0.offset)) (not (= main_~list~0.base (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32))))) (not (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32))))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv4 32)) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) main_~end~0.offset)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv0 32))))) (not (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) main_~list~0.base)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset (_ bv0 32)))} assume true;call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~end~0.base, ~bvadd32(4bv32, ~end~0.offset), 4bv32);#t~short17 := #t~mem15.base != 0bv32 || #t~mem15.offset != 0bv32; {16702#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (exists ((main_~end~0.offset (_ BitVec 32))) (and (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv4 32)) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) main_~end~0.offset)) (not (= main_~list~0.base (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32))))) (not (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32))))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv4 32)) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) main_~end~0.offset)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv0 32))))) (not (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) main_~list~0.base)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:16:29,640 INFO L273 TraceCheckUtils]: 25: Hoare triple {16702#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (exists ((main_~end~0.offset (_ BitVec 32))) (and (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv4 32)) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) main_~end~0.offset)) (not (= main_~list~0.base (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32))))) (not (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32))))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv4 32)) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) main_~end~0.offset)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv0 32))))) (not (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) main_~list~0.base)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset (_ bv0 32)))} assume #t~short17; {16702#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (exists ((main_~end~0.offset (_ BitVec 32))) (and (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv4 32)) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) main_~end~0.offset)) (not (= main_~list~0.base (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32))))) (not (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32))))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv4 32)) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) main_~end~0.offset)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv0 32))))) (not (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) main_~list~0.base)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:16:29,641 INFO L273 TraceCheckUtils]: 26: Hoare triple {16702#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (exists ((main_~end~0.offset (_ BitVec 32))) (and (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv4 32)) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) main_~end~0.offset)) (not (= main_~list~0.base (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32))))) (not (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32))))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv4 32)) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) main_~end~0.offset)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv0 32))))) (not (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) main_~list~0.base)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset (_ bv0 32)))} assume !!#t~short17;havoc #t~mem15.base, #t~mem15.offset;havoc #t~mem16.base, #t~mem16.offset;havoc #t~short17; {16702#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (exists ((main_~end~0.offset (_ BitVec 32))) (and (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv4 32)) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) main_~end~0.offset)) (not (= main_~list~0.base (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32))))) (not (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32))))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv4 32)) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) main_~end~0.offset)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv0 32))))) (not (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) main_~list~0.base)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:16:29,642 INFO L273 TraceCheckUtils]: 27: Hoare triple {16702#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (exists ((main_~end~0.offset (_ BitVec 32))) (and (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv4 32)) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) main_~end~0.offset)) (not (= main_~list~0.base (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32))))) (not (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32))))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv4 32)) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) main_~end~0.offset)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv0 32))))) (not (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) main_~list~0.base)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset (_ bv0 32)))} assume true; {16702#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (exists ((main_~end~0.offset (_ BitVec 32))) (and (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv4 32)) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) main_~end~0.offset)) (not (= main_~list~0.base (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32))))) (not (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32))))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv4 32)) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) main_~end~0.offset)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv0 32))))) (not (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) main_~list~0.base)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:16:29,644 INFO L273 TraceCheckUtils]: 28: Hoare triple {16702#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (exists ((main_~end~0.offset (_ BitVec 32))) (and (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv4 32)) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) main_~end~0.offset)) (not (= main_~list~0.base (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32))))) (not (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32))))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv4 