java -ea -Xmx8000000000 -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc ../../../trunk/examples/toolchains/AutomizerC.xml -s ../../../trunk/examples/settings/default/automizer/svcomp-Reach-32bit-Automizer_Default.epf -i ../../../trunk/examples/svcomp/array-examples/standard_vararg_true-unreach-call_ground_true-termination.i -------------------------------------------------------------------------------- This is Ultimate 0.1.23-18e5b2d-m [2018-11-18 23:00:54,412 INFO L170 SettingsManager]: Resetting all preferences to default values... [2018-11-18 23:00:54,414 INFO L174 SettingsManager]: Resetting UltimateCore preferences to default values [2018-11-18 23:00:54,425 INFO L177 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2018-11-18 23:00:54,426 INFO L174 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2018-11-18 23:00:54,427 INFO L174 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2018-11-18 23:00:54,428 INFO L174 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2018-11-18 23:00:54,430 INFO L174 SettingsManager]: Resetting LassoRanker preferences to default values [2018-11-18 23:00:54,431 INFO L174 SettingsManager]: Resetting Reaching Definitions preferences to default values [2018-11-18 23:00:54,432 INFO L174 SettingsManager]: Resetting SyntaxChecker preferences to default values [2018-11-18 23:00:54,433 INFO L177 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2018-11-18 23:00:54,433 INFO L174 SettingsManager]: Resetting LTL2Aut preferences to default values [2018-11-18 23:00:54,434 INFO L174 SettingsManager]: Resetting PEA to Boogie preferences to default values [2018-11-18 23:00:54,435 INFO L174 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2018-11-18 23:00:54,436 INFO L174 SettingsManager]: Resetting ChcToBoogie preferences to default values [2018-11-18 23:00:54,437 INFO L174 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2018-11-18 23:00:54,438 INFO L174 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2018-11-18 23:00:54,440 INFO L174 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2018-11-18 23:00:54,442 INFO L174 SettingsManager]: Resetting CodeCheck preferences to default values [2018-11-18 23:00:54,444 INFO L174 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2018-11-18 23:00:54,445 INFO L174 SettingsManager]: Resetting RCFGBuilder preferences to default values [2018-11-18 23:00:54,446 INFO L174 SettingsManager]: Resetting TraceAbstraction preferences to default values [2018-11-18 23:00:54,448 INFO L177 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2018-11-18 23:00:54,449 INFO L177 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2018-11-18 23:00:54,449 INFO L174 SettingsManager]: Resetting TreeAutomizer preferences to default values [2018-11-18 23:00:54,450 INFO L174 SettingsManager]: Resetting IcfgTransformer preferences to default values [2018-11-18 23:00:54,451 INFO L174 SettingsManager]: Resetting Boogie Printer preferences to default values [2018-11-18 23:00:54,452 INFO L174 SettingsManager]: Resetting ReqPrinter preferences to default values [2018-11-18 23:00:54,452 INFO L174 SettingsManager]: Resetting Witness Printer preferences to default values [2018-11-18 23:00:54,454 INFO L177 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2018-11-18 23:00:54,454 INFO L174 SettingsManager]: Resetting CDTParser preferences to default values [2018-11-18 23:00:54,454 INFO L177 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2018-11-18 23:00:54,455 INFO L177 SettingsManager]: ReqParser provides no preferences, ignoring... [2018-11-18 23:00:54,455 INFO L174 SettingsManager]: Resetting SmtParser preferences to default values [2018-11-18 23:00:54,456 INFO L174 SettingsManager]: Resetting Witness Parser preferences to default values [2018-11-18 23:00:54,457 INFO L181 SettingsManager]: Finished resetting all preferences to default values... [2018-11-18 23:00:54,457 INFO L98 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/settings/default/automizer/svcomp-Reach-32bit-Automizer_Default.epf [2018-11-18 23:00:54,472 INFO L110 SettingsManager]: Loading preferences was successful [2018-11-18 23:00:54,472 INFO L112 SettingsManager]: Preferences different from defaults after loading the file: [2018-11-18 23:00:54,473 INFO L131 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2018-11-18 23:00:54,473 INFO L133 SettingsManager]: * to procedures, called more than once=true [2018-11-18 23:00:54,474 INFO L131 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2018-11-18 23:00:54,474 INFO L133 SettingsManager]: * Create parallel compositions if possible=false [2018-11-18 23:00:54,474 INFO L133 SettingsManager]: * Use SBE=true [2018-11-18 23:00:54,474 INFO L131 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2018-11-18 23:00:54,474 INFO L133 SettingsManager]: * sizeof long=4 [2018-11-18 23:00:54,475 INFO L133 SettingsManager]: * Overapproximate operations on floating types=true [2018-11-18 23:00:54,475 INFO L133 SettingsManager]: * sizeof POINTER=4 [2018-11-18 23:00:54,475 INFO L133 SettingsManager]: * Check division by zero=IGNORE [2018-11-18 23:00:54,475 INFO L133 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2018-11-18 23:00:54,475 INFO L133 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2018-11-18 23:00:54,476 INFO L133 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2018-11-18 23:00:54,476 INFO L133 SettingsManager]: * sizeof long double=12 [2018-11-18 23:00:54,476 INFO L133 SettingsManager]: * Check if freed pointer was valid=false [2018-11-18 23:00:54,476 INFO L133 SettingsManager]: * Use constant arrays=true [2018-11-18 23:00:54,476 INFO L133 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2018-11-18 23:00:54,476 INFO L131 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2018-11-18 23:00:54,477 INFO L133 SettingsManager]: * Size of a code block=SequenceOfStatements [2018-11-18 23:00:54,477 INFO L133 SettingsManager]: * To the following directory=./dump/ [2018-11-18 23:00:54,477 INFO L133 SettingsManager]: * SMT solver=External_DefaultMode [2018-11-18 23:00:54,477 INFO L133 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2018-11-18 23:00:54,477 INFO L131 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2018-11-18 23:00:54,478 INFO L133 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2018-11-18 23:00:54,478 INFO L133 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2018-11-18 23:00:54,478 INFO L133 SettingsManager]: * Trace refinement strategy=CAMEL [2018-11-18 23:00:54,478 INFO L133 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2018-11-18 23:00:54,478 INFO L133 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2018-11-18 23:00:54,479 INFO L133 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2018-11-18 23:00:54,520 INFO L81 nceAwareModelManager]: Repository-Root is: /tmp [2018-11-18 23:00:54,532 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2018-11-18 23:00:54,536 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2018-11-18 23:00:54,537 INFO L271 PluginConnector]: Initializing CDTParser... [2018-11-18 23:00:54,538 INFO L276 PluginConnector]: CDTParser initialized [2018-11-18 23:00:54,538 INFO L418 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/svcomp/array-examples/standard_vararg_true-unreach-call_ground_true-termination.i [2018-11-18 23:00:54,594 INFO L221 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/79a4e2cc8/6df7d0e00b00466982f0cfb22f9cc410/FLAG99e9e2999 [2018-11-18 23:00:54,984 INFO L307 CDTParser]: Found 1 translation units. [2018-11-18 23:00:54,984 INFO L161 CDTParser]: Scanning /storage/repos/ultimate/trunk/examples/svcomp/array-examples/standard_vararg_true-unreach-call_ground_true-termination.i [2018-11-18 23:00:54,990 INFO L355 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/79a4e2cc8/6df7d0e00b00466982f0cfb22f9cc410/FLAG99e9e2999 [2018-11-18 23:00:55,352 INFO L363 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/79a4e2cc8/6df7d0e00b00466982f0cfb22f9cc410 [2018-11-18 23:00:55,362 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2018-11-18 23:00:55,364 INFO L131 ToolchainWalker]: Walking toolchain with 4 elements. [2018-11-18 23:00:55,365 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2018-11-18 23:00:55,365 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2018-11-18 23:00:55,370 INFO L276 PluginConnector]: CACSL2BoogieTranslator initialized [2018-11-18 23:00:55,372 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 18.11 11:00:55" (1/1) ... [2018-11-18 23:00:55,374 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@4caa4abc and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 11:00:55, skipping insertion in model container [2018-11-18 23:00:55,375 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 18.11 11:00:55" (1/1) ... [2018-11-18 23:00:55,384 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2018-11-18 23:00:55,405 INFO L176 MainTranslator]: Built tables and reachable declarations [2018-11-18 23:00:55,645 INFO L201 PostProcessor]: Analyzing one entry point: main [2018-11-18 23:00:55,649 INFO L191 MainTranslator]: Completed pre-run [2018-11-18 23:00:55,672 INFO L201 PostProcessor]: Analyzing one entry point: main [2018-11-18 23:00:55,696 INFO L195 MainTranslator]: Completed translation [2018-11-18 23:00:55,696 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 11:00:55 WrapperNode [2018-11-18 23:00:55,697 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2018-11-18 23:00:55,697 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2018-11-18 23:00:55,697 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2018-11-18 23:00:55,698 INFO L276 PluginConnector]: Boogie Preprocessor initialized [2018-11-18 23:00:55,708 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 11:00:55" (1/1) ... [2018-11-18 23:00:55,708 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 11:00:55" (1/1) ... [2018-11-18 23:00:55,716 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 11:00:55" (1/1) ... [2018-11-18 23:00:55,716 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 11:00:55" (1/1) ... [2018-11-18 23:00:55,725 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 11:00:55" (1/1) ... [2018-11-18 23:00:55,732 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 11:00:55" (1/1) ... [2018-11-18 23:00:55,734 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 11:00:55" (1/1) ... [2018-11-18 23:00:55,739 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2018-11-18 23:00:55,740 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2018-11-18 23:00:55,740 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2018-11-18 23:00:55,740 INFO L276 PluginConnector]: RCFGBuilder initialized [2018-11-18 23:00:55,741 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 11:00:55" (1/1) ... No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 Starting monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2018-11-18 23:00:55,871 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.init [2018-11-18 23:00:55,871 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2018-11-18 23:00:55,871 INFO L138 BoogieDeclarations]: Found implementation of procedure __VERIFIER_assert [2018-11-18 23:00:55,871 INFO L138 BoogieDeclarations]: Found implementation of procedure main [2018-11-18 23:00:55,872 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_error [2018-11-18 23:00:55,872 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_assert [2018-11-18 23:00:55,872 INFO L130 BoogieDeclarations]: Found specification of procedure main [2018-11-18 23:00:55,872 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.alloc [2018-11-18 23:00:55,872 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2018-11-18 23:00:55,872 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2018-11-18 23:00:55,873 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.init [2018-11-18 23:00:55,873 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2018-11-18 23:00:55,873 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int [2018-11-18 23:00:55,873 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2018-11-18 23:00:56,341 INFO L280 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2018-11-18 23:00:56,342 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 18.11 11:00:56 BoogieIcfgContainer [2018-11-18 23:00:56,342 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2018-11-18 23:00:56,343 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2018-11-18 23:00:56,343 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2018-11-18 23:00:56,346 INFO L276 PluginConnector]: TraceAbstraction initialized [2018-11-18 23:00:56,346 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 18.11 11:00:55" (1/3) ... [2018-11-18 23:00:56,347 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@76670a88 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 18.11 11:00:56, skipping insertion in model container [2018-11-18 23:00:56,347 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 11:00:55" (2/3) ... [2018-11-18 23:00:56,348 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@76670a88 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 18.11 11:00:56, skipping insertion in model container [2018-11-18 23:00:56,348 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 18.11 11:00:56" (3/3) ... [2018-11-18 23:00:56,350 INFO L112 eAbstractionObserver]: Analyzing ICFG standard_vararg_true-unreach-call_ground_true-termination.i [2018-11-18 23:00:56,358 INFO L136 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2018-11-18 23:00:56,364 INFO L148 ceAbstractionStarter]: Appying trace abstraction to program that has 1 error locations. [2018-11-18 23:00:56,378 INFO L257 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2018-11-18 23:00:56,409 INFO L133 ementStrategyFactory]: Using default assertion order modulation [2018-11-18 23:00:56,409 INFO L382 AbstractCegarLoop]: Interprodecural is true [2018-11-18 23:00:56,410 INFO L383 AbstractCegarLoop]: Hoare is true [2018-11-18 23:00:56,410 INFO L384 AbstractCegarLoop]: Compute interpolants for FPandBP [2018-11-18 23:00:56,410 INFO L385 AbstractCegarLoop]: Backedges is STRAIGHT_LINE [2018-11-18 23:00:56,410 INFO L386 AbstractCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2018-11-18 23:00:56,410 INFO L387 AbstractCegarLoop]: Difference is false [2018-11-18 23:00:56,411 INFO L388 AbstractCegarLoop]: Minimize is MINIMIZE_SEVPA [2018-11-18 23:00:56,411 INFO L393 AbstractCegarLoop]: ======== Iteration 0==of CEGAR loop == AllErrorsAtOnce======== [2018-11-18 23:00:56,431 INFO L276 IsEmpty]: Start isEmpty. Operand 26 states. [2018-11-18 23:00:56,439 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 15 [2018-11-18 23:00:56,439 INFO L367 BasicCegarLoop]: Found error trace [2018-11-18 23:00:56,442 INFO L375 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 23:00:56,444 INFO L423 AbstractCegarLoop]: === Iteration 1 === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-18 23:00:56,449 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 23:00:56,450 INFO L82 PathProgramCache]: Analyzing trace with hash 1193744236, now seen corresponding path program 1 times [2018-11-18 23:00:56,451 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 23:00:56,452 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 23:00:56,502 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 23:00:56,502 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 23:00:56,502 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 23:00:56,551 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 23:00:56,607 INFO L256 TraceCheckUtils]: 0: Hoare triple {29#true} call ULTIMATE.init(); {29#true} is VALID [2018-11-18 23:00:56,611 INFO L273 TraceCheckUtils]: 1: Hoare triple {29#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0]; {29#true} is VALID [2018-11-18 23:00:56,612 INFO L273 TraceCheckUtils]: 2: Hoare triple {29#true} assume true; {29#true} is VALID [2018-11-18 23:00:56,613 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {29#true} {29#true} #51#return; {29#true} is VALID [2018-11-18 23:00:56,613 INFO L256 TraceCheckUtils]: 4: Hoare triple {29#true} call #t~ret4 := main(); {29#true} is VALID [2018-11-18 23:00:56,613 INFO L273 TraceCheckUtils]: 5: Hoare triple {29#true} call ~#aa~0.base, ~#aa~0.offset := #Ultimate.alloc(400000);~a~0 := 0; {29#true} is VALID [2018-11-18 23:00:56,622 INFO L273 TraceCheckUtils]: 6: Hoare triple {29#true} assume !true; {30#false} is VALID [2018-11-18 23:00:56,622 INFO L273 TraceCheckUtils]: 7: Hoare triple {30#false} havoc ~x~0;~x~0 := 0; {30#false} is VALID [2018-11-18 23:00:56,623 INFO L273 TraceCheckUtils]: 8: Hoare triple {30#false} assume true; {30#false} is VALID [2018-11-18 23:00:56,623 INFO L273 TraceCheckUtils]: 9: Hoare triple {30#false} assume !!(~x~0 < ~a~0);call #t~mem3 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~x~0, 4); {30#false} is VALID [2018-11-18 23:00:56,624 INFO L256 TraceCheckUtils]: 10: Hoare triple {30#false} call __VERIFIER_assert((if #t~mem3 >= 0 then 1 else 0)); {30#false} is VALID [2018-11-18 23:00:56,624 INFO L273 TraceCheckUtils]: 11: Hoare triple {30#false} ~cond := #in~cond; {30#false} is VALID [2018-11-18 23:00:56,624 INFO L273 TraceCheckUtils]: 12: Hoare triple {30#false} assume 0 == ~cond; {30#false} is VALID [2018-11-18 23:00:56,625 INFO L273 TraceCheckUtils]: 13: Hoare triple {30#false} assume !false; {30#false} is VALID [2018-11-18 23:00:56,627 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 23:00:56,629 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 23:00:56,630 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2018-11-18 23:00:56,634 INFO L78 Accepts]: Start accepts. Automaton has 2 states. Word has length 14 [2018-11-18 23:00:56,637 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-18 23:00:56,641 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 2 states. [2018-11-18 23:00:56,731 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 14 edges. 14 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-18 23:00:56,731 INFO L459 AbstractCegarLoop]: Interpolant automaton has 2 states [2018-11-18 23:00:56,740 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2018-11-18 23:00:56,741 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2018-11-18 23:00:56,743 INFO L87 Difference]: Start difference. First operand 26 states. Second operand 2 states. [2018-11-18 23:00:56,939 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:00:56,939 INFO L93 Difference]: Finished difference Result 43 states and 50 transitions. [2018-11-18 23:00:56,939 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2018-11-18 23:00:56,940 INFO L78 Accepts]: Start accepts. Automaton has 2 states. Word has length 14 [2018-11-18 23:00:56,940 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-18 23:00:56,942 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 2 states. [2018-11-18 23:00:56,952 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2 states to 2 states and 50 transitions. [2018-11-18 23:00:56,952 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 2 states. [2018-11-18 23:00:56,957 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2 states to 2 states and 50 transitions. [2018-11-18 23:00:56,957 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 2 states and 50 transitions. [2018-11-18 23:00:57,269 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 50 edges. 50 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-18 23:00:57,281 INFO L225 Difference]: With dead ends: 43 [2018-11-18 23:00:57,282 INFO L226 Difference]: Without dead ends: 21 [2018-11-18 23:00:57,285 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2018-11-18 23:00:57,300 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 21 states. [2018-11-18 23:00:57,337 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 21 to 21. [2018-11-18 23:00:57,338 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-18 23:00:57,338 INFO L82 GeneralOperation]: Start isEquivalent. First operand 21 states. Second operand 21 states. [2018-11-18 23:00:57,338 INFO L74 IsIncluded]: Start isIncluded. First operand 21 states. Second operand 21 states. [2018-11-18 23:00:57,339 INFO L87 Difference]: Start difference. First operand 21 states. Second operand 21 states. [2018-11-18 23:00:57,341 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:00:57,342 INFO L93 Difference]: Finished difference Result 21 states and 22 transitions. [2018-11-18 23:00:57,342 INFO L276 IsEmpty]: Start isEmpty. Operand 21 states and 22 transitions. [2018-11-18 23:00:57,342 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-18 23:00:57,343 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-18 23:00:57,343 INFO L74 IsIncluded]: Start isIncluded. First operand 21 states. Second operand 21 states. [2018-11-18 23:00:57,343 INFO L87 Difference]: Start difference. First operand 21 states. Second operand 21 states. [2018-11-18 23:00:57,346 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:00:57,346 INFO L93 Difference]: Finished difference Result 21 states and 22 transitions. [2018-11-18 23:00:57,346 INFO L276 IsEmpty]: Start isEmpty. Operand 21 states and 22 transitions. [2018-11-18 23:00:57,347 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-18 23:00:57,347 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-18 23:00:57,347 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-18 23:00:57,347 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-18 23:00:57,348 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 21 states. [2018-11-18 23:00:57,350 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 21 states to 21 states and 22 transitions. [2018-11-18 23:00:57,351 INFO L78 Accepts]: Start accepts. Automaton has 21 states and 22 transitions. Word has length 14 [2018-11-18 23:00:57,351 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-18 23:00:57,352 INFO L480 AbstractCegarLoop]: Abstraction has 21 states and 22 transitions. [2018-11-18 23:00:57,352 INFO L481 AbstractCegarLoop]: Interpolant automaton has 2 states. [2018-11-18 23:00:57,352 INFO L276 IsEmpty]: Start isEmpty. Operand 21 states and 22 transitions. [2018-11-18 23:00:57,353 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 17 [2018-11-18 23:00:57,353 INFO L367 BasicCegarLoop]: Found error trace [2018-11-18 23:00:57,353 INFO L375 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 23:00:57,353 INFO L423 AbstractCegarLoop]: === Iteration 2 === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-18 23:00:57,354 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 23:00:57,354 INFO L82 PathProgramCache]: Analyzing trace with hash 774196882, now seen corresponding path program 1 times [2018-11-18 23:00:57,354 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 23:00:57,354 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 23:00:57,355 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 23:00:57,355 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 23:00:57,355 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 23:00:57,379 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 23:00:57,527 INFO L256 TraceCheckUtils]: 0: Hoare triple {158#true} call ULTIMATE.init(); {158#true} is VALID [2018-11-18 23:00:57,527 INFO L273 TraceCheckUtils]: 1: Hoare triple {158#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0]; {158#true} is VALID [2018-11-18 23:00:57,528 INFO L273 TraceCheckUtils]: 2: Hoare triple {158#true} assume true; {158#true} is VALID [2018-11-18 23:00:57,528 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {158#true} {158#true} #51#return; {158#true} is VALID [2018-11-18 23:00:57,528 INFO L256 TraceCheckUtils]: 4: Hoare triple {158#true} call #t~ret4 := main(); {158#true} is VALID [2018-11-18 23:00:57,543 INFO L273 TraceCheckUtils]: 5: Hoare triple {158#true} call ~#aa~0.base, ~#aa~0.offset := #Ultimate.alloc(400000);~a~0 := 0; {160#(= main_~a~0 0)} is VALID [2018-11-18 23:00:57,552 INFO L273 TraceCheckUtils]: 6: Hoare triple {160#(= main_~a~0 0)} assume true; {160#(= main_~a~0 0)} is VALID [2018-11-18 23:00:57,566 INFO L273 TraceCheckUtils]: 7: Hoare triple {160#(= main_~a~0 0)} call #t~mem0 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~a~0, 4); {160#(= main_~a~0 0)} is VALID [2018-11-18 23:00:57,575 INFO L273 TraceCheckUtils]: 8: Hoare triple {160#(= main_~a~0 0)} assume !(#t~mem0 >= 0);havoc #t~mem0; {160#(= main_~a~0 0)} is VALID [2018-11-18 23:00:57,590 INFO L273 TraceCheckUtils]: 9: Hoare triple {160#(= main_~a~0 0)} havoc ~x~0;~x~0 := 0; {161#(and (= main_~x~0 0) (= main_~a~0 0))} is VALID [2018-11-18 23:00:57,599 INFO L273 TraceCheckUtils]: 10: Hoare triple {161#(and (= main_~x~0 0) (= main_~a~0 0))} assume true; {161#(and (= main_~x~0 0) (= main_~a~0 0))} is VALID [2018-11-18 23:00:57,612 INFO L273 TraceCheckUtils]: 11: Hoare triple {161#(and (= main_~x~0 0) (= main_~a~0 0))} assume !!(~x~0 < ~a~0);call #t~mem3 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~x~0, 4); {159#false} is VALID [2018-11-18 23:00:57,612 INFO L256 TraceCheckUtils]: 12: Hoare triple {159#false} call __VERIFIER_assert((if #t~mem3 >= 0 then 1 else 0)); {159#false} is VALID [2018-11-18 23:00:57,612 INFO L273 TraceCheckUtils]: 13: Hoare triple {159#false} ~cond := #in~cond; {159#false} is VALID [2018-11-18 23:00:57,613 INFO L273 TraceCheckUtils]: 14: Hoare triple {159#false} assume 0 == ~cond; {159#false} is VALID [2018-11-18 23:00:57,613 INFO L273 TraceCheckUtils]: 15: Hoare triple {159#false} assume !false; {159#false} is VALID [2018-11-18 23:00:57,615 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 23:00:57,615 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 23:00:57,616 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-18 23:00:57,617 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 16 [2018-11-18 23:00:57,617 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-18 23:00:57,618 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-18 23:00:57,647 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 16 edges. 16 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-18 23:00:57,647 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-18 23:00:57,647 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-18 23:00:57,647 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2018-11-18 23:00:57,648 INFO L87 Difference]: Start difference. First operand 21 states and 22 transitions. Second operand 4 states. [2018-11-18 23:00:57,801 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:00:57,801 INFO L93 Difference]: Finished difference Result 38 states and 40 transitions. [2018-11-18 23:00:57,801 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-18 23:00:57,801 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 16 [2018-11-18 23:00:57,802 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-18 23:00:57,802 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-18 23:00:57,805 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 40 transitions. [2018-11-18 23:00:57,805 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-18 23:00:57,808 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 40 transitions. [2018-11-18 23:00:57,808 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 40 transitions. [2018-11-18 23:00:57,914 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 40 edges. 40 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-18 23:00:57,917 INFO L225 Difference]: With dead ends: 38 [2018-11-18 23:00:57,917 INFO L226 Difference]: Without dead ends: 24 [2018-11-18 23:00:57,918 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2018-11-18 23:00:57,919 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 24 states. [2018-11-18 23:00:58,045 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 24 to 24. [2018-11-18 23:00:58,045 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-18 23:00:58,045 INFO L82 GeneralOperation]: Start isEquivalent. First operand 24 states. Second operand 24 states. [2018-11-18 23:00:58,045 INFO L74 IsIncluded]: Start isIncluded. First operand 24 states. Second operand 24 states. [2018-11-18 23:00:58,046 INFO L87 Difference]: Start difference. First operand 24 states. Second operand 24 states. [2018-11-18 23:00:58,048 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:00:58,049 INFO L93 Difference]: Finished difference Result 24 states and 25 transitions. [2018-11-18 23:00:58,049 INFO L276 IsEmpty]: Start isEmpty. Operand 24 states and 25 transitions. [2018-11-18 23:00:58,050 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-18 23:00:58,050 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-18 23:00:58,050 INFO L74 IsIncluded]: Start isIncluded. First operand 24 states. Second operand 24 states. [2018-11-18 23:00:58,051 INFO L87 Difference]: Start difference. First operand 24 states. Second operand 24 states. [2018-11-18 23:00:58,053 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:00:58,054 INFO L93 Difference]: Finished difference Result 24 states and 25 transitions. [2018-11-18 23:00:58,054 INFO L276 IsEmpty]: Start isEmpty. Operand 24 states and 25 transitions. [2018-11-18 23:00:58,055 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-18 23:00:58,055 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-18 23:00:58,056 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-18 23:00:58,056 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-18 23:00:58,056 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 24 states. [2018-11-18 23:00:58,058 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 24 states to 24 states and 25 transitions. [2018-11-18 23:00:58,058 INFO L78 Accepts]: Start accepts. Automaton has 24 states and 25 transitions. Word has length 16 [2018-11-18 23:00:58,059 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-18 23:00:58,060 INFO L480 AbstractCegarLoop]: Abstraction has 24 states and 25 transitions. [2018-11-18 23:00:58,060 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-18 23:00:58,060 INFO L276 IsEmpty]: Start isEmpty. Operand 24 states and 25 transitions. [2018-11-18 23:00:58,061 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 20 [2018-11-18 23:00:58,061 INFO L367 BasicCegarLoop]: Found error trace [2018-11-18 23:00:58,061 INFO L375 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 23:00:58,061 INFO L423 AbstractCegarLoop]: === Iteration 3 === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-18 23:00:58,062 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 23:00:58,062 INFO L82 PathProgramCache]: Analyzing trace with hash -209062116, now seen corresponding path program 1 times [2018-11-18 23:00:58,062 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 23:00:58,063 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 23:00:58,064 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 23:00:58,064 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 23:00:58,064 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 23:00:58,130 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 23:00:58,778 INFO L256 TraceCheckUtils]: 0: Hoare triple {296#true} call ULTIMATE.init(); {296#true} is VALID [2018-11-18 23:00:58,779 INFO L273 TraceCheckUtils]: 1: Hoare triple {296#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0]; {296#true} is VALID [2018-11-18 23:00:58,779 INFO L273 TraceCheckUtils]: 2: Hoare triple {296#true} assume true; {296#true} is VALID [2018-11-18 23:00:58,779 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {296#true} {296#true} #51#return; {296#true} is VALID [2018-11-18 23:00:58,780 INFO L256 TraceCheckUtils]: 4: Hoare triple {296#true} call #t~ret4 := main(); {296#true} is VALID [2018-11-18 23:00:58,781 INFO L273 TraceCheckUtils]: 5: Hoare triple {296#true} call ~#aa~0.base, ~#aa~0.offset := #Ultimate.alloc(400000);~a~0 := 0; {298#(and (= 0 (+ |main_~#aa~0.offset| (* 4 main_~a~0))) (= |main_~#aa~0.offset| 0))} is VALID [2018-11-18 23:00:58,782 INFO L273 TraceCheckUtils]: 6: Hoare triple {298#(and (= 0 (+ |main_~#aa~0.offset| (* 4 main_~a~0))) (= |main_~#aa~0.offset| 0))} assume true; {298#(and (= 0 (+ |main_~#aa~0.offset| (* 4 main_~a~0))) (= |main_~#aa~0.offset| 0))} is VALID [2018-11-18 23:00:58,793 INFO L273 TraceCheckUtils]: 7: Hoare triple {298#(and (= 0 (+ |main_~#aa~0.offset| (* 4 main_~a~0))) (= |main_~#aa~0.offset| 0))} call #t~mem0 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~a~0, 4); {299#(and (= |main_#t~mem0| (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 main_~a~0) |main_~#aa~0.offset|))) (= 0 (+ |main_~#aa~0.offset| (* 4 main_~a~0))) (= |main_~#aa~0.offset| 0))} is VALID [2018-11-18 23:00:58,794 INFO L273 TraceCheckUtils]: 8: Hoare triple {299#(and (= |main_#t~mem0| (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 main_~a~0) |main_~#aa~0.offset|))) (= 0 (+ |main_~#aa~0.offset| (* 4 main_~a~0))) (= |main_~#aa~0.offset| 0))} assume !!(#t~mem0 >= 0);havoc #t~mem0;#t~post1 := ~a~0;~a~0 := 1 + #t~post1;havoc #t~post1; {300#(and (or (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) 0)) (<= (+ |main_~#aa~0.offset| (* 4 main_~a~0)) 3)) (= |main_~#aa~0.offset| 0))} is VALID [2018-11-18 23:00:58,795 INFO L273 TraceCheckUtils]: 9: Hoare triple {300#(and (or (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) 0)) (<= (+ |main_~#aa~0.offset| (* 4 main_~a~0)) 3)) (= |main_~#aa~0.offset| 0))} assume true; {300#(and (or (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) 0)) (<= (+ |main_~#aa~0.offset| (* 4 main_~a~0)) 3)) (= |main_~#aa~0.offset| 0))} is VALID [2018-11-18 23:00:58,795 INFO L273 TraceCheckUtils]: 10: Hoare triple {300#(and (or (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) 0)) (<= (+ |main_~#aa~0.offset| (* 4 main_~a~0)) 3)) (= |main_~#aa~0.offset| 0))} call #t~mem0 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~a~0, 4); {300#(and (or (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) 0)) (<= (+ |main_~#aa~0.offset| (* 4 main_~a~0)) 3)) (= |main_~#aa~0.offset| 0))} is VALID [2018-11-18 23:00:58,797 INFO L273 TraceCheckUtils]: 11: Hoare triple {300#(and (or (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) 0)) (<= (+ |main_~#aa~0.offset| (* 4 main_~a~0)) 3)) (= |main_~#aa~0.offset| 0))} assume !(#t~mem0 >= 0);havoc #t~mem0; {300#(and (or (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) 0)) (<= (+ |main_~#aa~0.offset| (* 4 main_~a~0)) 3)) (= |main_~#aa~0.offset| 0))} is VALID [2018-11-18 23:00:58,797 INFO L273 TraceCheckUtils]: 12: Hoare triple {300#(and (or (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) 0)) (<= (+ |main_~#aa~0.offset| (* 4 main_~a~0)) 3)) (= |main_~#aa~0.offset| 0))} havoc ~x~0;~x~0 := 0; {301#(and (or (<= (+ |main_~#aa~0.offset| (* 4 main_~a~0)) 3) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 main_~x~0) |main_~#aa~0.offset|)))) (= main_~x~0 0) (= |main_~#aa~0.offset| 0))} is VALID [2018-11-18 23:00:58,799 INFO L273 TraceCheckUtils]: 13: Hoare triple {301#(and (or (<= (+ |main_~#aa~0.offset| (* 4 main_~a~0)) 3) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 main_~x~0) |main_~#aa~0.offset|)))) (= main_~x~0 0) (= |main_~#aa~0.offset| 0))} assume true; {301#(and (or (<= (+ |main_~#aa~0.offset| (* 4 main_~a~0)) 3) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 main_~x~0) |main_~#aa~0.offset|)))) (= main_~x~0 0) (= |main_~#aa~0.offset| 0))} is VALID [2018-11-18 23:00:58,800 INFO L273 TraceCheckUtils]: 14: Hoare triple {301#(and (or (<= (+ |main_~#aa~0.offset| (* 4 main_~a~0)) 3) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 main_~x~0) |main_~#aa~0.offset|)))) (= main_~x~0 0) (= |main_~#aa~0.offset| 0))} assume !!(~x~0 < ~a~0);call #t~mem3 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~x~0, 4); {302#(<= 0 |main_#t~mem3|)} is VALID [2018-11-18 23:00:58,801 INFO L256 TraceCheckUtils]: 15: Hoare triple {302#(<= 0 |main_#t~mem3|)} call __VERIFIER_assert((if #t~mem3 >= 0 then 1 else 0)); {303#(= |__VERIFIER_assert_#in~cond| 1)} is VALID [2018-11-18 23:00:58,802 INFO L273 TraceCheckUtils]: 16: Hoare triple {303#(= |__VERIFIER_assert_#in~cond| 1)} ~cond := #in~cond; {304#(= __VERIFIER_assert_~cond 1)} is VALID [2018-11-18 23:00:58,803 INFO L273 TraceCheckUtils]: 17: Hoare triple {304#(= __VERIFIER_assert_~cond 1)} assume 0 == ~cond; {297#false} is VALID [2018-11-18 23:00:58,803 INFO L273 TraceCheckUtils]: 18: Hoare triple {297#false} assume !false; {297#false} is VALID [2018-11-18 23:00:58,807 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 3 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 23:00:58,808 INFO L300 seRefinementStrategy]: The current sequences of interpolants are not accepted, trying to find more. [2018-11-18 23:00:58,808 INFO L223 ckRefinementStrategy]: Switched to mode Z3_FP No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 Starting monitored process 2 with z3 -smt2 -in SMTLIB2_COMPLIANT=true -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 2 with z3 -smt2 -in SMTLIB2_COMPLIANT=true -t:12000 [2018-11-18 23:00:58,821 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 23:00:58,852 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 23:00:58,866 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 23:00:58,870 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-18 23:00:59,755 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 11 [2018-11-18 23:00:59,770 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2018-11-18 23:00:59,776 INFO L267 ElimStorePlain]: Start of recursive call 3: End of recursive call: and 1 xjuncts. [2018-11-18 23:00:59,778 INFO L267 ElimStorePlain]: Start of recursive call 2: 1 dim-1 vars, End of recursive call: and 1 xjuncts. [2018-11-18 23:00:59,779 INFO L267 ElimStorePlain]: Start of recursive call 1: 1 dim-0 vars, 1 dim-2 vars, End of recursive call: and 1 xjuncts. [2018-11-18 23:00:59,779 INFO L202 ElimStorePlain]: Needed 3 recursive calls to eliminate 2 variables, input treesize:15, output treesize:3 [2018-11-18 23:00:59,788 WARN L383 uantifierElimination]: Trying to double check SDD result, but SMT solver's response was UNKNOWN. [2018-11-18 23:00:59,812 INFO L256 TraceCheckUtils]: 0: Hoare triple {296#true} call ULTIMATE.init(); {296#true} is VALID [2018-11-18 23:00:59,812 INFO L273 TraceCheckUtils]: 1: Hoare triple {296#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0]; {296#true} is VALID [2018-11-18 23:00:59,813 INFO L273 TraceCheckUtils]: 2: Hoare triple {296#true} assume true; {296#true} is VALID [2018-11-18 23:00:59,813 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {296#true} {296#true} #51#return; {296#true} is VALID [2018-11-18 23:00:59,814 INFO L256 TraceCheckUtils]: 4: Hoare triple {296#true} call #t~ret4 := main(); {296#true} is VALID [2018-11-18 23:00:59,821 INFO L273 TraceCheckUtils]: 5: Hoare triple {296#true} call ~#aa~0.base, ~#aa~0.offset := #Ultimate.alloc(400000);~a~0 := 0; {298#(and (= 0 (+ |main_~#aa~0.offset| (* 4 main_~a~0))) (= |main_~#aa~0.offset| 0))} is VALID [2018-11-18 23:00:59,826 INFO L273 TraceCheckUtils]: 6: Hoare triple {298#(and (= 0 (+ |main_~#aa~0.offset| (* 4 main_~a~0))) (= |main_~#aa~0.offset| 0))} assume true; {298#(and (= 0 (+ |main_~#aa~0.offset| (* 4 main_~a~0))) (= |main_~#aa~0.offset| 0))} is VALID [2018-11-18 23:00:59,828 INFO L273 TraceCheckUtils]: 7: Hoare triple {298#(and (= 0 (+ |main_~#aa~0.offset| (* 4 main_~a~0))) (= |main_~#aa~0.offset| 0))} call #t~mem0 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~a~0, 4); {329#(and (exists ((main_~a~0 Int)) (and (= 0 (+ |main_~#aa~0.offset| (* 4 main_~a~0))) (<= |main_#t~mem0| (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 main_~a~0)))))) (= |main_~#aa~0.offset| 0))} is VALID [2018-11-18 23:00:59,829 INFO L273 TraceCheckUtils]: 8: Hoare triple {329#(and (exists ((main_~a~0 Int)) (and (= 0 (+ |main_~#aa~0.offset| (* 4 main_~a~0))) (<= |main_#t~mem0| (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 main_~a~0)))))) (= |main_~#aa~0.offset| 0))} assume !!(#t~mem0 >= 0);havoc #t~mem0;#t~post1 := ~a~0;~a~0 := 1 + #t~post1;havoc #t~post1; {333#(and (exists ((main_~a~0 Int)) (and (= 0 (+ |main_~#aa~0.offset| (* 4 main_~a~0))) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 main_~a~0)))))) (= |main_~#aa~0.offset| 0))} is VALID [2018-11-18 23:00:59,830 INFO L273 TraceCheckUtils]: 9: Hoare triple {333#(and (exists ((main_~a~0 Int)) (and (= 0 (+ |main_~#aa~0.offset| (* 4 main_~a~0))) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 main_~a~0)))))) (= |main_~#aa~0.offset| 0))} assume true; {333#(and (exists ((main_~a~0 Int)) (and (= 0 (+ |main_~#aa~0.offset| (* 4 main_~a~0))) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 main_~a~0)))))) (= |main_~#aa~0.offset| 0))} is VALID [2018-11-18 23:00:59,831 INFO L273 TraceCheckUtils]: 10: Hoare triple {333#(and (exists ((main_~a~0 Int)) (and (= 0 (+ |main_~#aa~0.offset| (* 4 main_~a~0))) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 main_~a~0)))))) (= |main_~#aa~0.offset| 0))} call #t~mem0 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~a~0, 4); {333#(and (exists ((main_~a~0 Int)) (and (= 0 (+ |main_~#aa~0.offset| (* 4 main_~a~0))) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 main_~a~0)))))) (= |main_~#aa~0.offset| 0))} is VALID [2018-11-18 23:00:59,831 INFO L273 TraceCheckUtils]: 11: Hoare triple {333#(and (exists ((main_~a~0 Int)) (and (= 0 (+ |main_~#aa~0.offset| (* 4 main_~a~0))) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 main_~a~0)))))) (= |main_~#aa~0.offset| 0))} assume !(#t~mem0 >= 0);havoc #t~mem0; {333#(and (exists ((main_~a~0 Int)) (and (= 0 (+ |main_~#aa~0.offset| (* 4 main_~a~0))) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 main_~a~0)))))) (= |main_~#aa~0.offset| 0))} is VALID [2018-11-18 23:00:59,832 INFO L273 TraceCheckUtils]: 12: Hoare triple {333#(and (exists ((main_~a~0 Int)) (and (= 0 (+ |main_~#aa~0.offset| (* 4 main_~a~0))) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 main_~a~0)))))) (= |main_~#aa~0.offset| 0))} havoc ~x~0;~x~0 := 0; {346#(and (= main_~x~0 0) (exists ((main_~a~0 Int)) (and (= 0 (+ |main_~#aa~0.offset| (* 4 main_~a~0))) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 main_~a~0)))))) (= |main_~#aa~0.offset| 0))} is VALID [2018-11-18 23:00:59,835 INFO L273 TraceCheckUtils]: 13: Hoare triple {346#(and (= main_~x~0 0) (exists ((main_~a~0 Int)) (and (= 0 (+ |main_~#aa~0.offset| (* 4 main_~a~0))) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 main_~a~0)))))) (= |main_~#aa~0.offset| 0))} assume true; {346#(and (= main_~x~0 0) (exists ((main_~a~0 Int)) (and (= 0 (+ |main_~#aa~0.offset| (* 4 main_~a~0))) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 main_~a~0)))))) (= |main_~#aa~0.offset| 0))} is VALID [2018-11-18 23:00:59,854 INFO L273 TraceCheckUtils]: 14: Hoare triple {346#(and (= main_~x~0 0) (exists ((main_~a~0 Int)) (and (= 0 (+ |main_~#aa~0.offset| (* 4 main_~a~0))) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 main_~a~0)))))) (= |main_~#aa~0.offset| 0))} assume !!(~x~0 < ~a~0);call #t~mem3 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~x~0, 4); {302#(<= 0 |main_#t~mem3|)} is VALID [2018-11-18 23:00:59,863 INFO L256 TraceCheckUtils]: 15: Hoare triple {302#(<= 0 |main_#t~mem3|)} call __VERIFIER_assert((if #t~mem3 >= 0 then 1 else 0)); {303#(= |__VERIFIER_assert_#in~cond| 1)} is VALID [2018-11-18 23:00:59,872 INFO L273 TraceCheckUtils]: 16: Hoare triple {303#(= |__VERIFIER_assert_#in~cond| 1)} ~cond := #in~cond; {304#(= __VERIFIER_assert_~cond 1)} is VALID [2018-11-18 23:00:59,877 INFO L273 TraceCheckUtils]: 17: Hoare triple {304#(= __VERIFIER_assert_~cond 1)} assume 0 == ~cond; {297#false} is VALID [2018-11-18 23:00:59,877 INFO L273 TraceCheckUtils]: 18: Hoare triple {297#false} assume !false; {297#false} is VALID [2018-11-18 23:00:59,879 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 3 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 23:00:59,903 INFO L312 seRefinementStrategy]: Constructing automaton from 0 perfect and 2 imperfect interpolant sequences. [2018-11-18 23:00:59,903 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [9, 9] total 12 [2018-11-18 23:00:59,903 INFO L78 Accepts]: Start accepts. Automaton has 12 states. Word has length 19 [2018-11-18 23:00:59,904 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-18 23:00:59,904 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 12 states. [2018-11-18 23:00:59,966 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 27 edges. 27 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-18 23:00:59,966 INFO L459 AbstractCegarLoop]: Interpolant automaton has 12 states [2018-11-18 23:00:59,967 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2018-11-18 23:00:59,967 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=30, Invalid=102, Unknown=0, NotChecked=0, Total=132 [2018-11-18 23:00:59,967 INFO L87 Difference]: Start difference. First operand 24 states and 25 transitions. Second operand 12 states. [2018-11-18 23:01:00,815 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:01:00,816 INFO L93 Difference]: Finished difference Result 35 states and 36 transitions. [2018-11-18 23:01:00,816 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2018-11-18 23:01:00,816 INFO L78 Accepts]: Start accepts. Automaton has 12 states. Word has length 19 [2018-11-18 23:01:00,817 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-18 23:01:00,817 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 12 states. [2018-11-18 23:01:00,820 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9 states to 9 states and 36 transitions. [2018-11-18 23:01:00,820 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 12 states. [2018-11-18 23:01:00,822 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9 states to 9 states and 36 transitions. [2018-11-18 23:01:00,822 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 9 states and 36 transitions. [2018-11-18 23:01:00,942 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 36 edges. 36 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-18 23:01:00,944 INFO L225 Difference]: With dead ends: 35 [2018-11-18 23:01:00,944 INFO L226 Difference]: Without dead ends: 33 [2018-11-18 23:01:00,945 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 29 GetRequests, 15 SyntacticMatches, 2 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 36 ImplicationChecksByTransitivity, 0.8s TimeCoverageRelationStatistics Valid=41, Invalid=141, Unknown=0, NotChecked=0, Total=182 [2018-11-18 23:01:00,945 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 33 states. [2018-11-18 23:01:00,974 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 33 to 31. [2018-11-18 23:01:00,974 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-18 23:01:00,974 INFO L82 GeneralOperation]: Start isEquivalent. First operand 33 states. Second operand 31 states. [2018-11-18 23:01:00,974 INFO L74 IsIncluded]: Start isIncluded. First operand 33 states. Second operand 31 states. [2018-11-18 23:01:00,974 INFO L87 Difference]: Start difference. First operand 33 states. Second operand 31 states. [2018-11-18 23:01:00,978 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:01:00,978 INFO L93 Difference]: Finished difference Result 33 states and 34 transitions. [2018-11-18 23:01:00,979 INFO L276 IsEmpty]: Start isEmpty. Operand 33 states and 34 transitions. [2018-11-18 23:01:00,979 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-18 23:01:00,979 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-18 23:01:00,980 INFO L74 IsIncluded]: Start isIncluded. First operand 31 states. Second operand 33 states. [2018-11-18 23:01:00,980 INFO L87 Difference]: Start difference. First operand 31 states. Second operand 33 states. [2018-11-18 23:01:00,983 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:01:00,983 INFO L93 Difference]: Finished difference Result 33 states and 34 transitions. [2018-11-18 23:01:00,983 INFO L276 IsEmpty]: Start isEmpty. Operand 33 states and 34 transitions. [2018-11-18 23:01:00,984 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-18 23:01:00,984 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-18 23:01:00,984 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-18 23:01:00,984 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-18 23:01:00,984 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 31 states. [2018-11-18 23:01:00,987 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 31 states to 31 states and 32 transitions. [2018-11-18 23:01:00,987 INFO L78 Accepts]: Start accepts. Automaton has 31 states and 32 transitions. Word has length 19 [2018-11-18 23:01:00,987 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-18 23:01:00,987 INFO L480 AbstractCegarLoop]: Abstraction has 31 states and 32 transitions. [2018-11-18 23:01:00,987 INFO L481 AbstractCegarLoop]: Interpolant automaton has 12 states. [2018-11-18 23:01:00,988 INFO L276 IsEmpty]: Start isEmpty. Operand 31 states and 32 transitions. [2018-11-18 23:01:00,988 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 29 [2018-11-18 23:01:00,989 INFO L367 BasicCegarLoop]: Found error trace [2018-11-18 23:01:00,989 INFO L375 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 23:01:00,989 INFO L423 AbstractCegarLoop]: === Iteration 4 === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-18 23:01:00,989 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 23:01:00,990 INFO L82 PathProgramCache]: Analyzing trace with hash -1544092779, now seen corresponding path program 1 times [2018-11-18 23:01:00,990 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 23:01:00,990 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 23:01:00,991 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 23:01:00,991 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 23:01:00,991 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 23:01:01,004 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 23:01:01,102 INFO L256 TraceCheckUtils]: 0: Hoare triple {524#true} call ULTIMATE.init(); {524#true} is VALID [2018-11-18 23:01:01,103 INFO L273 TraceCheckUtils]: 1: Hoare triple {524#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0]; {524#true} is VALID [2018-11-18 23:01:01,103 INFO L273 TraceCheckUtils]: 2: Hoare triple {524#true} assume true; {524#true} is VALID [2018-11-18 23:01:01,103 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {524#true} {524#true} #51#return; {524#true} is VALID [2018-11-18 23:01:01,104 INFO L256 TraceCheckUtils]: 4: Hoare triple {524#true} call #t~ret4 := main(); {524#true} is VALID [2018-11-18 23:01:01,104 INFO L273 TraceCheckUtils]: 5: Hoare triple {524#true} call ~#aa~0.base, ~#aa~0.offset := #Ultimate.alloc(400000);~a~0 := 0; {526#(= main_~a~0 0)} is VALID [2018-11-18 23:01:01,105 INFO L273 TraceCheckUtils]: 6: Hoare triple {526#(= main_~a~0 0)} assume true; {526#(= main_~a~0 0)} is VALID [2018-11-18 23:01:01,106 INFO L273 TraceCheckUtils]: 7: Hoare triple {526#(= main_~a~0 0)} call #t~mem0 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~a~0, 4); {526#(= main_~a~0 0)} is VALID [2018-11-18 23:01:01,106 INFO L273 TraceCheckUtils]: 8: Hoare triple {526#(= main_~a~0 0)} assume !!(#t~mem0 >= 0);havoc #t~mem0;#t~post1 := ~a~0;~a~0 := 1 + #t~post1;havoc #t~post1; {527#(<= main_~a~0 1)} is VALID [2018-11-18 23:01:01,107 INFO L273 TraceCheckUtils]: 9: Hoare triple {527#(<= main_~a~0 1)} assume true; {527#(<= main_~a~0 1)} is VALID [2018-11-18 23:01:01,107 INFO L273 TraceCheckUtils]: 10: Hoare triple {527#(<= main_~a~0 1)} call #t~mem0 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~a~0, 4); {527#(<= main_~a~0 1)} is VALID [2018-11-18 23:01:01,108 INFO L273 TraceCheckUtils]: 11: Hoare triple {527#(<= main_~a~0 1)} assume !(#t~mem0 >= 0);havoc #t~mem0; {527#(<= main_~a~0 1)} is VALID [2018-11-18 23:01:01,128 INFO L273 TraceCheckUtils]: 12: Hoare triple {527#(<= main_~a~0 1)} havoc ~x~0;~x~0 := 0; {528#(and (<= main_~a~0 1) (= main_~x~0 0))} is VALID [2018-11-18 23:01:01,143 INFO L273 TraceCheckUtils]: 13: Hoare triple {528#(and (<= main_~a~0 1) (= main_~x~0 0))} assume true; {528#(and (<= main_~a~0 1) (= main_~x~0 0))} is VALID [2018-11-18 23:01:01,159 INFO L273 TraceCheckUtils]: 14: Hoare triple {528#(and (<= main_~a~0 1) (= main_~x~0 0))} assume !!(~x~0 < ~a~0);call #t~mem3 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~x~0, 4); {528#(and (<= main_~a~0 1) (= main_~x~0 0))} is VALID [2018-11-18 23:01:01,159 INFO L256 TraceCheckUtils]: 15: Hoare triple {528#(and (<= main_~a~0 1) (= main_~x~0 0))} call __VERIFIER_assert((if #t~mem3 >= 0 then 1 else 0)); {524#true} is VALID [2018-11-18 23:01:01,160 INFO L273 TraceCheckUtils]: 16: Hoare triple {524#true} ~cond := #in~cond; {524#true} is VALID [2018-11-18 23:01:01,160 INFO L273 TraceCheckUtils]: 17: Hoare triple {524#true} assume !(0 == ~cond); {524#true} is VALID [2018-11-18 23:01:01,160 INFO L273 TraceCheckUtils]: 18: Hoare triple {524#true} assume true; {524#true} is VALID [2018-11-18 23:01:01,169 INFO L268 TraceCheckUtils]: 19: Hoare quadruple {524#true} {528#(and (<= main_~a~0 1) (= main_~x~0 0))} #55#return; {528#(and (<= main_~a~0 1) (= main_~x~0 0))} is VALID [2018-11-18 23:01:01,183 INFO L273 TraceCheckUtils]: 20: Hoare triple {528#(and (<= main_~a~0 1) (= main_~x~0 0))} havoc #t~mem3; {528#(and (<= main_~a~0 1) (= main_~x~0 0))} is VALID [2018-11-18 23:01:01,192 INFO L273 TraceCheckUtils]: 21: Hoare triple {528#(and (<= main_~a~0 1) (= main_~x~0 0))} #t~post2 := ~x~0;~x~0 := 1 + #t~post2;havoc #t~post2; {529#(<= main_~a~0 main_~x~0)} is VALID [2018-11-18 23:01:01,197 INFO L273 TraceCheckUtils]: 22: Hoare triple {529#(<= main_~a~0 main_~x~0)} assume true; {529#(<= main_~a~0 main_~x~0)} is VALID [2018-11-18 23:01:01,197 INFO L273 TraceCheckUtils]: 23: Hoare triple {529#(<= main_~a~0 main_~x~0)} assume !!