java -ea -Xmx8000000000 -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc ../../../trunk/examples/toolchains/AutomizerC.xml -s ../../../trunk/examples/settings/default/automizer/svcomp-Reach-32bit-Automizer_Bitvector-Const.epf -i ../../../trunk/examples/svcomp/forester-heap/sll-01_true-unreach-call_true-valid-memsafety.i -------------------------------------------------------------------------------- This is Ultimate 0.1.23-370d6ab [2018-11-14 18:16:49,334 INFO L170 SettingsManager]: Resetting all preferences to default values... [2018-11-14 18:16:49,336 INFO L174 SettingsManager]: Resetting UltimateCore preferences to default values [2018-11-14 18:16:49,349 INFO L177 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2018-11-14 18:16:49,349 INFO L174 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2018-11-14 18:16:49,350 INFO L174 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2018-11-14 18:16:49,352 INFO L174 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2018-11-14 18:16:49,353 INFO L174 SettingsManager]: Resetting LassoRanker preferences to default values [2018-11-14 18:16:49,355 INFO L174 SettingsManager]: Resetting Reaching Definitions preferences to default values [2018-11-14 18:16:49,356 INFO L174 SettingsManager]: Resetting SyntaxChecker preferences to default values [2018-11-14 18:16:49,357 INFO L177 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2018-11-14 18:16:49,357 INFO L174 SettingsManager]: Resetting LTL2Aut preferences to default values [2018-11-14 18:16:49,358 INFO L174 SettingsManager]: Resetting PEA to Boogie preferences to default values [2018-11-14 18:16:49,359 INFO L174 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2018-11-14 18:16:49,360 INFO L174 SettingsManager]: Resetting ChcToBoogie preferences to default values [2018-11-14 18:16:49,361 INFO L174 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2018-11-14 18:16:49,362 INFO L174 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2018-11-14 18:16:49,363 INFO L174 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2018-11-14 18:16:49,366 INFO L174 SettingsManager]: Resetting CodeCheck preferences to default values [2018-11-14 18:16:49,367 INFO L174 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2018-11-14 18:16:49,368 INFO L174 SettingsManager]: Resetting RCFGBuilder preferences to default values [2018-11-14 18:16:49,369 INFO L174 SettingsManager]: Resetting TraceAbstraction preferences to default values [2018-11-14 18:16:49,372 INFO L177 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2018-11-14 18:16:49,372 INFO L177 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2018-11-14 18:16:49,372 INFO L174 SettingsManager]: Resetting TreeAutomizer preferences to default values [2018-11-14 18:16:49,373 INFO L174 SettingsManager]: Resetting IcfgTransformer preferences to default values [2018-11-14 18:16:49,374 INFO L174 SettingsManager]: Resetting Boogie Printer preferences to default values [2018-11-14 18:16:49,375 INFO L174 SettingsManager]: Resetting ReqPrinter preferences to default values [2018-11-14 18:16:49,376 INFO L174 SettingsManager]: Resetting Witness Printer preferences to default values [2018-11-14 18:16:49,377 INFO L177 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2018-11-14 18:16:49,377 INFO L174 SettingsManager]: Resetting CDTParser preferences to default values [2018-11-14 18:16:49,378 INFO L177 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2018-11-14 18:16:49,378 INFO L177 SettingsManager]: ReqParser provides no preferences, ignoring... [2018-11-14 18:16:49,378 INFO L174 SettingsManager]: Resetting SmtParser preferences to default values [2018-11-14 18:16:49,379 INFO L174 SettingsManager]: Resetting Witness Parser preferences to default values [2018-11-14 18:16:49,380 INFO L181 SettingsManager]: Finished resetting all preferences to default values... [2018-11-14 18:16:49,380 INFO L98 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/settings/default/automizer/svcomp-Reach-32bit-Automizer_Bitvector-Const.epf [2018-11-14 18:16:49,396 INFO L110 SettingsManager]: Loading preferences was successful [2018-11-14 18:16:49,397 INFO L112 SettingsManager]: Preferences different from defaults after loading the file: [2018-11-14 18:16:49,398 INFO L131 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2018-11-14 18:16:49,398 INFO L133 SettingsManager]: * to procedures, called more than once=true [2018-11-14 18:16:49,398 INFO L131 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2018-11-14 18:16:49,399 INFO L133 SettingsManager]: * Create parallel compositions if possible=false [2018-11-14 18:16:49,399 INFO L133 SettingsManager]: * Use SBE=true [2018-11-14 18:16:49,399 INFO L131 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2018-11-14 18:16:49,399 INFO L133 SettingsManager]: * sizeof long=4 [2018-11-14 18:16:49,399 INFO L133 SettingsManager]: * sizeof POINTER=4 [2018-11-14 18:16:49,401 INFO L133 SettingsManager]: * Check division by zero=IGNORE [2018-11-14 18:16:49,401 INFO L133 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2018-11-14 18:16:49,401 INFO L133 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2018-11-14 18:16:49,401 INFO L133 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2018-11-14 18:16:49,401 INFO L133 SettingsManager]: * Use bitvectors instead of ints=true [2018-11-14 18:16:49,402 INFO L133 SettingsManager]: * Memory model=HoenickeLindenmann_4ByteResolution [2018-11-14 18:16:49,402 INFO L133 SettingsManager]: * sizeof long double=12 [2018-11-14 18:16:49,402 INFO L133 SettingsManager]: * Check if freed pointer was valid=false [2018-11-14 18:16:49,402 INFO L133 SettingsManager]: * Use constant arrays=true [2018-11-14 18:16:49,402 INFO L133 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2018-11-14 18:16:49,403 INFO L131 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2018-11-14 18:16:49,404 INFO L133 SettingsManager]: * Size of a code block=SequenceOfStatements [2018-11-14 18:16:49,404 INFO L133 SettingsManager]: * To the following directory=./dump/ [2018-11-14 18:16:49,404 INFO L133 SettingsManager]: * SMT solver=External_DefaultMode [2018-11-14 18:16:49,405 INFO L133 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2018-11-14 18:16:49,405 INFO L131 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2018-11-14 18:16:49,405 INFO L133 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2018-11-14 18:16:49,405 INFO L133 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2018-11-14 18:16:49,405 INFO L133 SettingsManager]: * Trace refinement strategy=WOLF [2018-11-14 18:16:49,406 INFO L133 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2018-11-14 18:16:49,406 INFO L133 SettingsManager]: * Command for external solver=cvc4nyu --tear-down-incremental --rewrite-divk --print-success --lang smt [2018-11-14 18:16:49,406 INFO L133 SettingsManager]: * Logic for external solver=AUFBV [2018-11-14 18:16:49,406 INFO L133 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2018-11-14 18:16:49,460 INFO L81 nceAwareModelManager]: Repository-Root is: /tmp [2018-11-14 18:16:49,473 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2018-11-14 18:16:49,477 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2018-11-14 18:16:49,478 INFO L271 PluginConnector]: Initializing CDTParser... [2018-11-14 18:16:49,479 INFO L276 PluginConnector]: CDTParser initialized [2018-11-14 18:16:49,480 INFO L418 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/svcomp/forester-heap/sll-01_true-unreach-call_true-valid-memsafety.i [2018-11-14 18:16:49,548 INFO L218 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/a24f8a481/ec71941ce81e443f87d471ccd66fe4a0/FLAGd249b34bc [2018-11-14 18:16:50,131 INFO L298 CDTParser]: Found 1 translation units. [2018-11-14 18:16:50,132 INFO L158 CDTParser]: Scanning /storage/repos/ultimate/trunk/examples/svcomp/forester-heap/sll-01_true-unreach-call_true-valid-memsafety.i [2018-11-14 18:16:50,153 INFO L346 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/a24f8a481/ec71941ce81e443f87d471ccd66fe4a0/FLAGd249b34bc [2018-11-14 18:16:50,174 INFO L354 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/a24f8a481/ec71941ce81e443f87d471ccd66fe4a0 [2018-11-14 18:16:50,186 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2018-11-14 18:16:50,188 INFO L131 ToolchainWalker]: Walking toolchain with 4 elements. [2018-11-14 18:16:50,189 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2018-11-14 18:16:50,189 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2018-11-14 18:16:50,193 INFO L276 PluginConnector]: CACSL2BoogieTranslator initialized [2018-11-14 18:16:50,197 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 14.11 06:16:50" (1/1) ... [2018-11-14 18:16:50,200 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@3268ea2d and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.11 06:16:50, skipping insertion in model container [2018-11-14 18:16:50,200 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 14.11 06:16:50" (1/1) ... [2018-11-14 18:16:50,210 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2018-11-14 18:16:50,274 INFO L176 MainTranslator]: Built tables and reachable declarations [2018-11-14 18:16:50,775 INFO L201 PostProcessor]: Analyzing one entry point: main [2018-11-14 18:16:50,790 INFO L191 MainTranslator]: Completed pre-run [2018-11-14 18:16:50,985 INFO L201 PostProcessor]: Analyzing one entry point: main [2018-11-14 18:16:51,048 INFO L195 MainTranslator]: Completed translation [2018-11-14 18:16:51,049 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.11 06:16:51 WrapperNode [2018-11-14 18:16:51,049 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2018-11-14 18:16:51,050 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2018-11-14 18:16:51,050 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2018-11-14 18:16:51,050 INFO L276 PluginConnector]: Boogie Preprocessor initialized [2018-11-14 18:16:51,066 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.11 06:16:51" (1/1) ... [2018-11-14 18:16:51,067 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.11 06:16:51" (1/1) ... [2018-11-14 18:16:51,105 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.11 06:16:51" (1/1) ... [2018-11-14 18:16:51,105 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.11 06:16:51" (1/1) ... [2018-11-14 18:16:51,171 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.11 06:16:51" (1/1) ... [2018-11-14 18:16:51,190 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.11 06:16:51" (1/1) ... [2018-11-14 18:16:51,200 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.11 06:16:51" (1/1) ... [2018-11-14 18:16:51,218 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2018-11-14 18:16:51,221 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2018-11-14 18:16:51,221 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2018-11-14 18:16:51,221 INFO L276 PluginConnector]: RCFGBuilder initialized [2018-11-14 18:16:51,222 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.11 06:16:51" (1/1) ... No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 Starting monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2018-11-14 18:16:51,284 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.init [2018-11-14 18:16:51,284 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2018-11-14 18:16:51,285 INFO L138 BoogieDeclarations]: Found implementation of procedure main [2018-11-14 18:16:51,285 INFO L130 BoogieDeclarations]: Found specification of procedure __ctype_get_mb_cur_max [2018-11-14 18:16:51,285 INFO L130 BoogieDeclarations]: Found specification of procedure atof [2018-11-14 18:16:51,285 INFO L130 BoogieDeclarations]: Found specification of procedure atoi [2018-11-14 18:16:51,285 INFO L130 BoogieDeclarations]: Found specification of procedure atol [2018-11-14 18:16:51,286 INFO L130 BoogieDeclarations]: Found specification of procedure atoll [2018-11-14 18:16:51,286 INFO L130 BoogieDeclarations]: Found specification of procedure strtod [2018-11-14 18:16:51,286 INFO L130 BoogieDeclarations]: Found specification of procedure strtof [2018-11-14 18:16:51,286 INFO L130 BoogieDeclarations]: Found specification of procedure strtold [2018-11-14 18:16:51,286 INFO L130 BoogieDeclarations]: Found specification of procedure strtol [2018-11-14 18:16:51,286 INFO L130 BoogieDeclarations]: Found specification of procedure strtoul [2018-11-14 18:16:51,287 INFO L130 BoogieDeclarations]: Found specification of procedure strtoq [2018-11-14 18:16:51,287 INFO L130 BoogieDeclarations]: Found specification of procedure strtouq [2018-11-14 18:16:51,287 INFO L130 BoogieDeclarations]: Found specification of procedure strtoll [2018-11-14 18:16:51,287 INFO L130 BoogieDeclarations]: Found specification of procedure strtoull [2018-11-14 18:16:51,287 INFO L130 BoogieDeclarations]: Found specification of procedure l64a [2018-11-14 18:16:51,287 INFO L130 BoogieDeclarations]: Found specification of procedure a64l [2018-11-14 18:16:51,288 INFO L130 BoogieDeclarations]: Found specification of procedure select [2018-11-14 18:16:51,288 INFO L130 BoogieDeclarations]: Found specification of procedure pselect [2018-11-14 18:16:51,288 INFO L130 BoogieDeclarations]: Found specification of procedure gnu_dev_major [2018-11-14 18:16:51,288 INFO L130 BoogieDeclarations]: Found specification of procedure gnu_dev_minor [2018-11-14 18:16:51,288 INFO L130 BoogieDeclarations]: Found specification of procedure gnu_dev_makedev [2018-11-14 18:16:51,288 INFO L130 BoogieDeclarations]: Found specification of procedure random [2018-11-14 18:16:51,288 INFO L130 BoogieDeclarations]: Found specification of procedure srandom [2018-11-14 18:16:51,289 INFO L130 BoogieDeclarations]: Found specification of procedure initstate [2018-11-14 18:16:51,289 INFO L130 BoogieDeclarations]: Found specification of procedure setstate [2018-11-14 18:16:51,289 INFO L130 BoogieDeclarations]: Found specification of procedure random_r [2018-11-14 18:16:51,289 INFO L130 BoogieDeclarations]: Found specification of procedure srandom_r [2018-11-14 18:16:51,289 INFO L130 BoogieDeclarations]: Found specification of procedure initstate_r [2018-11-14 18:16:51,289 INFO L130 BoogieDeclarations]: Found specification of procedure setstate_r [2018-11-14 18:16:51,290 INFO L130 BoogieDeclarations]: Found specification of procedure rand [2018-11-14 18:16:51,290 INFO L130 BoogieDeclarations]: Found specification of procedure srand [2018-11-14 18:16:51,290 INFO L130 BoogieDeclarations]: Found specification of procedure rand_r [2018-11-14 18:16:51,290 INFO L130 BoogieDeclarations]: Found specification of procedure drand48 [2018-11-14 18:16:51,290 INFO L130 BoogieDeclarations]: Found specification of procedure erand48 [2018-11-14 18:16:51,290 INFO L130 BoogieDeclarations]: Found specification of procedure lrand48 [2018-11-14 18:16:51,290 INFO L130 BoogieDeclarations]: Found specification of procedure nrand48 [2018-11-14 18:16:51,291 INFO L130 BoogieDeclarations]: Found specification of procedure mrand48 [2018-11-14 18:16:51,291 INFO L130 BoogieDeclarations]: Found specification of procedure jrand48 [2018-11-14 18:16:51,291 INFO L130 BoogieDeclarations]: Found specification of procedure srand48 [2018-11-14 18:16:51,291 INFO L130 BoogieDeclarations]: Found specification of procedure seed48 [2018-11-14 18:16:51,291 INFO L130 BoogieDeclarations]: Found specification of procedure lcong48 [2018-11-14 18:16:51,291 INFO L130 BoogieDeclarations]: Found specification of procedure drand48_r [2018-11-14 18:16:51,291 INFO L130 BoogieDeclarations]: Found specification of procedure erand48_r [2018-11-14 18:16:51,292 INFO L130 BoogieDeclarations]: Found specification of procedure lrand48_r [2018-11-14 18:16:51,292 INFO L130 BoogieDeclarations]: Found specification of procedure nrand48_r [2018-11-14 18:16:51,292 INFO L130 BoogieDeclarations]: Found specification of procedure mrand48_r [2018-11-14 18:16:51,292 INFO L130 BoogieDeclarations]: Found specification of procedure jrand48_r [2018-11-14 18:16:51,292 INFO L130 BoogieDeclarations]: Found specification of procedure srand48_r [2018-11-14 18:16:51,292 INFO L130 BoogieDeclarations]: Found specification of procedure seed48_r [2018-11-14 18:16:51,292 INFO L130 BoogieDeclarations]: Found specification of procedure lcong48_r [2018-11-14 18:16:51,293 INFO L130 BoogieDeclarations]: Found specification of procedure malloc [2018-11-14 18:16:51,293 INFO L130 BoogieDeclarations]: Found specification of procedure calloc [2018-11-14 18:16:51,293 INFO L130 BoogieDeclarations]: Found specification of procedure realloc [2018-11-14 18:16:51,293 INFO L130 BoogieDeclarations]: Found specification of procedure free [2018-11-14 18:16:51,293 INFO L130 BoogieDeclarations]: Found specification of procedure cfree [2018-11-14 18:16:51,293 INFO L130 BoogieDeclarations]: Found specification of procedure alloca [2018-11-14 18:16:51,293 INFO L130 BoogieDeclarations]: Found specification of procedure valloc [2018-11-14 18:16:51,294 INFO L130 BoogieDeclarations]: Found specification of procedure posix_memalign [2018-11-14 18:16:51,294 INFO L130 BoogieDeclarations]: Found specification of procedure aligned_alloc [2018-11-14 18:16:51,294 INFO L130 BoogieDeclarations]: Found specification of procedure abort [2018-11-14 18:16:51,294 INFO L130 BoogieDeclarations]: Found specification of procedure atexit [2018-11-14 18:16:51,294 INFO L130 BoogieDeclarations]: Found specification of procedure at_quick_exit [2018-11-14 18:16:51,294 INFO L130 BoogieDeclarations]: Found specification of procedure on_exit [2018-11-14 18:16:51,294 INFO L130 BoogieDeclarations]: Found specification of procedure exit [2018-11-14 18:16:51,295 INFO L130 BoogieDeclarations]: Found specification of procedure quick_exit [2018-11-14 18:16:51,295 INFO L130 BoogieDeclarations]: Found specification of procedure _Exit [2018-11-14 18:16:51,295 INFO L130 BoogieDeclarations]: Found specification of procedure getenv [2018-11-14 18:16:51,295 INFO L130 BoogieDeclarations]: Found specification of procedure putenv [2018-11-14 18:16:51,295 INFO L130 BoogieDeclarations]: Found specification of procedure setenv [2018-11-14 18:16:51,295 INFO L130 BoogieDeclarations]: Found specification of procedure unsetenv [2018-11-14 18:16:51,296 INFO L130 BoogieDeclarations]: Found specification of procedure clearenv [2018-11-14 18:16:51,296 INFO L130 BoogieDeclarations]: Found specification of procedure mktemp [2018-11-14 18:16:51,296 INFO L130 BoogieDeclarations]: Found specification of procedure mkstemp [2018-11-14 18:16:51,296 INFO L130 BoogieDeclarations]: Found specification of procedure mkstemps [2018-11-14 18:16:51,296 INFO L130 BoogieDeclarations]: Found specification of procedure mkdtemp [2018-11-14 18:16:51,296 INFO L130 BoogieDeclarations]: Found specification of procedure system [2018-11-14 18:16:51,296 INFO L130 BoogieDeclarations]: Found specification of procedure realpath [2018-11-14 18:16:51,297 INFO L130 BoogieDeclarations]: Found specification of procedure bsearch [2018-11-14 18:16:51,297 INFO L130 BoogieDeclarations]: Found specification of procedure qsort [2018-11-14 18:16:51,297 INFO L130 BoogieDeclarations]: Found specification of procedure abs [2018-11-14 18:16:51,297 INFO L130 BoogieDeclarations]: Found specification of procedure labs [2018-11-14 18:16:51,297 INFO L130 BoogieDeclarations]: Found specification of procedure llabs [2018-11-14 18:16:51,297 INFO L130 BoogieDeclarations]: Found specification of procedure div [2018-11-14 18:16:51,298 INFO L130 BoogieDeclarations]: Found specification of procedure ldiv [2018-11-14 18:16:51,298 INFO L130 BoogieDeclarations]: Found specification of procedure lldiv [2018-11-14 18:16:51,298 INFO L130 BoogieDeclarations]: Found specification of procedure ecvt [2018-11-14 18:16:51,298 INFO L130 BoogieDeclarations]: Found specification of procedure fcvt [2018-11-14 18:16:51,298 INFO L130 BoogieDeclarations]: Found specification of procedure gcvt [2018-11-14 18:16:51,298 INFO L130 BoogieDeclarations]: Found specification of procedure qecvt [2018-11-14 18:16:51,298 INFO L130 BoogieDeclarations]: Found specification of procedure qfcvt [2018-11-14 18:16:51,299 INFO L130 BoogieDeclarations]: Found specification of procedure qgcvt [2018-11-14 18:16:51,299 INFO L130 BoogieDeclarations]: Found specification of procedure ecvt_r [2018-11-14 18:16:51,299 INFO L130 BoogieDeclarations]: Found specification of procedure fcvt_r [2018-11-14 18:16:51,299 INFO L130 BoogieDeclarations]: Found specification of procedure qecvt_r [2018-11-14 18:16:51,299 INFO L130 BoogieDeclarations]: Found specification of procedure qfcvt_r [2018-11-14 18:16:51,299 INFO L130 BoogieDeclarations]: Found specification of procedure mblen [2018-11-14 18:16:51,299 INFO L130 BoogieDeclarations]: Found specification of procedure mbtowc [2018-11-14 18:16:51,300 INFO L130 BoogieDeclarations]: Found specification of procedure wctomb [2018-11-14 18:16:51,300 INFO L130 BoogieDeclarations]: Found specification of procedure mbstowcs [2018-11-14 18:16:51,300 INFO L130 BoogieDeclarations]: Found specification of procedure wcstombs [2018-11-14 18:16:51,300 INFO L130 BoogieDeclarations]: Found specification of procedure rpmatch [2018-11-14 18:16:51,300 INFO L130 BoogieDeclarations]: Found specification of procedure getsubopt [2018-11-14 18:16:51,300 INFO L130 BoogieDeclarations]: Found specification of procedure getloadavg [2018-11-14 18:16:51,301 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_int [2018-11-14 18:16:51,301 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_error [2018-11-14 18:16:51,301 INFO L130 BoogieDeclarations]: Found specification of procedure main [2018-11-14 18:16:51,301 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.alloc [2018-11-14 18:16:51,301 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2018-11-14 18:16:51,301 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2018-11-14 18:16:51,301 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2018-11-14 18:16:51,302 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.init [2018-11-14 18:16:51,302 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2018-11-14 18:16:52,945 INFO L278 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2018-11-14 18:16:52,946 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 14.11 06:16:52 BoogieIcfgContainer [2018-11-14 18:16:52,946 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2018-11-14 18:16:52,947 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2018-11-14 18:16:52,948 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2018-11-14 18:16:52,951 INFO L276 PluginConnector]: TraceAbstraction initialized [2018-11-14 18:16:52,951 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 14.11 06:16:50" (1/3) ... [2018-11-14 18:16:52,952 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@197e4c6 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 14.11 06:16:52, skipping insertion in model container [2018-11-14 18:16:52,952 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.11 06:16:51" (2/3) ... [2018-11-14 18:16:52,953 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@197e4c6 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 14.11 06:16:52, skipping insertion in model container [2018-11-14 18:16:52,953 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 14.11 06:16:52" (3/3) ... [2018-11-14 18:16:52,955 INFO L112 eAbstractionObserver]: Analyzing ICFG sll-01_true-unreach-call_true-valid-memsafety.i [2018-11-14 18:16:52,965 INFO L136 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2018-11-14 18:16:52,975 INFO L148 ceAbstractionStarter]: Appying trace abstraction to program that has 13 error locations. [2018-11-14 18:16:52,993 INFO L257 AbstractCegarLoop]: Starting to check reachability of 13 error locations. [2018-11-14 18:16:53,029 INFO L133 ementStrategyFactory]: Using default assertion order modulation [2018-11-14 18:16:53,030 INFO L382 AbstractCegarLoop]: Interprodecural is true [2018-11-14 18:16:53,030 INFO L383 AbstractCegarLoop]: Hoare is true [2018-11-14 18:16:53,030 INFO L384 AbstractCegarLoop]: Compute interpolants for FPandBP [2018-11-14 18:16:53,031 INFO L385 AbstractCegarLoop]: Backedges is STRAIGHT_LINE [2018-11-14 18:16:53,031 INFO L386 AbstractCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2018-11-14 18:16:53,031 INFO L387 AbstractCegarLoop]: Difference is false [2018-11-14 18:16:53,031 INFO L388 AbstractCegarLoop]: Minimize is MINIMIZE_SEVPA [2018-11-14 18:16:53,031 INFO L393 AbstractCegarLoop]: ======== Iteration 0==of CEGAR loop == AllErrorsAtOnce======== [2018-11-14 18:16:53,052 INFO L276 IsEmpty]: Start isEmpty. Operand 96 states. [2018-11-14 18:16:53,059 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 10 [2018-11-14 18:16:53,059 INFO L367 BasicCegarLoop]: Found error trace [2018-11-14 18:16:53,060 INFO L375 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-14 18:16:53,063 INFO L423 AbstractCegarLoop]: === Iteration 1 === [mainErr12ASSERT_VIOLATIONERROR_FUNCTION, mainErr0ASSERT_VIOLATIONERROR_FUNCTION, mainErr7ASSERT_VIOLATIONERROR_FUNCTION, mainErr6ASSERT_VIOLATIONERROR_FUNCTION, mainErr4ASSERT_VIOLATIONERROR_FUNCTION, mainErr8ASSERT_VIOLATIONERROR_FUNCTION, mainErr11ASSERT_VIOLATIONERROR_FUNCTION, mainErr3ASSERT_VIOLATIONERROR_FUNCTION, mainErr9ASSERT_VIOLATIONERROR_FUNCTION, mainErr1ASSERT_VIOLATIONERROR_FUNCTION, mainErr5ASSERT_VIOLATIONERROR_FUNCTION, mainErr10ASSERT_VIOLATIONERROR_FUNCTION, mainErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-14 18:16:53,070 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-14 18:16:53,070 INFO L82 PathProgramCache]: Analyzing trace with hash -551738715, now seen corresponding path program 1 times [2018-11-14 18:16:53,075 INFO L223 ckRefinementStrategy]: Switched to mode CVC4_FPBP [2018-11-14 18:16:53,076 INFO L69 tionRefinementEngine]: Using refinement strategy WolfRefinementStrategy No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/cvc4nyu Starting monitored process 2 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 2 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk [2018-11-14 18:16:53,103 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-14 18:16:53,141 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-14 18:16:53,167 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-14 18:16:53,171 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-14 18:16:53,309 INFO L256 TraceCheckUtils]: 0: Hoare triple {99#true} call ULTIMATE.init(); {99#true} is VALID [2018-11-14 18:16:53,312 INFO L273 TraceCheckUtils]: 1: Hoare triple {99#true} #NULL.base, #NULL.offset := 0bv32, 0bv32;#valid := #valid[0bv32 := 0bv1]; {99#true} is VALID [2018-11-14 18:16:53,313 INFO L273 TraceCheckUtils]: 2: Hoare triple {99#true} assume true; {99#true} is VALID [2018-11-14 18:16:53,313 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {99#true} {99#true} #352#return; {99#true} is VALID [2018-11-14 18:16:53,314 INFO L256 TraceCheckUtils]: 4: Hoare triple {99#true} call #t~ret27 := main(); {99#true} is VALID [2018-11-14 18:16:53,328 INFO L273 TraceCheckUtils]: 5: Hoare triple {99#true} call #t~malloc0.base, #t~malloc0.offset := #Ultimate.alloc(8bv32);~list~0.base, ~list~0.offset := #t~malloc0.base, #t~malloc0.offset;call write~$Pointer$(0bv32, 0bv32, ~list~0.base, ~list~0.offset, 4bv32); {119#(not (= (_ bv0 32) main_~list~0.base))} is VALID [2018-11-14 18:16:53,344 INFO L273 TraceCheckUtils]: 6: Hoare triple {119#(not (= (_ bv0 32) main_~list~0.base))} assume true; {119#(not (= (_ bv0 32) main_~list~0.base))} is VALID [2018-11-14 18:16:53,348 INFO L273 TraceCheckUtils]: 7: Hoare triple {119#(not (= (_ bv0 32) main_~list~0.base))} assume !(~list~0.base != 0bv32 || ~list~0.offset != 0bv32); {100#false} is VALID [2018-11-14 18:16:53,349 INFO L273 TraceCheckUtils]: 8: Hoare triple {100#false} assume !false; {100#false} is VALID [2018-11-14 18:16:53,351 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-14 18:16:53,351 INFO L312 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2018-11-14 18:16:53,355 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-14 18:16:53,355 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-14 18:16:53,362 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 9 [2018-11-14 18:16:53,365 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-14 18:16:53,369 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states. [2018-11-14 18:16:53,445 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 9 edges. 9 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 18:16:53,445 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-14 18:16:53,453 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-14 18:16:53,454 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-14 18:16:53,456 INFO L87 Difference]: Start difference. First operand 96 states. Second operand 3 states. [2018-11-14 18:16:54,368 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 18:16:54,368 INFO L93 Difference]: Finished difference Result 204 states and 320 transitions. [2018-11-14 18:16:54,368 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-14 18:16:54,369 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 9 [2018-11-14 18:16:54,369 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-14 18:16:54,370 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2018-11-14 18:16:54,392 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 320 transitions. [2018-11-14 18:16:54,393 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2018-11-14 18:16:54,402 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 320 transitions. [2018-11-14 18:16:54,402 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 320 transitions. [2018-11-14 18:16:55,182 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 320 edges. 320 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 18:16:55,204 INFO L225 Difference]: With dead ends: 204 [2018-11-14 18:16:55,204 INFO L226 Difference]: Without dead ends: 109 [2018-11-14 18:16:55,208 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 7 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-14 18:16:55,227 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 109 states. [2018-11-14 18:16:55,280 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 109 to 89. [2018-11-14 18:16:55,280 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-14 18:16:55,280 INFO L82 GeneralOperation]: Start isEquivalent. First operand 109 states. Second operand 89 states. [2018-11-14 18:16:55,281 INFO L74 IsIncluded]: Start isIncluded. First operand 109 states. Second operand 89 states. [2018-11-14 18:16:55,281 INFO L87 Difference]: Start difference. First operand 109 states. Second operand 89 states. [2018-11-14 18:16:55,290 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 18:16:55,290 INFO L93 Difference]: Finished difference Result 109 states and 119 transitions. [2018-11-14 18:16:55,291 INFO L276 IsEmpty]: Start isEmpty. Operand 109 states and 119 transitions. [2018-11-14 18:16:55,292 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 18:16:55,292 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 18:16:55,293 INFO L74 IsIncluded]: Start isIncluded. First operand 89 states. Second operand 109 states. [2018-11-14 18:16:55,293 INFO L87 Difference]: Start difference. First operand 89 states. Second operand 109 states. [2018-11-14 18:16:55,301 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 18:16:55,302 INFO L93 Difference]: Finished difference Result 109 states and 119 transitions. [2018-11-14 18:16:55,302 INFO L276 IsEmpty]: Start isEmpty. Operand 109 states and 119 transitions. [2018-11-14 18:16:55,303 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 18:16:55,304 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 18:16:55,304 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-14 18:16:55,304 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-14 18:16:55,304 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 89 states. [2018-11-14 18:16:55,310 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 89 states to 89 states and 98 transitions. [2018-11-14 18:16:55,312 INFO L78 Accepts]: Start accepts. Automaton has 89 states and 98 transitions. Word has length 9 [2018-11-14 18:16:55,312 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-14 18:16:55,312 INFO L480 AbstractCegarLoop]: Abstraction has 89 states and 98 transitions. [2018-11-14 18:16:55,312 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-14 18:16:55,312 INFO L276 IsEmpty]: Start isEmpty. Operand 89 states and 98 transitions. [2018-11-14 18:16:55,313 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 15 [2018-11-14 18:16:55,313 INFO L367 BasicCegarLoop]: Found error trace [2018-11-14 18:16:55,313 INFO L375 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-14 18:16:55,314 INFO L423 AbstractCegarLoop]: === Iteration 2 === [mainErr12ASSERT_VIOLATIONERROR_FUNCTION, mainErr0ASSERT_VIOLATIONERROR_FUNCTION, mainErr7ASSERT_VIOLATIONERROR_FUNCTION, mainErr6ASSERT_VIOLATIONERROR_FUNCTION, mainErr4ASSERT_VIOLATIONERROR_FUNCTION, mainErr8ASSERT_VIOLATIONERROR_FUNCTION, mainErr11ASSERT_VIOLATIONERROR_FUNCTION, mainErr3ASSERT_VIOLATIONERROR_FUNCTION, mainErr9ASSERT_VIOLATIONERROR_FUNCTION, mainErr1ASSERT_VIOLATIONERROR_FUNCTION, mainErr5ASSERT_VIOLATIONERROR_FUNCTION, mainErr10ASSERT_VIOLATIONERROR_FUNCTION, mainErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-14 18:16:55,314 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-14 18:16:55,314 INFO L82 PathProgramCache]: Analyzing trace with hash 173112725, now seen corresponding path program 1 times [2018-11-14 18:16:55,315 INFO L223 ckRefinementStrategy]: Switched to mode CVC4_FPBP [2018-11-14 18:16:55,315 INFO L69 tionRefinementEngine]: Using refinement strategy WolfRefinementStrategy No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/cvc4nyu Starting monitored process 3 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 3 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk [2018-11-14 18:16:55,344 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-14 18:16:55,362 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-14 18:16:55,381 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-14 18:16:55,382 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-14 18:16:55,415 INFO L256 TraceCheckUtils]: 0: Hoare triple {666#true} call ULTIMATE.init(); {666#true} is VALID [2018-11-14 18:16:55,415 INFO L273 TraceCheckUtils]: 1: Hoare triple {666#true} #NULL.base, #NULL.offset := 0bv32, 0bv32;#valid := #valid[0bv32 := 0bv1]; {666#true} is VALID [2018-11-14 18:16:55,416 INFO L273 TraceCheckUtils]: 2: Hoare triple {666#true} assume true; {666#true} is VALID [2018-11-14 18:16:55,416 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {666#true} {666#true} #352#return; {666#true} is VALID [2018-11-14 18:16:55,416 INFO L256 TraceCheckUtils]: 4: Hoare triple {666#true} call #t~ret27 := main(); {666#true} is VALID [2018-11-14 18:16:55,416 INFO L273 TraceCheckUtils]: 5: Hoare triple {666#true} call #t~malloc0.base, #t~malloc0.offset := #Ultimate.alloc(8bv32);~list~0.base, ~list~0.offset := #t~malloc0.base, #t~malloc0.offset;call write~$Pointer$(0bv32, 0bv32, ~list~0.base, ~list~0.offset, 4bv32); {666#true} is VALID [2018-11-14 18:16:55,417 INFO L273 TraceCheckUtils]: 6: Hoare triple {666#true} assume true; {666#true} is VALID [2018-11-14 18:16:55,417 INFO L273 TraceCheckUtils]: 7: Hoare triple {666#true} assume !!(~list~0.base != 0bv32 || ~list~0.offset != 0bv32); {666#true} is VALID [2018-11-14 18:16:55,417 INFO L273 TraceCheckUtils]: 8: Hoare triple {666#true} assume true; {666#true} is VALID [2018-11-14 18:16:55,417 INFO L273 TraceCheckUtils]: 9: Hoare triple {666#true} assume #t~nondet1 != 0bv32;havoc #t~nondet1;call write~$Pointer$(0bv32, 0bv32, ~list~0.base, ~bvadd32(4bv32, ~list~0.offset), 4bv32); {666#true} is VALID [2018-11-14 18:16:55,418 INFO L273 TraceCheckUtils]: 10: Hoare triple {666#true} assume true;call #t~mem5.base, #t~mem5.offset := read~$Pointer$(~list~0.base, ~bvadd32(4bv32, ~list~0.offset), 4bv32);#t~short7 := #t~mem5.base != 0bv32 || #t~mem5.offset != 0bv32; {666#true} is VALID [2018-11-14 18:16:55,418 INFO L273 TraceCheckUtils]: 11: Hoare triple {666#true} assume #t~short7; {704#|main_#t~short7|} is VALID [2018-11-14 18:16:55,422 INFO L273 TraceCheckUtils]: 12: Hoare triple {704#|main_#t~short7|} assume !#t~short7;havoc #t~short7;havoc #t~mem5.base, #t~mem5.offset;havoc #t~mem6.base, #t~mem6.offset; {667#false} is VALID [2018-11-14 18:16:55,422 INFO L273 TraceCheckUtils]: 13: Hoare triple {667#false} assume !false; {667#false} is VALID [2018-11-14 18:16:55,423 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-14 18:16:55,423 INFO L312 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2018-11-14 18:16:55,425 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-14 18:16:55,426 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-14 18:16:55,428 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 14 [2018-11-14 18:16:55,428 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-14 18:16:55,429 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states. [2018-11-14 18:16:55,453 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 14 edges. 14 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 18:16:55,453 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-14 18:16:55,453 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-14 18:16:55,453 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-14 18:16:55,454 INFO L87 Difference]: Start difference. First operand 89 states and 98 transitions. Second operand 3 states. [2018-11-14 18:16:55,801 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 18:16:55,801 INFO L93 Difference]: Finished difference Result 92 states and 101 transitions. [2018-11-14 18:16:55,801 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-14 18:16:55,802 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 14 [2018-11-14 18:16:55,802 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-14 18:16:55,802 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2018-11-14 18:16:55,805 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 101 transitions. [2018-11-14 18:16:55,805 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2018-11-14 18:16:55,808 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 101 transitions. [2018-11-14 18:16:55,808 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 101 transitions. [2018-11-14 18:16:56,044 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 101 edges. 101 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 18:16:56,048 INFO L225 Difference]: With dead ends: 92 [2018-11-14 18:16:56,049 INFO L226 Difference]: Without dead ends: 90 [2018-11-14 18:16:56,050 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 13 GetRequests, 12 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-14 18:16:56,050 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 90 states. [2018-11-14 18:16:56,093 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 90 to 90. [2018-11-14 18:16:56,094 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-14 18:16:56,094 INFO L82 GeneralOperation]: Start isEquivalent. First operand 90 states. Second operand 90 states. [2018-11-14 18:16:56,094 INFO L74 IsIncluded]: Start isIncluded. First operand 90 states. Second operand 90 states. [2018-11-14 18:16:56,094 INFO L87 Difference]: Start difference. First operand 90 states. Second operand 90 states. [2018-11-14 18:16:56,099 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 18:16:56,099 INFO L93 Difference]: Finished difference Result 90 states and 99 transitions. [2018-11-14 18:16:56,100 INFO L276 IsEmpty]: Start isEmpty. Operand 90 states and 99 transitions. [2018-11-14 18:16:56,101 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 18:16:56,101 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 18:16:56,101 INFO L74 IsIncluded]: Start isIncluded. First operand 90 states. Second operand 90 states. [2018-11-14 18:16:56,102 INFO L87 Difference]: Start difference. First operand 90 states. Second operand 90 states. [2018-11-14 18:16:56,106 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 18:16:56,107 INFO L93 Difference]: Finished difference Result 90 states and 99 transitions. [2018-11-14 18:16:56,107 INFO L276 IsEmpty]: Start isEmpty. Operand 90 states and 99 transitions. [2018-11-14 18:16:56,108 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 18:16:56,108 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 18:16:56,108 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-14 18:16:56,109 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-14 18:16:56,109 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 90 states. [2018-11-14 18:16:56,113 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 90 states to 90 states and 99 transitions. [2018-11-14 18:16:56,113 INFO L78 Accepts]: Start accepts. Automaton has 90 states and 99 transitions. Word has length 14 [2018-11-14 18:16:56,114 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-14 18:16:56,114 INFO L480 AbstractCegarLoop]: Abstraction has 90 states and 99 transitions. [2018-11-14 18:16:56,114 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-14 18:16:56,114 INFO L276 IsEmpty]: Start isEmpty. Operand 90 states and 99 transitions. [2018-11-14 18:16:56,115 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 15 [2018-11-14 18:16:56,115 INFO L367 BasicCegarLoop]: Found error trace [2018-11-14 18:16:56,115 INFO L375 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-14 18:16:56,115 INFO L423 AbstractCegarLoop]: === Iteration 3 === [mainErr12ASSERT_VIOLATIONERROR_FUNCTION, mainErr0ASSERT_VIOLATIONERROR_FUNCTION, mainErr7ASSERT_VIOLATIONERROR_FUNCTION, mainErr6ASSERT_VIOLATIONERROR_FUNCTION, mainErr4ASSERT_VIOLATIONERROR_FUNCTION, mainErr8ASSERT_VIOLATIONERROR_FUNCTION, mainErr11ASSERT_VIOLATIONERROR_FUNCTION, mainErr3ASSERT_VIOLATIONERROR_FUNCTION, mainErr9ASSERT_VIOLATIONERROR_FUNCTION, mainErr1ASSERT_VIOLATIONERROR_FUNCTION, mainErr5ASSERT_VIOLATIONERROR_FUNCTION, mainErr10ASSERT_VIOLATIONERROR_FUNCTION, mainErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-14 18:16:56,116 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-14 18:16:56,116 INFO L82 PathProgramCache]: Analyzing trace with hash 173114647, now seen corresponding path program 1 times [2018-11-14 18:16:56,117 INFO L223 ckRefinementStrategy]: Switched to mode CVC4_FPBP [2018-11-14 18:16:56,117 INFO L69 tionRefinementEngine]: Using refinement strategy WolfRefinementStrategy No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/cvc4nyu Starting monitored process 4 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 4 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk [2018-11-14 18:16:56,149 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-14 18:16:56,184 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-14 18:16:56,211 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-14 18:16:56,212 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-14 18:16:56,370 INFO L256 TraceCheckUtils]: 0: Hoare triple {1092#true} call ULTIMATE.init(); {1092#true} is VALID [2018-11-14 18:16:56,371 INFO L273 TraceCheckUtils]: 1: Hoare triple {1092#true} #NULL.base, #NULL.offset := 0bv32, 0bv32;#valid := #valid[0bv32 := 0bv1]; {1092#true} is VALID [2018-11-14 18:16:56,371 INFO L273 TraceCheckUtils]: 2: Hoare triple {1092#true} assume true; {1092#true} is VALID [2018-11-14 18:16:56,371 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {1092#true} {1092#true} #352#return; {1092#true} is VALID [2018-11-14 18:16:56,372 INFO L256 TraceCheckUtils]: 4: Hoare triple {1092#true} call #t~ret27 := main(); {1092#true} is VALID [2018-11-14 18:16:56,372 INFO L273 TraceCheckUtils]: 5: Hoare triple {1092#true} call #t~malloc0.base, #t~malloc0.offset := #Ultimate.alloc(8bv32);~list~0.base, ~list~0.offset := #t~malloc0.base, #t~malloc0.offset;call write~$Pointer$(0bv32, 0bv32, ~list~0.base, ~list~0.offset, 4bv32); {1092#true} is VALID [2018-11-14 18:16:56,373 INFO L273 TraceCheckUtils]: 6: Hoare triple {1092#true} assume true; {1092#true} is VALID [2018-11-14 18:16:56,373 INFO L273 TraceCheckUtils]: 7: Hoare triple {1092#true} assume !!(~list~0.base != 0bv32 || ~list~0.offset != 0bv32); {1092#true} is VALID [2018-11-14 18:16:56,374 INFO L273 TraceCheckUtils]: 8: Hoare triple {1092#true} assume true; {1092#true} is VALID [2018-11-14 18:16:56,374 INFO L273 TraceCheckUtils]: 9: Hoare triple {1092#true} assume #t~nondet1 != 0bv32;havoc #t~nondet1;call write~$Pointer$(0bv32, 0bv32, ~list~0.base, ~bvadd32(4bv32, ~list~0.offset), 4bv32); {1092#true} is VALID [2018-11-14 18:16:56,375 INFO L273 TraceCheckUtils]: 10: Hoare triple {1092#true} assume true;call #t~mem5.base, #t~mem5.offset := read~$Pointer$(~list~0.base, ~bvadd32(4bv32, ~list~0.offset), 4bv32);#t~short7 := #t~mem5.base != 0bv32 || #t~mem5.offset != 0bv32; {1127#(or (and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (not |main_#t~short7|)) (and |main_#t~short7| (or (not (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32))) (not (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32))))))} is VALID [2018-11-14 18:16:56,378 INFO L273 TraceCheckUtils]: 11: Hoare triple {1127#(or (and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (not |main_#t~short7|)) (and |main_#t~short7| (or (not (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32))) (not (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32))))))} assume !#t~short7;call #t~mem6.base, #t~mem6.offset := read~$Pointer$(~list~0.base, ~bvadd32(4bv32, ~list~0.offset), 4bv32);#t~short7 := #t~mem6.base == 0bv32 && #t~mem6.offset == 0bv32; {1131#|main_#t~short7|} is VALID [2018-11-14 18:16:56,379 INFO L273 TraceCheckUtils]: 12: Hoare triple {1131#|main_#t~short7|} assume !#t~short7;havoc #t~short7;havoc #t~mem5.base, #t~mem5.offset;havoc #t~mem6.base, #t~mem6.offset; {1093#false} is VALID [2018-11-14 18:16:56,379 INFO L273 TraceCheckUtils]: 13: Hoare triple {1093#false} assume !false; {1093#false} is VALID [2018-11-14 18:16:56,384 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-14 18:16:56,384 INFO L312 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2018-11-14 18:16:56,386 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-14 18:16:56,386 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-14 18:16:56,386 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 14 [2018-11-14 18:16:56,386 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-14 18:16:56,387 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-14 18:16:56,413 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 14 edges. 14 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 18:16:56,414 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-14 18:16:56,414 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-14 18:16:56,414 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-14 18:16:56,415 INFO L87 Difference]: Start difference. First operand 90 states and 99 transitions. Second operand 4 states. [2018-11-14 18:16:57,411 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 18:16:57,411 INFO L93 Difference]: Finished difference Result 90 states and 99 transitions. [2018-11-14 18:16:57,411 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2018-11-14 18:16:57,411 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 14 [2018-11-14 18:16:57,412 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-14 18:16:57,412 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-14 18:16:57,414 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 99 transitions. [2018-11-14 18:16:57,414 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-14 18:16:57,416 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 99 transitions. [2018-11-14 18:16:57,416 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states and 99 transitions. [2018-11-14 18:16:57,575 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 99 edges. 99 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 18:16:57,578 INFO L225 Difference]: With dead ends: 90 [2018-11-14 18:16:57,578 INFO L226 Difference]: Without dead ends: 88 [2018-11-14 18:16:57,579 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 14 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-14 18:16:57,579 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 88 states. [2018-11-14 18:16:57,607 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 88 to 87. [2018-11-14 18:16:57,607 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-14 18:16:57,608 INFO L82 GeneralOperation]: Start isEquivalent. First operand 88 states. Second operand 87 states. [2018-11-14 18:16:57,608 INFO L74 IsIncluded]: Start isIncluded. First operand 88 states. Second operand 87 states. [2018-11-14 18:16:57,608 INFO L87 Difference]: Start difference. First operand 88 states. Second operand 87 states. [2018-11-14 18:16:57,612 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 18:16:57,612 INFO L93 Difference]: Finished difference Result 88 states and 97 transitions. [2018-11-14 18:16:57,612 INFO L276 IsEmpty]: Start isEmpty. Operand 88 states and 97 transitions. [2018-11-14 18:16:57,614 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 18:16:57,614 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 18:16:57,614 INFO L74 IsIncluded]: Start isIncluded. First operand 87 states. Second operand 88 states. [2018-11-14 18:16:57,614 INFO L87 Difference]: Start difference. First operand 87 states. Second operand 88 states. [2018-11-14 18:16:57,618 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 18:16:57,618 INFO L93 Difference]: Finished difference Result 88 states and 97 transitions. [2018-11-14 18:16:57,618 INFO L276 IsEmpty]: Start isEmpty. Operand 88 states and 97 transitions. [2018-11-14 18:16:57,620 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 18:16:57,620 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 18:16:57,621 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-14 18:16:57,621 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-14 18:16:57,621 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 87 states. [2018-11-14 18:16:57,624 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 87 states to 87 states and 96 transitions. [2018-11-14 18:16:57,624 INFO L78 Accepts]: Start accepts. Automaton has 87 states and 96 transitions. Word has length 14 [2018-11-14 18:16:57,624 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-14 18:16:57,625 INFO L480 AbstractCegarLoop]: Abstraction has 87 states and 96 transitions. [2018-11-14 18:16:57,625 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-14 18:16:57,625 INFO L276 IsEmpty]: Start isEmpty. Operand 87 states and 96 transitions. [2018-11-14 18:16:57,625 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2018-11-14 18:16:57,626 INFO L367 BasicCegarLoop]: Found error trace [2018-11-14 18:16:57,626 INFO L375 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-14 18:16:57,626 INFO L423 AbstractCegarLoop]: === Iteration 4 === [mainErr12ASSERT_VIOLATIONERROR_FUNCTION, mainErr0ASSERT_VIOLATIONERROR_FUNCTION, mainErr7ASSERT_VIOLATIONERROR_FUNCTION, mainErr6ASSERT_VIOLATIONERROR_FUNCTION, mainErr4ASSERT_VIOLATIONERROR_FUNCTION, mainErr8ASSERT_VIOLATIONERROR_FUNCTION, mainErr11ASSERT_VIOLATIONERROR_FUNCTION, mainErr3ASSERT_VIOLATIONERROR_FUNCTION, mainErr9ASSERT_VIOLATIONERROR_FUNCTION, mainErr1ASSERT_VIOLATIONERROR_FUNCTION, mainErr5ASSERT_VIOLATIONERROR_FUNCTION, mainErr10ASSERT_VIOLATIONERROR_FUNCTION, mainErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-14 18:16:57,627 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-14 18:16:57,627 INFO L82 PathProgramCache]: Analyzing trace with hash -272256831, now seen corresponding path program 1 times [2018-11-14 18:16:57,627 INFO L223 ckRefinementStrategy]: Switched to mode CVC4_FPBP [2018-11-14 18:16:57,628 INFO L69 tionRefinementEngine]: Using refinement strategy WolfRefinementStrategy No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/cvc4nyu Starting monitored process 5 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 5 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk [2018-11-14 18:16:57,650 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-14 18:16:57,681 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-14 18:16:57,712 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-14 18:16:57,713 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-14 18:16:57,858 INFO L256 TraceCheckUtils]: 0: Hoare triple {1512#true} call ULTIMATE.init(); {1512#true} is VALID [2018-11-14 18:16:57,858 INFO L273 TraceCheckUtils]: 1: Hoare triple {1512#true} #NULL.base, #NULL.offset := 0bv32, 0bv32;#valid := #valid[0bv32 := 0bv1]; {1512#true} is VALID [2018-11-14 18:16:57,858 INFO L273 TraceCheckUtils]: 2: Hoare triple {1512#true} assume true; {1512#true} is VALID [2018-11-14 18:16:57,859 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {1512#true} {1512#true} #352#return; {1512#true} is VALID [2018-11-14 18:16:57,859 INFO L256 TraceCheckUtils]: 4: Hoare triple {1512#true} call #t~ret27 := main(); {1512#true} is VALID [2018-11-14 18:16:57,859 INFO L273 TraceCheckUtils]: 5: Hoare triple {1512#true} call #t~malloc0.base, #t~malloc0.offset := #Ultimate.alloc(8bv32);~list~0.base, ~list~0.offset := #t~malloc0.base, #t~malloc0.offset;call write~$Pointer$(0bv32, 0bv32, ~list~0.base, ~list~0.offset, 4bv32); {1512#true} is VALID [2018-11-14 18:16:57,860 INFO L273 TraceCheckUtils]: 6: Hoare triple {1512#true} assume true; {1512#true} is VALID [2018-11-14 18:16:57,860 INFO L273 TraceCheckUtils]: 7: Hoare triple {1512#true} assume !!