java -ea -Xmx8000000000 -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc ../../../trunk/examples/toolchains/AutomizerCInline_WitnessPrinter.xml -s ../../../trunk/examples/settings/default/automizer/svcomp-Reach-32bit-Automizer_Bitvector.epf -i ../../../trunk/examples/svcomp/list-ext-properties/list-ext_false-unreach-call_false-valid-deref.i


--------------------------------------------------------------------------------


This is Ultimate 0.1.23-61f4311
[2018-11-23 11:09:57,916 INFO  L170        SettingsManager]: Resetting all preferences to default values...
[2018-11-23 11:09:57,918 INFO  L174        SettingsManager]: Resetting UltimateCore preferences to default values
[2018-11-23 11:09:57,931 INFO  L177        SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring...
[2018-11-23 11:09:57,932 INFO  L174        SettingsManager]: Resetting Boogie Preprocessor preferences to default values
[2018-11-23 11:09:57,933 INFO  L174        SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values
[2018-11-23 11:09:57,934 INFO  L174        SettingsManager]: Resetting Abstract Interpretation preferences to default values
[2018-11-23 11:09:57,936 INFO  L174        SettingsManager]: Resetting LassoRanker preferences to default values
[2018-11-23 11:09:57,938 INFO  L174        SettingsManager]: Resetting Reaching Definitions preferences to default values
[2018-11-23 11:09:57,938 INFO  L174        SettingsManager]: Resetting SyntaxChecker preferences to default values
[2018-11-23 11:09:57,939 INFO  L177        SettingsManager]: Büchi Program Product provides no preferences, ignoring...
[2018-11-23 11:09:57,940 INFO  L174        SettingsManager]: Resetting LTL2Aut preferences to default values
[2018-11-23 11:09:57,941 INFO  L174        SettingsManager]: Resetting PEA to Boogie preferences to default values
[2018-11-23 11:09:57,942 INFO  L174        SettingsManager]: Resetting BlockEncodingV2 preferences to default values
[2018-11-23 11:09:57,943 INFO  L174        SettingsManager]: Resetting ChcToBoogie preferences to default values
[2018-11-23 11:09:57,944 INFO  L174        SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values
[2018-11-23 11:09:57,945 INFO  L174        SettingsManager]: Resetting BuchiAutomizer preferences to default values
[2018-11-23 11:09:57,946 INFO  L174        SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values
[2018-11-23 11:09:57,948 INFO  L174        SettingsManager]: Resetting CodeCheck preferences to default values
[2018-11-23 11:09:57,950 INFO  L174        SettingsManager]: Resetting InvariantSynthesis preferences to default values
[2018-11-23 11:09:57,951 INFO  L174        SettingsManager]: Resetting RCFGBuilder preferences to default values
[2018-11-23 11:09:57,952 INFO  L174        SettingsManager]: Resetting TraceAbstraction preferences to default values
[2018-11-23 11:09:57,954 INFO  L177        SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring...
[2018-11-23 11:09:57,955 INFO  L177        SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring...
[2018-11-23 11:09:57,955 INFO  L174        SettingsManager]: Resetting TreeAutomizer preferences to default values
[2018-11-23 11:09:57,956 INFO  L174        SettingsManager]: Resetting IcfgTransformer preferences to default values
[2018-11-23 11:09:57,957 INFO  L174        SettingsManager]: Resetting Boogie Printer preferences to default values
[2018-11-23 11:09:57,958 INFO  L174        SettingsManager]: Resetting ReqPrinter preferences to default values
[2018-11-23 11:09:57,959 INFO  L174        SettingsManager]: Resetting Witness Printer preferences to default values
[2018-11-23 11:09:57,960 INFO  L177        SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring...
[2018-11-23 11:09:57,960 INFO  L174        SettingsManager]: Resetting CDTParser preferences to default values
[2018-11-23 11:09:57,961 INFO  L177        SettingsManager]: AutomataScriptParser provides no preferences, ignoring...
[2018-11-23 11:09:57,961 INFO  L177        SettingsManager]: ReqParser provides no preferences, ignoring...
[2018-11-23 11:09:57,961 INFO  L174        SettingsManager]: Resetting SmtParser preferences to default values
[2018-11-23 11:09:57,962 INFO  L174        SettingsManager]: Resetting Witness Parser preferences to default values
[2018-11-23 11:09:57,963 INFO  L181        SettingsManager]: Finished resetting all preferences to default values...