(~x~0 < ~a~0);call #t~mem3 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~x~0, 4); {525#false} is VALID [2018-11-18 23:01:01,198 INFO L256 TraceCheckUtils]: 24: Hoare triple {525#false} call __VERIFIER_assert((if #t~mem3 >= 0 then 1 else 0)); {525#false} is VALID [2018-11-18 23:01:01,198 INFO L273 TraceCheckUtils]: 25: Hoare triple {525#false} ~cond := #in~cond; {525#false} is VALID [2018-11-18 23:01:01,198 INFO L273 TraceCheckUtils]: 26: Hoare triple {525#false} assume 0 == ~cond; {525#false} is VALID [2018-11-18 23:01:01,198 INFO L273 TraceCheckUtils]: 27: Hoare triple {525#false} assume !false; {525#false} is VALID [2018-11-18 23:01:01,200 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 3 proven. 5 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 23:01:01,200 INFO L300 seRefinementStrategy]: The current sequences of interpolants are not accepted, trying to find more. [2018-11-18 23:01:01,200 INFO L223 ckRefinementStrategy]: Switched to mode Z3_FP No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 Starting monitored process 3 with z3 -smt2 -in SMTLIB2_COMPLIANT=true -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 3 with z3 -smt2 -in SMTLIB2_COMPLIANT=true -t:12000 [2018-11-18 23:01:01,212 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 23:01:01,227 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 23:01:01,237 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 23:01:01,239 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-18 23:01:01,448 INFO L256 TraceCheckUtils]: 0: Hoare triple {524#true} call ULTIMATE.init(); {524#true} is VALID [2018-11-18 23:01:01,449 INFO L273 TraceCheckUtils]: 1: Hoare triple {524#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0]; {524#true} is VALID [2018-11-18 23:01:01,449 INFO L273 TraceCheckUtils]: 2: Hoare triple {524#true} assume true; {524#true} is VALID [2018-11-18 23:01:01,449 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {524#true} {524#true} #51#return; {524#true} is VALID [2018-11-18 23:01:01,450 INFO L256 TraceCheckUtils]: 4: Hoare triple {524#true} call #t~ret4 := main(); {524#true} is VALID [2018-11-18 23:01:01,450 INFO L273 TraceCheckUtils]: 5: Hoare triple {524#true} call ~#aa~0.base, ~#aa~0.offset := #Ultimate.alloc(400000);~a~0 := 0; {548#(<= main_~a~0 0)} is VALID [2018-11-18 23:01:01,456 INFO L273 TraceCheckUtils]: 6: Hoare triple {548#(<= main_~a~0 0)} assume true; {548#(<= main_~a~0 0)} is VALID [2018-11-18 23:01:01,459 INFO L273 TraceCheckUtils]: 7: Hoare triple {548#(<= main_~a~0 0)} call #t~mem0 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~a~0, 4); {548#(<= main_~a~0 0)} is VALID [2018-11-18 23:01:01,459 INFO L273 TraceCheckUtils]: 8: Hoare triple {548#(<= main_~a~0 0)} assume !!(#t~mem0 >= 0);havoc #t~mem0;#t~post1 := ~a~0;~a~0 := 1 + #t~post1;havoc #t~post1; {527#(<= main_~a~0 1)} is VALID [2018-11-18 23:01:01,465 INFO L273 TraceCheckUtils]: 9: Hoare triple {527#(<= main_~a~0 1)} assume true; {527#(<= main_~a~0 1)} is VALID [2018-11-18 23:01:01,465 INFO L273 TraceCheckUtils]: 10: Hoare triple {527#(<= main_~a~0 1)} call #t~mem0 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~a~0, 4); {527#(<= main_~a~0 1)} is VALID [2018-11-18 23:01:01,467 INFO L273 TraceCheckUtils]: 11: Hoare triple {527#(<= main_~a~0 1)} assume !(#t~mem0 >= 0);havoc #t~mem0; {527#(<= main_~a~0 1)} is VALID [2018-11-18 23:01:01,467 INFO L273 TraceCheckUtils]: 12: Hoare triple {527#(<= main_~a~0 1)} havoc ~x~0;~x~0 := 0; {570#(and (<= main_~a~0 1) (<= 0 main_~x~0))} is VALID [2018-11-18 23:01:01,468 INFO L273 TraceCheckUtils]: 13: Hoare triple {570#(and (<= main_~a~0 1) (<= 0 main_~x~0))} assume true; {570#(and (<= main_~a~0 1) (<= 0 main_~x~0))} is VALID [2018-11-18 23:01:01,470 INFO L273 TraceCheckUtils]: 14: Hoare triple {570#(and (<= main_~a~0 1) (<= 0 main_~x~0))} assume !!(~x~0 < ~a~0);call #t~mem3 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~x~0, 4); {570#(and (<= main_~a~0 1) (<= 0 main_~x~0))} is VALID [2018-11-18 23:01:01,470 INFO L256 TraceCheckUtils]: 15: Hoare triple {570#(and (<= main_~a~0 1) (<= 0 main_~x~0))} call __VERIFIER_assert((if #t~mem3 >= 0 then 1 else 0)); {524#true} is VALID [2018-11-18 23:01:01,470 INFO L273 TraceCheckUtils]: 16: Hoare triple {524#true} ~cond := #in~cond; {524#true} is VALID [2018-11-18 23:01:01,470 INFO L273 TraceCheckUtils]: 17: Hoare triple {524#true} assume !(0 == ~cond); {524#true} is VALID [2018-11-18 23:01:01,471 INFO L273 TraceCheckUtils]: 18: Hoare triple {524#true} assume true; {524#true} is VALID [2018-11-18 23:01:01,471 INFO L268 TraceCheckUtils]: 19: Hoare quadruple {524#true} {570#(and (<= main_~a~0 1) (<= 0 main_~x~0))} #55#return; {570#(and (<= main_~a~0 1) (<= 0 main_~x~0))} is VALID [2018-11-18 23:01:01,473 INFO L273 TraceCheckUtils]: 20: Hoare triple {570#(and (<= main_~a~0 1) (<= 0 main_~x~0))} havoc #t~mem3; {570#(and (<= main_~a~0 1) (<= 0 main_~x~0))} is VALID [2018-11-18 23:01:01,473 INFO L273 TraceCheckUtils]: 21: Hoare triple {570#(and (<= main_~a~0 1) (<= 0 main_~x~0))} #t~post2 := ~x~0;~x~0 := 1 + #t~post2;havoc #t~post2; {598#(and (<= main_~a~0 1) (<= 1 main_~x~0))} is VALID [2018-11-18 23:01:01,475 INFO L273 TraceCheckUtils]: 22: Hoare triple {598#(and (<= main_~a~0 1) (<= 1 main_~x~0))} assume true; {598#(and (<= main_~a~0 1) (<= 1 main_~x~0))} is VALID [2018-11-18 23:01:01,476 INFO L273 TraceCheckUtils]: 23: Hoare triple {598#(and (<= main_~a~0 1) (<= 1 main_~x~0))} assume !!(~x~0 < ~a~0);call #t~mem3 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~x~0, 4); {525#false} is VALID [2018-11-18 23:01:01,476 INFO L256 TraceCheckUtils]: 24: Hoare triple {525#false} call __VERIFIER_assert((if #t~mem3 >= 0 then 1 else 0)); {525#false} is VALID [2018-11-18 23:01:01,477 INFO L273 TraceCheckUtils]: 25: Hoare triple {525#false} ~cond := #in~cond; {525#false} is VALID [2018-11-18 23:01:01,477 INFO L273 TraceCheckUtils]: 26: Hoare triple {525#false} assume 0 == ~cond; {525#false} is VALID [2018-11-18 23:01:01,477 INFO L273 TraceCheckUtils]: 27: Hoare triple {525#false} assume !false; {525#false} is VALID [2018-11-18 23:01:01,480 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 5 proven. 3 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 23:01:01,504 INFO L312 seRefinementStrategy]: Constructing automaton from 0 perfect and 2 imperfect interpolant sequences. [2018-11-18 23:01:01,504 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [6, 6] total 9 [2018-11-18 23:01:01,505 INFO L78 Accepts]: Start accepts. Automaton has 9 states. Word has length 28 [2018-11-18 23:01:01,505 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-18 23:01:01,505 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 9 states. [2018-11-18 23:01:01,626 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 41 edges. 41 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-18 23:01:01,626 INFO L459 AbstractCegarLoop]: Interpolant automaton has 9 states [2018-11-18 23:01:01,626 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2018-11-18 23:01:01,626 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=24, Invalid=48, Unknown=0, NotChecked=0, Total=72 [2018-11-18 23:01:01,627 INFO L87 Difference]: Start difference. First operand 31 states and 32 transitions. Second operand 9 states. [2018-11-18 23:01:01,903 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:01:01,903 INFO L93 Difference]: Finished difference Result 53 states and 56 transitions. [2018-11-18 23:01:01,903 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2018-11-18 23:01:01,904 INFO L78 Accepts]: Start accepts. Automaton has 9 states. Word has length 28 [2018-11-18 23:01:01,904 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-18 23:01:01,904 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 9 states. [2018-11-18 23:01:01,907 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 49 transitions. [2018-11-18 23:01:01,907 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 9 states. [2018-11-18 23:01:01,910 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 49 transitions. [2018-11-18 23:01:01,910 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 6 states and 49 transitions. [2018-11-18 23:01:01,977 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 49 edges. 49 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-18 23:01:01,979 INFO L225 Difference]: With dead ends: 53 [2018-11-18 23:01:01,979 INFO L226 Difference]: Without dead ends: 34 [2018-11-18 23:01:01,980 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 33 GetRequests, 26 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 8 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=24, Invalid=48, Unknown=0, NotChecked=0, Total=72 [2018-11-18 23:01:01,980 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 34 states. [2018-11-18 23:01:02,067 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 34 to 34. [2018-11-18 23:01:02,068 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-18 23:01:02,068 INFO L82 GeneralOperation]: Start isEquivalent. First operand 34 states. Second operand 34 states. [2018-11-18 23:01:02,069 INFO L74 IsIncluded]: Start isIncluded. First operand 34 states. Second operand 34 states. [2018-11-18 23:01:02,069 INFO L87 Difference]: Start difference. First operand 34 states. Second operand 34 states. [2018-11-18 23:01:02,072 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:01:02,073 INFO L93 Difference]: Finished difference Result 34 states and 35 transitions. [2018-11-18 23:01:02,073 INFO L276 IsEmpty]: Start isEmpty. Operand 34 states and 35 transitions. [2018-11-18 23:01:02,073 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-18 23:01:02,074 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-18 23:01:02,074 INFO L74 IsIncluded]: Start isIncluded. First operand 34 states. Second operand 34 states. [2018-11-18 23:01:02,074 INFO L87 Difference]: Start difference. First operand 34 states. Second operand 34 states. [2018-11-18 23:01:02,076 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:01:02,076 INFO L93 Difference]: Finished difference Result 34 states and 35 transitions. [2018-11-18 23:01:02,077 INFO L276 IsEmpty]: Start isEmpty. Operand 34 states and 35 transitions. [2018-11-18 23:01:02,077 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-18 23:01:02,077 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-18 23:01:02,078 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-18 23:01:02,078 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-18 23:01:02,078 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 34 states. [2018-11-18 23:01:02,080 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 34 states to 34 states and 35 transitions. [2018-11-18 23:01:02,080 INFO L78 Accepts]: Start accepts. Automaton has 34 states and 35 transitions. Word has length 28 [2018-11-18 23:01:02,080 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-18 23:01:02,080 INFO L480 AbstractCegarLoop]: Abstraction has 34 states and 35 transitions. [2018-11-18 23:01:02,080 INFO L481 AbstractCegarLoop]: Interpolant automaton has 9 states. [2018-11-18 23:01:02,081 INFO L276 IsEmpty]: Start isEmpty. Operand 34 states and 35 transitions. [2018-11-18 23:01:02,082 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 32 [2018-11-18 23:01:02,082 INFO L367 BasicCegarLoop]: Found error trace [2018-11-18 23:01:02,082 INFO L375 BasicCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 23:01:02,082 INFO L423 AbstractCegarLoop]: === Iteration 5 === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-18 23:01:02,082 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 23:01:02,083 INFO L82 PathProgramCache]: Analyzing trace with hash 37825823, now seen corresponding path program 2 times [2018-11-18 23:01:02,083 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 23:01:02,083 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 23:01:02,084 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 23:01:02,084 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 23:01:02,084 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 23:01:02,106 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 23:01:02,407 INFO L256 TraceCheckUtils]: 0: Hoare triple {803#true} call ULTIMATE.init(); {803#true} is VALID [2018-11-18 23:01:02,408 INFO L273 TraceCheckUtils]: 1: Hoare triple {803#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0]; {803#true} is VALID [2018-11-18 23:01:02,408 INFO L273 TraceCheckUtils]: 2: Hoare triple {803#true} assume true; {803#true} is VALID [2018-11-18 23:01:02,409 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {803#true} {803#true} #51#return; {803#true} is VALID [2018-11-18 23:01:02,409 INFO L256 TraceCheckUtils]: 4: Hoare triple {803#true} call #t~ret4 := main(); {803#true} is VALID [2018-11-18 23:01:02,416 INFO L273 TraceCheckUtils]: 5: Hoare triple {803#true} call ~#aa~0.base, ~#aa~0.offset := #Ultimate.alloc(400000);~a~0 := 0; {805#(= main_~a~0 0)} is VALID [2018-11-18 23:01:02,417 INFO L273 TraceCheckUtils]: 6: Hoare triple {805#(= main_~a~0 0)} assume true; {805#(= main_~a~0 0)} is VALID [2018-11-18 23:01:02,417 INFO L273 TraceCheckUtils]: 7: Hoare triple {805#(= main_~a~0 0)} call #t~mem0 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~a~0, 4); {805#(= main_~a~0 0)} is VALID [2018-11-18 23:01:02,418 INFO L273 TraceCheckUtils]: 8: Hoare triple {805#(= main_~a~0 0)} assume !!(#t~mem0 >= 0);havoc #t~mem0;#t~post1 := ~a~0;~a~0 := 1 + #t~post1;havoc #t~post1; {806#(<= main_~a~0 1)} is VALID [2018-11-18 23:01:02,418 INFO L273 TraceCheckUtils]: 9: Hoare triple {806#(<= main_~a~0 1)} assume true; {806#(<= main_~a~0 1)} is VALID [2018-11-18 23:01:02,419 INFO L273 TraceCheckUtils]: 10: Hoare triple {806#(<= main_~a~0 1)} call #t~mem0 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~a~0, 4); {807#(and (<= main_~a~0 1) (= |main_#t~mem0| (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 main_~a~0) |main_~#aa~0.offset|))))} is VALID [2018-11-18 23:01:02,420 INFO L273 TraceCheckUtils]: 11: Hoare triple {807#(and (<= main_~a~0 1) (= |main_#t~mem0| (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 main_~a~0) |main_~#aa~0.offset|))))} assume !!(#t~mem0 >= 0);havoc #t~mem0;#t~post1 := ~a~0;~a~0 := 1 + #t~post1;havoc #t~post1; {808#(and (or (<= main_~a~0 1) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 1))))) (<= main_~a~0 2))} is VALID [2018-11-18 23:01:02,421 INFO L273 TraceCheckUtils]: 12: Hoare triple {808#(and (or (<= main_~a~0 1) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 1))))) (<= main_~a~0 2))} assume true; {808#(and (or (<= main_~a~0 1) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 1))))) (<= main_~a~0 2))} is VALID [2018-11-18 23:01:02,422 INFO L273 TraceCheckUtils]: 13: Hoare triple {808#(and (or (<= main_~a~0 1) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 1))))) (<= main_~a~0 2))} call #t~mem0 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~a~0, 4); {808#(and (or (<= main_~a~0 1) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 1))))) (<= main_~a~0 2))} is VALID [2018-11-18 23:01:02,423 INFO L273 TraceCheckUtils]: 14: Hoare triple {808#(and (or (<= main_~a~0 1) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 1))))) (<= main_~a~0 2))} assume !(#t~mem0 >= 0);havoc #t~mem0; {808#(and (or (<= main_~a~0 1) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 1))))) (<= main_~a~0 2))} is VALID [2018-11-18 23:01:02,424 INFO L273 TraceCheckUtils]: 15: Hoare triple {808#(and (or (<= main_~a~0 1) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 1))))) (<= main_~a~0 2))} havoc ~x~0;~x~0 := 0; {809#(and (or (<= main_~a~0 1) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 1))))) (= main_~x~0 0) (<= main_~a~0 2))} is VALID [2018-11-18 23:01:02,425 INFO L273 TraceCheckUtils]: 16: Hoare triple {809#(and (or (<= main_~a~0 1) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 1))))) (= main_~x~0 0) (<= main_~a~0 2))} assume true; {809#(and (or (<= main_~a~0 1) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 1))))) (= main_~x~0 0) (<= main_~a~0 2))} is VALID [2018-11-18 23:01:02,426 INFO L273 TraceCheckUtils]: 17: Hoare triple {809#(and (or (<= main_~a~0 1) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 1))))) (= main_~x~0 0) (<= main_~a~0 2))} assume !!(~x~0 < ~a~0);call #t~mem3 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~x~0, 4); {809#(and (or (<= main_~a~0 1) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 1))))) (= main_~x~0 0) (<= main_~a~0 2))} is VALID [2018-11-18 23:01:02,426 INFO L256 TraceCheckUtils]: 18: Hoare triple {809#(and (or (<= main_~a~0 1) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 1))))) (= main_~x~0 0) (<= main_~a~0 2))} call __VERIFIER_assert((if #t~mem3 >= 0 then 1 else 0)); {803#true} is VALID [2018-11-18 23:01:02,427 INFO L273 TraceCheckUtils]: 19: Hoare triple {803#true} ~cond := #in~cond; {810#(= __VERIFIER_assert_~cond |__VERIFIER_assert_#in~cond|)} is VALID [2018-11-18 23:01:02,428 INFO L273 TraceCheckUtils]: 20: Hoare triple {810#(= __VERIFIER_assert_~cond |__VERIFIER_assert_#in~cond|)} assume !(0 == ~cond); {811#(not (= |__VERIFIER_assert_#in~cond| 0))} is VALID [2018-11-18 23:01:02,429 INFO L273 TraceCheckUtils]: 21: Hoare triple {811#(not (= |__VERIFIER_assert_#in~cond| 0))} assume true; {811#(not (= |__VERIFIER_assert_#in~cond| 0))} is VALID [2018-11-18 23:01:02,430 INFO L268 TraceCheckUtils]: 22: Hoare quadruple {811#(not (= |__VERIFIER_assert_#in~cond| 0))} {809#(and (or (<= main_~a~0 1) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 1))))) (= main_~x~0 0) (<= main_~a~0 2))} #55#return; {809#(and (or (<= main_~a~0 1) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 1))))) (= main_~x~0 0) (<= main_~a~0 2))} is VALID [2018-11-18 23:01:02,431 INFO L273 TraceCheckUtils]: 23: Hoare triple {809#(and (or (<= main_~a~0 1) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 1))))) (= main_~x~0 0) (<= main_~a~0 2))} havoc #t~mem3; {809#(and (or (<= main_~a~0 1) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 1))))) (= main_~x~0 0) (<= main_~a~0 2))} is VALID [2018-11-18 23:01:02,432 INFO L273 TraceCheckUtils]: 24: Hoare triple {809#(and (or (<= main_~a~0 1) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 1))))) (= main_~x~0 0) (<= main_~a~0 2))} #t~post2 := ~x~0;~x~0 := 1 + #t~post2;havoc #t~post2; {812#(or (<= main_~a~0 main_~x~0) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 main_~x~0) |main_~#aa~0.offset|))))} is VALID [2018-11-18 23:01:02,433 INFO L273 TraceCheckUtils]: 25: Hoare triple {812#(or (<= main_~a~0 main_~x~0) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 main_~x~0) |main_~#aa~0.offset|))))} assume true; {812#(or (<= main_~a~0 main_~x~0) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 main_~x~0) |main_~#aa~0.offset|))))} is VALID [2018-11-18 23:01:02,434 INFO L273 TraceCheckUtils]: 26: Hoare triple {812#(or (<= main_~a~0 main_~x~0) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 main_~x~0) |main_~#aa~0.offset|))))} assume !!(~x~0 < ~a~0);call #t~mem3 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~x~0, 4); {813#(<= 0 |main_#t~mem3|)} is VALID [2018-11-18 23:01:02,435 INFO L256 TraceCheckUtils]: 27: Hoare triple {813#(<= 0 |main_#t~mem3|)} call __VERIFIER_assert((if #t~mem3 >= 0 then 1 else 0)); {811#(not (= |__VERIFIER_assert_#in~cond| 0))} is VALID [2018-11-18 23:01:02,436 INFO L273 TraceCheckUtils]: 28: Hoare triple {811#(not (= |__VERIFIER_assert_#in~cond| 0))} ~cond := #in~cond; {814#(not (= __VERIFIER_assert_~cond 0))} is VALID [2018-11-18 23:01:02,437 INFO L273 TraceCheckUtils]: 29: Hoare triple {814#(not (= __VERIFIER_assert_~cond 0))} assume 0 == ~cond; {804#false} is VALID [2018-11-18 23:01:02,437 INFO L273 TraceCheckUtils]: 30: Hoare triple {804#false} assume !false; {804#false} is VALID [2018-11-18 23:01:02,442 INFO L134 CoverageAnalysis]: Checked inductivity of 14 backedges. 1 proven. 13 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 23:01:02,442 INFO L300 seRefinementStrategy]: The current sequences of interpolants are not accepted, trying to find more. [2018-11-18 23:01:02,442 INFO L223 ckRefinementStrategy]: Switched to mode Z3_FP No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 Starting monitored process 4 with z3 -smt2 -in SMTLIB2_COMPLIANT=true -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 4 with z3 -smt2 -in SMTLIB2_COMPLIANT=true -t:12000 [2018-11-18 23:01:02,451 INFO L103 rtionOrderModulation]: Keeping assertion order OUTSIDE_LOOP_FIRST1 [2018-11-18 23:01:02,466 INFO L249 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2018-11-18 23:01:02,467 INFO L250 tOrderPrioritization]: Conjunction of SSA is unsat [2018-11-18 23:01:02,479 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 23:01:02,482 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-18 23:01:03,178 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 11 [2018-11-18 23:01:03,186 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2018-11-18 23:01:03,194 INFO L267 ElimStorePlain]: Start of recursive call 3: End of recursive call: and 1 xjuncts. [2018-11-18 23:01:03,195 INFO L267 ElimStorePlain]: Start of recursive call 2: 1 dim-1 vars, End of recursive call: and 1 xjuncts. [2018-11-18 23:01:03,197 INFO L267 ElimStorePlain]: Start of recursive call 1: 1 dim-0 vars, 1 dim-2 vars, End of recursive call: and 1 xjuncts. [2018-11-18 23:01:03,198 INFO L202 ElimStorePlain]: Needed 3 recursive calls to eliminate 2 variables, input treesize:15, output treesize:3 [2018-11-18 23:01:03,201 WARN L383 uantifierElimination]: Trying to double check SDD result, but SMT solver's response was UNKNOWN. [2018-11-18 23:01:03,253 INFO L256 TraceCheckUtils]: 0: Hoare triple {803#true} call ULTIMATE.init(); {803#true} is VALID [2018-11-18 23:01:03,254 INFO L273 TraceCheckUtils]: 1: Hoare triple {803#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0]; {803#true} is VALID [2018-11-18 23:01:03,254 INFO L273 TraceCheckUtils]: 2: Hoare triple {803#true} assume true; {803#true} is VALID [2018-11-18 23:01:03,254 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {803#true} {803#true} #51#return; {803#true} is VALID [2018-11-18 23:01:03,255 INFO L256 TraceCheckUtils]: 4: Hoare triple {803#true} call #t~ret4 := main(); {803#true} is VALID [2018-11-18 23:01:03,255 INFO L273 TraceCheckUtils]: 5: Hoare triple {803#true} call ~#aa~0.base, ~#aa~0.offset := #Ultimate.alloc(400000);~a~0 := 0; {833#(and (= 0 |main_~#aa~0.offset|) (= main_~a~0 0))} is VALID [2018-11-18 23:01:03,256 INFO L273 TraceCheckUtils]: 6: Hoare triple {833#(and (= 0 |main_~#aa~0.offset|) (= main_~a~0 0))} assume true; {833#(and (= 0 |main_~#aa~0.offset|) (= main_~a~0 0))} is VALID [2018-11-18 23:01:03,257 INFO L273 TraceCheckUtils]: 7: Hoare triple {833#(and (= 0 |main_~#aa~0.offset|) (= main_~a~0 0))} call #t~mem0 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~a~0, 4); {833#(and (= 0 |main_~#aa~0.offset|) (= main_~a~0 0))} is VALID [2018-11-18 23:01:03,257 INFO L273 TraceCheckUtils]: 8: Hoare triple {833#(and (= 0 |main_~#aa~0.offset|) (= main_~a~0 0))} assume !!(#t~mem0 >= 0);havoc #t~mem0;#t~post1 := ~a~0;~a~0 := 1 + #t~post1;havoc #t~post1; {843#(and (= 0 |main_~#aa~0.offset|) (= main_~a~0 1))} is VALID [2018-11-18 23:01:03,258 INFO L273 TraceCheckUtils]: 9: Hoare triple {843#(and (= 0 |main_~#aa~0.offset|) (= main_~a~0 1))} assume true; {843#(and (= 0 |main_~#aa~0.offset|) (= main_~a~0 1))} is VALID [2018-11-18 23:01:03,259 INFO L273 TraceCheckUtils]: 10: Hoare triple {843#(and (= 0 |main_~#aa~0.offset|) (= main_~a~0 1))} call #t~mem0 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~a~0, 4); {850#(and (<= |main_#t~mem0| (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 4))) (= 0 |main_~#aa~0.offset|))} is VALID [2018-11-18 23:01:03,260 INFO L273 TraceCheckUtils]: 11: Hoare triple {850#(and (<= |main_#t~mem0| (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 4))) (= 0 |main_~#aa~0.offset|))} assume !!(#t~mem0 >= 0);havoc #t~mem0;#t~post1 := ~a~0;~a~0 := 1 + #t~post1;havoc #t~post1; {854#(and (= 0 |main_~#aa~0.offset|) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 4))))} is VALID [2018-11-18 23:01:03,261 INFO L273 TraceCheckUtils]: 12: Hoare triple {854#(and (= 0 |main_~#aa~0.offset|) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 4))))} assume true; {854#(and (= 0 |main_~#aa~0.offset|) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 4))))} is VALID [2018-11-18 23:01:03,262 INFO L273 TraceCheckUtils]: 13: Hoare triple {854#(and (= 0 |main_~#aa~0.offset|) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 4))))} call #t~mem0 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~a~0, 4); {854#(and (= 0 |main_~#aa~0.offset|) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 4))))} is VALID [2018-11-18 23:01:03,262 INFO L273 TraceCheckUtils]: 14: Hoare triple {854#(and (= 0 |main_~#aa~0.offset|) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 4))))} assume !(#t~mem0 >= 0);havoc #t~mem0; {854#(and (= 0 |main_~#aa~0.offset|) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 4))))} is VALID [2018-11-18 23:01:03,263 INFO L273 TraceCheckUtils]: 15: Hoare triple {854#(and (= 0 |main_~#aa~0.offset|) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 4))))} havoc ~x~0;~x~0 := 0; {867#(and (= 0 |main_~#aa~0.offset|) (= main_~x~0 0) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 4))))} is VALID [2018-11-18 23:01:03,264 INFO L273 TraceCheckUtils]: 16: Hoare triple {867#(and (= 0 |main_~#aa~0.offset|) (= main_~x~0 0) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 4))))} assume true; {867#(and (= 0 |main_~#aa~0.offset|) (= main_~x~0 0) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 4))))} is VALID [2018-11-18 23:01:03,265 INFO L273 TraceCheckUtils]: 17: Hoare triple {867#(and (= 0 |main_~#aa~0.offset|) (= main_~x~0 0) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 4))))} assume !!(~x~0 < ~a~0);call #t~mem3 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~x~0, 4); {867#(and (= 0 |main_~#aa~0.offset|) (= main_~x~0 0) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 4))))} is VALID [2018-11-18 23:01:03,267 INFO L256 TraceCheckUtils]: 18: Hoare triple {867#(and (= 0 |main_~#aa~0.offset|) (= main_~x~0 0) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 4))))} call __VERIFIER_assert((if #t~mem3 >= 0 then 1 else 0)); {877#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_1| Int)) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_1|) 4)))} is VALID [2018-11-18 23:01:03,267 INFO L273 TraceCheckUtils]: 19: Hoare triple {877#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_1| Int)) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_1|) 4)))} ~cond := #in~cond; {881#(and (exists ((|v_main_~#aa~0.base_BEFORE_CALL_1| Int)) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_1|) 4))) (= |__VERIFIER_assert_#in~cond| __VERIFIER_assert_~cond))} is VALID [2018-11-18 23:01:03,268 INFO L273 TraceCheckUtils]: 20: Hoare triple {881#(and (exists ((|v_main_~#aa~0.base_BEFORE_CALL_1| Int)) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_1|) 4))) (= |__VERIFIER_assert_#in~cond| __VERIFIER_assert_~cond))} assume !(0 == ~cond); {885#(and (not (= |__VERIFIER_assert_#in~cond| 0)) (exists ((|v_main_~#aa~0.base_BEFORE_CALL_1| Int)) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_1|) 4))))} is VALID [2018-11-18 23:01:03,269 INFO L273 TraceCheckUtils]: 21: Hoare triple {885#(and (not (= |__VERIFIER_assert_#in~cond| 0)) (exists ((|v_main_~#aa~0.base_BEFORE_CALL_1| Int)) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_1|) 4))))} assume true; {885#(and (not (= |__VERIFIER_assert_#in~cond| 0)) (exists ((|v_main_~#aa~0.base_BEFORE_CALL_1| Int)) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_1|) 4))))} is VALID [2018-11-18 23:01:03,271 INFO L268 TraceCheckUtils]: 22: Hoare quadruple {885#(and (not (= |__VERIFIER_assert_#in~cond| 0)) (exists ((|v_main_~#aa~0.base_BEFORE_CALL_1| Int)) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_1|) 4))))} {867#(and (= 0 |main_~#aa~0.offset|) (= main_~x~0 0) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 4))))} #55#return; {867#(and (= 0 |main_~#aa~0.offset|) (= main_~x~0 0) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 4))))} is VALID [2018-11-18 23:01:03,272 INFO L273 TraceCheckUtils]: 23: Hoare triple {867#(and (= 0 |main_~#aa~0.offset|) (= main_~x~0 0) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 4))))} havoc #t~mem3; {867#(and (= 0 |main_~#aa~0.offset|) (= main_~x~0 0) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 4))))} is VALID [2018-11-18 23:01:03,273 INFO L273 TraceCheckUtils]: 24: Hoare triple {867#(and (= 0 |main_~#aa~0.offset|) (= main_~x~0 0) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 4))))} #t~post2 := ~x~0;~x~0 := 1 + #t~post2;havoc #t~post2; {898#(and (= main_~x~0 1) (= 0 |main_~#aa~0.offset|) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 4))))} is VALID [2018-11-18 23:01:03,273 INFO L273 TraceCheckUtils]: 25: Hoare triple {898#(and (= main_~x~0 1) (= 0 |main_~#aa~0.offset|) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 4))))} assume true; {898#(and (= main_~x~0 1) (= 0 |main_~#aa~0.offset|) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 4))))} is VALID [2018-11-18 23:01:03,274 INFO L273 TraceCheckUtils]: 26: Hoare triple {898#(and (= main_~x~0 1) (= 0 |main_~#aa~0.offset|) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 4))))} assume !!(~x~0 < ~a~0);call #t~mem3 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~x~0, 4); {813#(<= 0 |main_#t~mem3|)} is VALID [2018-11-18 23:01:03,275 INFO L256 TraceCheckUtils]: 27: Hoare triple {813#(<= 0 |main_#t~mem3|)} call __VERIFIER_assert((if #t~mem3 >= 0 then 1 else 0)); {908#(= |__VERIFIER_assert_#in~cond| 1)} is VALID [2018-11-18 23:01:03,276 INFO L273 TraceCheckUtils]: 28: Hoare triple {908#(= |__VERIFIER_assert_#in~cond| 1)} ~cond := #in~cond; {912#(= 1 __VERIFIER_assert_~cond)} is VALID [2018-11-18 23:01:03,277 INFO L273 TraceCheckUtils]: 29: Hoare triple {912#(= 1 __VERIFIER_assert_~cond)} assume 0 == ~cond; {804#false} is VALID [2018-11-18 23:01:03,277 INFO L273 TraceCheckUtils]: 30: Hoare triple {804#false} assume !false; {804#false} is VALID [2018-11-18 23:01:03,281 INFO L134 CoverageAnalysis]: Checked inductivity of 14 backedges. 0 proven. 14 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 23:01:03,299 INFO L312 seRefinementStrategy]: Constructing automaton from 0 perfect and 2 imperfect interpolant sequences. [2018-11-18 23:01:03,300 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 14] total 23 [2018-11-18 23:01:03,300 INFO L78 Accepts]: Start accepts. Automaton has 23 states. Word has length 31 [2018-11-18 23:01:03,301 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-18 23:01:03,301 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 23 states. [2018-11-18 23:01:03,383 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 56 edges. 56 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-18 23:01:03,384 INFO L459 AbstractCegarLoop]: Interpolant automaton has 23 states [2018-11-18 23:01:03,384 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 23 interpolants. [2018-11-18 23:01:03,385 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=66, Invalid=440, Unknown=0, NotChecked=0, Total=506 [2018-11-18 23:01:03,385 INFO L87 Difference]: Start difference. First operand 34 states and 35 transitions. Second operand 23 states. [2018-11-18 23:01:09,191 WARN L180 SmtUtils]: Spent 309.00 ms on a formula simplification. DAG size of input: 25 DAG size of output: 19 [2018-11-18 23:01:10,599 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:01:10,599 INFO L93 Difference]: Finished difference Result 71 states and 77 transitions. [2018-11-18 23:01:10,599 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 25 states. [2018-11-18 23:01:10,599 INFO L78 Accepts]: Start accepts. Automaton has 23 states. Word has length 31 [2018-11-18 23:01:10,599 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-18 23:01:10,600 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 23 states. [2018-11-18 23:01:10,603 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 25 states to 25 states and 74 transitions. [2018-11-18 23:01:10,603 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 23 states. [2018-11-18 23:01:10,606 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 25 states to 25 states and 74 transitions. [2018-11-18 23:01:10,607 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 25 states and 74 transitions. [2018-11-18 23:01:10,730 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 74 edges. 74 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-18 23:01:10,733 INFO L225 Difference]: With dead ends: 71 [2018-11-18 23:01:10,733 INFO L226 Difference]: Without dead ends: 69 [2018-11-18 23:01:10,734 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 60 GetRequests, 22 SyntacticMatches, 1 SemanticMatches, 37 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 348 ImplicationChecksByTransitivity, 1.5s TimeCoverageRelationStatistics Valid=202, Invalid=1280, Unknown=0, NotChecked=0, Total=1482 [2018-11-18 23:01:10,734 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 69 states. [2018-11-18 23:01:10,914 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 69 to 55. [2018-11-18 23:01:10,914 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-18 23:01:10,914 INFO L82 GeneralOperation]: Start isEquivalent. First operand 69 states. Second operand 55 states. [2018-11-18 23:01:10,914 INFO L74 IsIncluded]: Start isIncluded. First operand 69 states. Second operand 55 states. [2018-11-18 23:01:10,914 INFO L87 Difference]: Start difference. First operand 69 states. Second operand 55 states. [2018-11-18 23:01:10,919 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:01:10,919 INFO L93 Difference]: Finished difference Result 69 states and 75 transitions. [2018-11-18 23:01:10,919 INFO L276 IsEmpty]: Start isEmpty. Operand 69 states and 75 transitions. [2018-11-18 23:01:10,920 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-18 23:01:10,920 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-18 23:01:10,920 INFO L74 IsIncluded]: Start isIncluded. First operand 55 states. Second operand 69 states. [2018-11-18 23:01:10,920 INFO L87 Difference]: Start difference. First operand 55 states. Second operand 69 states. [2018-11-18 23:01:10,924 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:01:10,925 INFO L93 Difference]: Finished difference Result 69 states and 75 transitions. [2018-11-18 23:01:10,925 INFO L276 IsEmpty]: Start isEmpty. Operand 69 states and 75 transitions. [2018-11-18 23:01:10,926 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-18 23:01:10,926 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-18 23:01:10,926 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-18 23:01:10,926 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-18 23:01:10,926 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 55 states. [2018-11-18 23:01:10,929 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 55 states to 55 states and 59 transitions. [2018-11-18 23:01:10,929 INFO L78 Accepts]: Start accepts. Automaton has 55 states and 59 transitions. Word has length 31 [2018-11-18 23:01:10,930 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-18 23:01:10,930 INFO L480 AbstractCegarLoop]: Abstraction has 55 states and 59 transitions. [2018-11-18 23:01:10,930 INFO L481 AbstractCegarLoop]: Interpolant automaton has 23 states. [2018-11-18 23:01:10,930 INFO L276 IsEmpty]: Start isEmpty. Operand 55 states and 59 transitions. [2018-11-18 23:01:10,931 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 44 [2018-11-18 23:01:10,932 INFO L367 BasicCegarLoop]: Found error trace [2018-11-18 23:01:10,932 INFO L375 BasicCegarLoop]: trace histogram [4, 4, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 23:01:10,932 INFO L423 AbstractCegarLoop]: === Iteration 6 === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-18 23:01:10,932 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 23:01:10,932 INFO L82 PathProgramCache]: Analyzing trace with hash 1540295548, now seen corresponding path program 3 times [2018-11-18 23:01:10,932 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 23:01:10,933 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 23:01:10,934 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 23:01:10,934 INFO L101 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2018-11-18 23:01:10,934 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 23:01:10,958 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 23:01:11,351 INFO L256 TraceCheckUtils]: 0: Hoare triple {1260#true} call ULTIMATE.init(); {1260#true} is VALID [2018-11-18 23:01:11,351 INFO L273 TraceCheckUtils]: 1: Hoare triple {1260#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0]; {1260#true} is VALID [2018-11-18 23:01:11,352 INFO L273 TraceCheckUtils]: 2: Hoare triple {1260#true} assume true; {1260#true} is VALID [2018-11-18 23:01:11,352 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {1260#true} {1260#true} #51#return; {1260#true} is VALID [2018-11-18 23:01:11,352 INFO L256 TraceCheckUtils]: 4: Hoare triple {1260#true} call #t~ret4 := main(); {1260#true} is VALID [2018-11-18 23:01:11,373 INFO L273 TraceCheckUtils]: 5: Hoare triple {1260#true} call ~#aa~0.base, ~#aa~0.offset := #Ultimate.alloc(400000);~a~0 := 0; {1262#(= main_~a~0 0)} is VALID [2018-11-18 23:01:11,381 INFO L273 TraceCheckUtils]: 6: Hoare triple {1262#(= main_~a~0 0)} assume true; {1262#(= main_~a~0 0)} is VALID [2018-11-18 23:01:11,394 INFO L273 TraceCheckUtils]: 7: Hoare triple {1262#(= main_~a~0 0)} call #t~mem0 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~a~0, 4); {1262#(= main_~a~0 0)} is VALID [2018-11-18 23:01:11,397 INFO L273 TraceCheckUtils]: 8: Hoare triple {1262#(= main_~a~0 0)} assume !!(#t~mem0 >= 0);havoc #t~mem0;#t~post1 := ~a~0;~a~0 := 1 + #t~post1;havoc #t~post1; {1263#(<= main_~a~0 1)} is VALID [2018-11-18 23:01:11,405 INFO L273 TraceCheckUtils]: 9: Hoare triple {1263#(<= main_~a~0 1)} assume true; {1263#(<= main_~a~0 1)} is VALID [2018-11-18 23:01:11,406 INFO L273 TraceCheckUtils]: 10: Hoare triple {1263#(<= main_~a~0 1)} call #t~mem0 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~a~0, 4); {1263#(<= main_~a~0 1)} is VALID [2018-11-18 23:01:11,410 INFO L273 TraceCheckUtils]: 11: Hoare triple {1263#(<= main_~a~0 1)} assume !!(#t~mem0 >= 0);havoc #t~mem0;#t~post1 := ~a~0;~a~0 := 1 + #t~post1;havoc #t~post1; {1264#(<= main_~a~0 2)} is VALID [2018-11-18 23:01:11,410 INFO L273 TraceCheckUtils]: 12: Hoare triple {1264#(<= main_~a~0 2)} assume true; {1264#(<= main_~a~0 2)} is VALID [2018-11-18 23:01:11,413 INFO L273 TraceCheckUtils]: 13: Hoare triple {1264#(<= main_~a~0 2)} call #t~mem0 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~a~0, 4); {1265#(and (= |main_#t~mem0| (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 main_~a~0) |main_~#aa~0.offset|))) (<= main_~a~0 2))} is VALID [2018-11-18 23:01:11,413 INFO L273 TraceCheckUtils]: 14: Hoare triple {1265#(and (= |main_#t~mem0| (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 main_~a~0) |main_~#aa~0.offset|))) (<= main_~a~0 2))} assume !!(#t~mem0 >= 0);havoc #t~mem0;#t~post1 := ~a~0;~a~0 := 1 + #t~post1;havoc #t~post1; {1266#(and (or (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 2)))) (<= main_~a~0 2)) (<= main_~a~0 3))} is VALID [2018-11-18 23:01:11,414 INFO L273 TraceCheckUtils]: 15: Hoare triple {1266#(and (or (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 2)))) (<= main_~a~0 2)) (<= main_~a~0 3))} assume true; {1266#(and (or (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 2)))) (<= main_~a~0 2)) (<= main_~a~0 3))} is VALID [2018-11-18 23:01:11,415 INFO L273 TraceCheckUtils]: 16: Hoare triple {1266#(and (or (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 2)))) (<= main_~a~0 2)) (<= main_~a~0 3))} call #t~mem0 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~a~0, 4); {1266#(and (or (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 2)))) (<= main_~a~0 2)) (<= main_~a~0 3))} is VALID [2018-11-18 23:01:11,420 INFO L273 TraceCheckUtils]: 17: Hoare triple {1266#(and (or (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 2)))) (<= main_~a~0 2)) (<= main_~a~0 3))} assume !(#t~mem0 >= 0);havoc #t~mem0; {1266#(and (or (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 2)))) (<= main_~a~0 2)) (<= main_~a~0 3))} is VALID [2018-11-18 23:01:11,421 INFO L273 TraceCheckUtils]: 18: Hoare triple {1266#(and (or (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 2)))) (<= main_~a~0 2)) (<= main_~a~0 3))} havoc ~x~0;~x~0 := 0; {1267#(and (or (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 2)))) (<= main_~a~0 2)) (<= main_~a~0 3) (= main_~x~0 0))} is VALID [2018-11-18 23:01:11,425 INFO L273 TraceCheckUtils]: 19: Hoare triple {1267#(and (or (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 2)))) (<= main_~a~0 2)) (<= main_~a~0 3) (= main_~x~0 0))} assume true; {1267#(and (or (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 2)))) (<= main_~a~0 2)) (<= main_~a~0 3) (= main_~x~0 0))} is VALID [2018-11-18 23:01:11,425 INFO L273 TraceCheckUtils]: 20: Hoare triple {1267#(and (or (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 2)))) (<= main_~a~0 2)) (<= main_~a~0 3) (= main_~x~0 0))} assume !!(~x~0 < ~a~0);call #t~mem3 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~x~0, 4); {1267#(and (or (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 2)))) (<= main_~a~0 2)) (<= main_~a~0 3) (= main_~x~0 0))} is VALID [2018-11-18 23:01:11,425 INFO L256 TraceCheckUtils]: 21: Hoare triple {1267#(and (or (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 2)))) (<= main_~a~0 2)) (<= main_~a~0 3) (= main_~x~0 0))} call __VERIFIER_assert((if #t~mem3 >= 0 then 1 else 0)); {1260#true} is VALID [2018-11-18 23:01:11,427 INFO L273 TraceCheckUtils]: 22: Hoare triple {1260#true} ~cond := #in~cond; {1268#(= __VERIFIER_assert_~cond |__VERIFIER_assert_#in~cond|)} is VALID [2018-11-18 23:01:11,427 INFO L273 TraceCheckUtils]: 23: Hoare triple {1268#(= __VERIFIER_assert_~cond |__VERIFIER_assert_#in~cond|)} assume !(0 == ~cond); {1269#(not (= |__VERIFIER_assert_#in~cond| 0))} is VALID [2018-11-18 23:01:11,428 INFO L273 TraceCheckUtils]: 24: Hoare triple {1269#(not (= |__VERIFIER_assert_#in~cond| 0))} assume true; {1269#(not (= |__VERIFIER_assert_#in~cond| 0))} is VALID [2018-11-18 23:01:11,432 INFO L268 TraceCheckUtils]: 25: Hoare quadruple {1269#(not (= |__VERIFIER_assert_#in~cond| 0))} {1267#(and (or (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 2)))) (<= main_~a~0 2)) (<= main_~a~0 3) (= main_~x~0 0))} #55#return; {1267#(and (or (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 2)))) (<= main_~a~0 2)) (<= main_~a~0 3) (= main_~x~0 0))} is VALID [2018-11-18 23:01:11,433 INFO L273 TraceCheckUtils]: 26: Hoare triple {1267#(and (or (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 2)))) (<= main_~a~0 2)) (<= main_~a~0 3) (= main_~x~0 0))} havoc #t~mem3; {1267#(and (or (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 2)))) (<= main_~a~0 2)) (<= main_~a~0 3) (= main_~x~0 0))} is VALID [2018-11-18 23:01:11,434 INFO L273 TraceCheckUtils]: 27: Hoare triple {1267#(and (or (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 2)))) (<= main_~a~0 2)) (<= main_~a~0 3) (= main_~x~0 0))} #t~post2 := ~x~0;~x~0 := 1 + #t~post2;havoc #t~post2; {1270#(and (<= main_~a~0 (+ main_~x~0 2)) (or (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~x~0 1))))) (<= main_~a~0 (+ main_~x~0 1))))} is VALID [2018-11-18 23:01:11,434 INFO L273 TraceCheckUtils]: 28: Hoare triple {1270#(and (<= main_~a~0 (+ main_~x~0 2)) (or (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~x~0 1))))) (<= main_~a~0 (+ main_~x~0 1))))} assume true; {1270#(and (<= main_~a~0 (+ main_~x~0 2)) (or (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~x~0 1))))) (<= main_~a~0 (+ main_~x~0 1))))} is VALID [2018-11-18 23:01:11,436 INFO L273 TraceCheckUtils]: 29: Hoare triple {1270#(and (<= main_~a~0 (+ main_~x~0 2)) (or (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~x~0 1))))) (<= main_~a~0 (+ main_~x~0 1))))} assume !!(~x~0 < ~a~0);call #t~mem3 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~x~0, 4); {1270#(and (<= main_~a~0 (+ main_~x~0 2)) (or (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~x~0 1))))) (<= main_~a~0 (+ main_~x~0 1))))} is VALID [2018-11-18 23:01:11,436 INFO L256 TraceCheckUtils]: 30: Hoare triple {1270#(and (<= main_~a~0 (+ main_~x~0 2)) (or (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~x~0 1))))) (<= main_~a~0 (+ main_~x~0 1))))} call __VERIFIER_assert((if #t~mem3 >= 0 then 1 else 0)); {1260#true} is VALID [2018-11-18 23:01:11,436 INFO L273 TraceCheckUtils]: 31: Hoare triple {1260#true} ~cond := #in~cond; {1260#true} is VALID [2018-11-18 23:01:11,437 INFO L273 TraceCheckUtils]: 32: Hoare triple {1260#true} assume !(0 == ~cond); {1260#true} is VALID [2018-11-18 23:01:11,437 INFO L273 TraceCheckUtils]: 33: Hoare triple {1260#true} assume true; {1260#true} is VALID [2018-11-18 23:01:11,439 INFO L268 TraceCheckUtils]: 34: Hoare quadruple {1260#true} {1270#(and (<= main_~a~0 (+ main_~x~0 2)) (or (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~x~0 1))))) (<= main_~a~0 (+ main_~x~0 1))))} #55#return; {1270#(and (<= main_~a~0 (+ main_~x~0 2)) (or (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~x~0 1))))) (<= main_~a~0 (+ main_~x~0 1))))} is VALID [2018-11-18 23:01:11,439 INFO L273 TraceCheckUtils]: 35: Hoare triple {1270#(and (<= main_~a~0 (+ main_~x~0 2)) (or (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~x~0 1))))) (<= main_~a~0 (+ main_~x~0 1))))} havoc #t~mem3; {1270#(and (<= main_~a~0 (+ main_~x~0 2)) (or (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~x~0 1))))) (<= main_~a~0 (+ main_~x~0 1))))} is VALID [2018-11-18 23:01:11,442 INFO L273 TraceCheckUtils]: 36: Hoare triple {1270#(and (<= main_~a~0 (+ main_~x~0 2)) (or (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~x~0 1))))) (<= main_~a~0 (+ main_~x~0 1))))} #t~post2 := ~x~0;~x~0 := 1 + #t~post2;havoc #t~post2; {1271#(or (<= main_~a~0 main_~x~0) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 main_~x~0) |main_~#aa~0.offset|))))} is VALID [2018-11-18 23:01:11,442 INFO L273 TraceCheckUtils]: 37: Hoare triple {1271#(or (<= main_~a~0 main_~x~0) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 main_~x~0) |main_~#aa~0.offset|))))} assume true; {1271#(or (<= main_~a~0 main_~x~0) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 main_~x~0) |main_~#aa~0.offset|))))} is VALID [2018-11-18 23:01:11,443 INFO L273 TraceCheckUtils]: 38: Hoare triple {1271#(or (<= main_~a~0 main_~x~0) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 main_~x~0) |main_~#aa~0.offset|))))} assume !!(~x~0 < ~a~0);call #t~mem3 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~x~0, 4); {1272#(<= 0 |main_#t~mem3|)} is VALID [2018-11-18 23:01:11,445 INFO L256 TraceCheckUtils]: 39: Hoare triple {1272#(<= 0 |main_#t~mem3|)} call __VERIFIER_assert((if #t~mem3 >= 0 then 1 else 0)); {1269#(not (= |__VERIFIER_assert_#in~cond| 0))} is VALID [2018-11-18 23:01:11,445 INFO L273 TraceCheckUtils]: 40: Hoare triple {1269#(not (= |__VERIFIER_assert_#in~cond| 0))} ~cond := #in~cond; {1273#(not (= __VERIFIER_assert_~cond 0))} is VALID [2018-11-18 23:01:11,447 INFO L273 TraceCheckUtils]: 41: Hoare triple {1273#(not (= __VERIFIER_assert_~cond 0))} assume 0 == ~cond; {1261#false} is VALID [2018-11-18 23:01:11,447 INFO L273 TraceCheckUtils]: 42: Hoare triple {1261#false} assume !false; {1261#false} is VALID [2018-11-18 23:01:11,453 INFO L134 CoverageAnalysis]: Checked inductivity of 37 backedges. 3 proven. 33 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2018-11-18 23:01:11,453 INFO L300 seRefinementStrategy]: The current sequences of interpolants are not accepted, trying to find more. [2018-11-18 23:01:11,453 INFO L223 ckRefinementStrategy]: Switched to mode Z3_FP No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 Starting monitored process 5 with z3 -smt2 -in SMTLIB2_COMPLIANT=true -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 5 with z3 -smt2 -in SMTLIB2_COMPLIANT=true -t:12000 [2018-11-18 23:01:11,465 INFO L103 rtionOrderModulation]: Keeping assertion order OUTSIDE_LOOP_FIRST2 [2018-11-18 23:01:11,528 INFO L249 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 4 check-sat command(s) [2018-11-18 23:01:11,528 INFO L250 tOrderPrioritization]: Conjunction of SSA is unsat [2018-11-18 23:01:11,559 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 23:01:11,561 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-18 23:01:12,482 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 19 treesize of output 15 [2018-11-18 23:01:12,499 INFO L682 Elim1Store]: detected equality via solver [2018-11-18 23:01:12,502 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 14 [2018-11-18 23:01:12,505 INFO L267 ElimStorePlain]: Start of recursive call 3: End of recursive call: and 1 xjuncts. [2018-11-18 23:01:12,508 INFO L267 ElimStorePlain]: Start of recursive call 2: 1 dim-1 vars, End of recursive call: and 1 xjuncts. [2018-11-18 23:01:12,520 INFO L267 ElimStorePlain]: Start of recursive call 1: 3 dim-0 vars, 1 dim-2 vars, End of recursive call: and 1 xjuncts. [2018-11-18 23:01:12,521 INFO L202 ElimStorePlain]: Needed 3 recursive calls to eliminate 4 variables, input treesize:28, output treesize:3 [2018-11-18 23:01:12,525 WARN L383 uantifierElimination]: Trying to double check SDD result, but SMT solver's response was UNKNOWN. [2018-11-18 23:01:12,563 INFO L256 TraceCheckUtils]: 0: Hoare triple {1260#true} call ULTIMATE.init(); {1260#true} is VALID [2018-11-18 23:01:12,563 INFO L273 TraceCheckUtils]: 1: Hoare triple {1260#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0]; {1260#true} is VALID [2018-11-18 23:01:12,564 INFO L273 TraceCheckUtils]: 2: Hoare triple {1260#true} assume true; {1260#true} is VALID [2018-11-18 23:01:12,564 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {1260#true} {1260#true} #51#return; {1260#true} is VALID [2018-11-18 23:01:12,564 INFO L256 TraceCheckUtils]: 4: Hoare triple {1260#true} call #t~ret4 := main(); {1260#true} is VALID [2018-11-18 23:01:12,565 INFO L273 TraceCheckUtils]: 5: Hoare triple {1260#true} call ~#aa~0.base, ~#aa~0.offset := #Ultimate.alloc(400000);~a~0 := 0; {1292#(and (= 0 |main_~#aa~0.offset|) (<= main_~a~0 0))} is VALID [2018-11-18 23:01:12,566 INFO L273 TraceCheckUtils]: 6: Hoare triple {1292#(and (= 0 |main_~#aa~0.offset|) (<= main_~a~0 0))} assume true; {1292#(and (= 0 |main_~#aa~0.offset|) (<= main_~a~0 0))} is VALID [2018-11-18 23:01:12,566 INFO L273 TraceCheckUtils]: 7: Hoare triple {1292#(and (= 0 |main_~#aa~0.offset|) (<= main_~a~0 0))} call #t~mem0 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~a~0, 4); {1292#(and (= 0 |main_~#aa~0.offset|) (<= main_~a~0 0))} is VALID [2018-11-18 23:01:12,567 INFO L273 TraceCheckUtils]: 8: Hoare triple {1292#(and (= 0 |main_~#aa~0.offset|) (<= main_~a~0 0))} assume !!(#t~mem0 >= 0);havoc #t~mem0;#t~post1 := ~a~0;~a~0 := 1 + #t~post1;havoc #t~post1; {1302#(and (<= main_~a~0 1) (= 0 |main_~#aa~0.offset|))} is VALID [2018-11-18 23:01:12,567 INFO L273 TraceCheckUtils]: 9: Hoare triple {1302#(and (<= main_~a~0 1) (= 0 |main_~#aa~0.offset|))} assume true; {1302#(and (<= main_~a~0 1) (= 0 |main_~#aa~0.offset|))} is VALID [2018-11-18 23:01:12,568 INFO L273 TraceCheckUtils]: 10: Hoare triple {1302#(and (<= main_~a~0 1) (= 0 |main_~#aa~0.offset|))} call #t~mem0 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~a~0, 4); {1302#(and (<= main_~a~0 1) (= 0 |main_~#aa~0.offset|))} is VALID [2018-11-18 23:01:12,569 INFO L273 TraceCheckUtils]: 11: Hoare triple {1302#(and (<= main_~a~0 1) (= 0 |main_~#aa~0.offset|))} assume !!(#t~mem0 >= 0);havoc #t~mem0;#t~post1 := ~a~0;~a~0 := 1 + #t~post1;havoc #t~post1; {1312#(and (= 0 |main_~#aa~0.offset|) (<= main_~a~0 2))} is VALID [2018-11-18 23:01:12,570 INFO L273 TraceCheckUtils]: 12: Hoare triple {1312#(and (= 0 |main_~#aa~0.offset|) (<= main_~a~0 2))} assume true; {1312#(and (= 0 |main_~#aa~0.offset|) (<= main_~a~0 2))} is VALID [2018-11-18 23:01:12,571 INFO L273 TraceCheckUtils]: 13: Hoare triple {1312#(and (= 0 |main_~#aa~0.offset|) (<= main_~a~0 2))} call #t~mem0 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~a~0, 4); {1319#(and (= 0 |main_~#aa~0.offset|) (<= |main_#t~mem0| (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 main_~a~0)))) (<= main_~a~0 2))} is VALID [2018-11-18 23:01:12,572 INFO L273 TraceCheckUtils]: 14: Hoare triple {1319#(and (= 0 |main_~#aa~0.offset|) (<= |main_#t~mem0| (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 main_~a~0)))) (<= main_~a~0 2))} assume !!(#t~mem0 >= 0);havoc #t~mem0;#t~post1 := ~a~0;~a~0 := 1 + #t~post1;havoc #t~post1; {1323#(and (= 0 |main_~#aa~0.offset|) (exists ((v_main_~a~0_11 Int)) (and (<= v_main_~a~0_11 2) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 v_main_~a~0_11)))) (<= main_~a~0 (+ v_main_~a~0_11 1)))))} is VALID [2018-11-18 23:01:12,573 INFO L273 TraceCheckUtils]: 15: Hoare triple {1323#(and (= 0 |main_~#aa~0.offset|) (exists ((v_main_~a~0_11 Int)) (and (<= v_main_~a~0_11 2) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 v_main_~a~0_11)))) (<= main_~a~0 (+ v_main_~a~0_11 1)))))} assume true; {1323#(and (= 0 |main_~#aa~0.offset|) (exists ((v_main_~a~0_11 Int)) (and (<= v_main_~a~0_11 2) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 v_main_~a~0_11)))) (<= main_~a~0 (+ v_main_~a~0_11 1)))))} is VALID [2018-11-18 23:01:12,574 INFO L273 TraceCheckUtils]: 16: Hoare triple {1323#(and (= 0 |main_~#aa~0.offset|) (exists ((v_main_~a~0_11 Int)) (and (<= v_main_~a~0_11 2) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 v_main_~a~0_11)))) (<= main_~a~0 (+ v_main_~a~0_11 1)))))} call #t~mem0 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~a~0, 4); {1323#(and (= 0 |main_~#aa~0.offset|) (exists ((v_main_~a~0_11 Int)) (and (<= v_main_~a~0_11 2) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 v_main_~a~0_11)))) (<= main_~a~0 (+ v_main_~a~0_11 1)))))} is VALID [2018-11-18 23:01:12,576 INFO L273 TraceCheckUtils]: 17: Hoare triple {1323#(and (= 0 |main_~#aa~0.offset|) (exists ((v_main_~a~0_11 Int)) (and (<= v_main_~a~0_11 2) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 v_main_~a~0_11)))) (<= main_~a~0 (+ v_main_~a~0_11 1)))))} assume !