(~list~0.base != 0bv32 || ~list~0.offset != 0bv32); {1512#true} is VALID [2018-11-14 18:16:57,860 INFO L273 TraceCheckUtils]: 8: Hoare triple {1512#true} assume true; {1512#true} is VALID [2018-11-14 18:16:57,860 INFO L273 TraceCheckUtils]: 9: Hoare triple {1512#true} assume #t~nondet1 != 0bv32;havoc #t~nondet1;call write~$Pointer$(0bv32, 0bv32, ~list~0.base, ~bvadd32(4bv32, ~list~0.offset), 4bv32); {1512#true} is VALID [2018-11-14 18:16:57,861 INFO L273 TraceCheckUtils]: 10: Hoare triple {1512#true} assume true;call #t~mem5.base, #t~mem5.offset := read~$Pointer$(~list~0.base, ~bvadd32(4bv32, ~list~0.offset), 4bv32);#t~short7 := #t~mem5.base != 0bv32 || #t~mem5.offset != 0bv32; {1512#true} is VALID [2018-11-14 18:16:57,861 INFO L273 TraceCheckUtils]: 11: Hoare triple {1512#true} assume #t~short7; {1512#true} is VALID [2018-11-14 18:16:57,861 INFO L273 TraceCheckUtils]: 12: Hoare triple {1512#true} assume !!#t~short7;havoc #t~short7;havoc #t~mem5.base, #t~mem5.offset;havoc #t~mem6.base, #t~mem6.offset; {1512#true} is VALID [2018-11-14 18:16:57,862 INFO L273 TraceCheckUtils]: 13: Hoare triple {1512#true} assume true; {1512#true} is VALID [2018-11-14 18:16:57,862 INFO L273 TraceCheckUtils]: 14: Hoare triple {1512#true} ~end~0.base, ~end~0.offset := ~list~0.base, ~list~0.offset; {1512#true} is VALID [2018-11-14 18:16:57,862 INFO L273 TraceCheckUtils]: 15: Hoare triple {1512#true} assume true; {1512#true} is VALID [2018-11-14 18:16:57,870 INFO L273 TraceCheckUtils]: 16: Hoare triple {1512#true} assume !!(#t~nondet8 != 0bv32);havoc #t~nondet8;call #t~malloc9.base, #t~malloc9.offset := #Ultimate.alloc(8bv32);call write~$Pointer$(#t~malloc9.base, #t~malloc9.offset, ~end~0.base, ~end~0.offset, 4bv32);call #t~mem10.base, #t~mem10.offset := read~$Pointer$(~end~0.base, ~end~0.offset, 4bv32);~end~0.base, ~end~0.offset := #t~mem10.base, #t~mem10.offset;havoc #t~mem10.base, #t~mem10.offset;call write~$Pointer$(0bv32, 0bv32, ~end~0.base, ~end~0.offset, 4bv32); {1565#(not (= (_ bv0 32) main_~end~0.base))} is VALID [2018-11-14 18:16:57,877 INFO L273 TraceCheckUtils]: 17: Hoare triple {1565#(not (= (_ bv0 32) main_~end~0.base))} assume true; {1565#(not (= (_ bv0 32) main_~end~0.base))} is VALID [2018-11-14 18:16:57,879 INFO L273 TraceCheckUtils]: 18: Hoare triple {1565#(not (= (_ bv0 32) main_~end~0.base))} assume !(0bv32 != ~end~0.base || 0bv32 != ~end~0.offset); {1513#false} is VALID [2018-11-14 18:16:57,879 INFO L273 TraceCheckUtils]: 19: Hoare triple {1513#false} assume !false; {1513#false} is VALID [2018-11-14 18:16:57,880 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-14 18:16:57,880 INFO L312 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2018-11-14 18:16:57,882 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-14 18:16:57,882 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-14 18:16:57,882 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 20 [2018-11-14 18:16:57,882 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-14 18:16:57,883 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states. [2018-11-14 18:16:57,911 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 20 edges. 20 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 18:16:57,912 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-14 18:16:57,912 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-14 18:16:57,913 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-14 18:16:57,913 INFO L87 Difference]: Start difference. First operand 87 states and 96 transitions. Second operand 3 states. [2018-11-14 18:16:58,288 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 18:16:58,288 INFO L93 Difference]: Finished difference Result 90 states and 100 transitions. [2018-11-14 18:16:58,289 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-14 18:16:58,289 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 20 [2018-11-14 18:16:58,289 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-14 18:16:58,289 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2018-11-14 18:16:58,291 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 100 transitions. [2018-11-14 18:16:58,292 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2018-11-14 18:16:58,293 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 100 transitions. [2018-11-14 18:16:58,294 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 100 transitions. [2018-11-14 18:16:58,409 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 100 edges. 100 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 18:16:58,411 INFO L225 Difference]: With dead ends: 90 [2018-11-14 18:16:58,411 INFO L226 Difference]: Without dead ends: 86 [2018-11-14 18:16:58,412 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 18 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-14 18:16:58,412 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 86 states. [2018-11-14 18:16:58,463 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 86 to 83. [2018-11-14 18:16:58,464 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-14 18:16:58,464 INFO L82 GeneralOperation]: Start isEquivalent. First operand 86 states. Second operand 83 states. [2018-11-14 18:16:58,464 INFO L74 IsIncluded]: Start isIncluded. First operand 86 states. Second operand 83 states. [2018-11-14 18:16:58,464 INFO L87 Difference]: Start difference. First operand 86 states. Second operand 83 states. [2018-11-14 18:16:58,467 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 18:16:58,468 INFO L93 Difference]: Finished difference Result 86 states and 96 transitions. [2018-11-14 18:16:58,468 INFO L276 IsEmpty]: Start isEmpty. Operand 86 states and 96 transitions. [2018-11-14 18:16:58,469 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 18:16:58,469 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 18:16:58,469 INFO L74 IsIncluded]: Start isIncluded. First operand 83 states. Second operand 86 states. [2018-11-14 18:16:58,469 INFO L87 Difference]: Start difference. First operand 83 states. Second operand 86 states. [2018-11-14 18:16:58,472 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 18:16:58,472 INFO L93 Difference]: Finished difference Result 86 states and 96 transitions. [2018-11-14 18:16:58,473 INFO L276 IsEmpty]: Start isEmpty. Operand 86 states and 96 transitions. [2018-11-14 18:16:58,473 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 18:16:58,473 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 18:16:58,474 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-14 18:16:58,474 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-14 18:16:58,474 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 83 states. [2018-11-14 18:16:58,476 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 83 states to 83 states and 92 transitions. [2018-11-14 18:16:58,477 INFO L78 Accepts]: Start accepts. Automaton has 83 states and 92 transitions. Word has length 20 [2018-11-14 18:16:58,477 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-14 18:16:58,477 INFO L480 AbstractCegarLoop]: Abstraction has 83 states and 92 transitions. [2018-11-14 18:16:58,477 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-14 18:16:58,477 INFO L276 IsEmpty]: Start isEmpty. Operand 83 states and 92 transitions. [2018-11-14 18:16:58,478 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 22 [2018-11-14 18:16:58,478 INFO L367 BasicCegarLoop]: Found error trace [2018-11-14 18:16:58,478 INFO L375 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-14 18:16:58,479 INFO L423 AbstractCegarLoop]: === Iteration 5 === [mainErr12ASSERT_VIOLATIONERROR_FUNCTION, mainErr0ASSERT_VIOLATIONERROR_FUNCTION, mainErr7ASSERT_VIOLATIONERROR_FUNCTION, mainErr6ASSERT_VIOLATIONERROR_FUNCTION, mainErr4ASSERT_VIOLATIONERROR_FUNCTION, mainErr8ASSERT_VIOLATIONERROR_FUNCTION, mainErr11ASSERT_VIOLATIONERROR_FUNCTION, mainErr3ASSERT_VIOLATIONERROR_FUNCTION, mainErr9ASSERT_VIOLATIONERROR_FUNCTION, mainErr1ASSERT_VIOLATIONERROR_FUNCTION, mainErr5ASSERT_VIOLATIONERROR_FUNCTION, mainErr10ASSERT_VIOLATIONERROR_FUNCTION, mainErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-14 18:16:58,479 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-14 18:16:58,479 INFO L82 PathProgramCache]: Analyzing trace with hash 150281799, now seen corresponding path program 1 times [2018-11-14 18:16:58,480 INFO L223 ckRefinementStrategy]: Switched to mode CVC4_FPBP [2018-11-14 18:16:58,480 INFO L69 tionRefinementEngine]: Using refinement strategy WolfRefinementStrategy No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/cvc4nyu Starting monitored process 6 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 6 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk [2018-11-14 18:16:58,501 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-14 18:16:58,523 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-14 18:16:58,539 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-14 18:16:58,540 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-14 18:16:58,595 INFO L256 TraceCheckUtils]: 0: Hoare triple {1940#true} call ULTIMATE.init(); {1940#true} is VALID [2018-11-14 18:16:58,596 INFO L273 TraceCheckUtils]: 1: Hoare triple {1940#true} #NULL.base, #NULL.offset := 0bv32, 0bv32;#valid := #valid[0bv32 := 0bv1]; {1940#true} is VALID [2018-11-14 18:16:58,596 INFO L273 TraceCheckUtils]: 2: Hoare triple {1940#true} assume true; {1940#true} is VALID [2018-11-14 18:16:58,596 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {1940#true} {1940#true} #352#return; {1940#true} is VALID [2018-11-14 18:16:58,596 INFO L256 TraceCheckUtils]: 4: Hoare triple {1940#true} call #t~ret27 := main(); {1940#true} is VALID [2018-11-14 18:16:58,598 INFO L273 TraceCheckUtils]: 5: Hoare triple {1940#true} call #t~malloc0.base, #t~malloc0.offset := #Ultimate.alloc(8bv32);~list~0.base, ~list~0.offset := #t~malloc0.base, #t~malloc0.offset;call write~$Pointer$(0bv32, 0bv32, ~list~0.base, ~list~0.offset, 4bv32); {1960#(not (= (_ bv0 32) main_~list~0.base))} is VALID [2018-11-14 18:16:58,604 INFO L273 TraceCheckUtils]: 6: Hoare triple {1960#(not (= (_ bv0 32) main_~list~0.base))} assume true; {1960#(not (= (_ bv0 32) main_~list~0.base))} is VALID [2018-11-14 18:16:58,604 INFO L273 TraceCheckUtils]: 7: Hoare triple {1960#(not (= (_ bv0 32) main_~list~0.base))} assume !!(~list~0.base != 0bv32 || ~list~0.offset != 0bv32); {1960#(not (= (_ bv0 32) main_~list~0.base))} is VALID [2018-11-14 18:16:58,605 INFO L273 TraceCheckUtils]: 8: Hoare triple {1960#(not (= (_ bv0 32) main_~list~0.base))} assume true; {1960#(not (= (_ bv0 32) main_~list~0.base))} is VALID [2018-11-14 18:16:58,605 INFO L273 TraceCheckUtils]: 9: Hoare triple {1960#(not (= (_ bv0 32) main_~list~0.base))} assume #t~nondet1 != 0bv32;havoc #t~nondet1;call write~$Pointer$(0bv32, 0bv32, ~list~0.base, ~bvadd32(4bv32, ~list~0.offset), 4bv32); {1960#(not (= (_ bv0 32) main_~list~0.base))} is VALID [2018-11-14 18:16:58,607 INFO L273 TraceCheckUtils]: 10: Hoare triple {1960#(not (= (_ bv0 32) main_~list~0.base))} assume true;call #t~mem5.base, #t~mem5.offset := read~$Pointer$(~list~0.base, ~bvadd32(4bv32, ~list~0.offset), 4bv32);#t~short7 := #t~mem5.base != 0bv32 || #t~mem5.offset != 0bv32; {1960#(not (= (_ bv0 32) main_~list~0.base))} is VALID [2018-11-14 18:16:58,607 INFO L273 TraceCheckUtils]: 11: Hoare triple {1960#(not (= (_ bv0 32) main_~list~0.base))} assume #t~short7; {1960#(not (= (_ bv0 32) main_~list~0.base))} is VALID [2018-11-14 18:16:58,609 INFO L273 TraceCheckUtils]: 12: Hoare triple {1960#(not (= (_ bv0 32) main_~list~0.base))} assume !!#t~short7;havoc #t~short7;havoc #t~mem5.base, #t~mem5.offset;havoc #t~mem6.base, #t~mem6.offset; {1960#(not (= (_ bv0 32) main_~list~0.base))} is VALID [2018-11-14 18:16:58,609 INFO L273 TraceCheckUtils]: 13: Hoare triple {1960#(not (= (_ bv0 32) main_~list~0.base))} assume true; {1960#(not (= (_ bv0 32) main_~list~0.base))} is VALID [2018-11-14 18:16:58,610 INFO L273 TraceCheckUtils]: 14: Hoare triple {1960#(not (= (_ bv0 32) main_~list~0.base))} ~end~0.base, ~end~0.offset := ~list~0.base, ~list~0.offset; {1960#(not (= (_ bv0 32) main_~list~0.base))} is VALID [2018-11-14 18:16:58,611 INFO L273 TraceCheckUtils]: 15: Hoare triple {1960#(not (= (_ bv0 32) main_~list~0.base))} assume true; {1960#(not (= (_ bv0 32) main_~list~0.base))} is VALID [2018-11-14 18:16:58,611 INFO L273 TraceCheckUtils]: 16: Hoare triple {1960#(not (= (_ bv0 32) main_~list~0.base))} assume !(#t~nondet8 != 0bv32);havoc #t~nondet8; {1960#(not (= (_ bv0 32) main_~list~0.base))} is VALID [2018-11-14 18:16:58,613 INFO L273 TraceCheckUtils]: 17: Hoare triple {1960#(not (= (_ bv0 32) main_~list~0.base))} ~end~0.base, ~end~0.offset := 0bv32, 0bv32;~end~0.base, ~end~0.offset := ~list~0.base, ~list~0.offset; {1997#(not (= (_ bv0 32) main_~end~0.base))} is VALID [2018-11-14 18:16:58,614 INFO L273 TraceCheckUtils]: 18: Hoare triple {1997#(not (= (_ bv0 32) main_~end~0.base))} assume true; {1997#(not (= (_ bv0 32) main_~end~0.base))} is VALID [2018-11-14 18:16:58,614 INFO L273 TraceCheckUtils]: 19: Hoare triple {1997#(not (= (_ bv0 32) main_~end~0.base))} assume !(0bv32 != ~end~0.base || 0bv32 != ~end~0.offset); {1941#false} is VALID [2018-11-14 18:16:58,615 INFO L273 TraceCheckUtils]: 20: Hoare triple {1941#false} assume !false; {1941#false} is VALID [2018-11-14 18:16:58,617 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-14 18:16:58,617 INFO L312 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2018-11-14 18:16:58,619 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-14 18:16:58,620 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-14 18:16:58,620 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 21 [2018-11-14 18:16:58,620 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-14 18:16:58,620 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-14 18:16:58,655 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 21 edges. 21 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 18:16:58,655 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-14 18:16:58,656 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-14 18:16:58,656 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-14 18:16:58,656 INFO L87 Difference]: Start difference. First operand 83 states and 92 transitions. Second operand 4 states. [2018-11-14 18:16:59,257 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 18:16:59,258 INFO L93 Difference]: Finished difference Result 150 states and 164 transitions. [2018-11-14 18:16:59,258 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-14 18:16:59,258 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 21 [2018-11-14 18:16:59,258 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-14 18:16:59,259 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-14 18:16:59,261 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 164 transitions. [2018-11-14 18:16:59,262 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-14 18:16:59,264 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 164 transitions. [2018-11-14 18:16:59,265 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 164 transitions. [2018-11-14 18:16:59,544 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 164 edges. 164 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 18:16:59,547 INFO L225 Difference]: With dead ends: 150 [2018-11-14 18:16:59,548 INFO L226 Difference]: Without dead ends: 128 [2018-11-14 18:16:59,548 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 21 GetRequests, 18 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-14 18:16:59,549 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 128 states. [2018-11-14 18:16:59,583 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 128 to 83. [2018-11-14 18:16:59,584 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-14 18:16:59,584 INFO L82 GeneralOperation]: Start isEquivalent. First operand 128 states. Second operand 83 states. [2018-11-14 18:16:59,584 INFO L74 IsIncluded]: Start isIncluded. First operand 128 states. Second operand 83 states. [2018-11-14 18:16:59,584 INFO L87 Difference]: Start difference. First operand 128 states. Second operand 83 states. [2018-11-14 18:16:59,588 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 18:16:59,588 INFO L93 Difference]: Finished difference Result 128 states and 140 transitions. [2018-11-14 18:16:59,588 INFO L276 IsEmpty]: Start isEmpty. Operand 128 states and 140 transitions. [2018-11-14 18:16:59,589 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 18:16:59,589 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 18:16:59,589 INFO L74 IsIncluded]: Start isIncluded. First operand 83 states. Second operand 128 states. [2018-11-14 18:16:59,589 INFO L87 Difference]: Start difference. First operand 83 states. Second operand 128 states. [2018-11-14 18:16:59,593 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 18:16:59,594 INFO L93 Difference]: Finished difference Result 128 states and 140 transitions. [2018-11-14 18:16:59,594 INFO L276 IsEmpty]: Start isEmpty. Operand 128 states and 140 transitions. [2018-11-14 18:16:59,594 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 18:16:59,594 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 18:16:59,595 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-14 18:16:59,595 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-14 18:16:59,595 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 83 states. [2018-11-14 18:16:59,597 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 83 states to 83 states and 92 transitions. [2018-11-14 18:16:59,597 INFO L78 Accepts]: Start accepts. Automaton has 83 states and 92 transitions. Word has length 21 [2018-11-14 18:16:59,597 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-14 18:16:59,598 INFO L480 AbstractCegarLoop]: Abstraction has 83 states and 92 transitions. [2018-11-14 18:16:59,598 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-14 18:16:59,598 INFO L276 IsEmpty]: Start isEmpty. Operand 83 states and 92 transitions. [2018-11-14 18:16:59,598 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 29 [2018-11-14 18:16:59,598 INFO L367 BasicCegarLoop]: Found error trace [2018-11-14 18:16:59,598 INFO L375 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-14 18:16:59,599 INFO L423 AbstractCegarLoop]: === Iteration 6 === [mainErr12ASSERT_VIOLATIONERROR_FUNCTION, mainErr0ASSERT_VIOLATIONERROR_FUNCTION, mainErr7ASSERT_VIOLATIONERROR_FUNCTION, mainErr6ASSERT_VIOLATIONERROR_FUNCTION, mainErr4ASSERT_VIOLATIONERROR_FUNCTION, mainErr8ASSERT_VIOLATIONERROR_FUNCTION, mainErr11ASSERT_VIOLATIONERROR_FUNCTION, mainErr3ASSERT_VIOLATIONERROR_FUNCTION, mainErr9ASSERT_VIOLATIONERROR_FUNCTION, mainErr1ASSERT_VIOLATIONERROR_FUNCTION, mainErr5ASSERT_VIOLATIONERROR_FUNCTION, mainErr10ASSERT_VIOLATIONERROR_FUNCTION, mainErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-14 18:16:59,599 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-14 18:16:59,599 INFO L82 PathProgramCache]: Analyzing trace with hash 1963425687, now seen corresponding path program 1 times [2018-11-14 18:16:59,600 INFO L223 ckRefinementStrategy]: Switched to mode CVC4_FPBP [2018-11-14 18:16:59,600 INFO L69 tionRefinementEngine]: Using refinement strategy WolfRefinementStrategy No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/cvc4nyu Starting monitored process 7 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 7 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk [2018-11-14 18:16:59,616 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-14 18:16:59,646 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-14 18:16:59,675 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-14 18:16:59,676 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-14 18:16:59,724 INFO L256 TraceCheckUtils]: 0: Hoare triple {2520#true} call ULTIMATE.init(); {2520#true} is VALID [2018-11-14 18:16:59,725 INFO L273 TraceCheckUtils]: 1: Hoare triple {2520#true} #NULL.base, #NULL.offset := 0bv32, 0bv32;#valid := #valid[0bv32 := 0bv1]; {2520#true} is VALID [2018-11-14 18:16:59,725 INFO L273 TraceCheckUtils]: 2: Hoare triple {2520#true} assume true; {2520#true} is VALID [2018-11-14 18:16:59,725 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {2520#true} {2520#true} #352#return; {2520#true} is VALID [2018-11-14 18:16:59,726 INFO L256 TraceCheckUtils]: 4: Hoare triple {2520#true} call #t~ret27 := main(); {2520#true} is VALID [2018-11-14 18:16:59,726 INFO L273 TraceCheckUtils]: 5: Hoare triple {2520#true} call #t~malloc0.base, #t~malloc0.offset := #Ultimate.alloc(8bv32);~list~0.base, ~list~0.offset := #t~malloc0.base, #t~malloc0.offset;call write~$Pointer$(0bv32, 0bv32, ~list~0.base, ~list~0.offset, 4bv32); {2520#true} is VALID [2018-11-14 18:16:59,727 INFO L273 TraceCheckUtils]: 6: Hoare triple {2520#true} assume true; {2520#true} is VALID [2018-11-14 18:16:59,727 INFO L273 TraceCheckUtils]: 7: Hoare triple {2520#true} assume !!(~list~0.base != 0bv32 || ~list~0.offset != 0bv32); {2520#true} is VALID [2018-11-14 18:16:59,727 INFO L273 TraceCheckUtils]: 8: Hoare triple {2520#true} assume true; {2520#true} is VALID [2018-11-14 18:16:59,728 INFO L273 TraceCheckUtils]: 9: Hoare triple {2520#true} assume #t~nondet1 != 0bv32;havoc #t~nondet1;call write~$Pointer$(0bv32, 0bv32, ~list~0.base, ~bvadd32(4bv32, ~list~0.offset), 4bv32); {2520#true} is VALID [2018-11-14 18:16:59,728 INFO L273 TraceCheckUtils]: 10: Hoare triple {2520#true} assume true;call #t~mem5.base, #t~mem5.offset := read~$Pointer$(~list~0.base, ~bvadd32(4bv32, ~list~0.offset), 4bv32);#t~short7 := #t~mem5.base != 0bv32 || #t~mem5.offset != 0bv32; {2520#true} is VALID [2018-11-14 18:16:59,729 INFO L273 TraceCheckUtils]: 11: Hoare triple {2520#true} assume #t~short7; {2520#true} is VALID [2018-11-14 18:16:59,729 INFO L273 TraceCheckUtils]: 12: Hoare triple {2520#true} assume !!#t~short7;havoc #t~short7;havoc #t~mem5.base, #t~mem5.offset;havoc #t~mem6.base, #t~mem6.offset; {2520#true} is VALID [2018-11-14 18:16:59,729 INFO L273 TraceCheckUtils]: 13: Hoare triple {2520#true} assume true; {2520#true} is VALID [2018-11-14 18:16:59,730 INFO L273 TraceCheckUtils]: 14: Hoare triple {2520#true} ~end~0.base, ~end~0.offset := ~list~0.base, ~list~0.offset; {2520#true} is VALID [2018-11-14 18:16:59,730 INFO L273 TraceCheckUtils]: 15: Hoare triple {2520#true} assume true; {2520#true} is VALID [2018-11-14 18:16:59,730 INFO L273 TraceCheckUtils]: 16: Hoare triple {2520#true} assume !!(#t~nondet8 != 0bv32);havoc #t~nondet8;call #t~malloc9.base, #t~malloc9.offset := #Ultimate.alloc(8bv32);call write~$Pointer$(#t~malloc9.base, #t~malloc9.offset, ~end~0.base, ~end~0.offset, 4bv32);call #t~mem10.base, #t~mem10.offset := read~$Pointer$(~end~0.base, ~end~0.offset, 4bv32);~end~0.base, ~end~0.offset := #t~mem10.base, #t~mem10.offset;havoc #t~mem10.base, #t~mem10.offset;call write~$Pointer$(0bv32, 0bv32, ~end~0.base, ~end~0.offset, 4bv32); {2520#true} is VALID [2018-11-14 18:16:59,731 INFO L273 TraceCheckUtils]: 17: Hoare triple {2520#true} assume true; {2520#true} is VALID [2018-11-14 18:16:59,731 INFO L273 TraceCheckUtils]: 18: Hoare triple {2520#true} assume !!(0bv32 != ~end~0.base || 0bv32 != ~end~0.offset); {2520#true} is VALID [2018-11-14 18:16:59,731 INFO L273 TraceCheckUtils]: 19: Hoare triple {2520#true} assume true; {2520#true} is VALID [2018-11-14 18:16:59,732 INFO L273 TraceCheckUtils]: 20: Hoare triple {2520#true} assume true; {2520#true} is VALID [2018-11-14 18:16:59,732 INFO L273 TraceCheckUtils]: 21: Hoare triple {2520#true} assume !!(~end~0.base != 0bv32 || ~end~0.offset != 0bv32); {2520#true} is VALID [2018-11-14 18:16:59,732 INFO L273 TraceCheckUtils]: 22: Hoare triple {2520#true} assume true; {2520#true} is VALID [2018-11-14 18:16:59,733 INFO L273 TraceCheckUtils]: 23: Hoare triple {2520#true} assume #t~nondet11 != 0bv32;havoc #t~nondet11;call write~$Pointer$(0bv32, 0bv32, ~end~0.base, ~bvadd32(4bv32, ~end~0.offset), 4bv32); {2520#true} is VALID [2018-11-14 18:16:59,733 INFO L273 TraceCheckUtils]: 24: Hoare triple {2520#true} assume true;call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~end~0.base, ~bvadd32(4bv32, ~end~0.offset), 4bv32);#t~short17 := #t~mem15.base != 0bv32 || #t~mem15.offset != 0bv32; {2520#true} is VALID [2018-11-14 18:16:59,748 INFO L273 TraceCheckUtils]: 25: Hoare triple {2520#true} assume #t~short17; {2600#|main_#t~short17|} is VALID [2018-11-14 18:16:59,749 INFO L273 TraceCheckUtils]: 26: Hoare triple {2600#|main_#t~short17|} assume !#t~short17;havoc #t~mem15.base, #t~mem15.offset;havoc #t~mem16.base, #t~mem16.offset;havoc #t~short17; {2521#false} is VALID [2018-11-14 18:16:59,749 INFO L273 TraceCheckUtils]: 27: Hoare triple {2521#false} assume !false; {2521#false} is VALID [2018-11-14 18:16:59,750 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-14 18:16:59,751 INFO L312 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2018-11-14 18:16:59,755 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-14 18:16:59,755 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-14 18:16:59,756 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 28 [2018-11-14 18:16:59,756 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-14 18:16:59,756 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states. [2018-11-14 18:16:59,789 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 28 edges. 28 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 18:16:59,789 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-14 18:16:59,790 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-14 18:16:59,790 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-14 18:16:59,790 INFO L87 Difference]: Start difference. First operand 83 states and 92 transitions. Second operand 3 states. [2018-11-14 18:17:00,230 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 18:17:00,231 INFO L93 Difference]: Finished difference Result 86 states and 95 transitions. [2018-11-14 18:17:00,231 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-14 18:17:00,231 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 28 [2018-11-14 18:17:00,232 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-14 18:17:00,232 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2018-11-14 18:17:00,234 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 93 transitions. [2018-11-14 18:17:00,234 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2018-11-14 18:17:00,236 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 93 transitions. [2018-11-14 18:17:00,236 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 93 transitions. [2018-11-14 18:17:00,408 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 93 edges. 93 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 18:17:00,410 INFO L225 Difference]: With dead ends: 86 [2018-11-14 18:17:00,410 INFO L226 Difference]: Without dead ends: 84 [2018-11-14 18:17:00,410 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 27 GetRequests, 26 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-14 18:17:00,411 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 84 states. [2018-11-14 18:17:00,430 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 84 to 84. [2018-11-14 18:17:00,430 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-14 18:17:00,430 INFO L82 GeneralOperation]: Start isEquivalent. First operand 84 states. Second operand 84 states. [2018-11-14 18:17:00,431 INFO L74 IsIncluded]: Start isIncluded. First operand 84 states. Second operand 84 states. [2018-11-14 18:17:00,431 INFO L87 Difference]: Start difference. First operand 84 states. Second operand 84 states. [2018-11-14 18:17:00,434 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 18:17:00,434 INFO L93 Difference]: Finished difference Result 84 states and 93 transitions. [2018-11-14 18:17:00,434 INFO L276 IsEmpty]: Start isEmpty. Operand 84 states and 93 transitions. [2018-11-14 18:17:00,434 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 18:17:00,434 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 18:17:00,434 INFO L74 IsIncluded]: Start isIncluded. First operand 84 states. Second operand 84 states. [2018-11-14 18:17:00,435 INFO L87 Difference]: Start difference. First operand 84 states. Second operand 84 states. [2018-11-14 18:17:00,437 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 18:17:00,437 INFO L93 Difference]: Finished difference Result 84 states and 93 transitions. [2018-11-14 18:17:00,438 INFO L276 IsEmpty]: Start isEmpty. Operand 84 states and 93 transitions. [2018-11-14 18:17:00,438 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 18:17:00,438 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 18:17:00,438 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-14 18:17:00,438 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-14 18:17:00,439 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 84 states. [2018-11-14 18:17:00,441 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 84 states to 84 states and 93 transitions. [2018-11-14 18:17:00,442 INFO L78 Accepts]: Start accepts. Automaton has 84 states and 93 transitions. Word has length 28 [2018-11-14 18:17:00,442 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-14 18:17:00,442 INFO L480 AbstractCegarLoop]: Abstraction has 84 states and 93 transitions. [2018-11-14 18:17:00,442 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-14 18:17:00,442 INFO L276 IsEmpty]: Start isEmpty. Operand 84 states and 93 transitions. [2018-11-14 18:17:00,443 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 29 [2018-11-14 18:17:00,443 INFO L367 BasicCegarLoop]: Found error trace [2018-11-14 18:17:00,443 INFO L375 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-14 18:17:00,444 INFO L423 AbstractCegarLoop]: === Iteration 7 === [mainErr12ASSERT_VIOLATIONERROR_FUNCTION, mainErr0ASSERT_VIOLATIONERROR_FUNCTION, mainErr7ASSERT_VIOLATIONERROR_FUNCTION, mainErr6ASSERT_VIOLATIONERROR_FUNCTION, mainErr4ASSERT_VIOLATIONERROR_FUNCTION, mainErr8ASSERT_VIOLATIONERROR_FUNCTION, mainErr11ASSERT_VIOLATIONERROR_FUNCTION, mainErr3ASSERT_VIOLATIONERROR_FUNCTION, mainErr9ASSERT_VIOLATIONERROR_FUNCTION, mainErr1ASSERT_VIOLATIONERROR_FUNCTION, mainErr5ASSERT_VIOLATIONERROR_FUNCTION, mainErr10ASSERT_VIOLATIONERROR_FUNCTION, mainErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-14 18:17:00,444 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-14 18:17:00,444 INFO L82 PathProgramCache]: Analyzing trace with hash 1963427609, now seen corresponding path program 1 times [2018-11-14 18:17:00,445 INFO L223 ckRefinementStrategy]: Switched to mode CVC4_FPBP [2018-11-14 18:17:00,445 INFO L69 tionRefinementEngine]: Using refinement strategy WolfRefinementStrategy No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/cvc4nyu Starting monitored process 8 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 8 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk [2018-11-14 18:17:00,495 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-14 18:17:00,541 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-14 18:17:00,570 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-14 18:17:00,571 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-14 18:17:00,729 INFO L256 TraceCheckUtils]: 0: Hoare triple {2964#true} call ULTIMATE.init(); {2964#true} is VALID [2018-11-14 18:17:00,730 INFO L273 TraceCheckUtils]: 1: Hoare triple {2964#true} #NULL.base, #NULL.offset := 0bv32, 0bv32;#valid := #valid[0bv32 := 0bv1]; {2964#true} is VALID [2018-11-14 18:17:00,730 INFO L273 TraceCheckUtils]: 2: Hoare triple {2964#true} assume true; {2964#true} is VALID [2018-11-14 18:17:00,730 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {2964#true} {2964#true} #352#return; {2964#true} is VALID [2018-11-14 18:17:00,730 INFO L256 TraceCheckUtils]: 4: Hoare triple {2964#true} call #t~ret27 := main(); {2964#true} is VALID [2018-11-14 18:17:00,730 INFO L273 TraceCheckUtils]: 5: Hoare triple {2964#true} call #t~malloc0.base, #t~malloc0.offset := #Ultimate.alloc(8bv32);~list~0.base, ~list~0.offset := #t~malloc0.base, #t~malloc0.offset;call write~$Pointer$(0bv32, 0bv32, ~list~0.base, ~list~0.offset, 4bv32); {2964#true} is VALID [2018-11-14 18:17:00,731 INFO L273 TraceCheckUtils]: 6: Hoare triple {2964#true} assume true; {2964#true} is VALID [2018-11-14 18:17:00,731 INFO L273 TraceCheckUtils]: 7: Hoare triple {2964#true} assume !!(~list~0.base != 0bv32 || ~list~0.offset != 0bv32); {2964#true} is VALID [2018-11-14 18:17:00,731 INFO L273 TraceCheckUtils]: 8: Hoare triple {2964#true} assume true; {2964#true} is VALID [2018-11-14 18:17:00,731 INFO L273 TraceCheckUtils]: 9: Hoare triple {2964#true} assume #t~nondet1 != 0bv32;havoc #t~nondet1;call write~$Pointer$(0bv32, 0bv32, ~list~0.base, ~bvadd32(4bv32, ~list~0.offset), 4bv32); {2964#true} is VALID [2018-11-14 18:17:00,731 INFO L273 TraceCheckUtils]: 10: Hoare triple {2964#true} assume true;call #t~mem5.base, #t~mem5.offset := read~$Pointer$(~list~0.base, ~bvadd32(4bv32, ~list~0.offset), 4bv32);#t~short7 := #t~mem5.base != 0bv32 || #t~mem5.offset != 0bv32; {2964#true} is VALID [2018-11-14 18:17:00,732 INFO L273 TraceCheckUtils]: 11: Hoare triple {2964#true} assume #t~short7; {2964#true} is VALID [2018-11-14 18:17:00,732 INFO L273 TraceCheckUtils]: 12: Hoare triple {2964#true} assume !!#t~short7;havoc #t~short7;havoc #t~mem5.base, #t~mem5.offset;havoc #t~mem6.base, #t~mem6.offset; {2964#true} is VALID [2018-11-14 18:17:00,732 INFO L273 TraceCheckUtils]: 13: Hoare triple {2964#true} assume true; {2964#true} is VALID [2018-11-14 18:17:00,732 INFO L273 TraceCheckUtils]: 14: Hoare triple {2964#true} ~end~0.base, ~end~0.offset := ~list~0.base, ~list~0.offset; {2964#true} is VALID [2018-11-14 18:17:00,732 INFO L273 TraceCheckUtils]: 15: Hoare triple {2964#true} assume true; {2964#true} is VALID [2018-11-14 18:17:00,733 INFO L273 TraceCheckUtils]: 16: Hoare triple {2964#true} assume !!(#t~nondet8 != 0bv32);havoc #t~nondet8;call #t~malloc9.base, #t~malloc9.offset := #Ultimate.alloc(8bv32);call write~$Pointer$(#t~malloc9.base, #t~malloc9.offset, ~end~0.base, ~end~0.offset, 4bv32);call #t~mem10.base, #t~mem10.offset := read~$Pointer$(~end~0.base, ~end~0.offset, 4bv32);~end~0.base, ~end~0.offset := #t~mem10.base, #t~mem10.offset;havoc #t~mem10.base, #t~mem10.offset;call write~$Pointer$(0bv32, 0bv32, ~end~0.base, ~end~0.offset, 4bv32); {2964#true} is VALID [2018-11-14 18:17:00,733 INFO L273 TraceCheckUtils]: 17: Hoare triple {2964#true} assume true; {2964#true} is VALID [2018-11-14 18:17:00,733 INFO L273 TraceCheckUtils]: 18: Hoare triple {2964#true} assume !!(0bv32 != ~end~0.base || 0bv32 != ~end~0.offset); {2964#true} is VALID [2018-11-14 18:17:00,733 INFO L273 TraceCheckUtils]: 19: Hoare triple {2964#true} assume true; {2964#true} is VALID [2018-11-14 18:17:00,734 INFO L273 TraceCheckUtils]: 20: Hoare triple {2964#true} assume true; {2964#true} is VALID [2018-11-14 18:17:00,734 INFO L273 TraceCheckUtils]: 21: Hoare triple {2964#true} assume !!(~end~0.base != 0bv32 || ~end~0.offset != 0bv32); {2964#true} is VALID [2018-11-14 18:17:00,734 INFO L273 TraceCheckUtils]: 22: Hoare triple {2964#true} assume true; {2964#true} is VALID [2018-11-14 18:17:00,734 INFO L273 TraceCheckUtils]: 23: Hoare triple {2964#true} assume #t~nondet11 != 0bv32;havoc #t~nondet11;call write~$Pointer$(0bv32, 0bv32, ~end~0.base, ~bvadd32(4bv32, ~end~0.offset), 4bv32); {2964#true} is VALID [2018-11-14 18:17:00,749 INFO L273 TraceCheckUtils]: 24: Hoare triple {2964#true} assume true;call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~end~0.base, ~bvadd32(4bv32, ~end~0.offset), 4bv32);#t~short17 := #t~mem15.base != 0bv32 || #t~mem15.offset != 0bv32; {3041#(or (and (not |main_#t~short17|) (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32))) (and |main_#t~short17| (or (not (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32))) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32))))))} is VALID [2018-11-14 18:17:00,751 INFO L273 TraceCheckUtils]: 25: Hoare triple {3041#(or (and (not |main_#t~short17|) (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32))) (and |main_#t~short17| (or (not (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32))) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32))))))} assume !#t~short17;call #t~mem16.base, #t~mem16.offset := read~$Pointer$(~end~0.base, ~bvadd32(4bv32, ~end~0.offset), 4bv32);#t~short17 := #t~mem16.base == 0bv32 && #t~mem16.offset == 0bv32; {3045#|main_#t~short17|} is VALID [2018-11-14 18:17:00,752 INFO L273 TraceCheckUtils]: 26: Hoare triple {3045#|main_#t~short17|} assume !#t~short17;havoc #t~mem15.base, #t~mem15.offset;havoc #t~mem16.base, #t~mem16.offset;havoc #t~short17; {2965#false} is VALID [2018-11-14 18:17:00,752 INFO L273 TraceCheckUtils]: 27: Hoare triple {2965#false} assume !false; {2965#false} is VALID [2018-11-14 18:17:00,753 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-14 18:17:00,753 INFO L312 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [MP cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk (8)] Exception during sending of exit command (exit): Broken pipe [2018-11-14 18:17:00,755 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-14 18:17:00,755 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-14 18:17:00,756 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 28 [2018-11-14 18:17:00,756 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-14 18:17:00,756 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-14 18:17:00,791 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 28 edges. 28 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 18:17:00,791 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-14 18:17:00,791 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-14 18:17:00,791 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-14 18:17:00,792 INFO L87 Difference]: Start difference. First operand 84 states and 93 transitions. Second operand 4 states. [2018-11-14 18:17:01,795 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 18:17:01,796 INFO L93 Difference]: Finished difference Result 84 states and 93 transitions. [2018-11-14 18:17:01,796 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2018-11-14 18:17:01,796 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 28 [2018-11-14 18:17:01,796 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-14 18:17:01,796 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-14 18:17:01,798 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 91 transitions. [2018-11-14 18:17:01,798 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-14 18:17:01,800 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 91 transitions. [2018-11-14 18:17:01,800 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states and 91 transitions. [2018-11-14 18:17:01,929 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 91 edges. 91 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 18:17:01,931 INFO L225 Difference]: With dead ends: 84 [2018-11-14 18:17:01,931 INFO L226 Difference]: Without dead ends: 82 [2018-11-14 18:17:01,932 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 28 GetRequests, 25 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-14 18:17:01,932 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 82 states. [2018-11-14 18:17:01,944 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 82 to 81. [2018-11-14 18:17:01,944 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-14 18:17:01,944 INFO L82 GeneralOperation]: Start isEquivalent. First operand 82 states. Second operand 81 states. [2018-11-14 18:17:01,945 INFO L74 IsIncluded]: Start isIncluded. First operand 82 states. Second operand 81 states. [2018-11-14 18:17:01,945 INFO L87 Difference]: Start difference. First operand 82 states. Second operand 81 states. [2018-11-14 18:17:01,948 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 18:17:01,948 INFO L93 Difference]: Finished difference Result 82 states and 91 transitions. [2018-11-14 18:17:01,948 INFO L276 IsEmpty]: Start isEmpty. Operand 82 states and 91 transitions. [2018-11-14 18:17:01,948 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 18:17:01,949 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 18:17:01,949 INFO L74 IsIncluded]: Start isIncluded. First operand 81 states. Second operand 82 states. [2018-11-14 18:17:01,949 INFO L87 Difference]: Start difference. First operand 81 states. Second operand 82 states. [2018-11-14 18:17:01,951 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 18:17:01,951 INFO L93 Difference]: Finished difference Result 82 states and 91 transitions. [2018-11-14 18:17:01,952 INFO L276 IsEmpty]: Start isEmpty. Operand 82 states and 91 transitions. [2018-11-14 18:17:01,952 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 18:17:01,952 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 18:17:01,952 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-14 18:17:01,952 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-14 18:17:01,953 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 81 states. [2018-11-14 18:17:01,955 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 81 states to 81 states and 90 transitions. [2018-11-14 18:17:01,955 INFO L78 Accepts]: Start accepts. Automaton has 81 states and 90 transitions. Word has length 28 [2018-11-14 18:17:01,955 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-14 18:17:01,955 INFO L480 AbstractCegarLoop]: Abstraction has 81 states and 90 transitions. [2018-11-14 18:17:01,955 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-14 18:17:01,955 INFO L276 IsEmpty]: Start isEmpty. Operand 81 states and 90 transitions. [2018-11-14 18:17:01,956 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 29 [2018-11-14 18:17:01,956 INFO L367 BasicCegarLoop]: Found error trace [2018-11-14 18:17:01,956 INFO L375 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-14 18:17:01,956 INFO L423 AbstractCegarLoop]: === Iteration 8 === [mainErr12ASSERT_VIOLATIONERROR_FUNCTION, mainErr0ASSERT_VIOLATIONERROR_FUNCTION, mainErr7ASSERT_VIOLATIONERROR_FUNCTION, mainErr6ASSERT_VIOLATIONERROR_FUNCTION, mainErr4ASSERT_VIOLATIONERROR_FUNCTION, mainErr8ASSERT_VIOLATIONERROR_FUNCTION, mainErr11ASSERT_VIOLATIONERROR_FUNCTION, mainErr3ASSERT_VIOLATIONERROR_FUNCTION, mainErr9ASSERT_VIOLATIONERROR_FUNCTION, mainErr1ASSERT_VIOLATIONERROR_FUNCTION, mainErr5ASSERT_VIOLATIONERROR_FUNCTION, mainErr10ASSERT_VIOLATIONERROR_FUNCTION, mainErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-14 18:17:01,957 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-14 18:17:01,957 INFO L82 PathProgramCache]: Analyzing trace with hash -1344529372, now seen corresponding path program 1 times [2018-11-14 18:17:01,957 INFO L223 ckRefinementStrategy]: Switched to mode CVC4_FPBP [2018-11-14 18:17:01,957 INFO L69 tionRefinementEngine]: Using refinement strategy WolfRefinementStrategy No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/cvc4nyu Starting monitored process 9 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 9 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk [2018-11-14 18:17:01,976 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-14 18:17:02,005 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-14 18:17:02,018 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-14 18:17:02,019 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-14 18:17:02,128 INFO L256 TraceCheckUtils]: 0: Hoare triple {3402#true} call ULTIMATE.init(); {3402#true} is VALID [2018-11-14 18:17:02,128 INFO L273 TraceCheckUtils]: 1: Hoare triple {3402#true} #NULL.base, #NULL.offset := 0bv32, 0bv32;#valid := #valid[0bv32 := 0bv1]; {3402#true} is VALID [2018-11-14 18:17:02,129 INFO L273 TraceCheckUtils]: 2: Hoare triple {3402#true} assume true; {3402#true} is VALID [2018-11-14 18:17:02,129 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {3402#true} {3402#true} #352#return; {3402#true} is VALID [2018-11-14 18:17:02,129 INFO L256 TraceCheckUtils]: 4: Hoare triple {3402#true} call #t~ret27 := main(); {3402#true} is VALID [2018-11-14 18:17:02,129 INFO L273 TraceCheckUtils]: 5: Hoare triple {3402#true} call #t~malloc0.base, #t~malloc0.offset := #Ultimate.alloc(8bv32);~list~0.base, ~list~0.offset := #t~malloc0.base, #t~malloc0.offset;call write~$Pointer$(0bv32, 0bv32, ~list~0.base, ~list~0.offset, 4bv32); {3402#true} is VALID [2018-11-14 18:17:02,130 INFO L273 TraceCheckUtils]: 6: Hoare triple {3402#true} assume true; {3402#true} is VALID [2018-11-14 18:17:02,130 INFO L273 TraceCheckUtils]: 7: Hoare triple {3402#true} assume !!(~list~0.base != 0bv32 || ~list~0.offset != 0bv32); {3402#true} is VALID [2018-11-14 18:17:02,130 INFO L273 TraceCheckUtils]: 8: Hoare triple {3402#true} assume true; {3402#true} is VALID [2018-11-14 18:17:02,130 INFO L273 TraceCheckUtils]: 9: Hoare triple {3402#true} assume #t~nondet1 != 0bv32;havoc #t~nondet1;call write~$Pointer$(0bv32, 0bv32, ~list~0.base, ~bvadd32(4bv32, ~list~0.offset), 4bv32); {3402#true} is VALID [2018-11-14 18:17:02,130 INFO L273 TraceCheckUtils]: 10: Hoare triple {3402#true} assume true;call #t~mem5.base, #t~mem5.offset := read~$Pointer$(~list~0.base, ~bvadd32(4bv32, ~list~0.offset), 4bv32);#t~short7 := #t~mem5.base != 0bv32 || #t~mem5.offset != 0bv32; {3402#true} is VALID [2018-11-14 18:17:02,131 INFO L273 TraceCheckUtils]: 11: Hoare triple {3402#true} assume #t~short7; {3402#true} is VALID [2018-11-14 18:17:02,131 INFO L273 TraceCheckUtils]: 12: Hoare triple {3402#true} assume !!#t~short7;havoc #t~short7;havoc #t~mem5.base, #t~mem5.offset;havoc #t~mem6.base, #t~mem6.offset; {3402#true} is VALID [2018-11-14 18:17:02,131 INFO L273 TraceCheckUtils]: 13: Hoare triple {3402#true} assume true; {3402#true} is VALID [2018-11-14 18:17:02,131 INFO L273 TraceCheckUtils]: 14: Hoare triple {3402#true} ~end~0.base, ~end~0.offset := ~list~0.base, ~list~0.offset; {3402#true} is VALID [2018-11-14 18:17:02,132 INFO L273 TraceCheckUtils]: 15: Hoare triple {3402#true} assume true; {3402#true} is VALID [2018-11-14 18:17:02,132 INFO L273 TraceCheckUtils]: 16: Hoare triple {3402#true} assume !(#t~nondet8 != 0bv32);havoc #t~nondet8; {3402#true} is VALID [2018-11-14 18:17:02,132 INFO L273 TraceCheckUtils]: 17: Hoare triple {3402#true} ~end~0.base, ~end~0.offset := 0bv32, 0bv32;~end~0.base, ~end~0.offset := ~list~0.base, ~list~0.offset; {3402#true} is VALID [2018-11-14 18:17:02,132 INFO L273 TraceCheckUtils]: 18: Hoare triple {3402#true} assume true; {3402#true} is VALID [2018-11-14 18:17:02,133 INFO L273 TraceCheckUtils]: 19: Hoare triple {3402#true} assume !!(0bv32 != ~end~0.base || 0bv32 != ~end~0.offset); {3402#true} is VALID [2018-11-14 18:17:02,133 INFO L273 TraceCheckUtils]: 20: Hoare triple {3402#true} assume true; {3402#true} is VALID [2018-11-14 18:17:02,133 INFO L273 TraceCheckUtils]: 21: Hoare triple {3402#true} assume true; {3402#true} is VALID [2018-11-14 18:17:02,144 INFO L273 TraceCheckUtils]: 22: Hoare triple {3402#true} assume !!(0bv32 != ~end~0.base || 0bv32 != ~end~0.offset);~len~0 := 0bv32;call #t~mem18.base, #t~mem18.offset := read~$Pointer$(~end~0.base, ~bvadd32(4bv32, ~end~0.offset), 4bv32);~inner~0.base, ~inner~0.offset := #t~mem18.base, #t~mem18.offset;havoc #t~mem18.base, #t~mem18.offset; {3473#(= main_~len~0 (_ bv0 32))} is VALID [2018-11-14 18:17:02,156 INFO L273 TraceCheckUtils]: 23: Hoare triple {3473#(= main_~len~0 (_ bv0 32))} assume true; {3473#(= main_~len~0 (_ bv0 32))} is VALID [2018-11-14 18:17:02,169 INFO L273 TraceCheckUtils]: 24: Hoare triple {3473#(= main_~len~0 (_ bv0 32))} assume !(0bv32 != ~inner~0.base || 0bv32 != ~inner~0.offset); {3473#(= main_~len~0 (_ bv0 32))} is VALID [2018-11-14 18:17:02,182 INFO L273 TraceCheckUtils]: 25: Hoare triple {3473#(= main_~len~0 (_ bv0 32))} assume true; {3473#(= main_~len~0 (_ bv0 32))} is VALID [2018-11-14 18:17:02,200 INFO L273 TraceCheckUtils]: 26: Hoare triple {3473#(= main_~len~0 (_ bv0 32))} assume !~bvsle32(~len~0, 1bv32); {3403#false} is VALID [2018-11-14 18:17:02,200 INFO L273 TraceCheckUtils]: 27: Hoare triple {3403#false} assume !false; {3403#false} is VALID [2018-11-14 18:17:02,201 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-14 18:17:02,201 INFO L312 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2018-11-14 18:17:02,202 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-14 18:17:02,203 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-14 18:17:02,203 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 28 [2018-11-14 18:17:02,203 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-14 18:17:02,204 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states. [2018-11-14 18:17:02,253 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 28 edges. 28 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 18:17:02,254 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-14 18:17:02,254 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-14 18:17:02,254 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-14 18:17:02,255 INFO L87 Difference]: Start difference. First operand 81 states and 90 transitions. Second operand 3 states. [2018-11-14 18:17:02,686 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 18:17:02,686 INFO L93 Difference]: Finished difference Result 157 states and 175 transitions. [2018-11-14 18:17:02,686 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-14 18:17:02,687 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 28 [2018-11-14 18:17:02,687 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-14 18:17:02,687 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2018-11-14 18:17:02,690 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 173 transitions. [2018-11-14 18:17:02,690 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2018-11-14 18:17:02,692 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 173 transitions. [2018-11-14 18:17:02,693 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 173 transitions. [2018-11-14 18:17:03,180 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 173 edges. 