[2018-11-23 11:09:57,964 INFO  L98         SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/settings/default/automizer/svcomp-Reach-32bit-Automizer_Bitvector.epf
[2018-11-23 11:09:57,979 INFO  L110        SettingsManager]: Loading preferences was successful
[2018-11-23 11:09:57,980 INFO  L112        SettingsManager]: Preferences different from defaults after loading the file:
[2018-11-23 11:09:57,981 INFO  L131        SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults:
[2018-11-23 11:09:57,981 INFO  L133        SettingsManager]:  * ... calls to implemented procedures=ONLY_FOR_CONCURRENT_PROGRAMS
[2018-11-23 11:09:57,981 INFO  L131        SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults:
[2018-11-23 11:09:57,982 INFO  L133        SettingsManager]:  * Create parallel compositions if possible=false
[2018-11-23 11:09:57,982 INFO  L133        SettingsManager]:  * Use SBE=true
[2018-11-23 11:09:57,982 INFO  L131        SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults:
[2018-11-23 11:09:57,982 INFO  L133        SettingsManager]:  * sizeof long=4
[2018-11-23 11:09:57,982 INFO  L133        SettingsManager]:  * sizeof POINTER=4
[2018-11-23 11:09:57,983 INFO  L133        SettingsManager]:  * Check division by zero=IGNORE
[2018-11-23 11:09:57,983 INFO  L133        SettingsManager]:  * Pointer to allocated memory at dereference=IGNORE
[2018-11-23 11:09:57,983 INFO  L133        SettingsManager]:  * If two pointers are subtracted or compared they have the same base address=IGNORE
[2018-11-23 11:09:57,983 INFO  L133        SettingsManager]:  * Check array bounds for arrays that are off heap=IGNORE
[2018-11-23 11:09:57,983 INFO  L133        SettingsManager]:  * Use bitvectors instead of ints=true
[2018-11-23 11:09:57,984 INFO  L133        SettingsManager]:  * Memory model=HoenickeLindenmann_4ByteResolution
[2018-11-23 11:09:57,984 INFO  L133        SettingsManager]:  * sizeof long double=12
[2018-11-23 11:09:57,984 INFO  L133        SettingsManager]:  * Check if freed pointer was valid=false
[2018-11-23 11:09:57,984 INFO  L133        SettingsManager]:  * Use constant arrays=true
[2018-11-23 11:09:57,984 INFO  L133        SettingsManager]:  * Pointer base address is valid at dereference=IGNORE
[2018-11-23 11:09:57,985 INFO  L131        SettingsManager]: Preferences of RCFGBuilder differ from their defaults:
[2018-11-23 11:09:57,985 INFO  L133        SettingsManager]:  * Size of a code block=SequenceOfStatements
[2018-11-23 11:09:57,985 INFO  L133        SettingsManager]:  * To the following directory=./dump/
[2018-11-23 11:09:57,985 INFO  L133        SettingsManager]:  * SMT solver=External_DefaultMode
[2018-11-23 11:09:57,986 INFO  L133        SettingsManager]:  * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000
[2018-11-23 11:09:57,986 INFO  L131        SettingsManager]: Preferences of TraceAbstraction differ from their defaults:
[2018-11-23 11:09:57,986 INFO  L133        SettingsManager]:  * Compute Interpolants along a Counterexample=FPandBP
[2018-11-23 11:09:57,986 INFO  L133        SettingsManager]:  * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles
[2018-11-23 11:09:57,986 INFO  L133        SettingsManager]:  * Trace refinement strategy=WOLF
[2018-11-23 11:09:57,987 INFO  L133        SettingsManager]:  * SMT solver=External_ModelsAndUnsatCoreMode
[2018-11-23 11:09:57,987 INFO  L133        SettingsManager]:  * Command for external solver=cvc4nyu --tear-down-incremental --rewrite-divk --print-success --lang smt
[2018-11-23 11:09:57,987 INFO  L133        SettingsManager]:  * Logic for external solver=AUFBV
[2018-11-23 11:09:57,987 INFO  L133        SettingsManager]:  * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true
[2018-11-23 11:09:58,041 INFO  L81    nceAwareModelManager]: Repository-Root is: /tmp
[2018-11-23 11:09:58,059 INFO  L258   ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized
[2018-11-23 11:09:58,064 INFO  L214   ainManager$Toolchain]: [Toolchain 1]: Toolchain selected.
[2018-11-23 11:09:58,066 INFO  L271        PluginConnector]: Initializing CDTParser...
[2018-11-23 11:09:58,066 INFO  L276        PluginConnector]: CDTParser initialized
[2018-11-23 11:09:58,067 INFO  L418   ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/svcomp/list-ext-properties/list-ext_false-unreach-call_false-valid-deref.i
[2018-11-23 11:09:58,139 INFO  L221              CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/18090b05e/e6e9160593dc41d2981f2aa938434626/FLAG4345e2635
[2018-11-23 11:09:58,758 INFO  L307              CDTParser]: Found 1 translation units.
[2018-11-23 11:09:58,759 INFO  L161              CDTParser]: Scanning /storage/repos/ultimate/trunk/examples/svcomp/list-ext-properties/list-ext_false-unreach-call_false-valid-deref.i
[2018-11-23 11:09:58,771 INFO  L355              CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/18090b05e/e6e9160593dc41d2981f2aa938434626/FLAG4345e2635
[2018-11-23 11:09:59,007 INFO  L363              CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/18090b05e/e6e9160593dc41d2981f2aa938434626
[2018-11-23 11:09:59,019 INFO  L296   ainManager$Toolchain]: ####################### [Toolchain 1] #######################
[2018-11-23 11:09:59,020 INFO  L131        ToolchainWalker]: Walking toolchain with 6 elements.