32)) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) main_~end~0.offset)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv0 32))))) (not (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) main_~list~0.base)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset (_ bv0 32)))} assume true; {16702#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (exists ((main_~end~0.offset (_ BitVec 32))) (and (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv4 32)) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) main_~end~0.offset)) (not (= main_~list~0.base (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32))))) (not (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32))))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv4 32)) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) main_~end~0.offset)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv0 32))))) (not (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) main_~list~0.base)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:16:29,645 INFO L273 TraceCheckUtils]: 29: Hoare triple {16702#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (exists ((main_~end~0.offset (_ BitVec 32))) (and (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv4 32)) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) main_~end~0.offset)) (not (= main_~list~0.base (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32))))) (not (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32))))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv4 32)) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) main_~end~0.offset)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv0 32))))) (not (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) main_~list~0.base)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset (_ bv0 32)))} assume !(#t~nondet8 != 0bv32);havoc #t~nondet8; {16702#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (exists ((main_~end~0.offset (_ BitVec 32))) (and (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv4 32)) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) main_~end~0.offset)) (not (= main_~list~0.base (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32))))) (not (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32))))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv4 32)) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) main_~end~0.offset)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv0 32))))) (not (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) main_~list~0.base)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:16:29,650 INFO L273 TraceCheckUtils]: 30: Hoare triple {16702#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (exists ((main_~end~0.offset (_ BitVec 32))) (and (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv4 32)) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) main_~end~0.offset)) (not (= main_~list~0.base (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32))))) (not (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32))))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv4 32)) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) main_~end~0.offset)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv0 32))))) (not (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) main_~list~0.base)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset (_ bv0 32)))} ~end~0.base, ~end~0.offset := 0bv32, 0bv32;~end~0.base, ~end~0.offset := ~list~0.base, ~list~0.offset; {16724#(and (exists ((v_subst_1 (_ BitVec 32))) (and (not (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32))) main_~end~0.base)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32))) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset))) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) v_subst_1) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32)))) (_ bv4 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32)))) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32)))) (_ bv4 32)) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) v_subst_1)))) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset) main_~end~0.base)) (= main_~end~0.offset (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)))} is VALID [2018-11-14 18:16:29,654 INFO L273 TraceCheckUtils]: 31: Hoare triple {16724#(and (exists ((v_subst_1 (_ BitVec 32))) (and (not (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32))) main_~end~0.base)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32))) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset))) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) v_subst_1) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32)))) (_ bv4 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32)))) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32)))) (_ bv4 32)) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) v_subst_1)))) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset) main_~end~0.base)) (= main_~end~0.offset (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)))} assume true; {16724#(and (exists ((v_subst_1 (_ BitVec 32))) (and (not (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32))) main_~end~0.base)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32))) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset))) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) v_subst_1) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32)))) (_ bv4 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32)))) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32)))) (_ bv4 32)) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) v_subst_1)))) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset) main_~end~0.base)) (= main_~end~0.offset (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)))} is VALID [2018-11-14 18:16:29,657 INFO L273 TraceCheckUtils]: 32: Hoare triple {16724#(and (exists ((v_subst_1 (_ BitVec 32))) (and (not (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32))) main_~end~0.base)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32))) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset))) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) v_subst_1) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32)))) (_ bv4 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32)))) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32)))) (_ bv4 32)) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) v_subst_1)))) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset) main_~end~0.base)) (= main_~end~0.offset (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)))} assume !!