173 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 18:17:03,183 INFO L225 Difference]: With dead ends: 157 [2018-11-14 18:17:03,183 INFO L226 Difference]: Without dead ends: 110 [2018-11-14 18:17:03,183 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 27 GetRequests, 26 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-14 18:17:03,184 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 110 states. [2018-11-14 18:17:03,202 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 110 to 86. [2018-11-14 18:17:03,202 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-14 18:17:03,202 INFO L82 GeneralOperation]: Start isEquivalent. First operand 110 states. Second operand 86 states. [2018-11-14 18:17:03,202 INFO L74 IsIncluded]: Start isIncluded. First operand 110 states. Second operand 86 states. [2018-11-14 18:17:03,202 INFO L87 Difference]: Start difference. First operand 110 states. Second operand 86 states. [2018-11-14 18:17:03,206 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 18:17:03,206 INFO L93 Difference]: Finished difference Result 110 states and 122 transitions. [2018-11-14 18:17:03,206 INFO L276 IsEmpty]: Start isEmpty. Operand 110 states and 122 transitions. [2018-11-14 18:17:03,207 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 18:17:03,207 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 18:17:03,207 INFO L74 IsIncluded]: Start isIncluded. First operand 86 states. Second operand 110 states. [2018-11-14 18:17:03,207 INFO L87 Difference]: Start difference. First operand 86 states. Second operand 110 states. [2018-11-14 18:17:03,210 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 18:17:03,210 INFO L93 Difference]: Finished difference Result 110 states and 122 transitions. [2018-11-14 18:17:03,211 INFO L276 IsEmpty]: Start isEmpty. Operand 110 states and 122 transitions. [2018-11-14 18:17:03,211 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 18:17:03,211 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 18:17:03,211 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-14 18:17:03,211 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-14 18:17:03,212 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 86 states. [2018-11-14 18:17:03,214 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 86 states to 86 states and 96 transitions. [2018-11-14 18:17:03,214 INFO L78 Accepts]: Start accepts. Automaton has 86 states and 96 transitions. Word has length 28 [2018-11-14 18:17:03,214 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-14 18:17:03,214 INFO L480 AbstractCegarLoop]: Abstraction has 86 states and 96 transitions. [2018-11-14 18:17:03,214 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-14 18:17:03,214 INFO L276 IsEmpty]: Start isEmpty. Operand 86 states and 96 transitions. [2018-11-14 18:17:03,215 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 30 [2018-11-14 18:17:03,215 INFO L367 BasicCegarLoop]: Found error trace [2018-11-14 18:17:03,215 INFO L375 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-14 18:17:03,216 INFO L423 AbstractCegarLoop]: === Iteration 9 === [mainErr12ASSERT_VIOLATIONERROR_FUNCTION, mainErr0ASSERT_VIOLATIONERROR_FUNCTION, mainErr7ASSERT_VIOLATIONERROR_FUNCTION, mainErr6ASSERT_VIOLATIONERROR_FUNCTION, mainErr4ASSERT_VIOLATIONERROR_FUNCTION, mainErr8ASSERT_VIOLATIONERROR_FUNCTION, mainErr11ASSERT_VIOLATIONERROR_FUNCTION, mainErr3ASSERT_VIOLATIONERROR_FUNCTION, mainErr9ASSERT_VIOLATIONERROR_FUNCTION, mainErr1ASSERT_VIOLATIONERROR_FUNCTION, mainErr5ASSERT_VIOLATIONERROR_FUNCTION, mainErr10ASSERT_VIOLATIONERROR_FUNCTION, mainErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-14 18:17:03,216 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-14 18:17:03,216 INFO L82 PathProgramCache]: Analyzing trace with hash 1269050237, now seen corresponding path program 1 times [2018-11-14 18:17:03,216 INFO L223 ckRefinementStrategy]: Switched to mode CVC4_FPBP [2018-11-14 18:17:03,216 INFO L69 tionRefinementEngine]: Using refinement strategy WolfRefinementStrategy No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/cvc4nyu Starting monitored process 10 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 10 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk [2018-11-14 18:17:03,233 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-14 18:17:03,253 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-14 18:17:03,266 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-14 18:17:03,267 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-14 18:17:03,320 INFO L256 TraceCheckUtils]: 0: Hoare triple {3976#true} call ULTIMATE.init(); {3976#true} is VALID [2018-11-14 18:17:03,320 INFO L273 TraceCheckUtils]: 1: Hoare triple {3976#true} #NULL.base, #NULL.offset := 0bv32, 0bv32;#valid := #valid[0bv32 := 0bv1]; {3976#true} is VALID [2018-11-14 18:17:03,321 INFO L273 TraceCheckUtils]: 2: Hoare triple {3976#true} assume true; {3976#true} is VALID [2018-11-14 18:17:03,321 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {3976#true} {3976#true} #352#return; {3976#true} is VALID [2018-11-14 18:17:03,321 INFO L256 TraceCheckUtils]: 4: Hoare triple {3976#true} call #t~ret27 := main(); {3976#true} is VALID [2018-11-14 18:17:03,321 INFO L273 TraceCheckUtils]: 5: Hoare triple {3976#true} call #t~malloc0.base, #t~malloc0.offset := #Ultimate.alloc(8bv32);~list~0.base, ~list~0.offset := #t~malloc0.base, #t~malloc0.offset;call write~$Pointer$(0bv32, 0bv32, ~list~0.base, ~list~0.offset, 4bv32); {3976#true} is VALID [2018-11-14 18:17:03,322 INFO L273 TraceCheckUtils]: 6: Hoare triple {3976#true} assume true; {3976#true} is VALID [2018-11-14 18:17:03,322 INFO L273 TraceCheckUtils]: 7: Hoare triple {3976#true} assume !!(~list~0.base != 0bv32 || ~list~0.offset != 0bv32); {3976#true} is VALID [2018-11-14 18:17:03,322 INFO L273 TraceCheckUtils]: 8: Hoare triple {3976#true} assume true; {3976#true} is VALID [2018-11-14 18:17:03,323 INFO L273 TraceCheckUtils]: 9: Hoare triple {3976#true} assume #t~nondet1 != 0bv32;havoc #t~nondet1;call write~$Pointer$(0bv32, 0bv32, ~list~0.base, ~bvadd32(4bv32, ~list~0.offset), 4bv32); {3976#true} is VALID [2018-11-14 18:17:03,323 INFO L273 TraceCheckUtils]: 10: Hoare triple {3976#true} assume true;call #t~mem5.base, #t~mem5.offset := read~$Pointer$(~list~0.base, ~bvadd32(4bv32, ~list~0.offset), 4bv32);#t~short7 := #t~mem5.base != 0bv32 || #t~mem5.offset != 0bv32; {3976#true} is VALID [2018-11-14 18:17:03,323 INFO L273 TraceCheckUtils]: 11: Hoare triple {3976#true} assume #t~short7; {3976#true} is VALID [2018-11-14 18:17:03,323 INFO L273 TraceCheckUtils]: 12: Hoare triple {3976#true} assume !!#t~short7;havoc #t~short7;havoc #t~mem5.base, #t~mem5.offset;havoc #t~mem6.base, #t~mem6.offset; {3976#true} is VALID [2018-11-14 18:17:03,323 INFO L273 TraceCheckUtils]: 13: Hoare triple {3976#true} assume true; {3976#true} is VALID [2018-11-14 18:17:03,323 INFO L273 TraceCheckUtils]: 14: Hoare triple {3976#true} ~end~0.base, ~end~0.offset := ~list~0.base, ~list~0.offset; {3976#true} is VALID [2018-11-14 18:17:03,324 INFO L273 TraceCheckUtils]: 15: Hoare triple {3976#true} assume true; {3976#true} is VALID [2018-11-14 18:17:03,324 INFO L273 TraceCheckUtils]: 16: Hoare triple {3976#true} assume !(#t~nondet8 != 0bv32);havoc #t~nondet8; {3976#true} is VALID [2018-11-14 18:17:03,324 INFO L273 TraceCheckUtils]: 17: Hoare triple {3976#true} ~end~0.base, ~end~0.offset := 0bv32, 0bv32;~end~0.base, ~end~0.offset := ~list~0.base, ~list~0.offset; {3976#true} is VALID [2018-11-14 18:17:03,324 INFO L273 TraceCheckUtils]: 18: Hoare triple {3976#true} assume true; {3976#true} is VALID [2018-11-14 18:17:03,324 INFO L273 TraceCheckUtils]: 19: Hoare triple {3976#true} assume !!(0bv32 != ~end~0.base || 0bv32 != ~end~0.offset); {3976#true} is VALID [2018-11-14 18:17:03,324 INFO L273 TraceCheckUtils]: 20: Hoare triple {3976#true} assume true; {3976#true} is VALID [2018-11-14 18:17:03,324 INFO L273 TraceCheckUtils]: 21: Hoare triple {3976#true} assume true; {3976#true} is VALID [2018-11-14 18:17:03,325 INFO L273 TraceCheckUtils]: 22: Hoare triple {3976#true} assume !!(0bv32 != ~end~0.base || 0bv32 != ~end~0.offset);~len~0 := 0bv32;call #t~mem18.base, #t~mem18.offset := read~$Pointer$(~end~0.base, ~bvadd32(4bv32, ~end~0.offset), 4bv32);~inner~0.base, ~inner~0.offset := #t~mem18.base, #t~mem18.offset;havoc #t~mem18.base, #t~mem18.offset; {3976#true} is VALID [2018-11-14 18:17:03,325 INFO L273 TraceCheckUtils]: 23: Hoare triple {3976#true} assume true; {3976#true} is VALID [2018-11-14 18:17:03,325 INFO L273 TraceCheckUtils]: 24: Hoare triple {3976#true} assume !!(0bv32 != ~inner~0.base || 0bv32 != ~inner~0.offset); {4053#(or (not (= (_ bv0 32) main_~inner~0.offset)) (not (= main_~inner~0.base (_ bv0 32))))} is VALID [2018-11-14 18:17:03,326 INFO L273 TraceCheckUtils]: 25: Hoare triple {4053#(or (not (= (_ bv0 32) main_~inner~0.offset)) (not (= main_~inner~0.base (_ bv0 32))))} assume ~len~0 == 0bv32;~len~0 := 1bv32; {4053#(or (not (= (_ bv0 32) main_~inner~0.offset)) (not (= main_~inner~0.base (_ bv0 32))))} is VALID [2018-11-14 18:17:03,333 INFO L273 TraceCheckUtils]: 26: Hoare triple {4053#(or (not (= (_ bv0 32) main_~inner~0.offset)) (not (= main_~inner~0.base (_ bv0 32))))} assume true; {4053#(or (not (= (_ bv0 32) main_~inner~0.offset)) (not (= main_~inner~0.base (_ bv0 32))))} is VALID [2018-11-14 18:17:03,334 INFO L273 TraceCheckUtils]: 27: Hoare triple {4053#(or (not (= (_ bv0 32) main_~inner~0.offset)) (not (= main_~inner~0.base (_ bv0 32))))} assume !(0bv32 != ~inner~0.base || 0bv32 != ~inner~0.offset); {3977#false} is VALID [2018-11-14 18:17:03,335 INFO L273 TraceCheckUtils]: 28: Hoare triple {3977#false} assume !false; {3977#false} is VALID [2018-11-14 18:17:03,336 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-14 18:17:03,336 INFO L312 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2018-11-14 18:17:03,346 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-14 18:17:03,346 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-14 18:17:03,347 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 29 [2018-11-14 18:17:03,347 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-14 18:17:03,347 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states. [2018-11-14 18:17:03,375 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 29 edges. 29 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 18:17:03,375 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-14 18:17:03,375 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-14 18:17:03,375 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-14 18:17:03,375 INFO L87 Difference]: Start difference. First operand 86 states and 96 transitions. Second operand 3 states. [2018-11-14 18:17:03,680 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 18:17:03,680 INFO L93 Difference]: Finished difference Result 86 states and 96 transitions. [2018-11-14 18:17:03,681 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-14 18:17:03,681 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 29 [2018-11-14 18:17:03,681 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-14 18:17:03,681 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2018-11-14 18:17:03,683 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 88 transitions. [2018-11-14 18:17:03,683 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2018-11-14 18:17:03,684 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 88 transitions. [2018-11-14 18:17:03,685 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 88 transitions. [2018-11-14 18:17:03,851 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 88 edges. 88 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 18:17:03,853 INFO L225 Difference]: With dead ends: 86 [2018-11-14 18:17:03,854 INFO L226 Difference]: Without dead ends: 84 [2018-11-14 18:17:03,854 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 28 GetRequests, 27 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-14 18:17:03,855 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 84 states. [2018-11-14 18:17:04,116 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 84 to 84. [2018-11-14 18:17:04,116 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-14 18:17:04,117 INFO L82 GeneralOperation]: Start isEquivalent. First operand 84 states. Second operand 84 states. [2018-11-14 18:17:04,117 INFO L74 IsIncluded]: Start isIncluded. First operand 84 states. Second operand 84 states. [2018-11-14 18:17:04,117 INFO L87 Difference]: Start difference. First operand 84 states. Second operand 84 states. [2018-11-14 18:17:04,119 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 18:17:04,126 INFO L93 Difference]: Finished difference Result 84 states and 94 transitions. [2018-11-14 18:17:04,126 INFO L276 IsEmpty]: Start isEmpty. Operand 84 states and 94 transitions. [2018-11-14 18:17:04,126 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 18:17:04,127 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 18:17:04,127 INFO L74 IsIncluded]: Start isIncluded. First operand 84 states. Second operand 84 states. [2018-11-14 18:17:04,127 INFO L87 Difference]: Start difference. First operand 84 states. Second operand 84 states. [2018-11-14 18:17:04,129 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 18:17:04,130 INFO L93 Difference]: Finished difference Result 84 states and 94 transitions. [2018-11-14 18:17:04,132 INFO L276 IsEmpty]: Start isEmpty. Operand 84 states and 94 transitions. [2018-11-14 18:17:04,132 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 18:17:04,132 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 18:17:04,132 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-14 18:17:04,133 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-14 18:17:04,133 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 84 states. [2018-11-14 18:17:04,138 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 84 states to 84 states and 94 transitions. [2018-11-14 18:17:04,139 INFO L78 Accepts]: Start accepts. Automaton has 84 states and 94 transitions. Word has length 29 [2018-11-14 18:17:04,139 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-14 18:17:04,139 INFO L480 AbstractCegarLoop]: Abstraction has 84 states and 94 transitions. [2018-11-14 18:17:04,139 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-14 18:17:04,139 INFO L276 IsEmpty]: Start isEmpty. Operand 84 states and 94 transitions. [2018-11-14 18:17:04,140 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2018-11-14 18:17:04,140 INFO L367 BasicCegarLoop]: Found error trace [2018-11-14 18:17:04,140 INFO L375 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-14 18:17:04,141 INFO L423 AbstractCegarLoop]: === Iteration 10 === [mainErr12ASSERT_VIOLATIONERROR_FUNCTION, mainErr0ASSERT_VIOLATIONERROR_FUNCTION, mainErr7ASSERT_VIOLATIONERROR_FUNCTION, mainErr6ASSERT_VIOLATIONERROR_FUNCTION, mainErr4ASSERT_VIOLATIONERROR_FUNCTION, mainErr8ASSERT_VIOLATIONERROR_FUNCTION, mainErr11ASSERT_VIOLATIONERROR_FUNCTION, mainErr3ASSERT_VIOLATIONERROR_FUNCTION, mainErr9ASSERT_VIOLATIONERROR_FUNCTION, mainErr1ASSERT_VIOLATIONERROR_FUNCTION, mainErr5ASSERT_VIOLATIONERROR_FUNCTION, mainErr10ASSERT_VIOLATIONERROR_FUNCTION, mainErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-14 18:17:04,141 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-14 18:17:04,141 INFO L82 PathProgramCache]: Analyzing trace with hash 1977577358, now seen corresponding path program 1 times [2018-11-14 18:17:04,143 INFO L223 ckRefinementStrategy]: Switched to mode CVC4_FPBP [2018-11-14 18:17:04,143 INFO L69 tionRefinementEngine]: Using refinement strategy WolfRefinementStrategy No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/cvc4nyu Starting monitored process 11 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 11 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk [2018-11-14 18:17:04,177 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-14 18:17:04,221 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-14 18:17:04,261 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-14 18:17:04,262 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-14 18:17:04,442 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 10 [2018-11-14 18:17:04,449 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 9 [2018-11-14 18:17:04,450 INFO L267 ElimStorePlain]: Start of recursive call 3: End of recursive call: and 1 xjuncts. [2018-11-14 18:17:04,456 INFO L267 ElimStorePlain]: Start of recursive call 2: 1 dim-1 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:17:04,475 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 10 [2018-11-14 18:17:04,481 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 9 [2018-11-14 18:17:04,482 INFO L267 ElimStorePlain]: Start of recursive call 5: End of recursive call: and 1 xjuncts. [2018-11-14 18:17:04,486 INFO L267 ElimStorePlain]: Start of recursive call 4: 1 dim-1 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:17:04,497 INFO L267 ElimStorePlain]: Start of recursive call 1: 2 dim-2 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:17:04,497 INFO L202 ElimStorePlain]: Needed 5 recursive calls to eliminate 2 variables, input treesize:27, output treesize:19 [2018-11-14 18:17:04,564 INFO L256 TraceCheckUtils]: 0: Hoare triple {4425#true} call ULTIMATE.init(); {4425#true} is VALID [2018-11-14 18:17:04,565 INFO L273 TraceCheckUtils]: 1: Hoare triple {4425#true} #NULL.base, #NULL.offset := 0bv32, 0bv32;#valid := #valid[0bv32 := 0bv1]; {4425#true} is VALID [2018-11-14 18:17:04,565 INFO L273 TraceCheckUtils]: 2: Hoare triple {4425#true} assume true; {4425#true} is VALID [2018-11-14 18:17:04,565 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {4425#true} {4425#true} #352#return; {4425#true} is VALID [2018-11-14 18:17:04,566 INFO L256 TraceCheckUtils]: 4: Hoare triple {4425#true} call #t~ret27 := main(); {4425#true} is VALID [2018-11-14 18:17:04,566 INFO L273 TraceCheckUtils]: 5: Hoare triple {4425#true} call #t~malloc0.base, #t~malloc0.offset := #Ultimate.alloc(8bv32);~list~0.base, ~list~0.offset := #t~malloc0.base, #t~malloc0.offset;call write~$Pointer$(0bv32, 0bv32, ~list~0.base, ~list~0.offset, 4bv32); {4425#true} is VALID [2018-11-14 18:17:04,567 INFO L273 TraceCheckUtils]: 6: Hoare triple {4425#true} assume true; {4425#true} is VALID [2018-11-14 18:17:04,567 INFO L273 TraceCheckUtils]: 7: Hoare triple {4425#true} assume !!(~list~0.base != 0bv32 || ~list~0.offset != 0bv32); {4425#true} is VALID [2018-11-14 18:17:04,567 INFO L273 TraceCheckUtils]: 8: Hoare triple {4425#true} assume true; {4425#true} is VALID [2018-11-14 18:17:04,572 INFO L273 TraceCheckUtils]: 9: Hoare triple {4425#true} assume #t~nondet1 != 0bv32;havoc #t~nondet1;call write~$Pointer$(0bv32, 0bv32, ~list~0.base, ~bvadd32(4bv32, ~list~0.offset), 4bv32); {4457#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)))} is VALID [2018-11-14 18:17:04,573 INFO L273 TraceCheckUtils]: 10: Hoare triple {4457#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)))} assume true;call #t~mem5.base, #t~mem5.offset := read~$Pointer$(~list~0.base, ~bvadd32(4bv32, ~list~0.offset), 4bv32);#t~short7 := #t~mem5.base != 0bv32 || #t~mem5.offset != 0bv32; {4461#(not |main_#t~short7|)} is VALID [2018-11-14 18:17:04,574 INFO L273 TraceCheckUtils]: 11: Hoare triple {4461#(not |main_#t~short7|)} assume #t~short7; {4426#false} is VALID [2018-11-14 18:17:04,574 INFO L273 TraceCheckUtils]: 12: Hoare triple {4426#false} assume !!#t~short7;havoc #t~short7;havoc #t~mem5.base, #t~mem5.offset;havoc #t~mem6.base, #t~mem6.offset; {4426#false} is VALID [2018-11-14 18:17:04,574 INFO L273 TraceCheckUtils]: 13: Hoare triple {4426#false} assume true; {4426#false} is VALID [2018-11-14 18:17:04,574 INFO L273 TraceCheckUtils]: 14: Hoare triple {4426#false} ~end~0.base, ~end~0.offset := ~list~0.base, ~list~0.offset; {4426#false} is VALID [2018-11-14 18:17:04,575 INFO L273 TraceCheckUtils]: 15: Hoare triple {4426#false} assume true; {4426#false} is VALID [2018-11-14 18:17:04,575 INFO L273 TraceCheckUtils]: 16: Hoare triple {4426#false} assume !(#t~nondet8 != 0bv32);havoc #t~nondet8; {4426#false} is VALID [2018-11-14 18:17:04,575 INFO L273 TraceCheckUtils]: 17: Hoare triple {4426#false} ~end~0.base, ~end~0.offset := 0bv32, 0bv32;~end~0.base, ~end~0.offset := ~list~0.base, ~list~0.offset; {4426#false} is VALID [2018-11-14 18:17:04,575 INFO L273 TraceCheckUtils]: 18: Hoare triple {4426#false} assume true; {4426#false} is VALID [2018-11-14 18:17:04,576 INFO L273 TraceCheckUtils]: 19: Hoare triple {4426#false} assume !!(0bv32 != ~end~0.base || 0bv32 != ~end~0.offset); {4426#false} is VALID [2018-11-14 18:17:04,576 INFO L273 TraceCheckUtils]: 20: Hoare triple {4426#false} assume true; {4426#false} is VALID [2018-11-14 18:17:04,576 INFO L273 TraceCheckUtils]: 21: Hoare triple {4426#false} assume true; {4426#false} is VALID [2018-11-14 18:17:04,576 INFO L273 TraceCheckUtils]: 22: Hoare triple {4426#false} assume !!(0bv32 != ~end~0.base || 0bv32 != ~end~0.offset);~len~0 := 0bv32;call #t~mem18.base, #t~mem18.offset := read~$Pointer$(~end~0.base, ~bvadd32(4bv32, ~end~0.offset), 4bv32);~inner~0.base, ~inner~0.offset := #t~mem18.base, #t~mem18.offset;havoc #t~mem18.base, #t~mem18.offset; {4426#false} is VALID [2018-11-14 18:17:04,576 INFO L273 TraceCheckUtils]: 23: Hoare triple {4426#false} assume true; {4426#false} is VALID [2018-11-14 18:17:04,577 INFO L273 TraceCheckUtils]: 24: Hoare triple {4426#false} assume !!(0bv32 != ~inner~0.base || 0bv32 != ~inner~0.offset); {4426#false} is VALID [2018-11-14 18:17:04,577 INFO L273 TraceCheckUtils]: 25: Hoare triple {4426#false} assume ~len~0 == 0bv32;~len~0 := 1bv32; {4426#false} is VALID [2018-11-14 18:17:04,577 INFO L273 TraceCheckUtils]: 26: Hoare triple {4426#false} assume true; {4426#false} is VALID [2018-11-14 18:17:04,577 INFO L273 TraceCheckUtils]: 27: Hoare triple {4426#false} assume !!(0bv32 != ~inner~0.base || 0bv32 != ~inner~0.offset); {4426#false} is VALID [2018-11-14 18:17:04,577 INFO L273 TraceCheckUtils]: 28: Hoare triple {4426#false} assume true; {4426#false} is VALID [2018-11-14 18:17:04,578 INFO L273 TraceCheckUtils]: 29: Hoare triple {4426#false} assume true;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~inner~0.base, ~bvadd32(4bv32, ~inner~0.offset), 4bv32); {4426#false} is VALID [2018-11-14 18:17:04,578 INFO L273 TraceCheckUtils]: 30: Hoare triple {4426#false} assume !(0bv32 == #t~mem19.base && 0bv32 == #t~mem19.offset);havoc #t~mem19.base, #t~mem19.offset; {4426#false} is VALID [2018-11-14 18:17:04,578 INFO L273 TraceCheckUtils]: 31: Hoare triple {4426#false} assume !false; {4426#false} is VALID [2018-11-14 18:17:04,579 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-14 18:17:04,580 INFO L312 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2018-11-14 18:17:04,584 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-14 18:17:04,585 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-14 18:17:04,585 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 32 [2018-11-14 18:17:04,585 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-14 18:17:04,585 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-14 18:17:04,660 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 32 edges. 32 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 18:17:04,661 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-14 18:17:04,661 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-14 18:17:04,661 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-14 18:17:04,662 INFO L87 Difference]: Start difference. First operand 84 states and 94 transitions. Second operand 4 states. [2018-11-14 18:17:05,856 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 18:17:05,857 INFO L93 Difference]: Finished difference Result 219 states and 244 transitions. [2018-11-14 18:17:05,857 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-14 18:17:05,857 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 32 [2018-11-14 18:17:05,857 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-14 18:17:05,857 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-14 18:17:05,860 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 220 transitions. [2018-11-14 18:17:05,860 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-14 18:17:05,861 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 220 transitions. [2018-11-14 18:17:05,862 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 220 transitions. [2018-11-14 18:17:06,173 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 220 edges. 220 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 18:17:06,177 INFO L225 Difference]: With dead ends: 219 [2018-11-14 18:17:06,177 INFO L226 Difference]: Without dead ends: 147 [2018-11-14 18:17:06,178 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 32 GetRequests, 29 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-14 18:17:06,178 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 147 states. [2018-11-14 18:17:06,204 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 147 to 86. [2018-11-14 18:17:06,205 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-14 18:17:06,205 INFO L82 GeneralOperation]: Start isEquivalent. First operand 147 states. Second operand 86 states. [2018-11-14 18:17:06,205 INFO L74 IsIncluded]: Start isIncluded. First operand 147 states. Second operand 86 states. [2018-11-14 18:17:06,206 INFO L87 Difference]: Start difference. First operand 147 states. Second operand 86 states. [2018-11-14 18:17:06,209 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 18:17:06,210 INFO L93 Difference]: Finished difference Result 147 states and 163 transitions. [2018-11-14 18:17:06,210 INFO L276 IsEmpty]: Start isEmpty. Operand 147 states and 163 transitions. [2018-11-14 18:17:06,210 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 18:17:06,211 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 18:17:06,211 INFO L74 IsIncluded]: Start isIncluded. First operand 86 states. Second operand 147 states. [2018-11-14 18:17:06,211 INFO L87 Difference]: Start difference. First operand 86 states. Second operand 147 states. [2018-11-14 18:17:06,214 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 18:17:06,215 INFO L93 Difference]: Finished difference Result 147 states and 163 transitions. [2018-11-14 18:17:06,215 INFO L276 IsEmpty]: Start isEmpty. Operand 147 states and 163 transitions. [2018-11-14 18:17:06,215 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 18:17:06,215 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 18:17:06,216 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-14 18:17:06,216 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-14 18:17:06,216 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 86 states. [2018-11-14 18:17:06,218 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 86 states to 86 states and 96 transitions. [2018-11-14 18:17:06,218 INFO L78 Accepts]: Start accepts. Automaton has 86 states and 96 transitions. Word has length 32 [2018-11-14 18:17:06,218 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-14 18:17:06,218 INFO L480 AbstractCegarLoop]: Abstraction has 86 states and 96 transitions. [2018-11-14 18:17:06,218 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-14 18:17:06,218 INFO L276 IsEmpty]: Start isEmpty. Operand 86 states and 96 transitions. [2018-11-14 18:17:06,219 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2018-11-14 18:17:06,219 INFO L367 BasicCegarLoop]: Found error trace [2018-11-14 18:17:06,219 INFO L375 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-14 18:17:06,220 INFO L423 AbstractCegarLoop]: === Iteration 11 === [mainErr12ASSERT_VIOLATIONERROR_FUNCTION, mainErr0ASSERT_VIOLATIONERROR_FUNCTION, mainErr7ASSERT_VIOLATIONERROR_FUNCTION, mainErr6ASSERT_VIOLATIONERROR_FUNCTION, mainErr4ASSERT_VIOLATIONERROR_FUNCTION, mainErr8ASSERT_VIOLATIONERROR_FUNCTION, mainErr11ASSERT_VIOLATIONERROR_FUNCTION, mainErr3ASSERT_VIOLATIONERROR_FUNCTION, mainErr9ASSERT_VIOLATIONERROR_FUNCTION, mainErr1ASSERT_VIOLATIONERROR_FUNCTION, mainErr5ASSERT_VIOLATIONERROR_FUNCTION, mainErr10ASSERT_VIOLATIONERROR_FUNCTION, mainErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-14 18:17:06,220 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-14 18:17:06,220 INFO L82 PathProgramCache]: Analyzing trace with hash -1894688112, now seen corresponding path program 1 times [2018-11-14 18:17:06,221 INFO L223 ckRefinementStrategy]: Switched to mode CVC4_FPBP [2018-11-14 18:17:06,221 INFO L69 tionRefinementEngine]: Using refinement strategy WolfRefinementStrategy No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/cvc4nyu Starting monitored process 12 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 12 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk [2018-11-14 18:17:06,242 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-14 18:17:06,283 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-14 18:17:06,315 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-14 18:17:06,317 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-14 18:17:06,461 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 10 [2018-11-14 18:17:06,467 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 9 [2018-11-14 18:17:06,469 INFO L267 ElimStorePlain]: Start of recursive call 3: End of recursive call: and 1 xjuncts. [2018-11-14 18:17:06,472 INFO L267 ElimStorePlain]: Start of recursive call 2: 1 dim-1 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:17:06,489 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 10 [2018-11-14 18:17:06,493 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 9 [2018-11-14 18:17:06,495 INFO L267 ElimStorePlain]: Start of recursive call 5: End of recursive call: and 1 xjuncts. [2018-11-14 18:17:06,497 INFO L267 ElimStorePlain]: Start of recursive call 4: 1 dim-1 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:17:06,510 INFO L267 ElimStorePlain]: Start of recursive call 1: 2 dim-2 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:17:06,510 INFO L202 ElimStorePlain]: Needed 5 recursive calls to eliminate 2 variables, input treesize:30, output treesize:22 [2018-11-14 18:17:06,633 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 11 [2018-11-14 18:17:06,639 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 3 [2018-11-14 18:17:06,640 INFO L267 ElimStorePlain]: Start of recursive call 3: End of recursive call: and 1 xjuncts. [2018-11-14 18:17:06,642 INFO L267 ElimStorePlain]: Start of recursive call 2: 1 dim-1 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:17:06,655 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 11 [2018-11-14 18:17:06,662 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 3 [2018-11-14 18:17:06,663 INFO L267 ElimStorePlain]: Start of recursive call 5: End of recursive call: and 1 xjuncts. [2018-11-14 18:17:06,665 INFO L267 ElimStorePlain]: Start of recursive call 4: 1 dim-1 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:17:06,672 INFO L267 ElimStorePlain]: Start of recursive call 1: 1 dim-0 vars, 2 dim-2 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:17:06,672 INFO L202 ElimStorePlain]: Needed 5 recursive calls to eliminate 3 variables, input treesize:29, output treesize:7 [2018-11-14 18:17:06,678 WARN L383 uantifierElimination]: Trying to double check SDD result, but SMT solver's response was UNKNOWN. [2018-11-14 18:17:06,736 INFO L256 TraceCheckUtils]: 0: Hoare triple {5158#true} call ULTIMATE.init(); {5158#true} is VALID [2018-11-14 18:17:06,736 INFO L273 TraceCheckUtils]: 1: Hoare triple {5158#true} #NULL.base, #NULL.offset := 0bv32, 0bv32;#valid := #valid[0bv32 := 0bv1]; {5158#true} is VALID [2018-11-14 18:17:06,736 INFO L273 TraceCheckUtils]: 2: Hoare triple {5158#true} assume true; {5158#true} is VALID [2018-11-14 18:17:06,737 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {5158#true} {5158#true} #352#return; {5158#true} is VALID [2018-11-14 18:17:06,737 INFO L256 TraceCheckUtils]: 4: Hoare triple {5158#true} call #t~ret27 := main(); {5158#true} is VALID [2018-11-14 18:17:06,738 INFO L273 TraceCheckUtils]: 5: Hoare triple {5158#true} call #t~malloc0.base, #t~malloc0.offset := #Ultimate.alloc(8bv32);~list~0.base, ~list~0.offset := #t~malloc0.base, #t~malloc0.offset;call write~$Pointer$(0bv32, 0bv32, ~list~0.base, ~list~0.offset, 4bv32); {5178#(= main_~list~0.offset (_ bv0 32))} is VALID [2018-11-14 18:17:06,738 INFO L273 TraceCheckUtils]: 6: Hoare triple {5178#(= main_~list~0.offset (_ bv0 32))} assume true; {5178#(= main_~list~0.offset (_ bv0 32))} is VALID [2018-11-14 18:17:06,738 INFO L273 TraceCheckUtils]: 7: Hoare triple {5178#(= main_~list~0.offset (_ bv0 32))} assume !!(~list~0.base != 0bv32 || ~list~0.offset != 0bv32); {5178#(= main_~list~0.offset (_ bv0 32))} is VALID [2018-11-14 18:17:06,739 INFO L273 TraceCheckUtils]: 8: Hoare triple {5178#(= main_~list~0.offset (_ bv0 32))} assume true; {5178#(= main_~list~0.offset (_ bv0 32))} is VALID [2018-11-14 18:17:06,741 INFO L273 TraceCheckUtils]: 9: Hoare triple {5178#(= main_~list~0.offset (_ bv0 32))} assume #t~nondet1 != 0bv32;havoc #t~nondet1;call write~$Pointer$(0bv32, 0bv32, ~list~0.base, ~bvadd32(4bv32, ~list~0.offset), 4bv32); {5191#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:17:06,742 INFO L273 TraceCheckUtils]: 10: Hoare triple {5191#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset (_ bv0 32)))} assume true;call #t~mem5.base, #t~mem5.offset := read~$Pointer$(~list~0.base, ~bvadd32(4bv32, ~list~0.offset), 4bv32);#t~short7 := #t~mem5.base != 0bv32 || #t~mem5.offset != 0bv32; {5191#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:17:06,743 INFO L273 TraceCheckUtils]: 11: Hoare triple {5191#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset (_ bv0 32)))} assume !#t~short7;call #t~mem6.base, #t~mem6.offset := read~$Pointer$(~list~0.base, ~bvadd32(4bv32, ~list~0.offset), 4bv32);#t~short7 := #t~mem6.base == 0bv32 && #t~mem6.offset == 0bv32; {5191#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:17:06,744 INFO L273 TraceCheckUtils]: 12: Hoare triple {5191#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset (_ bv0 32)))} assume !!#t~short7;havoc #t~short7;havoc #t~mem5.base, #t~mem5.offset;havoc #t~mem6.base, #t~mem6.offset; {5191#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:17:06,745 INFO L273 TraceCheckUtils]: 13: Hoare triple {5191#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset (_ bv0 32)))} assume true; {5191#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:17:06,746 INFO L273 TraceCheckUtils]: 14: Hoare triple {5191#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset (_ bv0 32)))} ~end~0.base, ~end~0.offset := ~list~0.base, ~list~0.offset; {5191#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:17:06,746 INFO L273 TraceCheckUtils]: 15: Hoare triple {5191#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset (_ bv0 32)))} assume true; {5191#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:17:06,747 INFO L273 TraceCheckUtils]: 16: Hoare triple {5191#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset (_ bv0 32)))} assume !(#t~nondet8 != 0bv32);havoc #t~nondet8; {5191#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:17:06,758 INFO L273 TraceCheckUtils]: 17: Hoare triple {5191#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset (_ bv0 32)))} ~end~0.base, ~end~0.offset := 0bv32, 0bv32;~end~0.base, ~end~0.offset := ~list~0.base, ~list~0.offset; {5216#(and (= main_~end~0.offset (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)))} is VALID [2018-11-14 18:17:06,759 INFO L273 TraceCheckUtils]: 18: Hoare triple {5216#(and (= main_~end~0.offset (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)))} assume true; {5216#(and (= main_~end~0.offset (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)))} is VALID [2018-11-14 18:17:06,759 INFO L273 TraceCheckUtils]: 19: Hoare triple {5216#(and (= main_~end~0.offset (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)))} assume !!(0bv32 != ~end~0.base || 0bv32 != ~end~0.offset); {5216#(and (= main_~end~0.offset (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)))} is VALID [2018-11-14 18:17:06,760 INFO L273 TraceCheckUtils]: 20: Hoare triple {5216#(and (= main_~end~0.offset (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)))} assume true; {5216#(and (= main_~end~0.offset (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)))} is VALID [2018-11-14 18:17:06,760 INFO L273 TraceCheckUtils]: 21: Hoare triple {5216#(and (= main_~end~0.offset (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)))} assume true; {5216#(and (= main_~end~0.offset (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)))} is VALID [2018-11-14 18:17:06,761 INFO L273 TraceCheckUtils]: 22: Hoare triple {5216#(and (= main_~end~0.offset (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)))} assume !!(0bv32 != ~end~0.base || 0bv32 != ~end~0.offset);~len~0 := 0bv32;call #t~mem18.base, #t~mem18.offset := read~$Pointer$(~end~0.base, ~bvadd32(4bv32, ~end~0.offset), 4bv32);~inner~0.base, ~inner~0.offset := #t~mem18.base, #t~mem18.offset;havoc #t~mem18.base, #t~mem18.offset; {5232#(and (= (_ bv0 32) main_~inner~0.offset) (= main_~inner~0.base (_ bv0 32)))} is VALID [2018-11-14 18:17:06,762 INFO L273 TraceCheckUtils]: 23: Hoare triple {5232#(and (= (_ bv0 32) main_~inner~0.offset) (= main_~inner~0.base (_ bv0 32)))} assume true; {5232#(and (= (_ bv0 32) main_~inner~0.offset) (= main_~inner~0.base (_ bv0 32)))} is VALID [2018-11-14 18:17:06,762 INFO L273 TraceCheckUtils]: 24: Hoare triple {5232#(and (= (_ bv0 32) main_~inner~0.offset) (= main_~inner~0.base (_ bv0 32)))} assume !!(0bv32 != ~inner~0.base || 0bv32 != ~inner~0.offset); {5159#false} is VALID [2018-11-14 18:17:06,763 INFO L273 TraceCheckUtils]: 25: Hoare triple {5159#false} assume ~len~0 == 0bv32;~len~0 := 1bv32; {5159#false} is VALID [2018-11-14 18:17:06,763 INFO L273 TraceCheckUtils]: 26: Hoare triple {5159#false} assume true; {5159#false} is VALID [2018-11-14 18:17:06,763 INFO L273 TraceCheckUtils]: 27: Hoare triple {5159#false} assume !!(0bv32 != ~inner~0.base || 0bv32 != ~inner~0.offset); {5159#false} is VALID [2018-11-14 18:17:06,763 INFO L273 TraceCheckUtils]: 28: Hoare triple {5159#false} assume true; {5159#false} is VALID [2018-11-14 18:17:06,764 INFO L273 TraceCheckUtils]: 29: Hoare triple {5159#false} assume true;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~inner~0.base, ~bvadd32(4bv32, ~inner~0.offset), 4bv32); {5159#false} is VALID [2018-11-14 18:17:06,764 INFO L273 TraceCheckUtils]: 30: Hoare triple {5159#false} assume !(0bv32 == #t~mem19.base && 0bv32 == #t~mem19.offset);havoc #t~mem19.base, #t~mem19.offset; {5159#false} is VALID [2018-11-14 18:17:06,764 INFO L273 TraceCheckUtils]: 31: Hoare triple {5159#false} assume !false; {5159#false} is VALID [2018-11-14 18:17:06,767 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-14 18:17:06,768 INFO L312 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [MP cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk (12)] Exception during sending of exit command (exit): Broken pipe [2018-11-14 18:17:06,770 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-14 18:17:06,770 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2018-11-14 18:17:06,771 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 32 [2018-11-14 18:17:06,771 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-14 18:17:06,771 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 6 states. [2018-11-14 18:17:06,852 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 32 edges. 32 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 18:17:06,852 INFO L459 AbstractCegarLoop]: Interpolant automaton has 6 states [2018-11-14 18:17:06,852 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2018-11-14 18:17:06,853 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2018-11-14 18:17:06,853 INFO L87 Difference]: Start difference. First operand 86 states and 96 transitions. Second operand 6 states. [2018-11-14 18:17:08,919 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 18:17:08,919 INFO L93 Difference]: Finished difference Result 237 states and 263 transitions. [2018-11-14 18:17:08,919 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2018-11-14 18:17:08,919 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 32 [2018-11-14 18:17:08,920 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-14 18:17:08,920 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 6 states. [2018-11-14 18:17:08,922 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9 states to 9 states and 245 transitions. [2018-11-14 18:17:08,922 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 6 states. [2018-11-14 18:17:08,924 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9 states to 9 states and 245 transitions. [2018-11-14 18:17:08,925 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 9 states and 245 transitions. [2018-11-14 18:17:09,248 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 245 edges. 245 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 18:17:09,252 INFO L225 Difference]: With dead ends: 237 [2018-11-14 18:17:09,252 INFO L226 Difference]: Without dead ends: 187 [2018-11-14 18:17:09,253 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 35 GetRequests, 27 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=34, Invalid=56, Unknown=0, NotChecked=0, Total=90 [2018-11-14 18:17:09,253 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 187 states. [2018-11-14 18:17:09,411 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 187 to 112. [2018-11-14 18:17:09,411 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-14 18:17:09,411 INFO L82 GeneralOperation]: Start isEquivalent. First operand 187 states. Second operand 112 states. [2018-11-14 18:17:09,411 INFO L74 IsIncluded]: Start isIncluded. First operand 187 states. Second operand 112 states. [2018-11-14 18:17:09,412 INFO L87 Difference]: Start difference. First operand 187 states. Second operand 112 states. [2018-11-14 18:17:09,417 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 18:17:09,417 INFO L93 Difference]: Finished difference Result 187 states and 207 transitions. [2018-11-14 18:17:09,417 INFO L276 IsEmpty]: Start isEmpty. Operand 187 states and 207 transitions. [2018-11-14 18:17:09,418 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 18:17:09,418 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 18:17:09,418 INFO L74 IsIncluded]: Start isIncluded. First operand 112 states. Second operand 187 states. [2018-11-14 18:17:09,418 INFO L87 Difference]: Start difference. First operand 112 states. Second operand 187 states. [2018-11-14 18:17:09,423 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 18:17:09,423 INFO L93 Difference]: Finished difference Result 187 states and 207 transitions. [2018-11-14 18:17:09,424 INFO L276 IsEmpty]: Start isEmpty. Operand 187 states and 207 transitions. [2018-11-14 18:17:09,424 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 18:17:09,424 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 18:17:09,425 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-14 18:17:09,425 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-14 18:17:09,425 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 112 states. [2018-11-14 18:17:09,427 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 112 states to 112 states and 126 transitions. [2018-11-14 18:17:09,428 INFO L78 Accepts]: Start accepts. Automaton has 112 states and 126 transitions. Word has length 32 [2018-11-14 18:17:09,428 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-14 18:17:09,428 INFO L480 AbstractCegarLoop]: Abstraction has 112 states and 126 transitions. [2018-11-14 18:17:09,428 INFO L481 AbstractCegarLoop]: Interpolant automaton has 6 states. [2018-11-14 18:17:09,429 INFO L276 IsEmpty]: Start isEmpty. Operand 112 states and 126 transitions. [2018-11-14 18:17:09,429 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2018-11-14 18:17:09,429 INFO L367 BasicCegarLoop]: Found error trace [2018-11-14 18:17:09,429 INFO L375 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-14 18:17:09,430 INFO L423 AbstractCegarLoop]: === Iteration 12 === [mainErr12ASSERT_VIOLATIONERROR_FUNCTION, mainErr0ASSERT_VIOLATIONERROR_FUNCTION, mainErr7ASSERT_VIOLATIONERROR_FUNCTION, mainErr6ASSERT_VIOLATIONERROR_FUNCTION, mainErr4ASSERT_VIOLATIONERROR_FUNCTION, mainErr8ASSERT_VIOLATIONERROR_FUNCTION, mainErr11ASSERT_VIOLATIONERROR_FUNCTION, mainErr3ASSERT_VIOLATIONERROR_FUNCTION, mainErr9ASSERT_VIOLATIONERROR_FUNCTION, mainErr1ASSERT_VIOLATIONERROR_FUNCTION, mainErr5ASSERT_VIOLATIONERROR_FUNCTION, mainErr10ASSERT_VIOLATIONERROR_FUNCTION, mainErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-14 18:17:09,430 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-14 18:17:09,431 INFO L82 PathProgramCache]: Analyzing trace with hash 172139024, now seen corresponding path program 1 times [2018-11-14 18:17:09,431 INFO L223 ckRefinementStrategy]: Switched to mode CVC4_FPBP [2018-11-14 18:17:09,431 INFO L69 tionRefinementEngine]: Using refinement strategy WolfRefinementStrategy No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/cvc4nyu Starting monitored process 13 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 13 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk [2018-11-14 18:17:09,462 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-14 18:17:09,531 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-14 18:17:09,565 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-14 18:17:09,568 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-14 18:17:09,804 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2018-11-14 18:17:09,830 INFO L267 ElimStorePlain]: Start of recursive call 2: End of recursive call: and 1 xjuncts. [2018-11-14 18:17:09,903 INFO L267 ElimStorePlain]: Start of recursive call 1: 1 dim-1 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:17:09,903 INFO L202 ElimStorePlain]: Needed 2 recursive calls to eliminate 1 variables, input treesize:10, output treesize:9 [2018-11-14 18:17:09,917 WARN L383 uantifierElimination]: Trying to double check SDD result, but SMT solver's response was UNKNOWN. [2018-11-14 18:17:10,223 INFO L700 Elim1Store]: detected not equals via solver [2018-11-14 18:17:10,253 INFO L700 Elim1Store]: detected not equals via solver [2018-11-14 18:17:10,255 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 2 disjoint index pairs (out of 1 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 4 [2018-11-14 18:17:10,256 INFO L267 ElimStorePlain]: Start of recursive call 2: End of recursive call: and 1 xjuncts. [2018-11-14 18:17:10,647 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 2 new quantified variables, introduced 0 case distinctions, treesize of input 343 treesize of output 273 [2018-11-14 18:17:11,518 WARN L179 SmtUtils]: Spent 590.00 ms on a formula simplification. DAG size of input: 52 DAG size of output: 34 [2018-11-14 18:17:11,541 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 9 [2018-11-14 18:17:11,570 INFO L267 ElimStorePlain]: Start of recursive call 4: End of recursive call: and 1 xjuncts. [2018-11-14 18:17:11,744 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 0 case distinctions, treesize of input 105 treesize of output 101 [2018-11-14 18:17:11,770 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 8 treesize of output 7 [2018-11-14 18:17:11,772 INFO L267 ElimStorePlain]: Start of recursive call 6: End of recursive call: and 1 xjuncts. [2018-11-14 18:17:11,857 INFO L700 Elim1Store]: detected not equals via solver [2018-11-14 18:17:11,858 INFO L682 Elim1Store]: detected equality via solver [2018-11-14 18:17:11,955 INFO L303 Elim1Store]: Index analysis took 118 ms [2018-11-14 18:17:11,956 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 3 select indices, 3 select index equivalence classes, 2 disjoint index pairs (out of 3 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 96 treesize of output 132 [2018-11-14 18:17:11,974 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 48 treesize of output 83 [2018-11-14 18:17:11,977 INFO L267 ElimStorePlain]: Start of recursive call 8: End of recursive call: and 1 xjuncts. [2018-11-14 18:17:12,020 INFO L267 ElimStorePlain]: Start of recursive call 7: 1 dim-1 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:17:12,060 INFO L267 ElimStorePlain]: Start of recursive call 5: 1 dim-1 vars, 1 dim-2 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:17:12,112 INFO L267 ElimStorePlain]: Start of recursive call 3: 1 dim-1 vars, 1 dim-2 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:17:12,198 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 2 new quantified variables, introduced 0 case distinctions, treesize of input 218 treesize of output 108 [2018-11-14 18:17:12,586 WARN L179 SmtUtils]: Spent 360.00 ms on a formula simplification that was a NOOP. DAG size: 49 [2018-11-14 18:17:12,598 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 9 [2018-11-14 18:17:12,600 INFO L267 ElimStorePlain]: Start of recursive call 10: End of recursive call: and 1 xjuncts. [2018-11-14 18:17:12,722 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 0 case distinctions, treesize of input 75 treesize of output 71 [2018-11-14 18:17:12,733 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 8 treesize of output 7 [2018-11-14 18:17:12,737 INFO L267 ElimStorePlain]: Start of recursive call 12: End of recursive call: and 1 xjuncts. [2018-11-14 18:17:12,810 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 3 select indices, 3 select index equivalence classes, 1 disjoint index pairs (out of 3 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 66 treesize of output 59 [2018-11-14 18:17:12,819 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 15 [2018-11-14 18:17:12,826 INFO L267 ElimStorePlain]: Start of recursive call 14: End of recursive call: and 1 xjuncts. [2018-11-14 18:17:12,849 INFO L267 ElimStorePlain]: Start of recursive call 13: 1 dim-1 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:17:12,869 INFO L267 ElimStorePlain]: Start of recursive call 11: 1 dim-1 vars, 1 dim-2 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:17:12,895 INFO L267 ElimStorePlain]: Start of recursive call 9: 1 dim-1 vars, 1 dim-2 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:17:12,937 INFO L267 ElimStorePlain]: Start of recursive call 1: 1 dim-0 vars, 1 dim-1 vars, 2 dim-2 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:17:12,937 INFO L202 ElimStorePlain]: Needed 14 recursive calls to eliminate 4 variables, input treesize:356, output treesize:75 [2018-11-14 18:17:13,134 WARN L383 uantifierElimination]: Trying to double check SDD result, but SMT solver's response was UNKNOWN. [2018-11-14 18:17:13,866 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 0 case distinctions, treesize of input 64 treesize of output 48 [2018-11-14 18:17:13,886 INFO L682 Elim1Store]: detected equality via solver [2018-11-14 18:17:13,887 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 3 select indices, 3 select index equivalence classes, 1 disjoint index pairs (out of 3 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 20 treesize of output 11 [2018-11-14 18:17:13,890 INFO L267 ElimStorePlain]: Start of recursive call 3: End of recursive call: and 1 xjuncts. [2018-11-14 18:17:13,911 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 23 treesize of output 11 [2018-11-14 18:17:13,923 INFO L267 ElimStorePlain]: Start of recursive call 4: End of recursive call: and 1 xjuncts. [2018-11-14 18:17:13,931 INFO L267 ElimStorePlain]: Start of recursive call 2: 2 dim-1 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:17:13,958 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 3 new quantified variables, introduced 0 case distinctions, treesize of input 42 treesize of output 27 [2018-11-14 18:17:13,978 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 3 [2018-11-14 18:17:13,979 INFO L267 ElimStorePlain]: Start of recursive call 6: End of recursive call: and 1 xjuncts. [2018-11-14 18:17:13,990 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 4 [2018-11-14 18:17:13,992 INFO L267 ElimStorePlain]: Start of recursive call 7: End of recursive call: and 1 xjuncts. [2018-11-14 18:17:13,994 INFO L267 ElimStorePlain]: Start of recursive call 5: 2 dim-1 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:17:14,000 INFO L267 ElimStorePlain]: Start of recursive call 1: 1 dim-0 vars, 2 dim-2 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:17:14,001 INFO L202 ElimStorePlain]: Needed 7 recursive calls to eliminate 3 variables, input treesize:94, output treesize:7 [2018-11-14 18:17:14,011 WARN L383 uantifierElimination]: Trying to double check SDD result, but SMT solver's response was UNKNOWN. [2018-11-14 18:17:14,032 INFO L256 TraceCheckUtils]: 0: Hoare triple {6029#true} call ULTIMATE.init(); {6029#true} is VALID [2018-11-14 18:17:14,034 INFO L273 TraceCheckUtils]: 1: Hoare triple {6029#true} #NULL.base, #NULL.offset := 0bv32, 0bv32;#valid := #valid[0bv32 := 0bv1]; {6029#true} is VALID [2018-11-14 18:17:14,034 INFO L273 TraceCheckUtils]: 2: Hoare triple {6029#true} assume true; {6029#true} is VALID [2018-11-14 18:17:14,035 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {6029#true} {6029#true} #352#return; {6029#true} is VALID [2018-11-14 18:17:14,035 INFO L256 TraceCheckUtils]: 4: Hoare triple {6029#true} call #t~ret27 := main(); {6029#true} is VALID [2018-11-14 18:17:14,038 INFO L273 TraceCheckUtils]: 5: Hoare triple {6029#true} call #t~malloc0.base, #t~malloc0.offset := #Ultimate.alloc(8bv32);~list~0.base, ~list~0.offset := #t~malloc0.base, #t~malloc0.offset;call write~$Pointer$(0bv32, 0bv32, ~list~0.base, ~list~0.offset, 4bv32); {6049#(and (= (_ bv1 1) (select |#valid| main_~list~0.base)) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:17:14,039 INFO L273 TraceCheckUtils]: 6: Hoare triple {6049#(and (= (_ bv1 1) (select |#valid| main_~list~0.base)) (= main_~list~0.offset (_ bv0 32)))} assume true; {6049#(and (= (_ bv1 1) (select |#valid| main_~list~0.base)) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:17:14,039 INFO L273 TraceCheckUtils]: 7: Hoare triple {6049#(and (= (_ bv1 1) (select |#valid| main_~list~0.base)) (= main_~list~0.offset (_ bv0 32)))} assume !!