[2018-11-23 11:09:59,021 INFO  L113        PluginConnector]: ------------------------CACSL2BoogieTranslator----------------------------
[2018-11-23 11:09:59,022 INFO  L271        PluginConnector]: Initializing CACSL2BoogieTranslator...
[2018-11-23 11:09:59,027 INFO  L276        PluginConnector]: CACSL2BoogieTranslator initialized
[2018-11-23 11:09:59,029 INFO  L185        PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 11:09:59" (1/1) ...
[2018-11-23 11:09:59,032 INFO  L205        PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@7bfb5040 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 11:09:59, skipping insertion in model container
[2018-11-23 11:09:59,033 INFO  L185        PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 11:09:59" (1/1) ...
[2018-11-23 11:09:59,043 INFO  L145         MainTranslator]: Starting translation in SV-COMP mode 
[2018-11-23 11:09:59,099 INFO  L176         MainTranslator]: Built tables and reachable declarations
[2018-11-23 11:09:59,495 INFO  L201          PostProcessor]: Analyzing one entry point: main
[2018-11-23 11:09:59,514 INFO  L191         MainTranslator]: Completed pre-run
[2018-11-23 11:09:59,607 INFO  L201          PostProcessor]: Analyzing one entry point: main
[2018-11-23 11:09:59,769 INFO  L195         MainTranslator]: Completed translation
[2018-11-23 11:09:59,769 INFO  L202        PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 11:09:59 WrapperNode
[2018-11-23 11:09:59,769 INFO  L132        PluginConnector]: ------------------------ END CACSL2BoogieTranslator----------------------------
[2018-11-23 11:09:59,771 INFO  L113        PluginConnector]: ------------------------Boogie Procedure Inliner----------------------------
[2018-11-23 11:09:59,771 INFO  L271        PluginConnector]: Initializing Boogie Procedure Inliner...
[2018-11-23 11:09:59,771 INFO  L276        PluginConnector]: Boogie Procedure Inliner initialized
[2018-11-23 11:09:59,781 INFO  L185        PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 11:09:59" (1/1) ...
[2018-11-23 11:09:59,800 INFO  L185        PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 11:09:59" (1/1) ...
[2018-11-23 11:09:59,810 INFO  L132        PluginConnector]: ------------------------ END Boogie Procedure Inliner----------------------------
[2018-11-23 11:09:59,810 INFO  L113        PluginConnector]: ------------------------Boogie Preprocessor----------------------------
[2018-11-23 11:09:59,810 INFO  L271        PluginConnector]: Initializing Boogie Preprocessor...
[2018-11-23 11:09:59,811 INFO  L276        PluginConnector]: Boogie Preprocessor initialized
[2018-11-23 11:09:59,821 INFO  L185        PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 11:09:59" (1/1) ...
[2018-11-23 11:09:59,821 INFO  L185        PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 11:09:59" (1/1) ...
[2018-11-23 11:09:59,827 INFO  L185        PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 11:09:59" (1/1) ...
[2018-11-23 11:09:59,827 INFO  L185        PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 11:09:59" (1/1) ...
[2018-11-23 11:09:59,846 INFO  L185        PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 11:09:59" (1/1) ...
[2018-11-23 11:09:59,854 INFO  L185        PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 11:09:59" (1/1) ...
[2018-11-23 11:09:59,857 INFO  L185        PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 11:09:59" (1/1) ...
[2018-11-23 11:09:59,861 INFO  L132        PluginConnector]: ------------------------ END Boogie Preprocessor----------------------------
[2018-11-23 11:09:59,861 INFO  L113        PluginConnector]: ------------------------RCFGBuilder----------------------------
[2018-11-23 11:09:59,861 INFO  L271        PluginConnector]: Initializing RCFGBuilder...
[2018-11-23 11:09:59,863 INFO  L276        PluginConnector]: RCFGBuilder initialized
[2018-11-23 11:09:59,864 INFO  L185        PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 11:09:59" (1/1) ...
No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3
Starting monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null)
Waiting until toolchain timeout for monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000
[2018-11-23 11:09:59,932 INFO  L130     BoogieDeclarations]: Found specification of procedure #Ultimate.alloc
[2018-11-23 11:09:59,932 INFO  L130     BoogieDeclarations]: Found specification of procedure read~intINTTYPE4
[2018-11-23 11:09:59,932 INFO  L130     BoogieDeclarations]: Found specification of procedure exit
[2018-11-23 11:09:59,932 INFO  L138     BoogieDeclarations]: Found implementation of procedure exit
[2018-11-23 11:09:59,933 INFO  L130     BoogieDeclarations]: Found specification of procedure ULTIMATE.init
[2018-11-23 11:09:59,933 INFO  L138     BoogieDeclarations]: Found implementation of procedure ULTIMATE.init
[2018-11-23 11:09:59,933 INFO  L130     BoogieDeclarations]: Found specification of procedure main
[2018-11-23 11:09:59,933 INFO  L138     BoogieDeclarations]: Found implementation of procedure main
[2018-11-23 11:09:59,933 INFO  L130     BoogieDeclarations]: Found specification of procedure write~$Pointer$
[2018-11-23 11:09:59,934 INFO  L130     BoogieDeclarations]: Found specification of procedure read~$Pointer$
[2018-11-23 11:09:59,935 INFO  L130     BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc
[2018-11-23 11:09:59,936 INFO  L130     BoogieDeclarations]: Found specification of procedure write~intINTTYPE4
[2018-11-23 11:09:59,936 INFO  L130     BoogieDeclarations]: Found specification of procedure ULTIMATE.start
[2018-11-23 11:09:59,936 INFO  L138     BoogieDeclarations]: Found implementation of procedure ULTIMATE.start
[2018-11-23 11:10:00,889 INFO  L275             CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start)
[2018-11-23 11:10:00,889 INFO  L280             CfgBuilder]: Removed 5 assue(true) statements.