(#t~mem0 >= 0);havoc #t~mem0; {1323#(and (= 0 |main_~#aa~0.offset|) (exists ((v_main_~a~0_11 Int)) (and (<= v_main_~a~0_11 2) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 v_main_~a~0_11)))) (<= main_~a~0 (+ v_main_~a~0_11 1)))))} is VALID [2018-11-18 23:01:12,577 INFO L273 TraceCheckUtils]: 18: Hoare triple {1323#(and (= 0 |main_~#aa~0.offset|) (exists ((v_main_~a~0_11 Int)) (and (<= v_main_~a~0_11 2) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 v_main_~a~0_11)))) (<= main_~a~0 (+ v_main_~a~0_11 1)))))} havoc ~x~0;~x~0 := 0; {1336#(and (= 0 |main_~#aa~0.offset|) (= main_~x~0 0) (exists ((v_main_~a~0_11 Int)) (and (<= v_main_~a~0_11 2) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 v_main_~a~0_11)))) (<= main_~a~0 (+ v_main_~a~0_11 1)))))} is VALID [2018-11-18 23:01:12,578 INFO L273 TraceCheckUtils]: 19: Hoare triple {1336#(and (= 0 |main_~#aa~0.offset|) (= main_~x~0 0) (exists ((v_main_~a~0_11 Int)) (and (<= v_main_~a~0_11 2) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 v_main_~a~0_11)))) (<= main_~a~0 (+ v_main_~a~0_11 1)))))} assume true; {1336#(and (= 0 |main_~#aa~0.offset|) (= main_~x~0 0) (exists ((v_main_~a~0_11 Int)) (and (<= v_main_~a~0_11 2) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 v_main_~a~0_11)))) (<= main_~a~0 (+ v_main_~a~0_11 1)))))} is VALID [2018-11-18 23:01:12,579 INFO L273 TraceCheckUtils]: 20: Hoare triple {1336#(and (= 0 |main_~#aa~0.offset|) (= main_~x~0 0) (exists ((v_main_~a~0_11 Int)) (and (<= v_main_~a~0_11 2) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 v_main_~a~0_11)))) (<= main_~a~0 (+ v_main_~a~0_11 1)))))} assume !!(~x~0 < ~a~0);call #t~mem3 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~x~0, 4); {1336#(and (= 0 |main_~#aa~0.offset|) (= main_~x~0 0) (exists ((v_main_~a~0_11 Int)) (and (<= v_main_~a~0_11 2) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 v_main_~a~0_11)))) (<= main_~a~0 (+ v_main_~a~0_11 1)))))} is VALID [2018-11-18 23:01:12,581 INFO L256 TraceCheckUtils]: 21: Hoare triple {1336#(and (= 0 |main_~#aa~0.offset|) (= main_~x~0 0) (exists ((v_main_~a~0_11 Int)) (and (<= v_main_~a~0_11 2) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 v_main_~a~0_11)))) (<= main_~a~0 (+ v_main_~a~0_11 1)))))} call __VERIFIER_assert((if #t~mem3 >= 0 then 1 else 0)); {1346#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_2| Int) (v_main_~a~0_11 Int)) (and (<= v_main_~a~0_11 2) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_2|) (* 4 v_main_~a~0_11)))))} is VALID [2018-11-18 23:01:12,581 INFO L273 TraceCheckUtils]: 22: Hoare triple {1346#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_2| Int) (v_main_~a~0_11 Int)) (and (<= v_main_~a~0_11 2) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_2|) (* 4 v_main_~a~0_11)))))} ~cond := #in~cond; {1346#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_2| Int) (v_main_~a~0_11 Int)) (and (<= v_main_~a~0_11 2) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_2|) (* 4 v_main_~a~0_11)))))} is VALID [2018-11-18 23:01:12,584 INFO L273 TraceCheckUtils]: 23: Hoare triple {1346#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_2| Int) (v_main_~a~0_11 Int)) (and (<= v_main_~a~0_11 2) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_2|) (* 4 v_main_~a~0_11)))))} assume !(0 == ~cond); {1346#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_2| Int) (v_main_~a~0_11 Int)) (and (<= v_main_~a~0_11 2) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_2|) (* 4 v_main_~a~0_11)))))} is VALID [2018-11-18 23:01:12,585 INFO L273 TraceCheckUtils]: 24: Hoare triple {1346#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_2| Int) (v_main_~a~0_11 Int)) (and (<= v_main_~a~0_11 2) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_2|) (* 4 v_main_~a~0_11)))))} assume true; {1346#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_2| Int) (v_main_~a~0_11 Int)) (and (<= v_main_~a~0_11 2) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_2|) (* 4 v_main_~a~0_11)))))} is VALID [2018-11-18 23:01:12,588 INFO L268 TraceCheckUtils]: 25: Hoare quadruple {1346#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_2| Int) (v_main_~a~0_11 Int)) (and (<= v_main_~a~0_11 2) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_2|) (* 4 v_main_~a~0_11)))))} {1336#(and (= 0 |main_~#aa~0.offset|) (= main_~x~0 0) (exists ((v_main_~a~0_11 Int)) (and (<= v_main_~a~0_11 2) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 v_main_~a~0_11)))) (<= main_~a~0 (+ v_main_~a~0_11 1)))))} #55#return; {1336#(and (= 0 |main_~#aa~0.offset|) (= main_~x~0 0) (exists ((v_main_~a~0_11 Int)) (and (<= v_main_~a~0_11 2) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 v_main_~a~0_11)))) (<= main_~a~0 (+ v_main_~a~0_11 1)))))} is VALID [2018-11-18 23:01:12,591 INFO L273 TraceCheckUtils]: 26: Hoare triple {1336#(and (= 0 |main_~#aa~0.offset|) (= main_~x~0 0) (exists ((v_main_~a~0_11 Int)) (and (<= v_main_~a~0_11 2) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 v_main_~a~0_11)))) (<= main_~a~0 (+ v_main_~a~0_11 1)))))} havoc #t~mem3; {1336#(and (= 0 |main_~#aa~0.offset|) (= main_~x~0 0) (exists ((v_main_~a~0_11 Int)) (and (<= v_main_~a~0_11 2) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 v_main_~a~0_11)))) (<= main_~a~0 (+ v_main_~a~0_11 1)))))} is VALID [2018-11-18 23:01:12,593 INFO L273 TraceCheckUtils]: 27: Hoare triple {1336#(and (= 0 |main_~#aa~0.offset|) (= main_~x~0 0) (exists ((v_main_~a~0_11 Int)) (and (<= v_main_~a~0_11 2) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 v_main_~a~0_11)))) (<= main_~a~0 (+ v_main_~a~0_11 1)))))} #t~post2 := ~x~0;~x~0 := 1 + #t~post2;havoc #t~post2; {1365#(and (= 0 |main_~#aa~0.offset|) (<= 1 main_~x~0) (exists ((v_main_~a~0_11 Int)) (and (<= v_main_~a~0_11 2) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 v_main_~a~0_11)))) (<= main_~a~0 (+ v_main_~a~0_11 1)))))} is VALID [2018-11-18 23:01:12,594 INFO L273 TraceCheckUtils]: 28: Hoare triple {1365#(and (= 0 |main_~#aa~0.offset|) (<= 1 main_~x~0) (exists ((v_main_~a~0_11 Int)) (and (<= v_main_~a~0_11 2) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 v_main_~a~0_11)))) (<= main_~a~0 (+ v_main_~a~0_11 1)))))} assume true; {1365#(and (= 0 |main_~#aa~0.offset|) (<= 1 main_~x~0) (exists ((v_main_~a~0_11 Int)) (and (<= v_main_~a~0_11 2) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 v_main_~a~0_11)))) (<= main_~a~0 (+ v_main_~a~0_11 1)))))} is VALID [2018-11-18 23:01:12,594 INFO L273 TraceCheckUtils]: 29: Hoare triple {1365#(and (= 0 |main_~#aa~0.offset|) (<= 1 main_~x~0) (exists ((v_main_~a~0_11 Int)) (and (<= v_main_~a~0_11 2) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 v_main_~a~0_11)))) (<= main_~a~0 (+ v_main_~a~0_11 1)))))} assume !!(~x~0 < ~a~0);call #t~mem3 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~x~0, 4); {1365#(and (= 0 |main_~#aa~0.offset|) (<= 1 main_~x~0) (exists ((v_main_~a~0_11 Int)) (and (<= v_main_~a~0_11 2) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 v_main_~a~0_11)))) (<= main_~a~0 (+ v_main_~a~0_11 1)))))} is VALID [2018-11-18 23:01:12,596 INFO L256 TraceCheckUtils]: 30: Hoare triple {1365#(and (= 0 |main_~#aa~0.offset|) (<= 1 main_~x~0) (exists ((v_main_~a~0_11 Int)) (and (<= v_main_~a~0_11 2) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 v_main_~a~0_11)))) (<= main_~a~0 (+ v_main_~a~0_11 1)))))} call __VERIFIER_assert((if #t~mem3 >= 0 then 1 else 0)); {1346#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_2| Int) (v_main_~a~0_11 Int)) (and (<= v_main_~a~0_11 2) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_2|) (* 4 v_main_~a~0_11)))))} is VALID [2018-11-18 23:01:12,596 INFO L273 TraceCheckUtils]: 31: Hoare triple {1346#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_2| Int) (v_main_~a~0_11 Int)) (and (<= v_main_~a~0_11 2) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_2|) (* 4 v_main_~a~0_11)))))} ~cond := #in~cond; {1346#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_2| Int) (v_main_~a~0_11 Int)) (and (<= v_main_~a~0_11 2) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_2|) (* 4 v_main_~a~0_11)))))} is VALID [2018-11-18 23:01:12,596 INFO L273 TraceCheckUtils]: 32: Hoare triple {1346#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_2| Int) (v_main_~a~0_11 Int)) (and (<= v_main_~a~0_11 2) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_2|) (* 4 v_main_~a~0_11)))))} assume !(0 == ~cond); {1346#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_2| Int) (v_main_~a~0_11 Int)) (and (<= v_main_~a~0_11 2) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_2|) (* 4 v_main_~a~0_11)))))} is VALID [2018-11-18 23:01:12,597 INFO L273 TraceCheckUtils]: 33: Hoare triple {1346#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_2| Int) (v_main_~a~0_11 Int)) (and (<= v_main_~a~0_11 2) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_2|) (* 4 v_main_~a~0_11)))))} assume true; {1346#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_2| Int) (v_main_~a~0_11 Int)) (and (<= v_main_~a~0_11 2) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_2|) (* 4 v_main_~a~0_11)))))} is VALID [2018-11-18 23:01:12,598 INFO L268 TraceCheckUtils]: 34: Hoare quadruple {1346#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_2| Int) (v_main_~a~0_11 Int)) (and (<= v_main_~a~0_11 2) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_2|) (* 4 v_main_~a~0_11)))))} {1365#(and (= 0 |main_~#aa~0.offset|) (<= 1 main_~x~0) (exists ((v_main_~a~0_11 Int)) (and (<= v_main_~a~0_11 2) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 v_main_~a~0_11)))) (<= main_~a~0 (+ v_main_~a~0_11 1)))))} #55#return; {1365#(and (= 0 |main_~#aa~0.offset|) (<= 1 main_~x~0) (exists ((v_main_~a~0_11 Int)) (and (<= v_main_~a~0_11 2) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 v_main_~a~0_11)))) (<= main_~a~0 (+ v_main_~a~0_11 1)))))} is VALID [2018-11-18 23:01:12,599 INFO L273 TraceCheckUtils]: 35: Hoare triple {1365#(and (= 0 |main_~#aa~0.offset|) (<= 1 main_~x~0) (exists ((v_main_~a~0_11 Int)) (and (<= v_main_~a~0_11 2) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 v_main_~a~0_11)))) (<= main_~a~0 (+ v_main_~a~0_11 1)))))} havoc #t~mem3; {1365#(and (= 0 |main_~#aa~0.offset|) (<= 1 main_~x~0) (exists ((v_main_~a~0_11 Int)) (and (<= v_main_~a~0_11 2) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 v_main_~a~0_11)))) (<= main_~a~0 (+ v_main_~a~0_11 1)))))} is VALID [2018-11-18 23:01:12,600 INFO L273 TraceCheckUtils]: 36: Hoare triple {1365#(and (= 0 |main_~#aa~0.offset|) (<= 1 main_~x~0) (exists ((v_main_~a~0_11 Int)) (and (<= v_main_~a~0_11 2) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 v_main_~a~0_11)))) (<= main_~a~0 (+ v_main_~a~0_11 1)))))} #t~post2 := ~x~0;~x~0 := 1 + #t~post2;havoc #t~post2; {1393#(and (= 0 |main_~#aa~0.offset|) (<= 2 main_~x~0) (exists ((v_main_~a~0_11 Int)) (and (<= v_main_~a~0_11 2) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 v_main_~a~0_11)))) (<= main_~a~0 (+ v_main_~a~0_11 1)))))} is VALID [2018-11-18 23:01:12,602 INFO L273 TraceCheckUtils]: 37: Hoare triple {1393#(and (= 0 |main_~#aa~0.offset|) (<= 2 main_~x~0) (exists ((v_main_~a~0_11 Int)) (and (<= v_main_~a~0_11 2) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 v_main_~a~0_11)))) (<= main_~a~0 (+ v_main_~a~0_11 1)))))} assume true; {1393#(and (= 0 |main_~#aa~0.offset|) (<= 2 main_~x~0) (exists ((v_main_~a~0_11 Int)) (and (<= v_main_~a~0_11 2) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 v_main_~a~0_11)))) (<= main_~a~0 (+ v_main_~a~0_11 1)))))} is VALID [2018-11-18 23:01:12,603 INFO L273 TraceCheckUtils]: 38: Hoare triple {1393#(and (= 0 |main_~#aa~0.offset|) (<= 2 main_~x~0) (exists ((v_main_~a~0_11 Int)) (and (<= v_main_~a~0_11 2) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 v_main_~a~0_11)))) (<= main_~a~0 (+ v_main_~a~0_11 1)))))} assume !!(~x~0 < ~a~0);call #t~mem3 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~x~0, 4); {1272#(<= 0 |main_#t~mem3|)} is VALID [2018-11-18 23:01:12,604 INFO L256 TraceCheckUtils]: 39: Hoare triple {1272#(<= 0 |main_#t~mem3|)} call __VERIFIER_assert((if #t~mem3 >= 0 then 1 else 0)); {1403#(= |__VERIFIER_assert_#in~cond| 1)} is VALID [2018-11-18 23:01:12,604 INFO L273 TraceCheckUtils]: 40: Hoare triple {1403#(= |__VERIFIER_assert_#in~cond| 1)} ~cond := #in~cond; {1407#(= 1 __VERIFIER_assert_~cond)} is VALID [2018-11-18 23:01:12,605 INFO L273 TraceCheckUtils]: 41: Hoare triple {1407#(= 1 __VERIFIER_assert_~cond)} assume 0 == ~cond; {1261#false} is VALID [2018-11-18 23:01:12,605 INFO L273 TraceCheckUtils]: 42: Hoare triple {1261#false} assume !false; {1261#false} is VALID [2018-11-18 23:01:12,613 INFO L134 CoverageAnalysis]: Checked inductivity of 37 backedges. 2 proven. 31 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2018-11-18 23:01:12,632 INFO L312 seRefinementStrategy]: Constructing automaton from 0 perfect and 2 imperfect interpolant sequences. [2018-11-18 23:01:12,632 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [14, 14] total 25 [2018-11-18 23:01:12,634 INFO L78 Accepts]: Start accepts. Automaton has 25 states. Word has length 43 [2018-11-18 23:01:12,634 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-18 23:01:12,635 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 25 states. [2018-11-18 23:01:12,740 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 77 edges. 77 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-18 23:01:12,740 INFO L459 AbstractCegarLoop]: Interpolant automaton has 25 states [2018-11-18 23:01:12,741 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 25 interpolants. [2018-11-18 23:01:12,741 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=88, Invalid=512, Unknown=0, NotChecked=0, Total=600 [2018-11-18 23:01:12,741 INFO L87 Difference]: Start difference. First operand 55 states and 59 transitions. Second operand 25 states. [2018-11-18 23:01:19,875 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:01:19,876 INFO L93 Difference]: Finished difference Result 98 states and 106 transitions. [2018-11-18 23:01:19,876 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 26 states. [2018-11-18 23:01:19,876 INFO L78 Accepts]: Start accepts. Automaton has 25 states. Word has length 43 [2018-11-18 23:01:19,877 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-18 23:01:19,877 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 25 states. [2018-11-18 23:01:19,881 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 26 states to 26 states and 85 transitions. [2018-11-18 23:01:19,881 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 25 states. [2018-11-18 23:01:19,884 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 26 states to 26 states and 85 transitions. [2018-11-18 23:01:19,884 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 26 states and 85 transitions. [2018-11-18 23:01:20,042 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 85 edges. 85 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-18 23:01:20,045 INFO L225 Difference]: With dead ends: 98 [2018-11-18 23:01:20,045 INFO L226 Difference]: Without dead ends: 49 [2018-11-18 23:01:20,046 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 78 GetRequests, 33 SyntacticMatches, 3 SemanticMatches, 42 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 494 ImplicationChecksByTransitivity, 1.2s TimeCoverageRelationStatistics Valid=272, Invalid=1620, Unknown=0, NotChecked=0, Total=1892 [2018-11-18 23:01:20,047 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 49 states. [2018-11-18 23:01:20,177 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 49 to 49. [2018-11-18 23:01:20,178 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-18 23:01:20,178 INFO L82 GeneralOperation]: Start isEquivalent. First operand 49 states. Second operand 49 states. [2018-11-18 23:01:20,178 INFO L74 IsIncluded]: Start isIncluded. First operand 49 states. Second operand 49 states. [2018-11-18 23:01:20,178 INFO L87 Difference]: Start difference. First operand 49 states. Second operand 49 states. [2018-11-18 23:01:20,180 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:01:20,180 INFO L93 Difference]: Finished difference Result 49 states and 50 transitions. [2018-11-18 23:01:20,181 INFO L276 IsEmpty]: Start isEmpty. Operand 49 states and 50 transitions. [2018-11-18 23:01:20,181 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-18 23:01:20,181 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-18 23:01:20,181 INFO L74 IsIncluded]: Start isIncluded. First operand 49 states. Second operand 49 states. [2018-11-18 23:01:20,182 INFO L87 Difference]: Start difference. First operand 49 states. Second operand 49 states. [2018-11-18 23:01:20,183 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:01:20,184 INFO L93 Difference]: Finished difference Result 49 states and 50 transitions. [2018-11-18 23:01:20,184 INFO L276 IsEmpty]: Start isEmpty. Operand 49 states and 50 transitions. [2018-11-18 23:01:20,184 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-18 23:01:20,184 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-18 23:01:20,185 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-18 23:01:20,185 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-18 23:01:20,185 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 49 states. [2018-11-18 23:01:20,187 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 49 states to 49 states and 50 transitions. [2018-11-18 23:01:20,187 INFO L78 Accepts]: Start accepts. Automaton has 49 states and 50 transitions. Word has length 43 [2018-11-18 23:01:20,187 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-18 23:01:20,187 INFO L480 AbstractCegarLoop]: Abstraction has 49 states and 50 transitions. [2018-11-18 23:01:20,187 INFO L481 AbstractCegarLoop]: Interpolant automaton has 25 states. [2018-11-18 23:01:20,188 INFO L276 IsEmpty]: Start isEmpty. Operand 49 states and 50 transitions. [2018-11-18 23:01:20,188 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2018-11-18 23:01:20,189 INFO L367 BasicCegarLoop]: Found error trace [2018-11-18 23:01:20,189 INFO L375 BasicCegarLoop]: trace histogram [5, 5, 4, 3, 3, 3, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 23:01:20,189 INFO L423 AbstractCegarLoop]: === Iteration 7 === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-18 23:01:20,189 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 23:01:20,189 INFO L82 PathProgramCache]: Analyzing trace with hash 1433361586, now seen corresponding path program 4 times [2018-11-18 23:01:20,190 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 23:01:20,190 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 23:01:20,190 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 23:01:20,191 INFO L101 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2018-11-18 23:01:20,191 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 23:01:20,214 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 23:01:20,553 INFO L256 TraceCheckUtils]: 0: Hoare triple {1750#true} call ULTIMATE.init(); {1750#true} is VALID [2018-11-18 23:01:20,553 INFO L273 TraceCheckUtils]: 1: Hoare triple {1750#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0]; {1750#true} is VALID [2018-11-18 23:01:20,554 INFO L273 TraceCheckUtils]: 2: Hoare triple {1750#true} assume true; {1750#true} is VALID [2018-11-18 23:01:20,554 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {1750#true} {1750#true} #51#return; {1750#true} is VALID [2018-11-18 23:01:20,554 INFO L256 TraceCheckUtils]: 4: Hoare triple {1750#true} call #t~ret4 := main(); {1750#true} is VALID [2018-11-18 23:01:20,555 INFO L273 TraceCheckUtils]: 5: Hoare triple {1750#true} call ~#aa~0.base, ~#aa~0.offset := #Ultimate.alloc(400000);~a~0 := 0; {1752#(= main_~a~0 0)} is VALID [2018-11-18 23:01:20,555 INFO L273 TraceCheckUtils]: 6: Hoare triple {1752#(= main_~a~0 0)} assume true; {1752#(= main_~a~0 0)} is VALID [2018-11-18 23:01:20,556 INFO L273 TraceCheckUtils]: 7: Hoare triple {1752#(= main_~a~0 0)} call #t~mem0 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~a~0, 4); {1752#(= main_~a~0 0)} is VALID [2018-11-18 23:01:20,556 INFO L273 TraceCheckUtils]: 8: Hoare triple {1752#(= main_~a~0 0)} assume !!(#t~mem0 >= 0);havoc #t~mem0;#t~post1 := ~a~0;~a~0 := 1 + #t~post1;havoc #t~post1; {1753#(and (<= 1 main_~a~0) (<= main_~a~0 1))} is VALID [2018-11-18 23:01:20,557 INFO L273 TraceCheckUtils]: 9: Hoare triple {1753#(and (<= 1 main_~a~0) (<= main_~a~0 1))} assume true; {1753#(and (<= 1 main_~a~0) (<= main_~a~0 1))} is VALID [2018-11-18 23:01:20,557 INFO L273 TraceCheckUtils]: 10: Hoare triple {1753#(and (<= 1 main_~a~0) (<= main_~a~0 1))} call #t~mem0 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~a~0, 4); {1753#(and (<= 1 main_~a~0) (<= main_~a~0 1))} is VALID [2018-11-18 23:01:20,558 INFO L273 TraceCheckUtils]: 11: Hoare triple {1753#(and (<= 1 main_~a~0) (<= main_~a~0 1))} assume !!(#t~mem0 >= 0);havoc #t~mem0;#t~post1 := ~a~0;~a~0 := 1 + #t~post1;havoc #t~post1; {1754#(and (<= 2 main_~a~0) (<= main_~a~0 2))} is VALID [2018-11-18 23:01:20,558 INFO L273 TraceCheckUtils]: 12: Hoare triple {1754#(and (<= 2 main_~a~0) (<= main_~a~0 2))} assume true; {1754#(and (<= 2 main_~a~0) (<= main_~a~0 2))} is VALID [2018-11-18 23:01:20,559 INFO L273 TraceCheckUtils]: 13: Hoare triple {1754#(and (<= 2 main_~a~0) (<= main_~a~0 2))} call #t~mem0 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~a~0, 4); {1755#(and (= |main_#t~mem0| (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 main_~a~0) |main_~#aa~0.offset|))) (<= 2 main_~a~0) (<= main_~a~0 2))} is VALID [2018-11-18 23:01:20,560 INFO L273 TraceCheckUtils]: 14: Hoare triple {1755#(and (= |main_#t~mem0| (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 main_~a~0) |main_~#aa~0.offset|))) (<= 2 main_~a~0) (<= main_~a~0 2))} assume !!(#t~mem0 >= 0);havoc #t~mem0;#t~post1 := ~a~0;~a~0 := 1 + #t~post1;havoc #t~post1; {1756#(<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 2))))} is VALID [2018-11-18 23:01:20,561 INFO L273 TraceCheckUtils]: 15: Hoare triple {1756#(<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 2))))} assume true; {1756#(<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 2))))} is VALID [2018-11-18 23:01:20,561 INFO L273 TraceCheckUtils]: 16: Hoare triple {1756#(<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 2))))} call #t~mem0 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~a~0, 4); {1756#(<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 2))))} is VALID [2018-11-18 23:01:20,562 INFO L273 TraceCheckUtils]: 17: Hoare triple {1756#(<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 2))))} assume !!(#t~mem0 >= 0);havoc #t~mem0;#t~post1 := ~a~0;~a~0 := 1 + #t~post1;havoc #t~post1; {1756#(<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 2))))} is VALID [2018-11-18 23:01:20,562 INFO L273 TraceCheckUtils]: 18: Hoare triple {1756#(<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 2))))} assume true; {1756#(<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 2))))} is VALID [2018-11-18 23:01:20,563 INFO L273 TraceCheckUtils]: 19: Hoare triple {1756#(<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 2))))} call #t~mem0 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~a~0, 4); {1756#(<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 2))))} is VALID [2018-11-18 23:01:20,563 INFO L273 TraceCheckUtils]: 20: Hoare triple {1756#(<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 2))))} assume !(#t~mem0 >= 0);havoc #t~mem0; {1756#(<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 2))))} is VALID [2018-11-18 23:01:20,564 INFO L273 TraceCheckUtils]: 21: Hoare triple {1756#(<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 2))))} havoc ~x~0;~x~0 := 0; {1757#(and (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 2)))) (= main_~x~0 0))} is VALID [2018-11-18 23:01:20,565 INFO L273 TraceCheckUtils]: 22: Hoare triple {1757#(and (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 2)))) (= main_~x~0 0))} assume true; {1757#(and (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 2)))) (= main_~x~0 0))} is VALID [2018-11-18 23:01:20,566 INFO L273 TraceCheckUtils]: 23: Hoare triple {1757#(and (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 2)))) (= main_~x~0 0))} assume !!(~x~0 < ~a~0);call #t~mem3 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~x~0, 4); {1757#(and (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 2)))) (= main_~x~0 0))} is VALID [2018-11-18 23:01:20,566 INFO L256 TraceCheckUtils]: 24: Hoare triple {1757#(and (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 2)))) (= main_~x~0 0))} call __VERIFIER_assert((if #t~mem3 >= 0 then 1 else 0)); {1750#true} is VALID [2018-11-18 23:01:20,566 INFO L273 TraceCheckUtils]: 25: Hoare triple {1750#true} ~cond := #in~cond; {1758#(= __VERIFIER_assert_~cond |__VERIFIER_assert_#in~cond|)} is VALID [2018-11-18 23:01:20,567 INFO L273 TraceCheckUtils]: 26: Hoare triple {1758#(= __VERIFIER_assert_~cond |__VERIFIER_assert_#in~cond|)} assume !(0 == ~cond); {1759#(not (= |__VERIFIER_assert_#in~cond| 0))} is VALID [2018-11-18 23:01:20,568 INFO L273 TraceCheckUtils]: 27: Hoare triple {1759#(not (= |__VERIFIER_assert_#in~cond| 0))} assume true; {1759#(not (= |__VERIFIER_assert_#in~cond| 0))} is VALID [2018-11-18 23:01:20,568 INFO L268 TraceCheckUtils]: 28: Hoare quadruple {1759#(not (= |__VERIFIER_assert_#in~cond| 0))} {1757#(and (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 2)))) (= main_~x~0 0))} #55#return; {1757#(and (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 2)))) (= main_~x~0 0))} is VALID [2018-11-18 23:01:20,569 INFO L273 TraceCheckUtils]: 29: Hoare triple {1757#(and (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 2)))) (= main_~x~0 0))} havoc #t~mem3; {1757#(and (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 2)))) (= main_~x~0 0))} is VALID [2018-11-18 23:01:20,570 INFO L273 TraceCheckUtils]: 30: Hoare triple {1757#(and (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 2)))) (= main_~x~0 0))} #t~post2 := ~x~0;~x~0 := 1 + #t~post2;havoc #t~post2; {1760#(<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~x~0 1)))))} is VALID [2018-11-18 23:01:20,571 INFO L273 TraceCheckUtils]: 31: Hoare triple {1760#(<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~x~0 1)))))} assume true; {1760#(<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~x~0 1)))))} is VALID [2018-11-18 23:01:20,571 INFO L273 TraceCheckUtils]: 32: Hoare triple {1760#(<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~x~0 1)))))} assume !!(~x~0 < ~a~0);call #t~mem3 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~x~0, 4); {1760#(<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~x~0 1)))))} is VALID [2018-11-18 23:01:20,572 INFO L256 TraceCheckUtils]: 33: Hoare triple {1760#(<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~x~0 1)))))} call __VERIFIER_assert((if #t~mem3 >= 0 then 1 else 0)); {1750#true} is VALID [2018-11-18 23:01:20,572 INFO L273 TraceCheckUtils]: 34: Hoare triple {1750#true} ~cond := #in~cond; {1750#true} is VALID [2018-11-18 23:01:20,572 INFO L273 TraceCheckUtils]: 35: Hoare triple {1750#true} assume !(0 == ~cond); {1750#true} is VALID [2018-11-18 23:01:20,572 INFO L273 TraceCheckUtils]: 36: Hoare triple {1750#true} assume true; {1750#true} is VALID [2018-11-18 23:01:20,573 INFO L268 TraceCheckUtils]: 37: Hoare quadruple {1750#true} {1760#(<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~x~0 1)))))} #55#return; {1760#(<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~x~0 1)))))} is VALID [2018-11-18 23:01:20,575 INFO L273 TraceCheckUtils]: 38: Hoare triple {1760#(<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~x~0 1)))))} havoc #t~mem3; {1760#(<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~x~0 1)))))} is VALID [2018-11-18 23:01:20,575 INFO L273 TraceCheckUtils]: 39: Hoare triple {1760#(<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~x~0 1)))))} #t~post2 := ~x~0;~x~0 := 1 + #t~post2;havoc #t~post2; {1761#(<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 main_~x~0) |main_~#aa~0.offset|)))} is VALID [2018-11-18 23:01:20,576 INFO L273 TraceCheckUtils]: 40: Hoare triple {1761#(<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 main_~x~0) |main_~#aa~0.offset|)))} assume true; {1761#(<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 main_~x~0) |main_~#aa~0.offset|)))} is VALID [2018-11-18 23:01:20,576 INFO L273 TraceCheckUtils]: 41: Hoare triple {1761#(<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 main_~x~0) |main_~#aa~0.offset|)))} assume !!(~x~0 < ~a~0);call #t~mem3 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~x~0, 4); {1762#(<= 0 |main_#t~mem3|)} is VALID [2018-11-18 23:01:20,577 INFO L256 TraceCheckUtils]: 42: Hoare triple {1762#(<= 0 |main_#t~mem3|)} call __VERIFIER_assert((if #t~mem3 >= 0 then 1 else 0)); {1759#(not (= |__VERIFIER_assert_#in~cond| 0))} is VALID [2018-11-18 23:01:20,577 INFO L273 TraceCheckUtils]: 43: Hoare triple {1759#(not (= |__VERIFIER_assert_#in~cond| 0))} ~cond := #in~cond; {1763#(not (= __VERIFIER_assert_~cond 0))} is VALID [2018-11-18 23:01:20,578 INFO L273 TraceCheckUtils]: 44: Hoare triple {1763#(not (= __VERIFIER_assert_~cond 0))} assume 0 == ~cond; {1751#false} is VALID [2018-11-18 23:01:20,578 INFO L273 TraceCheckUtils]: 45: Hoare triple {1751#false} assume !false; {1751#false} is VALID [2018-11-18 23:01:20,582 INFO L134 CoverageAnalysis]: Checked inductivity of 49 backedges. 3 proven. 42 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2018-11-18 23:01:20,582 INFO L300 seRefinementStrategy]: The current sequences of interpolants are not accepted, trying to find more. [2018-11-18 23:01:20,582 INFO L223 ckRefinementStrategy]: Switched to mode Z3_FP No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 Starting monitored process 6 with z3 -smt2 -in SMTLIB2_COMPLIANT=true -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 6 with z3 -smt2 -in SMTLIB2_COMPLIANT=true -t:12000 [2018-11-18 23:01:20,596 INFO L103 rtionOrderModulation]: Keeping assertion order TERMS_WITH_SMALL_CONSTANTS_FIRST [2018-11-18 23:01:20,637 INFO L249 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2018-11-18 23:01:20,637 INFO L250 tOrderPrioritization]: Conjunction of SSA is unsat [2018-11-18 23:01:20,648 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 23:01:20,651 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-18 23:01:29,105 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 21 treesize of output 17 [2018-11-18 23:01:29,109 INFO L682 Elim1Store]: detected equality via solver [2018-11-18 23:01:29,111 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 16 [2018-11-18 23:01:29,120 INFO L267 ElimStorePlain]: Start of recursive call 3: End of recursive call: and 1 xjuncts. [2018-11-18 23:01:29,123 INFO L267 ElimStorePlain]: Start of recursive call 2: 1 dim-1 vars, End of recursive call: and 1 xjuncts. [2018-11-18 23:01:29,124 INFO L267 ElimStorePlain]: Start of recursive call 1: 2 dim-0 vars, 1 dim-2 vars, End of recursive call: and 1 xjuncts. [2018-11-18 23:01:29,125 INFO L202 ElimStorePlain]: Needed 3 recursive calls to eliminate 3 variables, input treesize:21, output treesize:3 [2018-11-18 23:01:29,127 WARN L383 uantifierElimination]: Trying to double check SDD result, but SMT solver's response was UNKNOWN. [2018-11-18 23:01:29,163 INFO L256 TraceCheckUtils]: 0: Hoare triple {1750#true} call ULTIMATE.init(); {1750#true} is VALID [2018-11-18 23:01:29,164 INFO L273 TraceCheckUtils]: 1: Hoare triple {1750#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0]; {1750#true} is VALID [2018-11-18 23:01:29,164 INFO L273 TraceCheckUtils]: 2: Hoare triple {1750#true} assume true; {1750#true} is VALID [2018-11-18 23:01:29,164 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {1750#true} {1750#true} #51#return; {1750#true} is VALID [2018-11-18 23:01:29,164 INFO L256 TraceCheckUtils]: 4: Hoare triple {1750#true} call #t~ret4 := main(); {1750#true} is VALID [2018-11-18 23:01:29,166 INFO L273 TraceCheckUtils]: 5: Hoare triple {1750#true} call ~#aa~0.base, ~#aa~0.offset := #Ultimate.alloc(400000);~a~0 := 0; {1752#(= main_~a~0 0)} is VALID [2018-11-18 23:01:29,166 INFO L273 TraceCheckUtils]: 6: Hoare triple {1752#(= main_~a~0 0)} assume true; {1752#(= main_~a~0 0)} is VALID [2018-11-18 23:01:29,167 INFO L273 TraceCheckUtils]: 7: Hoare triple {1752#(= main_~a~0 0)} call #t~mem0 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~a~0, 4); {1752#(= main_~a~0 0)} is VALID [2018-11-18 23:01:29,167 INFO L273 TraceCheckUtils]: 8: Hoare triple {1752#(= main_~a~0 0)} assume !!(#t~mem0 >= 0);havoc #t~mem0;#t~post1 := ~a~0;~a~0 := 1 + #t~post1;havoc #t~post1; {1753#(and (<= 1 main_~a~0) (<= main_~a~0 1))} is VALID [2018-11-18 23:01:29,168 INFO L273 TraceCheckUtils]: 9: Hoare triple {1753#(and (<= 1 main_~a~0) (<= main_~a~0 1))} assume true; {1753#(and (<= 1 main_~a~0) (<= main_~a~0 1))} is VALID [2018-11-18 23:01:29,168 INFO L273 TraceCheckUtils]: 10: Hoare triple {1753#(and (<= 1 main_~a~0) (<= main_~a~0 1))} call #t~mem0 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~a~0, 4); {1753#(and (<= 1 main_~a~0) (<= main_~a~0 1))} is VALID [2018-11-18 23:01:29,169 INFO L273 TraceCheckUtils]: 11: Hoare triple {1753#(and (<= 1 main_~a~0) (<= main_~a~0 1))} assume !!(#t~mem0 >= 0);havoc #t~mem0;#t~post1 := ~a~0;~a~0 := 1 + #t~post1;havoc #t~post1; {1754#(and (<= 2 main_~a~0) (<= main_~a~0 2))} is VALID [2018-11-18 23:01:29,169 INFO L273 TraceCheckUtils]: 12: Hoare triple {1754#(and (<= 2 main_~a~0) (<= main_~a~0 2))} assume true; {1754#(and (<= 2 main_~a~0) (<= main_~a~0 2))} is VALID [2018-11-18 23:01:29,170 INFO L273 TraceCheckUtils]: 13: Hoare triple {1754#(and (<= 2 main_~a~0) (<= main_~a~0 2))} call #t~mem0 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~a~0, 4); {1806#(exists ((main_~a~0 Int)) (and (<= |main_#t~mem0| (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 main_~a~0)))) (<= 2 main_~a~0) (<= main_~a~0 2)))} is VALID [2018-11-18 23:01:29,171 INFO L273 TraceCheckUtils]: 14: Hoare triple {1806#(exists ((main_~a~0 Int)) (and (<= |main_#t~mem0| (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 main_~a~0)))) (<= 2 main_~a~0) (<= main_~a~0 2)))} assume !!(#t~mem0 >= 0);havoc #t~mem0;#t~post1 := ~a~0;~a~0 := 1 + #t~post1;havoc #t~post1; {1756#(<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 2))))} is VALID [2018-11-18 23:01:29,172 INFO L273 TraceCheckUtils]: 15: Hoare triple {1756#(<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 2))))} assume true; {1756#(<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 2))))} is VALID [2018-11-18 23:01:29,172 INFO L273 TraceCheckUtils]: 16: Hoare triple {1756#(<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 2))))} call #t~mem0 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~a~0, 4); {1756#(<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 2))))} is VALID [2018-11-18 23:01:29,173 INFO L273 TraceCheckUtils]: 17: Hoare triple {1756#(<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 2))))} assume !!(#t~mem0 >= 0);havoc #t~mem0;#t~post1 := ~a~0;~a~0 := 1 + #t~post1;havoc #t~post1; {1756#(<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 2))))} is VALID [2018-11-18 23:01:29,173 INFO L273 TraceCheckUtils]: 18: Hoare triple {1756#(<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 2))))} assume true; {1756#(<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 2))))} is VALID [2018-11-18 23:01:29,174 INFO L273 TraceCheckUtils]: 19: Hoare triple {1756#(<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 2))))} call #t~mem0 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~a~0, 4); {1756#(<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 2))))} is VALID [2018-11-18 23:01:29,174 INFO L273 TraceCheckUtils]: 20: Hoare triple {1756#(<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 2))))} assume !(#t~mem0 >= 0);havoc #t~mem0; {1756#(<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 2))))} is VALID [2018-11-18 23:01:29,175 INFO L273 TraceCheckUtils]: 21: Hoare triple {1756#(<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 2))))} havoc ~x~0;~x~0 := 0; {1757#(and (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 2)))) (= main_~x~0 0))} is VALID [2018-11-18 23:01:29,176 INFO L273 TraceCheckUtils]: 22: Hoare triple {1757#(and (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 2)))) (= main_~x~0 0))} assume true; {1757#(and (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 2)))) (= main_~x~0 0))} is VALID [2018-11-18 23:01:29,177 INFO L273 TraceCheckUtils]: 23: Hoare triple {1757#(and (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 2)))) (= main_~x~0 0))} assume !!(~x~0 < ~a~0);call #t~mem3 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~x~0, 4); {1757#(and (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 2)))) (= main_~x~0 0))} is VALID [2018-11-18 23:01:29,178 INFO L256 TraceCheckUtils]: 24: Hoare triple {1757#(and (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 2)))) (= main_~x~0 0))} call __VERIFIER_assert((if #t~mem3 >= 0 then 1 else 0)); {1840#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_4| Int) (|v_main_~#aa~0.offset_BEFORE_CALL_4| Int)) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_4|) (+ |v_main_~#aa~0.offset_BEFORE_CALL_4| 8))))} is VALID [2018-11-18 23:01:29,179 INFO L273 TraceCheckUtils]: 25: Hoare triple {1840#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_4| Int) (|v_main_~#aa~0.offset_BEFORE_CALL_4| Int)) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_4|) (+ |v_main_~#aa~0.offset_BEFORE_CALL_4| 8))))} ~cond := #in~cond; {1840#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_4| Int) (|v_main_~#aa~0.offset_BEFORE_CALL_4| Int)) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_4|) (+ |v_main_~#aa~0.offset_BEFORE_CALL_4| 8))))} is VALID [2018-11-18 23:01:29,179 INFO L273 TraceCheckUtils]: 26: Hoare triple {1840#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_4| Int) (|v_main_~#aa~0.offset_BEFORE_CALL_4| Int)) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_4|) (+ |v_main_~#aa~0.offset_BEFORE_CALL_4| 8))))} assume !(0 == ~cond); {1840#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_4| Int) (|v_main_~#aa~0.offset_BEFORE_CALL_4| Int)) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_4|) (+ |v_main_~#aa~0.offset_BEFORE_CALL_4| 8))))} is VALID [2018-11-18 23:01:29,180 INFO L273 TraceCheckUtils]: 27: Hoare triple {1840#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_4| Int) (|v_main_~#aa~0.offset_BEFORE_CALL_4| Int)) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_4|) (+ |v_main_~#aa~0.offset_BEFORE_CALL_4| 8))))} assume true; {1840#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_4| Int) (|v_main_~#aa~0.offset_BEFORE_CALL_4| Int)) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_4|) (+ |v_main_~#aa~0.offset_BEFORE_CALL_4| 8))))} is VALID [2018-11-18 23:01:29,181 INFO L268 TraceCheckUtils]: 28: Hoare quadruple {1840#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_4| Int) (|v_main_~#aa~0.offset_BEFORE_CALL_4| Int)) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_4|) (+ |v_main_~#aa~0.offset_BEFORE_CALL_4| 8))))} {1757#(and (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 2)))) (= main_~x~0 0))} #55#return; {1757#(and (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 2)))) (= main_~x~0 0))} is VALID [2018-11-18 23:01:29,183 INFO L273 TraceCheckUtils]: 29: Hoare triple {1757#(and (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 2)))) (= main_~x~0 0))} havoc #t~mem3; {1757#(and (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 2)))) (= main_~x~0 0))} is VALID [2018-11-18 23:01:29,183 INFO L273 TraceCheckUtils]: 30: Hoare triple {1757#(and (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 2)))) (= main_~x~0 0))} #t~post2 := ~x~0;~x~0 := 1 + #t~post2;havoc #t~post2; {1859#(and (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 2)))) (= main_~x~0 1))} is VALID [2018-11-18 23:01:29,184 INFO L273 TraceCheckUtils]: 31: Hoare triple {1859#(and (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 2)))) (= main_~x~0 1))} assume true; {1859#(and (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 2)))) (= main_~x~0 1))} is VALID [2018-11-18 23:01:29,184 INFO L273 TraceCheckUtils]: 32: Hoare triple {1859#(and (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 2)))) (= main_~x~0 1))} assume !!(~x~0 < ~a~0);call #t~mem3 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~x~0, 4); {1859#(and (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 2)))) (= main_~x~0 1))} is VALID [2018-11-18 23:01:29,185 INFO L256 TraceCheckUtils]: 33: Hoare triple {1859#(and (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 2)))) (= main_~x~0 1))} call __VERIFIER_assert((if #t~mem3 >= 0 then 1 else 0)); {1840#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_4| Int) (|v_main_~#aa~0.offset_BEFORE_CALL_4| Int)) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_4|) (+ |v_main_~#aa~0.offset_BEFORE_CALL_4| 8))))} is VALID [2018-11-18 23:01:29,186 INFO L273 TraceCheckUtils]: 34: Hoare triple {1840#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_4| Int) (|v_main_~#aa~0.offset_BEFORE_CALL_4| Int)) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_4|) (+ |v_main_~#aa~0.offset_BEFORE_CALL_4| 8))))} ~cond := #in~cond; {1840#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_4| Int) (|v_main_~#aa~0.offset_BEFORE_CALL_4| Int)) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_4|) (+ |v_main_~#aa~0.offset_BEFORE_CALL_4| 8))))} is VALID [2018-11-18 23:01:29,186 INFO L273 TraceCheckUtils]: 35: Hoare triple {1840#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_4| Int) (|v_main_~#aa~0.offset_BEFORE_CALL_4| Int)) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_4|) (+ |v_main_~#aa~0.offset_BEFORE_CALL_4| 8))))} assume !(0 == ~cond); {1840#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_4| Int) (|v_main_~#aa~0.offset_BEFORE_CALL_4| Int)) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_4|) (+ |v_main_~#aa~0.offset_BEFORE_CALL_4| 8))))} is VALID [2018-11-18 23:01:29,186 INFO L273 TraceCheckUtils]: 36: Hoare triple {1840#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_4| Int) (|v_main_~#aa~0.offset_BEFORE_CALL_4| Int)) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_4|) (+ |v_main_~#aa~0.offset_BEFORE_CALL_4| 8))))} assume true; {1840#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_4| Int) (|v_main_~#aa~0.offset_BEFORE_CALL_4| Int)) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_4|) (+ |v_main_~#aa~0.offset_BEFORE_CALL_4| 8))))} is VALID [2018-11-18 23:01:29,190 INFO L268 TraceCheckUtils]: 37: Hoare quadruple {1840#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_4| Int) (|v_main_~#aa~0.offset_BEFORE_CALL_4| Int)) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_4|) (+ |v_main_~#aa~0.offset_BEFORE_CALL_4| 8))))} {1859#(and (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 2)))) (= main_~x~0 1))} #55#return; {1859#(and (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 2)))) (= main_~x~0 1))} is VALID [2018-11-18 23:01:29,193 INFO L273 TraceCheckUtils]: 38: Hoare triple {1859#(and (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 2)))) (= main_~x~0 1))} havoc #t~mem3; {1859#(and (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 2)))) (= main_~x~0 1))} is VALID [2018-11-18 23:01:29,193 INFO L273 TraceCheckUtils]: 39: Hoare triple {1859#(and (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 2)))) (= main_~x~0 1))} #t~post2 := ~x~0;~x~0 := 1 + #t~post2;havoc #t~post2; {1887#(and (= main_~x~0 2) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 2)))))} is VALID [2018-11-18 23:01:29,194 INFO L273 TraceCheckUtils]: 40: Hoare triple {1887#(and (= main_~x~0 2) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 2)))))} assume true; {1887#(and (= main_~x~0 2) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 2)))))} is VALID [2018-11-18 23:01:29,194 INFO L273 TraceCheckUtils]: 41: Hoare triple {1887#(and (= main_~x~0 2) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 2)))))} assume !!(~x~0 < ~a~0);call #t~mem3 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~x~0, 4); {1762#(<= 0 |main_#t~mem3|)} is VALID [2018-11-18 23:01:29,195 INFO L256 TraceCheckUtils]: 42: Hoare triple {1762#(<= 0 |main_#t~mem3|)} call __VERIFIER_assert((if #t~mem3 >= 0 then 1 else 0)); {1897#(= |__VERIFIER_assert_#in~cond| 1)} is VALID [2018-11-18 23:01:29,212 INFO L273 TraceCheckUtils]: 43: Hoare triple {1897#(= |__VERIFIER_assert_#in~cond| 1)} ~cond := #in~cond; {1901#(= 1 __VERIFIER_assert_~cond)} is VALID [2018-11-18 23:01:29,220 INFO L273 TraceCheckUtils]: 44: Hoare triple {1901#(= 1 __VERIFIER_assert_~cond)} assume 0 == ~cond; {1751#false} is VALID [2018-11-18 23:01:29,220 INFO L273 TraceCheckUtils]: 45: Hoare triple {1751#false} assume !false; {1751#false} is VALID [2018-11-18 23:01:29,224 INFO L134 CoverageAnalysis]: Checked inductivity of 49 backedges. 0 proven. 42 refuted. 0 times theorem prover too weak. 7 trivial. 0 not checked. [2018-11-18 23:01:29,244 INFO L312 seRefinementStrategy]: Constructing automaton from 0 perfect and 2 imperfect interpolant sequences. [2018-11-18 23:01:29,244 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [14, 14] total 20 [2018-11-18 23:01:29,245 INFO L78 Accepts]: Start accepts. Automaton has 20 states. Word has length 46 [2018-11-18 23:01:29,245 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-18 23:01:29,245 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 20 states. [2018-11-18 23:01:29,306 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 63 edges. 63 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-18 23:01:29,307 INFO L459 AbstractCegarLoop]: Interpolant automaton has 20 states [2018-11-18 23:01:29,307 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 20 interpolants. [2018-11-18 23:01:29,307 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=50, Invalid=328, Unknown=2, NotChecked=0, Total=380 [2018-11-18 23:01:29,308 INFO L87 Difference]: Start difference. First operand 49 states and 50 transitions. Second operand 20 states. [2018-11-18 23:01:38,967 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:01:38,967 INFO L93 Difference]: Finished difference Result 62 states and 63 transitions. [2018-11-18 23:01:38,967 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 19 states. [2018-11-18 23:01:38,967 INFO L78 Accepts]: Start accepts. Automaton has 20 states. Word has length 46 [2018-11-18 23:01:38,968 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-18 23:01:38,968 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 20 states. [2018-11-18 23:01:38,970 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 19 states to 19 states and 54 transitions. [2018-11-18 23:01:38,970 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 20 states. [2018-11-18 23:01:38,972 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 19 states to 19 states and 54 transitions. [2018-11-18 23:01:38,972 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 19 states and 54 transitions. [2018-11-18 23:01:39,038 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 54 edges. 54 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-18 23:01:39,040 INFO L225 Difference]: With dead ends: 62 [2018-11-18 23:01:39,041 INFO L226 Difference]: Without dead ends: 60 [2018-11-18 23:01:39,041 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 70 GetRequests, 39 SyntacticMatches, 5 SemanticMatches, 26 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 120 ImplicationChecksByTransitivity, 8.5s TimeCoverageRelationStatistics Valid=105, Invalid=649, Unknown=2, NotChecked=0, Total=756 [2018-11-18 23:01:39,042 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 60 states. [2018-11-18 23:01:39,220 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 60 to 58. [2018-11-18 23:01:39,220 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-18 23:01:39,221 INFO L82 GeneralOperation]: Start isEquivalent. First operand 60 states. Second operand 58 states. [2018-11-18 23:01:39,221 INFO L74 IsIncluded]: Start isIncluded. First operand 60 states. Second operand 58 states. [2018-11-18 23:01:39,221 INFO L87 Difference]: Start difference. First operand 60 states. Second operand 58 states. [2018-11-18 23:01:39,224 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:01:39,224 INFO L93 Difference]: Finished difference Result 60 states and 61 transitions. [2018-11-18 23:01:39,224 INFO L276 IsEmpty]: Start isEmpty. Operand 60 states and 61 transitions. [2018-11-18 23:01:39,225 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-18 23:01:39,225 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-18 23:01:39,225 INFO L74 IsIncluded]: Start isIncluded. First operand 58 states. Second operand 60 states. [2018-11-18 23:01:39,225 INFO L87 Difference]: Start difference. First operand 58 states. Second operand 60 states. [2018-11-18 23:01:39,227 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:01:39,227 INFO L93 Difference]: Finished difference Result 60 states and 61 transitions. [2018-11-18 23:01:39,228 INFO L276 IsEmpty]: Start isEmpty. Operand 60 states and 61 transitions. [2018-11-18 23:01:39,228 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-18 23:01:39,228 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-18 23:01:39,228 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-18 23:01:39,228 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-18 23:01:39,228 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 58 states. [2018-11-18 23:01:39,230 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 58 states to 58 states and 59 transitions. [2018-11-18 23:01:39,231 INFO L78 Accepts]: Start accepts. Automaton has 58 states and 59 transitions. Word has length 46 [2018-11-18 23:01:39,231 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-18 23:01:39,231 INFO L480 AbstractCegarLoop]: Abstraction has 58 states and 59 transitions. [2018-11-18 23:01:39,231 INFO L481 AbstractCegarLoop]: Interpolant automaton has 20 states. [2018-11-18 23:01:39,231 INFO L276 IsEmpty]: Start isEmpty. Operand 58 states and 59 transitions. [2018-11-18 23:01:39,232 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2018-11-18 23:01:39,233 INFO L367 BasicCegarLoop]: Found error trace [2018-11-18 23:01:39,233 INFO L375 BasicCegarLoop]: trace histogram [5, 5, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 23:01:39,233 INFO L423 AbstractCegarLoop]: === Iteration 8 === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-18 23:01:39,233 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 23:01:39,233 INFO L82 PathProgramCache]: Analyzing trace with hash -1336179009, now seen corresponding path program 5 times [2018-11-18 23:01:39,233 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 23:01:39,233 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 23:01:39,234 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 23:01:39,234 INFO L101 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2018-11-18 23:01:39,234 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 23:01:39,266 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 23:01:39,658 INFO L256 TraceCheckUtils]: 0: Hoare triple {2206#true} call ULTIMATE.init(); {2206#true} is VALID [2018-11-18 23:01:39,658 INFO L273 TraceCheckUtils]: 1: Hoare triple {2206#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0]; {2206#true} is VALID [2018-11-18 23:01:39,659 INFO L273 TraceCheckUtils]: 2: Hoare triple {2206#true} assume true; {2206#true} is VALID [2018-11-18 23:01:39,659 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {2206#true} {2206#true} #51#return; {2206#true} is VALID [2018-11-18 23:01:39,659 INFO L256 TraceCheckUtils]: 4: Hoare triple {2206#true} call #t~ret4 := main(); {2206#true} is VALID [2018-11-18 23:01:39,660 INFO L273 TraceCheckUtils]: 5: Hoare triple {2206#true} call ~#aa~0.base, ~#aa~0.offset := #Ultimate.alloc(400000);~a~0 := 0; {2208#(= main_~a~0 0)} is VALID [2018-11-18 23:01:39,660 INFO L273 TraceCheckUtils]: 6: Hoare triple {2208#(= main_~a~0 0)} assume true; {2208#(= main_~a~0 0)} is VALID [2018-11-18 23:01:39,661 INFO L273 TraceCheckUtils]: 7: Hoare triple {2208#(= main_~a~0 0)} call #t~mem0 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~a~0, 4); {2208#(= main_~a~0 0)} is VALID [2018-11-18 23:01:39,661 INFO L273 TraceCheckUtils]: 8: Hoare triple {2208#(= main_~a~0 0)} assume !!(#t~mem0 >= 0);havoc #t~mem0;#t~post1 := ~a~0;~a~0 := 1 + #t~post1;havoc #t~post1; {2209#(<= main_~a~0 1)} is VALID [2018-11-18 23:01:39,662 INFO L273 TraceCheckUtils]: 9: Hoare triple {2209#(<= main_~a~0 1)} assume true; {2209#(<= main_~a~0 1)} is VALID [2018-11-18 23:01:39,662 INFO L273 TraceCheckUtils]: 10: Hoare triple {2209#(<= main_~a~0 1)} call #t~mem0 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~a~0, 4); {2209#(<= main_~a~0 1)} is VALID [2018-11-18 23:01:39,663 INFO L273 TraceCheckUtils]: 11: Hoare triple {2209#(<= main_~a~0 1)} assume !!