(~list~0.base != 0bv32 || ~list~0.offset != 0bv32); {6049#(and (= (_ bv1 1) (select |#valid| main_~list~0.base)) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:17:14,039 INFO L273 TraceCheckUtils]: 8: Hoare triple {6049#(and (= (_ bv1 1) (select |#valid| main_~list~0.base)) (= main_~list~0.offset (_ bv0 32)))} assume true; {6049#(and (= (_ bv1 1) (select |#valid| main_~list~0.base)) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:17:14,044 INFO L273 TraceCheckUtils]: 9: Hoare triple {6049#(and (= (_ bv1 1) (select |#valid| main_~list~0.base)) (= main_~list~0.offset (_ bv0 32)))} assume !(#t~nondet1 != 0bv32);havoc #t~nondet1;call #t~malloc2.base, #t~malloc2.offset := #Ultimate.alloc(8bv32);call write~$Pointer$(#t~malloc2.base, #t~malloc2.offset, ~list~0.base, ~bvadd32(4bv32, ~list~0.offset), 4bv32);call #t~mem3.base, #t~mem3.offset := read~$Pointer$(~list~0.base, ~bvadd32(4bv32, ~list~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, #t~mem3.base, #t~mem3.offset, 4bv32);havoc #t~mem3.base, #t~mem3.offset;call #t~mem4.base, #t~mem4.offset := read~$Pointer$(~list~0.base, ~bvadd32(4bv32, ~list~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, #t~mem4.base, ~bvadd32(4bv32, #t~mem4.offset), 4bv32);havoc #t~mem4.base, #t~mem4.offset; {6062#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) main_~list~0.base)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv0 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv4 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv4 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv0 32))) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:17:14,045 INFO L273 TraceCheckUtils]: 10: Hoare triple {6062#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) main_~list~0.base)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv0 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv4 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv4 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv0 32))) (= main_~list~0.offset (_ bv0 32)))} assume true;call #t~mem5.base, #t~mem5.offset := read~$Pointer$(~list~0.base, ~bvadd32(4bv32, ~list~0.offset), 4bv32);#t~short7 := #t~mem5.base != 0bv32 || #t~mem5.offset != 0bv32; {6062#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) main_~list~0.base)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv0 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv4 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv4 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv0 32))) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:17:14,046 INFO L273 TraceCheckUtils]: 11: Hoare triple {6062#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) main_~list~0.base)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv0 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv4 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv4 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv0 32))) (= main_~list~0.offset (_ bv0 32)))} assume #t~short7; {6062#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) main_~list~0.base)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv0 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv4 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv4 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv0 32))) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:17:14,048 INFO L273 TraceCheckUtils]: 12: Hoare triple {6062#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) main_~list~0.base)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv0 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv4 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv4 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv0 32))) (= main_~list~0.offset (_ bv0 32)))} assume !!#t~short7;havoc #t~short7;havoc #t~mem5.base, #t~mem5.offset;havoc #t~mem6.base, #t~mem6.offset; {6062#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) main_~list~0.base)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv0 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv4 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv4 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv0 32))) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:17:14,049 INFO L273 TraceCheckUtils]: 13: Hoare triple {6062#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) main_~list~0.base)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv0 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv4 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv4 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv0 32))) (= main_~list~0.offset (_ bv0 32)))} assume true; {6062#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) main_~list~0.base)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv0 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv4 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv4 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv0 32))) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:17:14,051 INFO L273 TraceCheckUtils]: 14: Hoare triple {6062#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) main_~list~0.base)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv0 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv4 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv4 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv0 32))) (= main_~list~0.offset (_ bv0 32)))} ~end~0.base, ~end~0.offset := ~list~0.base, ~list~0.offset; {6062#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) main_~list~0.base)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv0 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv4 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv4 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv0 32))) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:17:14,053 INFO L273 TraceCheckUtils]: 15: Hoare triple {6062#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) main_~list~0.base)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv0 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv4 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv4 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv0 32))) (= main_~list~0.offset (_ bv0 32)))} assume true; {6062#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) main_~list~0.base)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv0 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv4 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv4 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv0 32))) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:17:14,054 INFO L273 TraceCheckUtils]: 16: Hoare triple {6062#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) main_~list~0.base)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv0 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv4 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv4 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv0 32))) (= main_~list~0.offset (_ bv0 32)))} assume !(#t~nondet8 != 0bv32);havoc #t~nondet8; {6062#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) main_~list~0.base)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv0 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv4 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv4 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv0 32))) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:17:14,056 INFO L273 TraceCheckUtils]: 17: Hoare triple {6062#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) main_~list~0.base)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv0 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv4 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv4 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv0 32))) (= main_~list~0.offset (_ bv0 32)))} ~end~0.base, ~end~0.offset := 0bv32, 0bv32;~end~0.base, ~end~0.offset := ~list~0.base, ~list~0.offset; {6087#(and (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv4 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) main_~end~0.base)) (= main_~end~0.offset (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv4 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)))} is VALID [2018-11-14 18:17:14,058 INFO L273 TraceCheckUtils]: 18: Hoare triple {6087#(and (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv4 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) main_~end~0.base)) (= main_~end~0.offset (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv4 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)))} assume true; {6087#(and (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv4 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) main_~end~0.base)) (= main_~end~0.offset (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv4 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)))} is VALID [2018-11-14 18:17:14,060 INFO L273 TraceCheckUtils]: 19: Hoare triple {6087#(and (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv4 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) main_~end~0.base)) (= main_~end~0.offset (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv4 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)))} assume !!(0bv32 != ~end~0.base || 0bv32 != ~end~0.offset); {6087#(and (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv4 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) main_~end~0.base)) (= main_~end~0.offset (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv4 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)))} is VALID [2018-11-14 18:17:14,061 INFO L273 TraceCheckUtils]: 20: Hoare triple {6087#(and (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv4 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) main_~end~0.base)) (= main_~end~0.offset (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv4 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)))} assume true; {6087#(and (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv4 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) main_~end~0.base)) (= main_~end~0.offset (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv4 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)))} is VALID [2018-11-14 18:17:14,063 INFO L273 TraceCheckUtils]: 21: Hoare triple {6087#(and (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv4 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) main_~end~0.base)) (= main_~end~0.offset (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv4 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)))} assume true; {6087#(and (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv4 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) main_~end~0.base)) (= main_~end~0.offset (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv4 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)))} is VALID [2018-11-14 18:17:14,066 INFO L273 TraceCheckUtils]: 22: Hoare triple {6087#(and (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv4 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) main_~end~0.base)) (= main_~end~0.offset (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv4 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)))} assume !!(0bv32 != ~end~0.base || 0bv32 != ~end~0.offset);~len~0 := 0bv32;call #t~mem18.base, #t~mem18.offset := read~$Pointer$(~end~0.base, ~bvadd32(4bv32, ~end~0.offset), 4bv32);~inner~0.base, ~inner~0.offset := #t~mem18.base, #t~mem18.offset;havoc #t~mem18.base, #t~mem18.offset; {6103#(exists ((main_~end~0.base (_ BitVec 32))) (and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv0 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv0 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv4 32)) (_ bv0 32)) (= main_~inner~0.base (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv4 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) main_~inner~0.offset) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32)) main_~end~0.base))))} is VALID [2018-11-14 18:17:14,066 INFO L273 TraceCheckUtils]: 23: Hoare triple {6103#(exists ((main_~end~0.base (_ BitVec 32))) (and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv0 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv0 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv4 32)) (_ bv0 32)) (= main_~inner~0.base (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv4 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) main_~inner~0.offset) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32)) main_~end~0.base))))} assume true; {6103#(exists ((main_~end~0.base (_ BitVec 32))) (and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv0 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv0 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv4 32)) (_ bv0 32)) (= main_~inner~0.base (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv4 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) main_~inner~0.offset) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32)) main_~end~0.base))))} is VALID [2018-11-14 18:17:14,067 INFO L273 TraceCheckUtils]: 24: Hoare triple {6103#(exists ((main_~end~0.base (_ BitVec 32))) (and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv0 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv0 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv4 32)) (_ bv0 32)) (= main_~inner~0.base (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv4 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) main_~inner~0.offset) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32)) main_~end~0.base))))} assume !!(0bv32 != ~inner~0.base || 0bv32 != ~inner~0.offset); {6103#(exists ((main_~end~0.base (_ BitVec 32))) (and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv0 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv0 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv4 32)) (_ bv0 32)) (= main_~inner~0.base (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv4 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) main_~inner~0.offset) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32)) main_~end~0.base))))} is VALID [2018-11-14 18:17:14,067 INFO L273 TraceCheckUtils]: 25: Hoare triple {6103#(exists ((main_~end~0.base (_ BitVec 32))) (and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv0 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv0 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv4 32)) (_ bv0 32)) (= main_~inner~0.base (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv4 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) main_~inner~0.offset) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32)) main_~end~0.base))))} assume ~len~0 == 0bv32;~len~0 := 1bv32; {6103#(exists ((main_~end~0.base (_ BitVec 32))) (and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv0 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv0 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv4 32)) (_ bv0 32)) (= main_~inner~0.base (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv4 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) main_~inner~0.offset) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32)) main_~end~0.base))))} is VALID [2018-11-14 18:17:14,068 INFO L273 TraceCheckUtils]: 26: Hoare triple {6103#(exists ((main_~end~0.base (_ BitVec 32))) (and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv0 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv0 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv4 32)) (_ bv0 32)) (= main_~inner~0.base (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv4 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) main_~inner~0.offset) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32)) main_~end~0.base))))} assume true; {6103#(exists ((main_~end~0.base (_ BitVec 32))) (and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv0 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv0 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv4 32)) (_ bv0 32)) (= main_~inner~0.base (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv4 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) main_~inner~0.offset) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32)) main_~end~0.base))))} is VALID [2018-11-14 18:17:14,068 INFO L273 TraceCheckUtils]: 27: Hoare triple {6103#(exists ((main_~end~0.base (_ BitVec 32))) (and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv0 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv0 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv4 32)) (_ bv0 32)) (= main_~inner~0.base (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv4 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) main_~inner~0.offset) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32)) main_~end~0.base))))} assume !!(0bv32 != ~inner~0.base || 0bv32 != ~inner~0.offset); {6103#(exists ((main_~end~0.base (_ BitVec 32))) (and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv0 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv0 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv4 32)) (_ bv0 32)) (= main_~inner~0.base (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv4 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) main_~inner~0.offset) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32)) main_~end~0.base))))} is VALID [2018-11-14 18:17:14,069 INFO L273 TraceCheckUtils]: 28: Hoare triple {6103#(exists ((main_~end~0.base (_ BitVec 32))) (and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv0 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv0 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv4 32)) (_ bv0 32)) (= main_~inner~0.base (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv4 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) main_~inner~0.offset) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32)) main_~end~0.base))))} assume true; {6103#(exists ((main_~end~0.base (_ BitVec 32))) (and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv0 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv0 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv4 32)) (_ bv0 32)) (= main_~inner~0.base (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv4 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) main_~inner~0.offset) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32)) main_~end~0.base))))} is VALID [2018-11-14 18:17:14,071 INFO L273 TraceCheckUtils]: 29: Hoare triple {6103#(exists ((main_~end~0.base (_ BitVec 32))) (and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv0 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv0 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv4 32)) (_ bv0 32)) (= main_~inner~0.base (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv4 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) main_~inner~0.offset) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32)) main_~end~0.base))))} assume true;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~inner~0.base, ~bvadd32(4bv32, ~inner~0.offset), 4bv32); {6125#(and (= |main_#t~mem19.base| (_ bv0 32)) (= (_ bv0 32) |main_#t~mem19.offset|))} is VALID [2018-11-14 18:17:14,072 INFO L273 TraceCheckUtils]: 30: Hoare triple {6125#(and (= |main_#t~mem19.base| (_ bv0 32)) (= (_ bv0 32) |main_#t~mem19.offset|))} assume !(0bv32 == #t~mem19.base && 0bv32 == #t~mem19.offset);havoc #t~mem19.base, #t~mem19.offset; {6030#false} is VALID [2018-11-14 18:17:14,072 INFO L273 TraceCheckUtils]: 31: Hoare triple {6030#false} assume !false; {6030#false} is VALID [2018-11-14 18:17:14,083 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-14 18:17:14,084 INFO L312 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2018-11-14 18:17:14,086 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-14 18:17:14,086 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2018-11-14 18:17:14,086 INFO L78 Accepts]: Start accepts. Automaton has 7 states. Word has length 32 [2018-11-14 18:17:14,086 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-14 18:17:14,087 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 7 states. [2018-11-14 18:17:14,204 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 32 edges. 32 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 18:17:14,204 INFO L459 AbstractCegarLoop]: Interpolant automaton has 7 states [2018-11-14 18:17:14,204 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2018-11-14 18:17:14,205 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2018-11-14 18:17:14,205 INFO L87 Difference]: Start difference. First operand 112 states and 126 transitions. Second operand 7 states. [2018-11-14 18:17:17,076 WARN L179 SmtUtils]: Spent 112.00 ms on a formula simplification that was a NOOP. DAG size: 76 [2018-11-14 18:17:19,471 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 18:17:19,471 INFO L93 Difference]: Finished difference Result 278 states and 305 transitions. [2018-11-14 18:17:19,472 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2018-11-14 18:17:19,472 INFO L78 Accepts]: Start accepts. Automaton has 7 states. Word has length 32 [2018-11-14 18:17:19,472 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-14 18:17:19,472 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 7 states. [2018-11-14 18:17:19,475 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11 states to 11 states and 264 transitions. [2018-11-14 18:17:19,475 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 7 states. [2018-11-14 18:17:19,477 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11 states to 11 states and 264 transitions. [2018-11-14 18:17:19,478 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 11 states and 264 transitions. [2018-11-14 18:17:20,471 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 264 edges. 264 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 18:17:20,478 INFO L225 Difference]: With dead ends: 278 [2018-11-14 18:17:20,478 INFO L226 Difference]: Without dead ends: 276 [2018-11-14 18:17:20,478 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 37 GetRequests, 26 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 9 ImplicationChecksByTransitivity, 1.0s TimeCoverageRelationStatistics Valid=54, Invalid=102, Unknown=0, NotChecked=0, Total=156 [2018-11-14 18:17:20,479 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 276 states. [2018-11-14 18:17:20,659 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 276 to 128. [2018-11-14 18:17:20,659 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-14 18:17:20,659 INFO L82 GeneralOperation]: Start isEquivalent. First operand 276 states. Second operand 128 states. [2018-11-14 18:17:20,659 INFO L74 IsIncluded]: Start isIncluded. First operand 276 states. Second operand 128 states. [2018-11-14 18:17:20,660 INFO L87 Difference]: Start difference. First operand 276 states. Second operand 128 states. [2018-11-14 18:17:20,666 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 18:17:20,666 INFO L93 Difference]: Finished difference Result 276 states and 303 transitions. [2018-11-14 18:17:20,666 INFO L276 IsEmpty]: Start isEmpty. Operand 276 states and 303 transitions. [2018-11-14 18:17:20,667 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 18:17:20,667 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 18:17:20,667 INFO L74 IsIncluded]: Start isIncluded. First operand 128 states. Second operand 276 states. [2018-11-14 18:17:20,668 INFO L87 Difference]: Start difference. First operand 128 states. Second operand 276 states. [2018-11-14 18:17:20,674 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 18:17:20,674 INFO L93 Difference]: Finished difference Result 276 states and 303 transitions. [2018-11-14 18:17:20,675 INFO L276 IsEmpty]: Start isEmpty. Operand 276 states and 303 transitions. [2018-11-14 18:17:20,675 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 18:17:20,676 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 18:17:20,676 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-14 18:17:20,676 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-14 18:17:20,676 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 128 states. [2018-11-14 18:17:20,678 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 128 states to 128 states and 144 transitions. [2018-11-14 18:17:20,679 INFO L78 Accepts]: Start accepts. Automaton has 128 states and 144 transitions. Word has length 32 [2018-11-14 18:17:20,679 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-14 18:17:20,679 INFO L480 AbstractCegarLoop]: Abstraction has 128 states and 144 transitions. [2018-11-14 18:17:20,679 INFO L481 AbstractCegarLoop]: Interpolant automaton has 7 states. [2018-11-14 18:17:20,679 INFO L276 IsEmpty]: Start isEmpty. Operand 128 states and 144 transitions. [2018-11-14 18:17:20,680 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 36 [2018-11-14 18:17:20,680 INFO L367 BasicCegarLoop]: Found error trace [2018-11-14 18:17:20,680 INFO L375 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-14 18:17:20,681 INFO L423 AbstractCegarLoop]: === Iteration 13 === [mainErr12ASSERT_VIOLATIONERROR_FUNCTION, mainErr0ASSERT_VIOLATIONERROR_FUNCTION, mainErr7ASSERT_VIOLATIONERROR_FUNCTION, mainErr6ASSERT_VIOLATIONERROR_FUNCTION, mainErr4ASSERT_VIOLATIONERROR_FUNCTION, mainErr8ASSERT_VIOLATIONERROR_FUNCTION, mainErr11ASSERT_VIOLATIONERROR_FUNCTION, mainErr3ASSERT_VIOLATIONERROR_FUNCTION, mainErr9ASSERT_VIOLATIONERROR_FUNCTION, mainErr1ASSERT_VIOLATIONERROR_FUNCTION, mainErr5ASSERT_VIOLATIONERROR_FUNCTION, mainErr10ASSERT_VIOLATIONERROR_FUNCTION, mainErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-14 18:17:20,681 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-14 18:17:20,681 INFO L82 PathProgramCache]: Analyzing trace with hash 6837710, now seen corresponding path program 1 times [2018-11-14 18:17:20,681 INFO L223 ckRefinementStrategy]: Switched to mode CVC4_FPBP [2018-11-14 18:17:20,681 INFO L69 tionRefinementEngine]: Using refinement strategy WolfRefinementStrategy No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/cvc4nyu Starting monitored process 14 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 14 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk [2018-11-14 18:17:20,711 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-14 18:17:20,790 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-14 18:17:20,828 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-14 18:17:20,831 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-14 18:17:21,064 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2018-11-14 18:17:21,093 INFO L267 ElimStorePlain]: Start of recursive call 2: End of recursive call: and 1 xjuncts. [2018-11-14 18:17:21,122 INFO L267 ElimStorePlain]: Start of recursive call 1: 1 dim-1 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:17:21,122 INFO L202 ElimStorePlain]: Needed 2 recursive calls to eliminate 1 variables, input treesize:10, output treesize:9 [2018-11-14 18:17:21,126 WARN L383 uantifierElimination]: Trying to double check SDD result, but SMT solver's response was UNKNOWN. [2018-11-14 18:17:21,213 INFO L700 Elim1Store]: detected not equals via solver [2018-11-14 18:17:21,274 INFO L700 Elim1Store]: detected not equals via solver [2018-11-14 18:17:21,275 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 2 disjoint index pairs (out of 1 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 4 [2018-11-14 18:17:21,276 INFO L267 ElimStorePlain]: Start of recursive call 2: End of recursive call: and 1 xjuncts. [2018-11-14 18:17:21,903 INFO L303 Elim1Store]: Index analysis took 147 ms [2018-11-14 18:17:21,904 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 2 new quantified variables, introduced 0 case distinctions, treesize of input 343 treesize of output 233 [2018-11-14 18:17:24,416 WARN L179 SmtUtils]: Spent 2.49 s on a formula simplification that was a NOOP. DAG size: 54 [2018-11-14 18:17:24,446 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 9 [2018-11-14 18:17:24,447 INFO L267 ElimStorePlain]: Start of recursive call 4: End of recursive call: and 1 xjuncts. [2018-11-14 18:17:24,862 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 0 case distinctions, treesize of input 200 treesize of output 196 [2018-11-14 18:17:24,878 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 8 treesize of output 7 [2018-11-14 18:17:24,881 INFO L267 ElimStorePlain]: Start of recursive call 6: End of recursive call: and 1 xjuncts. [2018-11-14 18:17:25,144 INFO L303 Elim1Store]: Index analysis took 111 ms [2018-11-14 18:17:25,145 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 3 select indices, 3 select index equivalence classes, 1 disjoint index pairs (out of 3 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 191 treesize of output 178 [2018-11-14 18:17:25,170 INFO L700 Elim1Store]: detected not equals via solver [2018-11-14 18:17:25,171 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 50 treesize of output 91 [2018-11-14 18:17:25,173 INFO L267 ElimStorePlain]: Start of recursive call 8: End of recursive call: and 1 xjuncts. [2018-11-14 18:17:25,263 INFO L267 ElimStorePlain]: Start of recursive call 7: 1 dim-1 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:17:25,334 INFO L267 ElimStorePlain]: Start of recursive call 5: 1 dim-1 vars, 1 dim-2 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:17:25,408 INFO L267 ElimStorePlain]: Start of recursive call 3: 1 dim-1 vars, 1 dim-2 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:17:25,517 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 2 new quantified variables, introduced 0 case distinctions, treesize of input 159 treesize of output 89 [2018-11-14 18:17:26,105 WARN L179 SmtUtils]: Spent 256.00 ms on a formula simplification. DAG size of input: 43 DAG size of output: 26 [2018-11-14 18:17:26,110 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 9 [2018-11-14 18:17:26,118 INFO L267 ElimStorePlain]: Start of recursive call 10: End of recursive call: and 1 xjuncts. [2018-11-14 18:17:26,196 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 0 case distinctions, treesize of input 49 treesize of output 51 [2018-11-14 18:17:26,211 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 13 [2018-11-14 18:17:26,215 INFO L267 ElimStorePlain]: Start of recursive call 12: End of recursive call: and 1 xjuncts. [2018-11-14 18:17:26,255 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 46 treesize of output 39 [2018-11-14 18:17:26,264 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 20 treesize of output 27 [2018-11-14 18:17:26,266 INFO L267 ElimStorePlain]: Start of recursive call 14: End of recursive call: and 1 xjuncts. [2018-11-14 18:17:26,281 INFO L267 ElimStorePlain]: Start of recursive call 13: 1 dim-1 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:17:26,297 INFO L267 ElimStorePlain]: Start of recursive call 11: 1 dim-1 vars, 1 dim-2 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:17:26,311 INFO L267 ElimStorePlain]: Start of recursive call 9: 1 dim-1 vars, 1 dim-2 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:17:26,342 INFO L267 ElimStorePlain]: Start of recursive call 1: 1 dim-0 vars, 1 dim-1 vars, 2 dim-2 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:17:26,343 INFO L202 ElimStorePlain]: Needed 14 recursive calls to eliminate 4 variables, input treesize:356, output treesize:75 [2018-11-14 18:17:26,611 WARN L383 uantifierElimination]: Trying to double check SDD result, but SMT solver's response was UNKNOWN. [2018-11-14 18:17:27,472 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 0 case distinctions, treesize of input 60 treesize of output 44 [2018-11-14 18:17:27,487 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 3 select indices, 3 select index equivalence classes, 1 disjoint index pairs (out of 3 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 18 treesize of output 15 [2018-11-14 18:17:27,488 INFO L267 ElimStorePlain]: Start of recursive call 3: End of recursive call: and 1 xjuncts. [2018-11-14 18:17:27,505 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 19 treesize of output 11 [2018-11-14 18:17:27,519 INFO L267 ElimStorePlain]: Start of recursive call 4: End of recursive call: and 1 xjuncts. [2018-11-14 18:17:27,529 INFO L267 ElimStorePlain]: Start of recursive call 2: 2 dim-1 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:17:27,551 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 3 new quantified variables, introduced 0 case distinctions, treesize of input 42 treesize of output 27 [2018-11-14 18:17:27,558 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 3 [2018-11-14 18:17:27,560 INFO L267 ElimStorePlain]: Start of recursive call 6: End of recursive call: and 1 xjuncts. [2018-11-14 18:17:27,573 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 4 [2018-11-14 18:17:27,575 INFO L267 ElimStorePlain]: Start of recursive call 7: End of recursive call: and 1 xjuncts. [2018-11-14 18:17:27,578 INFO L267 ElimStorePlain]: Start of recursive call 5: 2 dim-1 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:17:27,584 INFO L267 ElimStorePlain]: Start of recursive call 1: 1 dim-0 vars, 2 dim-2 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:17:27,585 INFO L202 ElimStorePlain]: Needed 7 recursive calls to eliminate 3 variables, input treesize:90, output treesize:7 [2018-11-14 18:17:27,592 WARN L383 uantifierElimination]: Trying to double check SDD result, but SMT solver's response was UNKNOWN. [2018-11-14 18:17:27,615 INFO L256 TraceCheckUtils]: 0: Hoare triple {7146#true} call ULTIMATE.init(); {7146#true} is VALID [2018-11-14 18:17:27,616 INFO L273 TraceCheckUtils]: 1: Hoare triple {7146#true} #NULL.base, #NULL.offset := 0bv32, 0bv32;#valid := #valid[0bv32 := 0bv1]; {7146#true} is VALID [2018-11-14 18:17:27,616 INFO L273 TraceCheckUtils]: 2: Hoare triple {7146#true} assume true; {7146#true} is VALID [2018-11-14 18:17:27,617 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {7146#true} {7146#true} #352#return; {7146#true} is VALID [2018-11-14 18:17:27,617 INFO L256 TraceCheckUtils]: 4: Hoare triple {7146#true} call #t~ret27 := main(); {7146#true} is VALID [2018-11-14 18:17:27,618 INFO L273 TraceCheckUtils]: 5: Hoare triple {7146#true} call #t~malloc0.base, #t~malloc0.offset := #Ultimate.alloc(8bv32);~list~0.base, ~list~0.offset := #t~malloc0.base, #t~malloc0.offset;call write~$Pointer$(0bv32, 0bv32, ~list~0.base, ~list~0.offset, 4bv32); {7166#(and (= (_ bv1 1) (select |#valid| main_~list~0.base)) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:17:27,619 INFO L273 TraceCheckUtils]: 6: Hoare triple {7166#(and (= (_ bv1 1) (select |#valid| main_~list~0.base)) (= main_~list~0.offset (_ bv0 32)))} assume true; {7166#(and (= (_ bv1 1) (select |#valid| main_~list~0.base)) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:17:27,619 INFO L273 TraceCheckUtils]: 7: Hoare triple {7166#(and (= (_ bv1 1) (select |#valid| main_~list~0.base)) (= main_~list~0.offset (_ bv0 32)))} assume !!(~list~0.base != 0bv32 || ~list~0.offset != 0bv32); {7166#(and (= (_ bv1 1) (select |#valid| main_~list~0.base)) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:17:27,622 INFO L273 TraceCheckUtils]: 8: Hoare triple {7166#(and (= (_ bv1 1) (select |#valid| main_~list~0.base)) (= main_~list~0.offset (_ bv0 32)))} assume true; {7166#(and (= (_ bv1 1) (select |#valid| main_~list~0.base)) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:17:27,627 INFO L273 TraceCheckUtils]: 9: Hoare triple {7166#(and (= (_ bv1 1) (select |#valid| main_~list~0.base)) (= main_~list~0.offset (_ bv0 32)))} assume !(#t~nondet1 != 0bv32);havoc #t~nondet1;call #t~malloc2.base, #t~malloc2.offset := #Ultimate.alloc(8bv32);call write~$Pointer$(#t~malloc2.base, #t~malloc2.offset, ~list~0.base, ~bvadd32(4bv32, ~list~0.offset), 4bv32);call #t~mem3.base, #t~mem3.offset := read~$Pointer$(~list~0.base, ~bvadd32(4bv32, ~list~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, #t~mem3.base, #t~mem3.offset, 4bv32);havoc #t~mem3.base, #t~mem3.offset;call #t~mem4.base, #t~mem4.offset := read~$Pointer$(~list~0.base, ~bvadd32(4bv32, ~list~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, #t~mem4.base, ~bvadd32(4bv32, #t~mem4.offset), 4bv32);havoc #t~mem4.base, #t~mem4.offset; {7179#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) main_~list~0.base)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv0 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv4 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv4 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv0 32))) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:17:27,628 INFO L273 TraceCheckUtils]: 10: Hoare triple {7179#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) main_~list~0.base)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv0 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv4 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv4 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv0 32))) (= main_~list~0.offset (_ bv0 32)))} assume true;call #t~mem5.base, #t~mem5.offset := read~$Pointer$(~list~0.base, ~bvadd32(4bv32, ~list~0.offset), 4bv32);#t~short7 := #t~mem5.base != 0bv32 || #t~mem5.offset != 0bv32; {7179#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) main_~list~0.base)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv0 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv4 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv4 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv0 32))) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:17:27,629 INFO L273 TraceCheckUtils]: 11: Hoare triple {7179#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) main_~list~0.base)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv0 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv4 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv4 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv0 32))) (= main_~list~0.offset (_ bv0 32)))} assume #t~short7; {7179#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) main_~list~0.base)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv0 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv4 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv4 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv0 32))) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:17:27,630 INFO L273 TraceCheckUtils]: 12: Hoare triple {7179#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) main_~list~0.base)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv0 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv4 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv4 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv0 32))) (= main_~list~0.offset (_ bv0 32)))} assume !!#t~short7;havoc #t~short7;havoc #t~mem5.base, #t~mem5.offset;havoc #t~mem6.base, #t~mem6.offset; {7179#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) main_~list~0.base)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv0 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv4 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv4 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv0 32))) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:17:27,639 INFO L273 TraceCheckUtils]: 13: Hoare triple {7179#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) main_~list~0.base)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv0 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv4 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv4 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv0 32))) (= main_~list~0.offset (_ bv0 32)))} assume true; {7179#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) main_~list~0.base)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv0 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv4 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv4 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv0 32))) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:17:27,640 INFO L273 TraceCheckUtils]: 14: Hoare triple {7179#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) main_~list~0.base)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv0 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv4 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv4 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv0 32))) (= main_~list~0.offset (_ bv0 32)))} ~end~0.base, ~end~0.offset := ~list~0.base, ~list~0.offset; {7179#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) main_~list~0.base)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv0 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv4 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv4 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv0 32))) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:17:27,641 INFO L273 TraceCheckUtils]: 15: Hoare triple {7179#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) main_~list~0.base)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv0 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv4 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv4 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv0 32))) (= main_~list~0.offset (_ bv0 32)))} assume true; {7179#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) main_~list~0.base)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv0 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv4 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv4 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv0 32))) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:17:27,642 INFO L273 TraceCheckUtils]: 16: Hoare triple {7179#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) main_~list~0.base)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv0 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv4 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv4 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv0 32))) (= main_~list~0.offset (_ bv0 32)))} assume !(#t~nondet8 != 0bv32);havoc #t~nondet8; {7179#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) main_~list~0.base)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv0 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv4 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv4 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv0 32))) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:17:27,644 INFO L273 TraceCheckUtils]: 17: Hoare triple {7179#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) main_~list~0.base)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv0 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv4 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv4 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (_ bv0 32))) (= main_~list~0.offset (_ bv0 32)))} ~end~0.base, ~end~0.offset := 0bv32, 0bv32;~end~0.base, ~end~0.offset := ~list~0.base, ~list~0.offset; {7204#(and (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv4 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) main_~end~0.base)) (= main_~end~0.offset (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv4 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)))} is VALID [2018-11-14 18:17:27,646 INFO L273 TraceCheckUtils]: 18: Hoare triple {7204#(and (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv4 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) main_~end~0.base)) (= main_~end~0.offset (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv4 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)))} assume true; {7204#(and (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv4 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) main_~end~0.base)) (= main_~end~0.offset (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv4 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)))} is VALID [2018-11-14 18:17:27,648 INFO L273 TraceCheckUtils]: 19: Hoare triple {7204#(and (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv4 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) main_~end~0.base)) (= main_~end~0.offset (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv4 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)))} assume !!(0bv32 != ~end~0.base || 0bv32 != ~end~0.offset); {7204#(and (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv4 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) main_~end~0.base)) (= main_~end~0.offset (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv4 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)))} is VALID [2018-11-14 18:17:27,649 INFO L273 TraceCheckUtils]: 20: Hoare triple {7204#(and (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv4 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) main_~end~0.base)) (= main_~end~0.offset (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv4 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)))} assume true; {7204#(and (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv4 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) main_~end~0.base)) (= main_~end~0.offset (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv4 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)))} is VALID [2018-11-14 18:17:27,651 INFO L273 TraceCheckUtils]: 21: Hoare triple {7204#(and (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv4 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) main_~end~0.base)) (= main_~end~0.offset (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv4 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)))} assume true; {7204#(and (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv4 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) main_~end~0.base)) (= main_~end~0.offset (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv4 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)))} is VALID [2018-11-14 18:17:27,654 INFO L273 TraceCheckUtils]: 22: Hoare triple {7204#(and (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv4 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) main_~end~0.base)) (= main_~end~0.offset (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv4 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)))} assume !!(0bv32 != ~end~0.base || 0bv32 != ~end~0.offset);~len~0 := 0bv32;call #t~mem18.base, #t~mem18.offset := read~$Pointer$(~end~0.base, ~bvadd32(4bv32, ~end~0.offset), 4bv32);~inner~0.base, ~inner~0.offset := #t~mem18.base, #t~mem18.offset;havoc #t~mem18.base, #t~mem18.offset; {7220#(exists ((main_~end~0.base (_ BitVec 32))) (and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv0 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv0 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv4 32)) (_ bv0 32)) (= main_~inner~0.base (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv4 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) main_~inner~0.offset) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32)) main_~end~0.base))))} is VALID [2018-11-14 18:17:27,655 INFO L273 TraceCheckUtils]: 23: Hoare triple {7220#(exists ((main_~end~0.base (_ BitVec 32))) (and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv0 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv0 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv4 32)) (_ bv0 32)) (= main_~inner~0.base (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv4 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) main_~inner~0.offset) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32)) main_~end~0.base))))} assume true; {7220#(exists ((main_~end~0.base (_ BitVec 32))) (and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv0 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv0 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv4 32)) (_ bv0 32)) (= main_~inner~0.base (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv4 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) main_~inner~0.offset) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32)) main_~end~0.base))))} is VALID [2018-11-14 18:17:27,655 INFO L273 TraceCheckUtils]: 24: Hoare triple {7220#(exists ((main_~end~0.base (_ BitVec 32))) (and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv0 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv0 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv4 32)) (_ bv0 32)) (= main_~inner~0.base (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv4 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) main_~inner~0.offset) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32)) main_~end~0.base))))} assume !!(0bv32 != ~inner~0.base || 0bv32 != ~inner~0.offset); {7220#(exists ((main_~end~0.base (_ BitVec 32))) (and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv0 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv0 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv4 32)) (_ bv0 32)) (= main_~inner~0.base (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv4 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) main_~inner~0.offset) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32)) main_~end~0.base))))} is VALID [2018-11-14 18:17:27,656 INFO L273 TraceCheckUtils]: 25: Hoare triple {7220#(exists ((main_~end~0.base (_ BitVec 32))) (and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv0 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv0 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv4 32)) (_ bv0 32)) (= main_~inner~0.base (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv4 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) main_~inner~0.offset) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32)) main_~end~0.base))))} assume ~len~0 == 0bv32;~len~0 := 1bv32; {7220#(exists ((main_~end~0.base (_ BitVec 32))) (and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv0 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv0 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv4 32)) (_ bv0 32)) (= main_~inner~0.base (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv4 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) main_~inner~0.offset) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32)) main_~end~0.base))))} is VALID [2018-11-14 18:17:27,656 INFO L273 TraceCheckUtils]: 26: Hoare triple {7220#(exists ((main_~end~0.base (_ BitVec 32))) (and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv0 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv0 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv4 32)) (_ bv0 32)) (= main_~inner~0.base (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv4 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) main_~inner~0.offset) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32)) main_~end~0.base))))} assume true; {7220#(exists ((main_~end~0.base (_ BitVec 32))) (and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv0 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv0 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv4 32)) (_ bv0 32)) (= main_~inner~0.base (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv4 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) main_~inner~0.offset) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32)) main_~end~0.base))))} is VALID [2018-11-14 18:17:27,656 INFO L273 TraceCheckUtils]: 27: Hoare triple {7220#(exists ((main_~end~0.base (_ BitVec 32))) (and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv0 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv0 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv4 32)) (_ bv0 32)) (= main_~inner~0.base (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv4 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) main_~inner~0.offset) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32)) main_~end~0.base))))} assume !!