[2018-11-23 11:10:00,890 INFO  L202        PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 11:10:00 BoogieIcfgContainer
[2018-11-23 11:10:00,890 INFO  L132        PluginConnector]: ------------------------ END RCFGBuilder----------------------------
[2018-11-23 11:10:00,892 INFO  L113        PluginConnector]: ------------------------TraceAbstraction----------------------------
[2018-11-23 11:10:00,892 INFO  L271        PluginConnector]: Initializing TraceAbstraction...
[2018-11-23 11:10:00,895 INFO  L276        PluginConnector]: TraceAbstraction initialized
[2018-11-23 11:10:00,896 INFO  L185        PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 23.11 11:09:59" (1/3) ...
[2018-11-23 11:10:00,897 INFO  L205        PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@3265a767 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 23.11 11:10:00, skipping insertion in model container
[2018-11-23 11:10:00,897 INFO  L185        PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 11:09:59" (2/3) ...
[2018-11-23 11:10:00,897 INFO  L205        PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@3265a767 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 23.11 11:10:00, skipping insertion in model container
[2018-11-23 11:10:00,898 INFO  L185        PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 11:10:00" (3/3) ...
[2018-11-23 11:10:00,900 INFO  L112   eAbstractionObserver]: Analyzing ICFG list-ext_false-unreach-call_false-valid-deref.i
[2018-11-23 11:10:00,913 INFO  L156   ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION
[2018-11-23 11:10:00,924 INFO  L168   ceAbstractionStarter]: Appying trace abstraction to program that has 1 error locations.
[2018-11-23 11:10:00,944 INFO  L257      AbstractCegarLoop]: Starting to check reachability of 1 error locations.
[2018-11-23 11:10:00,979 INFO  L133   ementStrategyFactory]: Using default assertion order modulation
[2018-11-23 11:10:00,980 INFO  L382      AbstractCegarLoop]: Interprodecural is true
[2018-11-23 11:10:00,980 INFO  L383      AbstractCegarLoop]: Hoare is true
[2018-11-23 11:10:00,980 INFO  L384      AbstractCegarLoop]: Compute interpolants for FPandBP
[2018-11-23 11:10:00,980 INFO  L385      AbstractCegarLoop]: Backedges is STRAIGHT_LINE
[2018-11-23 11:10:00,980 INFO  L386      AbstractCegarLoop]: Determinization is PREDICATE_ABSTRACTION
[2018-11-23 11:10:00,981 INFO  L387      AbstractCegarLoop]: Difference is false
[2018-11-23 11:10:00,981 INFO  L388      AbstractCegarLoop]: Minimize is MINIMIZE_SEVPA
[2018-11-23 11:10:00,981 INFO  L393      AbstractCegarLoop]: ======== Iteration 0==of CEGAR loop == AllErrorsAtOnce========
[2018-11-23 11:10:00,999 INFO  L276                IsEmpty]: Start isEmpty. Operand 36 states.
[2018-11-23 11:10:01,006 INFO  L282                IsEmpty]: Finished isEmpty. Found accepting run of length 17
[2018-11-23 11:10:01,007 INFO  L394         BasicCegarLoop]: Found error trace
[2018-11-23 11:10:01,008 INFO  L402         BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1]
[2018-11-23 11:10:01,010 INFO  L423      AbstractCegarLoop]: === Iteration 1 === [mainErr0ASSERT_VIOLATIONERROR_FUNCTION]===
[2018-11-23 11:10:01,016 INFO  L141       PredicateUnifier]: Initialized classic predicate unifier
[2018-11-23 11:10:01,016 INFO  L82        PathProgramCache]: Analyzing trace with hash -1852602304, now seen corresponding path program 1 times
[2018-11-23 11:10:01,020 INFO  L223   ckRefinementStrategy]: Switched to mode CVC4_FPBP
[2018-11-23 11:10:01,021 INFO  L69    tionRefinementEngine]: Using refinement strategy WolfRefinementStrategy
No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/cvc4nyu
Starting monitored process 2 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null)
Waiting until toolchain timeout for monitored process 2 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk
[2018-11-23 11:10:01,039 INFO  L103   rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY
[2018-11-23 11:10:01,083 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2018-11-23 11:10:01,115 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2018-11-23 11:10:01,120 INFO  L273         TraceCheckSpWp]: Computing forward predicates...