(#t~mem0 >= 0);havoc #t~mem0;#t~post1 := ~a~0;~a~0 := 1 + #t~post1;havoc #t~post1; {2210#(<= main_~a~0 2)} is VALID [2018-11-18 23:01:39,663 INFO L273 TraceCheckUtils]: 12: Hoare triple {2210#(<= main_~a~0 2)} assume true; {2210#(<= main_~a~0 2)} is VALID [2018-11-18 23:01:39,663 INFO L273 TraceCheckUtils]: 13: Hoare triple {2210#(<= main_~a~0 2)} call #t~mem0 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~a~0, 4); {2210#(<= main_~a~0 2)} is VALID [2018-11-18 23:01:39,664 INFO L273 TraceCheckUtils]: 14: Hoare triple {2210#(<= main_~a~0 2)} assume !!(#t~mem0 >= 0);havoc #t~mem0;#t~post1 := ~a~0;~a~0 := 1 + #t~post1;havoc #t~post1; {2211#(<= main_~a~0 3)} is VALID [2018-11-18 23:01:39,664 INFO L273 TraceCheckUtils]: 15: Hoare triple {2211#(<= main_~a~0 3)} assume true; {2211#(<= main_~a~0 3)} is VALID [2018-11-18 23:01:39,666 INFO L273 TraceCheckUtils]: 16: Hoare triple {2211#(<= main_~a~0 3)} call #t~mem0 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~a~0, 4); {2212#(and (<= main_~a~0 3) (= |main_#t~mem0| (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 main_~a~0) |main_~#aa~0.offset|))))} is VALID [2018-11-18 23:01:39,667 INFO L273 TraceCheckUtils]: 17: Hoare triple {2212#(and (<= main_~a~0 3) (= |main_#t~mem0| (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 main_~a~0) |main_~#aa~0.offset|))))} assume !!(#t~mem0 >= 0);havoc #t~mem0;#t~post1 := ~a~0;~a~0 := 1 + #t~post1;havoc #t~post1; {2213#(and (<= main_~a~0 4) (or (<= main_~a~0 3) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~a~0 (- 1))))))))} is VALID [2018-11-18 23:01:39,668 INFO L273 TraceCheckUtils]: 18: Hoare triple {2213#(and (<= main_~a~0 4) (or (<= main_~a~0 3) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~a~0 (- 1))))))))} assume true; {2213#(and (<= main_~a~0 4) (or (<= main_~a~0 3) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~a~0 (- 1))))))))} is VALID [2018-11-18 23:01:39,668 INFO L273 TraceCheckUtils]: 19: Hoare triple {2213#(and (<= main_~a~0 4) (or (<= main_~a~0 3) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~a~0 (- 1))))))))} call #t~mem0 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~a~0, 4); {2213#(and (<= main_~a~0 4) (or (<= main_~a~0 3) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~a~0 (- 1))))))))} is VALID [2018-11-18 23:01:39,671 INFO L273 TraceCheckUtils]: 20: Hoare triple {2213#(and (<= main_~a~0 4) (or (<= main_~a~0 3) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~a~0 (- 1))))))))} assume !(#t~mem0 >= 0);havoc #t~mem0; {2213#(and (<= main_~a~0 4) (or (<= main_~a~0 3) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~a~0 (- 1))))))))} is VALID [2018-11-18 23:01:39,671 INFO L273 TraceCheckUtils]: 21: Hoare triple {2213#(and (<= main_~a~0 4) (or (<= main_~a~0 3) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~a~0 (- 1))))))))} havoc ~x~0;~x~0 := 0; {2214#(and (= main_~x~0 0) (<= main_~a~0 4) (or (<= main_~a~0 3) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~a~0 (- 1))))))))} is VALID [2018-11-18 23:01:39,672 INFO L273 TraceCheckUtils]: 22: Hoare triple {2214#(and (= main_~x~0 0) (<= main_~a~0 4) (or (<= main_~a~0 3) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~a~0 (- 1))))))))} assume true; {2214#(and (= main_~x~0 0) (<= main_~a~0 4) (or (<= main_~a~0 3) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~a~0 (- 1))))))))} is VALID [2018-11-18 23:01:39,672 INFO L273 TraceCheckUtils]: 23: Hoare triple {2214#(and (= main_~x~0 0) (<= main_~a~0 4) (or (<= main_~a~0 3) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~a~0 (- 1))))))))} assume !!(~x~0 < ~a~0);call #t~mem3 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~x~0, 4); {2214#(and (= main_~x~0 0) (<= main_~a~0 4) (or (<= main_~a~0 3) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~a~0 (- 1))))))))} is VALID [2018-11-18 23:01:39,673 INFO L256 TraceCheckUtils]: 24: Hoare triple {2214#(and (= main_~x~0 0) (<= main_~a~0 4) (or (<= main_~a~0 3) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~a~0 (- 1))))))))} call __VERIFIER_assert((if #t~mem3 >= 0 then 1 else 0)); {2206#true} is VALID [2018-11-18 23:01:39,673 INFO L273 TraceCheckUtils]: 25: Hoare triple {2206#true} ~cond := #in~cond; {2215#(= __VERIFIER_assert_~cond |__VERIFIER_assert_#in~cond|)} is VALID [2018-11-18 23:01:39,673 INFO L273 TraceCheckUtils]: 26: Hoare triple {2215#(= __VERIFIER_assert_~cond |__VERIFIER_assert_#in~cond|)} assume !(0 == ~cond); {2216#(not (= |__VERIFIER_assert_#in~cond| 0))} is VALID [2018-11-18 23:01:39,674 INFO L273 TraceCheckUtils]: 27: Hoare triple {2216#(not (= |__VERIFIER_assert_#in~cond| 0))} assume true; {2216#(not (= |__VERIFIER_assert_#in~cond| 0))} is VALID [2018-11-18 23:01:39,674 INFO L268 TraceCheckUtils]: 28: Hoare quadruple {2216#(not (= |__VERIFIER_assert_#in~cond| 0))} {2214#(and (= main_~x~0 0) (<= main_~a~0 4) (or (<= main_~a~0 3) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~a~0 (- 1))))))))} #55#return; {2214#(and (= main_~x~0 0) (<= main_~a~0 4) (or (<= main_~a~0 3) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~a~0 (- 1))))))))} is VALID [2018-11-18 23:01:39,675 INFO L273 TraceCheckUtils]: 29: Hoare triple {2214#(and (= main_~x~0 0) (<= main_~a~0 4) (or (<= main_~a~0 3) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~a~0 (- 1))))))))} havoc #t~mem3; {2214#(and (= main_~x~0 0) (<= main_~a~0 4) (or (<= main_~a~0 3) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~a~0 (- 1))))))))} is VALID [2018-11-18 23:01:39,676 INFO L273 TraceCheckUtils]: 30: Hoare triple {2214#(and (= main_~x~0 0) (<= main_~a~0 4) (or (<= main_~a~0 3) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~a~0 (- 1))))))))} #t~post2 := ~x~0;~x~0 := 1 + #t~post2;havoc #t~post2; {2217#(and (<= main_~a~0 (+ main_~x~0 3)) (or (<= main_~a~0 (+ main_~x~0 2)) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~a~0 (- 1))))))))} is VALID [2018-11-18 23:01:39,676 INFO L273 TraceCheckUtils]: 31: Hoare triple {2217#(and (<= main_~a~0 (+ main_~x~0 3)) (or (<= main_~a~0 (+ main_~x~0 2)) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~a~0 (- 1))))))))} assume true; {2217#(and (<= main_~a~0 (+ main_~x~0 3)) (or (<= main_~a~0 (+ main_~x~0 2)) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~a~0 (- 1))))))))} is VALID [2018-11-18 23:01:39,677 INFO L273 TraceCheckUtils]: 32: Hoare triple {2217#(and (<= main_~a~0 (+ main_~x~0 3)) (or (<= main_~a~0 (+ main_~x~0 2)) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~a~0 (- 1))))))))} assume !!(~x~0 < ~a~0);call #t~mem3 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~x~0, 4); {2217#(and (<= main_~a~0 (+ main_~x~0 3)) (or (<= main_~a~0 (+ main_~x~0 2)) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~a~0 (- 1))))))))} is VALID [2018-11-18 23:01:39,678 INFO L256 TraceCheckUtils]: 33: Hoare triple {2217#(and (<= main_~a~0 (+ main_~x~0 3)) (or (<= main_~a~0 (+ main_~x~0 2)) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~a~0 (- 1))))))))} call __VERIFIER_assert((if #t~mem3 >= 0 then 1 else 0)); {2206#true} is VALID [2018-11-18 23:01:39,678 INFO L273 TraceCheckUtils]: 34: Hoare triple {2206#true} ~cond := #in~cond; {2206#true} is VALID [2018-11-18 23:01:39,678 INFO L273 TraceCheckUtils]: 35: Hoare triple {2206#true} assume !(0 == ~cond); {2206#true} is VALID [2018-11-18 23:01:39,678 INFO L273 TraceCheckUtils]: 36: Hoare triple {2206#true} assume true; {2206#true} is VALID [2018-11-18 23:01:39,679 INFO L268 TraceCheckUtils]: 37: Hoare quadruple {2206#true} {2217#(and (<= main_~a~0 (+ main_~x~0 3)) (or (<= main_~a~0 (+ main_~x~0 2)) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~a~0 (- 1))))))))} #55#return; {2217#(and (<= main_~a~0 (+ main_~x~0 3)) (or (<= main_~a~0 (+ main_~x~0 2)) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~a~0 (- 1))))))))} is VALID [2018-11-18 23:01:39,680 INFO L273 TraceCheckUtils]: 38: Hoare triple {2217#(and (<= main_~a~0 (+ main_~x~0 3)) (or (<= main_~a~0 (+ main_~x~0 2)) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~a~0 (- 1))))))))} havoc #t~mem3; {2217#(and (<= main_~a~0 (+ main_~x~0 3)) (or (<= main_~a~0 (+ main_~x~0 2)) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~a~0 (- 1))))))))} is VALID [2018-11-18 23:01:39,681 INFO L273 TraceCheckUtils]: 39: Hoare triple {2217#(and (<= main_~a~0 (+ main_~x~0 3)) (or (<= main_~a~0 (+ main_~x~0 2)) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~a~0 (- 1))))))))} #t~post2 := ~x~0;~x~0 := 1 + #t~post2;havoc #t~post2; {2218#(and (<= main_~a~0 (+ main_~x~0 2)) (or (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~a~0 (- 1)))))) (<= main_~a~0 (+ main_~x~0 1))))} is VALID [2018-11-18 23:01:39,682 INFO L273 TraceCheckUtils]: 40: Hoare triple {2218#(and (<= main_~a~0 (+ main_~x~0 2)) (or (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~a~0 (- 1)))))) (<= main_~a~0 (+ main_~x~0 1))))} assume true; {2218#(and (<= main_~a~0 (+ main_~x~0 2)) (or (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~a~0 (- 1)))))) (<= main_~a~0 (+ main_~x~0 1))))} is VALID [2018-11-18 23:01:39,683 INFO L273 TraceCheckUtils]: 41: Hoare triple {2218#(and (<= main_~a~0 (+ main_~x~0 2)) (or (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~a~0 (- 1)))))) (<= main_~a~0 (+ main_~x~0 1))))} assume !!(~x~0 < ~a~0);call #t~mem3 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~x~0, 4); {2218#(and (<= main_~a~0 (+ main_~x~0 2)) (or (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~a~0 (- 1)))))) (<= main_~a~0 (+ main_~x~0 1))))} is VALID [2018-11-18 23:01:39,683 INFO L256 TraceCheckUtils]: 42: Hoare triple {2218#(and (<= main_~a~0 (+ main_~x~0 2)) (or (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~a~0 (- 1)))))) (<= main_~a~0 (+ main_~x~0 1))))} call __VERIFIER_assert((if #t~mem3 >= 0 then 1 else 0)); {2206#true} is VALID [2018-11-18 23:01:39,683 INFO L273 TraceCheckUtils]: 43: Hoare triple {2206#true} ~cond := #in~cond; {2206#true} is VALID [2018-11-18 23:01:39,683 INFO L273 TraceCheckUtils]: 44: Hoare triple {2206#true} assume !(0 == ~cond); {2206#true} is VALID [2018-11-18 23:01:39,684 INFO L273 TraceCheckUtils]: 45: Hoare triple {2206#true} assume true; {2206#true} is VALID [2018-11-18 23:01:39,685 INFO L268 TraceCheckUtils]: 46: Hoare quadruple {2206#true} {2218#(and (<= main_~a~0 (+ main_~x~0 2)) (or (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~a~0 (- 1)))))) (<= main_~a~0 (+ main_~x~0 1))))} #55#return; {2218#(and (<= main_~a~0 (+ main_~x~0 2)) (or (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~a~0 (- 1)))))) (<= main_~a~0 (+ main_~x~0 1))))} is VALID [2018-11-18 23:01:39,685 INFO L273 TraceCheckUtils]: 47: Hoare triple {2218#(and (<= main_~a~0 (+ main_~x~0 2)) (or (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~a~0 (- 1)))))) (<= main_~a~0 (+ main_~x~0 1))))} havoc #t~mem3; {2218#(and (<= main_~a~0 (+ main_~x~0 2)) (or (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~a~0 (- 1)))))) (<= main_~a~0 (+ main_~x~0 1))))} is VALID [2018-11-18 23:01:39,687 INFO L273 TraceCheckUtils]: 48: Hoare triple {2218#(and (<= main_~a~0 (+ main_~x~0 2)) (or (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~a~0 (- 1)))))) (<= main_~a~0 (+ main_~x~0 1))))} #t~post2 := ~x~0;~x~0 := 1 + #t~post2;havoc #t~post2; {2219#(or (<= main_~a~0 main_~x~0) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 main_~x~0) |main_~#aa~0.offset|))))} is VALID [2018-11-18 23:01:39,687 INFO L273 TraceCheckUtils]: 49: Hoare triple {2219#(or (<= main_~a~0 main_~x~0) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 main_~x~0) |main_~#aa~0.offset|))))} assume true; {2219#(or (<= main_~a~0 main_~x~0) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 main_~x~0) |main_~#aa~0.offset|))))} is VALID [2018-11-18 23:01:39,688 INFO L273 TraceCheckUtils]: 50: Hoare triple {2219#(or (<= main_~a~0 main_~x~0) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 main_~x~0) |main_~#aa~0.offset|))))} assume !!(~x~0 < ~a~0);call #t~mem3 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~x~0, 4); {2220#(<= 0 |main_#t~mem3|)} is VALID [2018-11-18 23:01:39,689 INFO L256 TraceCheckUtils]: 51: Hoare triple {2220#(<= 0 |main_#t~mem3|)} call __VERIFIER_assert((if #t~mem3 >= 0 then 1 else 0)); {2216#(not (= |__VERIFIER_assert_#in~cond| 0))} is VALID [2018-11-18 23:01:39,689 INFO L273 TraceCheckUtils]: 52: Hoare triple {2216#(not (= |__VERIFIER_assert_#in~cond| 0))} ~cond := #in~cond; {2221#(not (= __VERIFIER_assert_~cond 0))} is VALID [2018-11-18 23:01:39,690 INFO L273 TraceCheckUtils]: 53: Hoare triple {2221#(not (= __VERIFIER_assert_~cond 0))} assume 0 == ~cond; {2207#false} is VALID [2018-11-18 23:01:39,690 INFO L273 TraceCheckUtils]: 54: Hoare triple {2207#false} assume !false; {2207#false} is VALID [2018-11-18 23:01:39,698 INFO L134 CoverageAnalysis]: Checked inductivity of 72 backedges. 10 proven. 56 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2018-11-18 23:01:39,699 INFO L300 seRefinementStrategy]: The current sequences of interpolants are not accepted, trying to find more. [2018-11-18 23:01:39,699 INFO L223 ckRefinementStrategy]: Switched to mode Z3_FP No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 Starting monitored process 7 with z3 -smt2 -in SMTLIB2_COMPLIANT=true -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 7 with z3 -smt2 -in SMTLIB2_COMPLIANT=true -t:12000 [2018-11-18 23:01:39,716 INFO L103 rtionOrderModulation]: Keeping assertion order INSIDE_LOOP_FIRST1 [2018-11-18 23:01:39,790 INFO L249 tOrderPrioritization]: Assert order INSIDE_LOOP_FIRST1 issued 5 check-sat command(s) [2018-11-18 23:01:39,791 INFO L250 tOrderPrioritization]: Conjunction of SSA is unsat [2018-11-18 23:01:39,817 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 23:01:39,823 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-18 23:01:40,670 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 11 [2018-11-18 23:01:40,674 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2018-11-18 23:01:40,677 INFO L267 ElimStorePlain]: Start of recursive call 3: End of recursive call: and 1 xjuncts. [2018-11-18 23:01:40,678 INFO L267 ElimStorePlain]: Start of recursive call 2: 1 dim-1 vars, End of recursive call: and 1 xjuncts. [2018-11-18 23:01:40,679 INFO L267 ElimStorePlain]: Start of recursive call 1: 1 dim-0 vars, 1 dim-2 vars, End of recursive call: and 1 xjuncts. [2018-11-18 23:01:40,680 INFO L202 ElimStorePlain]: Needed 3 recursive calls to eliminate 2 variables, input treesize:15, output treesize:3 [2018-11-18 23:01:40,682 WARN L383 uantifierElimination]: Trying to double check SDD result, but SMT solver's response was UNKNOWN. [2018-11-18 23:01:40,727 INFO L256 TraceCheckUtils]: 0: Hoare triple {2206#true} call ULTIMATE.init(); {2206#true} is VALID [2018-11-18 23:01:40,727 INFO L273 TraceCheckUtils]: 1: Hoare triple {2206#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0]; {2206#true} is VALID [2018-11-18 23:01:40,727 INFO L273 TraceCheckUtils]: 2: Hoare triple {2206#true} assume true; {2206#true} is VALID [2018-11-18 23:01:40,727 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {2206#true} {2206#true} #51#return; {2206#true} is VALID [2018-11-18 23:01:40,727 INFO L256 TraceCheckUtils]: 4: Hoare triple {2206#true} call #t~ret4 := main(); {2206#true} is VALID [2018-11-18 23:01:40,728 INFO L273 TraceCheckUtils]: 5: Hoare triple {2206#true} call ~#aa~0.base, ~#aa~0.offset := #Ultimate.alloc(400000);~a~0 := 0; {2240#(and (= 0 |main_~#aa~0.offset|) (= main_~a~0 0))} is VALID [2018-11-18 23:01:40,729 INFO L273 TraceCheckUtils]: 6: Hoare triple {2240#(and (= 0 |main_~#aa~0.offset|) (= main_~a~0 0))} assume true; {2240#(and (= 0 |main_~#aa~0.offset|) (= main_~a~0 0))} is VALID [2018-11-18 23:01:40,730 INFO L273 TraceCheckUtils]: 7: Hoare triple {2240#(and (= 0 |main_~#aa~0.offset|) (= main_~a~0 0))} call #t~mem0 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~a~0, 4); {2240#(and (= 0 |main_~#aa~0.offset|) (= main_~a~0 0))} is VALID [2018-11-18 23:01:40,730 INFO L273 TraceCheckUtils]: 8: Hoare triple {2240#(and (= 0 |main_~#aa~0.offset|) (= main_~a~0 0))} assume !!(#t~mem0 >= 0);havoc #t~mem0;#t~post1 := ~a~0;~a~0 := 1 + #t~post1;havoc #t~post1; {2250#(and (= 0 |main_~#aa~0.offset|) (= main_~a~0 1))} is VALID [2018-11-18 23:01:40,731 INFO L273 TraceCheckUtils]: 9: Hoare triple {2250#(and (= 0 |main_~#aa~0.offset|) (= main_~a~0 1))} assume true; {2250#(and (= 0 |main_~#aa~0.offset|) (= main_~a~0 1))} is VALID [2018-11-18 23:01:40,732 INFO L273 TraceCheckUtils]: 10: Hoare triple {2250#(and (= 0 |main_~#aa~0.offset|) (= main_~a~0 1))} call #t~mem0 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~a~0, 4); {2250#(and (= 0 |main_~#aa~0.offset|) (= main_~a~0 1))} is VALID [2018-11-18 23:01:40,732 INFO L273 TraceCheckUtils]: 11: Hoare triple {2250#(and (= 0 |main_~#aa~0.offset|) (= main_~a~0 1))} assume !!(#t~mem0 >= 0);havoc #t~mem0;#t~post1 := ~a~0;~a~0 := 1 + #t~post1;havoc #t~post1; {2260#(and (= main_~a~0 2) (= 0 |main_~#aa~0.offset|))} is VALID [2018-11-18 23:01:40,733 INFO L273 TraceCheckUtils]: 12: Hoare triple {2260#(and (= main_~a~0 2) (= 0 |main_~#aa~0.offset|))} assume true; {2260#(and (= main_~a~0 2) (= 0 |main_~#aa~0.offset|))} is VALID [2018-11-18 23:01:40,734 INFO L273 TraceCheckUtils]: 13: Hoare triple {2260#(and (= main_~a~0 2) (= 0 |main_~#aa~0.offset|))} call #t~mem0 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~a~0, 4); {2260#(and (= main_~a~0 2) (= 0 |main_~#aa~0.offset|))} is VALID [2018-11-18 23:01:40,735 INFO L273 TraceCheckUtils]: 14: Hoare triple {2260#(and (= main_~a~0 2) (= 0 |main_~#aa~0.offset|))} assume !!(#t~mem0 >= 0);havoc #t~mem0;#t~post1 := ~a~0;~a~0 := 1 + #t~post1;havoc #t~post1; {2270#(and (= 0 |main_~#aa~0.offset|) (= main_~a~0 3))} is VALID [2018-11-18 23:01:40,735 INFO L273 TraceCheckUtils]: 15: Hoare triple {2270#(and (= 0 |main_~#aa~0.offset|) (= main_~a~0 3))} assume true; {2270#(and (= 0 |main_~#aa~0.offset|) (= main_~a~0 3))} is VALID [2018-11-18 23:01:40,736 INFO L273 TraceCheckUtils]: 16: Hoare triple {2270#(and (= 0 |main_~#aa~0.offset|) (= main_~a~0 3))} call #t~mem0 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~a~0, 4); {2277#(and (= 0 |main_~#aa~0.offset|) (<= |main_#t~mem0| (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 12))))} is VALID [2018-11-18 23:01:40,737 INFO L273 TraceCheckUtils]: 17: Hoare triple {2277#(and (= 0 |main_~#aa~0.offset|) (<= |main_#t~mem0| (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 12))))} assume !!(#t~mem0 >= 0);havoc #t~mem0;#t~post1 := ~a~0;~a~0 := 1 + #t~post1;havoc #t~post1; {2281#(and (= 0 |main_~#aa~0.offset|) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 12))))} is VALID [2018-11-18 23:01:40,738 INFO L273 TraceCheckUtils]: 18: Hoare triple {2281#(and (= 0 |main_~#aa~0.offset|) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 12))))} assume true; {2281#(and (= 0 |main_~#aa~0.offset|) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 12))))} is VALID [2018-11-18 23:01:40,739 INFO L273 TraceCheckUtils]: 19: Hoare triple {2281#(and (= 0 |main_~#aa~0.offset|) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 12))))} call #t~mem0 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~a~0, 4); {2281#(and (= 0 |main_~#aa~0.offset|) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 12))))} is VALID [2018-11-18 23:01:40,739 INFO L273 TraceCheckUtils]: 20: Hoare triple {2281#(and (= 0 |main_~#aa~0.offset|) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 12))))} assume !(#t~mem0 >= 0);havoc #t~mem0; {2281#(and (= 0 |main_~#aa~0.offset|) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 12))))} is VALID [2018-11-18 23:01:40,740 INFO L273 TraceCheckUtils]: 21: Hoare triple {2281#(and (= 0 |main_~#aa~0.offset|) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 12))))} havoc ~x~0;~x~0 := 0; {2294#(and (= 0 |main_~#aa~0.offset|) (= main_~x~0 0) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 12))))} is VALID [2018-11-18 23:01:40,741 INFO L273 TraceCheckUtils]: 22: Hoare triple {2294#(and (= 0 |main_~#aa~0.offset|) (= main_~x~0 0) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 12))))} assume true; {2294#(and (= 0 |main_~#aa~0.offset|) (= main_~x~0 0) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 12))))} is VALID [2018-11-18 23:01:40,742 INFO L273 TraceCheckUtils]: 23: Hoare triple {2294#(and (= 0 |main_~#aa~0.offset|) (= main_~x~0 0) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 12))))} assume !!(~x~0 < ~a~0);call #t~mem3 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~x~0, 4); {2294#(and (= 0 |main_~#aa~0.offset|) (= main_~x~0 0) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 12))))} is VALID [2018-11-18 23:01:40,744 INFO L256 TraceCheckUtils]: 24: Hoare triple {2294#(and (= 0 |main_~#aa~0.offset|) (= main_~x~0 0) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 12))))} call __VERIFIER_assert((if #t~mem3 >= 0 then 1 else 0)); {2304#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_6| Int)) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_6|) 12)))} is VALID [2018-11-18 23:01:40,744 INFO L273 TraceCheckUtils]: 25: Hoare triple {2304#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_6| Int)) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_6|) 12)))} ~cond := #in~cond; {2308#(and (= |__VERIFIER_assert_#in~cond| __VERIFIER_assert_~cond) (exists ((|v_main_~#aa~0.base_BEFORE_CALL_6| Int)) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_6|) 12))))} is VALID [2018-11-18 23:01:40,745 INFO L273 TraceCheckUtils]: 26: Hoare triple {2308#(and (= |__VERIFIER_assert_#in~cond| __VERIFIER_assert_~cond) (exists ((|v_main_~#aa~0.base_BEFORE_CALL_6| Int)) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_6|) 12))))} assume !(0 == ~cond); {2312#(and (not (= |__VERIFIER_assert_#in~cond| 0)) (exists ((|v_main_~#aa~0.base_BEFORE_CALL_6| Int)) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_6|) 12))))} is VALID [2018-11-18 23:01:40,746 INFO L273 TraceCheckUtils]: 27: Hoare triple {2312#(and (not (= |__VERIFIER_assert_#in~cond| 0)) (exists ((|v_main_~#aa~0.base_BEFORE_CALL_6| Int)) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_6|) 12))))} assume true; {2312#(and (not (= |__VERIFIER_assert_#in~cond| 0)) (exists ((|v_main_~#aa~0.base_BEFORE_CALL_6| Int)) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_6|) 12))))} is VALID [2018-11-18 23:01:40,747 INFO L268 TraceCheckUtils]: 28: Hoare quadruple {2312#(and (not (= |__VERIFIER_assert_#in~cond| 0)) (exists ((|v_main_~#aa~0.base_BEFORE_CALL_6| Int)) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_6|) 12))))} {2294#(and (= 0 |main_~#aa~0.offset|) (= main_~x~0 0) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 12))))} #55#return; {2294#(and (= 0 |main_~#aa~0.offset|) (= main_~x~0 0) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 12))))} is VALID [2018-11-18 23:01:40,748 INFO L273 TraceCheckUtils]: 29: Hoare triple {2294#(and (= 0 |main_~#aa~0.offset|) (= main_~x~0 0) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 12))))} havoc #t~mem3; {2294#(and (= 0 |main_~#aa~0.offset|) (= main_~x~0 0) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 12))))} is VALID [2018-11-18 23:01:40,748 INFO L273 TraceCheckUtils]: 30: Hoare triple {2294#(and (= 0 |main_~#aa~0.offset|) (= main_~x~0 0) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 12))))} #t~post2 := ~x~0;~x~0 := 1 + #t~post2;havoc #t~post2; {2325#(and (= main_~x~0 1) (= 0 |main_~#aa~0.offset|) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 12))))} is VALID [2018-11-18 23:01:40,749 INFO L273 TraceCheckUtils]: 31: Hoare triple {2325#(and (= main_~x~0 1) (= 0 |main_~#aa~0.offset|) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 12))))} assume true; {2325#(and (= main_~x~0 1) (= 0 |main_~#aa~0.offset|) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 12))))} is VALID [2018-11-18 23:01:40,750 INFO L273 TraceCheckUtils]: 32: Hoare triple {2325#(and (= main_~x~0 1) (= 0 |main_~#aa~0.offset|) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 12))))} assume !!(~x~0 < ~a~0);call #t~mem3 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~x~0, 4); {2325#(and (= main_~x~0 1) (= 0 |main_~#aa~0.offset|) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 12))))} is VALID [2018-11-18 23:01:40,752 INFO L256 TraceCheckUtils]: 33: Hoare triple {2325#(and (= main_~x~0 1) (= 0 |main_~#aa~0.offset|) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 12))))} call __VERIFIER_assert((if #t~mem3 >= 0 then 1 else 0)); {2304#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_6| Int)) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_6|) 12)))} is VALID [2018-11-18 23:01:40,752 INFO L273 TraceCheckUtils]: 34: Hoare triple {2304#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_6| Int)) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_6|) 12)))} ~cond := #in~cond; {2304#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_6| Int)) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_6|) 12)))} is VALID [2018-11-18 23:01:40,753 INFO L273 TraceCheckUtils]: 35: Hoare triple {2304#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_6| Int)) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_6|) 12)))} assume !(0 == ~cond); {2304#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_6| Int)) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_6|) 12)))} is VALID [2018-11-18 23:01:40,754 INFO L273 TraceCheckUtils]: 36: Hoare triple {2304#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_6| Int)) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_6|) 12)))} assume true; {2304#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_6| Int)) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_6|) 12)))} is VALID [2018-11-18 23:01:40,754 INFO L268 TraceCheckUtils]: 37: Hoare quadruple {2304#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_6| Int)) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_6|) 12)))} {2325#(and (= main_~x~0 1) (= 0 |main_~#aa~0.offset|) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 12))))} #55#return; {2325#(and (= main_~x~0 1) (= 0 |main_~#aa~0.offset|) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 12))))} is VALID [2018-11-18 23:01:40,755 INFO L273 TraceCheckUtils]: 38: Hoare triple {2325#(and (= main_~x~0 1) (= 0 |main_~#aa~0.offset|) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 12))))} havoc #t~mem3; {2325#(and (= main_~x~0 1) (= 0 |main_~#aa~0.offset|) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 12))))} is VALID [2018-11-18 23:01:40,756 INFO L273 TraceCheckUtils]: 39: Hoare triple {2325#(and (= main_~x~0 1) (= 0 |main_~#aa~0.offset|) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 12))))} #t~post2 := ~x~0;~x~0 := 1 + #t~post2;havoc #t~post2; {2353#(and (= main_~x~0 2) (= 0 |main_~#aa~0.offset|) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 12))))} is VALID [2018-11-18 23:01:40,757 INFO L273 TraceCheckUtils]: 40: Hoare triple {2353#(and (= main_~x~0 2) (= 0 |main_~#aa~0.offset|) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 12))))} assume true; {2353#(and (= main_~x~0 2) (= 0 |main_~#aa~0.offset|) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 12))))} is VALID [2018-11-18 23:01:40,758 INFO L273 TraceCheckUtils]: 41: Hoare triple {2353#(and (= main_~x~0 2) (= 0 |main_~#aa~0.offset|) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 12))))} assume !!(~x~0 < ~a~0);call #t~mem3 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~x~0, 4); {2353#(and (= main_~x~0 2) (= 0 |main_~#aa~0.offset|) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 12))))} is VALID [2018-11-18 23:01:40,759 INFO L256 TraceCheckUtils]: 42: Hoare triple {2353#(and (= main_~x~0 2) (= 0 |main_~#aa~0.offset|) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 12))))} call __VERIFIER_assert((if #t~mem3 >= 0 then 1 else 0)); {2304#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_6| Int)) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_6|) 12)))} is VALID [2018-11-18 23:01:40,760 INFO L273 TraceCheckUtils]: 43: Hoare triple {2304#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_6| Int)) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_6|) 12)))} ~cond := #in~cond; {2304#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_6| Int)) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_6|) 12)))} is VALID [2018-11-18 23:01:40,761 INFO L273 TraceCheckUtils]: 44: Hoare triple {2304#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_6| Int)) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_6|) 12)))} assume !(0 == ~cond); {2304#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_6| Int)) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_6|) 12)))} is VALID [2018-11-18 23:01:40,761 INFO L273 TraceCheckUtils]: 45: Hoare triple {2304#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_6| Int)) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_6|) 12)))} assume true; {2304#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_6| Int)) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_6|) 12)))} is VALID [2018-11-18 23:01:40,762 INFO L268 TraceCheckUtils]: 46: Hoare quadruple {2304#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_6| Int)) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_6|) 12)))} {2353#(and (= main_~x~0 2) (= 0 |main_~#aa~0.offset|) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 12))))} #55#return; {2353#(and (= main_~x~0 2) (= 0 |main_~#aa~0.offset|) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 12))))} is VALID [2018-11-18 23:01:40,763 INFO L273 TraceCheckUtils]: 47: Hoare triple {2353#(and (= main_~x~0 2) (= 0 |main_~#aa~0.offset|) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 12))))} havoc #t~mem3; {2353#(and (= main_~x~0 2) (= 0 |main_~#aa~0.offset|) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 12))))} is VALID [2018-11-18 23:01:40,764 INFO L273 TraceCheckUtils]: 48: Hoare triple {2353#(and (= main_~x~0 2) (= 0 |main_~#aa~0.offset|) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 12))))} #t~post2 := ~x~0;~x~0 := 1 + #t~post2;havoc #t~post2; {2381#(and (= 0 |main_~#aa~0.offset|) (= main_~x~0 3) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 12))))} is VALID [2018-11-18 23:01:40,765 INFO L273 TraceCheckUtils]: 49: Hoare triple {2381#(and (= 0 |main_~#aa~0.offset|) (= main_~x~0 3) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 12))))} assume true; {2381#(and (= 0 |main_~#aa~0.offset|) (= main_~x~0 3) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 12))))} is VALID [2018-11-18 23:01:40,766 INFO L273 TraceCheckUtils]: 50: Hoare triple {2381#(and (= 0 |main_~#aa~0.offset|) (= main_~x~0 3) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 12))))} assume !!(~x~0 < ~a~0);call #t~mem3 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~x~0, 4); {2220#(<= 0 |main_#t~mem3|)} is VALID [2018-11-18 23:01:40,766 INFO L256 TraceCheckUtils]: 51: Hoare triple {2220#(<= 0 |main_#t~mem3|)} call __VERIFIER_assert((if #t~mem3 >= 0 then 1 else 0)); {2391#(= |__VERIFIER_assert_#in~cond| 1)} is VALID [2018-11-18 23:01:40,767 INFO L273 TraceCheckUtils]: 52: Hoare triple {2391#(= |__VERIFIER_assert_#in~cond| 1)} ~cond := #in~cond; {2395#(= 1 __VERIFIER_assert_~cond)} is VALID [2018-11-18 23:01:40,768 INFO L273 TraceCheckUtils]: 53: Hoare triple {2395#(= 1 __VERIFIER_assert_~cond)} assume 0 == ~cond; {2207#false} is VALID [2018-11-18 23:01:40,768 INFO L273 TraceCheckUtils]: 54: Hoare triple {2207#false} assume !false; {2207#false} is VALID [2018-11-18 23:01:40,777 INFO L134 CoverageAnalysis]: Checked inductivity of 72 backedges. 0 proven. 66 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2018-11-18 23:01:40,796 INFO L312 seRefinementStrategy]: Constructing automaton from 0 perfect and 2 imperfect interpolant sequences. [2018-11-18 23:01:40,796 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [16, 18] total 31 [2018-11-18 23:01:40,797 INFO L78 Accepts]: Start accepts. Automaton has 31 states. Word has length 55 [2018-11-18 23:01:40,797 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-18 23:01:40,797 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 31 states. [2018-11-18 23:01:40,899 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 98 edges. 98 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-18 23:01:40,899 INFO L459 AbstractCegarLoop]: Interpolant automaton has 31 states [2018-11-18 23:01:40,900 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 31 interpolants. [2018-11-18 23:01:40,900 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=103, Invalid=827, Unknown=0, NotChecked=0, Total=930 [2018-11-18 23:01:40,900 INFO L87 Difference]: Start difference. First operand 58 states and 59 transitions. Second operand 31 states. [2018-11-18 23:01:49,815 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:01:49,816 INFO L93 Difference]: Finished difference Result 100 states and 107 transitions. [2018-11-18 23:01:49,816 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 36 states. [2018-11-18 23:01:49,816 INFO L78 Accepts]: Start accepts. Automaton has 31 states. Word has length 55 [2018-11-18 23:01:49,816 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-18 23:01:49,816 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 31 states. [2018-11-18 23:01:49,819 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 36 states to 36 states and 98 transitions. [2018-11-18 23:01:49,820 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 31 states. [2018-11-18 23:01:49,823 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 36 states to 36 states and 98 transitions. [2018-11-18 23:01:49,823 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 36 states and 98 transitions. [2018-11-18 23:01:49,964 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 98 edges. 98 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-18 23:01:49,966 INFO L225 Difference]: With dead ends: 100 [2018-11-18 23:01:49,966 INFO L226 Difference]: Without dead ends: 72 [2018-11-18 23:01:49,967 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 96 GetRequests, 39 SyntacticMatches, 5 SemanticMatches, 52 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 813 ImplicationChecksByTransitivity, 1.7s TimeCoverageRelationStatistics Valid=309, Invalid=2553, Unknown=0, NotChecked=0, Total=2862 [2018-11-18 23:01:49,967 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 72 states. [2018-11-18 23:01:50,127 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 72 to 70. [2018-11-18 23:01:50,127 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-18 23:01:50,127 INFO L82 GeneralOperation]: Start isEquivalent. First operand 72 states. Second operand 70 states. [2018-11-18 23:01:50,128 INFO L74 IsIncluded]: Start isIncluded. First operand 72 states. Second operand 70 states. [2018-11-18 23:01:50,128 INFO L87 Difference]: Start difference. First operand 72 states. Second operand 70 states. [2018-11-18 23:01:50,132 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:01:50,132 INFO L93 Difference]: Finished difference Result 72 states and 73 transitions. [2018-11-18 23:01:50,132 INFO L276 IsEmpty]: Start isEmpty. Operand 72 states and 73 transitions. [2018-11-18 23:01:50,132 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-18 23:01:50,132 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-18 23:01:50,132 INFO L74 IsIncluded]: Start isIncluded. First operand 70 states. Second operand 72 states. [2018-11-18 23:01:50,132 INFO L87 Difference]: Start difference. First operand 70 states. Second operand 72 states. [2018-11-18 23:01:50,135 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:01:50,135 INFO L93 Difference]: Finished difference Result 72 states and 73 transitions. [2018-11-18 23:01:50,135 INFO L276 IsEmpty]: Start isEmpty. Operand 72 states and 73 transitions. [2018-11-18 23:01:50,135 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-18 23:01:50,136 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-18 23:01:50,136 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-18 23:01:50,136 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-18 23:01:50,136 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 70 states. [2018-11-18 23:01:50,138 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 70 states to 70 states and 71 transitions. [2018-11-18 23:01:50,138 INFO L78 Accepts]: Start accepts. Automaton has 70 states and 71 transitions. Word has length 55 [2018-11-18 23:01:50,138 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-18 23:01:50,138 INFO L480 AbstractCegarLoop]: Abstraction has 70 states and 71 transitions. [2018-11-18 23:01:50,138 INFO L481 AbstractCegarLoop]: Interpolant automaton has 31 states. [2018-11-18 23:01:50,138 INFO L276 IsEmpty]: Start isEmpty. Operand 70 states and 71 transitions. [2018-11-18 23:01:50,139 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 68 [2018-11-18 23:01:50,139 INFO L367 BasicCegarLoop]: Found error trace [2018-11-18 23:01:50,139 INFO L375 BasicCegarLoop]: trace histogram [6, 6, 5, 5, 5, 5, 5, 4, 4, 4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 23:01:50,139 INFO L423 AbstractCegarLoop]: === Iteration 9 === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-18 23:01:50,139 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 23:01:50,140 INFO L82 PathProgramCache]: Analyzing trace with hash 1306200028, now seen corresponding path program 6 times [2018-11-18 23:01:50,140 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 23:01:50,140 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 23:01:50,140 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 23:01:50,140 INFO L101 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2018-11-18 23:01:50,140 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 23:01:50,159 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 23:01:50,539 INFO L256 TraceCheckUtils]: 0: Hoare triple {2822#true} call ULTIMATE.init(); {2822#true} is VALID [2018-11-18 23:01:50,540 INFO L273 TraceCheckUtils]: 1: Hoare triple {2822#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0]; {2822#true} is VALID [2018-11-18 23:01:50,540 INFO L273 TraceCheckUtils]: 2: Hoare triple {2822#true} assume true; {2822#true} is VALID [2018-11-18 23:01:50,540 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {2822#true} {2822#true} #51#return; {2822#true} is VALID [2018-11-18 23:01:50,540 INFO L256 TraceCheckUtils]: 4: Hoare triple {2822#true} call #t~ret4 := main(); {2822#true} is VALID [2018-11-18 23:01:50,544 INFO L273 TraceCheckUtils]: 5: Hoare triple {2822#true} call ~#aa~0.base, ~#aa~0.offset := #Ultimate.alloc(400000);~a~0 := 0; {2824#(= main_~a~0 0)} is VALID [2018-11-18 23:01:50,545 INFO L273 TraceCheckUtils]: 6: Hoare triple {2824#(= main_~a~0 0)} assume true; {2824#(= main_~a~0 0)} is VALID [2018-11-18 23:01:50,545 INFO L273 TraceCheckUtils]: 7: Hoare triple {2824#(= main_~a~0 0)} call #t~mem0 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~a~0, 4); {2824#(= main_~a~0 0)} is VALID [2018-11-18 23:01:50,546 INFO L273 TraceCheckUtils]: 8: Hoare triple {2824#(= main_~a~0 0)} assume !!(#t~mem0 >= 0);havoc #t~mem0;#t~post1 := ~a~0;~a~0 := 1 + #t~post1;havoc #t~post1; {2825#(<= main_~a~0 1)} is VALID [2018-11-18 23:01:50,546 INFO L273 TraceCheckUtils]: 9: Hoare triple {2825#(<= main_~a~0 1)} assume true; {2825#(<= main_~a~0 1)} is VALID [2018-11-18 23:01:50,547 INFO L273 TraceCheckUtils]: 10: Hoare triple {2825#(<= main_~a~0 1)} call #t~mem0 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~a~0, 4); {2825#(<= main_~a~0 1)} is VALID [2018-11-18 23:01:50,547 INFO L273 TraceCheckUtils]: 11: Hoare triple {2825#(<= main_~a~0 1)} assume !!(#t~mem0 >= 0);havoc #t~mem0;#t~post1 := ~a~0;~a~0 := 1 + #t~post1;havoc #t~post1; {2826#(<= main_~a~0 2)} is VALID [2018-11-18 23:01:50,553 INFO L273 TraceCheckUtils]: 12: Hoare triple {2826#(<= main_~a~0 2)} assume true; {2826#(<= main_~a~0 2)} is VALID [2018-11-18 23:01:50,554 INFO L273 TraceCheckUtils]: 13: Hoare triple {2826#(<= main_~a~0 2)} call #t~mem0 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~a~0, 4); {2826#(<= main_~a~0 2)} is VALID [2018-11-18 23:01:50,554 INFO L273 TraceCheckUtils]: 14: Hoare triple {2826#(<= main_~a~0 2)} assume !!(#t~mem0 >= 0);havoc #t~mem0;#t~post1 := ~a~0;~a~0 := 1 + #t~post1;havoc #t~post1; {2827#(<= main_~a~0 3)} is VALID [2018-11-18 23:01:50,555 INFO L273 TraceCheckUtils]: 15: Hoare triple {2827#(<= main_~a~0 3)} assume true; {2827#(<= main_~a~0 3)} is VALID [2018-11-18 23:01:50,555 INFO L273 TraceCheckUtils]: 16: Hoare triple {2827#(<= main_~a~0 3)} call #t~mem0 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~a~0, 4); {2827#(<= main_~a~0 3)} is VALID [2018-11-18 23:01:50,555 INFO L273 TraceCheckUtils]: 17: Hoare triple {2827#(<= main_~a~0 3)} assume !!(#t~mem0 >= 0);havoc #t~mem0;#t~post1 := ~a~0;~a~0 := 1 + #t~post1;havoc #t~post1; {2828#(<= main_~a~0 4)} is VALID [2018-11-18 23:01:50,556 INFO L273 TraceCheckUtils]: 18: Hoare triple {2828#(<= main_~a~0 4)} assume true; {2828#(<= main_~a~0 4)} is VALID [2018-11-18 23:01:50,556 INFO L273 TraceCheckUtils]: 19: Hoare triple {2828#(<= main_~a~0 4)} call #t~mem0 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~a~0, 4); {2829#(and (= |main_#t~mem0| (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 main_~a~0) |main_~#aa~0.offset|))) (<= main_~a~0 4))} is VALID [2018-11-18 23:01:50,557 INFO L273 TraceCheckUtils]: 20: Hoare triple {2829#(and (= |main_#t~mem0| (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 main_~a~0) |main_~#aa~0.offset|))) (<= main_~a~0 4))} assume !!(#t~mem0 >= 0);havoc #t~mem0;#t~post1 := ~a~0;~a~0 := 1 + #t~post1;havoc #t~post1; {2830#(and (<= main_~a~0 5) (or (<= main_~a~0 4) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 4))))))} is VALID [2018-11-18 23:01:50,558 INFO L273 TraceCheckUtils]: 21: Hoare triple {2830#(and (<= main_~a~0 5) (or (<= main_~a~0 4) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 4))))))} assume true; {2830#(and (<= main_~a~0 5) (or (<= main_~a~0 4) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 4))))))} is VALID [2018-11-18 23:01:50,559 INFO L273 TraceCheckUtils]: 22: Hoare triple {2830#(and (<= main_~a~0 5) (or (<= main_~a~0 4) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 4))))))} call #t~mem0 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~a~0, 4); {2830#(and (<= main_~a~0 5) (or (<= main_~a~0 4) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 4))))))} is VALID [2018-11-18 23:01:50,559 INFO L273 TraceCheckUtils]: 23: Hoare triple {2830#(and (<= main_~a~0 5) (or (<= main_~a~0 4) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 4))))))} assume !(#t~mem0 >= 0);havoc #t~mem0; {2830#(and (<= main_~a~0 5) (or (<= main_~a~0 4) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 4))))))} is VALID [2018-11-18 23:01:50,560 INFO L273 TraceCheckUtils]: 24: Hoare triple {2830#(and (<= main_~a~0 5) (or (<= main_~a~0 4) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 4))))))} havoc ~x~0;~x~0 := 0; {2831#(and (= main_~x~0 0) (<= main_~a~0 5) (or (<= main_~a~0 4) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 4))))))} is VALID [2018-11-18 23:01:50,561 INFO L273 TraceCheckUtils]: 25: Hoare triple {2831#(and (= main_~x~0 0) (<= main_~a~0 5) (or (<= main_~a~0 4) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 4))))))} assume true; {2831#(and (= main_~x~0 0) (<= main_~a~0 5) (or (<= main_~a~0 4) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 4))))))} is VALID [2018-11-18 23:01:50,562 INFO L273 TraceCheckUtils]: 26: Hoare triple {2831#(and (= main_~x~0 0) (<= main_~a~0 5) (or (<= main_~a~0 4) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 4))))))} assume !!(~x~0 < ~a~0);call #t~mem3 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~x~0, 4); {2831#(and (= main_~x~0 0) (<= main_~a~0 5) (or (<= main_~a~0 4) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 4))))))} is VALID [2018-11-18 23:01:50,562 INFO L256 TraceCheckUtils]: 27: Hoare triple {2831#(and (= main_~x~0 0) (<= main_~a~0 5) (or (<= main_~a~0 4) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 4))))))} call __VERIFIER_assert((if #t~mem3 >= 0 then 1 else 0)); {2822#true} is VALID [2018-11-18 23:01:50,562 INFO L273 TraceCheckUtils]: 28: Hoare triple {2822#true} ~cond := #in~cond; {2832#(= __VERIFIER_assert_~cond |__VERIFIER_assert_#in~cond|)} is VALID [2018-11-18 23:01:50,563 INFO L273 TraceCheckUtils]: 29: Hoare triple {2832#(= __VERIFIER_assert_~cond |__VERIFIER_assert_#in~cond|)} assume !(0 == ~cond); {2833#(not (= |__VERIFIER_assert_#in~cond| 0))} is VALID [2018-11-18 23:01:50,564 INFO L273 TraceCheckUtils]: 30: Hoare triple {2833#(not (= |__VERIFIER_assert_#in~cond| 0))} assume true; {2833#(not (= |__VERIFIER_assert_#in~cond| 0))} is VALID [2018-11-18 23:01:50,565 INFO L268 TraceCheckUtils]: 31: Hoare quadruple {2833#(not (= |__VERIFIER_assert_#in~cond| 0))} {2831#(and (= main_~x~0 0) (<= main_~a~0 5) (or (<= main_~a~0 4) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 4))))))} #55#return; {2831#(and (= main_~x~0 0) (<= main_~a~0 5) (or (<= main_~a~0 4) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 4))))))} is VALID [2018-11-18 23:01:50,566 INFO L273 TraceCheckUtils]: 32: Hoare triple {2831#(and (= main_~x~0 0) (<= main_~a~0 5) (or (<= main_~a~0 4) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 4))))))} havoc #t~mem3; {2831#(and (= main_~x~0 0) (<= main_~a~0 5) (or (<= main_~a~0 4) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 4))))))} is VALID [2018-11-18 23:01:50,567 INFO L273 TraceCheckUtils]: 33: Hoare triple {2831#(and (= main_~x~0 0) (<= main_~a~0 5) (or (<= main_~a~0 4) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 4))))))} #t~post2 := ~x~0;~x~0 := 1 + #t~post2;havoc #t~post2; {2834#(and (<= main_~a~0 (+ main_~x~0 4)) (or (<= main_~a~0 (+ main_~x~0 3)) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~x~0 3)))))))} is VALID [2018-11-18 23:01:50,568 INFO L273 TraceCheckUtils]: 34: Hoare triple {2834#(and (<= main_~a~0 (+ main_~x~0 4)) (or (<= main_~a~0 (+ main_~x~0 3)) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~x~0 3)))))))} assume true; {2834#(and (<= main_~a~0 (+ main_~x~0 4)) (or (<= main_~a~0 (+ main_~x~0 3)) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~x~0 3)))))))} is VALID [2018-11-18 23:01:50,568 INFO L273 TraceCheckUtils]: 35: Hoare triple {2834#(and (<= main_~a~0 (+ main_~x~0 4)) (or (<= main_~a~0 (+ main_~x~0 3)) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~x~0 3)))))))} assume !!(~x~0 < ~a~0);call #t~mem3 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~x~0, 4); {2834#(and (<= main_~a~0 (+ main_~x~0 4)) (or (<= main_~a~0 (+ main_~x~0 3)) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~x~0 3)))))))} is VALID [2018-11-18 23:01:50,569 INFO L256 TraceCheckUtils]: 36: Hoare triple {2834#(and (<= main_~a~0 (+ main_~x~0 4)) (or (<= main_~a~0 (+ main_~x~0 3)) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~x~0 3)))))))} call __VERIFIER_assert((if #t~mem3 >= 0 then 1 else 0)); {2822#true} is VALID [2018-11-18 23:01:50,569 INFO L273 TraceCheckUtils]: 37: Hoare triple {2822#true} ~cond := #in~cond; {2822#true} is VALID [2018-11-18 23:01:50,569 INFO L273 TraceCheckUtils]: 38: Hoare triple {2822#true} assume !(0 == ~cond); {2822#true} is VALID [2018-11-18 23:01:50,570 INFO L273 TraceCheckUtils]: 39: Hoare triple {2822#true} assume true; {2822#true} is VALID [2018-11-18 23:01:50,583 INFO L268 TraceCheckUtils]: 40: Hoare quadruple {2822#true} {2834#(and (<= main_~a~0 (+ main_~x~0 4)) (or (<= main_~a~0 (+ main_~x~0 3)) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~x~0 3)))))))} #55#return; {2834#(and (<= main_~a~0 (+ main_~x~0 4)) (or (<= main_~a~0 (+ main_~x~0 3)) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~x~0 3)))))))} is VALID [2018-11-18 23:01:50,584 INFO L273 TraceCheckUtils]: 41: Hoare triple {2834#(and (<= main_~a~0 (+ main_~x~0 4)) (or (<= main_~a~0 (+ main_~x~0 3)) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~x~0 3)))))))} havoc #t~mem3; {2834#(and (<= main_~a~0 (+ main_~x~0 4)) (or (<= main_~a~0 (+ main_~x~0 3)) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~x~0 3)))))))} is VALID [2018-11-18 23:01:50,585 INFO L273 TraceCheckUtils]: 42: Hoare triple {2834#(and (<= main_~a~0 (+ main_~x~0 4)) (or (<= main_~a~0 (+ main_~x~0 3)) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~x~0 3)))))))} #t~post2 := ~x~0;~x~0 := 1 + #t~post2;havoc #t~post2; {2835#(and (<= main_~a~0 (+ main_~x~0 3)) (or (<= main_~a~0 (+ main_~x~0 2)) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~x~0 2)))))))} is VALID [2018-11-18 23:01:50,585 INFO L273 TraceCheckUtils]: 43: Hoare triple {2835#(and (<= main_~a~0 (+ main_~x~0 3)) (or (<= main_~a~0 (+ main_~x~0 2)) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~x~0 2)))))))} assume true; {2835#(and (<= main_~a~0 (+ main_~x~0 3)) (or (<= main_~a~0 (+ main_~x~0 2)) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~x~0 2)))))))} is VALID [2018-11-18 23:01:50,586 INFO L273 TraceCheckUtils]: 44: Hoare triple {2835#(and (<= main_~a~0 (+ main_~x~0 3)) (or (<= main_~a~0 (+ main_~x~0 2)) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~x~0 2)))))))} assume !!(~x~0 < ~a~0);call #t~mem3 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~x~0, 4); {2835#(and (<= main_~a~0 (+ main_~x~0 3)) (or (<= main_~a~0 (+ main_~x~0 2)) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~x~0 2)))))))} is VALID [2018-11-18 23:01:50,586 INFO L256 TraceCheckUtils]: 45: Hoare triple {2835#(and (<= main_~a~0 (+ main_~x~0 3)) (or (<= main_~a~0 (+ main_~x~0 2)) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~x~0 2)))))))} call __VERIFIER_assert((if #t~mem3 >= 0 then 1 else 0)); {2822#true} is VALID [2018-11-18 23:01:50,586 INFO L273 TraceCheckUtils]: 46: Hoare triple {2822#true} ~cond := #in~cond; {2822#true} is VALID [2018-11-18 23:01:50,586 INFO L273 TraceCheckUtils]: 47: Hoare triple {2822#true} assume !(0 == ~cond); {2822#true} is VALID [2018-11-18 23:01:50,587 INFO L273 TraceCheckUtils]: 48: Hoare triple {2822#true} assume true; {2822#true} is VALID [2018-11-18 23:01:50,587 INFO L268 TraceCheckUtils]: 49: Hoare quadruple {2822#true} {2835#(and (<= main_~a~0 (+ main_~x~0 3)) (or (<= main_~a~0 (+ main_~x~0 2)) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~x~0 2)))))))} #55#return; {2835#(and (<= main_~a~0 (+ main_~x~0 3)) (or (<= main_~a~0 (+ main_~x~0 2)) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~x~0 2)))))))} is VALID [2018-11-18 23:01:50,588 INFO L273 TraceCheckUtils]: 50: Hoare triple {2835#(and (<= main_~a~0 (+ main_~x~0 3)) (or (<= main_~a~0 (+ main_~x~0 2)) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~x~0 2)))))))} havoc #t~mem3; {2835#(and (<= main_~a~0 (+ main_~x~0 3)) (or (<= main_~a~0 (+ main_~x~0 2)) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~x~0 2)))))))} is VALID [2018-11-18 23:01:50,589 INFO L273 TraceCheckUtils]: 51: Hoare triple {2835#(and (<= main_~a~0 (+ main_~x~0 3)) (or (<= main_~a~0 (+ main_~x~0 2)) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~x~0 2)))))))} #t~post2 := ~x~0;~x~0 := 1 + #t~post2;havoc #t~post2; {2836#(and (<= main_~a~0 (+ main_~x~0 2)) (or (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~x~0 1))))) (<= main_~a~0 (+ main_~x~0 1))))} is VALID [2018-11-18 23:01:50,590 INFO L273 TraceCheckUtils]: 52: Hoare triple {2836#(and (<= main_~a~0 (+ main_~x~0 2)) (or (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~x~0 1))))) (<= main_~a~0 (+ main_~x~0 1))))} assume true; {2836#(and (<= main_~a~0 (+ main_~x~0 2)) (or (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~x~0 1))))) (<= main_~a~0 (+ main_~x~0 1))))} is VALID [2018-11-18 23:01:50,591 INFO L273 TraceCheckUtils]: 53: Hoare triple {2836#(and (<= main_~a~0 (+ main_~x~0 2)) (or (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~x~0 1))))) (<= main_~a~0 (+ main_~x~0 1))))} assume !!(~x~0 < ~a~0);call #t~mem3 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~x~0, 4); {2836#(and (<= main_~a~0 (+ main_~x~0 2)) (or (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~x~0 1))))) (<= main_~a~0 (+ main_~x~0 1))))} is VALID [2018-11-18 23:01:50,591 INFO L256 TraceCheckUtils]: 54: Hoare triple {2836#(and (<= main_~a~0 (+ main_~x~0 2)) (or (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~x~0 1))))) (<= main_~a~0 (+ main_~x~0 1))))} call __VERIFIER_assert((if #t~mem3 >= 0 then 1 else 0)); {2822#true} is VALID [2018-11-18 23:01:50,591 INFO L273 TraceCheckUtils]: 55: Hoare triple {2822#true} ~cond := #in~cond; {2822#true} is VALID [2018-11-18 23:01:50,592 INFO L273 TraceCheckUtils]: 56: Hoare triple {2822#true} assume !(0 == ~cond); {2822#true} is VALID [2018-11-18 23:01:50,592 INFO L273 TraceCheckUtils]: 57: Hoare triple {2822#true} assume true; {2822#true} is VALID [2018-11-18 23:01:50,593 INFO L268 TraceCheckUtils]: 58: Hoare quadruple {2822#true} {2836#(and (<= main_~a~0 (+ main_~x~0 2)) (or (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~x~0 1))))) (<= main_~a~0 (+ main_~x~0 1))))} #55#return; {2836#(and (<= main_~a~0 (+ main_~x~0 2)) (or (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~x~0 1))))) (<= main_~a~0 (+ main_~x~0 1))))} is VALID [2018-11-18 23:01:50,593 INFO L273 TraceCheckUtils]: 59: Hoare triple {2836#(and (<= main_~a~0 (+ main_~x~0 2)) (or (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~x~0 1))))) (<= main_~a~0 (+ main_~x~0 1))))} havoc #t~mem3; {2836#(and (<= main_~a~0 (+ main_~x~0 2)) (or (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~x~0 1))))) (<= main_~a~0 (+ main_~x~0 1))))} is VALID [2018-11-18 23:01:50,595 INFO L273 TraceCheckUtils]: 60: Hoare triple {2836#(and (<= main_~a~0 (+ main_~x~0 2)) (or (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~x~0 1))))) (<= main_~a~0 (+ main_~x~0 1))))} #t~post2 := ~x~0;~x~0 := 1 + #t~post2;havoc #t~post2; {2837#(or (<= main_~a~0 main_~x~0) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 main_~x~0) |main_~#aa~0.offset|))))} is VALID [2018-11-18 23:01:50,595 INFO L273 TraceCheckUtils]: 61: Hoare triple {2837#(or (<= main_~a~0 main_~x~0) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 main_~x~0) |main_~#aa~0.offset|))))} assume true; {2837#(or (<= main_~a~0 main_~x~0) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 main_~x~0) |main_~#aa~0.offset|))))} is VALID [2018-11-18 23:01:50,596 INFO L273 TraceCheckUtils]: 62: Hoare triple {2837#(or (<= main_~a~0 main_~x~0) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 main_~x~0) |main_~#aa~0.offset|))))} assume !!