(0bv32 != ~inner~0.base || 0bv32 != ~inner~0.offset); {7220#(exists ((main_~end~0.base (_ BitVec 32))) (and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv0 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv0 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv4 32)) (_ bv0 32)) (= main_~inner~0.base (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv4 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) main_~inner~0.offset) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32)) main_~end~0.base))))} is VALID [2018-11-14 18:17:27,657 INFO L273 TraceCheckUtils]: 28: Hoare triple {7220#(exists ((main_~end~0.base (_ BitVec 32))) (and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv0 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv0 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv4 32)) (_ bv0 32)) (= main_~inner~0.base (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv4 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) main_~inner~0.offset) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32)) main_~end~0.base))))} assume true; {7220#(exists ((main_~end~0.base (_ BitVec 32))) (and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv0 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv0 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv4 32)) (_ bv0 32)) (= main_~inner~0.base (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv4 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) main_~inner~0.offset) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32)) main_~end~0.base))))} is VALID [2018-11-14 18:17:27,658 INFO L273 TraceCheckUtils]: 29: Hoare triple {7220#(exists ((main_~end~0.base (_ BitVec 32))) (and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv0 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv0 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv4 32)) (_ bv0 32)) (= main_~inner~0.base (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv4 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) main_~inner~0.offset) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32)) main_~end~0.base))))} assume true;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~inner~0.base, ~bvadd32(4bv32, ~inner~0.offset), 4bv32); {7220#(exists ((main_~end~0.base (_ BitVec 32))) (and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv0 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv0 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv4 32)) (_ bv0 32)) (= main_~inner~0.base (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv4 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) main_~inner~0.offset) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32)) main_~end~0.base))))} is VALID [2018-11-14 18:17:27,658 INFO L273 TraceCheckUtils]: 30: Hoare triple {7220#(exists ((main_~end~0.base (_ BitVec 32))) (and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv0 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv0 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv4 32)) (_ bv0 32)) (= main_~inner~0.base (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv4 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) main_~inner~0.offset) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32)) main_~end~0.base))))} assume !!(0bv32 == #t~mem19.base && 0bv32 == #t~mem19.offset);havoc #t~mem19.base, #t~mem19.offset; {7220#(exists ((main_~end~0.base (_ BitVec 32))) (and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv0 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv0 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv4 32)) (_ bv0 32)) (= main_~inner~0.base (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv4 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) main_~inner~0.offset) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32)) main_~end~0.base))))} is VALID [2018-11-14 18:17:27,659 INFO L273 TraceCheckUtils]: 31: Hoare triple {7220#(exists ((main_~end~0.base (_ BitVec 32))) (and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv0 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv0 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv4 32)) (_ bv0 32)) (= main_~inner~0.base (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv4 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) main_~inner~0.offset) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32)) main_~end~0.base))))} assume true; {7220#(exists ((main_~end~0.base (_ BitVec 32))) (and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv0 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv0 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv4 32)) (_ bv0 32)) (= main_~inner~0.base (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv4 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) main_~inner~0.offset) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32)) main_~end~0.base))))} is VALID [2018-11-14 18:17:27,661 INFO L273 TraceCheckUtils]: 32: Hoare triple {7220#(exists ((main_~end~0.base (_ BitVec 32))) (and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv0 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv0 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv4 32)) (_ bv0 32)) (= main_~inner~0.base (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32))) (_ bv4 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) main_~inner~0.offset) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (_ bv4 32)) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (_ bv4 32)) main_~end~0.base))))} assume true;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~inner~0.base, ~inner~0.offset, 4bv32); {7251#(and (= |main_#t~mem20.base| (_ bv0 32)) (= (_ bv0 32) |main_#t~mem20.offset|))} is VALID [2018-11-14 18:17:27,662 INFO L273 TraceCheckUtils]: 33: Hoare triple {7251#(and (= |main_#t~mem20.base| (_ bv0 32)) (= (_ bv0 32) |main_#t~mem20.offset|))} assume !(0bv32 == #t~mem20.base && 0bv32 == #t~mem20.offset);havoc #t~mem20.base, #t~mem20.offset; {7147#false} is VALID [2018-11-14 18:17:27,662 INFO L273 TraceCheckUtils]: 34: Hoare triple {7147#false} assume !false; {7147#false} is VALID [2018-11-14 18:17:27,672 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-14 18:17:27,672 INFO L312 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2018-11-14 18:17:27,673 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-14 18:17:27,673 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2018-11-14 18:17:27,674 INFO L78 Accepts]: Start accepts. Automaton has 7 states. Word has length 35 [2018-11-14 18:17:27,674 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-14 18:17:27,674 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 7 states. [2018-11-14 18:17:27,743 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 35 edges. 35 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 18:17:27,743 INFO L459 AbstractCegarLoop]: Interpolant automaton has 7 states [2018-11-14 18:17:27,744 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2018-11-14 18:17:27,744 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2018-11-14 18:17:27,744 INFO L87 Difference]: Start difference. First operand 128 states and 144 transitions. Second operand 7 states. [2018-11-14 18:17:29,639 WARN L179 SmtUtils]: Spent 101.00 ms on a formula simplification that was a NOOP. DAG size: 72 [2018-11-14 18:17:31,694 WARN L179 SmtUtils]: Spent 123.00 ms on a formula simplification that was a NOOP. DAG size: 76 [2018-11-14 18:17:34,265 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 18:17:34,265 INFO L93 Difference]: Finished difference Result 276 states and 303 transitions. [2018-11-14 18:17:34,265 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2018-11-14 18:17:34,265 INFO L78 Accepts]: Start accepts. Automaton has 7 states. Word has length 35 [2018-11-14 18:17:34,265 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-14 18:17:34,266 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 7 states. [2018-11-14 18:17:34,268 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11 states to 11 states and 262 transitions. [2018-11-14 18:17:34,268 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 7 states. [2018-11-14 18:17:34,270 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11 states to 11 states and 262 transitions. [2018-11-14 18:17:34,270 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 11 states and 262 transitions. [2018-11-14 18:17:35,215 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 262 edges. 262 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 18:17:35,222 INFO L225 Difference]: With dead ends: 276 [2018-11-14 18:17:35,222 INFO L226 Difference]: Without dead ends: 274 [2018-11-14 18:17:35,223 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 40 GetRequests, 29 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 9 ImplicationChecksByTransitivity, 1.1s TimeCoverageRelationStatistics Valid=54, Invalid=102, Unknown=0, NotChecked=0, Total=156 [2018-11-14 18:17:35,223 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 274 states. [2018-11-14 18:17:35,380 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 274 to 131. [2018-11-14 18:17:35,380 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-14 18:17:35,381 INFO L82 GeneralOperation]: Start isEquivalent. First operand 274 states. Second operand 131 states. [2018-11-14 18:17:35,381 INFO L74 IsIncluded]: Start isIncluded. First operand 274 states. Second operand 131 states. [2018-11-14 18:17:35,381 INFO L87 Difference]: Start difference. First operand 274 states. Second operand 131 states. [2018-11-14 18:17:35,388 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 18:17:35,388 INFO L93 Difference]: Finished difference Result 274 states and 301 transitions. [2018-11-14 18:17:35,389 INFO L276 IsEmpty]: Start isEmpty. Operand 274 states and 301 transitions. [2018-11-14 18:17:35,389 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 18:17:35,389 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 18:17:35,389 INFO L74 IsIncluded]: Start isIncluded. First operand 131 states. Second operand 274 states. [2018-11-14 18:17:35,389 INFO L87 Difference]: Start difference. First operand 131 states. Second operand 274 states. [2018-11-14 18:17:35,395 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 18:17:35,396 INFO L93 Difference]: Finished difference Result 274 states and 301 transitions. [2018-11-14 18:17:35,396 INFO L276 IsEmpty]: Start isEmpty. Operand 274 states and 301 transitions. [2018-11-14 18:17:35,396 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 18:17:35,397 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 18:17:35,397 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-14 18:17:35,397 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-14 18:17:35,397 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 131 states. [2018-11-14 18:17:35,399 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 131 states to 131 states and 147 transitions. [2018-11-14 18:17:35,400 INFO L78 Accepts]: Start accepts. Automaton has 131 states and 147 transitions. Word has length 35 [2018-11-14 18:17:35,400 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-14 18:17:35,400 INFO L480 AbstractCegarLoop]: Abstraction has 131 states and 147 transitions. [2018-11-14 18:17:35,400 INFO L481 AbstractCegarLoop]: Interpolant automaton has 7 states. [2018-11-14 18:17:35,400 INFO L276 IsEmpty]: Start isEmpty. Operand 131 states and 147 transitions. [2018-11-14 18:17:35,401 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 38 [2018-11-14 18:17:35,401 INFO L367 BasicCegarLoop]: Found error trace [2018-11-14 18:17:35,401 INFO L375 BasicCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-14 18:17:35,401 INFO L423 AbstractCegarLoop]: === Iteration 14 === [mainErr12ASSERT_VIOLATIONERROR_FUNCTION, mainErr0ASSERT_VIOLATIONERROR_FUNCTION, mainErr7ASSERT_VIOLATIONERROR_FUNCTION, mainErr6ASSERT_VIOLATIONERROR_FUNCTION, mainErr4ASSERT_VIOLATIONERROR_FUNCTION, mainErr8ASSERT_VIOLATIONERROR_FUNCTION, mainErr11ASSERT_VIOLATIONERROR_FUNCTION, mainErr3ASSERT_VIOLATIONERROR_FUNCTION, mainErr9ASSERT_VIOLATIONERROR_FUNCTION, mainErr1ASSERT_VIOLATIONERROR_FUNCTION, mainErr5ASSERT_VIOLATIONERROR_FUNCTION, mainErr10ASSERT_VIOLATIONERROR_FUNCTION, mainErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-14 18:17:35,402 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-14 18:17:35,402 INFO L82 PathProgramCache]: Analyzing trace with hash -6052850, now seen corresponding path program 1 times [2018-11-14 18:17:35,402 INFO L223 ckRefinementStrategy]: Switched to mode CVC4_FPBP [2018-11-14 18:17:35,402 INFO L69 tionRefinementEngine]: Using refinement strategy WolfRefinementStrategy No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/cvc4nyu Starting monitored process 15 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 15 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk [2018-11-14 18:17:35,432 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-14 18:17:35,458 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-14 18:17:35,490 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-14 18:17:35,491 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-14 18:17:35,602 INFO L256 TraceCheckUtils]: 0: Hoare triple {8269#true} call ULTIMATE.init(); {8269#true} is VALID [2018-11-14 18:17:35,602 INFO L273 TraceCheckUtils]: 1: Hoare triple {8269#true} #NULL.base, #NULL.offset := 0bv32, 0bv32;#valid := #valid[0bv32 := 0bv1]; {8269#true} is VALID [2018-11-14 18:17:35,602 INFO L273 TraceCheckUtils]: 2: Hoare triple {8269#true} assume true; {8269#true} is VALID [2018-11-14 18:17:35,603 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {8269#true} {8269#true} #352#return; {8269#true} is VALID [2018-11-14 18:17:35,603 INFO L256 TraceCheckUtils]: 4: Hoare triple {8269#true} call #t~ret27 := main(); {8269#true} is VALID [2018-11-14 18:17:35,603 INFO L273 TraceCheckUtils]: 5: Hoare triple {8269#true} call #t~malloc0.base, #t~malloc0.offset := #Ultimate.alloc(8bv32);~list~0.base, ~list~0.offset := #t~malloc0.base, #t~malloc0.offset;call write~$Pointer$(0bv32, 0bv32, ~list~0.base, ~list~0.offset, 4bv32); {8269#true} is VALID [2018-11-14 18:17:35,603 INFO L273 TraceCheckUtils]: 6: Hoare triple {8269#true} assume true; {8269#true} is VALID [2018-11-14 18:17:35,604 INFO L273 TraceCheckUtils]: 7: Hoare triple {8269#true} assume !!(~list~0.base != 0bv32 || ~list~0.offset != 0bv32); {8269#true} is VALID [2018-11-14 18:17:35,604 INFO L273 TraceCheckUtils]: 8: Hoare triple {8269#true} assume true; {8269#true} is VALID [2018-11-14 18:17:35,604 INFO L273 TraceCheckUtils]: 9: Hoare triple {8269#true} assume #t~nondet1 != 0bv32;havoc #t~nondet1;call write~$Pointer$(0bv32, 0bv32, ~list~0.base, ~bvadd32(4bv32, ~list~0.offset), 4bv32); {8269#true} is VALID [2018-11-14 18:17:35,604 INFO L273 TraceCheckUtils]: 10: Hoare triple {8269#true} assume true;call #t~mem5.base, #t~mem5.offset := read~$Pointer$(~list~0.base, ~bvadd32(4bv32, ~list~0.offset), 4bv32);#t~short7 := #t~mem5.base != 0bv32 || #t~mem5.offset != 0bv32; {8269#true} is VALID [2018-11-14 18:17:35,605 INFO L273 TraceCheckUtils]: 11: Hoare triple {8269#true} assume !#t~short7;call #t~mem6.base, #t~mem6.offset := read~$Pointer$(~list~0.base, ~bvadd32(4bv32, ~list~0.offset), 4bv32);#t~short7 := #t~mem6.base == 0bv32 && #t~mem6.offset == 0bv32; {8269#true} is VALID [2018-11-14 18:17:35,605 INFO L273 TraceCheckUtils]: 12: Hoare triple {8269#true} assume !!#t~short7;havoc #t~short7;havoc #t~mem5.base, #t~mem5.offset;havoc #t~mem6.base, #t~mem6.offset; {8269#true} is VALID [2018-11-14 18:17:35,605 INFO L273 TraceCheckUtils]: 13: Hoare triple {8269#true} assume true; {8269#true} is VALID [2018-11-14 18:17:35,605 INFO L273 TraceCheckUtils]: 14: Hoare triple {8269#true} ~end~0.base, ~end~0.offset := ~list~0.base, ~list~0.offset; {8269#true} is VALID [2018-11-14 18:17:35,605 INFO L273 TraceCheckUtils]: 15: Hoare triple {8269#true} assume true; {8269#true} is VALID [2018-11-14 18:17:35,605 INFO L273 TraceCheckUtils]: 16: Hoare triple {8269#true} assume !(#t~nondet8 != 0bv32);havoc #t~nondet8; {8269#true} is VALID [2018-11-14 18:17:35,605 INFO L273 TraceCheckUtils]: 17: Hoare triple {8269#true} ~end~0.base, ~end~0.offset := 0bv32, 0bv32;~end~0.base, ~end~0.offset := ~list~0.base, ~list~0.offset; {8269#true} is VALID [2018-11-14 18:17:35,606 INFO L273 TraceCheckUtils]: 18: Hoare triple {8269#true} assume true; {8269#true} is VALID [2018-11-14 18:17:35,606 INFO L273 TraceCheckUtils]: 19: Hoare triple {8269#true} assume !!(0bv32 != ~end~0.base || 0bv32 != ~end~0.offset); {8269#true} is VALID [2018-11-14 18:17:35,606 INFO L273 TraceCheckUtils]: 20: Hoare triple {8269#true} assume true; {8269#true} is VALID [2018-11-14 18:17:35,606 INFO L273 TraceCheckUtils]: 21: Hoare triple {8269#true} assume true; {8269#true} is VALID [2018-11-14 18:17:35,606 INFO L273 TraceCheckUtils]: 22: Hoare triple {8269#true} assume !!(0bv32 != ~end~0.base || 0bv32 != ~end~0.offset);~len~0 := 0bv32;call #t~mem18.base, #t~mem18.offset := read~$Pointer$(~end~0.base, ~bvadd32(4bv32, ~end~0.offset), 4bv32);~inner~0.base, ~inner~0.offset := #t~mem18.base, #t~mem18.offset;havoc #t~mem18.base, #t~mem18.offset; {8269#true} is VALID [2018-11-14 18:17:35,606 INFO L273 TraceCheckUtils]: 23: Hoare triple {8269#true} assume true; {8269#true} is VALID [2018-11-14 18:17:35,606 INFO L273 TraceCheckUtils]: 24: Hoare triple {8269#true} assume !(0bv32 != ~inner~0.base || 0bv32 != ~inner~0.offset); {8269#true} is VALID [2018-11-14 18:17:35,607 INFO L273 TraceCheckUtils]: 25: Hoare triple {8269#true} assume true; {8269#true} is VALID [2018-11-14 18:17:35,607 INFO L273 TraceCheckUtils]: 26: Hoare triple {8269#true} assume !!~bvsle32(~len~0, 1bv32); {8269#true} is VALID [2018-11-14 18:17:35,607 INFO L273 TraceCheckUtils]: 27: Hoare triple {8269#true} assume true; {8269#true} is VALID [2018-11-14 18:17:35,607 INFO L273 TraceCheckUtils]: 28: Hoare triple {8269#true} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~end~0.base, ~end~0.offset, 4bv32);~end~0.base, ~end~0.offset := #t~mem22.base, #t~mem22.offset;havoc #t~mem22.base, #t~mem22.offset; {8269#true} is VALID [2018-11-14 18:17:35,607 INFO L273 TraceCheckUtils]: 29: Hoare triple {8269#true} assume true; {8269#true} is VALID [2018-11-14 18:17:35,607 INFO L273 TraceCheckUtils]: 30: Hoare triple {8269#true} assume !(0bv32 != ~end~0.base || 0bv32 != ~end~0.offset); {8269#true} is VALID [2018-11-14 18:17:35,607 INFO L273 TraceCheckUtils]: 31: Hoare triple {8269#true} assume true; {8269#true} is VALID [2018-11-14 18:17:35,608 INFO L273 TraceCheckUtils]: 32: Hoare triple {8269#true} assume !!(0bv32 != ~list~0.base || 0bv32 != ~list~0.offset);call #t~mem23.base, #t~mem23.offset := read~$Pointer$(~list~0.base, ~bvadd32(4bv32, ~list~0.offset), 4bv32);~end~0.base, ~end~0.offset := #t~mem23.base, #t~mem23.offset;havoc #t~mem23.base, #t~mem23.offset; {8269#true} is VALID [2018-11-14 18:17:35,608 INFO L273 TraceCheckUtils]: 33: Hoare triple {8269#true} assume 0bv32 != ~end~0.base || 0bv32 != ~end~0.offset; {8373#(or (not (= main_~end~0.offset (_ bv0 32))) (not (= (_ bv0 32) main_~end~0.base)))} is VALID [2018-11-14 18:17:35,609 INFO L273 TraceCheckUtils]: 34: Hoare triple {8373#(or (not (= main_~end~0.offset (_ bv0 32))) (not (= (_ bv0 32) main_~end~0.base)))} assume true; {8373#(or (not (= main_~end~0.offset (_ bv0 32))) (not (= (_ bv0 32) main_~end~0.base)))} is VALID [2018-11-14 18:17:35,609 INFO L273 TraceCheckUtils]: 35: Hoare triple {8373#(or (not (= main_~end~0.offset (_ bv0 32))) (not (= (_ bv0 32) main_~end~0.base)))} assume !(0bv32 != ~end~0.base || 0bv32 != ~end~0.offset); {8270#false} is VALID [2018-11-14 18:17:35,609 INFO L273 TraceCheckUtils]: 36: Hoare triple {8270#false} assume !false; {8270#false} is VALID [2018-11-14 18:17:35,610 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2018-11-14 18:17:35,610 INFO L312 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2018-11-14 18:17:35,611 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-14 18:17:35,611 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-14 18:17:35,612 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 37 [2018-11-14 18:17:35,612 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-14 18:17:35,612 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states. [2018-11-14 18:17:35,646 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 36 edges. 36 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 18:17:35,647 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-14 18:17:35,647 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-14 18:17:35,647 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-14 18:17:35,648 INFO L87 Difference]: Start difference. First operand 131 states and 147 transitions. Second operand 3 states. [2018-11-14 18:17:36,151 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 18:17:36,151 INFO L93 Difference]: Finished difference Result 132 states and 148 transitions. [2018-11-14 18:17:36,151 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-14 18:17:36,151 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 37 [2018-11-14 18:17:36,152 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-14 18:17:36,152 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2018-11-14 18:17:36,154 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 92 transitions. [2018-11-14 18:17:36,154 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2018-11-14 18:17:36,155 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 92 transitions. [2018-11-14 18:17:36,155 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 92 transitions. [2018-11-14 18:17:36,447 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 92 edges. 92 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 18:17:36,450 INFO L225 Difference]: With dead ends: 132 [2018-11-14 18:17:36,450 INFO L226 Difference]: Without dead ends: 130 [2018-11-14 18:17:36,451 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 36 GetRequests, 35 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-14 18:17:36,451 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 130 states. [2018-11-14 18:17:36,610 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 130 to 129. [2018-11-14 18:17:36,610 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-14 18:17:36,610 INFO L82 GeneralOperation]: Start isEquivalent. First operand 130 states. Second operand 129 states. [2018-11-14 18:17:36,610 INFO L74 IsIncluded]: Start isIncluded. First operand 130 states. Second operand 129 states. [2018-11-14 18:17:36,610 INFO L87 Difference]: Start difference. First operand 130 states. Second operand 129 states. [2018-11-14 18:17:36,613 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 18:17:36,613 INFO L93 Difference]: Finished difference Result 130 states and 146 transitions. [2018-11-14 18:17:36,614 INFO L276 IsEmpty]: Start isEmpty. Operand 130 states and 146 transitions. [2018-11-14 18:17:36,614 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 18:17:36,614 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 18:17:36,614 INFO L74 IsIncluded]: Start isIncluded. First operand 129 states. Second operand 130 states. [2018-11-14 18:17:36,614 INFO L87 Difference]: Start difference. First operand 129 states. Second operand 130 states. [2018-11-14 18:17:36,617 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 18:17:36,617 INFO L93 Difference]: Finished difference Result 130 states and 146 transitions. [2018-11-14 18:17:36,617 INFO L276 IsEmpty]: Start isEmpty. Operand 130 states and 146 transitions. [2018-11-14 18:17:36,617 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 18:17:36,618 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 18:17:36,618 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-14 18:17:36,618 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-14 18:17:36,618 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 129 states. [2018-11-14 18:17:36,620 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 129 states to 129 states and 145 transitions. [2018-11-14 18:17:36,620 INFO L78 Accepts]: Start accepts. Automaton has 129 states and 145 transitions. Word has length 37 [2018-11-14 18:17:36,620 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-14 18:17:36,621 INFO L480 AbstractCegarLoop]: Abstraction has 129 states and 145 transitions. [2018-11-14 18:17:36,621 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-14 18:17:36,621 INFO L276 IsEmpty]: Start isEmpty. Operand 129 states and 145 transitions. [2018-11-14 18:17:36,621 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 41 [2018-11-14 18:17:36,621 INFO L367 BasicCegarLoop]: Found error trace [2018-11-14 18:17:36,622 INFO L375 BasicCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-14 18:17:36,622 INFO L423 AbstractCegarLoop]: === Iteration 15 === [mainErr12ASSERT_VIOLATIONERROR_FUNCTION, mainErr0ASSERT_VIOLATIONERROR_FUNCTION, mainErr7ASSERT_VIOLATIONERROR_FUNCTION, mainErr6ASSERT_VIOLATIONERROR_FUNCTION, mainErr4ASSERT_VIOLATIONERROR_FUNCTION, mainErr8ASSERT_VIOLATIONERROR_FUNCTION, mainErr11ASSERT_VIOLATIONERROR_FUNCTION, mainErr3ASSERT_VIOLATIONERROR_FUNCTION, mainErr9ASSERT_VIOLATIONERROR_FUNCTION, mainErr1ASSERT_VIOLATIONERROR_FUNCTION, mainErr5ASSERT_VIOLATIONERROR_FUNCTION, mainErr10ASSERT_VIOLATIONERROR_FUNCTION, mainErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-14 18:17:36,622 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-14 18:17:36,622 INFO L82 PathProgramCache]: Analyzing trace with hash 72374686, now seen corresponding path program 1 times [2018-11-14 18:17:36,623 INFO L223 ckRefinementStrategy]: Switched to mode CVC4_FPBP [2018-11-14 18:17:36,623 INFO L69 tionRefinementEngine]: Using refinement strategy WolfRefinementStrategy No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/cvc4nyu Starting monitored process 16 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 16 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk [2018-11-14 18:17:36,647 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-14 18:17:36,690 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-14 18:17:36,702 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-14 18:17:36,703 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-14 18:17:36,894 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 19 treesize of output 15 [2018-11-14 18:17:36,899 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 3 [2018-11-14 18:17:36,900 INFO L267 ElimStorePlain]: Start of recursive call 3: End of recursive call: and 1 xjuncts. [2018-11-14 18:17:36,904 INFO L267 ElimStorePlain]: Start of recursive call 2: 1 dim-1 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:17:36,919 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 19 treesize of output 15 [2018-11-14 18:17:36,924 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 3 [2018-11-14 18:17:36,927 INFO L267 ElimStorePlain]: Start of recursive call 5: End of recursive call: and 1 xjuncts. [2018-11-14 18:17:36,928 INFO L267 ElimStorePlain]: Start of recursive call 4: 1 dim-1 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:17:36,933 INFO L267 ElimStorePlain]: Start of recursive call 1: 2 dim-0 vars, 2 dim-2 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:17:36,934 INFO L202 ElimStorePlain]: Needed 5 recursive calls to eliminate 4 variables, input treesize:37, output treesize:7 [2018-11-14 18:17:36,941 WARN L383 uantifierElimination]: Trying to double check SDD result, but SMT solver's response was UNKNOWN. [2018-11-14 18:17:36,967 INFO L256 TraceCheckUtils]: 0: Hoare triple {8941#true} call ULTIMATE.init(); {8941#true} is VALID [2018-11-14 18:17:36,967 INFO L273 TraceCheckUtils]: 1: Hoare triple {8941#true} #NULL.base, #NULL.offset := 0bv32, 0bv32;#valid := #valid[0bv32 := 0bv1]; {8941#true} is VALID [2018-11-14 18:17:36,967 INFO L273 TraceCheckUtils]: 2: Hoare triple {8941#true} assume true; {8941#true} is VALID [2018-11-14 18:17:36,967 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {8941#true} {8941#true} #352#return; {8941#true} is VALID [2018-11-14 18:17:36,967 INFO L256 TraceCheckUtils]: 4: Hoare triple {8941#true} call #t~ret27 := main(); {8941#true} is VALID [2018-11-14 18:17:36,967 INFO L273 TraceCheckUtils]: 5: Hoare triple {8941#true} call #t~malloc0.base, #t~malloc0.offset := #Ultimate.alloc(8bv32);~list~0.base, ~list~0.offset := #t~malloc0.base, #t~malloc0.offset;call write~$Pointer$(0bv32, 0bv32, ~list~0.base, ~list~0.offset, 4bv32); {8941#true} is VALID [2018-11-14 18:17:36,968 INFO L273 TraceCheckUtils]: 6: Hoare triple {8941#true} assume true; {8941#true} is VALID [2018-11-14 18:17:36,968 INFO L273 TraceCheckUtils]: 7: Hoare triple {8941#true} assume !!(~list~0.base != 0bv32 || ~list~0.offset != 0bv32); {8941#true} is VALID [2018-11-14 18:17:36,968 INFO L273 TraceCheckUtils]: 8: Hoare triple {8941#true} assume true; {8941#true} is VALID [2018-11-14 18:17:36,968 INFO L273 TraceCheckUtils]: 9: Hoare triple {8941#true} assume #t~nondet1 != 0bv32;havoc #t~nondet1;call write~$Pointer$(0bv32, 0bv32, ~list~0.base, ~bvadd32(4bv32, ~list~0.offset), 4bv32); {8941#true} is VALID [2018-11-14 18:17:36,969 INFO L273 TraceCheckUtils]: 10: Hoare triple {8941#true} assume true;call #t~mem5.base, #t~mem5.offset := read~$Pointer$(~list~0.base, ~bvadd32(4bv32, ~list~0.offset), 4bv32);#t~short7 := #t~mem5.base != 0bv32 || #t~mem5.offset != 0bv32; {8976#(or (and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (not |main_#t~short7|)) (and |main_#t~short7| (or (not (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32))) (not (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32))))))} is VALID [2018-11-14 18:17:36,971 INFO L273 TraceCheckUtils]: 11: Hoare triple {8976#(or (and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (not |main_#t~short7|)) (and |main_#t~short7| (or (not (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32))) (not (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32))))))} assume !#t~short7;call #t~mem6.base, #t~mem6.offset := read~$Pointer$(~list~0.base, ~bvadd32(4bv32, ~list~0.offset), 4bv32);#t~short7 := #t~mem6.base == 0bv32 && #t~mem6.offset == 0bv32; {8980#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)))} is VALID [2018-11-14 18:17:36,972 INFO L273 TraceCheckUtils]: 12: Hoare triple {8980#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)))} assume !!#t~short7;havoc #t~short7;havoc #t~mem5.base, #t~mem5.offset;havoc #t~mem6.base, #t~mem6.offset; {8980#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)))} is VALID [2018-11-14 18:17:36,972 INFO L273 TraceCheckUtils]: 13: Hoare triple {8980#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)))} assume true; {8980#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)))} is VALID [2018-11-14 18:17:36,973 INFO L273 TraceCheckUtils]: 14: Hoare triple {8980#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)))} ~end~0.base, ~end~0.offset := ~list~0.base, ~list~0.offset; {8980#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)))} is VALID [2018-11-14 18:17:36,974 INFO L273 TraceCheckUtils]: 15: Hoare triple {8980#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)))} assume true; {8980#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)))} is VALID [2018-11-14 18:17:36,975 INFO L273 TraceCheckUtils]: 16: Hoare triple {8980#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)))} assume !(#t~nondet8 != 0bv32);havoc #t~nondet8; {8980#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)))} is VALID [2018-11-14 18:17:36,976 INFO L273 TraceCheckUtils]: 17: Hoare triple {8980#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)))} ~end~0.base, ~end~0.offset := 0bv32, 0bv32;~end~0.base, ~end~0.offset := ~list~0.base, ~list~0.offset; {8980#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)))} is VALID [2018-11-14 18:17:36,976 INFO L273 TraceCheckUtils]: 18: Hoare triple {8980#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)))} assume true; {8980#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)))} is VALID [2018-11-14 18:17:36,977 INFO L273 TraceCheckUtils]: 19: Hoare triple {8980#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)))} assume !!(0bv32 != ~end~0.base || 0bv32 != ~end~0.offset); {8980#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)))} is VALID [2018-11-14 18:17:36,978 INFO L273 TraceCheckUtils]: 20: Hoare triple {8980#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)))} assume true; {8980#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)))} is VALID [2018-11-14 18:17:36,979 INFO L273 TraceCheckUtils]: 21: Hoare triple {8980#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)))} assume true; {8980#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)))} is VALID [2018-11-14 18:17:36,980 INFO L273 TraceCheckUtils]: 22: Hoare triple {8980#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)))} assume !!(0bv32 != ~end~0.base || 0bv32 != ~end~0.offset);~len~0 := 0bv32;call #t~mem18.base, #t~mem18.offset := read~$Pointer$(~end~0.base, ~bvadd32(4bv32, ~end~0.offset), 4bv32);~inner~0.base, ~inner~0.offset := #t~mem18.base, #t~mem18.offset;havoc #t~mem18.base, #t~mem18.offset; {8980#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)))} is VALID [2018-11-14 18:17:36,984 INFO L273 TraceCheckUtils]: 23: Hoare triple {8980#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)))} assume true; {8980#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)))} is VALID [2018-11-14 18:17:36,985 INFO L273 TraceCheckUtils]: 24: Hoare triple {8980#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)))} assume !(0bv32 != ~inner~0.base || 0bv32 != ~inner~0.offset); {8980#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)))} is VALID [2018-11-14 18:17:36,988 INFO L273 TraceCheckUtils]: 25: Hoare triple {8980#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)))} assume true; {8980#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)))} is VALID [2018-11-14 18:17:36,989 INFO L273 TraceCheckUtils]: 26: Hoare triple {8980#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)))} assume !!~bvsle32(~len~0, 1bv32); {8980#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)))} is VALID [2018-11-14 18:17:36,991 INFO L273 TraceCheckUtils]: 27: Hoare triple {8980#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)))} assume true; {8980#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)))} is VALID [2018-11-14 18:17:36,992 INFO L273 TraceCheckUtils]: 28: Hoare triple {8980#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)))} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~end~0.base, ~end~0.offset, 4bv32);~end~0.base, ~end~0.offset := #t~mem22.base, #t~mem22.offset;havoc #t~mem22.base, #t~mem22.offset; {8980#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)))} is VALID [2018-11-14 18:17:36,992 INFO L273 TraceCheckUtils]: 29: Hoare triple {8980#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)))} assume true; {8980#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)))} is VALID [2018-11-14 18:17:36,993 INFO L273 TraceCheckUtils]: 30: Hoare triple {8980#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)))} assume !(0bv32 != ~end~0.base || 0bv32 != ~end~0.offset); {8980#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)))} is VALID [2018-11-14 18:17:36,993 INFO L273 TraceCheckUtils]: 31: Hoare triple {8980#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)))} assume true; {8980#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)))} is VALID [2018-11-14 18:17:36,994 INFO L273 TraceCheckUtils]: 32: Hoare triple {8980#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)))} assume !!(0bv32 != ~list~0.base || 0bv32 != ~list~0.offset);call #t~mem23.base, #t~mem23.offset := read~$Pointer$(~list~0.base, ~bvadd32(4bv32, ~list~0.offset), 4bv32);~end~0.base, ~end~0.offset := #t~mem23.base, #t~mem23.offset;havoc #t~mem23.base, #t~mem23.offset; {9044#(and (= (_ bv0 32) main_~end~0.base) (= main_~end~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:17:36,994 INFO L273 TraceCheckUtils]: 33: Hoare triple {9044#(and (= (_ bv0 32) main_~end~0.base) (= main_~end~0.offset (_ bv0 32)))} assume 0bv32 != ~end~0.base || 0bv32 != ~end~0.offset; {8942#false} is VALID [2018-11-14 18:17:36,995 INFO L273 TraceCheckUtils]: 34: Hoare triple {8942#false} assume true; {8942#false} is VALID [2018-11-14 18:17:36,995 INFO L273 TraceCheckUtils]: 35: Hoare triple {8942#false} assume !!(0bv32 != ~end~0.base || 0bv32 != ~end~0.offset); {8942#false} is VALID [2018-11-14 18:17:36,995 INFO L273 TraceCheckUtils]: 36: Hoare triple {8942#false} assume true; {8942#false} is VALID [2018-11-14 18:17:36,995 INFO L273 TraceCheckUtils]: 37: Hoare triple {8942#false} assume true;call #t~mem24.base, #t~mem24.offset := read~$Pointer$(~end~0.base, ~bvadd32(4bv32, ~end~0.offset), 4bv32); {8942#false} is VALID [2018-11-14 18:17:36,996 INFO L273 TraceCheckUtils]: 38: Hoare triple {8942#false} assume !(0bv32 == #t~mem24.base && 0bv32 == #t~mem24.offset);havoc #t~mem24.base, #t~mem24.offset; {8942#false} is VALID [2018-11-14 18:17:36,996 INFO L273 TraceCheckUtils]: 39: Hoare triple {8942#false} assume !false; {8942#false} is VALID [2018-11-14 18:17:36,999 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2018-11-14 18:17:37,000 INFO L312 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2018-11-14 18:17:37,001 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-14 18:17:37,001 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-14 18:17:37,001 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 40 [2018-11-14 18:17:37,002 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-14 18:17:37,002 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states. [2018-11-14 18:17:37,058 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 39 edges. 39 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 18:17:37,058 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2018-11-14 18:17:37,058 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-14 18:17:37,058 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-14 18:17:37,059 INFO L87 Difference]: Start difference. First operand 129 states and 145 transitions. Second operand 5 states. [2018-11-14 18:17:38,948 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 18:17:38,949 INFO L93 Difference]: Finished difference Result 213 states and 237 transitions. [2018-11-14 18:17:38,949 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2018-11-14 18:17:38,949 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 40 [2018-11-14 18:17:38,949 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-14 18:17:38,949 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2018-11-14 18:17:38,953 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 150 transitions. [2018-11-14 18:17:38,953 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2018-11-14 18:17:38,956 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 150 transitions. [2018-11-14 18:17:38,956 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 7 states and 150 transitions. [2018-11-14 18:17:39,168 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 150 edges. 150 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 18:17:39,174 INFO L225 Difference]: With dead ends: 213 [2018-11-14 18:17:39,174 INFO L226 Difference]: Without dead ends: 195 [2018-11-14 18:17:39,175 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 41 GetRequests, 36 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2018-11-14 18:17:39,175 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 195 states. [2018-11-14 18:17:39,457 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 195 to 186. [2018-11-14 18:17:39,458 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-14 18:17:39,458 INFO L82 GeneralOperation]: Start isEquivalent. First operand 195 states. Second operand 186 states. [2018-11-14 18:17:39,458 INFO L74 IsIncluded]: Start isIncluded. First operand 195 states. Second operand 186 states. [2018-11-14 18:17:39,458 INFO L87 Difference]: Start difference. First operand 195 states. Second operand 186 states. [2018-11-14 18:17:39,465 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 18:17:39,465 INFO L93 Difference]: Finished difference Result 195 states and 217 transitions. [2018-11-14 18:17:39,465 INFO L276 IsEmpty]: Start isEmpty. Operand 195 states and 217 transitions. [2018-11-14 18:17:39,466 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 18:17:39,466 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 18:17:39,466 INFO L74 IsIncluded]: Start isIncluded. First operand 186 states. Second operand 195 states. [2018-11-14 18:17:39,466 INFO L87 Difference]: Start difference. First operand 186 states. Second operand 195 states. [2018-11-14 18:17:39,474 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 18:17:39,474 INFO L93 Difference]: Finished difference Result 195 states and 217 transitions. [2018-11-14 18:17:39,474 INFO L276 IsEmpty]: Start isEmpty. Operand 195 states and 217 transitions. [2018-11-14 18:17:39,475 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 18:17:39,475 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 18:17:39,475 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-14 18:17:39,475 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-14 18:17:39,475 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 186 states. [2018-11-14 18:17:39,482 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 186 states to 186 states and 211 transitions. [2018-11-14 18:17:39,482 INFO L78 Accepts]: Start accepts. Automaton has 186 states and 211 transitions. Word has length 40 [2018-11-14 18:17:39,482 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-14 18:17:39,482 INFO L480 AbstractCegarLoop]: Abstraction has 186 states and 211 transitions. [2018-11-14 18:17:39,482 INFO L481 AbstractCegarLoop]: Interpolant automaton has 5 states. [2018-11-14 18:17:39,482 INFO L276 IsEmpty]: Start isEmpty. Operand 186 states and 211 transitions. [2018-11-14 18:17:39,483 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 41 [2018-11-14 18:17:39,483 INFO L367 BasicCegarLoop]: Found error trace [2018-11-14 18:17:39,483 INFO L375 BasicCegarLoop]: trace histogram [2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-14 18:17:39,484 INFO L423 AbstractCegarLoop]: === Iteration 16 === [mainErr12ASSERT_VIOLATIONERROR_FUNCTION, mainErr0ASSERT_VIOLATIONERROR_FUNCTION, mainErr7ASSERT_VIOLATIONERROR_FUNCTION, mainErr6ASSERT_VIOLATIONERROR_FUNCTION, mainErr4ASSERT_VIOLATIONERROR_FUNCTION, mainErr8ASSERT_VIOLATIONERROR_FUNCTION, mainErr11ASSERT_VIOLATIONERROR_FUNCTION, mainErr3ASSERT_VIOLATIONERROR_FUNCTION, mainErr9ASSERT_VIOLATIONERROR_FUNCTION, mainErr1ASSERT_VIOLATIONERROR_FUNCTION, mainErr5ASSERT_VIOLATIONERROR_FUNCTION, mainErr10ASSERT_VIOLATIONERROR_FUNCTION, mainErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-14 18:17:39,484 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-14 18:17:39,484 INFO L82 PathProgramCache]: Analyzing trace with hash 1246002617, now seen corresponding path program 1 times [2018-11-14 18:17:39,485 INFO L223 ckRefinementStrategy]: Switched to mode CVC4_FPBP [2018-11-14 18:17:39,485 INFO L69 tionRefinementEngine]: Using refinement strategy WolfRefinementStrategy No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/cvc4nyu Starting monitored process 17 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 17 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk [2018-11-14 18:17:39,517 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-14 18:17:39,586 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-14 18:17:39,613 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-14 18:17:39,614 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-14 18:17:39,650 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 8 [2018-11-14 18:17:39,657 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 8 treesize of output 7 [2018-11-14 18:17:39,661 INFO L267 ElimStorePlain]: Start of recursive call 3: End of recursive call: and 1 xjuncts. [2018-11-14 18:17:39,664 INFO L267 ElimStorePlain]: Start of recursive call 2: 1 dim-1 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:17:39,683 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 8 [2018-11-14 18:17:39,691 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 8 treesize of output 7 [2018-11-14 18:17:39,693 INFO L267 ElimStorePlain]: Start of recursive call 5: End of recursive call: and 1 xjuncts. [2018-11-14 18:17:39,697 INFO L267 ElimStorePlain]: Start of recursive call 4: 1 dim-1 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:17:39,709 INFO L267 ElimStorePlain]: Start of recursive call 1: 2 dim-2 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:17:39,709 INFO L202 ElimStorePlain]: Needed 5 recursive calls to eliminate 2 variables, input treesize:26, output treesize:18 [2018-11-14 18:17:39,775 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 21 treesize of output 16 [2018-11-14 18:17:39,785 INFO L700 Elim1Store]: detected not equals via solver [2018-11-14 18:17:39,786 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 23 [2018-11-14 18:17:39,790 INFO L267 ElimStorePlain]: Start of recursive call 3: End of recursive call: and 1 xjuncts. [2018-11-14 18:17:39,802 INFO L267 ElimStorePlain]: Start of recursive call 2: 1 dim-1 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:17:39,835 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 21 treesize of output 16 [2018-11-14 18:17:39,846 INFO L700 Elim1Store]: detected not equals via solver [2018-11-14 18:17:39,848 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 23 [2018-11-14 18:17:39,851 INFO L267 ElimStorePlain]: Start of recursive call 5: End of recursive call: and 1 xjuncts. [2018-11-14 18:17:39,862 INFO L267 ElimStorePlain]: Start of recursive call 4: 1 dim-1 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:17:39,878 INFO L267 ElimStorePlain]: Start of recursive call 1: 2 dim-2 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:17:39,878 INFO L202 ElimStorePlain]: Needed 5 recursive calls to eliminate 2 variables, input treesize:44, output treesize:36 [2018-11-14 18:17:40,091 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 22 treesize of output 16 [2018-11-14 18:17:40,097 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 3 [2018-11-14 18:17:40,099 INFO L267 ElimStorePlain]: Start of recursive call 3: End of recursive call: and 1 xjuncts. [2018-11-14 18:17:40,103 INFO L267 ElimStorePlain]: Start of recursive call 2: 1 dim-1 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:17:40,118 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 22 treesize of output 16 [2018-11-14 18:17:40,123 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 3 [2018-11-14 18:17:40,124 INFO L267 ElimStorePlain]: Start of recursive call 5: End of recursive call: and 1 xjuncts. [2018-11-14 18:17:40,127 INFO L267 ElimStorePlain]: Start of recursive call 4: 1 dim-1 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:17:40,133 INFO L267 ElimStorePlain]: Start of recursive call 1: 1 dim-0 vars, 2 dim-2 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:17:40,134 INFO L202 ElimStorePlain]: Needed 5 recursive calls to eliminate 3 variables, input treesize:43, output treesize:7 [2018-11-14 18:17:40,141 WARN L383 uantifierElimination]: Trying to double check SDD result, but SMT solver's response was UNKNOWN. [2018-11-14 18:17:40,163 INFO L256 TraceCheckUtils]: 0: Hoare triple {9911#true} call ULTIMATE.init(); {9911#true} is VALID [2018-11-14 18:17:40,163 INFO L273 TraceCheckUtils]: 1: Hoare triple {9911#true} #NULL.base, #NULL.offset := 0bv32, 0bv32;#valid := #valid[0bv32 := 0bv1]; {9911#true} is VALID [2018-11-14 18:17:40,164 INFO L273 TraceCheckUtils]: 2: Hoare triple {9911#true} assume true; {9911#true} is VALID [2018-11-14 18:17:40,164 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {9911#true} {9911#true} #352#return; {9911#true} is VALID [2018-11-14 18:17:40,164 INFO L256 TraceCheckUtils]: 4: Hoare triple {9911#true} call #t~ret27 := main(); {9911#true} is VALID [2018-11-14 18:17:40,166 INFO L273 TraceCheckUtils]: 5: Hoare triple {9911#true} call #t~malloc0.base, #t~malloc0.offset := #Ultimate.alloc(8bv32);~list~0.base, ~list~0.offset := #t~malloc0.base, #t~malloc0.offset;call write~$Pointer$(0bv32, 0bv32, ~list~0.base, ~list~0.offset, 4bv32); {9931#(and (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:17:40,167 INFO L273 TraceCheckUtils]: 6: Hoare triple {9931#(and (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= main_~list~0.offset (_ bv0 32)))} assume true; {9931#(and (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:17:40,168 INFO L273 TraceCheckUtils]: 7: Hoare triple {9931#(and (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= main_~list~0.offset (_ bv0 32)))} assume !!(~list~0.base != 0bv32 || ~list~0.offset != 0bv32); {9931#(and (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:17:40,169 INFO L273 TraceCheckUtils]: 8: Hoare triple {9931#(and (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= main_~list~0.offset (_ bv0 32)))} assume true; {9931#(and (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:17:40,171 INFO L273 TraceCheckUtils]: 9: Hoare triple {9931#(and (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= main_~list~0.offset (_ bv0 32)))} assume #t~nondet1 != 0bv32;havoc #t~nondet1;call write~$Pointer$(0bv32, 0bv32, ~list~0.base, ~bvadd32(4bv32, ~list~0.offset), 4bv32); {9944#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:17:40,172 INFO L273 TraceCheckUtils]: 10: Hoare triple {9944#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= main_~list~0.offset (_ bv0 32)))} assume true;call #t~mem5.base, #t~mem5.offset := read~$Pointer$(~list~0.base, ~bvadd32(4bv32, ~list~0.offset), 4bv32);#t~short7 := #t~mem5.base != 0bv32 || #t~mem5.offset != 0bv32; {9944#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:17:40,173 INFO L273 TraceCheckUtils]: 11: Hoare triple {9944#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= main_~list~0.offset (_ bv0 32)))} assume !#t~short7;call #t~mem6.base, #t~mem6.offset := read~$Pointer$(~list~0.base, ~bvadd32(4bv32, ~list~0.offset), 4bv32);#t~short7 := #t~mem6.base == 0bv32 && #t~mem6.offset == 0bv32; {9944#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:17:40,174 INFO L273 TraceCheckUtils]: 12: Hoare triple {9944#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= main_~list~0.offset (_ bv0 32)))} assume !!#t~short7;havoc #t~short7;havoc #t~mem5.base, #t~mem5.offset;havoc #t~mem6.base, #t~mem6.offset; {9944#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:17:40,175 INFO L273 TraceCheckUtils]: 13: Hoare triple {9944#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= main_~list~0.offset (_ bv0 32)))} assume true; {9944#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:17:40,177 INFO L273 TraceCheckUtils]: 14: Hoare triple {9944#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= main_~list~0.offset (_ bv0 32)))} ~end~0.base, ~end~0.offset := ~list~0.base, ~list~0.offset; {9944#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:17:40,178 INFO L273 TraceCheckUtils]: 15: Hoare triple {9944#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= main_~list~0.offset (_ bv0 32)))} assume true; {9944#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:17:40,179 INFO L273 TraceCheckUtils]: 16: Hoare triple {9944#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= main_~list~0.offset (_ bv0 32)))} assume !