[2018-11-23 11:10:01,200 INFO  L256        TraceCheckUtils]: 0: Hoare triple {39#true} call ULTIMATE.init(); {39#true} is VALID
[2018-11-23 11:10:01,203 INFO  L273        TraceCheckUtils]: 1: Hoare triple {39#true} #NULL.base, #NULL.offset := 0bv32, 0bv32;#valid := #valid[0bv32 := 0bv1]; {39#true} is VALID
[2018-11-23 11:10:01,204 INFO  L273        TraceCheckUtils]: 2: Hoare triple {39#true} assume true; {39#true} is VALID
[2018-11-23 11:10:01,204 INFO  L268        TraceCheckUtils]: 3: Hoare quadruple {39#true} {39#true} #111#return; {39#true} is VALID
[2018-11-23 11:10:01,204 INFO  L256        TraceCheckUtils]: 4: Hoare triple {39#true} call #t~ret18 := main(); {39#true} is VALID
[2018-11-23 11:10:01,205 INFO  L273        TraceCheckUtils]: 5: Hoare triple {39#true} ~i~0 := 0bv32;~y~0 := 0bv32;call #t~malloc0.base, #t~malloc0.offset := #Ultimate.alloc(8bv32);~a~0.base, ~a~0.offset := #t~malloc0.base, #t~malloc0.offset; {39#true} is VALID
[2018-11-23 11:10:01,205 INFO  L273        TraceCheckUtils]: 6: Hoare triple {39#true} assume !(~a~0.base == 0bv32 && ~a~0.offset == 0bv32); {39#true} is VALID
[2018-11-23 11:10:01,206 INFO  L273        TraceCheckUtils]: 7: Hoare triple {39#true} havoc ~t~0.base, ~t~0.offset;~p~0.base, ~p~0.offset := ~a~0.base, ~a~0.offset; {39#true} is VALID
[2018-11-23 11:10:01,206 INFO  L273        TraceCheckUtils]: 8: Hoare triple {39#true} assume !true; {40#false} is VALID
[2018-11-23 11:10:01,207 INFO  L273        TraceCheckUtils]: 9: Hoare triple {40#false} assume !true; {40#false} is VALID
[2018-11-23 11:10:01,207 INFO  L273        TraceCheckUtils]: 10: Hoare triple {40#false} call write~intINTTYPE4(3bv32, ~p~0.base, ~p~0.offset, 4bv32);~i~0 := 0bv32;~y~0 := 0bv32;~p~0.base, ~p~0.offset := ~a~0.base, ~a~0.offset; {40#false} is VALID
[2018-11-23 11:10:01,207 INFO  L273        TraceCheckUtils]: 11: Hoare triple {40#false} assume !true; {40#false} is VALID
[2018-11-23 11:10:01,208 INFO  L273        TraceCheckUtils]: 12: Hoare triple {40#false} assume !true; {40#false} is VALID
[2018-11-23 11:10:01,208 INFO  L273        TraceCheckUtils]: 13: Hoare triple {40#false} call #t~mem15 := read~intINTTYPE4(~p~0.base, ~p~0.offset, 4bv32); {40#false} is VALID
[2018-11-23 11:10:01,208 INFO  L273        TraceCheckUtils]: 14: Hoare triple {40#false} assume 3bv32 != #t~mem15 || ~bvslt32(~bvadd32(~i~0, ~y~0), 20bv32);havoc #t~mem15; {40#false} is VALID
[2018-11-23 11:10:01,208 INFO  L273        TraceCheckUtils]: 15: Hoare triple {40#false} assume !false; {40#false} is VALID
[2018-11-23 11:10:01,212 INFO  L134       CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked.
[2018-11-23 11:10:01,212 INFO  L312         TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect
[2018-11-23 11:10:01,217 INFO  L312   seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences.
[2018-11-23 11:10:01,217 INFO  L327   seRefinementStrategy]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2
[2018-11-23 11:10:01,222 INFO  L78                 Accepts]: Start accepts. Automaton has 2 states. Word has length 16
[2018-11-23 11:10:01,225 INFO  L84                 Accepts]: Finished accepts. word is accepted.
[2018-11-23 11:10:01,228 INFO  L86        InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 2 states.
[2018-11-23 11:10:01,293 INFO  L119       InductivityCheck]: Floyd-Hoare automaton has 16 edges. 16 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. 
[2018-11-23 11:10:01,293 INFO  L459      AbstractCegarLoop]: Interpolant automaton has 2 states
[2018-11-23 11:10:01,302 INFO  L142   InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants.
[2018-11-23 11:10:01,302 INFO  L144   InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2
[2018-11-23 11:10:01,304 INFO  L87              Difference]: Start difference. First operand 36 states. Second operand 2 states.
[2018-11-23 11:10:01,745 INFO  L144             Difference]: Subtrahend was deterministic. Have not used determinization.
[2018-11-23 11:10:01,745 INFO  L93              Difference]: Finished difference Result 59 states and 81 transitions.
[2018-11-23 11:10:01,748 INFO  L142   InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. 
[2018-11-23 11:10:01,748 INFO  L78                 Accepts]: Start accepts. Automaton has 2 states. Word has length 16
[2018-11-23 11:10:01,748 INFO  L84                 Accepts]: Finished accepts. some prefix is accepted.