(~x~0 < ~a~0);call #t~mem3 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~x~0, 4); {2838#(<= 0 |main_#t~mem3|)} is VALID [2018-11-18 23:01:50,597 INFO L256 TraceCheckUtils]: 63: Hoare triple {2838#(<= 0 |main_#t~mem3|)} call __VERIFIER_assert((if #t~mem3 >= 0 then 1 else 0)); {2833#(not (= |__VERIFIER_assert_#in~cond| 0))} is VALID [2018-11-18 23:01:50,597 INFO L273 TraceCheckUtils]: 64: Hoare triple {2833#(not (= |__VERIFIER_assert_#in~cond| 0))} ~cond := #in~cond; {2839#(not (= __VERIFIER_assert_~cond 0))} is VALID [2018-11-18 23:01:50,598 INFO L273 TraceCheckUtils]: 65: Hoare triple {2839#(not (= __VERIFIER_assert_~cond 0))} assume 0 == ~cond; {2823#false} is VALID [2018-11-18 23:01:50,598 INFO L273 TraceCheckUtils]: 66: Hoare triple {2823#false} assume !false; {2823#false} is VALID [2018-11-18 23:01:50,609 INFO L134 CoverageAnalysis]: Checked inductivity of 119 backedges. 22 proven. 82 refuted. 0 times theorem prover too weak. 15 trivial. 0 not checked. [2018-11-18 23:01:50,610 INFO L300 seRefinementStrategy]: The current sequences of interpolants are not accepted, trying to find more. [2018-11-18 23:01:50,610 INFO L223 ckRefinementStrategy]: Switched to mode Z3_FP No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 Starting monitored process 8 with z3 -smt2 -in SMTLIB2_COMPLIANT=true -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 8 with z3 -smt2 -in SMTLIB2_COMPLIANT=true -t:12000 [2018-11-18 23:01:50,619 INFO L103 rtionOrderModulation]: Keeping assertion order MIX_INSIDE_OUTSIDE [2018-11-18 23:01:50,647 INFO L249 tOrderPrioritization]: Assert order MIX_INSIDE_OUTSIDE issued 6 check-sat command(s) [2018-11-18 23:01:50,647 INFO L250 tOrderPrioritization]: Conjunction of SSA is unsat [2018-11-18 23:01:50,669 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 23:01:50,670 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-18 23:02:16,734 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 23 treesize of output 19 [2018-11-18 23:02:16,740 INFO L682 Elim1Store]: detected equality via solver [2018-11-18 23:02:16,741 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 19 treesize of output 18 [2018-11-18 23:02:16,744 INFO L267 ElimStorePlain]: Start of recursive call 3: End of recursive call: and 1 xjuncts. [2018-11-18 23:02:16,749 INFO L267 ElimStorePlain]: Start of recursive call 2: 1 dim-1 vars, End of recursive call: and 1 xjuncts. [2018-11-18 23:02:16,761 INFO L267 ElimStorePlain]: Start of recursive call 1: 4 dim-0 vars, 1 dim-2 vars, End of recursive call: and 1 xjuncts. [2018-11-18 23:02:16,761 INFO L202 ElimStorePlain]: Needed 3 recursive calls to eliminate 5 variables, input treesize:32, output treesize:3 [2018-11-18 23:02:16,764 WARN L383 uantifierElimination]: Trying to double check SDD result, but SMT solver's response was UNKNOWN. [2018-11-18 23:02:16,811 INFO L256 TraceCheckUtils]: 0: Hoare triple {2822#true} call ULTIMATE.init(); {2822#true} is VALID [2018-11-18 23:02:16,811 INFO L273 TraceCheckUtils]: 1: Hoare triple {2822#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0]; {2822#true} is VALID [2018-11-18 23:02:16,811 INFO L273 TraceCheckUtils]: 2: Hoare triple {2822#true} assume true; {2822#true} is VALID [2018-11-18 23:02:16,811 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {2822#true} {2822#true} #51#return; {2822#true} is VALID [2018-11-18 23:02:16,812 INFO L256 TraceCheckUtils]: 4: Hoare triple {2822#true} call #t~ret4 := main(); {2822#true} is VALID [2018-11-18 23:02:16,812 INFO L273 TraceCheckUtils]: 5: Hoare triple {2822#true} call ~#aa~0.base, ~#aa~0.offset := #Ultimate.alloc(400000);~a~0 := 0; {2858#(<= main_~a~0 0)} is VALID [2018-11-18 23:02:16,812 INFO L273 TraceCheckUtils]: 6: Hoare triple {2858#(<= main_~a~0 0)} assume true; {2858#(<= main_~a~0 0)} is VALID [2018-11-18 23:02:16,813 INFO L273 TraceCheckUtils]: 7: Hoare triple {2858#(<= main_~a~0 0)} call #t~mem0 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~a~0, 4); {2858#(<= main_~a~0 0)} is VALID [2018-11-18 23:02:16,813 INFO L273 TraceCheckUtils]: 8: Hoare triple {2858#(<= main_~a~0 0)} assume !!(#t~mem0 >= 0);havoc #t~mem0;#t~post1 := ~a~0;~a~0 := 1 + #t~post1;havoc #t~post1; {2825#(<= main_~a~0 1)} is VALID [2018-11-18 23:02:16,813 INFO L273 TraceCheckUtils]: 9: Hoare triple {2825#(<= main_~a~0 1)} assume true; {2825#(<= main_~a~0 1)} is VALID [2018-11-18 23:02:16,814 INFO L273 TraceCheckUtils]: 10: Hoare triple {2825#(<= main_~a~0 1)} call #t~mem0 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~a~0, 4); {2825#(<= main_~a~0 1)} is VALID [2018-11-18 23:02:16,814 INFO L273 TraceCheckUtils]: 11: Hoare triple {2825#(<= main_~a~0 1)} assume !!(#t~mem0 >= 0);havoc #t~mem0;#t~post1 := ~a~0;~a~0 := 1 + #t~post1;havoc #t~post1; {2826#(<= main_~a~0 2)} is VALID [2018-11-18 23:02:16,815 INFO L273 TraceCheckUtils]: 12: Hoare triple {2826#(<= main_~a~0 2)} assume true; {2826#(<= main_~a~0 2)} is VALID [2018-11-18 23:02:16,815 INFO L273 TraceCheckUtils]: 13: Hoare triple {2826#(<= main_~a~0 2)} call #t~mem0 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~a~0, 4); {2826#(<= main_~a~0 2)} is VALID [2018-11-18 23:02:16,815 INFO L273 TraceCheckUtils]: 14: Hoare triple {2826#(<= main_~a~0 2)} assume !!(#t~mem0 >= 0);havoc #t~mem0;#t~post1 := ~a~0;~a~0 := 1 + #t~post1;havoc #t~post1; {2827#(<= main_~a~0 3)} is VALID [2018-11-18 23:02:16,816 INFO L273 TraceCheckUtils]: 15: Hoare triple {2827#(<= main_~a~0 3)} assume true; {2827#(<= main_~a~0 3)} is VALID [2018-11-18 23:02:16,817 INFO L273 TraceCheckUtils]: 16: Hoare triple {2827#(<= main_~a~0 3)} call #t~mem0 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~a~0, 4); {2827#(<= main_~a~0 3)} is VALID [2018-11-18 23:02:16,817 INFO L273 TraceCheckUtils]: 17: Hoare triple {2827#(<= main_~a~0 3)} assume !!(#t~mem0 >= 0);havoc #t~mem0;#t~post1 := ~a~0;~a~0 := 1 + #t~post1;havoc #t~post1; {2828#(<= main_~a~0 4)} is VALID [2018-11-18 23:02:16,818 INFO L273 TraceCheckUtils]: 18: Hoare triple {2828#(<= main_~a~0 4)} assume true; {2828#(<= main_~a~0 4)} is VALID [2018-11-18 23:02:16,819 INFO L273 TraceCheckUtils]: 19: Hoare triple {2828#(<= main_~a~0 4)} call #t~mem0 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~a~0, 4); {2901#(and (<= main_~a~0 4) (<= |main_#t~mem0| (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 main_~a~0)))))} is VALID [2018-11-18 23:02:16,820 INFO L273 TraceCheckUtils]: 20: Hoare triple {2901#(and (<= main_~a~0 4) (<= |main_#t~mem0| (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 main_~a~0)))))} assume !!(#t~mem0 >= 0);havoc #t~mem0;#t~post1 := ~a~0;~a~0 := 1 + #t~post1;havoc #t~post1; {2905#(exists ((v_main_~a~0_21 Int)) (and (<= v_main_~a~0_21 4) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 v_main_~a~0_21) |main_~#aa~0.offset|))) (<= main_~a~0 (+ v_main_~a~0_21 1))))} is VALID [2018-11-18 23:02:16,820 INFO L273 TraceCheckUtils]: 21: Hoare triple {2905#(exists ((v_main_~a~0_21 Int)) (and (<= v_main_~a~0_21 4) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 v_main_~a~0_21) |main_~#aa~0.offset|))) (<= main_~a~0 (+ v_main_~a~0_21 1))))} assume true; {2905#(exists ((v_main_~a~0_21 Int)) (and (<= v_main_~a~0_21 4) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 v_main_~a~0_21) |main_~#aa~0.offset|))) (<= main_~a~0 (+ v_main_~a~0_21 1))))} is VALID [2018-11-18 23:02:16,821 INFO L273 TraceCheckUtils]: 22: Hoare triple {2905#(exists ((v_main_~a~0_21 Int)) (and (<= v_main_~a~0_21 4) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 v_main_~a~0_21) |main_~#aa~0.offset|))) (<= main_~a~0 (+ v_main_~a~0_21 1))))} call #t~mem0 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~a~0, 4); {2905#(exists ((v_main_~a~0_21 Int)) (and (<= v_main_~a~0_21 4) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 v_main_~a~0_21) |main_~#aa~0.offset|))) (<= main_~a~0 (+ v_main_~a~0_21 1))))} is VALID [2018-11-18 23:02:16,821 INFO L273 TraceCheckUtils]: 23: Hoare triple {2905#(exists ((v_main_~a~0_21 Int)) (and (<= v_main_~a~0_21 4) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 v_main_~a~0_21) |main_~#aa~0.offset|))) (<= main_~a~0 (+ v_main_~a~0_21 1))))} assume !(#t~mem0 >= 0);havoc #t~mem0; {2905#(exists ((v_main_~a~0_21 Int)) (and (<= v_main_~a~0_21 4) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 v_main_~a~0_21) |main_~#aa~0.offset|))) (<= main_~a~0 (+ v_main_~a~0_21 1))))} is VALID [2018-11-18 23:02:16,822 INFO L273 TraceCheckUtils]: 24: Hoare triple {2905#(exists ((v_main_~a~0_21 Int)) (and (<= v_main_~a~0_21 4) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 v_main_~a~0_21) |main_~#aa~0.offset|))) (<= main_~a~0 (+ v_main_~a~0_21 1))))} havoc ~x~0;~x~0 := 0; {2918#(and (exists ((v_main_~a~0_21 Int)) (and (<= v_main_~a~0_21 4) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 v_main_~a~0_21) |main_~#aa~0.offset|))) (<= main_~a~0 (+ v_main_~a~0_21 1)))) (<= 0 main_~x~0))} is VALID [2018-11-18 23:02:16,823 INFO L273 TraceCheckUtils]: 25: Hoare triple {2918#(and (exists ((v_main_~a~0_21 Int)) (and (<= v_main_~a~0_21 4) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 v_main_~a~0_21) |main_~#aa~0.offset|))) (<= main_~a~0 (+ v_main_~a~0_21 1)))) (<= 0 main_~x~0))} assume true; {2918#(and (exists ((v_main_~a~0_21 Int)) (and (<= v_main_~a~0_21 4) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 v_main_~a~0_21) |main_~#aa~0.offset|))) (<= main_~a~0 (+ v_main_~a~0_21 1)))) (<= 0 main_~x~0))} is VALID [2018-11-18 23:02:16,824 INFO L273 TraceCheckUtils]: 26: Hoare triple {2918#(and (exists ((v_main_~a~0_21 Int)) (and (<= v_main_~a~0_21 4) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 v_main_~a~0_21) |main_~#aa~0.offset|))) (<= main_~a~0 (+ v_main_~a~0_21 1)))) (<= 0 main_~x~0))} assume !!(~x~0 < ~a~0);call #t~mem3 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~x~0, 4); {2918#(and (exists ((v_main_~a~0_21 Int)) (and (<= v_main_~a~0_21 4) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 v_main_~a~0_21) |main_~#aa~0.offset|))) (<= main_~a~0 (+ v_main_~a~0_21 1)))) (<= 0 main_~x~0))} is VALID [2018-11-18 23:02:16,839 INFO L256 TraceCheckUtils]: 27: Hoare triple {2918#(and (exists ((v_main_~a~0_21 Int)) (and (<= v_main_~a~0_21 4) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 v_main_~a~0_21) |main_~#aa~0.offset|))) (<= main_~a~0 (+ v_main_~a~0_21 1)))) (<= 0 main_~x~0))} call __VERIFIER_assert((if #t~mem3 >= 0 then 1 else 0)); {2928#(exists ((|v_main_~#aa~0.offset_BEFORE_CALL_9| Int) (v_main_~a~0_21 Int) (|v_main_~#aa~0.base_BEFORE_CALL_9| Int)) (and (<= v_main_~a~0_21 4) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_9|) (+ |v_main_~#aa~0.offset_BEFORE_CALL_9| (* 4 v_main_~a~0_21))))))} is VALID [2018-11-18 23:02:16,839 INFO L273 TraceCheckUtils]: 28: Hoare triple {2928#(exists ((|v_main_~#aa~0.offset_BEFORE_CALL_9| Int) (v_main_~a~0_21 Int) (|v_main_~#aa~0.base_BEFORE_CALL_9| Int)) (and (<= v_main_~a~0_21 4) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_9|) (+ |v_main_~#aa~0.offset_BEFORE_CALL_9| (* 4 v_main_~a~0_21))))))} ~cond := #in~cond; {2928#(exists ((|v_main_~#aa~0.offset_BEFORE_CALL_9| Int) (v_main_~a~0_21 Int) (|v_main_~#aa~0.base_BEFORE_CALL_9| Int)) (and (<= v_main_~a~0_21 4) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_9|) (+ |v_main_~#aa~0.offset_BEFORE_CALL_9| (* 4 v_main_~a~0_21))))))} is VALID [2018-11-18 23:02:16,839 INFO L273 TraceCheckUtils]: 29: Hoare triple {2928#(exists ((|v_main_~#aa~0.offset_BEFORE_CALL_9| Int) (v_main_~a~0_21 Int) (|v_main_~#aa~0.base_BEFORE_CALL_9| Int)) (and (<= v_main_~a~0_21 4) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_9|) (+ |v_main_~#aa~0.offset_BEFORE_CALL_9| (* 4 v_main_~a~0_21))))))} assume !(0 == ~cond); {2928#(exists ((|v_main_~#aa~0.offset_BEFORE_CALL_9| Int) (v_main_~a~0_21 Int) (|v_main_~#aa~0.base_BEFORE_CALL_9| Int)) (and (<= v_main_~a~0_21 4) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_9|) (+ |v_main_~#aa~0.offset_BEFORE_CALL_9| (* 4 v_main_~a~0_21))))))} is VALID [2018-11-18 23:02:16,840 INFO L273 TraceCheckUtils]: 30: Hoare triple {2928#(exists ((|v_main_~#aa~0.offset_BEFORE_CALL_9| Int) (v_main_~a~0_21 Int) (|v_main_~#aa~0.base_BEFORE_CALL_9| Int)) (and (<= v_main_~a~0_21 4) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_9|) (+ |v_main_~#aa~0.offset_BEFORE_CALL_9| (* 4 v_main_~a~0_21))))))} assume true; {2928#(exists ((|v_main_~#aa~0.offset_BEFORE_CALL_9| Int) (v_main_~a~0_21 Int) (|v_main_~#aa~0.base_BEFORE_CALL_9| Int)) (and (<= v_main_~a~0_21 4) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_9|) (+ |v_main_~#aa~0.offset_BEFORE_CALL_9| (* 4 v_main_~a~0_21))))))} is VALID [2018-11-18 23:02:16,841 INFO L268 TraceCheckUtils]: 31: Hoare quadruple {2928#(exists ((|v_main_~#aa~0.offset_BEFORE_CALL_9| Int) (v_main_~a~0_21 Int) (|v_main_~#aa~0.base_BEFORE_CALL_9| Int)) (and (<= v_main_~a~0_21 4) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_9|) (+ |v_main_~#aa~0.offset_BEFORE_CALL_9| (* 4 v_main_~a~0_21))))))} {2918#(and (exists ((v_main_~a~0_21 Int)) (and (<= v_main_~a~0_21 4) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 v_main_~a~0_21) |main_~#aa~0.offset|))) (<= main_~a~0 (+ v_main_~a~0_21 1)))) (<= 0 main_~x~0))} #55#return; {2918#(and (exists ((v_main_~a~0_21 Int)) (and (<= v_main_~a~0_21 4) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 v_main_~a~0_21) |main_~#aa~0.offset|))) (<= main_~a~0 (+ v_main_~a~0_21 1)))) (<= 0 main_~x~0))} is VALID [2018-11-18 23:02:16,841 INFO L273 TraceCheckUtils]: 32: Hoare triple {2918#(and (exists ((v_main_~a~0_21 Int)) (and (<= v_main_~a~0_21 4) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 v_main_~a~0_21) |main_~#aa~0.offset|))) (<= main_~a~0 (+ v_main_~a~0_21 1)))) (<= 0 main_~x~0))} havoc #t~mem3; {2918#(and (exists ((v_main_~a~0_21 Int)) (and (<= v_main_~a~0_21 4) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 v_main_~a~0_21) |main_~#aa~0.offset|))) (<= main_~a~0 (+ v_main_~a~0_21 1)))) (<= 0 main_~x~0))} is VALID [2018-11-18 23:02:16,842 INFO L273 TraceCheckUtils]: 33: Hoare triple {2918#(and (exists ((v_main_~a~0_21 Int)) (and (<= v_main_~a~0_21 4) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 v_main_~a~0_21) |main_~#aa~0.offset|))) (<= main_~a~0 (+ v_main_~a~0_21 1)))) (<= 0 main_~x~0))} #t~post2 := ~x~0;~x~0 := 1 + #t~post2;havoc #t~post2; {2947#(and (exists ((v_main_~a~0_21 Int)) (and (<= v_main_~a~0_21 4) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 v_main_~a~0_21) |main_~#aa~0.offset|))) (<= main_~a~0 (+ v_main_~a~0_21 1)))) (<= 1 main_~x~0))} is VALID [2018-11-18 23:02:16,842 INFO L273 TraceCheckUtils]: 34: Hoare triple {2947#(and (exists ((v_main_~a~0_21 Int)) (and (<= v_main_~a~0_21 4) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 v_main_~a~0_21) |main_~#aa~0.offset|))) (<= main_~a~0 (+ v_main_~a~0_21 1)))) (<= 1 main_~x~0))} assume true; {2947#(and (exists ((v_main_~a~0_21 Int)) (and (<= v_main_~a~0_21 4) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 v_main_~a~0_21) |main_~#aa~0.offset|))) (<= main_~a~0 (+ v_main_~a~0_21 1)))) (<= 1 main_~x~0))} is VALID [2018-11-18 23:02:16,843 INFO L273 TraceCheckUtils]: 35: Hoare triple {2947#(and (exists ((v_main_~a~0_21 Int)) (and (<= v_main_~a~0_21 4) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 v_main_~a~0_21) |main_~#aa~0.offset|))) (<= main_~a~0 (+ v_main_~a~0_21 1)))) (<= 1 main_~x~0))} assume !!(~x~0 < ~a~0);call #t~mem3 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~x~0, 4); {2947#(and (exists ((v_main_~a~0_21 Int)) (and (<= v_main_~a~0_21 4) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 v_main_~a~0_21) |main_~#aa~0.offset|))) (<= main_~a~0 (+ v_main_~a~0_21 1)))) (<= 1 main_~x~0))} is VALID [2018-11-18 23:02:16,890 INFO L256 TraceCheckUtils]: 36: Hoare triple {2947#(and (exists ((v_main_~a~0_21 Int)) (and (<= v_main_~a~0_21 4) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 v_main_~a~0_21) |main_~#aa~0.offset|))) (<= main_~a~0 (+ v_main_~a~0_21 1)))) (<= 1 main_~x~0))} call __VERIFIER_assert((if #t~mem3 >= 0 then 1 else 0)); {2957#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_10| Int) (|v_main_~#aa~0.offset_BEFORE_CALL_10| Int) (v_main_~a~0_21 Int)) (and (<= v_main_~a~0_21 4) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_10|) (+ |v_main_~#aa~0.offset_BEFORE_CALL_10| (* 4 v_main_~a~0_21))))))} is VALID [2018-11-18 23:02:16,890 INFO L273 TraceCheckUtils]: 37: Hoare triple {2957#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_10| Int) (|v_main_~#aa~0.offset_BEFORE_CALL_10| Int) (v_main_~a~0_21 Int)) (and (<= v_main_~a~0_21 4) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_10|) (+ |v_main_~#aa~0.offset_BEFORE_CALL_10| (* 4 v_main_~a~0_21))))))} ~cond := #in~cond; {2957#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_10| Int) (|v_main_~#aa~0.offset_BEFORE_CALL_10| Int) (v_main_~a~0_21 Int)) (and (<= v_main_~a~0_21 4) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_10|) (+ |v_main_~#aa~0.offset_BEFORE_CALL_10| (* 4 v_main_~a~0_21))))))} is VALID [2018-11-18 23:02:16,891 INFO L273 TraceCheckUtils]: 38: Hoare triple {2957#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_10| Int) (|v_main_~#aa~0.offset_BEFORE_CALL_10| Int) (v_main_~a~0_21 Int)) (and (<= v_main_~a~0_21 4) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_10|) (+ |v_main_~#aa~0.offset_BEFORE_CALL_10| (* 4 v_main_~a~0_21))))))} assume !(0 == ~cond); {2957#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_10| Int) (|v_main_~#aa~0.offset_BEFORE_CALL_10| Int) (v_main_~a~0_21 Int)) (and (<= v_main_~a~0_21 4) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_10|) (+ |v_main_~#aa~0.offset_BEFORE_CALL_10| (* 4 v_main_~a~0_21))))))} is VALID [2018-11-18 23:02:16,891 INFO L273 TraceCheckUtils]: 39: Hoare triple {2957#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_10| Int) (|v_main_~#aa~0.offset_BEFORE_CALL_10| Int) (v_main_~a~0_21 Int)) (and (<= v_main_~a~0_21 4) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_10|) (+ |v_main_~#aa~0.offset_BEFORE_CALL_10| (* 4 v_main_~a~0_21))))))} assume true; {2957#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_10| Int) (|v_main_~#aa~0.offset_BEFORE_CALL_10| Int) (v_main_~a~0_21 Int)) (and (<= v_main_~a~0_21 4) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_10|) (+ |v_main_~#aa~0.offset_BEFORE_CALL_10| (* 4 v_main_~a~0_21))))))} is VALID [2018-11-18 23:02:16,892 INFO L268 TraceCheckUtils]: 40: Hoare quadruple {2957#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_10| Int) (|v_main_~#aa~0.offset_BEFORE_CALL_10| Int) (v_main_~a~0_21 Int)) (and (<= v_main_~a~0_21 4) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_10|) (+ |v_main_~#aa~0.offset_BEFORE_CALL_10| (* 4 v_main_~a~0_21))))))} {2947#(and (exists ((v_main_~a~0_21 Int)) (and (<= v_main_~a~0_21 4) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 v_main_~a~0_21) |main_~#aa~0.offset|))) (<= main_~a~0 (+ v_main_~a~0_21 1)))) (<= 1 main_~x~0))} #55#return; {2947#(and (exists ((v_main_~a~0_21 Int)) (and (<= v_main_~a~0_21 4) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 v_main_~a~0_21) |main_~#aa~0.offset|))) (<= main_~a~0 (+ v_main_~a~0_21 1)))) (<= 1 main_~x~0))} is VALID [2018-11-18 23:02:16,892 INFO L273 TraceCheckUtils]: 41: Hoare triple {2947#(and (exists ((v_main_~a~0_21 Int)) (and (<= v_main_~a~0_21 4) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 v_main_~a~0_21) |main_~#aa~0.offset|))) (<= main_~a~0 (+ v_main_~a~0_21 1)))) (<= 1 main_~x~0))} havoc #t~mem3; {2947#(and (exists ((v_main_~a~0_21 Int)) (and (<= v_main_~a~0_21 4) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 v_main_~a~0_21) |main_~#aa~0.offset|))) (<= main_~a~0 (+ v_main_~a~0_21 1)))) (<= 1 main_~x~0))} is VALID [2018-11-18 23:02:16,893 INFO L273 TraceCheckUtils]: 42: Hoare triple {2947#(and (exists ((v_main_~a~0_21 Int)) (and (<= v_main_~a~0_21 4) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 v_main_~a~0_21) |main_~#aa~0.offset|))) (<= main_~a~0 (+ v_main_~a~0_21 1)))) (<= 1 main_~x~0))} #t~post2 := ~x~0;~x~0 := 1 + #t~post2;havoc #t~post2; {2976#(and (exists ((v_main_~a~0_21 Int)) (and (<= v_main_~a~0_21 4) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 v_main_~a~0_21) |main_~#aa~0.offset|))) (<= main_~a~0 (+ v_main_~a~0_21 1)))) (<= 2 main_~x~0))} is VALID [2018-11-18 23:02:16,899 INFO L273 TraceCheckUtils]: 43: Hoare triple {2976#(and (exists ((v_main_~a~0_21 Int)) (and (<= v_main_~a~0_21 4) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 v_main_~a~0_21) |main_~#aa~0.offset|))) (<= main_~a~0 (+ v_main_~a~0_21 1)))) (<= 2 main_~x~0))} assume true; {2976#(and (exists ((v_main_~a~0_21 Int)) (and (<= v_main_~a~0_21 4) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 v_main_~a~0_21) |main_~#aa~0.offset|))) (<= main_~a~0 (+ v_main_~a~0_21 1)))) (<= 2 main_~x~0))} is VALID [2018-11-18 23:02:16,899 INFO L273 TraceCheckUtils]: 44: Hoare triple {2976#(and (exists ((v_main_~a~0_21 Int)) (and (<= v_main_~a~0_21 4) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 v_main_~a~0_21) |main_~#aa~0.offset|))) (<= main_~a~0 (+ v_main_~a~0_21 1)))) (<= 2 main_~x~0))} assume !!(~x~0 < ~a~0);call #t~mem3 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~x~0, 4); {2976#(and (exists ((v_main_~a~0_21 Int)) (and (<= v_main_~a~0_21 4) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 v_main_~a~0_21) |main_~#aa~0.offset|))) (<= main_~a~0 (+ v_main_~a~0_21 1)))) (<= 2 main_~x~0))} is VALID [2018-11-18 23:02:16,906 INFO L256 TraceCheckUtils]: 45: Hoare triple {2976#(and (exists ((v_main_~a~0_21 Int)) (and (<= v_main_~a~0_21 4) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 v_main_~a~0_21) |main_~#aa~0.offset|))) (<= main_~a~0 (+ v_main_~a~0_21 1)))) (<= 2 main_~x~0))} call __VERIFIER_assert((if #t~mem3 >= 0 then 1 else 0)); {2928#(exists ((|v_main_~#aa~0.offset_BEFORE_CALL_9| Int) (v_main_~a~0_21 Int) (|v_main_~#aa~0.base_BEFORE_CALL_9| Int)) (and (<= v_main_~a~0_21 4) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_9|) (+ |v_main_~#aa~0.offset_BEFORE_CALL_9| (* 4 v_main_~a~0_21))))))} is VALID [2018-11-18 23:02:16,907 INFO L273 TraceCheckUtils]: 46: Hoare triple {2928#(exists ((|v_main_~#aa~0.offset_BEFORE_CALL_9| Int) (v_main_~a~0_21 Int) (|v_main_~#aa~0.base_BEFORE_CALL_9| Int)) (and (<= v_main_~a~0_21 4) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_9|) (+ |v_main_~#aa~0.offset_BEFORE_CALL_9| (* 4 v_main_~a~0_21))))))} ~cond := #in~cond; {2928#(exists ((|v_main_~#aa~0.offset_BEFORE_CALL_9| Int) (v_main_~a~0_21 Int) (|v_main_~#aa~0.base_BEFORE_CALL_9| Int)) (and (<= v_main_~a~0_21 4) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_9|) (+ |v_main_~#aa~0.offset_BEFORE_CALL_9| (* 4 v_main_~a~0_21))))))} is VALID [2018-11-18 23:02:16,907 INFO L273 TraceCheckUtils]: 47: Hoare triple {2928#(exists ((|v_main_~#aa~0.offset_BEFORE_CALL_9| Int) (v_main_~a~0_21 Int) (|v_main_~#aa~0.base_BEFORE_CALL_9| Int)) (and (<= v_main_~a~0_21 4) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_9|) (+ |v_main_~#aa~0.offset_BEFORE_CALL_9| (* 4 v_main_~a~0_21))))))} assume !(0 == ~cond); {2928#(exists ((|v_main_~#aa~0.offset_BEFORE_CALL_9| Int) (v_main_~a~0_21 Int) (|v_main_~#aa~0.base_BEFORE_CALL_9| Int)) (and (<= v_main_~a~0_21 4) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_9|) (+ |v_main_~#aa~0.offset_BEFORE_CALL_9| (* 4 v_main_~a~0_21))))))} is VALID [2018-11-18 23:02:16,908 INFO L273 TraceCheckUtils]: 48: Hoare triple {2928#(exists ((|v_main_~#aa~0.offset_BEFORE_CALL_9| Int) (v_main_~a~0_21 Int) (|v_main_~#aa~0.base_BEFORE_CALL_9| Int)) (and (<= v_main_~a~0_21 4) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_9|) (+ |v_main_~#aa~0.offset_BEFORE_CALL_9| (* 4 v_main_~a~0_21))))))} assume true; {2928#(exists ((|v_main_~#aa~0.offset_BEFORE_CALL_9| Int) (v_main_~a~0_21 Int) (|v_main_~#aa~0.base_BEFORE_CALL_9| Int)) (and (<= v_main_~a~0_21 4) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_9|) (+ |v_main_~#aa~0.offset_BEFORE_CALL_9| (* 4 v_main_~a~0_21))))))} is VALID [2018-11-18 23:02:16,908 INFO L268 TraceCheckUtils]: 49: Hoare quadruple {2928#(exists ((|v_main_~#aa~0.offset_BEFORE_CALL_9| Int) (v_main_~a~0_21 Int) (|v_main_~#aa~0.base_BEFORE_CALL_9| Int)) (and (<= v_main_~a~0_21 4) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_9|) (+ |v_main_~#aa~0.offset_BEFORE_CALL_9| (* 4 v_main_~a~0_21))))))} {2976#(and (exists ((v_main_~a~0_21 Int)) (and (<= v_main_~a~0_21 4) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 v_main_~a~0_21) |main_~#aa~0.offset|))) (<= main_~a~0 (+ v_main_~a~0_21 1)))) (<= 2 main_~x~0))} #55#return; {2976#(and (exists ((v_main_~a~0_21 Int)) (and (<= v_main_~a~0_21 4) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 v_main_~a~0_21) |main_~#aa~0.offset|))) (<= main_~a~0 (+ v_main_~a~0_21 1)))) (<= 2 main_~x~0))} is VALID [2018-11-18 23:02:16,909 INFO L273 TraceCheckUtils]: 50: Hoare triple {2976#(and (exists ((v_main_~a~0_21 Int)) (and (<= v_main_~a~0_21 4) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 v_main_~a~0_21) |main_~#aa~0.offset|))) (<= main_~a~0 (+ v_main_~a~0_21 1)))) (<= 2 main_~x~0))} havoc #t~mem3; {2976#(and (exists ((v_main_~a~0_21 Int)) (and (<= v_main_~a~0_21 4) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 v_main_~a~0_21) |main_~#aa~0.offset|))) (<= main_~a~0 (+ v_main_~a~0_21 1)))) (<= 2 main_~x~0))} is VALID [2018-11-18 23:02:16,910 INFO L273 TraceCheckUtils]: 51: Hoare triple {2976#(and (exists ((v_main_~a~0_21 Int)) (and (<= v_main_~a~0_21 4) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 v_main_~a~0_21) |main_~#aa~0.offset|))) (<= main_~a~0 (+ v_main_~a~0_21 1)))) (<= 2 main_~x~0))} #t~post2 := ~x~0;~x~0 := 1 + #t~post2;havoc #t~post2; {3004#(and (exists ((v_main_~a~0_21 Int)) (and (<= v_main_~a~0_21 4) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 v_main_~a~0_21) |main_~#aa~0.offset|))) (<= main_~a~0 (+ v_main_~a~0_21 1)))) (<= 3 main_~x~0))} is VALID [2018-11-18 23:02:16,910 INFO L273 TraceCheckUtils]: 52: Hoare triple {3004#(and (exists ((v_main_~a~0_21 Int)) (and (<= v_main_~a~0_21 4) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 v_main_~a~0_21) |main_~#aa~0.offset|))) (<= main_~a~0 (+ v_main_~a~0_21 1)))) (<= 3 main_~x~0))} assume true; {3004#(and (exists ((v_main_~a~0_21 Int)) (and (<= v_main_~a~0_21 4) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 v_main_~a~0_21) |main_~#aa~0.offset|))) (<= main_~a~0 (+ v_main_~a~0_21 1)))) (<= 3 main_~x~0))} is VALID [2018-11-18 23:02:16,911 INFO L273 TraceCheckUtils]: 53: Hoare triple {3004#(and (exists ((v_main_~a~0_21 Int)) (and (<= v_main_~a~0_21 4) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 v_main_~a~0_21) |main_~#aa~0.offset|))) (<= main_~a~0 (+ v_main_~a~0_21 1)))) (<= 3 main_~x~0))} assume !!(~x~0 < ~a~0);call #t~mem3 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~x~0, 4); {3004#(and (exists ((v_main_~a~0_21 Int)) (and (<= v_main_~a~0_21 4) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 v_main_~a~0_21) |main_~#aa~0.offset|))) (<= main_~a~0 (+ v_main_~a~0_21 1)))) (<= 3 main_~x~0))} is VALID [2018-11-18 23:02:16,925 INFO L256 TraceCheckUtils]: 54: Hoare triple {3004#(and (exists ((v_main_~a~0_21 Int)) (and (<= v_main_~a~0_21 4) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 v_main_~a~0_21) |main_~#aa~0.offset|))) (<= main_~a~0 (+ v_main_~a~0_21 1)))) (<= 3 main_~x~0))} call __VERIFIER_assert((if #t~mem3 >= 0 then 1 else 0)); {2928#(exists ((|v_main_~#aa~0.offset_BEFORE_CALL_9| Int) (v_main_~a~0_21 Int) (|v_main_~#aa~0.base_BEFORE_CALL_9| Int)) (and (<= v_main_~a~0_21 4) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_9|) (+ |v_main_~#aa~0.offset_BEFORE_CALL_9| (* 4 v_main_~a~0_21))))))} is VALID [2018-11-18 23:02:16,925 INFO L273 TraceCheckUtils]: 55: Hoare triple {2928#(exists ((|v_main_~#aa~0.offset_BEFORE_CALL_9| Int) (v_main_~a~0_21 Int) (|v_main_~#aa~0.base_BEFORE_CALL_9| Int)) (and (<= v_main_~a~0_21 4) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_9|) (+ |v_main_~#aa~0.offset_BEFORE_CALL_9| (* 4 v_main_~a~0_21))))))} ~cond := #in~cond; {2928#(exists ((|v_main_~#aa~0.offset_BEFORE_CALL_9| Int) (v_main_~a~0_21 Int) (|v_main_~#aa~0.base_BEFORE_CALL_9| Int)) (and (<= v_main_~a~0_21 4) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_9|) (+ |v_main_~#aa~0.offset_BEFORE_CALL_9| (* 4 v_main_~a~0_21))))))} is VALID [2018-11-18 23:02:16,926 INFO L273 TraceCheckUtils]: 56: Hoare triple {2928#(exists ((|v_main_~#aa~0.offset_BEFORE_CALL_9| Int) (v_main_~a~0_21 Int) (|v_main_~#aa~0.base_BEFORE_CALL_9| Int)) (and (<= v_main_~a~0_21 4) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_9|) (+ |v_main_~#aa~0.offset_BEFORE_CALL_9| (* 4 v_main_~a~0_21))))))} assume !(0 == ~cond); {2928#(exists ((|v_main_~#aa~0.offset_BEFORE_CALL_9| Int) (v_main_~a~0_21 Int) (|v_main_~#aa~0.base_BEFORE_CALL_9| Int)) (and (<= v_main_~a~0_21 4) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_9|) (+ |v_main_~#aa~0.offset_BEFORE_CALL_9| (* 4 v_main_~a~0_21))))))} is VALID [2018-11-18 23:02:16,926 INFO L273 TraceCheckUtils]: 57: Hoare triple {2928#(exists ((|v_main_~#aa~0.offset_BEFORE_CALL_9| Int) (v_main_~a~0_21 Int) (|v_main_~#aa~0.base_BEFORE_CALL_9| Int)) (and (<= v_main_~a~0_21 4) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_9|) (+ |v_main_~#aa~0.offset_BEFORE_CALL_9| (* 4 v_main_~a~0_21))))))} assume true; {2928#(exists ((|v_main_~#aa~0.offset_BEFORE_CALL_9| Int) (v_main_~a~0_21 Int) (|v_main_~#aa~0.base_BEFORE_CALL_9| Int)) (and (<= v_main_~a~0_21 4) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_9|) (+ |v_main_~#aa~0.offset_BEFORE_CALL_9| (* 4 v_main_~a~0_21))))))} is VALID [2018-11-18 23:02:16,927 INFO L268 TraceCheckUtils]: 58: Hoare quadruple {2928#(exists ((|v_main_~#aa~0.offset_BEFORE_CALL_9| Int) (v_main_~a~0_21 Int) (|v_main_~#aa~0.base_BEFORE_CALL_9| Int)) (and (<= v_main_~a~0_21 4) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_9|) (+ |v_main_~#aa~0.offset_BEFORE_CALL_9| (* 4 v_main_~a~0_21))))))} {3004#(and (exists ((v_main_~a~0_21 Int)) (and (<= v_main_~a~0_21 4) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 v_main_~a~0_21) |main_~#aa~0.offset|))) (<= main_~a~0 (+ v_main_~a~0_21 1)))) (<= 3 main_~x~0))} #55#return; {3004#(and (exists ((v_main_~a~0_21 Int)) (and (<= v_main_~a~0_21 4) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 v_main_~a~0_21) |main_~#aa~0.offset|))) (<= main_~a~0 (+ v_main_~a~0_21 1)))) (<= 3 main_~x~0))} is VALID [2018-11-18 23:02:16,927 INFO L273 TraceCheckUtils]: 59: Hoare triple {3004#(and (exists ((v_main_~a~0_21 Int)) (and (<= v_main_~a~0_21 4) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 v_main_~a~0_21) |main_~#aa~0.offset|))) (<= main_~a~0 (+ v_main_~a~0_21 1)))) (<= 3 main_~x~0))} havoc #t~mem3; {3004#(and (exists ((v_main_~a~0_21 Int)) (and (<= v_main_~a~0_21 4) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 v_main_~a~0_21) |main_~#aa~0.offset|))) (<= main_~a~0 (+ v_main_~a~0_21 1)))) (<= 3 main_~x~0))} is VALID [2018-11-18 23:02:16,928 INFO L273 TraceCheckUtils]: 60: Hoare triple {3004#(and (exists ((v_main_~a~0_21 Int)) (and (<= v_main_~a~0_21 4) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 v_main_~a~0_21) |main_~#aa~0.offset|))) (<= main_~a~0 (+ v_main_~a~0_21 1)))) (<= 3 main_~x~0))} #t~post2 := ~x~0;~x~0 := 1 + #t~post2;havoc #t~post2; {3032#(and (exists ((v_main_~a~0_21 Int)) (and (<= v_main_~a~0_21 4) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 v_main_~a~0_21) |main_~#aa~0.offset|))) (<= main_~a~0 (+ v_main_~a~0_21 1)))) (<= 4 main_~x~0))} is VALID [2018-11-18 23:02:16,929 INFO L273 TraceCheckUtils]: 61: Hoare triple {3032#(and (exists ((v_main_~a~0_21 Int)) (and (<= v_main_~a~0_21 4) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 v_main_~a~0_21) |main_~#aa~0.offset|))) (<= main_~a~0 (+ v_main_~a~0_21 1)))) (<= 4 main_~x~0))} assume true; {3032#(and (exists ((v_main_~a~0_21 Int)) (and (<= v_main_~a~0_21 4) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 v_main_~a~0_21) |main_~#aa~0.offset|))) (<= main_~a~0 (+ v_main_~a~0_21 1)))) (<= 4 main_~x~0))} is VALID [2018-11-18 23:02:16,930 INFO L273 TraceCheckUtils]: 62: Hoare triple {3032#(and (exists ((v_main_~a~0_21 Int)) (and (<= v_main_~a~0_21 4) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 v_main_~a~0_21) |main_~#aa~0.offset|))) (<= main_~a~0 (+ v_main_~a~0_21 1)))) (<= 4 main_~x~0))} assume !!(~x~0 < ~a~0);call #t~mem3 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~x~0, 4); {2838#(<= 0 |main_#t~mem3|)} is VALID [2018-11-18 23:02:16,931 INFO L256 TraceCheckUtils]: 63: Hoare triple {2838#(<= 0 |main_#t~mem3|)} call __VERIFIER_assert((if #t~mem3 >= 0 then 1 else 0)); {3042#(= |__VERIFIER_assert_#in~cond| 1)} is VALID [2018-11-18 23:02:16,931 INFO L273 TraceCheckUtils]: 64: Hoare triple {3042#(= |__VERIFIER_assert_#in~cond| 1)} ~cond := #in~cond; {3046#(= 1 __VERIFIER_assert_~cond)} is VALID [2018-11-18 23:02:16,932 INFO L273 TraceCheckUtils]: 65: Hoare triple {3046#(= 1 __VERIFIER_assert_~cond)} assume 0 == ~cond; {2823#false} is VALID [2018-11-18 23:02:16,932 INFO L273 TraceCheckUtils]: 66: Hoare triple {2823#false} assume !false; {2823#false} is VALID [2018-11-18 23:02:16,948 INFO L134 CoverageAnalysis]: Checked inductivity of 119 backedges. 46 proven. 57 refuted. 4 times theorem prover too weak. 12 trivial. 0 not checked. [2018-11-18 23:02:16,967 INFO L312 seRefinementStrategy]: Constructing automaton from 0 perfect and 2 imperfect interpolant sequences. [2018-11-18 23:02:16,967 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [18, 19] total 30 [2018-11-18 23:02:16,968 INFO L78 Accepts]: Start accepts. Automaton has 30 states. Word has length 67 [2018-11-18 23:02:16,968 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-18 23:02:16,968 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 30 states. [2018-11-18 23:02:17,938 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 106 edges. 105 inductive. 0 not inductive. 1 times theorem prover too weak to decide inductivity. [2018-11-18 23:02:17,938 INFO L459 AbstractCegarLoop]: Interpolant automaton has 30 states [2018-11-18 23:02:17,938 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 30 interpolants. [2018-11-18 23:02:17,939 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=121, Invalid=733, Unknown=16, NotChecked=0, Total=870 [2018-11-18 23:02:17,939 INFO L87 Difference]: Start difference. First operand 70 states and 71 transitions. Second operand 30 states. [2018-11-18 23:02:23,443 WARN L180 SmtUtils]: Spent 731.00 ms on a formula simplification that was a NOOP. DAG size: 28 [2018-11-18 23:02:29,560 WARN L180 SmtUtils]: Spent 2.23 s on a formula simplification. DAG size of input: 34 DAG size of output: 33 [2018-11-18 23:02:35,713 WARN L180 SmtUtils]: Spent 1.93 s on a formula simplification that was a NOOP. DAG size: 29 [2018-11-18 23:02:38,043 WARN L180 SmtUtils]: Spent 736.00 ms on a formula simplification that was a NOOP. DAG size: 29 [2018-11-18 23:02:42,021 WARN L180 SmtUtils]: Spent 3.90 s on a formula simplification. DAG size of input: 35 DAG size of output: 26 [2018-11-18 23:02:55,105 WARN L180 SmtUtils]: Spent 2.77 s on a formula simplification. DAG size of input: 35 DAG size of output: 34 [2018-11-18 23:02:58,667 WARN L180 SmtUtils]: Spent 1.09 s on a formula simplification that was a NOOP. DAG size: 28 [2018-11-18 23:03:04,129 WARN L180 SmtUtils]: Spent 1.35 s on a formula simplification that was a NOOP. DAG size: 33 [2018-11-18 23:03:11,809 WARN L180 SmtUtils]: Spent 232.00 ms on a formula simplification. DAG size of input: 38 DAG size of output: 21 [2018-11-18 23:03:17,554 WARN L180 SmtUtils]: Spent 2.01 s on a formula simplification that was a NOOP. DAG size: 29 [2018-11-18 23:03:21,202 WARN L180 SmtUtils]: Spent 1.29 s on a formula simplification that was a NOOP. DAG size: 31 [2018-11-18 23:03:28,441 WARN L180 SmtUtils]: Spent 2.01 s on a formula simplification that was a NOOP. DAG size: 30 [2018-11-18 23:03:30,476 WARN L180 SmtUtils]: Spent 1.58 s on a formula simplification that was a NOOP. DAG size: 32 [2018-11-18 23:03:33,864 WARN L180 SmtUtils]: Spent 1.66 s on a formula simplification. DAG size of input: 30 DAG size of output: 22 [2018-11-18 23:03:36,129 WARN L180 SmtUtils]: Spent 2.02 s on a formula simplification that was a NOOP. DAG size: 32 [2018-11-18 23:03:38,206 WARN L180 SmtUtils]: Spent 1.94 s on a formula simplification that was a NOOP. DAG size: 31 [2018-11-18 23:03:39,363 WARN L180 SmtUtils]: Spent 1.04 s on a formula simplification. DAG size of input: 21 DAG size of output: 20 [2018-11-18 23:03:39,799 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:03:39,799 INFO L93 Difference]: Finished difference Result 121 states and 123 transitions. [2018-11-18 23:03:39,799 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 32 states. [2018-11-18 23:03:39,799 INFO L78 Accepts]: Start accepts. Automaton has 30 states. Word has length 67 [2018-11-18 23:03:39,800 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-18 23:03:39,800 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 30 states. [2018-11-18 23:03:39,802 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 32 states to 32 states and 80 transitions. [2018-11-18 23:03:39,803 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 30 states. [2018-11-18 23:03:39,805 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 32 states to 32 states and 80 transitions. [2018-11-18 23:03:39,805 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 32 states and 80 transitions. [2018-11-18 23:03:46,656 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 80 edges. 75 inductive. 0 not inductive. 5 times theorem prover too weak to decide inductivity. [2018-11-18 23:03:46,658 INFO L225 Difference]: With dead ends: 121 [2018-11-18 23:03:46,658 INFO L226 Difference]: Without dead ends: 73 [2018-11-18 23:03:46,659 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 111 GetRequests, 52 SyntacticMatches, 7 SemanticMatches, 52 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 824 ImplicationChecksByTransitivity, 76.9s TimeCoverageRelationStatistics Valid=396, Invalid=2432, Unknown=34, NotChecked=0, Total=2862 [2018-11-18 23:03:46,660 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 73 states. [2018-11-18 23:03:46,803 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 73 to 73. [2018-11-18 23:03:46,803 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-18 23:03:46,803 INFO L82 GeneralOperation]: Start isEquivalent. First operand 73 states. Second operand 73 states. [2018-11-18 23:03:46,804 INFO L74 IsIncluded]: Start isIncluded. First operand 73 states. Second operand 73 states. [2018-11-18 23:03:46,804 INFO L87 Difference]: Start difference. First operand 73 states. Second operand 73 states. [2018-11-18 23:03:46,807 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:03:46,807 INFO L93 Difference]: Finished difference Result 73 states and 74 transitions. [2018-11-18 23:03:46,808 INFO L276 IsEmpty]: Start isEmpty. Operand 73 states and 74 transitions. [2018-11-18 23:03:46,808 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-18 23:03:46,808 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-18 23:03:46,808 INFO L74 IsIncluded]: Start isIncluded. First operand 73 states. Second operand 73 states. [2018-11-18 23:03:46,808 INFO L87 Difference]: Start difference. First operand 73 states. Second operand 73 states. [2018-11-18 23:03:46,809 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:03:46,810 INFO L93 Difference]: Finished difference Result 73 states and 74 transitions. [2018-11-18 23:03:46,810 INFO L276 IsEmpty]: Start isEmpty. Operand 73 states and 74 transitions. [2018-11-18 23:03:46,810 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-18 23:03:46,810 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-18 23:03:46,810 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-18 23:03:46,810 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-18 23:03:46,811 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 73 states. [2018-11-18 23:03:46,812 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 73 states to 73 states and 74 transitions. [2018-11-18 23:03:46,812 INFO L78 Accepts]: Start accepts. Automaton has 73 states and 74 transitions. Word has length 67 [2018-11-18 23:03:46,812 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-18 23:03:46,813 INFO L480 AbstractCegarLoop]: Abstraction has 73 states and 74 transitions. [2018-11-18 23:03:46,813 INFO L481 AbstractCegarLoop]: Interpolant automaton has 30 states. [2018-11-18 23:03:46,813 INFO L276 IsEmpty]: Start isEmpty. Operand 73 states and 74 transitions. [2018-11-18 23:03:46,813 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 71 [2018-11-18 23:03:46,814 INFO L367 BasicCegarLoop]: Found error trace [2018-11-18 23:03:46,814 INFO L375 BasicCegarLoop]: trace histogram [7, 7, 6, 5, 5, 5, 5, 4, 4, 4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 23:03:46,814 INFO L423 AbstractCegarLoop]: === Iteration 10 === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-18 23:03:46,814 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 23:03:46,814 INFO L82 PathProgramCache]: Analyzing trace with hash -1844930798, now seen corresponding path program 7 times [2018-11-18 23:03:46,814 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 23:03:46,815 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 23:03:46,815 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 23:03:46,815 INFO L101 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2018-11-18 23:03:46,816 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 23:03:46,832 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 23:03:47,766 INFO L256 TraceCheckUtils]: 0: Hoare triple {3508#true} call ULTIMATE.init(); {3508#true} is VALID [2018-11-18 23:03:47,766 INFO L273 TraceCheckUtils]: 1: Hoare triple {3508#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0]; {3508#true} is VALID [2018-11-18 23:03:47,767 INFO L273 TraceCheckUtils]: 2: Hoare triple {3508#true} assume true; {3508#true} is VALID [2018-11-18 23:03:47,767 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {3508#true} {3508#true} #51#return; {3508#true} is VALID [2018-11-18 23:03:47,767 INFO L256 TraceCheckUtils]: 4: Hoare triple {3508#true} call #t~ret4 := main(); {3508#true} is VALID [2018-11-18 23:03:47,768 INFO L273 TraceCheckUtils]: 5: Hoare triple {3508#true} call ~#aa~0.base, ~#aa~0.offset := #Ultimate.alloc(400000);~a~0 := 0; {3510#(= main_~a~0 0)} is VALID [2018-11-18 23:03:47,768 INFO L273 TraceCheckUtils]: 6: Hoare triple {3510#(= main_~a~0 0)} assume true; {3510#(= main_~a~0 0)} is VALID [2018-11-18 23:03:47,769 INFO L273 TraceCheckUtils]: 7: Hoare triple {3510#(= main_~a~0 0)} call #t~mem0 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~a~0, 4); {3510#(= main_~a~0 0)} is VALID [2018-11-18 23:03:47,769 INFO L273 TraceCheckUtils]: 8: Hoare triple {3510#(= main_~a~0 0)} assume !!(#t~mem0 >= 0);havoc #t~mem0;#t~post1 := ~a~0;~a~0 := 1 + #t~post1;havoc #t~post1; {3511#(and (<= 1 main_~a~0) (<= main_~a~0 1))} is VALID [2018-11-18 23:03:47,770 INFO L273 TraceCheckUtils]: 9: Hoare triple {3511#(and (<= 1 main_~a~0) (<= main_~a~0 1))} assume true; {3511#(and (<= 1 main_~a~0) (<= main_~a~0 1))} is VALID [2018-11-18 23:03:47,770 INFO L273 TraceCheckUtils]: 10: Hoare triple {3511#(and (<= 1 main_~a~0) (<= main_~a~0 1))} call #t~mem0 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~a~0, 4); {3511#(and (<= 1 main_~a~0) (<= main_~a~0 1))} is VALID [2018-11-18 23:03:47,771 INFO L273 TraceCheckUtils]: 11: Hoare triple {3511#(and (<= 1 main_~a~0) (<= main_~a~0 1))} assume !!(#t~mem0 >= 0);havoc #t~mem0;#t~post1 := ~a~0;~a~0 := 1 + #t~post1;havoc #t~post1; {3512#(and (<= 2 main_~a~0) (<= main_~a~0 2))} is VALID [2018-11-18 23:03:47,771 INFO L273 TraceCheckUtils]: 12: Hoare triple {3512#(and (<= 2 main_~a~0) (<= main_~a~0 2))} assume true; {3512#(and (<= 2 main_~a~0) (<= main_~a~0 2))} is VALID [2018-11-18 23:03:47,772 INFO L273 TraceCheckUtils]: 13: Hoare triple {3512#(and (<= 2 main_~a~0) (<= main_~a~0 2))} call #t~mem0 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~a~0, 4); {3512#(and (<= 2 main_~a~0) (<= main_~a~0 2))} is VALID [2018-11-18 23:03:47,773 INFO L273 TraceCheckUtils]: 14: Hoare triple {3512#(and (<= 2 main_~a~0) (<= main_~a~0 2))} assume !!(#t~mem0 >= 0);havoc #t~mem0;#t~post1 := ~a~0;~a~0 := 1 + #t~post1;havoc #t~post1; {3513#(and (<= main_~a~0 3) (<= 3 main_~a~0))} is VALID [2018-11-18 23:03:47,773 INFO L273 TraceCheckUtils]: 15: Hoare triple {3513#(and (<= main_~a~0 3) (<= 3 main_~a~0))} assume true; {3513#(and (<= main_~a~0 3) (<= 3 main_~a~0))} is VALID [2018-11-18 23:03:47,774 INFO L273 TraceCheckUtils]: 16: Hoare triple {3513#(and (<= main_~a~0 3) (<= 3 main_~a~0))} call #t~mem0 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~a~0, 4); {3513#(and (<= main_~a~0 3) (<= 3 main_~a~0))} is VALID [2018-11-18 23:03:47,775 INFO L273 TraceCheckUtils]: 17: Hoare triple {3513#(and (<= main_~a~0 3) (<= 3 main_~a~0))} assume !!(#t~mem0 >= 0);havoc #t~mem0;#t~post1 := ~a~0;~a~0 := 1 + #t~post1;havoc #t~post1; {3514#(and (<= 4 main_~a~0) (<= main_~a~0 4))} is VALID [2018-11-18 23:03:47,776 INFO L273 TraceCheckUtils]: 18: Hoare triple {3514#(and (<= 4 main_~a~0) (<= main_~a~0 4))} assume true; {3514#(and (<= 4 main_~a~0) (<= main_~a~0 4))} is VALID [2018-11-18 23:03:47,776 INFO L273 TraceCheckUtils]: 19: Hoare triple {3514#(and (<= 4 main_~a~0) (<= main_~a~0 4))} call #t~mem0 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~a~0, 4); {3515#(and (<= 4 main_~a~0) (= |main_#t~mem0| (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 main_~a~0) |main_~#aa~0.offset|))) (<= main_~a~0 4))} is VALID [2018-11-18 23:03:47,777 INFO L273 TraceCheckUtils]: 20: Hoare triple {3515#(and (<= 4 main_~a~0) (= |main_#t~mem0| (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 main_~a~0) |main_~#aa~0.offset|))) (<= main_~a~0 4))} assume !!(#t~mem0 >= 0);havoc #t~mem0;#t~post1 := ~a~0;~a~0 := 1 + #t~post1;havoc #t~post1; {3516#(<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 4))))} is VALID [2018-11-18 23:03:47,778 INFO L273 TraceCheckUtils]: 21: Hoare triple {3516#(<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 4))))} assume true; {3516#(<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 4))))} is VALID [2018-11-18 23:03:47,778 INFO L273 TraceCheckUtils]: 22: Hoare triple {3516#(<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 4))))} call #t~mem0 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~a~0, 4); {3516#(<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 4))))} is VALID [2018-11-18 23:03:47,779 INFO L273 TraceCheckUtils]: 23: Hoare triple {3516#(<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 4))))} assume !!(#t~mem0 >= 0);havoc #t~mem0;#t~post1 := ~a~0;~a~0 := 1 + #t~post1;havoc #t~post1; {3516#(<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 4))))} is VALID [2018-11-18 23:03:47,779 INFO L273 TraceCheckUtils]: 24: Hoare triple {3516#(<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 4))))} assume true; {3516#(<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 4))))} is VALID [2018-11-18 23:03:47,780 INFO L273 TraceCheckUtils]: 25: Hoare triple {3516#(<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 4))))} call #t~mem0 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~a~0, 4); {3516#(<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 4))))} is VALID [2018-11-18 23:03:47,780 INFO L273 TraceCheckUtils]: 26: Hoare triple {3516#(<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 4))))} assume !(#t~mem0 >= 0);havoc #t~mem0; {3516#(<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 4))))} is VALID [2018-11-18 23:03:47,781 INFO L273 TraceCheckUtils]: 27: Hoare triple {3516#(<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 4))))} havoc ~x~0;~x~0 := 0; {3517#(and (= main_~x~0 0) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 4)))))} is VALID [2018-11-18 23:03:47,782 INFO L273 TraceCheckUtils]: 28: Hoare triple {3517#(and (= main_~x~0 0) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 4)))))} assume true; {3517#(and (= main_~x~0 0) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 4)))))} is VALID [2018-11-18 23:03:47,782 INFO L273 TraceCheckUtils]: 29: Hoare triple {3517#(and (= main_~x~0 0) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 4)))))} assume !!(~x~0 < ~a~0);call #t~mem3 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~x~0, 4); {3517#(and (= main_~x~0 0) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 4)))))} is VALID [2018-11-18 23:03:47,783 INFO L256 TraceCheckUtils]: 30: Hoare triple {3517#(and (= main_~x~0 0) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 4)))))} call __VERIFIER_assert((if #t~mem3 >= 0 then 1 else 0)); {3508#true} is VALID [2018-11-18 23:03:47,783 INFO L273 TraceCheckUtils]: 31: Hoare triple {3508#true} ~cond := #in~cond; {3518#(= __VERIFIER_assert_~cond |__VERIFIER_assert_#in~cond|)} is VALID [2018-11-18 23:03:47,784 INFO L273 TraceCheckUtils]: 32: Hoare triple {3518#(= __VERIFIER_assert_~cond |__VERIFIER_assert_#in~cond|)} assume !(0 == ~cond); {3519#(not (= |__VERIFIER_assert_#in~cond| 0))} is VALID [2018-11-18 23:03:47,784 INFO L273 TraceCheckUtils]: 33: Hoare triple {3519#(not (= |__VERIFIER_assert_#in~cond| 0))} assume true; {3519#(not (= |__VERIFIER_assert_#in~cond| 0))} is VALID [2018-11-18 23:03:47,785 INFO L268 TraceCheckUtils]: 34: Hoare quadruple {3519#(not (= |__VERIFIER_assert_#in~cond| 0))} {3517#(and (= main_~x~0 0) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 4)))))} #55#return; {3517#(and (= main_~x~0 0) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 4)))))} is VALID [2018-11-18 23:03:47,786 INFO L273 TraceCheckUtils]: 35: Hoare triple {3517#(and (= main_~x~0 0) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 4)))))} havoc #t~mem3; {3517#(and (= main_~x~0 0) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 4)))))} is VALID [2018-11-18 23:03:47,787 INFO L273 TraceCheckUtils]: 36: Hoare triple {3517#(and (= main_~x~0 0) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 4)))))} #t~post2 := ~x~0;~x~0 := 1 + #t~post2;havoc #t~post2; {3520#(<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~x~0 3)))))} is VALID [2018-11-18 23:03:47,788 INFO L273 TraceCheckUtils]: 37: Hoare triple {3520#(<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~x~0 3)))))} assume true; {3520#(<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~x~0 3)))))} is VALID [2018-11-18 23:03:47,788 INFO L273 TraceCheckUtils]: 38: Hoare triple {3520#(<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~x~0 3)))))} assume !!(~x~0 < ~a~0);call #t~mem3 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~x~0, 4); {3520#(<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~x~0 3)))))} is VALID [2018-11-18 23:03:47,788 INFO L256 TraceCheckUtils]: 39: Hoare triple {3520#(<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~x~0 3)))))} call __VERIFIER_assert((if #t~mem3 >= 0 then 1 else 0)); {3508#true} is VALID [2018-11-18 23:03:47,789 INFO L273 TraceCheckUtils]: 40: Hoare triple {3508#true} ~cond := #in~cond; {3508#true} is VALID [2018-11-18 23:03:47,789 INFO L273 TraceCheckUtils]: 41: Hoare triple {3508#true} assume !(0 == ~cond); {3508#true} is VALID [2018-11-18 23:03:47,789 INFO L273 TraceCheckUtils]: 42: Hoare triple {3508#true} assume true; {3508#true} is VALID [2018-11-18 23:03:47,790 INFO L268 TraceCheckUtils]: 43: Hoare quadruple {3508#true} {3520#(<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~x~0 3)))))} #55#return; {3520#(<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~x~0 3)))))} is VALID [2018-11-18 23:03:47,790 INFO L273 TraceCheckUtils]: 44: Hoare triple {3520#(<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~x~0 3)))))} havoc #t~mem3; {3520#(<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~x~0 3)))))} is VALID [2018-11-18 23:03:47,791 INFO L273 TraceCheckUtils]: 45: Hoare triple {3520#(<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~x~0 3)))))} #t~post2 := ~x~0;~x~0 := 1 + #t~post2;havoc #t~post2; {3521#(<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~x~0 2)))))} is VALID [2018-11-18 23:03:47,791 INFO L273 TraceCheckUtils]: 46: Hoare triple {3521#(<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~x~0 2)))))} assume true; {3521#(<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~x~0 2)))))} is VALID [2018-11-18 23:03:47,792 INFO L273 TraceCheckUtils]: 47: Hoare triple {3521#(<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~x~0 2)))))} assume !!(~x~0 < ~a~0);call #t~mem3 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~x~0, 4); {3521#(<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~x~0 2)))))} is VALID [2018-11-18 23:03:47,792 INFO L256 TraceCheckUtils]: 48: Hoare triple {3521#(<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~x~0 2)))))} call __VERIFIER_assert((if #t~mem3 >= 0 then 1 else 0)); {3508#true} is VALID [2018-11-18 23:03:47,792 INFO L273 TraceCheckUtils]: 49: Hoare triple {3508#true} ~cond := #in~cond; {3508#true} is VALID [2018-11-18 23:03:47,792 INFO L273 TraceCheckUtils]: 50: Hoare triple {3508#true} assume !