(#t~nondet8 != 0bv32);havoc #t~nondet8; {9944#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:17:40,181 INFO L273 TraceCheckUtils]: 17: Hoare triple {9944#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= main_~list~0.offset (_ bv0 32)))} ~end~0.base, ~end~0.offset := 0bv32, 0bv32;~end~0.base, ~end~0.offset := ~list~0.base, ~list~0.offset; {9969#(and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (= main_~end~0.offset (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)))} is VALID [2018-11-14 18:17:40,182 INFO L273 TraceCheckUtils]: 18: Hoare triple {9969#(and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (= main_~end~0.offset (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)))} assume true; {9969#(and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (= main_~end~0.offset (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)))} is VALID [2018-11-14 18:17:40,183 INFO L273 TraceCheckUtils]: 19: Hoare triple {9969#(and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (= main_~end~0.offset (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)))} assume !!(0bv32 != ~end~0.base || 0bv32 != ~end~0.offset); {9969#(and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (= main_~end~0.offset (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)))} is VALID [2018-11-14 18:17:40,184 INFO L273 TraceCheckUtils]: 20: Hoare triple {9969#(and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (= main_~end~0.offset (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)))} assume true; {9969#(and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (= main_~end~0.offset (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)))} is VALID [2018-11-14 18:17:40,185 INFO L273 TraceCheckUtils]: 21: Hoare triple {9969#(and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (= main_~end~0.offset (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)))} assume true; {9969#(and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (= main_~end~0.offset (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)))} is VALID [2018-11-14 18:17:40,186 INFO L273 TraceCheckUtils]: 22: Hoare triple {9969#(and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (= main_~end~0.offset (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)))} assume !!(0bv32 != ~end~0.base || 0bv32 != ~end~0.offset);~len~0 := 0bv32;call #t~mem18.base, #t~mem18.offset := read~$Pointer$(~end~0.base, ~bvadd32(4bv32, ~end~0.offset), 4bv32);~inner~0.base, ~inner~0.offset := #t~mem18.base, #t~mem18.offset;havoc #t~mem18.base, #t~mem18.offset; {9969#(and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (= main_~end~0.offset (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)))} is VALID [2018-11-14 18:17:40,187 INFO L273 TraceCheckUtils]: 23: Hoare triple {9969#(and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (= main_~end~0.offset (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)))} assume true; {9969#(and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (= main_~end~0.offset (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)))} is VALID [2018-11-14 18:17:40,188 INFO L273 TraceCheckUtils]: 24: Hoare triple {9969#(and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (= main_~end~0.offset (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)))} assume !(0bv32 != ~inner~0.base || 0bv32 != ~inner~0.offset); {9969#(and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (= main_~end~0.offset (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)))} is VALID [2018-11-14 18:17:40,189 INFO L273 TraceCheckUtils]: 25: Hoare triple {9969#(and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (= main_~end~0.offset (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)))} assume true; {9969#(and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (= main_~end~0.offset (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)))} is VALID [2018-11-14 18:17:40,190 INFO L273 TraceCheckUtils]: 26: Hoare triple {9969#(and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (= main_~end~0.offset (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)))} assume !!~bvsle32(~len~0, 1bv32); {9969#(and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (= main_~end~0.offset (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)))} is VALID [2018-11-14 18:17:40,191 INFO L273 TraceCheckUtils]: 27: Hoare triple {9969#(and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (= main_~end~0.offset (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)))} assume true; {9969#(and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (= main_~end~0.offset (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)))} is VALID [2018-11-14 18:17:40,192 INFO L273 TraceCheckUtils]: 28: Hoare triple {9969#(and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (= main_~end~0.offset (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)))} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~end~0.base, ~end~0.offset, 4bv32);~end~0.base, ~end~0.offset := #t~mem22.base, #t~mem22.offset;havoc #t~mem22.base, #t~mem22.offset; {10003#(and (= (_ bv0 32) main_~end~0.base) (= main_~end~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:17:40,193 INFO L273 TraceCheckUtils]: 29: Hoare triple {10003#(and (= (_ bv0 32) main_~end~0.base) (= main_~end~0.offset (_ bv0 32)))} assume true; {10003#(and (= (_ bv0 32) main_~end~0.base) (= main_~end~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:17:40,194 INFO L273 TraceCheckUtils]: 30: Hoare triple {10003#(and (= (_ bv0 32) main_~end~0.base) (= main_~end~0.offset (_ bv0 32)))} assume !!(0bv32 != ~end~0.base || 0bv32 != ~end~0.offset);~len~0 := 0bv32;call #t~mem18.base, #t~mem18.offset := read~$Pointer$(~end~0.base, ~bvadd32(4bv32, ~end~0.offset), 4bv32);~inner~0.base, ~inner~0.offset := #t~mem18.base, #t~mem18.offset;havoc #t~mem18.base, #t~mem18.offset; {9912#false} is VALID [2018-11-14 18:17:40,194 INFO L273 TraceCheckUtils]: 31: Hoare triple {9912#false} assume true; {9912#false} is VALID [2018-11-14 18:17:40,194 INFO L273 TraceCheckUtils]: 32: Hoare triple {9912#false} assume !!(0bv32 != ~inner~0.base || 0bv32 != ~inner~0.offset); {9912#false} is VALID [2018-11-14 18:17:40,194 INFO L273 TraceCheckUtils]: 33: Hoare triple {9912#false} assume ~len~0 == 0bv32;~len~0 := 1bv32; {9912#false} is VALID [2018-11-14 18:17:40,195 INFO L273 TraceCheckUtils]: 34: Hoare triple {9912#false} assume true; {9912#false} is VALID [2018-11-14 18:17:40,195 INFO L273 TraceCheckUtils]: 35: Hoare triple {9912#false} assume !!(0bv32 != ~inner~0.base || 0bv32 != ~inner~0.offset); {9912#false} is VALID [2018-11-14 18:17:40,195 INFO L273 TraceCheckUtils]: 36: Hoare triple {9912#false} assume true; {9912#false} is VALID [2018-11-14 18:17:40,195 INFO L273 TraceCheckUtils]: 37: Hoare triple {9912#false} assume true;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~inner~0.base, ~bvadd32(4bv32, ~inner~0.offset), 4bv32); {9912#false} is VALID [2018-11-14 18:17:40,196 INFO L273 TraceCheckUtils]: 38: Hoare triple {9912#false} assume !(0bv32 == #t~mem19.base && 0bv32 == #t~mem19.offset);havoc #t~mem19.base, #t~mem19.offset; {9912#false} is VALID [2018-11-14 18:17:40,196 INFO L273 TraceCheckUtils]: 39: Hoare triple {9912#false} assume !false; {9912#false} is VALID [2018-11-14 18:17:40,202 INFO L134 CoverageAnalysis]: Checked inductivity of 4 backedges. 2 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-14 18:17:40,202 INFO L316 TraceCheckSpWp]: Computing backward predicates... [2018-11-14 18:17:40,397 INFO L273 TraceCheckUtils]: 39: Hoare triple {9912#false} assume !false; {9912#false} is VALID [2018-11-14 18:17:40,398 INFO L273 TraceCheckUtils]: 38: Hoare triple {9912#false} assume !(0bv32 == #t~mem19.base && 0bv32 == #t~mem19.offset);havoc #t~mem19.base, #t~mem19.offset; {9912#false} is VALID [2018-11-14 18:17:40,398 INFO L273 TraceCheckUtils]: 37: Hoare triple {9912#false} assume true;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~inner~0.base, ~bvadd32(4bv32, ~inner~0.offset), 4bv32); {9912#false} is VALID [2018-11-14 18:17:40,398 INFO L273 TraceCheckUtils]: 36: Hoare triple {9912#false} assume true; {9912#false} is VALID [2018-11-14 18:17:40,398 INFO L273 TraceCheckUtils]: 35: Hoare triple {9912#false} assume !!(0bv32 != ~inner~0.base || 0bv32 != ~inner~0.offset); {9912#false} is VALID [2018-11-14 18:17:40,398 INFO L273 TraceCheckUtils]: 34: Hoare triple {9912#false} assume true; {9912#false} is VALID [2018-11-14 18:17:40,399 INFO L273 TraceCheckUtils]: 33: Hoare triple {9912#false} assume ~len~0 == 0bv32;~len~0 := 1bv32; {9912#false} is VALID [2018-11-14 18:17:40,399 INFO L273 TraceCheckUtils]: 32: Hoare triple {9912#false} assume !!(0bv32 != ~inner~0.base || 0bv32 != ~inner~0.offset); {9912#false} is VALID [2018-11-14 18:17:40,399 INFO L273 TraceCheckUtils]: 31: Hoare triple {9912#false} assume true; {9912#false} is VALID [2018-11-14 18:17:40,400 INFO L273 TraceCheckUtils]: 30: Hoare triple {10003#(and (= (_ bv0 32) main_~end~0.base) (= main_~end~0.offset (_ bv0 32)))} assume !!(0bv32 != ~end~0.base || 0bv32 != ~end~0.offset);~len~0 := 0bv32;call #t~mem18.base, #t~mem18.offset := read~$Pointer$(~end~0.base, ~bvadd32(4bv32, ~end~0.offset), 4bv32);~inner~0.base, ~inner~0.offset := #t~mem18.base, #t~mem18.offset;havoc #t~mem18.base, #t~mem18.offset; {9912#false} is VALID [2018-11-14 18:17:40,400 INFO L273 TraceCheckUtils]: 29: Hoare triple {10003#(and (= (_ bv0 32) main_~end~0.base) (= main_~end~0.offset (_ bv0 32)))} assume true; {10003#(and (= (_ bv0 32) main_~end~0.base) (= main_~end~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:17:40,401 INFO L273 TraceCheckUtils]: 28: Hoare triple {10070#(and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)))} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~end~0.base, ~end~0.offset, 4bv32);~end~0.base, ~end~0.offset := #t~mem22.base, #t~mem22.offset;havoc #t~mem22.base, #t~mem22.offset; {10003#(and (= (_ bv0 32) main_~end~0.base) (= main_~end~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:17:40,401 INFO L273 TraceCheckUtils]: 27: Hoare triple {10070#(and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)))} assume true; {10070#(and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)))} is VALID [2018-11-14 18:17:40,402 INFO L273 TraceCheckUtils]: 26: Hoare triple {10070#(and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)))} assume !!~bvsle32(~len~0, 1bv32); {10070#(and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)))} is VALID [2018-11-14 18:17:40,402 INFO L273 TraceCheckUtils]: 25: Hoare triple {10070#(and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)))} assume true; {10070#(and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)))} is VALID [2018-11-14 18:17:40,403 INFO L273 TraceCheckUtils]: 24: Hoare triple {10070#(and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)))} assume !(0bv32 != ~inner~0.base || 0bv32 != ~inner~0.offset); {10070#(and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)))} is VALID [2018-11-14 18:17:40,404 INFO L273 TraceCheckUtils]: 23: Hoare triple {10070#(and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)))} assume true; {10070#(and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)))} is VALID [2018-11-14 18:17:40,405 INFO L273 TraceCheckUtils]: 22: Hoare triple {10070#(and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)))} assume !!(0bv32 != ~end~0.base || 0bv32 != ~end~0.offset);~len~0 := 0bv32;call #t~mem18.base, #t~mem18.offset := read~$Pointer$(~end~0.base, ~bvadd32(4bv32, ~end~0.offset), 4bv32);~inner~0.base, ~inner~0.offset := #t~mem18.base, #t~mem18.offset;havoc #t~mem18.base, #t~mem18.offset; {10070#(and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)))} is VALID [2018-11-14 18:17:40,405 INFO L273 TraceCheckUtils]: 21: Hoare triple {10070#(and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)))} assume true; {10070#(and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)))} is VALID [2018-11-14 18:17:40,406 INFO L273 TraceCheckUtils]: 20: Hoare triple {10070#(and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)))} assume true; {10070#(and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)))} is VALID [2018-11-14 18:17:40,407 INFO L273 TraceCheckUtils]: 19: Hoare triple {10070#(and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)))} assume !!(0bv32 != ~end~0.base || 0bv32 != ~end~0.offset); {10070#(and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)))} is VALID [2018-11-14 18:17:40,408 INFO L273 TraceCheckUtils]: 18: Hoare triple {10070#(and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)))} assume true; {10070#(and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)))} is VALID [2018-11-14 18:17:40,409 INFO L273 TraceCheckUtils]: 17: Hoare triple {10104#(and (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)))} ~end~0.base, ~end~0.offset := 0bv32, 0bv32;~end~0.base, ~end~0.offset := ~list~0.base, ~list~0.offset; {10070#(and (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)))} is VALID [2018-11-14 18:17:40,410 INFO L273 TraceCheckUtils]: 16: Hoare triple {10104#(and (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)))} assume !(#t~nondet8 != 0bv32);havoc #t~nondet8; {10104#(and (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)))} is VALID [2018-11-14 18:17:40,410 INFO L273 TraceCheckUtils]: 15: Hoare triple {10104#(and (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)))} assume true; {10104#(and (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)))} is VALID [2018-11-14 18:17:40,411 INFO L273 TraceCheckUtils]: 14: Hoare triple {10104#(and (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)))} ~end~0.base, ~end~0.offset := ~list~0.base, ~list~0.offset; {10104#(and (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)))} is VALID [2018-11-14 18:17:40,412 INFO L273 TraceCheckUtils]: 13: Hoare triple {10104#(and (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)))} assume true; {10104#(and (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)))} is VALID [2018-11-14 18:17:40,413 INFO L273 TraceCheckUtils]: 12: Hoare triple {10104#(and (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)))} assume !!#t~short7;havoc #t~short7;havoc #t~mem5.base, #t~mem5.offset;havoc #t~mem6.base, #t~mem6.offset; {10104#(and (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)))} is VALID [2018-11-14 18:17:40,414 INFO L273 TraceCheckUtils]: 11: Hoare triple {10104#(and (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)))} assume !#t~short7;call #t~mem6.base, #t~mem6.offset := read~$Pointer$(~list~0.base, ~bvadd32(4bv32, ~list~0.offset), 4bv32);#t~short7 := #t~mem6.base == 0bv32 && #t~mem6.offset == 0bv32; {10104#(and (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)))} is VALID [2018-11-14 18:17:40,415 INFO L273 TraceCheckUtils]: 10: Hoare triple {10104#(and (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)))} assume true;call #t~mem5.base, #t~mem5.offset := read~$Pointer$(~list~0.base, ~bvadd32(4bv32, ~list~0.offset), 4bv32);#t~short7 := #t~mem5.base != 0bv32 || #t~mem5.offset != 0bv32; {10104#(and (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)))} is VALID [2018-11-14 18:17:40,417 INFO L273 TraceCheckUtils]: 9: Hoare triple {10104#(and (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)))} assume #t~nondet1 != 0bv32;havoc #t~nondet1;call write~$Pointer$(0bv32, 0bv32, ~list~0.base, ~bvadd32(4bv32, ~list~0.offset), 4bv32); {10104#(and (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)))} is VALID [2018-11-14 18:17:40,418 INFO L273 TraceCheckUtils]: 8: Hoare triple {10104#(and (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)))} assume true; {10104#(and (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)))} is VALID [2018-11-14 18:17:40,419 INFO L273 TraceCheckUtils]: 7: Hoare triple {10104#(and (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)))} assume !!(~list~0.base != 0bv32 || ~list~0.offset != 0bv32); {10104#(and (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)))} is VALID [2018-11-14 18:17:40,419 INFO L273 TraceCheckUtils]: 6: Hoare triple {10104#(and (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)))} assume true; {10104#(and (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)))} is VALID [2018-11-14 18:17:40,421 INFO L273 TraceCheckUtils]: 5: Hoare triple {9911#true} call #t~malloc0.base, #t~malloc0.offset := #Ultimate.alloc(8bv32);~list~0.base, ~list~0.offset := #t~malloc0.base, #t~malloc0.offset;call write~$Pointer$(0bv32, 0bv32, ~list~0.base, ~list~0.offset, 4bv32); {10104#(and (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)))} is VALID [2018-11-14 18:17:40,422 INFO L256 TraceCheckUtils]: 4: Hoare triple {9911#true} call #t~ret27 := main(); {9911#true} is VALID [2018-11-14 18:17:40,422 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {9911#true} {9911#true} #352#return; {9911#true} is VALID [2018-11-14 18:17:40,422 INFO L273 TraceCheckUtils]: 2: Hoare triple {9911#true} assume true; {9911#true} is VALID [2018-11-14 18:17:40,422 INFO L273 TraceCheckUtils]: 1: Hoare triple {9911#true} #NULL.base, #NULL.offset := 0bv32, 0bv32;#valid := #valid[0bv32 := 0bv1]; {9911#true} is VALID [2018-11-14 18:17:40,423 INFO L256 TraceCheckUtils]: 0: Hoare triple {9911#true} call ULTIMATE.init(); {9911#true} is VALID [2018-11-14 18:17:40,426 INFO L134 CoverageAnalysis]: Checked inductivity of 4 backedges. 2 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-14 18:17:40,428 INFO L312 seRefinementStrategy]: Constructing automaton from 0 perfect and 2 imperfect interpolant sequences. [2018-11-14 18:17:40,428 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [6, 5] total 8 [2018-11-14 18:17:40,428 INFO L78 Accepts]: Start accepts. Automaton has 8 states. Word has length 40 [2018-11-14 18:17:40,429 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-14 18:17:40,429 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 8 states. [2018-11-14 18:17:40,521 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 64 edges. 64 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 18:17:40,521 INFO L459 AbstractCegarLoop]: Interpolant automaton has 8 states [2018-11-14 18:17:40,521 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2018-11-14 18:17:40,521 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=17, Invalid=39, Unknown=0, NotChecked=0, Total=56 [2018-11-14 18:17:40,521 INFO L87 Difference]: Start difference. First operand 186 states and 211 transitions. Second operand 8 states. [2018-11-14 18:17:44,000 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 18:17:44,000 INFO L93 Difference]: Finished difference Result 315 states and 356 transitions. [2018-11-14 18:17:44,000 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2018-11-14 18:17:44,000 INFO L78 Accepts]: Start accepts. Automaton has 8 states. Word has length 40 [2018-11-14 18:17:44,000 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-14 18:17:44,001 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 8 states. [2018-11-14 18:17:44,005 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10 states to 10 states and 216 transitions. [2018-11-14 18:17:44,005 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 8 states. [2018-11-14 18:17:44,009 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10 states to 10 states and 216 transitions. [2018-11-14 18:17:44,009 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 10 states and 216 transitions. [2018-11-14 18:17:44,337 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 216 edges. 216 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 18:17:44,342 INFO L225 Difference]: With dead ends: 315 [2018-11-14 18:17:44,343 INFO L226 Difference]: Without dead ends: 240 [2018-11-14 18:17:44,343 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 83 GetRequests, 72 SyntacticMatches, 1 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 15 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=42, Invalid=90, Unknown=0, NotChecked=0, Total=132 [2018-11-14 18:17:44,344 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 240 states. [2018-11-14 18:17:44,647 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 240 to 204. [2018-11-14 18:17:44,647 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-14 18:17:44,648 INFO L82 GeneralOperation]: Start isEquivalent. First operand 240 states. Second operand 204 states. [2018-11-14 18:17:44,648 INFO L74 IsIncluded]: Start isIncluded. First operand 240 states. Second operand 204 states. [2018-11-14 18:17:44,648 INFO L87 Difference]: Start difference. First operand 240 states. Second operand 204 states. [2018-11-14 18:17:44,655 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 18:17:44,655 INFO L93 Difference]: Finished difference Result 240 states and 266 transitions. [2018-11-14 18:17:44,655 INFO L276 IsEmpty]: Start isEmpty. Operand 240 states and 266 transitions. [2018-11-14 18:17:44,656 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 18:17:44,656 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 18:17:44,656 INFO L74 IsIncluded]: Start isIncluded. First operand 204 states. Second operand 240 states. [2018-11-14 18:17:44,656 INFO L87 Difference]: Start difference. First operand 204 states. Second operand 240 states. [2018-11-14 18:17:44,662 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 18:17:44,662 INFO L93 Difference]: Finished difference Result 240 states and 266 transitions. [2018-11-14 18:17:44,662 INFO L276 IsEmpty]: Start isEmpty. Operand 240 states and 266 transitions. [2018-11-14 18:17:44,663 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 18:17:44,663 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 18:17:44,663 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-14 18:17:44,664 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-14 18:17:44,664 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 204 states. [2018-11-14 18:17:44,668 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 204 states to 204 states and 232 transitions. [2018-11-14 18:17:44,668 INFO L78 Accepts]: Start accepts. Automaton has 204 states and 232 transitions. Word has length 40 [2018-11-14 18:17:44,669 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-14 18:17:44,669 INFO L480 AbstractCegarLoop]: Abstraction has 204 states and 232 transitions. [2018-11-14 18:17:44,669 INFO L481 AbstractCegarLoop]: Interpolant automaton has 8 states. [2018-11-14 18:17:44,669 INFO L276 IsEmpty]: Start isEmpty. Operand 204 states and 232 transitions. [2018-11-14 18:17:44,669 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 41 [2018-11-14 18:17:44,670 INFO L367 BasicCegarLoop]: Found error trace [2018-11-14 18:17:44,670 INFO L375 BasicCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-14 18:17:44,670 INFO L423 AbstractCegarLoop]: === Iteration 17 === [mainErr12ASSERT_VIOLATIONERROR_FUNCTION, mainErr0ASSERT_VIOLATIONERROR_FUNCTION, mainErr7ASSERT_VIOLATIONERROR_FUNCTION, mainErr6ASSERT_VIOLATIONERROR_FUNCTION, mainErr4ASSERT_VIOLATIONERROR_FUNCTION, mainErr8ASSERT_VIOLATIONERROR_FUNCTION, mainErr11ASSERT_VIOLATIONERROR_FUNCTION, mainErr3ASSERT_VIOLATIONERROR_FUNCTION, mainErr9ASSERT_VIOLATIONERROR_FUNCTION, mainErr1ASSERT_VIOLATIONERROR_FUNCTION, mainErr5ASSERT_VIOLATIONERROR_FUNCTION, mainErr10ASSERT_VIOLATIONERROR_FUNCTION, mainErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-14 18:17:44,670 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-14 18:17:44,671 INFO L82 PathProgramCache]: Analyzing trace with hash -612228834, now seen corresponding path program 1 times [2018-11-14 18:17:44,671 INFO L223 ckRefinementStrategy]: Switched to mode CVC4_FPBP [2018-11-14 18:17:44,671 INFO L69 tionRefinementEngine]: Using refinement strategy WolfRefinementStrategy No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/cvc4nyu Starting monitored process 18 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 18 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk [2018-11-14 18:17:44,699 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-14 18:17:44,741 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-14 18:17:44,755 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-14 18:17:44,756 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-14 18:17:44,923 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 11 [2018-11-14 18:17:44,938 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 3 [2018-11-14 18:17:44,939 INFO L267 ElimStorePlain]: Start of recursive call 3: End of recursive call: and 1 xjuncts. [2018-11-14 18:17:44,943 INFO L267 ElimStorePlain]: Start of recursive call 2: 1 dim-1 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:17:44,955 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 11 [2018-11-14 18:17:44,959 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 3 [2018-11-14 18:17:44,961 INFO L267 ElimStorePlain]: Start of recursive call 5: End of recursive call: and 1 xjuncts. [2018-11-14 18:17:44,963 INFO L267 ElimStorePlain]: Start of recursive call 4: 1 dim-1 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:17:44,970 INFO L267 ElimStorePlain]: Start of recursive call 1: 1 dim-0 vars, 2 dim-2 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:17:44,970 INFO L202 ElimStorePlain]: Needed 5 recursive calls to eliminate 3 variables, input treesize:29, output treesize:7 [2018-11-14 18:17:44,975 WARN L383 uantifierElimination]: Trying to double check SDD result, but SMT solver's response was UNKNOWN. [2018-11-14 18:17:44,993 INFO L256 TraceCheckUtils]: 0: Hoare triple {11223#true} call ULTIMATE.init(); {11223#true} is VALID [2018-11-14 18:17:44,993 INFO L273 TraceCheckUtils]: 1: Hoare triple {11223#true} #NULL.base, #NULL.offset := 0bv32, 0bv32;#valid := #valid[0bv32 := 0bv1]; {11223#true} is VALID [2018-11-14 18:17:44,994 INFO L273 TraceCheckUtils]: 2: Hoare triple {11223#true} assume true; {11223#true} is VALID [2018-11-14 18:17:44,994 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {11223#true} {11223#true} #352#return; {11223#true} is VALID [2018-11-14 18:17:44,994 INFO L256 TraceCheckUtils]: 4: Hoare triple {11223#true} call #t~ret27 := main(); {11223#true} is VALID [2018-11-14 18:17:44,995 INFO L273 TraceCheckUtils]: 5: Hoare triple {11223#true} call #t~malloc0.base, #t~malloc0.offset := #Ultimate.alloc(8bv32);~list~0.base, ~list~0.offset := #t~malloc0.base, #t~malloc0.offset;call write~$Pointer$(0bv32, 0bv32, ~list~0.base, ~list~0.offset, 4bv32); {11243#(= main_~list~0.offset (_ bv0 32))} is VALID [2018-11-14 18:17:44,996 INFO L273 TraceCheckUtils]: 6: Hoare triple {11243#(= main_~list~0.offset (_ bv0 32))} assume true; {11243#(= main_~list~0.offset (_ bv0 32))} is VALID [2018-11-14 18:17:44,996 INFO L273 TraceCheckUtils]: 7: Hoare triple {11243#(= main_~list~0.offset (_ bv0 32))} assume !!(~list~0.base != 0bv32 || ~list~0.offset != 0bv32); {11243#(= main_~list~0.offset (_ bv0 32))} is VALID [2018-11-14 18:17:44,996 INFO L273 TraceCheckUtils]: 8: Hoare triple {11243#(= main_~list~0.offset (_ bv0 32))} assume true; {11243#(= main_~list~0.offset (_ bv0 32))} is VALID [2018-11-14 18:17:44,997 INFO L273 TraceCheckUtils]: 9: Hoare triple {11243#(= main_~list~0.offset (_ bv0 32))} assume !(#t~nondet1 != 0bv32);havoc #t~nondet1;call #t~malloc2.base, #t~malloc2.offset := #Ultimate.alloc(8bv32);call write~$Pointer$(#t~malloc2.base, #t~malloc2.offset, ~list~0.base, ~bvadd32(4bv32, ~list~0.offset), 4bv32);call #t~mem3.base, #t~mem3.offset := read~$Pointer$(~list~0.base, ~bvadd32(4bv32, ~list~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, #t~mem3.base, #t~mem3.offset, 4bv32);havoc #t~mem3.base, #t~mem3.offset;call #t~mem4.base, #t~mem4.offset := read~$Pointer$(~list~0.base, ~bvadd32(4bv32, ~list~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, #t~mem4.base, ~bvadd32(4bv32, #t~mem4.offset), 4bv32);havoc #t~mem4.base, #t~mem4.offset; {11243#(= main_~list~0.offset (_ bv0 32))} is VALID [2018-11-14 18:17:44,997 INFO L273 TraceCheckUtils]: 10: Hoare triple {11243#(= main_~list~0.offset (_ bv0 32))} assume true;call #t~mem5.base, #t~mem5.offset := read~$Pointer$(~list~0.base, ~bvadd32(4bv32, ~list~0.offset), 4bv32);#t~short7 := #t~mem5.base != 0bv32 || #t~mem5.offset != 0bv32; {11243#(= main_~list~0.offset (_ bv0 32))} is VALID [2018-11-14 18:17:44,997 INFO L273 TraceCheckUtils]: 11: Hoare triple {11243#(= main_~list~0.offset (_ bv0 32))} assume #t~short7; {11243#(= main_~list~0.offset (_ bv0 32))} is VALID [2018-11-14 18:17:44,998 INFO L273 TraceCheckUtils]: 12: Hoare triple {11243#(= main_~list~0.offset (_ bv0 32))} assume !!#t~short7;havoc #t~short7;havoc #t~mem5.base, #t~mem5.offset;havoc #t~mem6.base, #t~mem6.offset; {11243#(= main_~list~0.offset (_ bv0 32))} is VALID [2018-11-14 18:17:44,998 INFO L273 TraceCheckUtils]: 13: Hoare triple {11243#(= main_~list~0.offset (_ bv0 32))} assume true; {11243#(= main_~list~0.offset (_ bv0 32))} is VALID [2018-11-14 18:17:44,999 INFO L273 TraceCheckUtils]: 14: Hoare triple {11243#(= main_~list~0.offset (_ bv0 32))} ~end~0.base, ~end~0.offset := ~list~0.base, ~list~0.offset; {11243#(= main_~list~0.offset (_ bv0 32))} is VALID [2018-11-14 18:17:44,999 INFO L273 TraceCheckUtils]: 15: Hoare triple {11243#(= main_~list~0.offset (_ bv0 32))} assume true; {11243#(= main_~list~0.offset (_ bv0 32))} is VALID [2018-11-14 18:17:45,000 INFO L273 TraceCheckUtils]: 16: Hoare triple {11243#(= main_~list~0.offset (_ bv0 32))} assume !(#t~nondet8 != 0bv32);havoc #t~nondet8; {11243#(= main_~list~0.offset (_ bv0 32))} is VALID [2018-11-14 18:17:45,001 INFO L273 TraceCheckUtils]: 17: Hoare triple {11243#(= main_~list~0.offset (_ bv0 32))} ~end~0.base, ~end~0.offset := 0bv32, 0bv32;~end~0.base, ~end~0.offset := ~list~0.base, ~list~0.offset; {11280#(and (= main_~list~0.base main_~end~0.base) (= main_~list~0.offset main_~end~0.offset) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:17:45,001 INFO L273 TraceCheckUtils]: 18: Hoare triple {11280#(and (= main_~list~0.base main_~end~0.base) (= main_~list~0.offset main_~end~0.offset) (= main_~list~0.offset (_ bv0 32)))} assume true; {11280#(and (= main_~list~0.base main_~end~0.base) (= main_~list~0.offset main_~end~0.offset) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:17:45,002 INFO L273 TraceCheckUtils]: 19: Hoare triple {11280#(and (= main_~list~0.base main_~end~0.base) (= main_~list~0.offset main_~end~0.offset) (= main_~list~0.offset (_ bv0 32)))} assume !!(0bv32 != ~end~0.base || 0bv32 != ~end~0.offset); {11280#(and (= main_~list~0.base main_~end~0.base) (= main_~list~0.offset main_~end~0.offset) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:17:45,003 INFO L273 TraceCheckUtils]: 20: Hoare triple {11280#(and (= main_~list~0.base main_~end~0.base) (= main_~list~0.offset main_~end~0.offset) (= main_~list~0.offset (_ bv0 32)))} assume true; {11280#(and (= main_~list~0.base main_~end~0.base) (= main_~list~0.offset main_~end~0.offset) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:17:45,003 INFO L273 TraceCheckUtils]: 21: Hoare triple {11280#(and (= main_~list~0.base main_~end~0.base) (= main_~list~0.offset main_~end~0.offset) (= main_~list~0.offset (_ bv0 32)))} assume true; {11280#(and (= main_~list~0.base main_~end~0.base) (= main_~list~0.offset main_~end~0.offset) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:17:45,004 INFO L273 TraceCheckUtils]: 22: Hoare triple {11280#(and (= main_~list~0.base main_~end~0.base) (= main_~list~0.offset main_~end~0.offset) (= main_~list~0.offset (_ bv0 32)))} assume !!(0bv32 != ~end~0.base || 0bv32 != ~end~0.offset);~len~0 := 0bv32;call #t~mem18.base, #t~mem18.offset := read~$Pointer$(~end~0.base, ~bvadd32(4bv32, ~end~0.offset), 4bv32);~inner~0.base, ~inner~0.offset := #t~mem18.base, #t~mem18.offset;havoc #t~mem18.base, #t~mem18.offset; {11296#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) main_~inner~0.offset) (= main_~inner~0.base (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:17:45,005 INFO L273 TraceCheckUtils]: 23: Hoare triple {11296#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) main_~inner~0.offset) (= main_~inner~0.base (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (= main_~list~0.offset (_ bv0 32)))} assume true; {11296#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) main_~inner~0.offset) (= main_~inner~0.base (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:17:45,006 INFO L273 TraceCheckUtils]: 24: Hoare triple {11296#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) main_~inner~0.offset) (= main_~inner~0.base (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32)))) (= main_~list~0.offset (_ bv0 32)))} assume !(0bv32 != ~inner~0.base || 0bv32 != ~inner~0.offset); {11303#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:17:45,007 INFO L273 TraceCheckUtils]: 25: Hoare triple {11303#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset (_ bv0 32)))} assume true; {11303#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:17:45,008 INFO L273 TraceCheckUtils]: 26: Hoare triple {11303#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset (_ bv0 32)))} assume !!~bvsle32(~len~0, 1bv32); {11303#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:17:45,009 INFO L273 TraceCheckUtils]: 27: Hoare triple {11303#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset (_ bv0 32)))} assume true; {11303#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:17:45,010 INFO L273 TraceCheckUtils]: 28: Hoare triple {11303#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset (_ bv0 32)))} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~end~0.base, ~end~0.offset, 4bv32);~end~0.base, ~end~0.offset := #t~mem22.base, #t~mem22.offset;havoc #t~mem22.base, #t~mem22.offset; {11303#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:17:45,010 INFO L273 TraceCheckUtils]: 29: Hoare triple {11303#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset (_ bv0 32)))} assume true; {11303#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:17:45,011 INFO L273 TraceCheckUtils]: 30: Hoare triple {11303#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset (_ bv0 32)))} assume !(0bv32 != ~end~0.base || 0bv32 != ~end~0.offset); {11303#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:17:45,012 INFO L273 TraceCheckUtils]: 31: Hoare triple {11303#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset (_ bv0 32)))} assume true; {11303#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:17:45,013 INFO L273 TraceCheckUtils]: 32: Hoare triple {11303#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset (_ bv0 32)))} assume !!(0bv32 != ~list~0.base || 0bv32 != ~list~0.offset);call #t~mem23.base, #t~mem23.offset := read~$Pointer$(~list~0.base, ~bvadd32(4bv32, ~list~0.offset), 4bv32);~end~0.base, ~end~0.offset := #t~mem23.base, #t~mem23.offset;havoc #t~mem23.base, #t~mem23.offset; {11328#(and (= (_ bv0 32) main_~end~0.base) (= main_~end~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:17:45,029 INFO L273 TraceCheckUtils]: 33: Hoare triple {11328#(and (= (_ bv0 32) main_~end~0.base) (= main_~end~0.offset (_ bv0 32)))} assume 0bv32 != ~end~0.base || 0bv32 != ~end~0.offset; {11224#false} is VALID [2018-11-14 18:17:45,029 INFO L273 TraceCheckUtils]: 34: Hoare triple {11224#false} assume true; {11224#false} is VALID [2018-11-14 18:17:45,030 INFO L273 TraceCheckUtils]: 35: Hoare triple {11224#false} assume !!(0bv32 != ~end~0.base || 0bv32 != ~end~0.offset); {11224#false} is VALID [2018-11-14 18:17:45,030 INFO L273 TraceCheckUtils]: 36: Hoare triple {11224#false} assume true; {11224#false} is VALID [2018-11-14 18:17:45,030 INFO L273 TraceCheckUtils]: 37: Hoare triple {11224#false} assume true;call #t~mem24.base, #t~mem24.offset := read~$Pointer$(~end~0.base, ~bvadd32(4bv32, ~end~0.offset), 4bv32); {11224#false} is VALID [2018-11-14 18:17:45,030 INFO L273 TraceCheckUtils]: 38: Hoare triple {11224#false} assume !(0bv32 == #t~mem24.base && 0bv32 == #t~mem24.offset);havoc #t~mem24.base, #t~mem24.offset; {11224#false} is VALID [2018-11-14 18:17:45,030 INFO L273 TraceCheckUtils]: 39: Hoare triple {11224#false} assume !false; {11224#false} is VALID [2018-11-14 18:17:45,033 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-14 18:17:45,033 INFO L316 TraceCheckSpWp]: Computing backward predicates... [2018-11-14 18:17:45,186 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 30 treesize of output 34 [2018-11-14 18:17:45,199 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 29 treesize of output 21 [2018-11-14 18:17:45,201 INFO L267 ElimStorePlain]: Start of recursive call 3: End of recursive call: and 1 xjuncts. [2018-11-14 18:17:45,245 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 21 treesize of output 17 [2018-11-14 18:17:45,256 INFO L267 ElimStorePlain]: Start of recursive call 4: End of recursive call: and 1 xjuncts. [2018-11-14 18:17:45,302 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 2 disjoint index pairs (out of 1 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 26 treesize of output 21 [2018-11-14 18:17:45,305 INFO L267 ElimStorePlain]: Start of recursive call 5: End of recursive call: and 1 xjuncts. [2018-11-14 18:17:45,334 INFO L267 ElimStorePlain]: Start of recursive call 2: 3 dim-1 vars, End of recursive call: and 2 xjuncts. [2018-11-14 18:17:45,386 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 18 treesize of output 16 [2018-11-14 18:17:45,393 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 8 treesize of output 1 [2018-11-14 18:17:45,394 INFO L267 ElimStorePlain]: Start of recursive call 7: End of recursive call: and 1 xjuncts. [2018-11-14 18:17:45,397 INFO L267 ElimStorePlain]: Start of recursive call 6: 1 dim-1 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:17:45,401 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 12 [2018-11-14 18:17:45,408 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 8 treesize of output 1 [2018-11-14 18:17:45,409 INFO L267 ElimStorePlain]: Start of recursive call 9: End of recursive call: and 1 xjuncts. [2018-11-14 18:17:45,412 INFO L267 ElimStorePlain]: Start of recursive call 8: 1 dim-1 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:17:45,446 INFO L267 ElimStorePlain]: Start of recursive call 1: 4 dim-2 vars, End of recursive call: and 2 xjuncts. [2018-11-14 18:17:45,447 INFO L202 ElimStorePlain]: Needed 9 recursive calls to eliminate 4 variables, input treesize:61, output treesize:11 [2018-11-14 18:17:45,467 WARN L383 uantifierElimination]: Trying to double check SDD result, but SMT solver's response was UNKNOWN. [2018-11-14 18:17:45,516 INFO L273 TraceCheckUtils]: 39: Hoare triple {11224#false} assume !false; {11224#false} is VALID [2018-11-14 18:17:45,516 INFO L273 TraceCheckUtils]: 38: Hoare triple {11224#false} assume !(0bv32 == #t~mem24.base && 0bv32 == #t~mem24.offset);havoc #t~mem24.base, #t~mem24.offset; {11224#false} is VALID [2018-11-14 18:17:45,517 INFO L273 TraceCheckUtils]: 37: Hoare triple {11224#false} assume true;call #t~mem24.base, #t~mem24.offset := read~$Pointer$(~end~0.base, ~bvadd32(4bv32, ~end~0.offset), 4bv32); {11224#false} is VALID [2018-11-14 18:17:45,517 INFO L273 TraceCheckUtils]: 36: Hoare triple {11224#false} assume true; {11224#false} is VALID [2018-11-14 18:17:45,517 INFO L273 TraceCheckUtils]: 35: Hoare triple {11224#false} assume !!(0bv32 != ~end~0.base || 0bv32 != ~end~0.offset); {11224#false} is VALID [2018-11-14 18:17:45,517 INFO L273 TraceCheckUtils]: 34: Hoare triple {11224#false} assume true; {11224#false} is VALID [2018-11-14 18:17:45,518 INFO L273 TraceCheckUtils]: 33: Hoare triple {11328#(and (= (_ bv0 32) main_~end~0.base) (= main_~end~0.offset (_ bv0 32)))} assume 0bv32 != ~end~0.base || 0bv32 != ~end~0.offset; {11224#false} is VALID [2018-11-14 18:17:45,519 INFO L273 TraceCheckUtils]: 32: Hoare triple {11371#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)))} assume !!(0bv32 != ~list~0.base || 0bv32 != ~list~0.offset);call #t~mem23.base, #t~mem23.offset := read~$Pointer$(~list~0.base, ~bvadd32(4bv32, ~list~0.offset), 4bv32);~end~0.base, ~end~0.offset := #t~mem23.base, #t~mem23.offset;havoc #t~mem23.base, #t~mem23.offset; {11328#(and (= (_ bv0 32) main_~end~0.base) (= main_~end~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:17:45,519 INFO L273 TraceCheckUtils]: 31: Hoare triple {11371#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)))} assume true; {11371#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)))} is VALID [2018-11-14 18:17:45,520 INFO L273 TraceCheckUtils]: 30: Hoare triple {11371#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)))} assume !(0bv32 != ~end~0.base || 0bv32 != ~end~0.offset); {11371#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)))} is VALID [2018-11-14 18:17:45,520 INFO L273 TraceCheckUtils]: 29: Hoare triple {11371#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)))} assume true; {11371#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)))} is VALID [2018-11-14 18:17:45,521 INFO L273 TraceCheckUtils]: 28: Hoare triple {11371#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)))} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~end~0.base, ~end~0.offset, 4bv32);~end~0.base, ~end~0.offset := #t~mem22.base, #t~mem22.offset;havoc #t~mem22.base, #t~mem22.offset; {11371#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)))} is VALID [2018-11-14 18:17:45,521 INFO L273 TraceCheckUtils]: 27: Hoare triple {11371#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)))} assume true; {11371#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)))} is VALID [2018-11-14 18:17:45,522 INFO L273 TraceCheckUtils]: 26: Hoare triple {11371#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)))} assume !!~bvsle32(~len~0, 1bv32); {11371#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)))} is VALID [2018-11-14 18:17:45,522 INFO L273 TraceCheckUtils]: 25: Hoare triple {11371#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)))} assume true; {11371#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)))} is VALID [2018-11-14 18:17:45,523 INFO L273 TraceCheckUtils]: 24: Hoare triple {11396#(or (not (= (_ bv0 32) main_~inner~0.offset)) (and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32))) (not (= main_~inner~0.base (_ bv0 32))))} assume !(0bv32 != ~inner~0.base || 0bv32 != ~inner~0.offset); {11371#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)))} is VALID [2018-11-14 18:17:45,524 INFO L273 TraceCheckUtils]: 23: Hoare triple {11396#(or (not (= (_ bv0 32) main_~inner~0.offset)) (and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32))) (not (= main_~inner~0.base (_ bv0 32))))} assume true; {11396#(or (not (= (_ bv0 32) main_~inner~0.offset)) (and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32))) (not (= main_~inner~0.base (_ bv0 32))))} is VALID [2018-11-14 18:17:45,525 INFO L273 TraceCheckUtils]: 22: Hoare triple {11403#(and (= main_~list~0.base main_~end~0.base) (= main_~list~0.offset main_~end~0.offset))} assume !!(0bv32 != ~end~0.base || 0bv32 != ~end~0.offset);~len~0 := 0bv32;call #t~mem18.base, #t~mem18.offset := read~$Pointer$(~end~0.base, ~bvadd32(4bv32, ~end~0.offset), 4bv32);~inner~0.base, ~inner~0.offset := #t~mem18.base, #t~mem18.offset;havoc #t~mem18.base, #t~mem18.offset; {11396#(or (not (= (_ bv0 32) main_~inner~0.offset)) (and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32))) (not (= main_~inner~0.base (_ bv0 32))))} is VALID [2018-11-14 18:17:45,525 INFO L273 TraceCheckUtils]: 21: Hoare triple {11403#(and (= main_~list~0.base main_~end~0.base) (= main_~list~0.offset main_~end~0.offset))} assume true; {11403#(and (= main_~list~0.base main_~end~0.base) (= main_~list~0.offset main_~end~0.offset))} is VALID [2018-11-14 18:17:45,526 INFO L273 TraceCheckUtils]: 20: Hoare triple {11403#(and (= main_~list~0.base main_~end~0.base) (= main_~list~0.offset main_~end~0.offset))} assume true; {11403#(and (= main_~list~0.base main_~end~0.base) (= main_~list~0.offset main_~end~0.offset))} is VALID [2018-11-14 18:17:45,527 INFO L273 TraceCheckUtils]: 19: Hoare triple {11403#(and (= main_~list~0.base main_~end~0.base) (= main_~list~0.offset main_~end~0.offset))} assume !!(0bv32 != ~end~0.base || 0bv32 != ~end~0.offset); {11403#(and (= main_~list~0.base main_~end~0.base) (= main_~list~0.offset main_~end~0.offset))} is VALID [2018-11-14 18:17:45,527 INFO L273 TraceCheckUtils]: 18: Hoare triple {11403#(and (= main_~list~0.base main_~end~0.base) (= main_~list~0.offset main_~end~0.offset))} assume true; {11403#(and (= main_~list~0.base main_~end~0.base) (= main_~list~0.offset main_~end~0.offset))} is VALID [2018-11-14 18:17:45,528 INFO L273 TraceCheckUtils]: 17: Hoare triple {11223#true} ~end~0.base, ~end~0.offset := 0bv32, 0bv32;~end~0.base, ~end~0.offset := ~list~0.base, ~list~0.offset; {11403#(and (= main_~list~0.base main_~end~0.base) (= main_~list~0.offset main_~end~0.offset))} is VALID [2018-11-14 18:17:45,528 INFO L273 TraceCheckUtils]: 16: Hoare triple {11223#true} assume !(#t~nondet8 != 0bv32);havoc #t~nondet8; {11223#true} is VALID [2018-11-14 18:17:45,529 INFO L273 TraceCheckUtils]: 15: Hoare triple {11223#true} assume true; {11223#true} is VALID [2018-11-14 18:17:45,529 INFO L273 TraceCheckUtils]: 14: Hoare triple {11223#true} ~end~0.base, ~end~0.offset := ~list~0.base, ~list~0.offset; {11223#true} is VALID [2018-11-14 18:17:45,529 INFO L273 TraceCheckUtils]: 13: Hoare triple {11223#true} assume true; {11223#true} is VALID [2018-11-14 18:17:45,529 INFO L273 TraceCheckUtils]: 12: Hoare triple {11223#true} assume !!#t~short7;havoc #t~short7;havoc #t~mem5.base, #t~mem5.offset;havoc #t~mem6.base, #t~mem6.offset; {11223#true} is VALID [2018-11-14 18:17:45,529 INFO L273 TraceCheckUtils]: 11: Hoare triple {11223#true} assume #t~short7; {11223#true} is VALID [2018-11-14 18:17:45,530 INFO L273 TraceCheckUtils]: 10: Hoare triple {11223#true} assume true;call #t~mem5.base, #t~mem5.offset := read~$Pointer$(~list~0.base, ~bvadd32(4bv32, ~list~0.offset), 4bv32);#t~short7 := #t~mem5.base != 0bv32 || #t~mem5.offset != 0bv32; {11223#true} is VALID [2018-11-14 18:17:45,530 INFO L273 TraceCheckUtils]: 9: Hoare triple {11223#true} assume !(#t~nondet1 != 0bv32);havoc #t~nondet1;call #t~malloc2.base, #t~malloc2.offset := #Ultimate.alloc(8bv32);call write~$Pointer$(#t~malloc2.base, #t~malloc2.offset, ~list~0.base, ~bvadd32(4bv32, ~list~0.offset), 4bv32);call #t~mem3.base, #t~mem3.offset := read~$Pointer$(~list~0.base, ~bvadd32(4bv32, ~list~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, #t~mem3.base, #t~mem3.offset, 4bv32);havoc #t~mem3.base, #t~mem3.offset;call #t~mem4.base, #t~mem4.offset := read~$Pointer$(~list~0.base, ~bvadd32(4bv32, ~list~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, #t~mem4.base, ~bvadd32(4bv32, #t~mem4.offset), 4bv32);havoc #t~mem4.base, #t~mem4.offset; {11223#true} is VALID [2018-11-14 18:17:45,530 INFO L273 TraceCheckUtils]: 8: Hoare triple {11223#true} assume true; {11223#true} is VALID [2018-11-14 18:17:45,530 INFO L273 TraceCheckUtils]: 7: Hoare triple {11223#true} assume !!(~list~0.base != 0bv32 || ~list~0.offset != 0bv32); {11223#true} is VALID [2018-11-14 18:17:45,531 INFO L273 TraceCheckUtils]: 6: Hoare triple {11223#true} assume true; {11223#true} is VALID [2018-11-14 18:17:45,531 INFO L273 TraceCheckUtils]: 5: Hoare triple {11223#true} call #t~malloc0.base, #t~malloc0.offset := #Ultimate.alloc(8bv32);~list~0.base, ~list~0.offset := #t~malloc0.base, #t~malloc0.offset;call write~$Pointer$(0bv32, 0bv32, ~list~0.base, ~list~0.offset, 4bv32); {11223#true} is VALID [2018-11-14 18:17:45,531 INFO L256 TraceCheckUtils]: 4: Hoare triple {11223#true} call #t~ret27 := main(); {11223#true} is VALID [2018-11-14 18:17:45,531 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {11223#true} {11223#true} #352#return; {11223#true} is VALID [2018-11-14 18:17:45,531 INFO L273 TraceCheckUtils]: 2: Hoare triple {11223#true} assume true; {11223#true} is VALID [2018-11-14 18:17:45,532 INFO L273 TraceCheckUtils]: 1: Hoare triple {11223#true} #NULL.base, #NULL.offset := 0bv32, 0bv32;#valid := #valid[0bv32 := 0bv1]; {11223#true} is VALID [2018-11-14 18:17:45,532 INFO L256 TraceCheckUtils]: 0: Hoare triple {11223#true} call ULTIMATE.init(); {11223#true} is VALID [2018-11-14 18:17:45,534 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-14 18:17:45,547 INFO L312 seRefinementStrategy]: Constructing automaton from 0 perfect and 2 imperfect interpolant sequences. [2018-11-14 18:17:45,548 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [7, 6] total 10 [2018-11-14 18:17:45,548 INFO L78 Accepts]: Start accepts. Automaton has 10 states. Word has length 40 [2018-11-14 18:17:45,548 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-14 18:17:45,548 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 10 states. [2018-11-14 18:17:45,777 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 68 edges. 68 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 18:17:45,777 INFO L459 AbstractCegarLoop]: Interpolant automaton has 10 states [2018-11-14 18:17:45,778 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2018-11-14 18:17:45,778 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=25, Invalid=65, Unknown=0, NotChecked=0, Total=90 [2018-11-14 18:17:45,778 INFO L87 Difference]: Start difference. First operand 204 states and 232 transitions. Second operand 10 states. [2018-11-14 18:17:49,631 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 18:17:49,631 INFO L93 Difference]: Finished difference Result 333 states and 371 transitions. [2018-11-14 18:17:49,631 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2018-11-14 18:17:49,631 INFO L78 Accepts]: Start accepts. Automaton has 10 states. Word has length 40 [2018-11-14 18:17:49,631 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-14 18:17:49,632 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 10 states. [2018-11-14 18:17:49,634 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15 states to 15 states and 241 transitions. [2018-11-14 18:17:49,634 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 10 states. [2018-11-14 18:17:49,636 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15 states to 15 states and 241 transitions. [2018-11-14 18:17:49,636 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 15 states and 241 transitions. [2018-11-14 18:17:50,485 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 241 edges. 