[2018-11-23 11:10:01,750 INFO  L82        GeneralOperation]: Start removeUnreachable. Operand 2 states.
[2018-11-23 11:10:01,763 INFO  L88        GeneralOperation]: Finished removeUnreachable. Reduced from 2 states to 2 states and 81 transitions.
[2018-11-23 11:10:01,763 INFO  L82        GeneralOperation]: Start removeUnreachable. Operand 2 states.
[2018-11-23 11:10:01,769 INFO  L88        GeneralOperation]: Finished removeUnreachable. Reduced from 2 states to 2 states and 81 transitions.
[2018-11-23 11:10:01,770 INFO  L86        InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 2 states and 81 transitions.
[2018-11-23 11:10:02,304 INFO  L119       InductivityCheck]: Floyd-Hoare automaton has 81 edges. 81 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. 
[2018-11-23 11:10:02,319 INFO  L225             Difference]: With dead ends: 59
[2018-11-23 11:10:02,319 INFO  L226             Difference]: Without dead ends: 23
[2018-11-23 11:10:02,324 INFO  L631         BasicCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 15 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2
[2018-11-23 11:10:02,347 INFO  L82        GeneralOperation]: Start minimizeSevpa. Operand 23 states.
[2018-11-23 11:10:02,452 INFO  L88        GeneralOperation]: Finished minimizeSevpa. Reduced states from 23 to 23.
[2018-11-23 11:10:02,452 INFO  L214    AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa
[2018-11-23 11:10:02,453 INFO  L82        GeneralOperation]: Start isEquivalent. First operand 23 states. Second operand 23 states.
[2018-11-23 11:10:02,455 INFO  L74              IsIncluded]: Start isIncluded. First operand 23 states. Second operand 23 states.
[2018-11-23 11:10:02,456 INFO  L87              Difference]: Start difference. First operand 23 states. Second operand 23 states.
[2018-11-23 11:10:02,464 INFO  L144             Difference]: Subtrahend was deterministic. Have not used determinization.
[2018-11-23 11:10:02,465 INFO  L93              Difference]: Finished difference Result 23 states and 26 transitions.
[2018-11-23 11:10:02,465 INFO  L276                IsEmpty]: Start isEmpty. Operand 23 states and 26 transitions.
[2018-11-23 11:10:02,465 INFO  L282                IsEmpty]: Finished isEmpty. No accepting run.
[2018-11-23 11:10:02,466 INFO  L83              IsIncluded]: Finished isIncluded. Language is included
[2018-11-23 11:10:02,466 INFO  L74              IsIncluded]: Start isIncluded. First operand 23 states. Second operand 23 states.
[2018-11-23 11:10:02,466 INFO  L87              Difference]: Start difference. First operand 23 states. Second operand 23 states.
[2018-11-23 11:10:02,477 INFO  L144             Difference]: Subtrahend was deterministic. Have not used determinization.
[2018-11-23 11:10:02,477 INFO  L93              Difference]: Finished difference Result 23 states and 26 transitions.
[2018-11-23 11:10:02,477 INFO  L276                IsEmpty]: Start isEmpty. Operand 23 states and 26 transitions.
[2018-11-23 11:10:02,479 INFO  L282                IsEmpty]: Finished isEmpty. No accepting run.
[2018-11-23 11:10:02,480 INFO  L83              IsIncluded]: Finished isIncluded. Language is included
[2018-11-23 11:10:02,480 INFO  L88        GeneralOperation]: Finished isEquivalent.
[2018-11-23 11:10:02,480 INFO  L221    AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa
[2018-11-23 11:10:02,480 INFO  L82        GeneralOperation]: Start removeUnreachable. Operand 23 states.
[2018-11-23 11:10:02,484 INFO  L88        GeneralOperation]: Finished removeUnreachable. Reduced from 23 states to 23 states and 26 transitions.
[2018-11-23 11:10:02,486 INFO  L78                 Accepts]: Start accepts. Automaton has 23 states and 26 transitions. Word has length 16
[2018-11-23 11:10:02,486 INFO  L84                 Accepts]: Finished accepts. word is rejected.
[2018-11-23 11:10:02,486 INFO  L480      AbstractCegarLoop]: Abstraction has 23 states and 26 transitions.
[2018-11-23 11:10:02,487 INFO  L481      AbstractCegarLoop]: Interpolant automaton has 2 states.
[2018-11-23 11:10:02,487 INFO  L276                IsEmpty]: Start isEmpty. Operand 23 states and 26 transitions.