(0 == ~cond); {3508#true} is VALID [2018-11-18 23:03:47,792 INFO L273 TraceCheckUtils]: 51: Hoare triple {3508#true} assume true; {3508#true} is VALID [2018-11-18 23:03:47,811 INFO L268 TraceCheckUtils]: 52: Hoare quadruple {3508#true} {3521#(<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~x~0 2)))))} #55#return; {3521#(<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~x~0 2)))))} is VALID [2018-11-18 23:03:47,816 INFO L273 TraceCheckUtils]: 53: Hoare triple {3521#(<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~x~0 2)))))} havoc #t~mem3; {3521#(<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~x~0 2)))))} is VALID [2018-11-18 23:03:47,817 INFO L273 TraceCheckUtils]: 54: Hoare triple {3521#(<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~x~0 2)))))} #t~post2 := ~x~0;~x~0 := 1 + #t~post2;havoc #t~post2; {3522#(<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~x~0 1)))))} is VALID [2018-11-18 23:03:47,817 INFO L273 TraceCheckUtils]: 55: Hoare triple {3522#(<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~x~0 1)))))} assume true; {3522#(<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~x~0 1)))))} is VALID [2018-11-18 23:03:47,818 INFO L273 TraceCheckUtils]: 56: Hoare triple {3522#(<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~x~0 1)))))} assume !!(~x~0 < ~a~0);call #t~mem3 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~x~0, 4); {3522#(<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~x~0 1)))))} is VALID [2018-11-18 23:03:47,818 INFO L256 TraceCheckUtils]: 57: Hoare triple {3522#(<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~x~0 1)))))} call __VERIFIER_assert((if #t~mem3 >= 0 then 1 else 0)); {3508#true} is VALID [2018-11-18 23:03:47,818 INFO L273 TraceCheckUtils]: 58: Hoare triple {3508#true} ~cond := #in~cond; {3508#true} is VALID [2018-11-18 23:03:47,818 INFO L273 TraceCheckUtils]: 59: Hoare triple {3508#true} assume !(0 == ~cond); {3508#true} is VALID [2018-11-18 23:03:47,818 INFO L273 TraceCheckUtils]: 60: Hoare triple {3508#true} assume true; {3508#true} is VALID [2018-11-18 23:03:47,819 INFO L268 TraceCheckUtils]: 61: Hoare quadruple {3508#true} {3522#(<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~x~0 1)))))} #55#return; {3522#(<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~x~0 1)))))} is VALID [2018-11-18 23:03:47,819 INFO L273 TraceCheckUtils]: 62: Hoare triple {3522#(<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~x~0 1)))))} havoc #t~mem3; {3522#(<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~x~0 1)))))} is VALID [2018-11-18 23:03:47,820 INFO L273 TraceCheckUtils]: 63: Hoare triple {3522#(<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~x~0 1)))))} #t~post2 := ~x~0;~x~0 := 1 + #t~post2;havoc #t~post2; {3523#(<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 main_~x~0) |main_~#aa~0.offset|)))} is VALID [2018-11-18 23:03:47,821 INFO L273 TraceCheckUtils]: 64: Hoare triple {3523#(<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 main_~x~0) |main_~#aa~0.offset|)))} assume true; {3523#(<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 main_~x~0) |main_~#aa~0.offset|)))} is VALID [2018-11-18 23:03:47,821 INFO L273 TraceCheckUtils]: 65: Hoare triple {3523#(<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 main_~x~0) |main_~#aa~0.offset|)))} assume !!(~x~0 < ~a~0);call #t~mem3 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~x~0, 4); {3524#(<= 0 |main_#t~mem3|)} is VALID [2018-11-18 23:03:47,822 INFO L256 TraceCheckUtils]: 66: Hoare triple {3524#(<= 0 |main_#t~mem3|)} call __VERIFIER_assert((if #t~mem3 >= 0 then 1 else 0)); {3519#(not (= |__VERIFIER_assert_#in~cond| 0))} is VALID [2018-11-18 23:03:47,823 INFO L273 TraceCheckUtils]: 67: Hoare triple {3519#(not (= |__VERIFIER_assert_#in~cond| 0))} ~cond := #in~cond; {3525#(not (= __VERIFIER_assert_~cond 0))} is VALID [2018-11-18 23:03:47,823 INFO L273 TraceCheckUtils]: 68: Hoare triple {3525#(not (= __VERIFIER_assert_~cond 0))} assume 0 == ~cond; {3509#false} is VALID [2018-11-18 23:03:47,823 INFO L273 TraceCheckUtils]: 69: Hoare triple {3509#false} assume !false; {3509#false} is VALID [2018-11-18 23:03:47,833 INFO L134 CoverageAnalysis]: Checked inductivity of 137 backedges. 7 proven. 112 refuted. 0 times theorem prover too weak. 18 trivial. 0 not checked. [2018-11-18 23:03:47,833 INFO L300 seRefinementStrategy]: The current sequences of interpolants are not accepted, trying to find more. [2018-11-18 23:03:47,833 INFO L223 ckRefinementStrategy]: Switched to mode Z3_FP No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 Starting monitored process 9 with z3 -smt2 -in SMTLIB2_COMPLIANT=true -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 9 with z3 -smt2 -in SMTLIB2_COMPLIANT=true -t:12000 [2018-11-18 23:03:47,845 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 23:03:47,868 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 23:03:47,883 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 23:03:47,885 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-18 23:03:48,822 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 11 [2018-11-18 23:03:48,826 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2018-11-18 23:03:48,830 INFO L267 ElimStorePlain]: Start of recursive call 3: End of recursive call: and 1 xjuncts. [2018-11-18 23:03:48,832 INFO L267 ElimStorePlain]: Start of recursive call 2: 1 dim-1 vars, End of recursive call: and 1 xjuncts. [2018-11-18 23:03:48,833 INFO L267 ElimStorePlain]: Start of recursive call 1: 1 dim-0 vars, 1 dim-2 vars, End of recursive call: and 1 xjuncts. [2018-11-18 23:03:48,833 INFO L202 ElimStorePlain]: Needed 3 recursive calls to eliminate 2 variables, input treesize:15, output treesize:3 [2018-11-18 23:03:48,838 WARN L383 uantifierElimination]: Trying to double check SDD result, but SMT solver's response was UNKNOWN. [2018-11-18 23:03:48,892 INFO L256 TraceCheckUtils]: 0: Hoare triple {3508#true} call ULTIMATE.init(); {3508#true} is VALID [2018-11-18 23:03:48,892 INFO L273 TraceCheckUtils]: 1: Hoare triple {3508#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0]; {3508#true} is VALID [2018-11-18 23:03:48,892 INFO L273 TraceCheckUtils]: 2: Hoare triple {3508#true} assume true; {3508#true} is VALID [2018-11-18 23:03:48,892 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {3508#true} {3508#true} #51#return; {3508#true} is VALID [2018-11-18 23:03:48,892 INFO L256 TraceCheckUtils]: 4: Hoare triple {3508#true} call #t~ret4 := main(); {3508#true} is VALID [2018-11-18 23:03:48,893 INFO L273 TraceCheckUtils]: 5: Hoare triple {3508#true} call ~#aa~0.base, ~#aa~0.offset := #Ultimate.alloc(400000);~a~0 := 0; {3544#(and (= 0 |main_~#aa~0.offset|) (= main_~a~0 0))} is VALID [2018-11-18 23:03:48,894 INFO L273 TraceCheckUtils]: 6: Hoare triple {3544#(and (= 0 |main_~#aa~0.offset|) (= main_~a~0 0))} assume true; {3544#(and (= 0 |main_~#aa~0.offset|) (= main_~a~0 0))} is VALID [2018-11-18 23:03:48,894 INFO L273 TraceCheckUtils]: 7: Hoare triple {3544#(and (= 0 |main_~#aa~0.offset|) (= main_~a~0 0))} call #t~mem0 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~a~0, 4); {3544#(and (= 0 |main_~#aa~0.offset|) (= main_~a~0 0))} is VALID [2018-11-18 23:03:48,895 INFO L273 TraceCheckUtils]: 8: Hoare triple {3544#(and (= 0 |main_~#aa~0.offset|) (= main_~a~0 0))} assume !!(#t~mem0 >= 0);havoc #t~mem0;#t~post1 := ~a~0;~a~0 := 1 + #t~post1;havoc #t~post1; {3554#(and (= 0 |main_~#aa~0.offset|) (= main_~a~0 1))} is VALID [2018-11-18 23:03:48,896 INFO L273 TraceCheckUtils]: 9: Hoare triple {3554#(and (= 0 |main_~#aa~0.offset|) (= main_~a~0 1))} assume true; {3554#(and (= 0 |main_~#aa~0.offset|) (= main_~a~0 1))} is VALID [2018-11-18 23:03:48,897 INFO L273 TraceCheckUtils]: 10: Hoare triple {3554#(and (= 0 |main_~#aa~0.offset|) (= main_~a~0 1))} call #t~mem0 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~a~0, 4); {3554#(and (= 0 |main_~#aa~0.offset|) (= main_~a~0 1))} is VALID [2018-11-18 23:03:48,897 INFO L273 TraceCheckUtils]: 11: Hoare triple {3554#(and (= 0 |main_~#aa~0.offset|) (= main_~a~0 1))} assume !!(#t~mem0 >= 0);havoc #t~mem0;#t~post1 := ~a~0;~a~0 := 1 + #t~post1;havoc #t~post1; {3564#(and (= main_~a~0 2) (= 0 |main_~#aa~0.offset|))} is VALID [2018-11-18 23:03:48,898 INFO L273 TraceCheckUtils]: 12: Hoare triple {3564#(and (= main_~a~0 2) (= 0 |main_~#aa~0.offset|))} assume true; {3564#(and (= main_~a~0 2) (= 0 |main_~#aa~0.offset|))} is VALID [2018-11-18 23:03:48,899 INFO L273 TraceCheckUtils]: 13: Hoare triple {3564#(and (= main_~a~0 2) (= 0 |main_~#aa~0.offset|))} call #t~mem0 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~a~0, 4); {3564#(and (= main_~a~0 2) (= 0 |main_~#aa~0.offset|))} is VALID [2018-11-18 23:03:48,899 INFO L273 TraceCheckUtils]: 14: Hoare triple {3564#(and (= main_~a~0 2) (= 0 |main_~#aa~0.offset|))} assume !!(#t~mem0 >= 0);havoc #t~mem0;#t~post1 := ~a~0;~a~0 := 1 + #t~post1;havoc #t~post1; {3574#(and (= 0 |main_~#aa~0.offset|) (= main_~a~0 3))} is VALID [2018-11-18 23:03:48,900 INFO L273 TraceCheckUtils]: 15: Hoare triple {3574#(and (= 0 |main_~#aa~0.offset|) (= main_~a~0 3))} assume true; {3574#(and (= 0 |main_~#aa~0.offset|) (= main_~a~0 3))} is VALID [2018-11-18 23:03:48,901 INFO L273 TraceCheckUtils]: 16: Hoare triple {3574#(and (= 0 |main_~#aa~0.offset|) (= main_~a~0 3))} call #t~mem0 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~a~0, 4); {3574#(and (= 0 |main_~#aa~0.offset|) (= main_~a~0 3))} is VALID [2018-11-18 23:03:48,901 INFO L273 TraceCheckUtils]: 17: Hoare triple {3574#(and (= 0 |main_~#aa~0.offset|) (= main_~a~0 3))} assume !!(#t~mem0 >= 0);havoc #t~mem0;#t~post1 := ~a~0;~a~0 := 1 + #t~post1;havoc #t~post1; {3584#(and (= 0 |main_~#aa~0.offset|) (= main_~a~0 4))} is VALID [2018-11-18 23:03:48,902 INFO L273 TraceCheckUtils]: 18: Hoare triple {3584#(and (= 0 |main_~#aa~0.offset|) (= main_~a~0 4))} assume true; {3584#(and (= 0 |main_~#aa~0.offset|) (= main_~a~0 4))} is VALID [2018-11-18 23:03:48,903 INFO L273 TraceCheckUtils]: 19: Hoare triple {3584#(and (= 0 |main_~#aa~0.offset|) (= main_~a~0 4))} call #t~mem0 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~a~0, 4); {3591#(and (= 0 |main_~#aa~0.offset|) (<= |main_#t~mem0| (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 16))))} is VALID [2018-11-18 23:03:48,904 INFO L273 TraceCheckUtils]: 20: Hoare triple {3591#(and (= 0 |main_~#aa~0.offset|) (<= |main_#t~mem0| (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 16))))} assume !!(#t~mem0 >= 0);havoc #t~mem0;#t~post1 := ~a~0;~a~0 := 1 + #t~post1;havoc #t~post1; {3595#(and (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 16))) (= 0 |main_~#aa~0.offset|))} is VALID [2018-11-18 23:03:48,904 INFO L273 TraceCheckUtils]: 21: Hoare triple {3595#(and (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 16))) (= 0 |main_~#aa~0.offset|))} assume true; {3595#(and (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 16))) (= 0 |main_~#aa~0.offset|))} is VALID [2018-11-18 23:03:48,905 INFO L273 TraceCheckUtils]: 22: Hoare triple {3595#(and (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 16))) (= 0 |main_~#aa~0.offset|))} call #t~mem0 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~a~0, 4); {3595#(and (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 16))) (= 0 |main_~#aa~0.offset|))} is VALID [2018-11-18 23:03:48,906 INFO L273 TraceCheckUtils]: 23: Hoare triple {3595#(and (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 16))) (= 0 |main_~#aa~0.offset|))} assume !!(#t~mem0 >= 0);havoc #t~mem0;#t~post1 := ~a~0;~a~0 := 1 + #t~post1;havoc #t~post1; {3595#(and (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 16))) (= 0 |main_~#aa~0.offset|))} is VALID [2018-11-18 23:03:48,906 INFO L273 TraceCheckUtils]: 24: Hoare triple {3595#(and (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 16))) (= 0 |main_~#aa~0.offset|))} assume true; {3595#(and (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 16))) (= 0 |main_~#aa~0.offset|))} is VALID [2018-11-18 23:03:48,907 INFO L273 TraceCheckUtils]: 25: Hoare triple {3595#(and (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 16))) (= 0 |main_~#aa~0.offset|))} call #t~mem0 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~a~0, 4); {3595#(and (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 16))) (= 0 |main_~#aa~0.offset|))} is VALID [2018-11-18 23:03:48,908 INFO L273 TraceCheckUtils]: 26: Hoare triple {3595#(and (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 16))) (= 0 |main_~#aa~0.offset|))} assume !(#t~mem0 >= 0);havoc #t~mem0; {3595#(and (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 16))) (= 0 |main_~#aa~0.offset|))} is VALID [2018-11-18 23:03:48,909 INFO L273 TraceCheckUtils]: 27: Hoare triple {3595#(and (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 16))) (= 0 |main_~#aa~0.offset|))} havoc ~x~0;~x~0 := 0; {3617#(and (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 16))) (= 0 |main_~#aa~0.offset|) (= main_~x~0 0))} is VALID [2018-11-18 23:03:48,909 INFO L273 TraceCheckUtils]: 28: Hoare triple {3617#(and (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 16))) (= 0 |main_~#aa~0.offset|) (= main_~x~0 0))} assume true; {3617#(and (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 16))) (= 0 |main_~#aa~0.offset|) (= main_~x~0 0))} is VALID [2018-11-18 23:03:48,910 INFO L273 TraceCheckUtils]: 29: Hoare triple {3617#(and (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 16))) (= 0 |main_~#aa~0.offset|) (= main_~x~0 0))} assume !!(~x~0 < ~a~0);call #t~mem3 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~x~0, 4); {3617#(and (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 16))) (= 0 |main_~#aa~0.offset|) (= main_~x~0 0))} is VALID [2018-11-18 23:03:48,912 INFO L256 TraceCheckUtils]: 30: Hoare triple {3617#(and (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 16))) (= 0 |main_~#aa~0.offset|) (= main_~x~0 0))} call __VERIFIER_assert((if #t~mem3 >= 0 then 1 else 0)); {3627#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_13| Int)) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_13|) 16)))} is VALID [2018-11-18 23:03:48,913 INFO L273 TraceCheckUtils]: 31: Hoare triple {3627#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_13| Int)) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_13|) 16)))} ~cond := #in~cond; {3631#(and (exists ((|v_main_~#aa~0.base_BEFORE_CALL_13| Int)) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_13|) 16))) (= |__VERIFIER_assert_#in~cond| __VERIFIER_assert_~cond))} is VALID [2018-11-18 23:03:48,913 INFO L273 TraceCheckUtils]: 32: Hoare triple {3631#(and (exists ((|v_main_~#aa~0.base_BEFORE_CALL_13| Int)) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_13|) 16))) (= |__VERIFIER_assert_#in~cond| __VERIFIER_assert_~cond))} assume !(0 == ~cond); {3635#(and (not (= |__VERIFIER_assert_#in~cond| 0)) (exists ((|v_main_~#aa~0.base_BEFORE_CALL_13| Int)) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_13|) 16))))} is VALID [2018-11-18 23:03:48,914 INFO L273 TraceCheckUtils]: 33: Hoare triple {3635#(and (not (= |__VERIFIER_assert_#in~cond| 0)) (exists ((|v_main_~#aa~0.base_BEFORE_CALL_13| Int)) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_13|) 16))))} assume true; {3635#(and (not (= |__VERIFIER_assert_#in~cond| 0)) (exists ((|v_main_~#aa~0.base_BEFORE_CALL_13| Int)) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_13|) 16))))} is VALID [2018-11-18 23:03:48,915 INFO L268 TraceCheckUtils]: 34: Hoare quadruple {3635#(and (not (= |__VERIFIER_assert_#in~cond| 0)) (exists ((|v_main_~#aa~0.base_BEFORE_CALL_13| Int)) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_13|) 16))))} {3617#(and (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 16))) (= 0 |main_~#aa~0.offset|) (= main_~x~0 0))} #55#return; {3617#(and (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 16))) (= 0 |main_~#aa~0.offset|) (= main_~x~0 0))} is VALID [2018-11-18 23:03:48,916 INFO L273 TraceCheckUtils]: 35: Hoare triple {3617#(and (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 16))) (= 0 |main_~#aa~0.offset|) (= main_~x~0 0))} havoc #t~mem3; {3617#(and (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 16))) (= 0 |main_~#aa~0.offset|) (= main_~x~0 0))} is VALID [2018-11-18 23:03:48,916 INFO L273 TraceCheckUtils]: 36: Hoare triple {3617#(and (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 16))) (= 0 |main_~#aa~0.offset|) (= main_~x~0 0))} #t~post2 := ~x~0;~x~0 := 1 + #t~post2;havoc #t~post2; {3648#(and (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 16))) (= main_~x~0 1) (= 0 |main_~#aa~0.offset|))} is VALID [2018-11-18 23:03:48,917 INFO L273 TraceCheckUtils]: 37: Hoare triple {3648#(and (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 16))) (= main_~x~0 1) (= 0 |main_~#aa~0.offset|))} assume true; {3648#(and (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 16))) (= main_~x~0 1) (= 0 |main_~#aa~0.offset|))} is VALID [2018-11-18 23:03:48,918 INFO L273 TraceCheckUtils]: 38: Hoare triple {3648#(and (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 16))) (= main_~x~0 1) (= 0 |main_~#aa~0.offset|))} assume !!(~x~0 < ~a~0);call #t~mem3 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~x~0, 4); {3648#(and (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 16))) (= main_~x~0 1) (= 0 |main_~#aa~0.offset|))} is VALID [2018-11-18 23:03:48,919 INFO L256 TraceCheckUtils]: 39: Hoare triple {3648#(and (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 16))) (= main_~x~0 1) (= 0 |main_~#aa~0.offset|))} call __VERIFIER_assert((if #t~mem3 >= 0 then 1 else 0)); {3627#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_13| Int)) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_13|) 16)))} is VALID [2018-11-18 23:03:48,920 INFO L273 TraceCheckUtils]: 40: Hoare triple {3627#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_13| Int)) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_13|) 16)))} ~cond := #in~cond; {3627#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_13| Int)) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_13|) 16)))} is VALID [2018-11-18 23:03:48,920 INFO L273 TraceCheckUtils]: 41: Hoare triple {3627#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_13| Int)) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_13|) 16)))} assume !(0 == ~cond); {3627#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_13| Int)) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_13|) 16)))} is VALID [2018-11-18 23:03:48,921 INFO L273 TraceCheckUtils]: 42: Hoare triple {3627#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_13| Int)) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_13|) 16)))} assume true; {3627#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_13| Int)) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_13|) 16)))} is VALID [2018-11-18 23:03:48,922 INFO L268 TraceCheckUtils]: 43: Hoare quadruple {3627#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_13| Int)) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_13|) 16)))} {3648#(and (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 16))) (= main_~x~0 1) (= 0 |main_~#aa~0.offset|))} #55#return; {3648#(and (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 16))) (= main_~x~0 1) (= 0 |main_~#aa~0.offset|))} is VALID [2018-11-18 23:03:48,922 INFO L273 TraceCheckUtils]: 44: Hoare triple {3648#(and (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 16))) (= main_~x~0 1) (= 0 |main_~#aa~0.offset|))} havoc #t~mem3; {3648#(and (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 16))) (= main_~x~0 1) (= 0 |main_~#aa~0.offset|))} is VALID [2018-11-18 23:03:48,923 INFO L273 TraceCheckUtils]: 45: Hoare triple {3648#(and (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 16))) (= main_~x~0 1) (= 0 |main_~#aa~0.offset|))} #t~post2 := ~x~0;~x~0 := 1 + #t~post2;havoc #t~post2; {3676#(and (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 16))) (= main_~x~0 2) (= 0 |main_~#aa~0.offset|))} is VALID [2018-11-18 23:03:48,924 INFO L273 TraceCheckUtils]: 46: Hoare triple {3676#(and (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 16))) (= main_~x~0 2) (= 0 |main_~#aa~0.offset|))} assume true; {3676#(and (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 16))) (= main_~x~0 2) (= 0 |main_~#aa~0.offset|))} is VALID [2018-11-18 23:03:48,925 INFO L273 TraceCheckUtils]: 47: Hoare triple {3676#(and (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 16))) (= main_~x~0 2) (= 0 |main_~#aa~0.offset|))} assume !!(~x~0 < ~a~0);call #t~mem3 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~x~0, 4); {3676#(and (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 16))) (= main_~x~0 2) (= 0 |main_~#aa~0.offset|))} is VALID [2018-11-18 23:03:48,926 INFO L256 TraceCheckUtils]: 48: Hoare triple {3676#(and (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 16))) (= main_~x~0 2) (= 0 |main_~#aa~0.offset|))} call __VERIFIER_assert((if #t~mem3 >= 0 then 1 else 0)); {3627#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_13| Int)) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_13|) 16)))} is VALID [2018-11-18 23:03:48,927 INFO L273 TraceCheckUtils]: 49: Hoare triple {3627#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_13| Int)) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_13|) 16)))} ~cond := #in~cond; {3627#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_13| Int)) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_13|) 16)))} is VALID [2018-11-18 23:03:48,927 INFO L273 TraceCheckUtils]: 50: Hoare triple {3627#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_13| Int)) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_13|) 16)))} assume !(0 == ~cond); {3627#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_13| Int)) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_13|) 16)))} is VALID [2018-11-18 23:03:48,928 INFO L273 TraceCheckUtils]: 51: Hoare triple {3627#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_13| Int)) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_13|) 16)))} assume true; {3627#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_13| Int)) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_13|) 16)))} is VALID [2018-11-18 23:03:48,929 INFO L268 TraceCheckUtils]: 52: Hoare quadruple {3627#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_13| Int)) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_13|) 16)))} {3676#(and (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 16))) (= main_~x~0 2) (= 0 |main_~#aa~0.offset|))} #55#return; {3676#(and (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 16))) (= main_~x~0 2) (= 0 |main_~#aa~0.offset|))} is VALID [2018-11-18 23:03:48,930 INFO L273 TraceCheckUtils]: 53: Hoare triple {3676#(and (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 16))) (= main_~x~0 2) (= 0 |main_~#aa~0.offset|))} havoc #t~mem3; {3676#(and (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 16))) (= main_~x~0 2) (= 0 |main_~#aa~0.offset|))} is VALID [2018-11-18 23:03:48,930 INFO L273 TraceCheckUtils]: 54: Hoare triple {3676#(and (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 16))) (= main_~x~0 2) (= 0 |main_~#aa~0.offset|))} #t~post2 := ~x~0;~x~0 := 1 + #t~post2;havoc #t~post2; {3704#(and (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 16))) (= 0 |main_~#aa~0.offset|) (= main_~x~0 3))} is VALID [2018-11-18 23:03:48,931 INFO L273 TraceCheckUtils]: 55: Hoare triple {3704#(and (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 16))) (= 0 |main_~#aa~0.offset|) (= main_~x~0 3))} assume true; {3704#(and (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 16))) (= 0 |main_~#aa~0.offset|) (= main_~x~0 3))} is VALID [2018-11-18 23:03:48,932 INFO L273 TraceCheckUtils]: 56: Hoare triple {3704#(and (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 16))) (= 0 |main_~#aa~0.offset|) (= main_~x~0 3))} assume !!(~x~0 < ~a~0);call #t~mem3 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~x~0, 4); {3704#(and (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 16))) (= 0 |main_~#aa~0.offset|) (= main_~x~0 3))} is VALID [2018-11-18 23:03:48,933 INFO L256 TraceCheckUtils]: 57: Hoare triple {3704#(and (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 16))) (= 0 |main_~#aa~0.offset|) (= main_~x~0 3))} call __VERIFIER_assert((if #t~mem3 >= 0 then 1 else 0)); {3627#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_13| Int)) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_13|) 16)))} is VALID [2018-11-18 23:03:48,934 INFO L273 TraceCheckUtils]: 58: Hoare triple {3627#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_13| Int)) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_13|) 16)))} ~cond := #in~cond; {3627#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_13| Int)) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_13|) 16)))} is VALID [2018-11-18 23:03:48,934 INFO L273 TraceCheckUtils]: 59: Hoare triple {3627#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_13| Int)) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_13|) 16)))} assume !(0 == ~cond); {3627#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_13| Int)) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_13|) 16)))} is VALID [2018-11-18 23:03:48,935 INFO L273 TraceCheckUtils]: 60: Hoare triple {3627#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_13| Int)) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_13|) 16)))} assume true; {3627#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_13| Int)) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_13|) 16)))} is VALID [2018-11-18 23:03:48,936 INFO L268 TraceCheckUtils]: 61: Hoare quadruple {3627#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_13| Int)) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_13|) 16)))} {3704#(and (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 16))) (= 0 |main_~#aa~0.offset|) (= main_~x~0 3))} #55#return; {3704#(and (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 16))) (= 0 |main_~#aa~0.offset|) (= main_~x~0 3))} is VALID [2018-11-18 23:03:48,936 INFO L273 TraceCheckUtils]: 62: Hoare triple {3704#(and (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 16))) (= 0 |main_~#aa~0.offset|) (= main_~x~0 3))} havoc #t~mem3; {3704#(and (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 16))) (= 0 |main_~#aa~0.offset|) (= main_~x~0 3))} is VALID [2018-11-18 23:03:48,937 INFO L273 TraceCheckUtils]: 63: Hoare triple {3704#(and (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 16))) (= 0 |main_~#aa~0.offset|) (= main_~x~0 3))} #t~post2 := ~x~0;~x~0 := 1 + #t~post2;havoc #t~post2; {3732#(and (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 16))) (= 0 |main_~#aa~0.offset|) (= main_~x~0 4))} is VALID [2018-11-18 23:03:48,938 INFO L273 TraceCheckUtils]: 64: Hoare triple {3732#(and (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 16))) (= 0 |main_~#aa~0.offset|) (= main_~x~0 4))} assume true; {3732#(and (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 16))) (= 0 |main_~#aa~0.offset|) (= main_~x~0 4))} is VALID [2018-11-18 23:03:48,939 INFO L273 TraceCheckUtils]: 65: Hoare triple {3732#(and (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 16))) (= 0 |main_~#aa~0.offset|) (= main_~x~0 4))} assume !!(~x~0 < ~a~0);call #t~mem3 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~x~0, 4); {3524#(<= 0 |main_#t~mem3|)} is VALID [2018-11-18 23:03:48,940 INFO L256 TraceCheckUtils]: 66: Hoare triple {3524#(<= 0 |main_#t~mem3|)} call __VERIFIER_assert((if #t~mem3 >= 0 then 1 else 0)); {3742#(= |__VERIFIER_assert_#in~cond| 1)} is VALID [2018-11-18 23:03:48,940 INFO L273 TraceCheckUtils]: 67: Hoare triple {3742#(= |__VERIFIER_assert_#in~cond| 1)} ~cond := #in~cond; {3746#(= 1 __VERIFIER_assert_~cond)} is VALID [2018-11-18 23:03:48,941 INFO L273 TraceCheckUtils]: 68: Hoare triple {3746#(= 1 __VERIFIER_assert_~cond)} assume 0 == ~cond; {3509#false} is VALID [2018-11-18 23:03:48,941 INFO L273 TraceCheckUtils]: 69: Hoare triple {3509#false} assume !false; {3509#false} is VALID [2018-11-18 23:03:48,954 INFO L134 CoverageAnalysis]: Checked inductivity of 137 backedges. 0 proven. 119 refuted. 0 times theorem prover too weak. 18 trivial. 0 not checked. [2018-11-18 23:03:48,975 INFO L312 seRefinementStrategy]: Constructing automaton from 0 perfect and 2 imperfect interpolant sequences. [2018-11-18 23:03:48,975 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [18, 20] total 35 [2018-11-18 23:03:48,976 INFO L78 Accepts]: Start accepts. Automaton has 35 states. Word has length 70 [2018-11-18 23:03:48,976 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-18 23:03:48,976 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 35 states. [2018-11-18 23:03:49,113 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 118 edges. 118 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-18 23:03:49,113 INFO L459 AbstractCegarLoop]: Interpolant automaton has 35 states [2018-11-18 23:03:49,114 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 35 interpolants. [2018-11-18 23:03:49,115 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=102, Invalid=1088, Unknown=0, NotChecked=0, Total=1190 [2018-11-18 23:03:49,115 INFO L87 Difference]: Start difference. First operand 73 states and 74 transitions. Second operand 35 states. [2018-11-18 23:03:56,429 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:03:56,429 INFO L93 Difference]: Finished difference Result 86 states and 87 transitions. [2018-11-18 23:03:56,429 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 25 states. [2018-11-18 23:03:56,430 INFO L78 Accepts]: Start accepts. Automaton has 35 states. Word has length 70 [2018-11-18 23:03:56,430 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-18 23:03:56,430 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 35 states. [2018-11-18 23:03:56,433 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 25 states to 25 states and 72 transitions. [2018-11-18 23:03:56,433 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 35 states. [2018-11-18 23:03:56,434 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 25 states to 25 states and 72 transitions. [2018-11-18 23:03:56,434 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 25 states and 72 transitions. [2018-11-18 23:03:56,514 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 72 edges. 72 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-18 23:03:56,516 INFO L225 Difference]: With dead ends: 86 [2018-11-18 23:03:56,516 INFO L226 Difference]: Without dead ends: 84 [2018-11-18 23:03:56,518 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 99 GetRequests, 49 SyntacticMatches, 7 SemanticMatches, 43 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 454 ImplicationChecksByTransitivity, 1.6s TimeCoverageRelationStatistics Valid=185, Invalid=1795, Unknown=0, NotChecked=0, Total=1980 [2018-11-18 23:03:56,518 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 84 states. [2018-11-18 23:03:56,811 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 84 to 82. [2018-11-18 23:03:56,811 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-18 23:03:56,811 INFO L82 GeneralOperation]: Start isEquivalent. First operand 84 states. Second operand 82 states. [2018-11-18 23:03:56,811 INFO L74 IsIncluded]: Start isIncluded. First operand 84 states. Second operand 82 states. [2018-11-18 23:03:56,811 INFO L87 Difference]: Start difference. First operand 84 states. Second operand 82 states. [2018-11-18 23:03:56,814 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:03:56,814 INFO L93 Difference]: Finished difference Result 84 states and 85 transitions. [2018-11-18 23:03:56,814 INFO L276 IsEmpty]: Start isEmpty. Operand 84 states and 85 transitions. [2018-11-18 23:03:56,815 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-18 23:03:56,815 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-18 23:03:56,815 INFO L74 IsIncluded]: Start isIncluded. First operand 82 states. Second operand 84 states. [2018-11-18 23:03:56,815 INFO L87 Difference]: Start difference. First operand 82 states. Second operand 84 states. [2018-11-18 23:03:56,817 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:03:56,817 INFO L93 Difference]: Finished difference Result 84 states and 85 transitions. [2018-11-18 23:03:56,817 INFO L276 IsEmpty]: Start isEmpty. Operand 84 states and 85 transitions. [2018-11-18 23:03:56,818 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-18 23:03:56,818 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-18 23:03:56,818 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-18 23:03:56,818 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-18 23:03:56,818 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 82 states. [2018-11-18 23:03:56,820 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 82 states to 82 states and 83 transitions. [2018-11-18 23:03:56,820 INFO L78 Accepts]: Start accepts. Automaton has 82 states and 83 transitions. Word has length 70 [2018-11-18 23:03:56,820 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-18 23:03:56,820 INFO L480 AbstractCegarLoop]: Abstraction has 82 states and 83 transitions. [2018-11-18 23:03:56,821 INFO L481 AbstractCegarLoop]: Interpolant automaton has 35 states. [2018-11-18 23:03:56,821 INFO L276 IsEmpty]: Start isEmpty. Operand 82 states and 83 transitions. [2018-11-18 23:03:56,821 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 80 [2018-11-18 23:03:56,822 INFO L367 BasicCegarLoop]: Found error trace [2018-11-18 23:03:56,822 INFO L375 BasicCegarLoop]: trace histogram [7, 7, 6, 6, 6, 6, 6, 5, 5, 5, 5, 5, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 23:03:56,822 INFO L423 AbstractCegarLoop]: === Iteration 11 === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-18 23:03:56,822 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 23:03:56,822 INFO L82 PathProgramCache]: Analyzing trace with hash -821168033, now seen corresponding path program 8 times [2018-11-18 23:03:56,822 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 23:03:56,823 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 23:03:56,823 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 23:03:56,823 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 23:03:56,824 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 23:03:56,841 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 23:03:57,206 INFO L256 TraceCheckUtils]: 0: Hoare triple {4166#true} call ULTIMATE.init(); {4166#true} is VALID [2018-11-18 23:03:57,206 INFO L273 TraceCheckUtils]: 1: Hoare triple {4166#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0]; {4166#true} is VALID [2018-11-18 23:03:57,207 INFO L273 TraceCheckUtils]: 2: Hoare triple {4166#true} assume true; {4166#true} is VALID [2018-11-18 23:03:57,207 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {4166#true} {4166#true} #51#return; {4166#true} is VALID [2018-11-18 23:03:57,207 INFO L256 TraceCheckUtils]: 4: Hoare triple {4166#true} call #t~ret4 := main(); {4166#true} is VALID [2018-11-18 23:03:57,228 INFO L273 TraceCheckUtils]: 5: Hoare triple {4166#true} call ~#aa~0.base, ~#aa~0.offset := #Ultimate.alloc(400000);~a~0 := 0; {4168#(= main_~a~0 0)} is VALID [2018-11-18 23:03:57,243 INFO L273 TraceCheckUtils]: 6: Hoare triple {4168#(= main_~a~0 0)} assume true; {4168#(= main_~a~0 0)} is VALID [2018-11-18 23:03:57,244 INFO L273 TraceCheckUtils]: 7: Hoare triple {4168#(= main_~a~0 0)} call #t~mem0 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~a~0, 4); {4168#(= main_~a~0 0)} is VALID [2018-11-18 23:03:57,244 INFO L273 TraceCheckUtils]: 8: Hoare triple {4168#(= main_~a~0 0)} assume !!(#t~mem0 >= 0);havoc #t~mem0;#t~post1 := ~a~0;~a~0 := 1 + #t~post1;havoc #t~post1; {4169#(<= main_~a~0 1)} is VALID [2018-11-18 23:03:57,245 INFO L273 TraceCheckUtils]: 9: Hoare triple {4169#(<= main_~a~0 1)} assume true; {4169#(<= main_~a~0 1)} is VALID [2018-11-18 23:03:57,245 INFO L273 TraceCheckUtils]: 10: Hoare triple {4169#(<= main_~a~0 1)} call #t~mem0 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~a~0, 4); {4169#(<= main_~a~0 1)} is VALID [2018-11-18 23:03:57,245 INFO L273 TraceCheckUtils]: 11: Hoare triple {4169#(<= main_~a~0 1)} assume !!(#t~mem0 >= 0);havoc #t~mem0;#t~post1 := ~a~0;~a~0 := 1 + #t~post1;havoc #t~post1; {4170#(<= main_~a~0 2)} is VALID [2018-11-18 23:03:57,246 INFO L273 TraceCheckUtils]: 12: Hoare triple {4170#(<= main_~a~0 2)} assume true; {4170#(<= main_~a~0 2)} is VALID [2018-11-18 23:03:57,246 INFO L273 TraceCheckUtils]: 13: Hoare triple {4170#(<= main_~a~0 2)} call #t~mem0 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~a~0, 4); {4170#(<= main_~a~0 2)} is VALID [2018-11-18 23:03:57,247 INFO L273 TraceCheckUtils]: 14: Hoare triple {4170#(<= main_~a~0 2)} assume !!(#t~mem0 >= 0);havoc #t~mem0;#t~post1 := ~a~0;~a~0 := 1 + #t~post1;havoc #t~post1; {4171#(<= main_~a~0 3)} is VALID [2018-11-18 23:03:57,247 INFO L273 TraceCheckUtils]: 15: Hoare triple {4171#(<= main_~a~0 3)} assume true; {4171#(<= main_~a~0 3)} is VALID [2018-11-18 23:03:57,247 INFO L273 TraceCheckUtils]: 16: Hoare triple {4171#(<= main_~a~0 3)} call #t~mem0 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~a~0, 4); {4171#(<= main_~a~0 3)} is VALID [2018-11-18 23:03:57,248 INFO L273 TraceCheckUtils]: 17: Hoare triple {4171#(<= main_~a~0 3)} assume !!(#t~mem0 >= 0);havoc #t~mem0;#t~post1 := ~a~0;~a~0 := 1 + #t~post1;havoc #t~post1; {4172#(<= main_~a~0 4)} is VALID [2018-11-18 23:03:57,248 INFO L273 TraceCheckUtils]: 18: Hoare triple {4172#(<= main_~a~0 4)} assume true; {4172#(<= main_~a~0 4)} is VALID [2018-11-18 23:03:57,248 INFO L273 TraceCheckUtils]: 19: Hoare triple {4172#(<= main_~a~0 4)} call #t~mem0 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~a~0, 4); {4172#(<= main_~a~0 4)} is VALID [2018-11-18 23:03:57,249 INFO L273 TraceCheckUtils]: 20: Hoare triple {4172#(<= main_~a~0 4)} assume !!(#t~mem0 >= 0);havoc #t~mem0;#t~post1 := ~a~0;~a~0 := 1 + #t~post1;havoc #t~post1; {4173#(<= main_~a~0 5)} is VALID [2018-11-18 23:03:57,250 INFO L273 TraceCheckUtils]: 21: Hoare triple {4173#(<= main_~a~0 5)} assume true; {4173#(<= main_~a~0 5)} is VALID [2018-11-18 23:03:57,250 INFO L273 TraceCheckUtils]: 22: Hoare triple {4173#(<= main_~a~0 5)} call #t~mem0 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~a~0, 4); {4174#(and (= |main_#t~mem0| (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 main_~a~0) |main_~#aa~0.offset|))) (<= main_~a~0 5))} is VALID [2018-11-18 23:03:57,252 INFO L273 TraceCheckUtils]: 23: Hoare triple {4174#(and (= |main_#t~mem0| (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 main_~a~0) |main_~#aa~0.offset|))) (<= main_~a~0 5))} assume !!(#t~mem0 >= 0);havoc #t~mem0;#t~post1 := ~a~0;~a~0 := 1 + #t~post1;havoc #t~post1; {4175#(and (or (<= main_~a~0 5) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~a~0 (- 1))))))) (<= main_~a~0 6))} is VALID [2018-11-18 23:03:57,252 INFO L273 TraceCheckUtils]: 24: Hoare triple {4175#(and (or (<= main_~a~0 5) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~a~0 (- 1))))))) (<= main_~a~0 6))} assume true; {4175#(and (or (<= main_~a~0 5) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~a~0 (- 1))))))) (<= main_~a~0 6))} is VALID [2018-11-18 23:03:57,253 INFO L273 TraceCheckUtils]: 25: Hoare triple {4175#(and (or (<= main_~a~0 5) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~a~0 (- 1))))))) (<= main_~a~0 6))} call #t~mem0 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~a~0, 4); {4175#(and (or (<= main_~a~0 5) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~a~0 (- 1))))))) (<= main_~a~0 6))} is VALID [2018-11-18 23:03:57,254 INFO L273 TraceCheckUtils]: 26: Hoare triple {4175#(and (or (<= main_~a~0 5) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~a~0 (- 1))))))) (<= main_~a~0 6))} assume !(#t~mem0 >= 0);havoc #t~mem0; {4175#(and (or (<= main_~a~0 5) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~a~0 (- 1))))))) (<= main_~a~0 6))} is VALID [2018-11-18 23:03:57,255 INFO L273 TraceCheckUtils]: 27: Hoare triple {4175#(and (or (<= main_~a~0 5) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~a~0 (- 1))))))) (<= main_~a~0 6))} havoc ~x~0;~x~0 := 0; {4176#(and (= main_~x~0 0) (or (<= main_~a~0 5) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~a~0 (- 1))))))) (<= main_~a~0 6))} is VALID [2018-11-18 23:03:57,274 INFO L273 TraceCheckUtils]: 28: Hoare triple {4176#(and (= main_~x~0 0) (or (<= main_~a~0 5) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~a~0 (- 1))))))) (<= main_~a~0 6))} assume true; {4176#(and (= main_~x~0 0) (or (<= main_~a~0 5) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~a~0 (- 1))))))) (<= main_~a~0 6))} is VALID [2018-11-18 23:03:57,283 INFO L273 TraceCheckUtils]: 29: Hoare triple {4176#(and (= main_~x~0 0) (or (<= main_~a~0 5) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~a~0 (- 1))))))) (<= main_~a~0 6))} assume !!(~x~0 < ~a~0);call #t~mem3 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~x~0, 4); {4176#(and (= main_~x~0 0) (or (<= main_~a~0 5) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~a~0 (- 1))))))) (<= main_~a~0 6))} is VALID [2018-11-18 23:03:57,283 INFO L256 TraceCheckUtils]: 30: Hoare triple {4176#(and (= main_~x~0 0) (or (<= main_~a~0 5) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~a~0 (- 1))))))) (<= main_~a~0 6))} call __VERIFIER_assert((if #t~mem3 >= 0 then 1 else 0)); {4166#true} is VALID [2018-11-18 23:03:57,288 INFO L273 TraceCheckUtils]: 31: Hoare triple {4166#true} ~cond := #in~cond; {4177#(= __VERIFIER_assert_~cond |__VERIFIER_assert_#in~cond|)} is VALID [2018-11-18 23:03:57,296 INFO L273 TraceCheckUtils]: 32: Hoare triple {4177#(= __VERIFIER_assert_~cond |__VERIFIER_assert_#in~cond|)} assume !(0 == ~cond); {4178#(not (= |__VERIFIER_assert_#in~cond| 0))} is VALID [2018-11-18 23:03:57,312 INFO L273 TraceCheckUtils]: 33: Hoare triple {4178#(not (= |__VERIFIER_assert_#in~cond| 0))} assume true; {4178#(not (= |__VERIFIER_assert_#in~cond| 0))} is VALID [2018-11-18 23:03:57,323 INFO L268 TraceCheckUtils]: 34: Hoare quadruple {4178#(not (= |__VERIFIER_assert_#in~cond| 0))} {4176#(and (= main_~x~0 0) (or (<= main_~a~0 5) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~a~0 (- 1))))))) (<= main_~a~0 6))} #55#return; {4176#(and (= main_~x~0 0) (or (<= main_~a~0 5) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~a~0 (- 1))))))) (<= main_~a~0 6))} is VALID [2018-11-18 23:03:57,334 INFO L273 TraceCheckUtils]: 35: Hoare triple {4176#(and (= main_~x~0 0) (or (<= main_~a~0 5) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~a~0 (- 1))))))) (<= main_~a~0 6))} havoc #t~mem3; {4176#(and (= main_~x~0 0) (or (<= main_~a~0 5) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~a~0 (- 1))))))) (<= main_~a~0 6))} is VALID [2018-11-18 23:03:57,349 INFO L273 TraceCheckUtils]: 36: Hoare triple {4176#(and (= main_~x~0 0) (or (<= main_~a~0 5) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~a~0 (- 1))))))) (<= main_~a~0 6))} #t~post2 := ~x~0;~x~0 := 1 + #t~post2;havoc #t~post2; {4179#(and (or (<= main_~a~0 (+ main_~x~0 4)) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~a~0 (- 1))))))) (<= main_~a~0 (+ main_~x~0 5)))} is VALID [2018-11-18 23:03:57,358 INFO L273 TraceCheckUtils]: 37: Hoare triple {4179#(and (or (<= main_~a~0 (+ main_~x~0 4)) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~a~0 (- 1))))))) (<= main_~a~0 (+ main_~x~0 5)))} assume true; {4179#(and (or (<= main_~a~0 (+ main_~x~0 4)) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~a~0 (- 1))))))) (<= main_~a~0 (+ main_~x~0 5)))} is VALID [2018-11-18 23:03:57,362 INFO L273 TraceCheckUtils]: 38: Hoare triple {4179#(and (or (<= main_~a~0 (+ main_~x~0 4)) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~a~0 (- 1))))))) (<= main_~a~0 (+ main_~x~0 5)))} assume !!(~x~0 < ~a~0);call #t~mem3 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~x~0, 4); {4179#(and (or (<= main_~a~0 (+ main_~x~0 4)) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~a~0 (- 1))))))) (<= main_~a~0 (+ main_~x~0 5)))} is VALID [2018-11-18 23:03:57,362 INFO L256 TraceCheckUtils]: 39: Hoare triple {4179#(and (or (<= main_~a~0 (+ main_~x~0 4)) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~a~0 (- 1))))))) (<= main_~a~0 (+ main_~x~0 5)))} call __VERIFIER_assert((if #t~mem3 >= 0 then 1 else 0)); {4166#true} is VALID [2018-11-18 23:03:57,362 INFO L273 TraceCheckUtils]: 40: Hoare triple {4166#true} ~cond := #in~cond; {4166#true} is VALID [2018-11-18 23:03:57,362 INFO L273 TraceCheckUtils]: 41: Hoare triple {4166#true} assume !(0 == ~cond); {4166#true} is VALID [2018-11-18 23:03:57,362 INFO L273 TraceCheckUtils]: 42: Hoare triple {4166#true} assume true; {4166#true} is VALID [2018-11-18 23:03:57,366 INFO L268 TraceCheckUtils]: 43: Hoare quadruple {4166#true} {4179#(and (or (<= main_~a~0 (+ main_~x~0 4)) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~a~0 (- 1))))))) (<= main_~a~0 (+ main_~x~0 5)))} #55#return; {4179#(and (or (<= main_~a~0 (+ main_~x~0 4)) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~a~0 (- 1))))))) (<= main_~a~0 (+ main_~x~0 5)))} is VALID [2018-11-18 23:03:57,366 INFO L273 TraceCheckUtils]: 44: Hoare triple {4179#(and (or (<= main_~a~0 (+ main_~x~0 4)) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~a~0 (- 1))))))) (<= main_~a~0 (+ main_~x~0 5)))} havoc #t~mem3; {4179#(and (or (<= main_~a~0 (+ main_~x~0 4)) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~a~0 (- 1))))))) (<= main_~a~0 (+ main_~x~0 5)))} is VALID [2018-11-18 23:03:57,368 INFO L273 TraceCheckUtils]: 45: Hoare triple {4179#(and (or (<= main_~a~0 (+ main_~x~0 4)) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~a~0 (- 1))))))) (<= main_~a~0 (+ main_~x~0 5)))} #t~post2 := ~x~0;~x~0 := 1 + #t~post2;havoc #t~post2; {4180#(and (<= main_~a~0 (+ main_~x~0 4)) (or (<= main_~a~0 (+ main_~x~0 3)) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~a~0 (- 1))))))))} is VALID [2018-11-18 23:03:57,368 INFO L273 TraceCheckUtils]: 46: Hoare triple {4180#(and (<= main_~a~0 (+ main_~x~0 4)) (or (<= main_~a~0 (+ main_~x~0 3)) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~a~0 (- 1))))))))} assume true; {4180#(and (<= main_~a~0 (+ main_~x~0 4)) (or (<= main_~a~0 (+ main_~x~0 3)) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~a~0 (- 1))))))))} is VALID [2018-11-18 23:03:57,369 INFO L273 TraceCheckUtils]: 47: Hoare triple {4180#(and (<= main_~a~0 (+ main_~x~0 4)) (or (<= main_~a~0 (+ main_~x~0 3)) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~a~0 (- 1))))))))} assume !!(~x~0 < ~a~0);call #t~mem3 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~x~0, 4); {4180#(and (<= main_~a~0 (+ main_~x~0 4)) (or (<= main_~a~0 (+ main_~x~0 3)) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~a~0 (- 1))))))))} is VALID [2018-11-18 23:03:57,369 INFO L256 TraceCheckUtils]: 48: Hoare triple {4180#(and (<= main_~a~0 (+ main_~x~0 4)) (or (<= main_~a~0 (+ main_~x~0 3)) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~a~0 (- 1))))))))} call __VERIFIER_assert((if #t~mem3 >= 0 then 1 else 0)); {4166#true} is VALID [2018-11-18 23:03:57,369 INFO L273 TraceCheckUtils]: 49: Hoare triple {4166#true} ~cond := #in~cond; {4166#true} is VALID [2018-11-18 23:03:57,369 INFO L273 TraceCheckUtils]: 50: Hoare triple {4166#true} assume !(0 == ~cond); {4166#true} is VALID [2018-11-18 23:03:57,369 INFO L273 TraceCheckUtils]: 51: Hoare triple {4166#true} assume true; {4166#true} is VALID [2018-11-18 23:03:57,370 INFO L268 TraceCheckUtils]: 52: Hoare quadruple {4166#true} {4180#(and (<= main_~a~0 (+ main_~x~0 4)) (or (<= main_~a~0 (+ main_~x~0 3)) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~a~0 (- 1))))))))} #55#return; {4180#(and (<= main_~a~0 (+ main_~x~0 4)) (or (<= main_~a~0 (+ main_~x~0 3)) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~a~0 (- 1))))))))} is VALID [2018-11-18 23:03:57,374 INFO L273 TraceCheckUtils]: 53: Hoare triple {4180#(and (<= main_~a~0 (+ main_~x~0 4)) (or (<= main_~a~0 (+ main_~x~0 3)) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~a~0 (- 1))))))))} havoc #t~mem3; {4180#(and (<= main_~a~0 (+ main_~x~0 4)) (or (<= main_~a~0 (+ main_~x~0 3)) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~a~0 (- 1))))))))} is VALID [2018-11-18 23:03:57,375 INFO L273 TraceCheckUtils]: 54: Hoare triple {4180#(and (<= main_~a~0 (+ main_~x~0 4)) (or (<= main_~a~0 (+ main_~x~0 3)) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~a~0 (- 1))))))))} #t~post2 := ~x~0;~x~0 := 1 + #t~post2;havoc #t~post2; {4181#(and (<= main_~a~0 (+ main_~x~0 3)) (or (<= main_~a~0 (+ main_~x~0 2)) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~a~0 (- 1))))))))} is VALID [2018-11-18 23:03:57,376 INFO L273 TraceCheckUtils]: 55: Hoare triple {4181#(and (<= main_~a~0 (+ main_~x~0 3)) (or (<= main_~a~0 (+ main_~x~0 2)) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~a~0 (- 1))))))))} assume true; {4181#(and (<= main_~a~0 (+ main_~x~0 3)) (or (<= main_~a~0 (+ main_~x~0 2)) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~a~0 (- 1))))))))} is VALID [2018-11-18 23:03:57,376 INFO L273 TraceCheckUtils]: 56: Hoare triple {4181#(and (<= main_~a~0 (+ main_~x~0 3)) (or (<= main_~a~0 (+ main_~x~0 2)) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~a~0 (- 1))))))))} assume !!(~x~0 < ~a~0);call #t~mem3 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~x~0, 4); {4181#(and (<= main_~a~0 (+ main_~x~0 3)) (or (<= main_~a~0 (+ main_~x~0 2)) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~a~0 (- 1))))))))} is VALID [2018-11-18 23:03:57,376 INFO L256 TraceCheckUtils]: 57: Hoare triple {4181#(and (<= main_~a~0 (+ main_~x~0 3)) (or (<= main_~a~0 (+ main_~x~0 2)) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~a~0 (- 1))))))))} call __VERIFIER_assert((if #t~mem3 >= 0 then 1 else 0)); {4166#true} is VALID [2018-11-18 23:03:57,376 INFO L273 TraceCheckUtils]: 58: Hoare triple {4166#true} ~cond := #in~cond; {4166#true} is VALID [2018-11-18 23:03:57,377 INFO L273 TraceCheckUtils]: 59: Hoare triple {4166#true} assume !(0 == ~cond); {4166#true} is VALID [2018-11-18 23:03:57,377 INFO L273 TraceCheckUtils]: 60: Hoare triple {4166#true} assume true; {4166#true} is VALID [2018-11-18 23:03:57,396 INFO L268 TraceCheckUtils]: 61: Hoare quadruple {4166#true} {4181#(and (<= main_~a~0 (+ main_~x~0 3)) (or (<= main_~a~0 (+ main_~x~0 2)) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~a~0 (- 1))))))))} #55#return; {4181#(and (<= main_~a~0 (+ main_~x~0 3)) (or (<= main_~a~0 (+ main_~x~0 2)) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~a~0 (- 1))))))))} is VALID [2018-11-18 23:03:57,405 INFO L273 TraceCheckUtils]: 62: Hoare triple {4181#(and (<= main_~a~0 (+ main_~x~0 3)) (or (<= main_~a~0 (+ main_~x~0 2)) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~a~0 (- 1))))))))} havoc #t~mem3; {4181#(and (<= main_~a~0 (+ main_~x~0 3)) (or (<= main_~a~0 (+ main_~x~0 2)) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~a~0 (- 1))))))))} is VALID [2018-11-18 23:03:57,413 INFO L273 TraceCheckUtils]: 63: Hoare triple {4181#(and (<= main_~a~0 (+ main_~x~0 3)) (or (<= main_~a~0 (+ main_~x~0 2)) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~a~0 (- 1))))))))} #t~post2 := ~x~0;~x~0 := 1 + #t~post2;havoc #t~post2; {4182#(and (<= main_~a~0 (+ main_~x~0 2)) (or (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~a~0 (- 1)))))) (<= main_~a~0 (+ main_~x~0 1))))} is VALID [2018-11-18 23:03:57,414 INFO L273 TraceCheckUtils]: 64: Hoare triple {4182#(and (<= main_~a~0 (+ main_~x~0 2)) (or (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~a~0 (- 1)))))) (<= main_~a~0 (+ main_~x~0 1))))} assume true; {4182#(and (<= main_~a~0 (+ main_~x~0 2)) (or (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~a~0 (- 1)))))) (<= main_~a~0 (+ main_~x~0 1))))} is VALID [2018-11-18 23:03:57,418 INFO L273 TraceCheckUtils]: 65: Hoare triple {4182#(and (<= main_~a~0 (+ main_~x~0 2)) (or (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~a~0 (- 1)))))) (<= main_~a~0 (+ main_~x~0 1))))} assume !!(~x~0 < ~a~0);call #t~mem3 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~x~0, 4); {4182#(and (<= main_~a~0 (+ main_~x~0 2)) (or (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~a~0 (- 1)))))) (<= main_~a~0 (+ main_~x~0 1))))} is VALID [2018-11-18 23:03:57,418 INFO L256 TraceCheckUtils]: 66: Hoare triple {4182#(and (<= main_~a~0 (+ main_~x~0 2)) (or (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~a~0 (- 1)))))) (<= main_~a~0 (+ main_~x~0 1))))} call __VERIFIER_assert((if #t~mem3 >= 0 then 1 else 0)); {4166#true} is VALID [2018-11-18 23:03:57,418 INFO L273 TraceCheckUtils]: 67: Hoare triple {4166#true} ~cond := #in~cond; {4166#true} is VALID [2018-11-18 23:03:57,418 INFO L273 TraceCheckUtils]: 68: Hoare triple {4166#true} assume !