241 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 18:17:50,494 INFO L225 Difference]: With dead ends: 333 [2018-11-14 18:17:50,494 INFO L226 Difference]: Without dead ends: 315 [2018-11-14 18:17:50,495 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 88 GetRequests, 72 SyntacticMatches, 0 SemanticMatches, 16 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 46 ImplicationChecksByTransitivity, 0.5s TimeCoverageRelationStatistics Valid=94, Invalid=212, Unknown=0, NotChecked=0, Total=306 [2018-11-14 18:17:50,495 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 315 states. [2018-11-14 18:17:51,070 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 315 to 228. [2018-11-14 18:17:51,071 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-14 18:17:51,071 INFO L82 GeneralOperation]: Start isEquivalent. First operand 315 states. Second operand 228 states. [2018-11-14 18:17:51,071 INFO L74 IsIncluded]: Start isIncluded. First operand 315 states. Second operand 228 states. [2018-11-14 18:17:51,071 INFO L87 Difference]: Start difference. First operand 315 states. Second operand 228 states. [2018-11-14 18:17:51,079 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 18:17:51,079 INFO L93 Difference]: Finished difference Result 315 states and 351 transitions. [2018-11-14 18:17:51,079 INFO L276 IsEmpty]: Start isEmpty. Operand 315 states and 351 transitions. [2018-11-14 18:17:51,080 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 18:17:51,080 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 18:17:51,080 INFO L74 IsIncluded]: Start isIncluded. First operand 228 states. Second operand 315 states. [2018-11-14 18:17:51,080 INFO L87 Difference]: Start difference. First operand 228 states. Second operand 315 states. [2018-11-14 18:17:51,088 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 18:17:51,088 INFO L93 Difference]: Finished difference Result 315 states and 351 transitions. [2018-11-14 18:17:51,088 INFO L276 IsEmpty]: Start isEmpty. Operand 315 states and 351 transitions. [2018-11-14 18:17:51,089 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 18:17:51,089 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 18:17:51,089 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-14 18:17:51,089 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-14 18:17:51,089 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 228 states. [2018-11-14 18:17:51,094 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 228 states to 228 states and 264 transitions. [2018-11-14 18:17:51,094 INFO L78 Accepts]: Start accepts. Automaton has 228 states and 264 transitions. Word has length 40 [2018-11-14 18:17:51,094 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-14 18:17:51,095 INFO L480 AbstractCegarLoop]: Abstraction has 228 states and 264 transitions. [2018-11-14 18:17:51,095 INFO L481 AbstractCegarLoop]: Interpolant automaton has 10 states. [2018-11-14 18:17:51,095 INFO L276 IsEmpty]: Start isEmpty. Operand 228 states and 264 transitions. [2018-11-14 18:17:51,095 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 42 [2018-11-14 18:17:51,096 INFO L367 BasicCegarLoop]: Found error trace [2018-11-14 18:17:51,096 INFO L375 BasicCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-14 18:17:51,096 INFO L423 AbstractCegarLoop]: === Iteration 18 === [mainErr12ASSERT_VIOLATIONERROR_FUNCTION, mainErr0ASSERT_VIOLATIONERROR_FUNCTION, mainErr7ASSERT_VIOLATIONERROR_FUNCTION, mainErr6ASSERT_VIOLATIONERROR_FUNCTION, mainErr4ASSERT_VIOLATIONERROR_FUNCTION, mainErr8ASSERT_VIOLATIONERROR_FUNCTION, mainErr11ASSERT_VIOLATIONERROR_FUNCTION, mainErr3ASSERT_VIOLATIONERROR_FUNCTION, mainErr9ASSERT_VIOLATIONERROR_FUNCTION, mainErr1ASSERT_VIOLATIONERROR_FUNCTION, mainErr5ASSERT_VIOLATIONERROR_FUNCTION, mainErr10ASSERT_VIOLATIONERROR_FUNCTION, mainErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-14 18:17:51,097 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-14 18:17:51,097 INFO L82 PathProgramCache]: Analyzing trace with hash -869957164, now seen corresponding path program 1 times [2018-11-14 18:17:51,097 INFO L223 ckRefinementStrategy]: Switched to mode CVC4_FPBP [2018-11-14 18:17:51,097 INFO L69 tionRefinementEngine]: Using refinement strategy WolfRefinementStrategy No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/cvc4nyu Starting monitored process 19 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 19 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk [2018-11-14 18:17:51,124 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-14 18:17:51,171 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-14 18:17:51,197 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-14 18:17:51,198 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-14 18:17:51,337 INFO L256 TraceCheckUtils]: 0: Hoare triple {12741#true} call ULTIMATE.init(); {12741#true} is VALID [2018-11-14 18:17:51,337 INFO L273 TraceCheckUtils]: 1: Hoare triple {12741#true} #NULL.base, #NULL.offset := 0bv32, 0bv32;#valid := #valid[0bv32 := 0bv1]; {12741#true} is VALID [2018-11-14 18:17:51,337 INFO L273 TraceCheckUtils]: 2: Hoare triple {12741#true} assume true; {12741#true} is VALID [2018-11-14 18:17:51,338 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {12741#true} {12741#true} #352#return; {12741#true} is VALID [2018-11-14 18:17:51,338 INFO L256 TraceCheckUtils]: 4: Hoare triple {12741#true} call #t~ret27 := main(); {12741#true} is VALID [2018-11-14 18:17:51,338 INFO L273 TraceCheckUtils]: 5: Hoare triple {12741#true} call #t~malloc0.base, #t~malloc0.offset := #Ultimate.alloc(8bv32);~list~0.base, ~list~0.offset := #t~malloc0.base, #t~malloc0.offset;call write~$Pointer$(0bv32, 0bv32, ~list~0.base, ~list~0.offset, 4bv32); {12741#true} is VALID [2018-11-14 18:17:51,338 INFO L273 TraceCheckUtils]: 6: Hoare triple {12741#true} assume true; {12741#true} is VALID [2018-11-14 18:17:51,338 INFO L273 TraceCheckUtils]: 7: Hoare triple {12741#true} assume !!(~list~0.base != 0bv32 || ~list~0.offset != 0bv32); {12741#true} is VALID [2018-11-14 18:17:51,338 INFO L273 TraceCheckUtils]: 8: Hoare triple {12741#true} assume true; {12741#true} is VALID [2018-11-14 18:17:51,338 INFO L273 TraceCheckUtils]: 9: Hoare triple {12741#true} assume !(#t~nondet1 != 0bv32);havoc #t~nondet1;call #t~malloc2.base, #t~malloc2.offset := #Ultimate.alloc(8bv32);call write~$Pointer$(#t~malloc2.base, #t~malloc2.offset, ~list~0.base, ~bvadd32(4bv32, ~list~0.offset), 4bv32);call #t~mem3.base, #t~mem3.offset := read~$Pointer$(~list~0.base, ~bvadd32(4bv32, ~list~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, #t~mem3.base, #t~mem3.offset, 4bv32);havoc #t~mem3.base, #t~mem3.offset;call #t~mem4.base, #t~mem4.offset := read~$Pointer$(~list~0.base, ~bvadd32(4bv32, ~list~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, #t~mem4.base, ~bvadd32(4bv32, #t~mem4.offset), 4bv32);havoc #t~mem4.base, #t~mem4.offset; {12741#true} is VALID [2018-11-14 18:17:51,338 INFO L273 TraceCheckUtils]: 10: Hoare triple {12741#true} assume true;call #t~mem5.base, #t~mem5.offset := read~$Pointer$(~list~0.base, ~bvadd32(4bv32, ~list~0.offset), 4bv32);#t~short7 := #t~mem5.base != 0bv32 || #t~mem5.offset != 0bv32; {12741#true} is VALID [2018-11-14 18:17:51,339 INFO L273 TraceCheckUtils]: 11: Hoare triple {12741#true} assume #t~short7; {12741#true} is VALID [2018-11-14 18:17:51,339 INFO L273 TraceCheckUtils]: 12: Hoare triple {12741#true} assume !!#t~short7;havoc #t~short7;havoc #t~mem5.base, #t~mem5.offset;havoc #t~mem6.base, #t~mem6.offset; {12741#true} is VALID [2018-11-14 18:17:51,339 INFO L273 TraceCheckUtils]: 13: Hoare triple {12741#true} assume true; {12741#true} is VALID [2018-11-14 18:17:51,339 INFO L273 TraceCheckUtils]: 14: Hoare triple {12741#true} ~end~0.base, ~end~0.offset := ~list~0.base, ~list~0.offset; {12741#true} is VALID [2018-11-14 18:17:51,339 INFO L273 TraceCheckUtils]: 15: Hoare triple {12741#true} assume true; {12741#true} is VALID [2018-11-14 18:17:51,339 INFO L273 TraceCheckUtils]: 16: Hoare triple {12741#true} assume !(#t~nondet8 != 0bv32);havoc #t~nondet8; {12741#true} is VALID [2018-11-14 18:17:51,339 INFO L273 TraceCheckUtils]: 17: Hoare triple {12741#true} ~end~0.base, ~end~0.offset := 0bv32, 0bv32;~end~0.base, ~end~0.offset := ~list~0.base, ~list~0.offset; {12741#true} is VALID [2018-11-14 18:17:51,340 INFO L273 TraceCheckUtils]: 18: Hoare triple {12741#true} assume true; {12741#true} is VALID [2018-11-14 18:17:51,340 INFO L273 TraceCheckUtils]: 19: Hoare triple {12741#true} assume !!(0bv32 != ~end~0.base || 0bv32 != ~end~0.offset); {12741#true} is VALID [2018-11-14 18:17:51,340 INFO L273 TraceCheckUtils]: 20: Hoare triple {12741#true} assume true; {12741#true} is VALID [2018-11-14 18:17:51,340 INFO L273 TraceCheckUtils]: 21: Hoare triple {12741#true} assume true; {12741#true} is VALID [2018-11-14 18:17:51,340 INFO L273 TraceCheckUtils]: 22: Hoare triple {12741#true} assume !!(0bv32 != ~end~0.base || 0bv32 != ~end~0.offset);~len~0 := 0bv32;call #t~mem18.base, #t~mem18.offset := read~$Pointer$(~end~0.base, ~bvadd32(4bv32, ~end~0.offset), 4bv32);~inner~0.base, ~inner~0.offset := #t~mem18.base, #t~mem18.offset;havoc #t~mem18.base, #t~mem18.offset; {12741#true} is VALID [2018-11-14 18:17:51,340 INFO L273 TraceCheckUtils]: 23: Hoare triple {12741#true} assume true; {12741#true} is VALID [2018-11-14 18:17:51,340 INFO L273 TraceCheckUtils]: 24: Hoare triple {12741#true} assume !!(0bv32 != ~inner~0.base || 0bv32 != ~inner~0.offset); {12741#true} is VALID [2018-11-14 18:17:51,341 INFO L273 TraceCheckUtils]: 25: Hoare triple {12741#true} assume ~len~0 == 0bv32;~len~0 := 1bv32; {12821#(= (bvadd main_~len~0 (_ bv4294967295 32)) (_ bv0 32))} is VALID [2018-11-14 18:17:51,341 INFO L273 TraceCheckUtils]: 26: Hoare triple {12821#(= (bvadd main_~len~0 (_ bv4294967295 32)) (_ bv0 32))} assume true; {12821#(= (bvadd main_~len~0 (_ bv4294967295 32)) (_ bv0 32))} is VALID [2018-11-14 18:17:51,341 INFO L273 TraceCheckUtils]: 27: Hoare triple {12821#(= (bvadd main_~len~0 (_ bv4294967295 32)) (_ bv0 32))} assume !!(0bv32 != ~inner~0.base || 0bv32 != ~inner~0.offset); {12821#(= (bvadd main_~len~0 (_ bv4294967295 32)) (_ bv0 32))} is VALID [2018-11-14 18:17:51,342 INFO L273 TraceCheckUtils]: 28: Hoare triple {12821#(= (bvadd main_~len~0 (_ bv4294967295 32)) (_ bv0 32))} assume true; {12821#(= (bvadd main_~len~0 (_ bv4294967295 32)) (_ bv0 32))} is VALID [2018-11-14 18:17:51,342 INFO L273 TraceCheckUtils]: 29: Hoare triple {12821#(= (bvadd main_~len~0 (_ bv4294967295 32)) (_ bv0 32))} assume true;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~inner~0.base, ~bvadd32(4bv32, ~inner~0.offset), 4bv32); {12821#(= (bvadd main_~len~0 (_ bv4294967295 32)) (_ bv0 32))} is VALID [2018-11-14 18:17:51,342 INFO L273 TraceCheckUtils]: 30: Hoare triple {12821#(= (bvadd main_~len~0 (_ bv4294967295 32)) (_ bv0 32))} assume !!(0bv32 == #t~mem19.base && 0bv32 == #t~mem19.offset);havoc #t~mem19.base, #t~mem19.offset; {12821#(= (bvadd main_~len~0 (_ bv4294967295 32)) (_ bv0 32))} is VALID [2018-11-14 18:17:51,343 INFO L273 TraceCheckUtils]: 31: Hoare triple {12821#(= (bvadd main_~len~0 (_ bv4294967295 32)) (_ bv0 32))} assume true; {12821#(= (bvadd main_~len~0 (_ bv4294967295 32)) (_ bv0 32))} is VALID [2018-11-14 18:17:51,343 INFO L273 TraceCheckUtils]: 32: Hoare triple {12821#(= (bvadd main_~len~0 (_ bv4294967295 32)) (_ bv0 32))} assume true;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~inner~0.base, ~inner~0.offset, 4bv32); {12821#(= (bvadd main_~len~0 (_ bv4294967295 32)) (_ bv0 32))} is VALID [2018-11-14 18:17:51,343 INFO L273 TraceCheckUtils]: 33: Hoare triple {12821#(= (bvadd main_~len~0 (_ bv4294967295 32)) (_ bv0 32))} assume !!(0bv32 == #t~mem20.base && 0bv32 == #t~mem20.offset);havoc #t~mem20.base, #t~mem20.offset; {12821#(= (bvadd main_~len~0 (_ bv4294967295 32)) (_ bv0 32))} is VALID [2018-11-14 18:17:51,344 INFO L273 TraceCheckUtils]: 34: Hoare triple {12821#(= (bvadd main_~len~0 (_ bv4294967295 32)) (_ bv0 32))} assume true; {12821#(= (bvadd main_~len~0 (_ bv4294967295 32)) (_ bv0 32))} is VALID [2018-11-14 18:17:51,344 INFO L273 TraceCheckUtils]: 35: Hoare triple {12821#(= (bvadd main_~len~0 (_ bv4294967295 32)) (_ bv0 32))} call #t~mem21.base, #t~mem21.offset := read~$Pointer$(~inner~0.base, ~bvadd32(4bv32, ~inner~0.offset), 4bv32);~inner~0.base, ~inner~0.offset := #t~mem21.base, #t~mem21.offset;havoc #t~mem21.base, #t~mem21.offset; {12821#(= (bvadd main_~len~0 (_ bv4294967295 32)) (_ bv0 32))} is VALID [2018-11-14 18:17:51,344 INFO L273 TraceCheckUtils]: 36: Hoare triple {12821#(= (bvadd main_~len~0 (_ bv4294967295 32)) (_ bv0 32))} assume true; {12821#(= (bvadd main_~len~0 (_ bv4294967295 32)) (_ bv0 32))} is VALID [2018-11-14 18:17:51,345 INFO L273 TraceCheckUtils]: 37: Hoare triple {12821#(= (bvadd main_~len~0 (_ bv4294967295 32)) (_ bv0 32))} assume !(0bv32 != ~inner~0.base || 0bv32 != ~inner~0.offset); {12821#(= (bvadd main_~len~0 (_ bv4294967295 32)) (_ bv0 32))} is VALID [2018-11-14 18:17:51,345 INFO L273 TraceCheckUtils]: 38: Hoare triple {12821#(= (bvadd main_~len~0 (_ bv4294967295 32)) (_ bv0 32))} assume true; {12821#(= (bvadd main_~len~0 (_ bv4294967295 32)) (_ bv0 32))} is VALID [2018-11-14 18:17:51,346 INFO L273 TraceCheckUtils]: 39: Hoare triple {12821#(= (bvadd main_~len~0 (_ bv4294967295 32)) (_ bv0 32))} assume !~bvsle32(~len~0, 1bv32); {12742#false} is VALID [2018-11-14 18:17:51,346 INFO L273 TraceCheckUtils]: 40: Hoare triple {12742#false} assume !false; {12742#false} is VALID [2018-11-14 18:17:51,348 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-14 18:17:51,348 INFO L312 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2018-11-14 18:17:51,350 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-14 18:17:51,350 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-14 18:17:51,350 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 41 [2018-11-14 18:17:51,350 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-14 18:17:51,350 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states. [2018-11-14 18:17:51,398 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 41 edges. 41 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 18:17:51,399 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-14 18:17:51,399 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-14 18:17:51,399 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-14 18:17:51,399 INFO L87 Difference]: Start difference. First operand 228 states and 264 transitions. Second operand 3 states. [2018-11-14 18:17:53,733 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 18:17:53,734 INFO L93 Difference]: Finished difference Result 442 states and 521 transitions. [2018-11-14 18:17:53,734 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-14 18:17:53,734 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 41 [2018-11-14 18:17:53,734 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-14 18:17:53,734 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2018-11-14 18:17:53,737 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 177 transitions. [2018-11-14 18:17:53,738 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2018-11-14 18:17:53,739 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 177 transitions. [2018-11-14 18:17:53,739 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 177 transitions. [2018-11-14 18:17:53,947 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 177 edges. 177 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 18:17:53,955 INFO L225 Difference]: With dead ends: 442 [2018-11-14 18:17:53,956 INFO L226 Difference]: Without dead ends: 329 [2018-11-14 18:17:53,956 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 40 GetRequests, 39 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-14 18:17:53,957 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 329 states. [2018-11-14 18:17:54,694 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 329 to 282. [2018-11-14 18:17:54,695 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-14 18:17:54,695 INFO L82 GeneralOperation]: Start isEquivalent. First operand 329 states. Second operand 282 states. [2018-11-14 18:17:54,695 INFO L74 IsIncluded]: Start isIncluded. First operand 329 states. Second operand 282 states. [2018-11-14 18:17:54,695 INFO L87 Difference]: Start difference. First operand 329 states. Second operand 282 states. [2018-11-14 18:17:54,703 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 18:17:54,703 INFO L93 Difference]: Finished difference Result 329 states and 378 transitions. [2018-11-14 18:17:54,703 INFO L276 IsEmpty]: Start isEmpty. Operand 329 states and 378 transitions. [2018-11-14 18:17:54,704 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 18:17:54,704 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 18:17:54,704 INFO L74 IsIncluded]: Start isIncluded. First operand 282 states. Second operand 329 states. [2018-11-14 18:17:54,705 INFO L87 Difference]: Start difference. First operand 282 states. Second operand 329 states. [2018-11-14 18:17:54,712 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 18:17:54,713 INFO L93 Difference]: Finished difference Result 329 states and 378 transitions. [2018-11-14 18:17:54,713 INFO L276 IsEmpty]: Start isEmpty. Operand 329 states and 378 transitions. [2018-11-14 18:17:54,714 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 18:17:54,714 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 18:17:54,714 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-14 18:17:54,714 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-14 18:17:54,714 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 282 states. [2018-11-14 18:17:54,720 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 282 states to 282 states and 330 transitions. [2018-11-14 18:17:54,720 INFO L78 Accepts]: Start accepts. Automaton has 282 states and 330 transitions. Word has length 41 [2018-11-14 18:17:54,721 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-14 18:17:54,721 INFO L480 AbstractCegarLoop]: Abstraction has 282 states and 330 transitions. [2018-11-14 18:17:54,721 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-14 18:17:54,721 INFO L276 IsEmpty]: Start isEmpty. Operand 282 states and 330 transitions. [2018-11-14 18:17:54,722 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 45 [2018-11-14 18:17:54,722 INFO L367 BasicCegarLoop]: Found error trace [2018-11-14 18:17:54,722 INFO L375 BasicCegarLoop]: trace histogram [2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-14 18:17:54,723 INFO L423 AbstractCegarLoop]: === Iteration 19 === [mainErr12ASSERT_VIOLATIONERROR_FUNCTION, mainErr0ASSERT_VIOLATIONERROR_FUNCTION, mainErr7ASSERT_VIOLATIONERROR_FUNCTION, mainErr6ASSERT_VIOLATIONERROR_FUNCTION, mainErr4ASSERT_VIOLATIONERROR_FUNCTION, mainErr8ASSERT_VIOLATIONERROR_FUNCTION, mainErr11ASSERT_VIOLATIONERROR_FUNCTION, mainErr3ASSERT_VIOLATIONERROR_FUNCTION, mainErr9ASSERT_VIOLATIONERROR_FUNCTION, mainErr1ASSERT_VIOLATIONERROR_FUNCTION, mainErr5ASSERT_VIOLATIONERROR_FUNCTION, mainErr10ASSERT_VIOLATIONERROR_FUNCTION, mainErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-14 18:17:54,723 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-14 18:17:54,723 INFO L82 PathProgramCache]: Analyzing trace with hash 1222312278, now seen corresponding path program 1 times [2018-11-14 18:17:54,723 INFO L223 ckRefinementStrategy]: Switched to mode CVC4_FPBP [2018-11-14 18:17:54,724 INFO L69 tionRefinementEngine]: Using refinement strategy WolfRefinementStrategy No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/cvc4nyu Starting monitored process 20 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 20 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk [2018-11-14 18:17:54,755 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-14 18:17:54,812 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-14 18:17:54,830 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-14 18:17:54,831 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-14 18:17:54,891 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 10 [2018-11-14 18:17:54,899 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 9 [2018-11-14 18:17:54,921 INFO L267 ElimStorePlain]: Start of recursive call 3: End of recursive call: and 1 xjuncts. [2018-11-14 18:17:54,926 INFO L267 ElimStorePlain]: Start of recursive call 2: 1 dim-1 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:17:54,945 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 10 [2018-11-14 18:17:54,954 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 9 [2018-11-14 18:17:54,958 INFO L267 ElimStorePlain]: Start of recursive call 5: End of recursive call: and 1 xjuncts. [2018-11-14 18:17:54,963 INFO L267 ElimStorePlain]: Start of recursive call 4: 1 dim-1 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:17:54,977 INFO L267 ElimStorePlain]: Start of recursive call 1: 2 dim-2 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:17:54,978 INFO L202 ElimStorePlain]: Needed 5 recursive calls to eliminate 2 variables, input treesize:30, output treesize:22 [2018-11-14 18:17:55,472 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 22 treesize of output 16 [2018-11-14 18:17:55,479 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 3 [2018-11-14 18:17:55,481 INFO L267 ElimStorePlain]: Start of recursive call 3: End of recursive call: and 1 xjuncts. [2018-11-14 18:17:55,484 INFO L267 ElimStorePlain]: Start of recursive call 2: 1 dim-1 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:17:55,501 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 22 treesize of output 16 [2018-11-14 18:17:55,507 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 3 [2018-11-14 18:17:55,508 INFO L267 ElimStorePlain]: Start of recursive call 5: End of recursive call: and 1 xjuncts. [2018-11-14 18:17:55,512 INFO L267 ElimStorePlain]: Start of recursive call 4: 1 dim-1 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:17:55,519 INFO L267 ElimStorePlain]: Start of recursive call 1: 1 dim-0 vars, 2 dim-2 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:17:55,520 INFO L202 ElimStorePlain]: Needed 5 recursive calls to eliminate 3 variables, input treesize:43, output treesize:7 [2018-11-14 18:17:55,527 WARN L383 uantifierElimination]: Trying to double check SDD result, but SMT solver's response was UNKNOWN. [2018-11-14 18:17:55,553 INFO L256 TraceCheckUtils]: 0: Hoare triple {14322#true} call ULTIMATE.init(); {14322#true} is VALID [2018-11-14 18:17:55,553 INFO L273 TraceCheckUtils]: 1: Hoare triple {14322#true} #NULL.base, #NULL.offset := 0bv32, 0bv32;#valid := #valid[0bv32 := 0bv1]; {14322#true} is VALID [2018-11-14 18:17:55,554 INFO L273 TraceCheckUtils]: 2: Hoare triple {14322#true} assume true; {14322#true} is VALID [2018-11-14 18:17:55,554 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {14322#true} {14322#true} #352#return; {14322#true} is VALID [2018-11-14 18:17:55,554 INFO L256 TraceCheckUtils]: 4: Hoare triple {14322#true} call #t~ret27 := main(); {14322#true} is VALID [2018-11-14 18:17:55,555 INFO L273 TraceCheckUtils]: 5: Hoare triple {14322#true} call #t~malloc0.base, #t~malloc0.offset := #Ultimate.alloc(8bv32);~list~0.base, ~list~0.offset := #t~malloc0.base, #t~malloc0.offset;call write~$Pointer$(0bv32, 0bv32, ~list~0.base, ~list~0.offset, 4bv32); {14342#(= main_~list~0.offset (_ bv0 32))} is VALID [2018-11-14 18:17:55,556 INFO L273 TraceCheckUtils]: 6: Hoare triple {14342#(= main_~list~0.offset (_ bv0 32))} assume true; {14342#(= main_~list~0.offset (_ bv0 32))} is VALID [2018-11-14 18:17:55,556 INFO L273 TraceCheckUtils]: 7: Hoare triple {14342#(= main_~list~0.offset (_ bv0 32))} assume !!(~list~0.base != 0bv32 || ~list~0.offset != 0bv32); {14342#(= main_~list~0.offset (_ bv0 32))} is VALID [2018-11-14 18:17:55,556 INFO L273 TraceCheckUtils]: 8: Hoare triple {14342#(= main_~list~0.offset (_ bv0 32))} assume true; {14342#(= main_~list~0.offset (_ bv0 32))} is VALID [2018-11-14 18:17:55,558 INFO L273 TraceCheckUtils]: 9: Hoare triple {14342#(= main_~list~0.offset (_ bv0 32))} assume #t~nondet1 != 0bv32;havoc #t~nondet1;call write~$Pointer$(0bv32, 0bv32, ~list~0.base, ~bvadd32(4bv32, ~list~0.offset), 4bv32); {14355#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:17:55,559 INFO L273 TraceCheckUtils]: 10: Hoare triple {14355#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset (_ bv0 32)))} assume true;call #t~mem5.base, #t~mem5.offset := read~$Pointer$(~list~0.base, ~bvadd32(4bv32, ~list~0.offset), 4bv32);#t~short7 := #t~mem5.base != 0bv32 || #t~mem5.offset != 0bv32; {14355#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:17:55,560 INFO L273 TraceCheckUtils]: 11: Hoare triple {14355#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset (_ bv0 32)))} assume !#t~short7;call #t~mem6.base, #t~mem6.offset := read~$Pointer$(~list~0.base, ~bvadd32(4bv32, ~list~0.offset), 4bv32);#t~short7 := #t~mem6.base == 0bv32 && #t~mem6.offset == 0bv32; {14355#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:17:55,561 INFO L273 TraceCheckUtils]: 12: Hoare triple {14355#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset (_ bv0 32)))} assume !!#t~short7;havoc #t~short7;havoc #t~mem5.base, #t~mem5.offset;havoc #t~mem6.base, #t~mem6.offset; {14355#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:17:55,562 INFO L273 TraceCheckUtils]: 13: Hoare triple {14355#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset (_ bv0 32)))} assume true; {14355#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:17:55,563 INFO L273 TraceCheckUtils]: 14: Hoare triple {14355#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset (_ bv0 32)))} ~end~0.base, ~end~0.offset := ~list~0.base, ~list~0.offset; {14355#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:17:55,564 INFO L273 TraceCheckUtils]: 15: Hoare triple {14355#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset (_ bv0 32)))} assume true; {14355#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:17:55,565 INFO L273 TraceCheckUtils]: 16: Hoare triple {14355#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset (_ bv0 32)))} assume !(#t~nondet8 != 0bv32);havoc #t~nondet8; {14355#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:17:55,566 INFO L273 TraceCheckUtils]: 17: Hoare triple {14355#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset (_ bv0 32)))} ~end~0.base, ~end~0.offset := 0bv32, 0bv32;~end~0.base, ~end~0.offset := ~list~0.base, ~list~0.offset; {14380#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.base main_~end~0.base) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset main_~end~0.offset) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:17:55,567 INFO L273 TraceCheckUtils]: 18: Hoare triple {14380#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.base main_~end~0.base) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset main_~end~0.offset) (= main_~list~0.offset (_ bv0 32)))} assume true; {14380#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.base main_~end~0.base) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset main_~end~0.offset) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:17:55,569 INFO L273 TraceCheckUtils]: 19: Hoare triple {14380#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.base main_~end~0.base) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset main_~end~0.offset) (= main_~list~0.offset (_ bv0 32)))} assume !!(0bv32 != ~end~0.base || 0bv32 != ~end~0.offset); {14380#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.base main_~end~0.base) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset main_~end~0.offset) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:17:55,570 INFO L273 TraceCheckUtils]: 20: Hoare triple {14380#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.base main_~end~0.base) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset main_~end~0.offset) (= main_~list~0.offset (_ bv0 32)))} assume true; {14380#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.base main_~end~0.base) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset main_~end~0.offset) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:17:55,571 INFO L273 TraceCheckUtils]: 21: Hoare triple {14380#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.base main_~end~0.base) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset main_~end~0.offset) (= main_~list~0.offset (_ bv0 32)))} assume true; {14380#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.base main_~end~0.base) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset main_~end~0.offset) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:17:55,573 INFO L273 TraceCheckUtils]: 22: Hoare triple {14380#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.base main_~end~0.base) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset main_~end~0.offset) (= main_~list~0.offset (_ bv0 32)))} assume !!(0bv32 != ~end~0.base || 0bv32 != ~end~0.offset);~len~0 := 0bv32;call #t~mem18.base, #t~mem18.offset := read~$Pointer$(~end~0.base, ~bvadd32(4bv32, ~end~0.offset), 4bv32);~inner~0.base, ~inner~0.offset := #t~mem18.base, #t~mem18.offset;havoc #t~mem18.base, #t~mem18.offset; {14380#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.base main_~end~0.base) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset main_~end~0.offset) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:17:55,574 INFO L273 TraceCheckUtils]: 23: Hoare triple {14380#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.base main_~end~0.base) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset main_~end~0.offset) (= main_~list~0.offset (_ bv0 32)))} assume true; {14380#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.base main_~end~0.base) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset main_~end~0.offset) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:17:55,576 INFO L273 TraceCheckUtils]: 24: Hoare triple {14380#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.base main_~end~0.base) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset main_~end~0.offset) (= main_~list~0.offset (_ bv0 32)))} assume !(0bv32 != ~inner~0.base || 0bv32 != ~inner~0.offset); {14380#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.base main_~end~0.base) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset main_~end~0.offset) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:17:55,577 INFO L273 TraceCheckUtils]: 25: Hoare triple {14380#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.base main_~end~0.base) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset main_~end~0.offset) (= main_~list~0.offset (_ bv0 32)))} assume true; {14380#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.base main_~end~0.base) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset main_~end~0.offset) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:17:55,578 INFO L273 TraceCheckUtils]: 26: Hoare triple {14380#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.base main_~end~0.base) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset main_~end~0.offset) (= main_~list~0.offset (_ bv0 32)))} assume !!~bvsle32(~len~0, 1bv32); {14380#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.base main_~end~0.base) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset main_~end~0.offset) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:17:55,580 INFO L273 TraceCheckUtils]: 27: Hoare triple {14380#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.base main_~end~0.base) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset main_~end~0.offset) (= main_~list~0.offset (_ bv0 32)))} assume true; {14380#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.base main_~end~0.base) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset main_~end~0.offset) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:17:55,581 INFO L273 TraceCheckUtils]: 28: Hoare triple {14380#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.base main_~end~0.base) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.offset main_~end~0.offset) (= main_~list~0.offset (_ bv0 32)))} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~end~0.base, ~end~0.offset, 4bv32);~end~0.base, ~end~0.offset := #t~mem22.base, #t~mem22.offset;havoc #t~mem22.base, #t~mem22.offset; {14414#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) main_~end~0.base) (= main_~end~0.offset (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:17:55,583 INFO L273 TraceCheckUtils]: 29: Hoare triple {14414#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) main_~end~0.base) (= main_~end~0.offset (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= main_~list~0.offset (_ bv0 32)))} assume true; {14414#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) main_~end~0.base) (= main_~end~0.offset (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:17:55,584 INFO L273 TraceCheckUtils]: 30: Hoare triple {14414#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) main_~end~0.base) (= main_~end~0.offset (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= main_~list~0.offset (_ bv0 32)))} assume !(0bv32 != ~end~0.base || 0bv32 != ~end~0.offset); {14421#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:17:55,586 INFO L273 TraceCheckUtils]: 31: Hoare triple {14421#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= main_~list~0.offset (_ bv0 32)))} assume true; {14421#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:17:55,587 INFO L273 TraceCheckUtils]: 32: Hoare triple {14421#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= main_~list~0.offset (_ bv0 32)))} assume !!(0bv32 != ~list~0.base || 0bv32 != ~list~0.offset);call #t~mem23.base, #t~mem23.offset := read~$Pointer$(~list~0.base, ~bvadd32(4bv32, ~list~0.offset), 4bv32);~end~0.base, ~end~0.offset := #t~mem23.base, #t~mem23.offset;havoc #t~mem23.base, #t~mem23.offset; {14421#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:17:55,589 INFO L273 TraceCheckUtils]: 33: Hoare triple {14421#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= main_~list~0.offset (_ bv0 32)))} assume !(0bv32 != ~end~0.base || 0bv32 != ~end~0.offset); {14421#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:17:55,590 INFO L273 TraceCheckUtils]: 34: Hoare triple {14421#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= main_~list~0.offset (_ bv0 32)))} call #t~mem26.base, #t~mem26.offset := read~$Pointer$(~list~0.base, ~list~0.offset, 4bv32);~end~0.base, ~end~0.offset := #t~mem26.base, #t~mem26.offset;havoc #t~mem26.base, #t~mem26.offset;call ULTIMATE.dealloc(~list~0.base, ~list~0.offset);~list~0.base, ~list~0.offset := ~end~0.base, ~end~0.offset; {14434#(and (= (_ bv0 32) main_~list~0.base) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:17:55,628 INFO L273 TraceCheckUtils]: 35: Hoare triple {14434#(and (= (_ bv0 32) main_~list~0.base) (= main_~list~0.offset (_ bv0 32)))} assume true; {14434#(and (= (_ bv0 32) main_~list~0.base) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:17:55,630 INFO L273 TraceCheckUtils]: 36: Hoare triple {14434#(and (= (_ bv0 32) main_~list~0.base) (= main_~list~0.offset (_ bv0 32)))} assume !!(0bv32 != ~list~0.base || 0bv32 != ~list~0.offset);call #t~mem23.base, #t~mem23.offset := read~$Pointer$(~list~0.base, ~bvadd32(4bv32, ~list~0.offset), 4bv32);~end~0.base, ~end~0.offset := #t~mem23.base, #t~mem23.offset;havoc #t~mem23.base, #t~mem23.offset; {14323#false} is VALID [2018-11-14 18:17:55,630 INFO L273 TraceCheckUtils]: 37: Hoare triple {14323#false} assume 0bv32 != ~end~0.base || 0bv32 != ~end~0.offset; {14323#false} is VALID [2018-11-14 18:17:55,630 INFO L273 TraceCheckUtils]: 38: Hoare triple {14323#false} assume true; {14323#false} is VALID [2018-11-14 18:17:55,630 INFO L273 TraceCheckUtils]: 39: Hoare triple {14323#false} assume !!(0bv32 != ~end~0.base || 0bv32 != ~end~0.offset); {14323#false} is VALID [2018-11-14 18:17:55,630 INFO L273 TraceCheckUtils]: 40: Hoare triple {14323#false} assume true; {14323#false} is VALID [2018-11-14 18:17:55,630 INFO L273 TraceCheckUtils]: 41: Hoare triple {14323#false} assume true;call #t~mem24.base, #t~mem24.offset := read~$Pointer$(~end~0.base, ~bvadd32(4bv32, ~end~0.offset), 4bv32); {14323#false} is VALID [2018-11-14 18:17:55,631 INFO L273 TraceCheckUtils]: 42: Hoare triple {14323#false} assume !(0bv32 == #t~mem24.base && 0bv32 == #t~mem24.offset);havoc #t~mem24.base, #t~mem24.offset; {14323#false} is VALID [2018-11-14 18:17:55,631 INFO L273 TraceCheckUtils]: 43: Hoare triple {14323#false} assume !false; {14323#false} is VALID [2018-11-14 18:17:55,636 INFO L134 CoverageAnalysis]: Checked inductivity of 5 backedges. 1 proven. 4 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-14 18:17:55,636 INFO L316 TraceCheckSpWp]: Computing backward predicates... [2018-11-14 18:17:55,831 INFO L273 TraceCheckUtils]: 43: Hoare triple {14323#false} assume !false; {14323#false} is VALID [2018-11-14 18:17:55,832 INFO L273 TraceCheckUtils]: 42: Hoare triple {14323#false} assume !(0bv32 == #t~mem24.base && 0bv32 == #t~mem24.offset);havoc #t~mem24.base, #t~mem24.offset; {14323#false} is VALID [2018-11-14 18:17:55,832 INFO L273 TraceCheckUtils]: 41: Hoare triple {14323#false} assume true;call #t~mem24.base, #t~mem24.offset := read~$Pointer$(~end~0.base, ~bvadd32(4bv32, ~end~0.offset), 4bv32); {14323#false} is VALID [2018-11-14 18:17:55,832 INFO L273 TraceCheckUtils]: 40: Hoare triple {14323#false} assume true; {14323#false} is VALID [2018-11-14 18:17:55,832 INFO L273 TraceCheckUtils]: 39: Hoare triple {14323#false} assume !!(0bv32 != ~end~0.base || 0bv32 != ~end~0.offset); {14323#false} is VALID [2018-11-14 18:17:55,833 INFO L273 TraceCheckUtils]: 38: Hoare triple {14323#false} assume true; {14323#false} is VALID [2018-11-14 18:17:55,833 INFO L273 TraceCheckUtils]: 37: Hoare triple {14323#false} assume 0bv32 != ~end~0.base || 0bv32 != ~end~0.offset; {14323#false} is VALID [2018-11-14 18:17:55,834 INFO L273 TraceCheckUtils]: 36: Hoare triple {14434#(and (= (_ bv0 32) main_~list~0.base) (= main_~list~0.offset (_ bv0 32)))} assume !!(0bv32 != ~list~0.base || 0bv32 != ~list~0.offset);call #t~mem23.base, #t~mem23.offset := read~$Pointer$(~list~0.base, ~bvadd32(4bv32, ~list~0.offset), 4bv32);~end~0.base, ~end~0.offset := #t~mem23.base, #t~mem23.offset;havoc #t~mem23.base, #t~mem23.offset; {14323#false} is VALID [2018-11-14 18:17:55,834 INFO L273 TraceCheckUtils]: 35: Hoare triple {14434#(and (= (_ bv0 32) main_~list~0.base) (= main_~list~0.offset (_ bv0 32)))} assume true; {14434#(and (= (_ bv0 32) main_~list~0.base) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:17:55,835 INFO L273 TraceCheckUtils]: 34: Hoare triple {14489#(and (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)))} call #t~mem26.base, #t~mem26.offset := read~$Pointer$(~list~0.base, ~list~0.offset, 4bv32);~end~0.base, ~end~0.offset := #t~mem26.base, #t~mem26.offset;havoc #t~mem26.base, #t~mem26.offset;call ULTIMATE.dealloc(~list~0.base, ~list~0.offset);~list~0.base, ~list~0.offset := ~end~0.base, ~end~0.offset; {14434#(and (= (_ bv0 32) main_~list~0.base) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:17:55,835 INFO L273 TraceCheckUtils]: 33: Hoare triple {14489#(and (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)))} assume !(0bv32 != ~end~0.base || 0bv32 != ~end~0.offset); {14489#(and (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)))} is VALID [2018-11-14 18:17:55,836 INFO L273 TraceCheckUtils]: 32: Hoare triple {14489#(and (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)))} assume !!(0bv32 != ~list~0.base || 0bv32 != ~list~0.offset);call #t~mem23.base, #t~mem23.offset := read~$Pointer$(~list~0.base, ~bvadd32(4bv32, ~list~0.offset), 4bv32);~end~0.base, ~end~0.offset := #t~mem23.base, #t~mem23.offset;havoc #t~mem23.base, #t~mem23.offset; {14489#(and (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)))} is VALID [2018-11-14 18:17:55,836 INFO L273 TraceCheckUtils]: 31: Hoare triple {14489#(and (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)))} assume true; {14489#(and (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)))} is VALID [2018-11-14 18:17:55,837 INFO L273 TraceCheckUtils]: 30: Hoare triple {14502#(or (not (= main_~end~0.offset (_ bv0 32))) (not (= (_ bv0 32) main_~end~0.base)) (and (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset))))} assume !(0bv32 != ~end~0.base || 0bv32 != ~end~0.offset); {14489#(and (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)))} is VALID [2018-11-14 18:17:55,838 INFO L273 TraceCheckUtils]: 29: Hoare triple {14502#(or (not (= main_~end~0.offset (_ bv0 32))) (not (= (_ bv0 32) main_~end~0.base)) (and (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset))))} assume true; {14502#(or (not (= main_~end~0.offset (_ bv0 32))) (not (= (_ bv0 32) main_~end~0.base)) (and (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset))))} is VALID [2018-11-14 18:17:55,839 INFO L273 TraceCheckUtils]: 28: Hoare triple {14509#(or (not (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset))) (not (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset))) (and (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset))))} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~end~0.base, ~end~0.offset, 4bv32);~end~0.base, ~end~0.offset := #t~mem22.base, #t~mem22.offset;havoc #t~mem22.base, #t~mem22.offset; {14502#(or (not (= main_~end~0.offset (_ bv0 32))) (not (= (_ bv0 32) main_~end~0.base)) (and (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset))))} is VALID [2018-11-14 18:17:55,839 INFO L273 TraceCheckUtils]: 27: Hoare triple {14509#(or (not (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset))) (not (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset))) (and (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset))))} assume true; {14509#(or (not (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset))) (not (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset))) (and (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset))))} is VALID [2018-11-14 18:17:55,840 INFO L273 TraceCheckUtils]: 26: Hoare triple {14509#(or (not (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset))) (not (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset))) (and (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset))))} assume !!~bvsle32(~len~0, 1bv32); {14509#(or (not (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset))) (not (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset))) (and (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset))))} is VALID [2018-11-14 18:17:55,840 INFO L273 TraceCheckUtils]: 25: Hoare triple {14509#(or (not (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset))) (not (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset))) (and (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset))))} assume true; {14509#(or (not (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset))) (not (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset))) (and (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset))))} is VALID [2018-11-14 18:17:55,841 INFO L273 TraceCheckUtils]: 24: Hoare triple {14509#(or (not (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset))) (not (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset))) (and (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset))))} assume !(0bv32 != ~inner~0.base || 0bv32 != ~inner~0.offset); {14509#(or (not (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset))) (not (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset))) (and (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset))))} is VALID [2018-11-14 18:17:55,863 INFO L273 TraceCheckUtils]: 23: Hoare triple {14509#(or (not (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset))) (not (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset))) (and (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset))))} assume true; {14509#(or (not (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset))) (not (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset))) (and (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset))))} is VALID [2018-11-14 18:17:55,865 INFO L273 TraceCheckUtils]: 22: Hoare triple {14509#(or (not (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset))) (not (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset))) (and (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset))))} assume !!(0bv32 != ~end~0.base || 0bv32 != ~end~0.offset);~len~0 := 0bv32;call #t~mem18.base, #t~mem18.offset := read~$Pointer$(~end~0.base, ~bvadd32(4bv32, ~end~0.offset), 4bv32);~inner~0.base, ~inner~0.offset := #t~mem18.base, #t~mem18.offset;havoc #t~mem18.base, #t~mem18.offset; {14509#(or (not (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset))) (not (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset))) (and (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset))))} is VALID [2018-11-14 18:17:55,866 INFO L273 TraceCheckUtils]: 21: Hoare triple {14509#(or (not (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset))) (not (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset))) (and (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset))))} assume true; {14509#(or (not (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset))) (not (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset))) (and (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset))))} is VALID [2018-11-14 18:17:55,866 INFO L273 TraceCheckUtils]: 20: Hoare triple {14509#(or (not (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset))) (not (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset))) (and (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset))))} assume true; {14509#(or (not (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset))) (not (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset))) (and (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset))))} is VALID [2018-11-14 18:17:55,866 INFO L273 TraceCheckUtils]: 19: Hoare triple {14509#(or (not (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset))) (not (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset))) (and (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset))))} assume !!(0bv32 != ~end~0.base || 0bv32 != ~end~0.offset); {14509#(or (not (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset))) (not (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset))) (and (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset))))} is VALID [2018-11-14 18:17:55,867 INFO L273 TraceCheckUtils]: 18: Hoare triple {14509#(or (not (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset))) (not (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset))) (and (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset))))} assume true; {14509#(or (not (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset))) (not (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset))) (and (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset))))} is VALID [2018-11-14 18:17:55,867 INFO L273 TraceCheckUtils]: 17: Hoare triple {14322#true} ~end~0.base, ~end~0.offset := 0bv32, 0bv32;~end~0.base, ~end~0.offset := ~list~0.base, ~list~0.offset; {14509#(or (not (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset))) (not (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset))) (and (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset))))} is VALID [2018-11-14 18:17:55,867 INFO L273 TraceCheckUtils]: 16: Hoare triple {14322#true} assume !(#t~nondet8 != 0bv32);havoc #t~nondet8; {14322#true} is VALID [2018-11-14 18:17:55,867 INFO L273 TraceCheckUtils]: 15: Hoare triple {14322#true} assume true; {14322#true} is VALID [2018-11-14 18:17:55,868 INFO L273 TraceCheckUtils]: 14: Hoare triple {14322#true} ~end~0.base, ~end~0.offset := ~list~0.base, ~list~0.offset; {14322#true} is VALID [2018-11-14 18:17:55,868 INFO L273 TraceCheckUtils]: 13: Hoare triple {14322#true} assume true; {14322#true} is VALID [2018-11-14 18:17:55,868 INFO L273 TraceCheckUtils]: 12: Hoare triple {14322#true} assume !!#t~short7;havoc #t~short7;havoc #t~mem5.base, #t~mem5.offset;havoc #t~mem6.base, #t~mem6.offset; {14322#true} is VALID [2018-11-14 18:17:55,868 INFO L273 TraceCheckUtils]: 11: Hoare triple {14322#true} assume !#t~short7;call #t~mem6.base, #t~mem6.offset := read~$Pointer$(~list~0.base, ~bvadd32(4bv32, ~list~0.offset), 4bv32);#t~short7 := #t~mem6.base == 0bv32 && #t~mem6.offset == 0bv32; {14322#true} is VALID [2018-11-14 18:17:55,868 INFO L273 TraceCheckUtils]: 10: Hoare triple {14322#true} assume true;call #t~mem5.base, #t~mem5.offset := read~$Pointer$(~list~0.base, ~bvadd32(4bv32, ~list~0.offset), 4bv32);#t~short7 := #t~mem5.base != 0bv32 || #t~mem5.offset != 0bv32; {14322#true} is VALID [2018-11-14 18:17:55,868 INFO L273 TraceCheckUtils]: 9: Hoare triple {14322#true} assume #t~nondet1 != 0bv32;havoc #t~nondet1;call write~$Pointer$(0bv32, 0bv32, ~list~0.base, ~bvadd32(4bv32, ~list~0.offset), 4bv32); {14322#true} is VALID [2018-11-14 18:17:55,868 INFO L273 TraceCheckUtils]: 8: Hoare triple {14322#true} assume true; {14322#true} is VALID [2018-11-14 18:17:55,868 INFO L273 TraceCheckUtils]: 7: Hoare triple {14322#true} assume !!(~list~0.base != 0bv32 || ~list~0.offset != 0bv32); {14322#true} is VALID [2018-11-14 18:17:55,869 INFO L273 TraceCheckUtils]: 6: Hoare triple {14322#true} assume true; {14322#true} is VALID [2018-11-14 18:17:55,869 INFO L273 TraceCheckUtils]: 5: Hoare triple {14322#true} call #t~malloc0.base, #t~malloc0.offset := #Ultimate.alloc(8bv32);~list~0.base, ~list~0.offset := #t~malloc0.base, #t~malloc0.offset;call write~$Pointer$(0bv32, 0bv32, ~list~0.base, ~list~0.offset, 4bv32); {14322#true} is VALID [2018-11-14 18:17:55,869 INFO L256 TraceCheckUtils]: 4: Hoare triple {14322#true} call #t~ret27 := main(); {14322#true} is VALID [2018-11-14 18:17:55,869 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {14322#true} {14322#true} #352#return; {14322#true} is VALID [2018-11-14 18:17:55,869 INFO L273 TraceCheckUtils]: 2: Hoare triple {14322#true} assume true; {14322#true} is VALID [2018-11-14 18:17:55,869 INFO L273 TraceCheckUtils]: 1: Hoare triple {14322#true} #NULL.base, #NULL.offset := 0bv32, 0bv32;#valid := #valid[0bv32 := 0bv1]; {14322#true} is VALID [2018-11-14 18:17:55,869 INFO L256 TraceCheckUtils]: 0: Hoare triple {14322#true} call ULTIMATE.init(); {14322#true} is VALID [2018-11-14 18:17:55,874 INFO L134 CoverageAnalysis]: Checked inductivity of 5 backedges. 1 proven. 4 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-14 18:17:55,875 INFO L312 seRefinementStrategy]: Constructing automaton from 0 perfect and 2 imperfect interpolant sequences. [2018-11-14 18:17:55,875 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [8, 6] total 11 [2018-11-14 18:17:55,876 INFO L78 Accepts]: Start accepts. Automaton has 11 states. Word has length 44 [2018-11-14 18:17:55,876 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-14 18:17:55,876 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 11 states. [2018-11-14 18:17:55,976 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 74 edges. 74 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 18:17:55,976 INFO L459 AbstractCegarLoop]: Interpolant automaton has 11 states [2018-11-14 18:17:55,977 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 11 interpolants. [2018-11-14 18:17:55,977 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=34, Invalid=76, Unknown=0, NotChecked=0, Total=110 [2018-11-14 18:17:55,977 INFO L87 Difference]: Start difference. First operand 282 states and 330 transitions. Second operand 11 states. [2018-11-14 18:18:00,580 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 18:18:00,580 INFO L93 Difference]: Finished difference Result 498 states and 567 transitions. [2018-11-14 18:18:00,581 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 18 states. [2018-11-14 18:18:00,581 INFO L78 Accepts]: Start accepts. Automaton has 11 states. Word has length 44 [2018-11-14 18:18:00,581 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-14 18:18:00,581 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 11 states. [2018-11-14 18:18:00,583 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 18 states to 18 states and 322 transitions. [2018-11-14 18:18:00,583 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 11 states. [2018-11-14 18:18:00,586 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 18 states to 18 states and 322 transitions. [2018-11-14 18:18:00,586 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 18 states and 322 transitions. [2018-11-14 18:18:01,518 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 322 edges. 