[2018-11-23 11:10:02,488 INFO  L282                IsEmpty]: Finished isEmpty. Found accepting run of length 19
[2018-11-23 11:10:02,488 INFO  L394         BasicCegarLoop]: Found error trace
[2018-11-23 11:10:02,489 INFO  L402         BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1]
[2018-11-23 11:10:02,489 INFO  L423      AbstractCegarLoop]: === Iteration 2 === [mainErr0ASSERT_VIOLATIONERROR_FUNCTION]===
[2018-11-23 11:10:02,489 INFO  L141       PredicateUnifier]: Initialized classic predicate unifier
[2018-11-23 11:10:02,490 INFO  L82        PathProgramCache]: Analyzing trace with hash -2045781178, now seen corresponding path program 1 times
[2018-11-23 11:10:02,490 INFO  L223   ckRefinementStrategy]: Switched to mode CVC4_FPBP
[2018-11-23 11:10:02,491 INFO  L69    tionRefinementEngine]: Using refinement strategy WolfRefinementStrategy
No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/cvc4nyu
Starting monitored process 3 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null)
Waiting until toolchain timeout for monitored process 3 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk
[2018-11-23 11:10:02,527 INFO  L103   rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY
[2018-11-23 11:10:02,589 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is sat
[2018-11-23 11:10:02,639 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is sat
[2018-11-23 11:10:02,694 INFO  L469         BasicCegarLoop]: Counterexample might be feasible
-----
class de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder.RCFGBacktranslator
[?]  CALL  call ULTIMATE.init();
     VAL   [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |old(#NULL.base)|=(_ bv0 32), |old(#NULL.offset)|=(_ bv0 32)]
[?]        #NULL.base, #NULL.offset := 0bv32, 0bv32;#valid := #valid[0bv32 := 0bv1];
     VAL   [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |old(#NULL.base)|=(_ bv0 32), |old(#NULL.offset)|=(_ bv0 32)]
[?]        assume true;
     VAL   [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |old(#NULL.base)|=(_ bv0 32), |old(#NULL.offset)|=(_ bv0 32)]
[?]  RET   #111#return;
     VAL   [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32)]
[?]  CALL  call #t~ret18 := main();
     VAL   [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32)]
[?]        ~i~0 := 0bv32;~y~0 := 0bv32;call #t~malloc0.base, #t~malloc0.offset := #Ultimate.alloc(8bv32);~a~0.base, ~a~0.offset := #t~malloc0.base, #t~malloc0.offset;
     VAL   [main_~a~0.base=(_ bv1 32), main_~a~0.offset=(_ bv0 32), main_~i~0=(_ bv0 32), main_~y~0=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |main_#t~malloc0.base|=(_ bv1 32), |main_#t~malloc0.offset|=(_ bv0 32)]
[?]        assume !(~a~0.base == 0bv32 && ~a~0.offset == 0bv32);
     VAL   [main_~a~0.base=(_ bv1 32), main_~a~0.offset=(_ bv0 32), main_~i~0=(_ bv0 32), main_~y~0=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |main_#t~malloc0.base|=(_ bv1 32), |main_#t~malloc0.offset|=(_ bv0 32)]
[?]        havoc ~t~0.base, ~t~0.offset;~p~0.base, ~p~0.offset := ~a~0.base, ~a~0.offset;
     VAL   [main_~a~0.base=(_ bv1 32), main_~a~0.offset=(_ bv0 32), main_~i~0=(_ bv0 32), main_~p~0.base=(_ bv1 32), main_~p~0.offset=(_ bv0 32), main_~y~0=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |main_#t~malloc0.base|=(_ bv1 32), |main_#t~malloc0.offset|=(_ bv0 32)]
[?]        assume !(~bvslt32(~i~0, 10bv32) && 0bv32 != #t~nondet1);havoc #t~nondet1;
     VAL   [main_~a~0.base=(_ bv1 32), main_~a~0.offset=(_ bv0 32), main_~i~0=(_ bv0 32), main_~p~0.base=(_ bv1 32), main_~p~0.offset=(_ bv0 32), main_~y~0=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |main_#t~malloc0.base|=(_ bv1 32), |main_#t~malloc0.offset|=(_ bv0 32)]
[?]        assume !(~bvslt32(~y~0, 10bv32) && 0bv32 != #t~nondet5);havoc #t~nondet5;
     VAL   [main_~a~0.base=(_ bv1 32), main_~a~0.offset=(_ bv0 32), main_~i~0=(_ bv0 32), main_~p~0.base=(_ bv1 32), main_~p~0.offset=(_ bv0 32), main_~y~0=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |main_#t~malloc0.base|=(_ bv1 32), |main_#t~malloc0.offset|=(_ bv0 32)]
[?]        call write~intINTTYPE4(3bv32, ~p~0.base, ~p~0.offset, 4bv32);~i~0 := 0bv32;~y~0 := 0bv32;~p~0.base, ~p~0.offset := ~a~0.base, ~a~0.offset;