(0 == ~cond); {4166#true} is VALID [2018-11-18 23:03:57,418 INFO L273 TraceCheckUtils]: 69: Hoare triple {4166#true} assume true; {4166#true} is VALID [2018-11-18 23:03:57,419 INFO L268 TraceCheckUtils]: 70: Hoare quadruple {4166#true} {4182#(and (<= main_~a~0 (+ main_~x~0 2)) (or (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~a~0 (- 1)))))) (<= main_~a~0 (+ main_~x~0 1))))} #55#return; {4182#(and (<= main_~a~0 (+ main_~x~0 2)) (or (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~a~0 (- 1)))))) (<= main_~a~0 (+ main_~x~0 1))))} is VALID [2018-11-18 23:03:57,419 INFO L273 TraceCheckUtils]: 71: Hoare triple {4182#(and (<= main_~a~0 (+ main_~x~0 2)) (or (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~a~0 (- 1)))))) (<= main_~a~0 (+ main_~x~0 1))))} havoc #t~mem3; {4182#(and (<= main_~a~0 (+ main_~x~0 2)) (or (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~a~0 (- 1)))))) (<= main_~a~0 (+ main_~x~0 1))))} is VALID [2018-11-18 23:03:57,420 INFO L273 TraceCheckUtils]: 72: Hoare triple {4182#(and (<= main_~a~0 (+ main_~x~0 2)) (or (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~a~0 (- 1)))))) (<= main_~a~0 (+ main_~x~0 1))))} #t~post2 := ~x~0;~x~0 := 1 + #t~post2;havoc #t~post2; {4183#(or (<= main_~a~0 main_~x~0) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 main_~x~0) |main_~#aa~0.offset|))))} is VALID [2018-11-18 23:03:57,421 INFO L273 TraceCheckUtils]: 73: Hoare triple {4183#(or (<= main_~a~0 main_~x~0) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 main_~x~0) |main_~#aa~0.offset|))))} assume true; {4183#(or (<= main_~a~0 main_~x~0) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 main_~x~0) |main_~#aa~0.offset|))))} is VALID [2018-11-18 23:03:57,421 INFO L273 TraceCheckUtils]: 74: Hoare triple {4183#(or (<= main_~a~0 main_~x~0) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 main_~x~0) |main_~#aa~0.offset|))))} assume !!(~x~0 < ~a~0);call #t~mem3 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~x~0, 4); {4184#(<= 0 |main_#t~mem3|)} is VALID [2018-11-18 23:03:57,422 INFO L256 TraceCheckUtils]: 75: Hoare triple {4184#(<= 0 |main_#t~mem3|)} call __VERIFIER_assert((if #t~mem3 >= 0 then 1 else 0)); {4178#(not (= |__VERIFIER_assert_#in~cond| 0))} is VALID [2018-11-18 23:03:57,422 INFO L273 TraceCheckUtils]: 76: Hoare triple {4178#(not (= |__VERIFIER_assert_#in~cond| 0))} ~cond := #in~cond; {4185#(not (= __VERIFIER_assert_~cond 0))} is VALID [2018-11-18 23:03:57,423 INFO L273 TraceCheckUtils]: 77: Hoare triple {4185#(not (= __VERIFIER_assert_~cond 0))} assume 0 == ~cond; {4167#false} is VALID [2018-11-18 23:03:57,423 INFO L273 TraceCheckUtils]: 78: Hoare triple {4167#false} assume !false; {4167#false} is VALID [2018-11-18 23:03:57,439 INFO L134 CoverageAnalysis]: Checked inductivity of 178 backedges. 39 proven. 111 refuted. 0 times theorem prover too weak. 28 trivial. 0 not checked. [2018-11-18 23:03:57,439 INFO L300 seRefinementStrategy]: The current sequences of interpolants are not accepted, trying to find more. [2018-11-18 23:03:57,439 INFO L223 ckRefinementStrategy]: Switched to mode Z3_FP No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 Starting monitored process 10 with z3 -smt2 -in SMTLIB2_COMPLIANT=true -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 10 with z3 -smt2 -in SMTLIB2_COMPLIANT=true -t:12000 [2018-11-18 23:03:57,449 INFO L103 rtionOrderModulation]: Keeping assertion order OUTSIDE_LOOP_FIRST1 [2018-11-18 23:03:57,475 INFO L249 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2018-11-18 23:03:57,475 INFO L250 tOrderPrioritization]: Conjunction of SSA is unsat [2018-11-18 23:03:57,512 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 23:03:57,514 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-18 23:03:58,518 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 11 [2018-11-18 23:03:58,523 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2018-11-18 23:03:58,526 INFO L267 ElimStorePlain]: Start of recursive call 3: End of recursive call: and 1 xjuncts. [2018-11-18 23:03:58,528 INFO L267 ElimStorePlain]: Start of recursive call 2: 1 dim-1 vars, End of recursive call: and 1 xjuncts. [2018-11-18 23:03:58,529 INFO L267 ElimStorePlain]: Start of recursive call 1: 1 dim-0 vars, 1 dim-2 vars, End of recursive call: and 1 xjuncts. [2018-11-18 23:03:58,530 INFO L202 ElimStorePlain]: Needed 3 recursive calls to eliminate 2 variables, input treesize:15, output treesize:3 [2018-11-18 23:03:58,532 WARN L383 uantifierElimination]: Trying to double check SDD result, but SMT solver's response was UNKNOWN. [2018-11-18 23:03:58,589 INFO L256 TraceCheckUtils]: 0: Hoare triple {4166#true} call ULTIMATE.init(); {4166#true} is VALID [2018-11-18 23:03:58,590 INFO L273 TraceCheckUtils]: 1: Hoare triple {4166#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0]; {4166#true} is VALID [2018-11-18 23:03:58,590 INFO L273 TraceCheckUtils]: 2: Hoare triple {4166#true} assume true; {4166#true} is VALID [2018-11-18 23:03:58,590 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {4166#true} {4166#true} #51#return; {4166#true} is VALID [2018-11-18 23:03:58,590 INFO L256 TraceCheckUtils]: 4: Hoare triple {4166#true} call #t~ret4 := main(); {4166#true} is VALID [2018-11-18 23:03:58,591 INFO L273 TraceCheckUtils]: 5: Hoare triple {4166#true} call ~#aa~0.base, ~#aa~0.offset := #Ultimate.alloc(400000);~a~0 := 0; {4204#(and (= 0 |main_~#aa~0.offset|) (= main_~a~0 0))} is VALID [2018-11-18 23:03:58,592 INFO L273 TraceCheckUtils]: 6: Hoare triple {4204#(and (= 0 |main_~#aa~0.offset|) (= main_~a~0 0))} assume true; {4204#(and (= 0 |main_~#aa~0.offset|) (= main_~a~0 0))} is VALID [2018-11-18 23:03:58,592 INFO L273 TraceCheckUtils]: 7: Hoare triple {4204#(and (= 0 |main_~#aa~0.offset|) (= main_~a~0 0))} call #t~mem0 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~a~0, 4); {4204#(and (= 0 |main_~#aa~0.offset|) (= main_~a~0 0))} is VALID [2018-11-18 23:03:58,593 INFO L273 TraceCheckUtils]: 8: Hoare triple {4204#(and (= 0 |main_~#aa~0.offset|) (= main_~a~0 0))} assume !!(#t~mem0 >= 0);havoc #t~mem0;#t~post1 := ~a~0;~a~0 := 1 + #t~post1;havoc #t~post1; {4214#(and (= 0 |main_~#aa~0.offset|) (= main_~a~0 1))} is VALID [2018-11-18 23:03:58,593 INFO L273 TraceCheckUtils]: 9: Hoare triple {4214#(and (= 0 |main_~#aa~0.offset|) (= main_~a~0 1))} assume true; {4214#(and (= 0 |main_~#aa~0.offset|) (= main_~a~0 1))} is VALID [2018-11-18 23:03:58,593 INFO L273 TraceCheckUtils]: 10: Hoare triple {4214#(and (= 0 |main_~#aa~0.offset|) (= main_~a~0 1))} call #t~mem0 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~a~0, 4); {4214#(and (= 0 |main_~#aa~0.offset|) (= main_~a~0 1))} is VALID [2018-11-18 23:03:58,594 INFO L273 TraceCheckUtils]: 11: Hoare triple {4214#(and (= 0 |main_~#aa~0.offset|) (= main_~a~0 1))} assume !!(#t~mem0 >= 0);havoc #t~mem0;#t~post1 := ~a~0;~a~0 := 1 + #t~post1;havoc #t~post1; {4224#(and (= main_~a~0 2) (= 0 |main_~#aa~0.offset|))} is VALID [2018-11-18 23:03:58,595 INFO L273 TraceCheckUtils]: 12: Hoare triple {4224#(and (= main_~a~0 2) (= 0 |main_~#aa~0.offset|))} assume true; {4224#(and (= main_~a~0 2) (= 0 |main_~#aa~0.offset|))} is VALID [2018-11-18 23:03:58,595 INFO L273 TraceCheckUtils]: 13: Hoare triple {4224#(and (= main_~a~0 2) (= 0 |main_~#aa~0.offset|))} call #t~mem0 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~a~0, 4); {4224#(and (= main_~a~0 2) (= 0 |main_~#aa~0.offset|))} is VALID [2018-11-18 23:03:58,596 INFO L273 TraceCheckUtils]: 14: Hoare triple {4224#(and (= main_~a~0 2) (= 0 |main_~#aa~0.offset|))} assume !!(#t~mem0 >= 0);havoc #t~mem0;#t~post1 := ~a~0;~a~0 := 1 + #t~post1;havoc #t~post1; {4234#(and (= 0 |main_~#aa~0.offset|) (= main_~a~0 3))} is VALID [2018-11-18 23:03:58,597 INFO L273 TraceCheckUtils]: 15: Hoare triple {4234#(and (= 0 |main_~#aa~0.offset|) (= main_~a~0 3))} assume true; {4234#(and (= 0 |main_~#aa~0.offset|) (= main_~a~0 3))} is VALID [2018-11-18 23:03:58,597 INFO L273 TraceCheckUtils]: 16: Hoare triple {4234#(and (= 0 |main_~#aa~0.offset|) (= main_~a~0 3))} call #t~mem0 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~a~0, 4); {4234#(and (= 0 |main_~#aa~0.offset|) (= main_~a~0 3))} is VALID [2018-11-18 23:03:58,598 INFO L273 TraceCheckUtils]: 17: Hoare triple {4234#(and (= 0 |main_~#aa~0.offset|) (= main_~a~0 3))} assume !!(#t~mem0 >= 0);havoc #t~mem0;#t~post1 := ~a~0;~a~0 := 1 + #t~post1;havoc #t~post1; {4244#(and (= 0 |main_~#aa~0.offset|) (= main_~a~0 4))} is VALID [2018-11-18 23:03:58,598 INFO L273 TraceCheckUtils]: 18: Hoare triple {4244#(and (= 0 |main_~#aa~0.offset|) (= main_~a~0 4))} assume true; {4244#(and (= 0 |main_~#aa~0.offset|) (= main_~a~0 4))} is VALID [2018-11-18 23:03:58,599 INFO L273 TraceCheckUtils]: 19: Hoare triple {4244#(and (= 0 |main_~#aa~0.offset|) (= main_~a~0 4))} call #t~mem0 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~a~0, 4); {4244#(and (= 0 |main_~#aa~0.offset|) (= main_~a~0 4))} is VALID [2018-11-18 23:03:58,600 INFO L273 TraceCheckUtils]: 20: Hoare triple {4244#(and (= 0 |main_~#aa~0.offset|) (= main_~a~0 4))} assume !!(#t~mem0 >= 0);havoc #t~mem0;#t~post1 := ~a~0;~a~0 := 1 + #t~post1;havoc #t~post1; {4254#(and (= 0 |main_~#aa~0.offset|) (= main_~a~0 5))} is VALID [2018-11-18 23:03:58,600 INFO L273 TraceCheckUtils]: 21: Hoare triple {4254#(and (= 0 |main_~#aa~0.offset|) (= main_~a~0 5))} assume true; {4254#(and (= 0 |main_~#aa~0.offset|) (= main_~a~0 5))} is VALID [2018-11-18 23:03:58,601 INFO L273 TraceCheckUtils]: 22: Hoare triple {4254#(and (= 0 |main_~#aa~0.offset|) (= main_~a~0 5))} call #t~mem0 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~a~0, 4); {4261#(and (<= |main_#t~mem0| (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 20))) (= 0 |main_~#aa~0.offset|))} is VALID [2018-11-18 23:03:58,602 INFO L273 TraceCheckUtils]: 23: Hoare triple {4261#(and (<= |main_#t~mem0| (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 20))) (= 0 |main_~#aa~0.offset|))} assume !!(#t~mem0 >= 0);havoc #t~mem0;#t~post1 := ~a~0;~a~0 := 1 + #t~post1;havoc #t~post1; {4265#(and (= 0 |main_~#aa~0.offset|) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 20))))} is VALID [2018-11-18 23:03:58,603 INFO L273 TraceCheckUtils]: 24: Hoare triple {4265#(and (= 0 |main_~#aa~0.offset|) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 20))))} assume true; {4265#(and (= 0 |main_~#aa~0.offset|) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 20))))} is VALID [2018-11-18 23:03:58,604 INFO L273 TraceCheckUtils]: 25: Hoare triple {4265#(and (= 0 |main_~#aa~0.offset|) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 20))))} call #t~mem0 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~a~0, 4); {4265#(and (= 0 |main_~#aa~0.offset|) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 20))))} is VALID [2018-11-18 23:03:58,604 INFO L273 TraceCheckUtils]: 26: Hoare triple {4265#(and (= 0 |main_~#aa~0.offset|) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 20))))} assume !(#t~mem0 >= 0);havoc #t~mem0; {4265#(and (= 0 |main_~#aa~0.offset|) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 20))))} is VALID [2018-11-18 23:03:58,605 INFO L273 TraceCheckUtils]: 27: Hoare triple {4265#(and (= 0 |main_~#aa~0.offset|) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 20))))} havoc ~x~0;~x~0 := 0; {4278#(and (= 0 |main_~#aa~0.offset|) (= main_~x~0 0) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 20))))} is VALID [2018-11-18 23:03:58,606 INFO L273 TraceCheckUtils]: 28: Hoare triple {4278#(and (= 0 |main_~#aa~0.offset|) (= main_~x~0 0) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 20))))} assume true; {4278#(and (= 0 |main_~#aa~0.offset|) (= main_~x~0 0) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 20))))} is VALID [2018-11-18 23:03:58,607 INFO L273 TraceCheckUtils]: 29: Hoare triple {4278#(and (= 0 |main_~#aa~0.offset|) (= main_~x~0 0) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 20))))} assume !!(~x~0 < ~a~0);call #t~mem3 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~x~0, 4); {4278#(and (= 0 |main_~#aa~0.offset|) (= main_~x~0 0) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 20))))} is VALID [2018-11-18 23:03:58,609 INFO L256 TraceCheckUtils]: 30: Hoare triple {4278#(and (= 0 |main_~#aa~0.offset|) (= main_~x~0 0) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 20))))} call __VERIFIER_assert((if #t~mem3 >= 0 then 1 else 0)); {4288#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_17| Int)) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_17|) 20)))} is VALID [2018-11-18 23:03:58,609 INFO L273 TraceCheckUtils]: 31: Hoare triple {4288#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_17| Int)) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_17|) 20)))} ~cond := #in~cond; {4292#(and (exists ((|v_main_~#aa~0.base_BEFORE_CALL_17| Int)) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_17|) 20))) (= |__VERIFIER_assert_#in~cond| __VERIFIER_assert_~cond))} is VALID [2018-11-18 23:03:58,610 INFO L273 TraceCheckUtils]: 32: Hoare triple {4292#(and (exists ((|v_main_~#aa~0.base_BEFORE_CALL_17| Int)) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_17|) 20))) (= |__VERIFIER_assert_#in~cond| __VERIFIER_assert_~cond))} assume !(0 == ~cond); {4296#(and (not (= |__VERIFIER_assert_#in~cond| 0)) (exists ((|v_main_~#aa~0.base_BEFORE_CALL_17| Int)) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_17|) 20))))} is VALID [2018-11-18 23:03:58,611 INFO L273 TraceCheckUtils]: 33: Hoare triple {4296#(and (not (= |__VERIFIER_assert_#in~cond| 0)) (exists ((|v_main_~#aa~0.base_BEFORE_CALL_17| Int)) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_17|) 20))))} assume true; {4296#(and (not (= |__VERIFIER_assert_#in~cond| 0)) (exists ((|v_main_~#aa~0.base_BEFORE_CALL_17| Int)) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_17|) 20))))} is VALID [2018-11-18 23:03:58,612 INFO L268 TraceCheckUtils]: 34: Hoare quadruple {4296#(and (not (= |__VERIFIER_assert_#in~cond| 0)) (exists ((|v_main_~#aa~0.base_BEFORE_CALL_17| Int)) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_17|) 20))))} {4278#(and (= 0 |main_~#aa~0.offset|) (= main_~x~0 0) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 20))))} #55#return; {4278#(and (= 0 |main_~#aa~0.offset|) (= main_~x~0 0) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 20))))} is VALID [2018-11-18 23:03:58,612 INFO L273 TraceCheckUtils]: 35: Hoare triple {4278#(and (= 0 |main_~#aa~0.offset|) (= main_~x~0 0) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 20))))} havoc #t~mem3; {4278#(and (= 0 |main_~#aa~0.offset|) (= main_~x~0 0) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 20))))} is VALID [2018-11-18 23:03:58,613 INFO L273 TraceCheckUtils]: 36: Hoare triple {4278#(and (= 0 |main_~#aa~0.offset|) (= main_~x~0 0) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 20))))} #t~post2 := ~x~0;~x~0 := 1 + #t~post2;havoc #t~post2; {4309#(and (= main_~x~0 1) (= 0 |main_~#aa~0.offset|) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 20))))} is VALID [2018-11-18 23:03:58,614 INFO L273 TraceCheckUtils]: 37: Hoare triple {4309#(and (= main_~x~0 1) (= 0 |main_~#aa~0.offset|) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 20))))} assume true; {4309#(and (= main_~x~0 1) (= 0 |main_~#aa~0.offset|) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 20))))} is VALID [2018-11-18 23:03:58,615 INFO L273 TraceCheckUtils]: 38: Hoare triple {4309#(and (= main_~x~0 1) (= 0 |main_~#aa~0.offset|) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 20))))} assume !!(~x~0 < ~a~0);call #t~mem3 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~x~0, 4); {4309#(and (= main_~x~0 1) (= 0 |main_~#aa~0.offset|) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 20))))} is VALID [2018-11-18 23:03:58,617 INFO L256 TraceCheckUtils]: 39: Hoare triple {4309#(and (= main_~x~0 1) (= 0 |main_~#aa~0.offset|) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 20))))} call __VERIFIER_assert((if #t~mem3 >= 0 then 1 else 0)); {4288#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_17| Int)) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_17|) 20)))} is VALID [2018-11-18 23:03:58,617 INFO L273 TraceCheckUtils]: 40: Hoare triple {4288#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_17| Int)) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_17|) 20)))} ~cond := #in~cond; {4288#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_17| Int)) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_17|) 20)))} is VALID [2018-11-18 23:03:58,618 INFO L273 TraceCheckUtils]: 41: Hoare triple {4288#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_17| Int)) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_17|) 20)))} assume !(0 == ~cond); {4288#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_17| Int)) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_17|) 20)))} is VALID [2018-11-18 23:03:58,618 INFO L273 TraceCheckUtils]: 42: Hoare triple {4288#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_17| Int)) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_17|) 20)))} assume true; {4288#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_17| Int)) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_17|) 20)))} is VALID [2018-11-18 23:03:58,619 INFO L268 TraceCheckUtils]: 43: Hoare quadruple {4288#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_17| Int)) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_17|) 20)))} {4309#(and (= main_~x~0 1) (= 0 |main_~#aa~0.offset|) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 20))))} #55#return; {4309#(and (= main_~x~0 1) (= 0 |main_~#aa~0.offset|) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 20))))} is VALID [2018-11-18 23:03:58,620 INFO L273 TraceCheckUtils]: 44: Hoare triple {4309#(and (= main_~x~0 1) (= 0 |main_~#aa~0.offset|) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 20))))} havoc #t~mem3; {4309#(and (= main_~x~0 1) (= 0 |main_~#aa~0.offset|) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 20))))} is VALID [2018-11-18 23:03:58,621 INFO L273 TraceCheckUtils]: 45: Hoare triple {4309#(and (= main_~x~0 1) (= 0 |main_~#aa~0.offset|) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 20))))} #t~post2 := ~x~0;~x~0 := 1 + #t~post2;havoc #t~post2; {4337#(and (= main_~x~0 2) (= 0 |main_~#aa~0.offset|) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 20))))} is VALID [2018-11-18 23:03:58,621 INFO L273 TraceCheckUtils]: 46: Hoare triple {4337#(and (= main_~x~0 2) (= 0 |main_~#aa~0.offset|) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 20))))} assume true; {4337#(and (= main_~x~0 2) (= 0 |main_~#aa~0.offset|) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 20))))} is VALID [2018-11-18 23:03:58,622 INFO L273 TraceCheckUtils]: 47: Hoare triple {4337#(and (= main_~x~0 2) (= 0 |main_~#aa~0.offset|) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 20))))} assume !!(~x~0 < ~a~0);call #t~mem3 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~x~0, 4); {4337#(and (= main_~x~0 2) (= 0 |main_~#aa~0.offset|) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 20))))} is VALID [2018-11-18 23:03:58,624 INFO L256 TraceCheckUtils]: 48: Hoare triple {4337#(and (= main_~x~0 2) (= 0 |main_~#aa~0.offset|) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 20))))} call __VERIFIER_assert((if #t~mem3 >= 0 then 1 else 0)); {4288#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_17| Int)) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_17|) 20)))} is VALID [2018-11-18 23:03:58,624 INFO L273 TraceCheckUtils]: 49: Hoare triple {4288#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_17| Int)) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_17|) 20)))} ~cond := #in~cond; {4288#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_17| Int)) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_17|) 20)))} is VALID [2018-11-18 23:03:58,625 INFO L273 TraceCheckUtils]: 50: Hoare triple {4288#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_17| Int)) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_17|) 20)))} assume !(0 == ~cond); {4288#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_17| Int)) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_17|) 20)))} is VALID [2018-11-18 23:03:58,625 INFO L273 TraceCheckUtils]: 51: Hoare triple {4288#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_17| Int)) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_17|) 20)))} assume true; {4288#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_17| Int)) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_17|) 20)))} is VALID [2018-11-18 23:03:58,626 INFO L268 TraceCheckUtils]: 52: Hoare quadruple {4288#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_17| Int)) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_17|) 20)))} {4337#(and (= main_~x~0 2) (= 0 |main_~#aa~0.offset|) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 20))))} #55#return; {4337#(and (= main_~x~0 2) (= 0 |main_~#aa~0.offset|) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 20))))} is VALID [2018-11-18 23:03:58,627 INFO L273 TraceCheckUtils]: 53: Hoare triple {4337#(and (= main_~x~0 2) (= 0 |main_~#aa~0.offset|) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 20))))} havoc #t~mem3; {4337#(and (= main_~x~0 2) (= 0 |main_~#aa~0.offset|) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 20))))} is VALID [2018-11-18 23:03:58,628 INFO L273 TraceCheckUtils]: 54: Hoare triple {4337#(and (= main_~x~0 2) (= 0 |main_~#aa~0.offset|) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 20))))} #t~post2 := ~x~0;~x~0 := 1 + #t~post2;havoc #t~post2; {4365#(and (= 0 |main_~#aa~0.offset|) (= main_~x~0 3) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 20))))} is VALID [2018-11-18 23:03:58,628 INFO L273 TraceCheckUtils]: 55: Hoare triple {4365#(and (= 0 |main_~#aa~0.offset|) (= main_~x~0 3) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 20))))} assume true; {4365#(and (= 0 |main_~#aa~0.offset|) (= main_~x~0 3) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 20))))} is VALID [2018-11-18 23:03:58,629 INFO L273 TraceCheckUtils]: 56: Hoare triple {4365#(and (= 0 |main_~#aa~0.offset|) (= main_~x~0 3) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 20))))} assume !!(~x~0 < ~a~0);call #t~mem3 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~x~0, 4); {4365#(and (= 0 |main_~#aa~0.offset|) (= main_~x~0 3) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 20))))} is VALID [2018-11-18 23:03:58,631 INFO L256 TraceCheckUtils]: 57: Hoare triple {4365#(and (= 0 |main_~#aa~0.offset|) (= main_~x~0 3) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 20))))} call __VERIFIER_assert((if #t~mem3 >= 0 then 1 else 0)); {4288#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_17| Int)) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_17|) 20)))} is VALID [2018-11-18 23:03:58,632 INFO L273 TraceCheckUtils]: 58: Hoare triple {4288#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_17| Int)) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_17|) 20)))} ~cond := #in~cond; {4288#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_17| Int)) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_17|) 20)))} is VALID [2018-11-18 23:03:58,632 INFO L273 TraceCheckUtils]: 59: Hoare triple {4288#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_17| Int)) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_17|) 20)))} assume !(0 == ~cond); {4288#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_17| Int)) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_17|) 20)))} is VALID [2018-11-18 23:03:58,633 INFO L273 TraceCheckUtils]: 60: Hoare triple {4288#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_17| Int)) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_17|) 20)))} assume true; {4288#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_17| Int)) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_17|) 20)))} is VALID [2018-11-18 23:03:58,633 INFO L268 TraceCheckUtils]: 61: Hoare quadruple {4288#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_17| Int)) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_17|) 20)))} {4365#(and (= 0 |main_~#aa~0.offset|) (= main_~x~0 3) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 20))))} #55#return; {4365#(and (= 0 |main_~#aa~0.offset|) (= main_~x~0 3) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 20))))} is VALID [2018-11-18 23:03:58,634 INFO L273 TraceCheckUtils]: 62: Hoare triple {4365#(and (= 0 |main_~#aa~0.offset|) (= main_~x~0 3) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 20))))} havoc #t~mem3; {4365#(and (= 0 |main_~#aa~0.offset|) (= main_~x~0 3) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 20))))} is VALID [2018-11-18 23:03:58,635 INFO L273 TraceCheckUtils]: 63: Hoare triple {4365#(and (= 0 |main_~#aa~0.offset|) (= main_~x~0 3) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 20))))} #t~post2 := ~x~0;~x~0 := 1 + #t~post2;havoc #t~post2; {4393#(and (= 0 |main_~#aa~0.offset|) (= main_~x~0 4) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 20))))} is VALID [2018-11-18 23:03:58,636 INFO L273 TraceCheckUtils]: 64: Hoare triple {4393#(and (= 0 |main_~#aa~0.offset|) (= main_~x~0 4) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 20))))} assume true; {4393#(and (= 0 |main_~#aa~0.offset|) (= main_~x~0 4) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 20))))} is VALID [2018-11-18 23:03:58,637 INFO L273 TraceCheckUtils]: 65: Hoare triple {4393#(and (= 0 |main_~#aa~0.offset|) (= main_~x~0 4) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 20))))} assume !!(~x~0 < ~a~0);call #t~mem3 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~x~0, 4); {4393#(and (= 0 |main_~#aa~0.offset|) (= main_~x~0 4) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 20))))} is VALID [2018-11-18 23:03:58,638 INFO L256 TraceCheckUtils]: 66: Hoare triple {4393#(and (= 0 |main_~#aa~0.offset|) (= main_~x~0 4) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 20))))} call __VERIFIER_assert((if #t~mem3 >= 0 then 1 else 0)); {4288#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_17| Int)) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_17|) 20)))} is VALID [2018-11-18 23:03:58,639 INFO L273 TraceCheckUtils]: 67: Hoare triple {4288#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_17| Int)) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_17|) 20)))} ~cond := #in~cond; {4288#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_17| Int)) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_17|) 20)))} is VALID [2018-11-18 23:03:58,639 INFO L273 TraceCheckUtils]: 68: Hoare triple {4288#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_17| Int)) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_17|) 20)))} assume !(0 == ~cond); {4288#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_17| Int)) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_17|) 20)))} is VALID [2018-11-18 23:03:58,640 INFO L273 TraceCheckUtils]: 69: Hoare triple {4288#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_17| Int)) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_17|) 20)))} assume true; {4288#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_17| Int)) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_17|) 20)))} is VALID [2018-11-18 23:03:58,641 INFO L268 TraceCheckUtils]: 70: Hoare quadruple {4288#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_17| Int)) (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_17|) 20)))} {4393#(and (= 0 |main_~#aa~0.offset|) (= main_~x~0 4) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 20))))} #55#return; {4393#(and (= 0 |main_~#aa~0.offset|) (= main_~x~0 4) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 20))))} is VALID [2018-11-18 23:03:58,642 INFO L273 TraceCheckUtils]: 71: Hoare triple {4393#(and (= 0 |main_~#aa~0.offset|) (= main_~x~0 4) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 20))))} havoc #t~mem3; {4393#(and (= 0 |main_~#aa~0.offset|) (= main_~x~0 4) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 20))))} is VALID [2018-11-18 23:03:58,642 INFO L273 TraceCheckUtils]: 72: Hoare triple {4393#(and (= 0 |main_~#aa~0.offset|) (= main_~x~0 4) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 20))))} #t~post2 := ~x~0;~x~0 := 1 + #t~post2;havoc #t~post2; {4421#(and (= main_~x~0 5) (= 0 |main_~#aa~0.offset|) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 20))))} is VALID [2018-11-18 23:03:58,643 INFO L273 TraceCheckUtils]: 73: Hoare triple {4421#(and (= main_~x~0 5) (= 0 |main_~#aa~0.offset|) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 20))))} assume true; {4421#(and (= main_~x~0 5) (= 0 |main_~#aa~0.offset|) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 20))))} is VALID [2018-11-18 23:03:58,644 INFO L273 TraceCheckUtils]: 74: Hoare triple {4421#(and (= main_~x~0 5) (= 0 |main_~#aa~0.offset|) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| 20))))} assume !!(~x~0 < ~a~0);call #t~mem3 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~x~0, 4); {4184#(<= 0 |main_#t~mem3|)} is VALID [2018-11-18 23:03:58,646 INFO L256 TraceCheckUtils]: 75: Hoare triple {4184#(<= 0 |main_#t~mem3|)} call __VERIFIER_assert((if #t~mem3 >= 0 then 1 else 0)); {4431#(= |__VERIFIER_assert_#in~cond| 1)} is VALID [2018-11-18 23:03:58,647 INFO L273 TraceCheckUtils]: 76: Hoare triple {4431#(= |__VERIFIER_assert_#in~cond| 1)} ~cond := #in~cond; {4435#(= 1 __VERIFIER_assert_~cond)} is VALID [2018-11-18 23:03:58,647 INFO L273 TraceCheckUtils]: 77: Hoare triple {4435#(= 1 __VERIFIER_assert_~cond)} assume 0 == ~cond; {4167#false} is VALID [2018-11-18 23:03:58,647 INFO L273 TraceCheckUtils]: 78: Hoare triple {4167#false} assume !false; {4167#false} is VALID [2018-11-18 23:03:58,664 INFO L134 CoverageAnalysis]: Checked inductivity of 178 backedges. 0 proven. 150 refuted. 0 times theorem prover too weak. 28 trivial. 0 not checked. [2018-11-18 23:03:58,684 INFO L312 seRefinementStrategy]: Constructing automaton from 0 perfect and 2 imperfect interpolant sequences. [2018-11-18 23:03:58,684 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [20, 22] total 39 [2018-11-18 23:03:58,685 INFO L78 Accepts]: Start accepts. Automaton has 39 states. Word has length 79 [2018-11-18 23:03:58,685 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-18 23:03:58,685 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 39 states. [2018-11-18 23:03:58,830 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 134 edges. 134 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-18 23:03:58,830 INFO L459 AbstractCegarLoop]: Interpolant automaton has 39 states [2018-11-18 23:03:58,831 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 39 interpolants. [2018-11-18 23:03:58,832 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=152, Invalid=1330, Unknown=0, NotChecked=0, Total=1482 [2018-11-18 23:03:58,832 INFO L87 Difference]: Start difference. First operand 82 states and 83 transitions. Second operand 39 states. [2018-11-18 23:04:10,689 WARN L180 SmtUtils]: Spent 543.00 ms on a formula simplification. DAG size of input: 38 DAG size of output: 35 [2018-11-18 23:04:11,682 WARN L180 SmtUtils]: Spent 120.00 ms on a formula simplification. DAG size of input: 40 DAG size of output: 37 [2018-11-18 23:04:13,528 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:04:13,528 INFO L93 Difference]: Finished difference Result 134 states and 143 transitions. [2018-11-18 23:04:13,528 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 48 states. [2018-11-18 23:04:13,528 INFO L78 Accepts]: Start accepts. Automaton has 39 states. Word has length 79 [2018-11-18 23:04:13,528 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-18 23:04:13,528 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 39 states. [2018-11-18 23:04:13,531 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 48 states to 48 states and 128 transitions. [2018-11-18 23:04:13,531 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 39 states. [2018-11-18 23:04:13,534 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 48 states to 48 states and 128 transitions. [2018-11-18 23:04:13,534 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 48 states and 128 transitions. [2018-11-18 23:04:13,691 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 128 edges. 128 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-18 23:04:13,694 INFO L225 Difference]: With dead ends: 134 [2018-11-18 23:04:13,695 INFO L226 Difference]: Without dead ends: 96 [2018-11-18 23:04:13,697 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 132 GetRequests, 55 SyntacticMatches, 9 SemanticMatches, 68 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1560 ImplicationChecksByTransitivity, 3.9s TimeCoverageRelationStatistics Valid=451, Invalid=4379, Unknown=0, NotChecked=0, Total=4830 [2018-11-18 23:04:13,697 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 96 states. [2018-11-18 23:04:14,017 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 96 to 94. [2018-11-18 23:04:14,017 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-18 23:04:14,018 INFO L82 GeneralOperation]: Start isEquivalent. First operand 96 states. Second operand 94 states. [2018-11-18 23:04:14,018 INFO L74 IsIncluded]: Start isIncluded. First operand 96 states. Second operand 94 states. [2018-11-18 23:04:14,018 INFO L87 Difference]: Start difference. First operand 96 states. Second operand 94 states. [2018-11-18 23:04:14,021 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:04:14,021 INFO L93 Difference]: Finished difference Result 96 states and 97 transitions. [2018-11-18 23:04:14,021 INFO L276 IsEmpty]: Start isEmpty. Operand 96 states and 97 transitions. [2018-11-18 23:04:14,021 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-18 23:04:14,021 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-18 23:04:14,022 INFO L74 IsIncluded]: Start isIncluded. First operand 94 states. Second operand 96 states. [2018-11-18 23:04:14,022 INFO L87 Difference]: Start difference. First operand 94 states. Second operand 96 states. [2018-11-18 23:04:14,024 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:04:14,024 INFO L93 Difference]: Finished difference Result 96 states and 97 transitions. [2018-11-18 23:04:14,024 INFO L276 IsEmpty]: Start isEmpty. Operand 96 states and 97 transitions. [2018-11-18 23:04:14,025 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-18 23:04:14,025 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-18 23:04:14,025 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-18 23:04:14,025 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-18 23:04:14,025 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 94 states. [2018-11-18 23:04:14,027 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 94 states to 94 states and 95 transitions. [2018-11-18 23:04:14,027 INFO L78 Accepts]: Start accepts. Automaton has 94 states and 95 transitions. Word has length 79 [2018-11-18 23:04:14,028 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-18 23:04:14,028 INFO L480 AbstractCegarLoop]: Abstraction has 94 states and 95 transitions. [2018-11-18 23:04:14,028 INFO L481 AbstractCegarLoop]: Interpolant automaton has 39 states. [2018-11-18 23:04:14,028 INFO L276 IsEmpty]: Start isEmpty. Operand 94 states and 95 transitions. [2018-11-18 23:04:14,029 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 92 [2018-11-18 23:04:14,029 INFO L367 BasicCegarLoop]: Found error trace [2018-11-18 23:04:14,029 INFO L375 BasicCegarLoop]: trace histogram [8, 8, 7, 7, 7, 7, 7, 6, 6, 6, 6, 6, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 23:04:14,029 INFO L423 AbstractCegarLoop]: === Iteration 12 === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-18 23:04:14,030 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 23:04:14,030 INFO L82 PathProgramCache]: Analyzing trace with hash -754717636, now seen corresponding path program 9 times [2018-11-18 23:04:14,030 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 23:04:14,030 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 23:04:14,031 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 23:04:14,031 INFO L101 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2018-11-18 23:04:14,031 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 23:04:14,049 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 23:04:15,016 INFO L256 TraceCheckUtils]: 0: Hoare triple {5004#true} call ULTIMATE.init(); {5004#true} is VALID [2018-11-18 23:04:15,016 INFO L273 TraceCheckUtils]: 1: Hoare triple {5004#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0]; {5004#true} is VALID [2018-11-18 23:04:15,017 INFO L273 TraceCheckUtils]: 2: Hoare triple {5004#true} assume true; {5004#true} is VALID [2018-11-18 23:04:15,017 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {5004#true} {5004#true} #51#return; {5004#true} is VALID [2018-11-18 23:04:15,017 INFO L256 TraceCheckUtils]: 4: Hoare triple {5004#true} call #t~ret4 := main(); {5004#true} is VALID [2018-11-18 23:04:15,017 INFO L273 TraceCheckUtils]: 5: Hoare triple {5004#true} call ~#aa~0.base, ~#aa~0.offset := #Ultimate.alloc(400000);~a~0 := 0; {5006#(= main_~a~0 0)} is VALID [2018-11-18 23:04:15,018 INFO L273 TraceCheckUtils]: 6: Hoare triple {5006#(= main_~a~0 0)} assume true; {5006#(= main_~a~0 0)} is VALID [2018-11-18 23:04:15,018 INFO L273 TraceCheckUtils]: 7: Hoare triple {5006#(= main_~a~0 0)} call #t~mem0 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~a~0, 4); {5006#(= main_~a~0 0)} is VALID [2018-11-18 23:04:15,019 INFO L273 TraceCheckUtils]: 8: Hoare triple {5006#(= main_~a~0 0)} assume !!(#t~mem0 >= 0);havoc #t~mem0;#t~post1 := ~a~0;~a~0 := 1 + #t~post1;havoc #t~post1; {5007#(<= main_~a~0 1)} is VALID [2018-11-18 23:04:15,020 INFO L273 TraceCheckUtils]: 9: Hoare triple {5007#(<= main_~a~0 1)} assume true; {5007#(<= main_~a~0 1)} is VALID [2018-11-18 23:04:15,020 INFO L273 TraceCheckUtils]: 10: Hoare triple {5007#(<= main_~a~0 1)} call #t~mem0 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~a~0, 4); {5007#(<= main_~a~0 1)} is VALID [2018-11-18 23:04:15,021 INFO L273 TraceCheckUtils]: 11: Hoare triple {5007#(<= main_~a~0 1)} assume !!(#t~mem0 >= 0);havoc #t~mem0;#t~post1 := ~a~0;~a~0 := 1 + #t~post1;havoc #t~post1; {5008#(<= main_~a~0 2)} is VALID [2018-11-18 23:04:15,021 INFO L273 TraceCheckUtils]: 12: Hoare triple {5008#(<= main_~a~0 2)} assume true; {5008#(<= main_~a~0 2)} is VALID [2018-11-18 23:04:15,022 INFO L273 TraceCheckUtils]: 13: Hoare triple {5008#(<= main_~a~0 2)} call #t~mem0 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~a~0, 4); {5008#(<= main_~a~0 2)} is VALID [2018-11-18 23:04:15,023 INFO L273 TraceCheckUtils]: 14: Hoare triple {5008#(<= main_~a~0 2)} assume !!(#t~mem0 >= 0);havoc #t~mem0;#t~post1 := ~a~0;~a~0 := 1 + #t~post1;havoc #t~post1; {5009#(<= main_~a~0 3)} is VALID [2018-11-18 23:04:15,023 INFO L273 TraceCheckUtils]: 15: Hoare triple {5009#(<= main_~a~0 3)} assume true; {5009#(<= main_~a~0 3)} is VALID [2018-11-18 23:04:15,024 INFO L273 TraceCheckUtils]: 16: Hoare triple {5009#(<= main_~a~0 3)} call #t~mem0 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~a~0, 4); {5009#(<= main_~a~0 3)} is VALID [2018-11-18 23:04:15,024 INFO L273 TraceCheckUtils]: 17: Hoare triple {5009#(<= main_~a~0 3)} assume !!(#t~mem0 >= 0);havoc #t~mem0;#t~post1 := ~a~0;~a~0 := 1 + #t~post1;havoc #t~post1; {5010#(<= main_~a~0 4)} is VALID [2018-11-18 23:04:15,025 INFO L273 TraceCheckUtils]: 18: Hoare triple {5010#(<= main_~a~0 4)} assume true; {5010#(<= main_~a~0 4)} is VALID [2018-11-18 23:04:15,025 INFO L273 TraceCheckUtils]: 19: Hoare triple {5010#(<= main_~a~0 4)} call #t~mem0 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~a~0, 4); {5010#(<= main_~a~0 4)} is VALID [2018-11-18 23:04:15,026 INFO L273 TraceCheckUtils]: 20: Hoare triple {5010#(<= main_~a~0 4)} assume !!(#t~mem0 >= 0);havoc #t~mem0;#t~post1 := ~a~0;~a~0 := 1 + #t~post1;havoc #t~post1; {5011#(<= main_~a~0 5)} is VALID [2018-11-18 23:04:15,027 INFO L273 TraceCheckUtils]: 21: Hoare triple {5011#(<= main_~a~0 5)} assume true; {5011#(<= main_~a~0 5)} is VALID [2018-11-18 23:04:15,027 INFO L273 TraceCheckUtils]: 22: Hoare triple {5011#(<= main_~a~0 5)} call #t~mem0 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~a~0, 4); {5011#(<= main_~a~0 5)} is VALID [2018-11-18 23:04:15,028 INFO L273 TraceCheckUtils]: 23: Hoare triple {5011#(<= main_~a~0 5)} assume !!(#t~mem0 >= 0);havoc #t~mem0;#t~post1 := ~a~0;~a~0 := 1 + #t~post1;havoc #t~post1; {5012#(<= main_~a~0 6)} is VALID [2018-11-18 23:04:15,028 INFO L273 TraceCheckUtils]: 24: Hoare triple {5012#(<= main_~a~0 6)} assume true; {5012#(<= main_~a~0 6)} is VALID [2018-11-18 23:04:15,029 INFO L273 TraceCheckUtils]: 25: Hoare triple {5012#(<= main_~a~0 6)} call #t~mem0 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~a~0, 4); {5013#(and (= |main_#t~mem0| (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 main_~a~0) |main_~#aa~0.offset|))) (<= main_~a~0 6))} is VALID [2018-11-18 23:04:15,030 INFO L273 TraceCheckUtils]: 26: Hoare triple {5013#(and (= |main_#t~mem0| (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 main_~a~0) |main_~#aa~0.offset|))) (<= main_~a~0 6))} assume !!(#t~mem0 >= 0);havoc #t~mem0;#t~post1 := ~a~0;~a~0 := 1 + #t~post1;havoc #t~post1; {5014#(and (or (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 6)))) (<= main_~a~0 6)) (<= main_~a~0 7))} is VALID [2018-11-18 23:04:15,031 INFO L273 TraceCheckUtils]: 27: Hoare triple {5014#(and (or (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 6)))) (<= main_~a~0 6)) (<= main_~a~0 7))} assume true; {5014#(and (or (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 6)))) (<= main_~a~0 6)) (<= main_~a~0 7))} is VALID [2018-11-18 23:04:15,032 INFO L273 TraceCheckUtils]: 28: Hoare triple {5014#(and (or (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 6)))) (<= main_~a~0 6)) (<= main_~a~0 7))} call #t~mem0 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~a~0, 4); {5014#(and (or (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 6)))) (<= main_~a~0 6)) (<= main_~a~0 7))} is VALID [2018-11-18 23:04:15,032 INFO L273 TraceCheckUtils]: 29: Hoare triple {5014#(and (or (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 6)))) (<= main_~a~0 6)) (<= main_~a~0 7))} assume !(#t~mem0 >= 0);havoc #t~mem0; {5014#(and (or (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 6)))) (<= main_~a~0 6)) (<= main_~a~0 7))} is VALID [2018-11-18 23:04:15,033 INFO L273 TraceCheckUtils]: 30: Hoare triple {5014#(and (or (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 6)))) (<= main_~a~0 6)) (<= main_~a~0 7))} havoc ~x~0;~x~0 := 0; {5015#(and (= main_~x~0 0) (or (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 6)))) (<= main_~a~0 6)) (<= main_~a~0 7))} is VALID [2018-11-18 23:04:15,034 INFO L273 TraceCheckUtils]: 31: Hoare triple {5015#(and (= main_~x~0 0) (or (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 6)))) (<= main_~a~0 6)) (<= main_~a~0 7))} assume true; {5015#(and (= main_~x~0 0) (or (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 6)))) (<= main_~a~0 6)) (<= main_~a~0 7))} is VALID [2018-11-18 23:04:15,035 INFO L273 TraceCheckUtils]: 32: Hoare triple {5015#(and (= main_~x~0 0) (or (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 6)))) (<= main_~a~0 6)) (<= main_~a~0 7))} assume !!(~x~0 < ~a~0);call #t~mem3 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~x~0, 4); {5015#(and (= main_~x~0 0) (or (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 6)))) (<= main_~a~0 6)) (<= main_~a~0 7))} is VALID [2018-11-18 23:04:15,035 INFO L256 TraceCheckUtils]: 33: Hoare triple {5015#(and (= main_~x~0 0) (or (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 6)))) (<= main_~a~0 6)) (<= main_~a~0 7))} call __VERIFIER_assert((if #t~mem3 >= 0 then 1 else 0)); {5004#true} is VALID [2018-11-18 23:04:15,035 INFO L273 TraceCheckUtils]: 34: Hoare triple {5004#true} ~cond := #in~cond; {5016#(= __VERIFIER_assert_~cond |__VERIFIER_assert_#in~cond|)} is VALID [2018-11-18 23:04:15,036 INFO L273 TraceCheckUtils]: 35: Hoare triple {5016#(= __VERIFIER_assert_~cond |__VERIFIER_assert_#in~cond|)} assume !(0 == ~cond); {5017#(not (= |__VERIFIER_assert_#in~cond| 0))} is VALID [2018-11-18 23:04:15,036 INFO L273 TraceCheckUtils]: 36: Hoare triple {5017#(not (= |__VERIFIER_assert_#in~cond| 0))} assume true; {5017#(not (= |__VERIFIER_assert_#in~cond| 0))} is VALID [2018-11-18 23:04:15,037 INFO L268 TraceCheckUtils]: 37: Hoare quadruple {5017#(not (= |__VERIFIER_assert_#in~cond| 0))} {5015#(and (= main_~x~0 0) (or (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 6)))) (<= main_~a~0 6)) (<= main_~a~0 7))} #55#return; {5015#(and (= main_~x~0 0) (or (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 6)))) (<= main_~a~0 6)) (<= main_~a~0 7))} is VALID [2018-11-18 23:04:15,038 INFO L273 TraceCheckUtils]: 38: Hoare triple {5015#(and (= main_~x~0 0) (or (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 6)))) (<= main_~a~0 6)) (<= main_~a~0 7))} havoc #t~mem3; {5015#(and (= main_~x~0 0) (or (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 6)))) (<= main_~a~0 6)) (<= main_~a~0 7))} is VALID [2018-11-18 23:04:15,039 INFO L273 TraceCheckUtils]: 39: Hoare triple {5015#(and (= main_~x~0 0) (or (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 6)))) (<= main_~a~0 6)) (<= main_~a~0 7))} #t~post2 := ~x~0;~x~0 := 1 + #t~post2;havoc #t~post2; {5018#(and (or (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~x~0 5))))) (<= main_~a~0 (+ main_~x~0 5))) (<= main_~a~0 (+ main_~x~0 6)))} is VALID [2018-11-18 23:04:15,040 INFO L273 TraceCheckUtils]: 40: Hoare triple {5018#(and (or (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~x~0 5))))) (<= main_~a~0 (+ main_~x~0 5))) (<= main_~a~0 (+ main_~x~0 6)))} assume true; {5018#(and (or (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~x~0 5))))) (<= main_~a~0 (+ main_~x~0 5))) (<= main_~a~0 (+ main_~x~0 6)))} is VALID [2018-11-18 23:04:15,041 INFO L273 TraceCheckUtils]: 41: Hoare triple {5018#(and (or (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~x~0 5))))) (<= main_~a~0 (+ main_~x~0 5))) (<= main_~a~0 (+ main_~x~0 6)))} assume !!(~x~0 < ~a~0);call #t~mem3 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~x~0, 4); {5018#(and (or (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~x~0 5))))) (<= main_~a~0 (+ main_~x~0 5))) (<= main_~a~0 (+ main_~x~0 6)))} is VALID [2018-11-18 23:04:15,041 INFO L256 TraceCheckUtils]: 42: Hoare triple {5018#(and (or (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~x~0 5))))) (<= main_~a~0 (+ main_~x~0 5))) (<= main_~a~0 (+ main_~x~0 6)))} call __VERIFIER_assert((if #t~mem3 >= 0 then 1 else 0)); {5004#true} is VALID [2018-11-18 23:04:15,041 INFO L273 TraceCheckUtils]: 43: Hoare triple {5004#true} ~cond := #in~cond; {5004#true} is VALID [2018-11-18 23:04:15,041 INFO L273 TraceCheckUtils]: 44: Hoare triple {5004#true} assume !(0 == ~cond); {5004#true} is VALID [2018-11-18 23:04:15,042 INFO L273 TraceCheckUtils]: 45: Hoare triple {5004#true} assume true; {5004#true} is VALID [2018-11-18 23:04:15,042 INFO L268 TraceCheckUtils]: 46: Hoare quadruple {5004#true} {5018#(and (or (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~x~0 5))))) (<= main_~a~0 (+ main_~x~0 5))) (<= main_~a~0 (+ main_~x~0 6)))} #55#return; {5018#(and (or (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~x~0 5))))) (<= main_~a~0 (+ main_~x~0 5))) (<= main_~a~0 (+ main_~x~0 6)))} is VALID [2018-11-18 23:04:15,043 INFO L273 TraceCheckUtils]: 47: Hoare triple {5018#(and (or (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~x~0 5))))) (<= main_~a~0 (+ main_~x~0 5))) (<= main_~a~0 (+ main_~x~0 6)))} havoc #t~mem3; {5018#(and (or (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~x~0 5))))) (<= main_~a~0 (+ main_~x~0 5))) (<= main_~a~0 (+ main_~x~0 6)))} is VALID [2018-11-18 23:04:15,044 INFO L273 TraceCheckUtils]: 48: Hoare triple {5018#(and (or (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~x~0 5))))) (<= main_~a~0 (+ main_~x~0 5))) (<= main_~a~0 (+ main_~x~0 6)))} #t~post2 := ~x~0;~x~0 := 1 + #t~post2;havoc #t~post2; {5019#(and (or (<= main_~a~0 (+ main_~x~0 4)) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~x~0 4)))))) (<= main_~a~0 (+ main_~x~0 5)))} is VALID [2018-11-18 23:04:15,045 INFO L273 TraceCheckUtils]: 49: Hoare triple {5019#(and (or (<= main_~a~0 (+ main_~x~0 4)) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~x~0 4)))))) (<= main_~a~0 (+ main_~x~0 5)))} assume true; {5019#(and (or (<= main_~a~0 (+ main_~x~0 4)) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~x~0 4)))))) (<= main_~a~0 (+ main_~x~0 5)))} is VALID [2018-11-18 23:04:15,045 INFO L273 TraceCheckUtils]: 50: Hoare triple {5019#(and (or (<= main_~a~0 (+ main_~x~0 4)) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~x~0 4)))))) (<= main_~a~0 (+ main_~x~0 5)))} assume !!(~x~0 < ~a~0);call #t~mem3 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~x~0, 4); {5019#(and (or (<= main_~a~0 (+ main_~x~0 4)) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~x~0 4)))))) (<= main_~a~0 (+ main_~x~0 5)))} is VALID [2018-11-18 23:04:15,045 INFO L256 TraceCheckUtils]: 51: Hoare triple {5019#(and (or (<= main_~a~0 (+ main_~x~0 4)) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~x~0 4)))))) (<= main_~a~0 (+ main_~x~0 5)))} call __VERIFIER_assert((if #t~mem3 >= 0 then 1 else 0)); {5004#true} is VALID [2018-11-18 23:04:15,045 INFO L273 TraceCheckUtils]: 52: Hoare triple {5004#true} ~cond := #in~cond; {5004#true} is VALID [2018-11-18 23:04:15,046 INFO L273 TraceCheckUtils]: 53: Hoare triple {5004#true} assume !(0 == ~cond); {5004#true} is VALID [2018-11-18 23:04:15,046 INFO L273 TraceCheckUtils]: 54: Hoare triple {5004#true} assume true; {5004#true} is VALID [2018-11-18 23:04:15,046 INFO L268 TraceCheckUtils]: 55: Hoare quadruple {5004#true} {5019#(and (or (<= main_~a~0 (+ main_~x~0 4)) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~x~0 4)))))) (<= main_~a~0 (+ main_~x~0 5)))} #55#return; {5019#(and (or (<= main_~a~0 (+ main_~x~0 4)) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~x~0 4)))))) (<= main_~a~0 (+ main_~x~0 5)))} is VALID [2018-11-18 23:04:15,047 INFO L273 TraceCheckUtils]: 56: Hoare triple {5019#(and (or (<= main_~a~0 (+ main_~x~0 4)) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~x~0 4)))))) (<= main_~a~0 (+ main_~x~0 5)))} havoc #t~mem3; {5019#(and (or (<= main_~a~0 (+ main_~x~0 4)) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~x~0 4)))))) (<= main_~a~0 (+ main_~x~0 5)))} is VALID [2018-11-18 23:04:15,048 INFO L273 TraceCheckUtils]: 57: Hoare triple {5019#(and (or (<= main_~a~0 (+ main_~x~0 4)) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~x~0 4)))))) (<= main_~a~0 (+ main_~x~0 5)))} #t~post2 := ~x~0;~x~0 := 1 + #t~post2;havoc #t~post2; {5020#(and (<= main_~a~0 (+ main_~x~0 4)) (or (<= main_~a~0 (+ main_~x~0 3)) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~x~0 3)))))))} is VALID [2018-11-18 23:04:15,049 INFO L273 TraceCheckUtils]: 58: Hoare triple {5020#(and (<= main_~a~0 (+ main_~x~0 4)) (or (<= main_~a~0 (+ main_~x~0 3)) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~x~0 3)))))))} assume true; {5020#(and (<= main_~a~0 (+ main_~x~0 4)) (or (<= main_~a~0 (+ main_~x~0 3)) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~x~0 3)))))))} is VALID [2018-11-18 23:04:15,049 INFO L273 TraceCheckUtils]: 59: Hoare triple {5020#(and (<= main_~a~0 (+ main_~x~0 4)) (or (<= main_~a~0 (+ main_~x~0 3)) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~x~0 3)))))))} assume !!(~x~0 < ~a~0);call #t~mem3 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~x~0, 4); {5020#(and (<= main_~a~0 (+ main_~x~0 4)) (or (<= main_~a~0 (+ main_~x~0 3)) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~x~0 3)))))))} is VALID [2018-11-18 23:04:15,050 INFO L256 TraceCheckUtils]: 60: Hoare triple {5020#(and (<= main_~a~0 (+ main_~x~0 4)) (or (<= main_~a~0 (+ main_~x~0 3)) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~x~0 3)))))))} call __VERIFIER_assert((if #t~mem3 >= 0 then 1 else 0)); {5004#true} is VALID [2018-11-18 23:04:15,050 INFO L273 TraceCheckUtils]: 61: Hoare triple {5004#true} ~cond := #in~cond; {5004#true} is VALID [2018-11-18 23:04:15,050 INFO L273 TraceCheckUtils]: 62: Hoare triple {5004#true} assume !(0 == ~cond); {5004#true} is VALID [2018-11-18 23:04:15,050 INFO L273 TraceCheckUtils]: 63: Hoare triple {5004#true} assume true; {5004#true} is VALID [2018-11-18 23:04:15,051 INFO L268 TraceCheckUtils]: 64: Hoare quadruple {5004#true} {5020#(and (<= main_~a~0 (+ main_~x~0 4)) (or (<= main_~a~0 (+ main_~x~0 3)) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~x~0 3)))))))} #55#return; {5020#(and (<= main_~a~0 (+ main_~x~0 4)) (or (<= main_~a~0 (+ main_~x~0 3)) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~x~0 3)))))))} is VALID [2018-11-18 23:04:15,052 INFO L273 TraceCheckUtils]: 65: Hoare triple {5020#(and (<= main_~a~0 (+ main_~x~0 4)) (or (<= main_~a~0 (+ main_~x~0 3)) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~x~0 3)))))))} havoc #t~mem3; {5020#(and (<= main_~a~0 (+ main_~x~0 4)) (or (<= main_~a~0 (+ main_~x~0 3)) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~x~0 3)))))))} is VALID [2018-11-18 23:04:15,053 INFO L273 TraceCheckUtils]: 66: Hoare triple {5020#(and (<= main_~a~0 (+ main_~x~0 4)) (or (<= main_~a~0 (+ main_~x~0 3)) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~x~0 3)))))))} #t~post2 := ~x~0;~x~0 := 1 + #t~post2;havoc #t~post2; {5021#(and (<= main_~a~0 (+ main_~x~0 3)) (or (<= main_~a~0 (+ main_~x~0 2)) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~x~0 2)))))))} is VALID [2018-11-18 23:04:15,053 INFO L273 TraceCheckUtils]: 67: Hoare triple {5021#(and (<= main_~a~0 (+ main_~x~0 3)) (or (<= main_~a~0 (+ main_~x~0 2)) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~x~0 2)))))))} assume true; {5021#(and (<= main_~a~0 (+ main_~x~0 3)) (or (<= main_~a~0 (+ main_~x~0 2)) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~x~0 2)))))))} is VALID [2018-11-18 23:04:15,054 INFO L273 TraceCheckUtils]: 68: Hoare triple {5021#(and (<= main_~a~0 (+ main_~x~0 3)) (or (<= main_~a~0 (+ main_~x~0 2)) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~x~0 2)))))))} assume !!