322 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 18:18:01,529 INFO L225 Difference]: With dead ends: 498 [2018-11-14 18:18:01,529 INFO L226 Difference]: Without dead ends: 448 [2018-11-14 18:18:01,530 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 100 GetRequests, 81 SyntacticMatches, 1 SemanticMatches, 18 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 67 ImplicationChecksByTransitivity, 0.7s TimeCoverageRelationStatistics Valid=118, Invalid=262, Unknown=0, NotChecked=0, Total=380 [2018-11-14 18:18:01,530 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 448 states. [2018-11-14 18:18:02,489 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 448 to 320. [2018-11-14 18:18:02,489 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-14 18:18:02,489 INFO L82 GeneralOperation]: Start isEquivalent. First operand 448 states. Second operand 320 states. [2018-11-14 18:18:02,489 INFO L74 IsIncluded]: Start isIncluded. First operand 448 states. Second operand 320 states. [2018-11-14 18:18:02,489 INFO L87 Difference]: Start difference. First operand 448 states. Second operand 320 states. [2018-11-14 18:18:02,499 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 18:18:02,499 INFO L93 Difference]: Finished difference Result 448 states and 507 transitions. [2018-11-14 18:18:02,499 INFO L276 IsEmpty]: Start isEmpty. Operand 448 states and 507 transitions. [2018-11-14 18:18:02,500 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 18:18:02,500 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 18:18:02,501 INFO L74 IsIncluded]: Start isIncluded. First operand 320 states. Second operand 448 states. [2018-11-14 18:18:02,501 INFO L87 Difference]: Start difference. First operand 320 states. Second operand 448 states. [2018-11-14 18:18:02,512 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 18:18:02,512 INFO L93 Difference]: Finished difference Result 448 states and 507 transitions. [2018-11-14 18:18:02,512 INFO L276 IsEmpty]: Start isEmpty. Operand 448 states and 507 transitions. [2018-11-14 18:18:02,513 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 18:18:02,513 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 18:18:02,513 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-14 18:18:02,513 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-14 18:18:02,513 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 320 states. [2018-11-14 18:18:02,519 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 320 states to 320 states and 373 transitions. [2018-11-14 18:18:02,520 INFO L78 Accepts]: Start accepts. Automaton has 320 states and 373 transitions. Word has length 44 [2018-11-14 18:18:02,520 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-14 18:18:02,520 INFO L480 AbstractCegarLoop]: Abstraction has 320 states and 373 transitions. [2018-11-14 18:18:02,520 INFO L481 AbstractCegarLoop]: Interpolant automaton has 11 states. [2018-11-14 18:18:02,520 INFO L276 IsEmpty]: Start isEmpty. Operand 320 states and 373 transitions. [2018-11-14 18:18:02,520 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2018-11-14 18:18:02,521 INFO L367 BasicCegarLoop]: Found error trace [2018-11-14 18:18:02,521 INFO L375 BasicCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-14 18:18:02,521 INFO L423 AbstractCegarLoop]: === Iteration 20 === [mainErr12ASSERT_VIOLATIONERROR_FUNCTION, mainErr0ASSERT_VIOLATIONERROR_FUNCTION, mainErr7ASSERT_VIOLATIONERROR_FUNCTION, mainErr6ASSERT_VIOLATIONERROR_FUNCTION, mainErr4ASSERT_VIOLATIONERROR_FUNCTION, mainErr8ASSERT_VIOLATIONERROR_FUNCTION, mainErr11ASSERT_VIOLATIONERROR_FUNCTION, mainErr3ASSERT_VIOLATIONERROR_FUNCTION, mainErr9ASSERT_VIOLATIONERROR_FUNCTION, mainErr1ASSERT_VIOLATIONERROR_FUNCTION, mainErr5ASSERT_VIOLATIONERROR_FUNCTION, mainErr10ASSERT_VIOLATIONERROR_FUNCTION, mainErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-14 18:18:02,522 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-14 18:18:02,522 INFO L82 PathProgramCache]: Analyzing trace with hash 737610126, now seen corresponding path program 1 times [2018-11-14 18:18:02,522 INFO L223 ckRefinementStrategy]: Switched to mode CVC4_FPBP [2018-11-14 18:18:02,522 INFO L69 tionRefinementEngine]: Using refinement strategy WolfRefinementStrategy No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/cvc4nyu Starting monitored process 21 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 21 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk [2018-11-14 18:18:02,554 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-14 18:18:02,645 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-14 18:18:02,681 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-14 18:18:02,683 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-14 18:18:02,720 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2018-11-14 18:18:02,724 INFO L267 ElimStorePlain]: Start of recursive call 2: End of recursive call: and 1 xjuncts. [2018-11-14 18:18:02,730 INFO L267 ElimStorePlain]: Start of recursive call 1: 1 dim-1 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:18:02,731 INFO L202 ElimStorePlain]: Needed 2 recursive calls to eliminate 1 variables, input treesize:10, output treesize:9 [2018-11-14 18:18:02,734 WARN L383 uantifierElimination]: Trying to double check SDD result, but SMT solver's response was UNKNOWN. [2018-11-14 18:18:02,774 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 10 [2018-11-14 18:18:02,779 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 9 [2018-11-14 18:18:02,782 INFO L267 ElimStorePlain]: Start of recursive call 3: End of recursive call: and 1 xjuncts. [2018-11-14 18:18:02,786 INFO L267 ElimStorePlain]: Start of recursive call 2: 1 dim-1 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:18:02,811 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 10 [2018-11-14 18:18:02,818 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 9 [2018-11-14 18:18:02,821 INFO L267 ElimStorePlain]: Start of recursive call 5: End of recursive call: and 1 xjuncts. [2018-11-14 18:18:02,825 INFO L267 ElimStorePlain]: Start of recursive call 4: 1 dim-1 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:18:02,839 INFO L267 ElimStorePlain]: Start of recursive call 1: 2 dim-2 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:18:02,839 INFO L202 ElimStorePlain]: Needed 5 recursive calls to eliminate 2 variables, input treesize:35, output treesize:27 [2018-11-14 18:18:03,001 INFO L700 Elim1Store]: detected not equals via solver [2018-11-14 18:18:03,013 INFO L700 Elim1Store]: detected not equals via solver [2018-11-14 18:18:03,013 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 2 select indices, 2 select index equivalence classes, 2 disjoint index pairs (out of 1 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 21 [2018-11-14 18:18:03,016 INFO L267 ElimStorePlain]: Start of recursive call 2: End of recursive call: and 1 xjuncts. [2018-11-14 18:18:03,290 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 2 new quantified variables, introduced 0 case distinctions, treesize of input 37 treesize of output 27 [2018-11-14 18:18:03,313 INFO L700 Elim1Store]: detected not equals via solver [2018-11-14 18:18:03,330 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 23 [2018-11-14 18:18:03,334 INFO L267 ElimStorePlain]: Start of recursive call 4: End of recursive call: and 1 xjuncts. [2018-11-14 18:18:03,452 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 28 treesize of output 29 [2018-11-14 18:18:03,465 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 8 treesize of output 7 [2018-11-14 18:18:03,467 INFO L267 ElimStorePlain]: Start of recursive call 6: End of recursive call: and 1 xjuncts. [2018-11-14 18:18:03,507 INFO L267 ElimStorePlain]: Start of recursive call 5: 1 dim-1 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:18:03,543 INFO L267 ElimStorePlain]: Start of recursive call 3: 1 dim-1 vars, 1 dim-2 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:18:03,639 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 2 new quantified variables, introduced 0 case distinctions, treesize of input 37 treesize of output 27 [2018-11-14 18:18:03,655 INFO L700 Elim1Store]: detected not equals via solver [2018-11-14 18:18:03,660 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 2 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 23 [2018-11-14 18:18:03,672 INFO L267 ElimStorePlain]: Start of recursive call 8: End of recursive call: and 1 xjuncts. [2018-11-14 18:18:03,721 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 28 treesize of output 29 [2018-11-14 18:18:03,728 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 8 treesize of output 7 [2018-11-14 18:18:03,731 INFO L267 ElimStorePlain]: Start of recursive call 10: End of recursive call: and 1 xjuncts. [2018-11-14 18:18:03,752 INFO L267 ElimStorePlain]: Start of recursive call 9: 1 dim-1 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:18:03,773 INFO L267 ElimStorePlain]: Start of recursive call 7: 1 dim-1 vars, 1 dim-2 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:18:03,825 INFO L267 ElimStorePlain]: Start of recursive call 1: 1 dim-0 vars, 1 dim-1 vars, 2 dim-2 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:18:03,825 INFO L202 ElimStorePlain]: Needed 10 recursive calls to eliminate 4 variables, input treesize:92, output treesize:57 [2018-11-14 18:18:04,807 WARN L383 uantifierElimination]: Trying to double check SDD result, but SMT solver's response was UNKNOWN. [2018-11-14 18:18:05,054 INFO L700 Elim1Store]: detected not equals via solver [2018-11-14 18:18:05,242 INFO L700 Elim1Store]: detected not equals via solver [2018-11-14 18:18:05,373 INFO L700 Elim1Store]: detected not equals via solver [2018-11-14 18:18:05,374 INFO L303 Elim1Store]: Index analysis took 398 ms [2018-11-14 18:18:05,375 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 3 select indices, 3 select index equivalence classes, 4 disjoint index pairs (out of 3 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 20 treesize of output 21 [2018-11-14 18:18:05,380 INFO L267 ElimStorePlain]: Start of recursive call 2: End of recursive call: and 1 xjuncts. [2018-11-14 18:18:06,174 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 3 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 0 case distinctions, treesize of input 547 treesize of output 419 [2018-11-14 18:18:07,983 WARN L179 SmtUtils]: Spent 1.14 s on a formula simplification. DAG size of input: 64 DAG size of output: 47 [2018-11-14 18:18:08,027 INFO L700 Elim1Store]: detected not equals via solver [2018-11-14 18:18:08,029 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 20 treesize of output 31 [2018-11-14 18:18:08,031 INFO L267 ElimStorePlain]: Start of recursive call 4: End of recursive call: and 1 xjuncts. [2018-11-14 18:18:08,471 INFO L303 Elim1Store]: Index analysis took 307 ms [2018-11-14 18:18:08,472 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 3 select indices, 3 select index equivalence classes, 3 disjoint index pairs (out of 3 index pairs), introduced 2 new quantified variables, introduced 0 case distinctions, treesize of input 181 treesize of output 193 [2018-11-14 18:18:08,491 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 8 treesize of output 7 [2018-11-14 18:18:08,492 INFO L267 ElimStorePlain]: Start of recursive call 6: End of recursive call: and 1 xjuncts. [2018-11-14 18:18:08,797 INFO L700 Elim1Store]: detected not equals via solver [2018-11-14 18:18:08,798 INFO L682 Elim1Store]: detected equality via solver [2018-11-14 18:18:09,089 INFO L303 Elim1Store]: Index analysis took 323 ms [2018-11-14 18:18:09,090 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 4 disjoint index pairs (out of 6 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 172 treesize of output 298 [2018-11-14 18:18:09,117 INFO L700 Elim1Store]: detected not equals via solver [2018-11-14 18:18:09,119 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 80 treesize of output 151 [2018-11-14 18:18:09,126 INFO L267 ElimStorePlain]: Start of recursive call 8: End of recursive call: and 1 xjuncts. [2018-11-14 18:18:09,229 INFO L267 ElimStorePlain]: Start of recursive call 7: 1 dim-1 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:18:09,316 INFO L267 ElimStorePlain]: Start of recursive call 5: 1 dim-1 vars, 1 dim-2 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:18:09,386 INFO L267 ElimStorePlain]: Start of recursive call 3: 1 dim-1 vars, 1 dim-2 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:18:09,579 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 3 disjoint index pairs (out of 1 index pairs), introduced 3 new quantified variables, introduced 0 case distinctions, treesize of input 402 treesize of output 197 [2018-11-14 18:18:09,894 WARN L179 SmtUtils]: Spent 279.00 ms on a formula simplification. DAG size of input: 67 DAG size of output: 45 [2018-11-14 18:18:09,907 INFO L700 Elim1Store]: detected not equals via solver [2018-11-14 18:18:09,912 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 20 treesize of output 31 [2018-11-14 18:18:09,915 INFO L267 ElimStorePlain]: Start of recursive call 10: End of recursive call: and 1 xjuncts. [2018-11-14 18:18:10,061 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 3 select indices, 3 select index equivalence classes, 3 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 0 case distinctions, treesize of input 167 treesize of output 146 [2018-11-14 18:18:10,079 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 8 treesize of output 7 [2018-11-14 18:18:10,080 INFO L267 ElimStorePlain]: Start of recursive call 12: End of recursive call: and 1 xjuncts. [2018-11-14 18:18:10,223 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 3 disjoint index pairs (out of 6 index pairs), introduced 2 new quantified variables, introduced 0 case distinctions, treesize of input 158 treesize of output 128 [2018-11-14 18:18:10,240 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 15 [2018-11-14 18:18:10,242 INFO L267 ElimStorePlain]: Start of recursive call 14: End of recursive call: and 1 xjuncts. [2018-11-14 18:18:10,304 INFO L267 ElimStorePlain]: Start of recursive call 13: 1 dim-1 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:18:10,368 INFO L267 ElimStorePlain]: Start of recursive call 11: 1 dim-1 vars, 1 dim-2 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:18:10,425 INFO L267 ElimStorePlain]: Start of recursive call 9: 1 dim-1 vars, 1 dim-2 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:18:10,516 INFO L267 ElimStorePlain]: Start of recursive call 1: 2 dim-0 vars, 1 dim-1 vars, 2 dim-2 vars, End of recursive call: 1 dim-0 vars, and 1 xjuncts. [2018-11-14 18:18:10,516 INFO L202 ElimStorePlain]: Needed 14 recursive calls to eliminate 5 variables, input treesize:597, output treesize:177 [2018-11-14 18:18:11,014 WARN L383 uantifierElimination]: Trying to double check SDD result, but SMT solver's response was UNKNOWN. [2018-11-14 18:18:11,781 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 3 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 0 case distinctions, treesize of input 85 treesize of output 79 [2018-11-14 18:18:11,794 INFO L700 Elim1Store]: detected not equals via solver [2018-11-14 18:18:11,795 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 10 [2018-11-14 18:18:11,796 INFO L267 ElimStorePlain]: Start of recursive call 3: End of recursive call: and 1 xjuncts. [2018-11-14 18:18:11,837 INFO L700 Elim1Store]: detected not equals via solver [2018-11-14 18:18:11,838 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 6 [2018-11-14 18:18:11,843 INFO L267 ElimStorePlain]: Start of recursive call 4: End of recursive call: and 1 xjuncts. [2018-11-14 18:18:11,866 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 3 [2018-11-14 18:18:11,867 INFO L267 ElimStorePlain]: Start of recursive call 5: End of recursive call: and 1 xjuncts. [2018-11-14 18:18:11,875 INFO L267 ElimStorePlain]: Start of recursive call 2: 3 dim-1 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:18:11,944 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 3 disjoint index pairs (out of 3 index pairs), introduced 5 new quantified variables, introduced 0 case distinctions, treesize of input 100 treesize of output 62 [2018-11-14 18:18:11,959 INFO L700 Elim1Store]: detected not equals via solver [2018-11-14 18:18:11,962 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 3 disjoint index pairs (out of 1 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 24 treesize of output 17 [2018-11-14 18:18:11,966 INFO L267 ElimStorePlain]: Start of recursive call 7: End of recursive call: and 1 xjuncts. [2018-11-14 18:18:11,983 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 2 disjoint index pairs (out of 1 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 8 [2018-11-14 18:18:11,985 INFO L267 ElimStorePlain]: Start of recursive call 8: End of recursive call: and 1 xjuncts. [2018-11-14 18:18:11,988 INFO L267 ElimStorePlain]: Start of recursive call 6: 2 dim-1 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:18:11,994 INFO L267 ElimStorePlain]: Start of recursive call 1: 2 dim-0 vars, 2 dim-2 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:18:11,994 INFO L202 ElimStorePlain]: Needed 8 recursive calls to eliminate 4 variables, input treesize:184, output treesize:7 [2018-11-14 18:18:12,007 WARN L383 uantifierElimination]: Trying to double check SDD result, but SMT solver's response was UNKNOWN. [2018-11-14 18:18:12,039 INFO L256 TraceCheckUtils]: 0: Hoare triple {16410#true} call ULTIMATE.init(); {16410#true} is VALID [2018-11-14 18:18:12,040 INFO L273 TraceCheckUtils]: 1: Hoare triple {16410#true} #NULL.base, #NULL.offset := 0bv32, 0bv32;#valid := #valid[0bv32 := 0bv1]; {16410#true} is VALID [2018-11-14 18:18:12,040 INFO L273 TraceCheckUtils]: 2: Hoare triple {16410#true} assume true; {16410#true} is VALID [2018-11-14 18:18:12,040 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {16410#true} {16410#true} #352#return; {16410#true} is VALID [2018-11-14 18:18:12,040 INFO L256 TraceCheckUtils]: 4: Hoare triple {16410#true} call #t~ret27 := main(); {16410#true} is VALID [2018-11-14 18:18:12,042 INFO L273 TraceCheckUtils]: 5: Hoare triple {16410#true} call #t~malloc0.base, #t~malloc0.offset := #Ultimate.alloc(8bv32);~list~0.base, ~list~0.offset := #t~malloc0.base, #t~malloc0.offset;call write~$Pointer$(0bv32, 0bv32, ~list~0.base, ~list~0.offset, 4bv32); {16430#(and (= (_ bv1 1) (select |#valid| main_~list~0.base)) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:18:12,043 INFO L273 TraceCheckUtils]: 6: Hoare triple {16430#(and (= (_ bv1 1) (select |#valid| main_~list~0.base)) (= main_~list~0.offset (_ bv0 32)))} assume true; {16430#(and (= (_ bv1 1) (select |#valid| main_~list~0.base)) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:18:12,043 INFO L273 TraceCheckUtils]: 7: Hoare triple {16430#(and (= (_ bv1 1) (select |#valid| main_~list~0.base)) (= main_~list~0.offset (_ bv0 32)))} assume !!(~list~0.base != 0bv32 || ~list~0.offset != 0bv32); {16430#(and (= (_ bv1 1) (select |#valid| main_~list~0.base)) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:18:12,044 INFO L273 TraceCheckUtils]: 8: Hoare triple {16430#(and (= (_ bv1 1) (select |#valid| main_~list~0.base)) (= main_~list~0.offset (_ bv0 32)))} assume true; {16430#(and (= (_ bv1 1) (select |#valid| main_~list~0.base)) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:18:12,045 INFO L273 TraceCheckUtils]: 9: Hoare triple {16430#(and (= (_ bv1 1) (select |#valid| main_~list~0.base)) (= main_~list~0.offset (_ bv0 32)))} assume #t~nondet1 != 0bv32;havoc #t~nondet1;call write~$Pointer$(0bv32, 0bv32, ~list~0.base, ~bvadd32(4bv32, ~list~0.offset), 4bv32); {16443#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (_ bv1 1) (select |#valid| main_~list~0.base)) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:18:12,045 INFO L273 TraceCheckUtils]: 10: Hoare triple {16443#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (_ bv1 1) (select |#valid| main_~list~0.base)) (= main_~list~0.offset (_ bv0 32)))} assume true;call #t~mem5.base, #t~mem5.offset := read~$Pointer$(~list~0.base, ~bvadd32(4bv32, ~list~0.offset), 4bv32);#t~short7 := #t~mem5.base != 0bv32 || #t~mem5.offset != 0bv32; {16443#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (_ bv1 1) (select |#valid| main_~list~0.base)) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:18:12,046 INFO L273 TraceCheckUtils]: 11: Hoare triple {16443#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (_ bv1 1) (select |#valid| main_~list~0.base)) (= main_~list~0.offset (_ bv0 32)))} assume !#t~short7;call #t~mem6.base, #t~mem6.offset := read~$Pointer$(~list~0.base, ~bvadd32(4bv32, ~list~0.offset), 4bv32);#t~short7 := #t~mem6.base == 0bv32 && #t~mem6.offset == 0bv32; {16443#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (_ bv1 1) (select |#valid| main_~list~0.base)) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:18:12,046 INFO L273 TraceCheckUtils]: 12: Hoare triple {16443#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (_ bv1 1) (select |#valid| main_~list~0.base)) (= main_~list~0.offset (_ bv0 32)))} assume !!#t~short7;havoc #t~short7;havoc #t~mem5.base, #t~mem5.offset;havoc #t~mem6.base, #t~mem6.offset; {16443#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (_ bv1 1) (select |#valid| main_~list~0.base)) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:18:12,047 INFO L273 TraceCheckUtils]: 13: Hoare triple {16443#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (_ bv1 1) (select |#valid| main_~list~0.base)) (= main_~list~0.offset (_ bv0 32)))} assume true; {16443#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (_ bv1 1) (select |#valid| main_~list~0.base)) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:18:12,048 INFO L273 TraceCheckUtils]: 14: Hoare triple {16443#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (_ bv1 1) (select |#valid| main_~list~0.base)) (= main_~list~0.offset (_ bv0 32)))} ~end~0.base, ~end~0.offset := ~list~0.base, ~list~0.offset; {16459#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.base main_~end~0.base) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (_ bv1 1) (select |#valid| main_~list~0.base)) (= main_~list~0.offset main_~end~0.offset) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:18:12,049 INFO L273 TraceCheckUtils]: 15: Hoare triple {16459#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.base main_~end~0.base) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (_ bv1 1) (select |#valid| main_~list~0.base)) (= main_~list~0.offset main_~end~0.offset) (= main_~list~0.offset (_ bv0 32)))} assume true; {16459#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.base main_~end~0.base) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (_ bv1 1) (select |#valid| main_~list~0.base)) (= main_~list~0.offset main_~end~0.offset) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:18:12,054 INFO L273 TraceCheckUtils]: 16: Hoare triple {16459#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= main_~list~0.base main_~end~0.base) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (_ bv1 1) (select |#valid| main_~list~0.base)) (= main_~list~0.offset main_~end~0.offset) (= main_~list~0.offset (_ bv0 32)))} assume !!(#t~nondet8 != 0bv32);havoc #t~nondet8;call #t~malloc9.base, #t~malloc9.offset := #Ultimate.alloc(8bv32);call write~$Pointer$(#t~malloc9.base, #t~malloc9.offset, ~end~0.base, ~end~0.offset, 4bv32);call #t~mem10.base, #t~mem10.offset := read~$Pointer$(~end~0.base, ~end~0.offset, 4bv32);~end~0.base, ~end~0.offset := #t~mem10.base, #t~mem10.offset;havoc #t~mem10.base, #t~mem10.offset;call write~$Pointer$(0bv32, 0bv32, ~end~0.base, ~end~0.offset, 4bv32); {16466#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (not (= main_~list~0.base main_~end~0.base)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) main_~end~0.base) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (= (_ bv1 1) (select |#valid| main_~end~0.base)) (= (_ bv1 1) (select |#valid| main_~list~0.base)) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:18:12,056 INFO L273 TraceCheckUtils]: 17: Hoare triple {16466#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (not (= main_~list~0.base main_~end~0.base)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) main_~end~0.base) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (= (_ bv1 1) (select |#valid| main_~end~0.base)) (= (_ bv1 1) (select |#valid| main_~list~0.base)) (= main_~list~0.offset (_ bv0 32)))} assume true; {16466#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (not (= main_~list~0.base main_~end~0.base)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) main_~end~0.base) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (= (_ bv1 1) (select |#valid| main_~end~0.base)) (= (_ bv1 1) (select |#valid| main_~list~0.base)) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:18:12,057 INFO L273 TraceCheckUtils]: 18: Hoare triple {16466#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (not (= main_~list~0.base main_~end~0.base)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) main_~end~0.base) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (= (_ bv1 1) (select |#valid| main_~end~0.base)) (= (_ bv1 1) (select |#valid| main_~list~0.base)) (= main_~list~0.offset (_ bv0 32)))} assume !!(0bv32 != ~end~0.base || 0bv32 != ~end~0.offset); {16466#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (not (= main_~list~0.base main_~end~0.base)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) main_~end~0.base) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (= (_ bv1 1) (select |#valid| main_~end~0.base)) (= (_ bv1 1) (select |#valid| main_~list~0.base)) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:18:12,058 INFO L273 TraceCheckUtils]: 19: Hoare triple {16466#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (not (= main_~list~0.base main_~end~0.base)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) main_~end~0.base) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (= (_ bv1 1) (select |#valid| main_~end~0.base)) (= (_ bv1 1) (select |#valid| main_~list~0.base)) (= main_~list~0.offset (_ bv0 32)))} assume true; {16466#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (not (= main_~list~0.base main_~end~0.base)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) main_~end~0.base) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (= (_ bv1 1) (select |#valid| main_~end~0.base)) (= (_ bv1 1) (select |#valid| main_~list~0.base)) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:18:12,060 INFO L273 TraceCheckUtils]: 20: Hoare triple {16466#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (not (= main_~list~0.base main_~end~0.base)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) main_~end~0.base) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (= (_ bv1 1) (select |#valid| main_~end~0.base)) (= (_ bv1 1) (select |#valid| main_~list~0.base)) (= main_~list~0.offset (_ bv0 32)))} assume true; {16466#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (not (= main_~list~0.base main_~end~0.base)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) main_~end~0.base) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (= (_ bv1 1) (select |#valid| main_~end~0.base)) (= (_ bv1 1) (select |#valid| main_~list~0.base)) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:18:12,062 INFO L273 TraceCheckUtils]: 21: Hoare triple {16466#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (not (= main_~list~0.base main_~end~0.base)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) main_~end~0.base) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (= (_ bv1 1) (select |#valid| main_~end~0.base)) (= (_ bv1 1) (select |#valid| main_~list~0.base)) (= main_~list~0.offset (_ bv0 32)))} assume !!(~end~0.base != 0bv32 || ~end~0.offset != 0bv32); {16466#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (not (= main_~list~0.base main_~end~0.base)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) main_~end~0.base) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (= (_ bv1 1) (select |#valid| main_~end~0.base)) (= (_ bv1 1) (select |#valid| main_~list~0.base)) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:18:12,064 INFO L273 TraceCheckUtils]: 22: Hoare triple {16466#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (not (= main_~list~0.base main_~end~0.base)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) main_~end~0.base) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (= (_ bv1 1) (select |#valid| main_~end~0.base)) (= (_ bv1 1) (select |#valid| main_~list~0.base)) (= main_~list~0.offset (_ bv0 32)))} assume true; {16466#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (not (= main_~list~0.base main_~end~0.base)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) main_~end~0.base) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (= (_ bv1 1) (select |#valid| main_~end~0.base)) (= (_ bv1 1) (select |#valid| main_~list~0.base)) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:18:12,075 INFO L273 TraceCheckUtils]: 23: Hoare triple {16466#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (not (= main_~list~0.base main_~end~0.base)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) main_~end~0.base) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (= (_ bv1 1) (select |#valid| main_~end~0.base)) (= (_ bv1 1) (select |#valid| main_~list~0.base)) (= main_~list~0.offset (_ bv0 32)))} assume !(#t~nondet11 != 0bv32);havoc #t~nondet11;call #t~malloc12.base, #t~malloc12.offset := #Ultimate.alloc(8bv32);call write~$Pointer$(#t~malloc12.base, #t~malloc12.offset, ~end~0.base, ~bvadd32(4bv32, ~end~0.offset), 4bv32);call #t~mem13.base, #t~mem13.offset := read~$Pointer$(~end~0.base, ~bvadd32(4bv32, ~end~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, #t~mem13.base, #t~mem13.offset, 4bv32);havoc #t~mem13.base, #t~mem13.offset;call #t~mem14.base, #t~mem14.offset := read~$Pointer$(~end~0.base, ~bvadd32(4bv32, ~end~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, #t~mem14.base, ~bvadd32(4bv32, #t~mem14.offset), 4bv32);havoc #t~mem14.base, #t~mem14.offset; {16488#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) main_~list~0.base)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (exists ((main_~end~0.offset (_ BitVec 32))) (and (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) main_~end~0.offset)) (not (= main_~list~0.base (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32))))) (not (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32))))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv4 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32)))) (bvadd (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv4 32))) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) main_~end~0.offset)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv0 32))))) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:18:12,079 INFO L273 TraceCheckUtils]: 24: Hoare triple {16488#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) main_~list~0.base)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (exists ((main_~end~0.offset (_ BitVec 32))) (and (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) main_~end~0.offset)) (not (= main_~list~0.base (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32))))) (not (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32))))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv4 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32)))) (bvadd (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv4 32))) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) main_~end~0.offset)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv0 32))))) (= main_~list~0.offset (_ bv0 32)))} assume true;call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~end~0.base, ~bvadd32(4bv32, ~end~0.offset), 4bv32);#t~short17 := #t~mem15.base != 0bv32 || #t~mem15.offset != 0bv32; {16488#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) main_~list~0.base)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (exists ((main_~end~0.offset (_ BitVec 32))) (and (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) main_~end~0.offset)) (not (= main_~list~0.base (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32))))) (not (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32))))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv4 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32)))) (bvadd (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv4 32))) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) main_~end~0.offset)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv0 32))))) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:18:12,083 INFO L273 TraceCheckUtils]: 25: Hoare triple {16488#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) main_~list~0.base)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (exists ((main_~end~0.offset (_ BitVec 32))) (and (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) main_~end~0.offset)) (not (= main_~list~0.base (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32))))) (not (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32))))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv4 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32)))) (bvadd (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv4 32))) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) main_~end~0.offset)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv0 32))))) (= main_~list~0.offset (_ bv0 32)))} assume #t~short17; {16488#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) main_~list~0.base)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (exists ((main_~end~0.offset (_ BitVec 32))) (and (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) main_~end~0.offset)) (not (= main_~list~0.base (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32))))) (not (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32))))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv4 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32)))) (bvadd (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv4 32))) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) main_~end~0.offset)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv0 32))))) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:18:12,086 INFO L273 TraceCheckUtils]: 26: Hoare triple {16488#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) main_~list~0.base)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (exists ((main_~end~0.offset (_ BitVec 32))) (and (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) main_~end~0.offset)) (not (= main_~list~0.base (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32))))) (not (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32))))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv4 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32)))) (bvadd (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv4 32))) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) main_~end~0.offset)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv0 32))))) (= main_~list~0.offset (_ bv0 32)))} assume !!#t~short17;havoc #t~mem15.base, #t~mem15.offset;havoc #t~mem16.base, #t~mem16.offset;havoc #t~short17; {16488#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) main_~list~0.base)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (exists ((main_~end~0.offset (_ BitVec 32))) (and (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) main_~end~0.offset)) (not (= main_~list~0.base (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32))))) (not (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32))))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv4 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32)))) (bvadd (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv4 32))) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) main_~end~0.offset)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv0 32))))) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:18:12,091 INFO L273 TraceCheckUtils]: 27: Hoare triple {16488#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) main_~list~0.base)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (exists ((main_~end~0.offset (_ BitVec 32))) (and (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) main_~end~0.offset)) (not (= main_~list~0.base (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32))))) (not (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32))))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv4 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32)))) (bvadd (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv4 32))) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) main_~end~0.offset)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv0 32))))) (= main_~list~0.offset (_ bv0 32)))} assume true; {16488#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) main_~list~0.base)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (exists ((main_~end~0.offset (_ BitVec 32))) (and (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) main_~end~0.offset)) (not (= main_~list~0.base (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32))))) (not (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32))))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv4 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32)))) (bvadd (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv4 32))) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) main_~end~0.offset)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv0 32))))) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:18:12,094 INFO L273 TraceCheckUtils]: 28: Hoare triple {16488#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) main_~list~0.base)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (exists ((main_~end~0.offset (_ BitVec 32))) (and (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) main_~end~0.offset)) (not (= main_~list~0.base (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32))))) (not (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32))))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv4 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32)))) (bvadd (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv4 32))) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) main_~end~0.offset)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv0 32))))) (= main_~list~0.offset (_ bv0 32)))} assume true; {16488#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) main_~list~0.base)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (exists ((main_~end~0.offset (_ BitVec 32))) (and (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) main_~end~0.offset)) (not (= main_~list~0.base (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32))))) (not (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32))))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv4 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32)))) (bvadd (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv4 32))) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) main_~end~0.offset)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv0 32))))) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:18:12,098 INFO L273 TraceCheckUtils]: 29: Hoare triple {16488#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) main_~list~0.base)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (exists ((main_~end~0.offset (_ BitVec 32))) (and (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) main_~end~0.offset)) (not (= main_~list~0.base (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32))))) (not (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32))))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv4 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32)))) (bvadd (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv4 32))) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) main_~end~0.offset)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv0 32))))) (= main_~list~0.offset (_ bv0 32)))} assume !(#t~nondet8 != 0bv32);havoc #t~nondet8; {16488#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) main_~list~0.base)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (exists ((main_~end~0.offset (_ BitVec 32))) (and (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) main_~end~0.offset)) (not (= main_~list~0.base (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32))))) (not (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32))))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv4 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32)))) (bvadd (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv4 32))) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) main_~end~0.offset)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv0 32))))) (= main_~list~0.offset (_ bv0 32)))} is VALID [2018-11-14 18:18:12,103 INFO L273 TraceCheckUtils]: 30: Hoare triple {16488#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) main_~list~0.base)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (bvadd main_~list~0.offset (_ bv4 32))) (_ bv0 32)) (exists ((main_~end~0.offset (_ BitVec 32))) (and (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) main_~end~0.offset)) (not (= main_~list~0.base (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32))))) (not (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32))))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv4 32)) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32)))) (bvadd (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv4 32))) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) main_~end~0.offset)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (bvadd main_~end~0.offset (_ bv4 32)))) (_ bv0 32))))) (= main_~list~0.offset (_ bv0 32)))} ~end~0.base, ~end~0.offset := 0bv32, 0bv32;~end~0.base, ~end~0.offset := ~list~0.base, ~list~0.offset; {16510#(and (exists ((v_subst_1 (_ BitVec 32))) (and (not (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32))) main_~end~0.base)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32))) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset))) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) v_subst_1) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32)))) (_ bv4 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32)))) (bvadd (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32))) (_ bv4 32)))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32)))) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) v_subst_1)))) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset) main_~end~0.base)) (= main_~end~0.offset (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)))} is VALID [2018-11-14 18:18:12,104 INFO L273 TraceCheckUtils]: 31: Hoare triple {16510#(and (exists ((v_subst_1 (_ BitVec 32))) (and (not (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32))) main_~end~0.base)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32))) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset))) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) v_subst_1) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32)))) (_ bv4 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32)))) (bvadd (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32))) (_ bv4 32)))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32)))) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) v_subst_1)))) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset) main_~end~0.base)) (= main_~end~0.offset (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)))} assume true; {16510#(and (exists ((v_subst_1 (_ BitVec 32))) (and (not (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32))) main_~end~0.base)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32))) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset))) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) v_subst_1) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32)))) (_ bv4 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32)))) (bvadd (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32))) (_ bv4 32)))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32)))) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) v_subst_1)))) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset) main_~end~0.base)) (= main_~end~0.offset (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)))} is VALID [2018-11-14 18:18:12,106 INFO L273 TraceCheckUtils]: 32: Hoare triple {16510#(and (exists ((v_subst_1 (_ BitVec 32))) (and (not (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32))) main_~end~0.base)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32))) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset))) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) v_subst_1) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32)))) (_ bv4 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32)))) (bvadd (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32))) (_ bv4 32)))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32)))) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) v_subst_1)))) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset) main_~end~0.base)) (= main_~end~0.offset (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)))} assume !!(0bv32 != ~end~0.base || 0bv32 != ~end~0.offset); {16510#(and (exists ((v_subst_1 (_ BitVec 32))) (and (not (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32))) main_~end~0.base)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32))) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset))) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) v_subst_1) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32)))) (_ bv4 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32)))) (bvadd (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32))) (_ bv4 32)))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32)))) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) v_subst_1)))) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset) main_~end~0.base)) (= main_~end~0.offset (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)))} is VALID [2018-11-14 18:18:12,108 INFO L273 TraceCheckUtils]: 33: Hoare triple {16510#(and (exists ((v_subst_1 (_ BitVec 32))) (and (not (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32))) main_~end~0.base)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32))) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset))) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) v_subst_1) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32)))) (_ bv4 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32)))) (bvadd (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32))) (_ bv4 32)))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32)))) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) v_subst_1)))) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset) main_~end~0.base)) (= main_~end~0.offset (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)))} assume true; {16510#(and (exists ((v_subst_1 (_ BitVec 32))) (and (not (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32))) main_~end~0.base)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32))) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset))) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) v_subst_1) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32)))) (_ bv4 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32)))) (bvadd (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32))) (_ bv4 32)))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32)))) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) v_subst_1)))) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset) main_~end~0.base)) (= main_~end~0.offset (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)))} is VALID [2018-11-14 18:18:12,109 INFO L273 TraceCheckUtils]: 34: Hoare triple {16510#(and (exists ((v_subst_1 (_ BitVec 32))) (and (not (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32))) main_~end~0.base)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32))) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset))) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) v_subst_1) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32)))) (_ bv4 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32)))) (bvadd (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32))) (_ bv4 32)))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32)))) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) v_subst_1)))) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset) main_~end~0.base)) (= main_~end~0.offset (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)))} assume true; {16510#(and (exists ((v_subst_1 (_ BitVec 32))) (and (not (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32))) main_~end~0.base)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32))) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset))) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) v_subst_1) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32)))) (_ bv4 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32)))) (bvadd (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32))) (_ bv4 32)))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32)))) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) v_subst_1)))) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset) main_~end~0.base)) (= main_~end~0.offset (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)))} is VALID [2018-11-14 18:18:12,113 INFO L273 TraceCheckUtils]: 35: Hoare triple {16510#(and (exists ((v_subst_1 (_ BitVec 32))) (and (not (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32))) main_~end~0.base)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (not (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32))) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset))) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) v_subst_1) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32)))) (_ bv4 32))) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32)))) (bvadd (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32))) (_ bv4 32)))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32)))) (_ bv0 32)) (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (bvadd v_subst_1 (_ bv4 32)))) (= (_ bv0 32) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) v_subst_1)))) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset) main_~end~0.base)) (= main_~end~0.offset (_ bv0 32)) (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (bvadd main_~end~0.offset (_ bv4 32))) (_ bv0 32)))} assume !!(0bv32 != ~end~0.base || 0bv32 != ~end~0.offset);~len~0 := 0bv32;call #t~mem18.base, #t~mem18.offset := read~$Pointer$(~end~0.base, ~bvadd32(4bv32, ~end~0.offset), 4bv32);~inner~0.base, ~inner~0.offset := #t~mem18.base, #t~mem18.offset;havoc #t~mem18.base, #t~mem18.offset; {16526#(and (= (_ bv0 32) main_~inner~0.offset) (= main_~inner~0.base (_ bv0 32)))} is VALID [2018-11-14 18:18:12,114 INFO L273 TraceCheckUtils]: 36: Hoare triple {16526#(and (= (_ bv0 32) main_~inner~0.offset) (= main_~inner~0.base (_ bv0 32)))} assume true; {16526#(and (= (_ bv0 32) main_~inner~0.offset) (= main_~inner~0.base (_ bv0 32)))} is VALID [2018-11-14 18:18:12,115 INFO L273 TraceCheckUtils]: 37: Hoare triple {16526#(and (= (_ bv0 32) main_~inner~0.offset) (= main_~inner~0.base (_ bv0 32)))} assume !!(0bv32 != ~inner~0.base || 0bv32 != ~inner~0.offset); {16411#false} is VALID [2018-11-14 18:18:12,115 INFO L273 TraceCheckUtils]: 38: Hoare triple {16411#false} assume ~len~0 == 0bv32;~len~0 := 1bv32; {16411#false} is VALID [2018-11-14 18:18:12,115 INFO L273 TraceCheckUtils]: 39: Hoare triple {16411#false} assume true; {16411#false} is VALID [2018-11-14 18:18:12,115 INFO L273 TraceCheckUtils]: 40: Hoare triple {16411#false} assume !!(0bv32 != ~inner~0.base || 0bv32 != ~inner~0.offset); {16411#false} is VALID [2018-11-14 18:18:12,116 INFO L273 TraceCheckUtils]: 41: Hoare triple {16411#false} assume true; {16411#false} is VALID [2018-11-14 18:18:12,116 INFO L273 TraceCheckUtils]: 42: Hoare triple {16411#false} assume true;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~inner~0.base, ~bvadd32(4bv32, ~inner~0.offset), 4bv32); {16411#false} is VALID [2018-11-14 18:18:12,116 INFO L273 TraceCheckUtils]: 43: Hoare triple {16411#false} assume !(0bv32 == #t~mem19.base && 0bv32 == #t~mem19.offset);havoc #t~mem19.base, #t~mem19.offset; {16411#false} is VALID [2018-11-14 18:18:12,116 INFO L273 TraceCheckUtils]: 44: Hoare triple {16411#false} assume !false; {16411#false} is VALID [2018-11-14 18:18:12,133 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-14 18:18:12,133 INFO L316 TraceCheckSpWp]: Computing backward predicates...