(0bv32 != ~end~0.base || 0bv32 != ~end~0.offset); {16724#(and (exists ((v_subst_1 (_ BitVec 32))) (and (not (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32))) main_~end~0.base)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32))) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset))) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) v_subst_1) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32)))) (_ bv4 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32)))) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32)))) (_ bv4 32)) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) v_subst_1)))) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset) main_~end~0.base)) (= main_~end~0.offset (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)))} is VALID [2018-11-14 18:16:29,659 INFO L273 TraceCheckUtils]: 33: Hoare triple {16724#(and (exists ((v_subst_1 (_ BitVec 32))) (and (not (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32))) main_~end~0.base)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32))) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset))) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) v_subst_1) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32)))) (_ bv4 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32)))) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32)))) (_ bv4 32)) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) v_subst_1)))) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset) main_~end~0.base)) (= main_~end~0.offset (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)))} assume true; {16724#(and (exists ((v_subst_1 (_ BitVec 32))) (and (not (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32))) main_~end~0.base)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32))) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset))) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) v_subst_1) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32)))) (_ bv4 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32)))) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32)))) (_ bv4 32)) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) v_subst_1)))) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset) main_~end~0.base)) (= main_~end~0.offset (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)))} is VALID [2018-11-14 18:16:29,662 INFO L273 TraceCheckUtils]: 34: Hoare triple {16724#(and (exists ((v_subst_1 (_ BitVec 32))) (and (not (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32))) main_~end~0.base)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32))) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset))) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) v_subst_1) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32)))) (_ bv4 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32)))) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32)))) (_ bv4 32)) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) v_subst_1)))) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset) main_~end~0.base)) (= main_~end~0.offset (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)))} assume true; {16724#(and (exists ((v_subst_1 (_ BitVec 32))) (and (not (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32))) main_~end~0.base)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32))) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset))) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) v_subst_1) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32)))) (_ bv4 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32)))) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32)))) (_ bv4 32)) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) v_subst_1)))) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset) main_~end~0.base)) (= main_~end~0.offset (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)))} is VALID [2018-11-14 18:16:29,664 INFO L273 TraceCheckUtils]: 35: Hoare triple {16724#(and (exists ((v_subst_1 (_ BitVec 32))) (and (not (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32))) main_~end~0.base)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32))) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset))) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) v_subst_1) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32)))) (_ bv4 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32)))) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32)))) (_ bv4 32)) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) v_subst_1)))) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset) main_~end~0.base)) (= main_~end~0.offset (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)))} assume !!(0bv32 != ~end~0.base || 0bv32 != ~end~0.offset);~len~0 := 0bv32;call #t~mem18.base, #t~mem18.offset := read~$Pointer$(~end~0.base, ~bvadd32(4bv32, ~end~0.offset), 4bv32);~inner~0.base, ~inner~0.offset := #t~mem18.base, #t~mem18.offset;havoc #t~mem18.base, #t~mem18.offset; {16740#(and (= (_ bv0 32) main_~inner~0.offset) (= main_~inner~0.base (_ bv0 32)))} is VALID [2018-11-14 18:16:29,665 INFO L273 TraceCheckUtils]: 36: Hoare triple {16740#(and (= (_ bv0 32) main_~inner~0.offset) (= main_~inner~0.base (_ bv0 32)))} assume true; {16740#(and (= (_ bv0 32) main_~inner~0.offset) (= main_~inner~0.base (_ bv0 32)))} is VALID [2018-11-14 18:16:29,666 INFO L273 TraceCheckUtils]: 37: Hoare triple {16740#(and (= (_ bv0 32) main_~inner~0.offset) (= main_~inner~0.base (_ bv0 32)))} assume !!(0bv32 != ~inner~0.base || 0bv32 != ~inner~0.offset); {16625#false} is VALID [2018-11-14 18:16:29,666 INFO L273 TraceCheckUtils]: 38: Hoare triple {16625#false} assume ~len~0 == 0bv32;~len~0 := 1bv32; {16625#false} is VALID [2018-11-14 18:16:29,666 INFO L273 TraceCheckUtils]: 39: Hoare triple {16625#false} assume true; {16625#false} is VALID [2018-11-14 18:16:29,666 INFO L273 TraceCheckUtils]: 40: Hoare triple {16625#false} assume !!(0bv32 != ~inner~0.base || 0bv32 != ~inner~0.offset); {16625#false} is VALID [2018-11-14 18:16:29,667 INFO L273 TraceCheckUtils]: 41: Hoare triple {16625#false} assume true; {16625#false} is VALID [2018-11-14 18:16:29,667 INFO L273 TraceCheckUtils]: 42: Hoare triple {16625#false} assume true;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~inner~0.base, ~bvadd32(4bv32, ~inner~0.offset), 4bv32); {16625#false} is VALID [2018-11-14 18:16:29,667 INFO L273 TraceCheckUtils]: 43: Hoare triple {16625#false} assume !(0bv32 == #t~mem19.base && 0bv32 == #t~mem19.offset);havoc #t~mem19.base, #t~mem19.offset; {16625#false} is VALID [2018-11-14 18:16:29,667 INFO L273 TraceCheckUtils]: 44: Hoare triple {16625#false} assume !false; {16625#false} is VALID [2018-11-14 18:16:29,681 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-14 18:16:29,682 INFO L316 TraceCheckSpWp]: Computing backward predicates...