(~x~0 < ~a~0);call #t~mem3 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~x~0, 4); {5021#(and (<= main_~a~0 (+ main_~x~0 3)) (or (<= main_~a~0 (+ main_~x~0 2)) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~x~0 2)))))))} is VALID [2018-11-18 23:04:15,054 INFO L256 TraceCheckUtils]: 69: Hoare triple {5021#(and (<= main_~a~0 (+ main_~x~0 3)) (or (<= main_~a~0 (+ main_~x~0 2)) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~x~0 2)))))))} call __VERIFIER_assert((if #t~mem3 >= 0 then 1 else 0)); {5004#true} is VALID [2018-11-18 23:04:15,054 INFO L273 TraceCheckUtils]: 70: Hoare triple {5004#true} ~cond := #in~cond; {5004#true} is VALID [2018-11-18 23:04:15,054 INFO L273 TraceCheckUtils]: 71: Hoare triple {5004#true} assume !(0 == ~cond); {5004#true} is VALID [2018-11-18 23:04:15,054 INFO L273 TraceCheckUtils]: 72: Hoare triple {5004#true} assume true; {5004#true} is VALID [2018-11-18 23:04:15,055 INFO L268 TraceCheckUtils]: 73: Hoare quadruple {5004#true} {5021#(and (<= main_~a~0 (+ main_~x~0 3)) (or (<= main_~a~0 (+ main_~x~0 2)) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~x~0 2)))))))} #55#return; {5021#(and (<= main_~a~0 (+ main_~x~0 3)) (or (<= main_~a~0 (+ main_~x~0 2)) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~x~0 2)))))))} is VALID [2018-11-18 23:04:15,055 INFO L273 TraceCheckUtils]: 74: Hoare triple {5021#(and (<= main_~a~0 (+ main_~x~0 3)) (or (<= main_~a~0 (+ main_~x~0 2)) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~x~0 2)))))))} havoc #t~mem3; {5021#(and (<= main_~a~0 (+ main_~x~0 3)) (or (<= main_~a~0 (+ main_~x~0 2)) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~x~0 2)))))))} is VALID [2018-11-18 23:04:15,056 INFO L273 TraceCheckUtils]: 75: Hoare triple {5021#(and (<= main_~a~0 (+ main_~x~0 3)) (or (<= main_~a~0 (+ main_~x~0 2)) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~x~0 2)))))))} #t~post2 := ~x~0;~x~0 := 1 + #t~post2;havoc #t~post2; {5022#(and (<= main_~a~0 (+ main_~x~0 2)) (or (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~x~0 1))))) (<= main_~a~0 (+ main_~x~0 1))))} is VALID [2018-11-18 23:04:15,057 INFO L273 TraceCheckUtils]: 76: Hoare triple {5022#(and (<= main_~a~0 (+ main_~x~0 2)) (or (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~x~0 1))))) (<= main_~a~0 (+ main_~x~0 1))))} assume true; {5022#(and (<= main_~a~0 (+ main_~x~0 2)) (or (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~x~0 1))))) (<= main_~a~0 (+ main_~x~0 1))))} is VALID [2018-11-18 23:04:15,058 INFO L273 TraceCheckUtils]: 77: Hoare triple {5022#(and (<= main_~a~0 (+ main_~x~0 2)) (or (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~x~0 1))))) (<= main_~a~0 (+ main_~x~0 1))))} assume !!(~x~0 < ~a~0);call #t~mem3 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~x~0, 4); {5022#(and (<= main_~a~0 (+ main_~x~0 2)) (or (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~x~0 1))))) (<= main_~a~0 (+ main_~x~0 1))))} is VALID [2018-11-18 23:04:15,058 INFO L256 TraceCheckUtils]: 78: Hoare triple {5022#(and (<= main_~a~0 (+ main_~x~0 2)) (or (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~x~0 1))))) (<= main_~a~0 (+ main_~x~0 1))))} call __VERIFIER_assert((if #t~mem3 >= 0 then 1 else 0)); {5004#true} is VALID [2018-11-18 23:04:15,059 INFO L273 TraceCheckUtils]: 79: Hoare triple {5004#true} ~cond := #in~cond; {5004#true} is VALID [2018-11-18 23:04:15,059 INFO L273 TraceCheckUtils]: 80: Hoare triple {5004#true} assume !(0 == ~cond); {5004#true} is VALID [2018-11-18 23:04:15,059 INFO L273 TraceCheckUtils]: 81: Hoare triple {5004#true} assume true; {5004#true} is VALID [2018-11-18 23:04:15,060 INFO L268 TraceCheckUtils]: 82: Hoare quadruple {5004#true} {5022#(and (<= main_~a~0 (+ main_~x~0 2)) (or (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~x~0 1))))) (<= main_~a~0 (+ main_~x~0 1))))} #55#return; {5022#(and (<= main_~a~0 (+ main_~x~0 2)) (or (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~x~0 1))))) (<= main_~a~0 (+ main_~x~0 1))))} is VALID [2018-11-18 23:04:15,060 INFO L273 TraceCheckUtils]: 83: Hoare triple {5022#(and (<= main_~a~0 (+ main_~x~0 2)) (or (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~x~0 1))))) (<= main_~a~0 (+ main_~x~0 1))))} havoc #t~mem3; {5022#(and (<= main_~a~0 (+ main_~x~0 2)) (or (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~x~0 1))))) (<= main_~a~0 (+ main_~x~0 1))))} is VALID [2018-11-18 23:04:15,061 INFO L273 TraceCheckUtils]: 84: Hoare triple {5022#(and (<= main_~a~0 (+ main_~x~0 2)) (or (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 (+ main_~x~0 1))))) (<= main_~a~0 (+ main_~x~0 1))))} #t~post2 := ~x~0;~x~0 := 1 + #t~post2;havoc #t~post2; {5023#(or (<= main_~a~0 main_~x~0) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 main_~x~0) |main_~#aa~0.offset|))))} is VALID [2018-11-18 23:04:15,062 INFO L273 TraceCheckUtils]: 85: Hoare triple {5023#(or (<= main_~a~0 main_~x~0) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 main_~x~0) |main_~#aa~0.offset|))))} assume true; {5023#(or (<= main_~a~0 main_~x~0) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 main_~x~0) |main_~#aa~0.offset|))))} is VALID [2018-11-18 23:04:15,062 INFO L273 TraceCheckUtils]: 86: Hoare triple {5023#(or (<= main_~a~0 main_~x~0) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 main_~x~0) |main_~#aa~0.offset|))))} assume !!(~x~0 < ~a~0);call #t~mem3 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~x~0, 4); {5024#(<= 0 |main_#t~mem3|)} is VALID [2018-11-18 23:04:15,063 INFO L256 TraceCheckUtils]: 87: Hoare triple {5024#(<= 0 |main_#t~mem3|)} call __VERIFIER_assert((if #t~mem3 >= 0 then 1 else 0)); {5017#(not (= |__VERIFIER_assert_#in~cond| 0))} is VALID [2018-11-18 23:04:15,063 INFO L273 TraceCheckUtils]: 88: Hoare triple {5017#(not (= |__VERIFIER_assert_#in~cond| 0))} ~cond := #in~cond; {5025#(not (= __VERIFIER_assert_~cond 0))} is VALID [2018-11-18 23:04:15,063 INFO L273 TraceCheckUtils]: 89: Hoare triple {5025#(not (= __VERIFIER_assert_~cond 0))} assume 0 == ~cond; {5005#false} is VALID [2018-11-18 23:04:15,063 INFO L273 TraceCheckUtils]: 90: Hoare triple {5005#false} assume !false; {5005#false} is VALID [2018-11-18 23:04:15,086 INFO L134 CoverageAnalysis]: Checked inductivity of 249 backedges. 61 proven. 143 refuted. 0 times theorem prover too weak. 45 trivial. 0 not checked. [2018-11-18 23:04:15,086 INFO L300 seRefinementStrategy]: The current sequences of interpolants are not accepted, trying to find more. [2018-11-18 23:04:15,086 INFO L223 ckRefinementStrategy]: Switched to mode Z3_FP No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 Starting monitored process 11 with z3 -smt2 -in SMTLIB2_COMPLIANT=true -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 11 with z3 -smt2 -in SMTLIB2_COMPLIANT=true -t:12000 [2018-11-18 23:04:15,095 INFO L103 rtionOrderModulation]: Keeping assertion order OUTSIDE_LOOP_FIRST2 [2018-11-18 23:04:15,127 INFO L249 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 8 check-sat command(s) [2018-11-18 23:04:15,127 INFO L250 tOrderPrioritization]: Conjunction of SSA is unsat [2018-11-18 23:04:15,146 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 23:04:15,148 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-18 23:04:18,048 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 19 treesize of output 15 [2018-11-18 23:04:18,055 INFO L682 Elim1Store]: detected equality via solver [2018-11-18 23:04:18,056 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 14 [2018-11-18 23:04:18,059 INFO L267 ElimStorePlain]: Start of recursive call 3: End of recursive call: and 1 xjuncts. [2018-11-18 23:04:18,063 INFO L267 ElimStorePlain]: Start of recursive call 2: 1 dim-1 vars, End of recursive call: and 1 xjuncts. [2018-11-18 23:04:18,075 INFO L267 ElimStorePlain]: Start of recursive call 1: 3 dim-0 vars, 1 dim-2 vars, End of recursive call: and 1 xjuncts. [2018-11-18 23:04:18,075 INFO L202 ElimStorePlain]: Needed 3 recursive calls to eliminate 4 variables, input treesize:28, output treesize:3 [2018-11-18 23:04:18,078 WARN L383 uantifierElimination]: Trying to double check SDD result, but SMT solver's response was UNKNOWN. [2018-11-18 23:04:18,131 INFO L256 TraceCheckUtils]: 0: Hoare triple {5004#true} call ULTIMATE.init(); {5004#true} is VALID [2018-11-18 23:04:18,131 INFO L273 TraceCheckUtils]: 1: Hoare triple {5004#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0]; {5004#true} is VALID [2018-11-18 23:04:18,132 INFO L273 TraceCheckUtils]: 2: Hoare triple {5004#true} assume true; {5004#true} is VALID [2018-11-18 23:04:18,132 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {5004#true} {5004#true} #51#return; {5004#true} is VALID [2018-11-18 23:04:18,132 INFO L256 TraceCheckUtils]: 4: Hoare triple {5004#true} call #t~ret4 := main(); {5004#true} is VALID [2018-11-18 23:04:18,133 INFO L273 TraceCheckUtils]: 5: Hoare triple {5004#true} call ~#aa~0.base, ~#aa~0.offset := #Ultimate.alloc(400000);~a~0 := 0; {5044#(and (= 0 |main_~#aa~0.offset|) (<= main_~a~0 0))} is VALID [2018-11-18 23:04:18,133 INFO L273 TraceCheckUtils]: 6: Hoare triple {5044#(and (= 0 |main_~#aa~0.offset|) (<= main_~a~0 0))} assume true; {5044#(and (= 0 |main_~#aa~0.offset|) (<= main_~a~0 0))} is VALID [2018-11-18 23:04:18,134 INFO L273 TraceCheckUtils]: 7: Hoare triple {5044#(and (= 0 |main_~#aa~0.offset|) (<= main_~a~0 0))} call #t~mem0 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~a~0, 4); {5044#(and (= 0 |main_~#aa~0.offset|) (<= main_~a~0 0))} is VALID [2018-11-18 23:04:18,134 INFO L273 TraceCheckUtils]: 8: Hoare triple {5044#(and (= 0 |main_~#aa~0.offset|) (<= main_~a~0 0))} assume !!(#t~mem0 >= 0);havoc #t~mem0;#t~post1 := ~a~0;~a~0 := 1 + #t~post1;havoc #t~post1; {5054#(and (<= main_~a~0 1) (= 0 |main_~#aa~0.offset|))} is VALID [2018-11-18 23:04:18,134 INFO L273 TraceCheckUtils]: 9: Hoare triple {5054#(and (<= main_~a~0 1) (= 0 |main_~#aa~0.offset|))} assume true; {5054#(and (<= main_~a~0 1) (= 0 |main_~#aa~0.offset|))} is VALID [2018-11-18 23:04:18,135 INFO L273 TraceCheckUtils]: 10: Hoare triple {5054#(and (<= main_~a~0 1) (= 0 |main_~#aa~0.offset|))} call #t~mem0 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~a~0, 4); {5054#(and (<= main_~a~0 1) (= 0 |main_~#aa~0.offset|))} is VALID [2018-11-18 23:04:18,135 INFO L273 TraceCheckUtils]: 11: Hoare triple {5054#(and (<= main_~a~0 1) (= 0 |main_~#aa~0.offset|))} assume !!(#t~mem0 >= 0);havoc #t~mem0;#t~post1 := ~a~0;~a~0 := 1 + #t~post1;havoc #t~post1; {5064#(and (= 0 |main_~#aa~0.offset|) (<= main_~a~0 2))} is VALID [2018-11-18 23:04:18,136 INFO L273 TraceCheckUtils]: 12: Hoare triple {5064#(and (= 0 |main_~#aa~0.offset|) (<= main_~a~0 2))} assume true; {5064#(and (= 0 |main_~#aa~0.offset|) (<= main_~a~0 2))} is VALID [2018-11-18 23:04:18,137 INFO L273 TraceCheckUtils]: 13: Hoare triple {5064#(and (= 0 |main_~#aa~0.offset|) (<= main_~a~0 2))} call #t~mem0 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~a~0, 4); {5064#(and (= 0 |main_~#aa~0.offset|) (<= main_~a~0 2))} is VALID [2018-11-18 23:04:18,137 INFO L273 TraceCheckUtils]: 14: Hoare triple {5064#(and (= 0 |main_~#aa~0.offset|) (<= main_~a~0 2))} assume !!(#t~mem0 >= 0);havoc #t~mem0;#t~post1 := ~a~0;~a~0 := 1 + #t~post1;havoc #t~post1; {5074#(and (<= main_~a~0 3) (= 0 |main_~#aa~0.offset|))} is VALID [2018-11-18 23:04:18,138 INFO L273 TraceCheckUtils]: 15: Hoare triple {5074#(and (<= main_~a~0 3) (= 0 |main_~#aa~0.offset|))} assume true; {5074#(and (<= main_~a~0 3) (= 0 |main_~#aa~0.offset|))} is VALID [2018-11-18 23:04:18,139 INFO L273 TraceCheckUtils]: 16: Hoare triple {5074#(and (<= main_~a~0 3) (= 0 |main_~#aa~0.offset|))} call #t~mem0 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~a~0, 4); {5074#(and (<= main_~a~0 3) (= 0 |main_~#aa~0.offset|))} is VALID [2018-11-18 23:04:18,139 INFO L273 TraceCheckUtils]: 17: Hoare triple {5074#(and (<= main_~a~0 3) (= 0 |main_~#aa~0.offset|))} assume !!(#t~mem0 >= 0);havoc #t~mem0;#t~post1 := ~a~0;~a~0 := 1 + #t~post1;havoc #t~post1; {5084#(and (= 0 |main_~#aa~0.offset|) (<= main_~a~0 4))} is VALID [2018-11-18 23:04:18,140 INFO L273 TraceCheckUtils]: 18: Hoare triple {5084#(and (= 0 |main_~#aa~0.offset|) (<= main_~a~0 4))} assume true; {5084#(and (= 0 |main_~#aa~0.offset|) (<= main_~a~0 4))} is VALID [2018-11-18 23:04:18,141 INFO L273 TraceCheckUtils]: 19: Hoare triple {5084#(and (= 0 |main_~#aa~0.offset|) (<= main_~a~0 4))} call #t~mem0 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~a~0, 4); {5084#(and (= 0 |main_~#aa~0.offset|) (<= main_~a~0 4))} is VALID [2018-11-18 23:04:18,142 INFO L273 TraceCheckUtils]: 20: Hoare triple {5084#(and (= 0 |main_~#aa~0.offset|) (<= main_~a~0 4))} assume !!(#t~mem0 >= 0);havoc #t~mem0;#t~post1 := ~a~0;~a~0 := 1 + #t~post1;havoc #t~post1; {5094#(and (= 0 |main_~#aa~0.offset|) (<= main_~a~0 5))} is VALID [2018-11-18 23:04:18,142 INFO L273 TraceCheckUtils]: 21: Hoare triple {5094#(and (= 0 |main_~#aa~0.offset|) (<= main_~a~0 5))} assume true; {5094#(and (= 0 |main_~#aa~0.offset|) (<= main_~a~0 5))} is VALID [2018-11-18 23:04:18,143 INFO L273 TraceCheckUtils]: 22: Hoare triple {5094#(and (= 0 |main_~#aa~0.offset|) (<= main_~a~0 5))} call #t~mem0 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~a~0, 4); {5094#(and (= 0 |main_~#aa~0.offset|) (<= main_~a~0 5))} is VALID [2018-11-18 23:04:18,144 INFO L273 TraceCheckUtils]: 23: Hoare triple {5094#(and (= 0 |main_~#aa~0.offset|) (<= main_~a~0 5))} assume !!(#t~mem0 >= 0);havoc #t~mem0;#t~post1 := ~a~0;~a~0 := 1 + #t~post1;havoc #t~post1; {5104#(and (= 0 |main_~#aa~0.offset|) (<= main_~a~0 6))} is VALID [2018-11-18 23:04:18,144 INFO L273 TraceCheckUtils]: 24: Hoare triple {5104#(and (= 0 |main_~#aa~0.offset|) (<= main_~a~0 6))} assume true; {5104#(and (= 0 |main_~#aa~0.offset|) (<= main_~a~0 6))} is VALID [2018-11-18 23:04:18,145 INFO L273 TraceCheckUtils]: 25: Hoare triple {5104#(and (= 0 |main_~#aa~0.offset|) (<= main_~a~0 6))} call #t~mem0 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~a~0, 4); {5111#(and (= 0 |main_~#aa~0.offset|) (<= |main_#t~mem0| (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 main_~a~0)))) (<= main_~a~0 6))} is VALID [2018-11-18 23:04:18,146 INFO L273 TraceCheckUtils]: 26: Hoare triple {5111#(and (= 0 |main_~#aa~0.offset|) (<= |main_#t~mem0| (select (select |#memory_int| |main_~#aa~0.base|) (+ |main_~#aa~0.offset| (* 4 main_~a~0)))) (<= main_~a~0 6))} assume !!(#t~mem0 >= 0);havoc #t~mem0;#t~post1 := ~a~0;~a~0 := 1 + #t~post1;havoc #t~post1; {5115#(and (= 0 |main_~#aa~0.offset|) (exists ((v_main_~a~0_37 Int)) (and (<= v_main_~a~0_37 6) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 v_main_~a~0_37) |main_~#aa~0.offset|))) (<= main_~a~0 (+ v_main_~a~0_37 1)))))} is VALID [2018-11-18 23:04:18,147 INFO L273 TraceCheckUtils]: 27: Hoare triple {5115#(and (= 0 |main_~#aa~0.offset|) (exists ((v_main_~a~0_37 Int)) (and (<= v_main_~a~0_37 6) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 v_main_~a~0_37) |main_~#aa~0.offset|))) (<= main_~a~0 (+ v_main_~a~0_37 1)))))} assume true; {5115#(and (= 0 |main_~#aa~0.offset|) (exists ((v_main_~a~0_37 Int)) (and (<= v_main_~a~0_37 6) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 v_main_~a~0_37) |main_~#aa~0.offset|))) (<= main_~a~0 (+ v_main_~a~0_37 1)))))} is VALID [2018-11-18 23:04:18,148 INFO L273 TraceCheckUtils]: 28: Hoare triple {5115#(and (= 0 |main_~#aa~0.offset|) (exists ((v_main_~a~0_37 Int)) (and (<= v_main_~a~0_37 6) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 v_main_~a~0_37) |main_~#aa~0.offset|))) (<= main_~a~0 (+ v_main_~a~0_37 1)))))} call #t~mem0 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~a~0, 4); {5115#(and (= 0 |main_~#aa~0.offset|) (exists ((v_main_~a~0_37 Int)) (and (<= v_main_~a~0_37 6) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 v_main_~a~0_37) |main_~#aa~0.offset|))) (<= main_~a~0 (+ v_main_~a~0_37 1)))))} is VALID [2018-11-18 23:04:18,149 INFO L273 TraceCheckUtils]: 29: Hoare triple {5115#(and (= 0 |main_~#aa~0.offset|) (exists ((v_main_~a~0_37 Int)) (and (<= v_main_~a~0_37 6) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 v_main_~a~0_37) |main_~#aa~0.offset|))) (<= main_~a~0 (+ v_main_~a~0_37 1)))))} assume !(#t~mem0 >= 0);havoc #t~mem0; {5115#(and (= 0 |main_~#aa~0.offset|) (exists ((v_main_~a~0_37 Int)) (and (<= v_main_~a~0_37 6) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 v_main_~a~0_37) |main_~#aa~0.offset|))) (<= main_~a~0 (+ v_main_~a~0_37 1)))))} is VALID [2018-11-18 23:04:18,150 INFO L273 TraceCheckUtils]: 30: Hoare triple {5115#(and (= 0 |main_~#aa~0.offset|) (exists ((v_main_~a~0_37 Int)) (and (<= v_main_~a~0_37 6) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 v_main_~a~0_37) |main_~#aa~0.offset|))) (<= main_~a~0 (+ v_main_~a~0_37 1)))))} havoc ~x~0;~x~0 := 0; {5128#(and (= 0 |main_~#aa~0.offset|) (= main_~x~0 0) (exists ((v_main_~a~0_37 Int)) (and (<= v_main_~a~0_37 6) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 v_main_~a~0_37) |main_~#aa~0.offset|))) (<= main_~a~0 (+ v_main_~a~0_37 1)))))} is VALID [2018-11-18 23:04:18,150 INFO L273 TraceCheckUtils]: 31: Hoare triple {5128#(and (= 0 |main_~#aa~0.offset|) (= main_~x~0 0) (exists ((v_main_~a~0_37 Int)) (and (<= v_main_~a~0_37 6) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 v_main_~a~0_37) |main_~#aa~0.offset|))) (<= main_~a~0 (+ v_main_~a~0_37 1)))))} assume true; {5128#(and (= 0 |main_~#aa~0.offset|) (= main_~x~0 0) (exists ((v_main_~a~0_37 Int)) (and (<= v_main_~a~0_37 6) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 v_main_~a~0_37) |main_~#aa~0.offset|))) (<= main_~a~0 (+ v_main_~a~0_37 1)))))} is VALID [2018-11-18 23:04:18,151 INFO L273 TraceCheckUtils]: 32: Hoare triple {5128#(and (= 0 |main_~#aa~0.offset|) (= main_~x~0 0) (exists ((v_main_~a~0_37 Int)) (and (<= v_main_~a~0_37 6) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 v_main_~a~0_37) |main_~#aa~0.offset|))) (<= main_~a~0 (+ v_main_~a~0_37 1)))))} assume !!(~x~0 < ~a~0);call #t~mem3 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~x~0, 4); {5128#(and (= 0 |main_~#aa~0.offset|) (= main_~x~0 0) (exists ((v_main_~a~0_37 Int)) (and (<= v_main_~a~0_37 6) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 v_main_~a~0_37) |main_~#aa~0.offset|))) (<= main_~a~0 (+ v_main_~a~0_37 1)))))} is VALID [2018-11-18 23:04:18,153 INFO L256 TraceCheckUtils]: 33: Hoare triple {5128#(and (= 0 |main_~#aa~0.offset|) (= main_~x~0 0) (exists ((v_main_~a~0_37 Int)) (and (<= v_main_~a~0_37 6) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 v_main_~a~0_37) |main_~#aa~0.offset|))) (<= main_~a~0 (+ v_main_~a~0_37 1)))))} call __VERIFIER_assert((if #t~mem3 >= 0 then 1 else 0)); {5138#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_22| Int) (v_main_~a~0_37 Int)) (and (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_22|) (* 4 v_main_~a~0_37))) (<= v_main_~a~0_37 6)))} is VALID [2018-11-18 23:04:18,153 INFO L273 TraceCheckUtils]: 34: Hoare triple {5138#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_22| Int) (v_main_~a~0_37 Int)) (and (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_22|) (* 4 v_main_~a~0_37))) (<= v_main_~a~0_37 6)))} ~cond := #in~cond; {5138#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_22| Int) (v_main_~a~0_37 Int)) (and (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_22|) (* 4 v_main_~a~0_37))) (<= v_main_~a~0_37 6)))} is VALID [2018-11-18 23:04:18,154 INFO L273 TraceCheckUtils]: 35: Hoare triple {5138#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_22| Int) (v_main_~a~0_37 Int)) (and (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_22|) (* 4 v_main_~a~0_37))) (<= v_main_~a~0_37 6)))} assume !(0 == ~cond); {5138#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_22| Int) (v_main_~a~0_37 Int)) (and (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_22|) (* 4 v_main_~a~0_37))) (<= v_main_~a~0_37 6)))} is VALID [2018-11-18 23:04:18,154 INFO L273 TraceCheckUtils]: 36: Hoare triple {5138#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_22| Int) (v_main_~a~0_37 Int)) (and (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_22|) (* 4 v_main_~a~0_37))) (<= v_main_~a~0_37 6)))} assume true; {5138#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_22| Int) (v_main_~a~0_37 Int)) (and (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_22|) (* 4 v_main_~a~0_37))) (<= v_main_~a~0_37 6)))} is VALID [2018-11-18 23:04:18,155 INFO L268 TraceCheckUtils]: 37: Hoare quadruple {5138#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_22| Int) (v_main_~a~0_37 Int)) (and (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_22|) (* 4 v_main_~a~0_37))) (<= v_main_~a~0_37 6)))} {5128#(and (= 0 |main_~#aa~0.offset|) (= main_~x~0 0) (exists ((v_main_~a~0_37 Int)) (and (<= v_main_~a~0_37 6) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 v_main_~a~0_37) |main_~#aa~0.offset|))) (<= main_~a~0 (+ v_main_~a~0_37 1)))))} #55#return; {5128#(and (= 0 |main_~#aa~0.offset|) (= main_~x~0 0) (exists ((v_main_~a~0_37 Int)) (and (<= v_main_~a~0_37 6) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 v_main_~a~0_37) |main_~#aa~0.offset|))) (<= main_~a~0 (+ v_main_~a~0_37 1)))))} is VALID [2018-11-18 23:04:18,156 INFO L273 TraceCheckUtils]: 38: Hoare triple {5128#(and (= 0 |main_~#aa~0.offset|) (= main_~x~0 0) (exists ((v_main_~a~0_37 Int)) (and (<= v_main_~a~0_37 6) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 v_main_~a~0_37) |main_~#aa~0.offset|))) (<= main_~a~0 (+ v_main_~a~0_37 1)))))} havoc #t~mem3; {5128#(and (= 0 |main_~#aa~0.offset|) (= main_~x~0 0) (exists ((v_main_~a~0_37 Int)) (and (<= v_main_~a~0_37 6) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 v_main_~a~0_37) |main_~#aa~0.offset|))) (<= main_~a~0 (+ v_main_~a~0_37 1)))))} is VALID [2018-11-18 23:04:18,157 INFO L273 TraceCheckUtils]: 39: Hoare triple {5128#(and (= 0 |main_~#aa~0.offset|) (= main_~x~0 0) (exists ((v_main_~a~0_37 Int)) (and (<= v_main_~a~0_37 6) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 v_main_~a~0_37) |main_~#aa~0.offset|))) (<= main_~a~0 (+ v_main_~a~0_37 1)))))} #t~post2 := ~x~0;~x~0 := 1 + #t~post2;havoc #t~post2; {5157#(and (= 0 |main_~#aa~0.offset|) (<= 1 main_~x~0) (exists ((v_main_~a~0_37 Int)) (and (<= v_main_~a~0_37 6) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 v_main_~a~0_37) |main_~#aa~0.offset|))) (<= main_~a~0 (+ v_main_~a~0_37 1)))))} is VALID [2018-11-18 23:04:18,158 INFO L273 TraceCheckUtils]: 40: Hoare triple {5157#(and (= 0 |main_~#aa~0.offset|) (<= 1 main_~x~0) (exists ((v_main_~a~0_37 Int)) (and (<= v_main_~a~0_37 6) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 v_main_~a~0_37) |main_~#aa~0.offset|))) (<= main_~a~0 (+ v_main_~a~0_37 1)))))} assume true; {5157#(and (= 0 |main_~#aa~0.offset|) (<= 1 main_~x~0) (exists ((v_main_~a~0_37 Int)) (and (<= v_main_~a~0_37 6) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 v_main_~a~0_37) |main_~#aa~0.offset|))) (<= main_~a~0 (+ v_main_~a~0_37 1)))))} is VALID [2018-11-18 23:04:18,159 INFO L273 TraceCheckUtils]: 41: Hoare triple {5157#(and (= 0 |main_~#aa~0.offset|) (<= 1 main_~x~0) (exists ((v_main_~a~0_37 Int)) (and (<= v_main_~a~0_37 6) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 v_main_~a~0_37) |main_~#aa~0.offset|))) (<= main_~a~0 (+ v_main_~a~0_37 1)))))} assume !!(~x~0 < ~a~0);call #t~mem3 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~x~0, 4); {5157#(and (= 0 |main_~#aa~0.offset|) (<= 1 main_~x~0) (exists ((v_main_~a~0_37 Int)) (and (<= v_main_~a~0_37 6) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 v_main_~a~0_37) |main_~#aa~0.offset|))) (<= main_~a~0 (+ v_main_~a~0_37 1)))))} is VALID [2018-11-18 23:04:18,160 INFO L256 TraceCheckUtils]: 42: Hoare triple {5157#(and (= 0 |main_~#aa~0.offset|) (<= 1 main_~x~0) (exists ((v_main_~a~0_37 Int)) (and (<= v_main_~a~0_37 6) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 v_main_~a~0_37) |main_~#aa~0.offset|))) (<= main_~a~0 (+ v_main_~a~0_37 1)))))} call __VERIFIER_assert((if #t~mem3 >= 0 then 1 else 0)); {5138#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_22| Int) (v_main_~a~0_37 Int)) (and (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_22|) (* 4 v_main_~a~0_37))) (<= v_main_~a~0_37 6)))} is VALID [2018-11-18 23:04:18,161 INFO L273 TraceCheckUtils]: 43: Hoare triple {5138#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_22| Int) (v_main_~a~0_37 Int)) (and (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_22|) (* 4 v_main_~a~0_37))) (<= v_main_~a~0_37 6)))} ~cond := #in~cond; {5138#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_22| Int) (v_main_~a~0_37 Int)) (and (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_22|) (* 4 v_main_~a~0_37))) (<= v_main_~a~0_37 6)))} is VALID [2018-11-18 23:04:18,161 INFO L273 TraceCheckUtils]: 44: Hoare triple {5138#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_22| Int) (v_main_~a~0_37 Int)) (and (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_22|) (* 4 v_main_~a~0_37))) (<= v_main_~a~0_37 6)))} assume !(0 == ~cond); {5138#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_22| Int) (v_main_~a~0_37 Int)) (and (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_22|) (* 4 v_main_~a~0_37))) (<= v_main_~a~0_37 6)))} is VALID [2018-11-18 23:04:18,162 INFO L273 TraceCheckUtils]: 45: Hoare triple {5138#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_22| Int) (v_main_~a~0_37 Int)) (and (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_22|) (* 4 v_main_~a~0_37))) (<= v_main_~a~0_37 6)))} assume true; {5138#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_22| Int) (v_main_~a~0_37 Int)) (and (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_22|) (* 4 v_main_~a~0_37))) (<= v_main_~a~0_37 6)))} is VALID [2018-11-18 23:04:18,163 INFO L268 TraceCheckUtils]: 46: Hoare quadruple {5138#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_22| Int) (v_main_~a~0_37 Int)) (and (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_22|) (* 4 v_main_~a~0_37))) (<= v_main_~a~0_37 6)))} {5157#(and (= 0 |main_~#aa~0.offset|) (<= 1 main_~x~0) (exists ((v_main_~a~0_37 Int)) (and (<= v_main_~a~0_37 6) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 v_main_~a~0_37) |main_~#aa~0.offset|))) (<= main_~a~0 (+ v_main_~a~0_37 1)))))} #55#return; {5157#(and (= 0 |main_~#aa~0.offset|) (<= 1 main_~x~0) (exists ((v_main_~a~0_37 Int)) (and (<= v_main_~a~0_37 6) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 v_main_~a~0_37) |main_~#aa~0.offset|))) (<= main_~a~0 (+ v_main_~a~0_37 1)))))} is VALID [2018-11-18 23:04:18,164 INFO L273 TraceCheckUtils]: 47: Hoare triple {5157#(and (= 0 |main_~#aa~0.offset|) (<= 1 main_~x~0) (exists ((v_main_~a~0_37 Int)) (and (<= v_main_~a~0_37 6) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 v_main_~a~0_37) |main_~#aa~0.offset|))) (<= main_~a~0 (+ v_main_~a~0_37 1)))))} havoc #t~mem3; {5157#(and (= 0 |main_~#aa~0.offset|) (<= 1 main_~x~0) (exists ((v_main_~a~0_37 Int)) (and (<= v_main_~a~0_37 6) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 v_main_~a~0_37) |main_~#aa~0.offset|))) (<= main_~a~0 (+ v_main_~a~0_37 1)))))} is VALID [2018-11-18 23:04:18,165 INFO L273 TraceCheckUtils]: 48: Hoare triple {5157#(and (= 0 |main_~#aa~0.offset|) (<= 1 main_~x~0) (exists ((v_main_~a~0_37 Int)) (and (<= v_main_~a~0_37 6) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 v_main_~a~0_37) |main_~#aa~0.offset|))) (<= main_~a~0 (+ v_main_~a~0_37 1)))))} #t~post2 := ~x~0;~x~0 := 1 + #t~post2;havoc #t~post2; {5185#(and (= 0 |main_~#aa~0.offset|) (<= 2 main_~x~0) (exists ((v_main_~a~0_37 Int)) (and (<= v_main_~a~0_37 6) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 v_main_~a~0_37) |main_~#aa~0.offset|))) (<= main_~a~0 (+ v_main_~a~0_37 1)))))} is VALID [2018-11-18 23:04:18,166 INFO L273 TraceCheckUtils]: 49: Hoare triple {5185#(and (= 0 |main_~#aa~0.offset|) (<= 2 main_~x~0) (exists ((v_main_~a~0_37 Int)) (and (<= v_main_~a~0_37 6) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 v_main_~a~0_37) |main_~#aa~0.offset|))) (<= main_~a~0 (+ v_main_~a~0_37 1)))))} assume true; {5185#(and (= 0 |main_~#aa~0.offset|) (<= 2 main_~x~0) (exists ((v_main_~a~0_37 Int)) (and (<= v_main_~a~0_37 6) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 v_main_~a~0_37) |main_~#aa~0.offset|))) (<= main_~a~0 (+ v_main_~a~0_37 1)))))} is VALID [2018-11-18 23:04:18,166 INFO L273 TraceCheckUtils]: 50: Hoare triple {5185#(and (= 0 |main_~#aa~0.offset|) (<= 2 main_~x~0) (exists ((v_main_~a~0_37 Int)) (and (<= v_main_~a~0_37 6) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 v_main_~a~0_37) |main_~#aa~0.offset|))) (<= main_~a~0 (+ v_main_~a~0_37 1)))))} assume !!(~x~0 < ~a~0);call #t~mem3 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~x~0, 4); {5185#(and (= 0 |main_~#aa~0.offset|) (<= 2 main_~x~0) (exists ((v_main_~a~0_37 Int)) (and (<= v_main_~a~0_37 6) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 v_main_~a~0_37) |main_~#aa~0.offset|))) (<= main_~a~0 (+ v_main_~a~0_37 1)))))} is VALID [2018-11-18 23:04:18,168 INFO L256 TraceCheckUtils]: 51: Hoare triple {5185#(and (= 0 |main_~#aa~0.offset|) (<= 2 main_~x~0) (exists ((v_main_~a~0_37 Int)) (and (<= v_main_~a~0_37 6) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 v_main_~a~0_37) |main_~#aa~0.offset|))) (<= main_~a~0 (+ v_main_~a~0_37 1)))))} call __VERIFIER_assert((if #t~mem3 >= 0 then 1 else 0)); {5138#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_22| Int) (v_main_~a~0_37 Int)) (and (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_22|) (* 4 v_main_~a~0_37))) (<= v_main_~a~0_37 6)))} is VALID [2018-11-18 23:04:18,169 INFO L273 TraceCheckUtils]: 52: Hoare triple {5138#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_22| Int) (v_main_~a~0_37 Int)) (and (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_22|) (* 4 v_main_~a~0_37))) (<= v_main_~a~0_37 6)))} ~cond := #in~cond; {5138#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_22| Int) (v_main_~a~0_37 Int)) (and (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_22|) (* 4 v_main_~a~0_37))) (<= v_main_~a~0_37 6)))} is VALID [2018-11-18 23:04:18,169 INFO L273 TraceCheckUtils]: 53: Hoare triple {5138#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_22| Int) (v_main_~a~0_37 Int)) (and (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_22|) (* 4 v_main_~a~0_37))) (<= v_main_~a~0_37 6)))} assume !(0 == ~cond); {5138#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_22| Int) (v_main_~a~0_37 Int)) (and (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_22|) (* 4 v_main_~a~0_37))) (<= v_main_~a~0_37 6)))} is VALID [2018-11-18 23:04:18,170 INFO L273 TraceCheckUtils]: 54: Hoare triple {5138#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_22| Int) (v_main_~a~0_37 Int)) (and (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_22|) (* 4 v_main_~a~0_37))) (<= v_main_~a~0_37 6)))} assume true; {5138#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_22| Int) (v_main_~a~0_37 Int)) (and (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_22|) (* 4 v_main_~a~0_37))) (<= v_main_~a~0_37 6)))} is VALID [2018-11-18 23:04:18,170 INFO L268 TraceCheckUtils]: 55: Hoare quadruple {5138#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_22| Int) (v_main_~a~0_37 Int)) (and (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_22|) (* 4 v_main_~a~0_37))) (<= v_main_~a~0_37 6)))} {5185#(and (= 0 |main_~#aa~0.offset|) (<= 2 main_~x~0) (exists ((v_main_~a~0_37 Int)) (and (<= v_main_~a~0_37 6) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 v_main_~a~0_37) |main_~#aa~0.offset|))) (<= main_~a~0 (+ v_main_~a~0_37 1)))))} #55#return; {5185#(and (= 0 |main_~#aa~0.offset|) (<= 2 main_~x~0) (exists ((v_main_~a~0_37 Int)) (and (<= v_main_~a~0_37 6) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 v_main_~a~0_37) |main_~#aa~0.offset|))) (<= main_~a~0 (+ v_main_~a~0_37 1)))))} is VALID [2018-11-18 23:04:18,171 INFO L273 TraceCheckUtils]: 56: Hoare triple {5185#(and (= 0 |main_~#aa~0.offset|) (<= 2 main_~x~0) (exists ((v_main_~a~0_37 Int)) (and (<= v_main_~a~0_37 6) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 v_main_~a~0_37) |main_~#aa~0.offset|))) (<= main_~a~0 (+ v_main_~a~0_37 1)))))} havoc #t~mem3; {5185#(and (= 0 |main_~#aa~0.offset|) (<= 2 main_~x~0) (exists ((v_main_~a~0_37 Int)) (and (<= v_main_~a~0_37 6) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 v_main_~a~0_37) |main_~#aa~0.offset|))) (<= main_~a~0 (+ v_main_~a~0_37 1)))))} is VALID [2018-11-18 23:04:18,172 INFO L273 TraceCheckUtils]: 57: Hoare triple {5185#(and (= 0 |main_~#aa~0.offset|) (<= 2 main_~x~0) (exists ((v_main_~a~0_37 Int)) (and (<= v_main_~a~0_37 6) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 v_main_~a~0_37) |main_~#aa~0.offset|))) (<= main_~a~0 (+ v_main_~a~0_37 1)))))} #t~post2 := ~x~0;~x~0 := 1 + #t~post2;havoc #t~post2; {5213#(and (= 0 |main_~#aa~0.offset|) (<= 3 main_~x~0) (exists ((v_main_~a~0_37 Int)) (and (<= v_main_~a~0_37 6) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 v_main_~a~0_37) |main_~#aa~0.offset|))) (<= main_~a~0 (+ v_main_~a~0_37 1)))))} is VALID [2018-11-18 23:04:18,173 INFO L273 TraceCheckUtils]: 58: Hoare triple {5213#(and (= 0 |main_~#aa~0.offset|) (<= 3 main_~x~0) (exists ((v_main_~a~0_37 Int)) (and (<= v_main_~a~0_37 6) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 v_main_~a~0_37) |main_~#aa~0.offset|))) (<= main_~a~0 (+ v_main_~a~0_37 1)))))} assume true; {5213#(and (= 0 |main_~#aa~0.offset|) (<= 3 main_~x~0) (exists ((v_main_~a~0_37 Int)) (and (<= v_main_~a~0_37 6) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 v_main_~a~0_37) |main_~#aa~0.offset|))) (<= main_~a~0 (+ v_main_~a~0_37 1)))))} is VALID [2018-11-18 23:04:18,174 INFO L273 TraceCheckUtils]: 59: Hoare triple {5213#(and (= 0 |main_~#aa~0.offset|) (<= 3 main_~x~0) (exists ((v_main_~a~0_37 Int)) (and (<= v_main_~a~0_37 6) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 v_main_~a~0_37) |main_~#aa~0.offset|))) (<= main_~a~0 (+ v_main_~a~0_37 1)))))} assume !!(~x~0 < ~a~0);call #t~mem3 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~x~0, 4); {5213#(and (= 0 |main_~#aa~0.offset|) (<= 3 main_~x~0) (exists ((v_main_~a~0_37 Int)) (and (<= v_main_~a~0_37 6) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 v_main_~a~0_37) |main_~#aa~0.offset|))) (<= main_~a~0 (+ v_main_~a~0_37 1)))))} is VALID [2018-11-18 23:04:18,176 INFO L256 TraceCheckUtils]: 60: Hoare triple {5213#(and (= 0 |main_~#aa~0.offset|) (<= 3 main_~x~0) (exists ((v_main_~a~0_37 Int)) (and (<= v_main_~a~0_37 6) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 v_main_~a~0_37) |main_~#aa~0.offset|))) (<= main_~a~0 (+ v_main_~a~0_37 1)))))} call __VERIFIER_assert((if #t~mem3 >= 0 then 1 else 0)); {5138#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_22| Int) (v_main_~a~0_37 Int)) (and (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_22|) (* 4 v_main_~a~0_37))) (<= v_main_~a~0_37 6)))} is VALID [2018-11-18 23:04:18,176 INFO L273 TraceCheckUtils]: 61: Hoare triple {5138#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_22| Int) (v_main_~a~0_37 Int)) (and (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_22|) (* 4 v_main_~a~0_37))) (<= v_main_~a~0_37 6)))} ~cond := #in~cond; {5138#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_22| Int) (v_main_~a~0_37 Int)) (and (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_22|) (* 4 v_main_~a~0_37))) (<= v_main_~a~0_37 6)))} is VALID [2018-11-18 23:04:18,177 INFO L273 TraceCheckUtils]: 62: Hoare triple {5138#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_22| Int) (v_main_~a~0_37 Int)) (and (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_22|) (* 4 v_main_~a~0_37))) (<= v_main_~a~0_37 6)))} assume !(0 == ~cond); {5138#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_22| Int) (v_main_~a~0_37 Int)) (and (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_22|) (* 4 v_main_~a~0_37))) (<= v_main_~a~0_37 6)))} is VALID [2018-11-18 23:04:18,177 INFO L273 TraceCheckUtils]: 63: Hoare triple {5138#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_22| Int) (v_main_~a~0_37 Int)) (and (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_22|) (* 4 v_main_~a~0_37))) (<= v_main_~a~0_37 6)))} assume true; {5138#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_22| Int) (v_main_~a~0_37 Int)) (and (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_22|) (* 4 v_main_~a~0_37))) (<= v_main_~a~0_37 6)))} is VALID [2018-11-18 23:04:18,178 INFO L268 TraceCheckUtils]: 64: Hoare quadruple {5138#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_22| Int) (v_main_~a~0_37 Int)) (and (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_22|) (* 4 v_main_~a~0_37))) (<= v_main_~a~0_37 6)))} {5213#(and (= 0 |main_~#aa~0.offset|) (<= 3 main_~x~0) (exists ((v_main_~a~0_37 Int)) (and (<= v_main_~a~0_37 6) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 v_main_~a~0_37) |main_~#aa~0.offset|))) (<= main_~a~0 (+ v_main_~a~0_37 1)))))} #55#return; {5213#(and (= 0 |main_~#aa~0.offset|) (<= 3 main_~x~0) (exists ((v_main_~a~0_37 Int)) (and (<= v_main_~a~0_37 6) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 v_main_~a~0_37) |main_~#aa~0.offset|))) (<= main_~a~0 (+ v_main_~a~0_37 1)))))} is VALID [2018-11-18 23:04:18,179 INFO L273 TraceCheckUtils]: 65: Hoare triple {5213#(and (= 0 |main_~#aa~0.offset|) (<= 3 main_~x~0) (exists ((v_main_~a~0_37 Int)) (and (<= v_main_~a~0_37 6) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 v_main_~a~0_37) |main_~#aa~0.offset|))) (<= main_~a~0 (+ v_main_~a~0_37 1)))))} havoc #t~mem3; {5213#(and (= 0 |main_~#aa~0.offset|) (<= 3 main_~x~0) (exists ((v_main_~a~0_37 Int)) (and (<= v_main_~a~0_37 6) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 v_main_~a~0_37) |main_~#aa~0.offset|))) (<= main_~a~0 (+ v_main_~a~0_37 1)))))} is VALID [2018-11-18 23:04:18,180 INFO L273 TraceCheckUtils]: 66: Hoare triple {5213#(and (= 0 |main_~#aa~0.offset|) (<= 3 main_~x~0) (exists ((v_main_~a~0_37 Int)) (and (<= v_main_~a~0_37 6) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 v_main_~a~0_37) |main_~#aa~0.offset|))) (<= main_~a~0 (+ v_main_~a~0_37 1)))))} #t~post2 := ~x~0;~x~0 := 1 + #t~post2;havoc #t~post2; {5241#(and (= 0 |main_~#aa~0.offset|) (<= 4 main_~x~0) (exists ((v_main_~a~0_37 Int)) (and (<= v_main_~a~0_37 6) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 v_main_~a~0_37) |main_~#aa~0.offset|))) (<= main_~a~0 (+ v_main_~a~0_37 1)))))} is VALID [2018-11-18 23:04:18,181 INFO L273 TraceCheckUtils]: 67: Hoare triple {5241#(and (= 0 |main_~#aa~0.offset|) (<= 4 main_~x~0) (exists ((v_main_~a~0_37 Int)) (and (<= v_main_~a~0_37 6) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 v_main_~a~0_37) |main_~#aa~0.offset|))) (<= main_~a~0 (+ v_main_~a~0_37 1)))))} assume true; {5241#(and (= 0 |main_~#aa~0.offset|) (<= 4 main_~x~0) (exists ((v_main_~a~0_37 Int)) (and (<= v_main_~a~0_37 6) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 v_main_~a~0_37) |main_~#aa~0.offset|))) (<= main_~a~0 (+ v_main_~a~0_37 1)))))} is VALID [2018-11-18 23:04:18,182 INFO L273 TraceCheckUtils]: 68: Hoare triple {5241#(and (= 0 |main_~#aa~0.offset|) (<= 4 main_~x~0) (exists ((v_main_~a~0_37 Int)) (and (<= v_main_~a~0_37 6) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 v_main_~a~0_37) |main_~#aa~0.offset|))) (<= main_~a~0 (+ v_main_~a~0_37 1)))))} assume !!(~x~0 < ~a~0);call #t~mem3 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~x~0, 4); {5241#(and (= 0 |main_~#aa~0.offset|) (<= 4 main_~x~0) (exists ((v_main_~a~0_37 Int)) (and (<= v_main_~a~0_37 6) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 v_main_~a~0_37) |main_~#aa~0.offset|))) (<= main_~a~0 (+ v_main_~a~0_37 1)))))} is VALID [2018-11-18 23:04:18,183 INFO L256 TraceCheckUtils]: 69: Hoare triple {5241#(and (= 0 |main_~#aa~0.offset|) (<= 4 main_~x~0) (exists ((v_main_~a~0_37 Int)) (and (<= v_main_~a~0_37 6) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 v_main_~a~0_37) |main_~#aa~0.offset|))) (<= main_~a~0 (+ v_main_~a~0_37 1)))))} call __VERIFIER_assert((if #t~mem3 >= 0 then 1 else 0)); {5138#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_22| Int) (v_main_~a~0_37 Int)) (and (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_22|) (* 4 v_main_~a~0_37))) (<= v_main_~a~0_37 6)))} is VALID [2018-11-18 23:04:18,184 INFO L273 TraceCheckUtils]: 70: Hoare triple {5138#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_22| Int) (v_main_~a~0_37 Int)) (and (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_22|) (* 4 v_main_~a~0_37))) (<= v_main_~a~0_37 6)))} ~cond := #in~cond; {5138#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_22| Int) (v_main_~a~0_37 Int)) (and (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_22|) (* 4 v_main_~a~0_37))) (<= v_main_~a~0_37 6)))} is VALID [2018-11-18 23:04:18,184 INFO L273 TraceCheckUtils]: 71: Hoare triple {5138#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_22| Int) (v_main_~a~0_37 Int)) (and (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_22|) (* 4 v_main_~a~0_37))) (<= v_main_~a~0_37 6)))} assume !(0 == ~cond); {5138#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_22| Int) (v_main_~a~0_37 Int)) (and (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_22|) (* 4 v_main_~a~0_37))) (<= v_main_~a~0_37 6)))} is VALID [2018-11-18 23:04:18,185 INFO L273 TraceCheckUtils]: 72: Hoare triple {5138#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_22| Int) (v_main_~a~0_37 Int)) (and (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_22|) (* 4 v_main_~a~0_37))) (<= v_main_~a~0_37 6)))} assume true; {5138#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_22| Int) (v_main_~a~0_37 Int)) (and (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_22|) (* 4 v_main_~a~0_37))) (<= v_main_~a~0_37 6)))} is VALID [2018-11-18 23:04:18,186 INFO L268 TraceCheckUtils]: 73: Hoare quadruple {5138#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_22| Int) (v_main_~a~0_37 Int)) (and (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_22|) (* 4 v_main_~a~0_37))) (<= v_main_~a~0_37 6)))} {5241#(and (= 0 |main_~#aa~0.offset|) (<= 4 main_~x~0) (exists ((v_main_~a~0_37 Int)) (and (<= v_main_~a~0_37 6) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 v_main_~a~0_37) |main_~#aa~0.offset|))) (<= main_~a~0 (+ v_main_~a~0_37 1)))))} #55#return; {5241#(and (= 0 |main_~#aa~0.offset|) (<= 4 main_~x~0) (exists ((v_main_~a~0_37 Int)) (and (<= v_main_~a~0_37 6) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 v_main_~a~0_37) |main_~#aa~0.offset|))) (<= main_~a~0 (+ v_main_~a~0_37 1)))))} is VALID [2018-11-18 23:04:18,186 INFO L273 TraceCheckUtils]: 74: Hoare triple {5241#(and (= 0 |main_~#aa~0.offset|) (<= 4 main_~x~0) (exists ((v_main_~a~0_37 Int)) (and (<= v_main_~a~0_37 6) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 v_main_~a~0_37) |main_~#aa~0.offset|))) (<= main_~a~0 (+ v_main_~a~0_37 1)))))} havoc #t~mem3; {5241#(and (= 0 |main_~#aa~0.offset|) (<= 4 main_~x~0) (exists ((v_main_~a~0_37 Int)) (and (<= v_main_~a~0_37 6) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 v_main_~a~0_37) |main_~#aa~0.offset|))) (<= main_~a~0 (+ v_main_~a~0_37 1)))))} is VALID [2018-11-18 23:04:18,187 INFO L273 TraceCheckUtils]: 75: Hoare triple {5241#(and (= 0 |main_~#aa~0.offset|) (<= 4 main_~x~0) (exists ((v_main_~a~0_37 Int)) (and (<= v_main_~a~0_37 6) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 v_main_~a~0_37) |main_~#aa~0.offset|))) (<= main_~a~0 (+ v_main_~a~0_37 1)))))} #t~post2 := ~x~0;~x~0 := 1 + #t~post2;havoc #t~post2; {5269#(and (= 0 |main_~#aa~0.offset|) (<= 5 main_~x~0) (exists ((v_main_~a~0_37 Int)) (and (<= v_main_~a~0_37 6) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 v_main_~a~0_37) |main_~#aa~0.offset|))) (<= main_~a~0 (+ v_main_~a~0_37 1)))))} is VALID [2018-11-18 23:04:18,188 INFO L273 TraceCheckUtils]: 76: Hoare triple {5269#(and (= 0 |main_~#aa~0.offset|) (<= 5 main_~x~0) (exists ((v_main_~a~0_37 Int)) (and (<= v_main_~a~0_37 6) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 v_main_~a~0_37) |main_~#aa~0.offset|))) (<= main_~a~0 (+ v_main_~a~0_37 1)))))} assume true; {5269#(and (= 0 |main_~#aa~0.offset|) (<= 5 main_~x~0) (exists ((v_main_~a~0_37 Int)) (and (<= v_main_~a~0_37 6) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 v_main_~a~0_37) |main_~#aa~0.offset|))) (<= main_~a~0 (+ v_main_~a~0_37 1)))))} is VALID [2018-11-18 23:04:18,189 INFO L273 TraceCheckUtils]: 77: Hoare triple {5269#(and (= 0 |main_~#aa~0.offset|) (<= 5 main_~x~0) (exists ((v_main_~a~0_37 Int)) (and (<= v_main_~a~0_37 6) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 v_main_~a~0_37) |main_~#aa~0.offset|))) (<= main_~a~0 (+ v_main_~a~0_37 1)))))} assume !!(~x~0 < ~a~0);call #t~mem3 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~x~0, 4); {5269#(and (= 0 |main_~#aa~0.offset|) (<= 5 main_~x~0) (exists ((v_main_~a~0_37 Int)) (and (<= v_main_~a~0_37 6) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 v_main_~a~0_37) |main_~#aa~0.offset|))) (<= main_~a~0 (+ v_main_~a~0_37 1)))))} is VALID [2018-11-18 23:04:18,191 INFO L256 TraceCheckUtils]: 78: Hoare triple {5269#(and (= 0 |main_~#aa~0.offset|) (<= 5 main_~x~0) (exists ((v_main_~a~0_37 Int)) (and (<= v_main_~a~0_37 6) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 v_main_~a~0_37) |main_~#aa~0.offset|))) (<= main_~a~0 (+ v_main_~a~0_37 1)))))} call __VERIFIER_assert((if #t~mem3 >= 0 then 1 else 0)); {5138#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_22| Int) (v_main_~a~0_37 Int)) (and (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_22|) (* 4 v_main_~a~0_37))) (<= v_main_~a~0_37 6)))} is VALID [2018-11-18 23:04:18,191 INFO L273 TraceCheckUtils]: 79: Hoare triple {5138#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_22| Int) (v_main_~a~0_37 Int)) (and (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_22|) (* 4 v_main_~a~0_37))) (<= v_main_~a~0_37 6)))} ~cond := #in~cond; {5138#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_22| Int) (v_main_~a~0_37 Int)) (and (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_22|) (* 4 v_main_~a~0_37))) (<= v_main_~a~0_37 6)))} is VALID [2018-11-18 23:04:18,192 INFO L273 TraceCheckUtils]: 80: Hoare triple {5138#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_22| Int) (v_main_~a~0_37 Int)) (and (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_22|) (* 4 v_main_~a~0_37))) (<= v_main_~a~0_37 6)))} assume !(0 == ~cond); {5138#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_22| Int) (v_main_~a~0_37 Int)) (and (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_22|) (* 4 v_main_~a~0_37))) (<= v_main_~a~0_37 6)))} is VALID [2018-11-18 23:04:18,192 INFO L273 TraceCheckUtils]: 81: Hoare triple {5138#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_22| Int) (v_main_~a~0_37 Int)) (and (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_22|) (* 4 v_main_~a~0_37))) (<= v_main_~a~0_37 6)))} assume true; {5138#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_22| Int) (v_main_~a~0_37 Int)) (and (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_22|) (* 4 v_main_~a~0_37))) (<= v_main_~a~0_37 6)))} is VALID [2018-11-18 23:04:18,193 INFO L268 TraceCheckUtils]: 82: Hoare quadruple {5138#(exists ((|v_main_~#aa~0.base_BEFORE_CALL_22| Int) (v_main_~a~0_37 Int)) (and (<= 0 (select (select |#memory_int| |v_main_~#aa~0.base_BEFORE_CALL_22|) (* 4 v_main_~a~0_37))) (<= v_main_~a~0_37 6)))} {5269#(and (= 0 |main_~#aa~0.offset|) (<= 5 main_~x~0) (exists ((v_main_~a~0_37 Int)) (and (<= v_main_~a~0_37 6) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 v_main_~a~0_37) |main_~#aa~0.offset|))) (<= main_~a~0 (+ v_main_~a~0_37 1)))))} #55#return; {5269#(and (= 0 |main_~#aa~0.offset|) (<= 5 main_~x~0) (exists ((v_main_~a~0_37 Int)) (and (<= v_main_~a~0_37 6) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 v_main_~a~0_37) |main_~#aa~0.offset|))) (<= main_~a~0 (+ v_main_~a~0_37 1)))))} is VALID [2018-11-18 23:04:18,194 INFO L273 TraceCheckUtils]: 83: Hoare triple {5269#(and (= 0 |main_~#aa~0.offset|) (<= 5 main_~x~0) (exists ((v_main_~a~0_37 Int)) (and (<= v_main_~a~0_37 6) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 v_main_~a~0_37) |main_~#aa~0.offset|))) (<= main_~a~0 (+ v_main_~a~0_37 1)))))} havoc #t~mem3; {5269#(and (= 0 |main_~#aa~0.offset|) (<= 5 main_~x~0) (exists ((v_main_~a~0_37 Int)) (and (<= v_main_~a~0_37 6) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 v_main_~a~0_37) |main_~#aa~0.offset|))) (<= main_~a~0 (+ v_main_~a~0_37 1)))))} is VALID [2018-11-18 23:04:18,195 INFO L273 TraceCheckUtils]: 84: Hoare triple {5269#(and (= 0 |main_~#aa~0.offset|) (<= 5 main_~x~0) (exists ((v_main_~a~0_37 Int)) (and (<= v_main_~a~0_37 6) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 v_main_~a~0_37) |main_~#aa~0.offset|))) (<= main_~a~0 (+ v_main_~a~0_37 1)))))} #t~post2 := ~x~0;~x~0 := 1 + #t~post2;havoc #t~post2; {5297#(and (= 0 |main_~#aa~0.offset|) (<= 6 main_~x~0) (exists ((v_main_~a~0_37 Int)) (and (<= v_main_~a~0_37 6) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 v_main_~a~0_37) |main_~#aa~0.offset|))) (<= main_~a~0 (+ v_main_~a~0_37 1)))))} is VALID [2018-11-18 23:04:18,196 INFO L273 TraceCheckUtils]: 85: Hoare triple {5297#(and (= 0 |main_~#aa~0.offset|) (<= 6 main_~x~0) (exists ((v_main_~a~0_37 Int)) (and (<= v_main_~a~0_37 6) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 v_main_~a~0_37) |main_~#aa~0.offset|))) (<= main_~a~0 (+ v_main_~a~0_37 1)))))} assume true; {5297#(and (= 0 |main_~#aa~0.offset|) (<= 6 main_~x~0) (exists ((v_main_~a~0_37 Int)) (and (<= v_main_~a~0_37 6) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 v_main_~a~0_37) |main_~#aa~0.offset|))) (<= main_~a~0 (+ v_main_~a~0_37 1)))))} is VALID [2018-11-18 23:04:18,197 INFO L273 TraceCheckUtils]: 86: Hoare triple {5297#(and (= 0 |main_~#aa~0.offset|) (<= 6 main_~x~0) (exists ((v_main_~a~0_37 Int)) (and (<= v_main_~a~0_37 6) (<= 0 (select (select |#memory_int| |main_~#aa~0.base|) (+ (* 4 v_main_~a~0_37) |main_~#aa~0.offset|))) (<= main_~a~0 (+ v_main_~a~0_37 1)))))} assume !!(~x~0 < ~a~0);call #t~mem3 := read~int(~#aa~0.base, ~#aa~0.offset + 4 * ~x~0, 4); {5024#(<= 0 |main_#t~mem3|)} is VALID [2018-11-18 23:04:18,198 INFO L256 TraceCheckUtils]: 87: Hoare triple {5024#(<= 0 |main_#t~mem3|)} call __VERIFIER_assert((if #t~mem3 >= 0 then 1 else 0)); {5307#(= |__VERIFIER_assert_#in~cond| 1)} is VALID [2018-11-18 23:04:18,198 INFO L273 TraceCheckUtils]: 88: Hoare triple {5307#(= |__VERIFIER_assert_#in~cond| 1)} ~cond := #in~cond; {5311#(= 1 __VERIFIER_assert_~cond)} is VALID [2018-11-18 23:04:18,199 INFO L273 TraceCheckUtils]: 89: Hoare triple {5311#(= 1 __VERIFIER_assert_~cond)} assume 0 == ~cond; {5005#false} is VALID [2018-11-18 23:04:18,199 INFO L273 TraceCheckUtils]: 90: Hoare triple {5005#false} assume !false; {5005#false} is VALID [2018-11-18 23:04:18,231 INFO L134 CoverageAnalysis]: Checked inductivity of 249 backedges. 60 proven. 129 refuted. 0 times theorem prover too weak. 60 trivial. 0 not checked. [2018-11-18 23:04:18,249 INFO L312 seRefinementStrategy]: Constructing automaton from 0 perfect and 2 imperfect interpolant sequences. [2018-11-18 23:04:18,249 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [22, 22] total 41 [2018-11-18 23:04:18,250 INFO L78 Accepts]: Start accepts. Automaton has 41 states. Word has length 91 [2018-11-18 23:04:18,250 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-18 23:04:18,251 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 41 states. [2018-11-18 23:04:18,435 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 149 edges. 149 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-18 23:04:18,435 INFO L459 AbstractCegarLoop]: Interpolant automaton has 41 states [2018-11-18 23:04:18,435 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 41 interpolants. [2018-11-18 23:04:18,436 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=240, Invalid=1400, Unknown=0, NotChecked=0, Total=1640 [2018-11-18 23:04:18,437 INFO L87 Difference]: Start difference. First operand 94 states and 95 transitions. Second operand 41 states. [2018-11-18 23:04:26,861 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:04:26,861 INFO L93 Difference]: Finished difference Result 139 states and 147 transitions. [2018-11-18 23:04:26,861 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 37 states. [2018-11-18 23:04:26,861 INFO L78 Accepts]: Start accepts. Automaton has 41 states. Word has length 91 [2018-11-18 23:04:26,862 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-18 23:04:26,862 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 41 states. [2018-11-18 23:04:26,864 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 37 states to 37 states and 95 transitions. [2018-11-18 23:04:26,864 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 41 states. [2018-11-18 23:04:26,866 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 37 states to 37 states and 95 transitions. [2018-11-18 23:04:26,866 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 37 states and 95 transitions. [2018-11-18 23:04:27,398 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 95 edges. 95 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-18 23:04:27,400 INFO L225 Difference]: With dead ends: 139 [2018-11-18 23:04:27,400 INFO L226 Difference]: Without dead ends: 97 [2018-11-18 23:04:27,402 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 141 GetRequests, 65 SyntacticMatches, 11 SemanticMatches, 65 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1686 ImplicationChecksByTransitivity, 3.8s TimeCoverageRelationStatistics Valid=623, Invalid=3799, Unknown=0, NotChecked=0, Total=4422 [2018-11-18 23:04:27,402 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 97 states.