     VAL   [main_~a~0.base=(_ bv1 32), main_~a~0.offset=(_ bv0 32), main_~i~0=(_ bv0 32), main_~p~0.base=(_ bv1 32), main_~p~0.offset=(_ bv0 32), main_~y~0=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |main_#t~malloc0.base|=(_ bv1 32), |main_#t~malloc0.offset|=(_ bv0 32)]
[?]        call #t~mem9 := read~intINTTYPE4(~p~0.base, ~p~0.offset, 4bv32);
     VAL   [main_~a~0.base=(_ bv1 32), main_~a~0.offset=(_ bv0 32), main_~i~0=(_ bv0 32), main_~p~0.base=(_ bv1 32), main_~p~0.offset=(_ bv0 32), main_~y~0=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |main_#t~malloc0.base|=(_ bv1 32), |main_#t~malloc0.offset|=(_ bv0 32), |main_#t~mem9|=(_ bv3 32)]
[?]        assume !(1bv32 == #t~mem9);havoc #t~mem9;
     VAL   [main_~a~0.base=(_ bv1 32), main_~a~0.offset=(_ bv0 32), main_~i~0=(_ bv0 32), main_~p~0.base=(_ bv1 32), main_~p~0.offset=(_ bv0 32), main_~y~0=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |main_#t~malloc0.base|=(_ bv1 32), |main_#t~malloc0.offset|=(_ bv0 32)]
[?]        call #t~mem12 := read~intINTTYPE4(~p~0.base, ~p~0.offset, 4bv32);
     VAL   [main_~a~0.base=(_ bv1 32), main_~a~0.offset=(_ bv0 32), main_~i~0=(_ bv0 32), main_~p~0.base=(_ bv1 32), main_~p~0.offset=(_ bv0 32), main_~y~0=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |main_#t~malloc0.base|=(_ bv1 32), |main_#t~malloc0.offset|=(_ bv0 32), |main_#t~mem12|=(_ bv3 32)]
[?]        assume !(2bv32 == #t~mem12);havoc #t~mem12;
     VAL   [main_~a~0.base=(_ bv1 32), main_~a~0.offset=(_ bv0 32), main_~i~0=(_ bv0 32), main_~p~0.base=(_ bv1 32), main_~p~0.offset=(_ bv0 32), main_~y~0=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |main_#t~malloc0.base|=(_ bv1 32), |main_#t~malloc0.offset|=(_ bv0 32)]
[?]        call #t~mem15 := read~intINTTYPE4(~p~0.base, ~p~0.offset, 4bv32);
     VAL   [main_~a~0.base=(_ bv1 32), main_~a~0.offset=(_ bv0 32), main_~i~0=(_ bv0 32), main_~p~0.base=(_ bv1 32), main_~p~0.offset=(_ bv0 32), main_~y~0=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |main_#t~malloc0.base|=(_ bv1 32), |main_#t~malloc0.offset|=(_ bv0 32), |main_#t~mem15|=(_ bv3 32)]
[?]        assume 3bv32 != #t~mem15 || ~bvslt32(~bvadd32(~i~0, ~y~0), 20bv32);havoc #t~mem15;
     VAL   [main_~a~0.base=(_ bv1 32), main_~a~0.offset=(_ bv0 32), main_~i~0=(_ bv0 32), main_~p~0.base=(_ bv1 32), main_~p~0.offset=(_ bv0 32), main_~y~0=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |main_#t~malloc0.base|=(_ bv1 32), |main_#t~malloc0.offset|=(_ bv0 32)]
[?]        assume !false;
     VAL   [main_~a~0.base=(_ bv1 32), main_~a~0.offset=(_ bv0 32), main_~i~0=(_ bv0 32), main_~p~0.base=(_ bv1 32), main_~p~0.offset=(_ bv0 32), main_~y~0=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |main_#t~malloc0.base|=(_ bv1 32), |main_#t~malloc0.offset|=(_ bv0 32)]


[?]          CALL  call ULTIMATE.init();
             VAL   [#NULL.base=0bv32, #NULL.offset=0bv32, old(#NULL.base)=0bv32, old(#NULL.offset)=0bv32]
[?]                #NULL.base, #NULL.offset := 0bv32, 0bv32;
[?]                #valid := #valid[0bv32 := 0bv1];
             VAL   [#NULL.base=0bv32, #NULL.offset=0bv32, old(#NULL.base)=0bv32, old(#NULL.offset)=0bv32]
[?]                ensures true;
             VAL   [#NULL.base=0bv32, #NULL.offset=0bv32, old(#NULL.base)=0bv32, old(#NULL.offset)=0bv32]
[?]          RET   call ULTIMATE.init();
             VAL   [#NULL.base=0bv32, #NULL.offset=0bv32]
[?]          CALL  call #t~ret18 := main();
             VAL   [#NULL.base=0bv32, #NULL.offset=0bv32]
[L627]             ~i~0 := 0bv32;
[L628]             ~y~0 := 0bv32;
[L629]             call #t~malloc0.base, #t~malloc0.offset := #Ultimate.alloc(8bv32);
[L629]             ~a~0.base, ~a~0.offset := #t~malloc0.base, #t~malloc0.offset;
             VAL   [#NULL.base=0bv32, #NULL.offset=0bv32, #t~malloc0.base=1bv32, #t~malloc0.offset=0bv32, ~a~0.base=1bv32, ~a~0.offset=0bv32, ~i~0=0bv32, ~y~0=0bv32]
[L630]             assume !(~a~0.base == 0bv32 && ~a~0.offset == 0bv32);
             VAL   [#NULL.base=0bv32, #NULL.offset=0bv32, #t~malloc0.base=1bv32, #t~malloc0.offset=0bv32, ~a~0.base=1bv32, ~a~0.offset=0bv32, ~i~0=0bv32, ~y~0=0bv32]
[L631]             havoc ~t~0.base, ~t~0.offset;
[L632]             ~p~0.base, ~p~0.offset := ~a~0.base, ~a~0.offset;
             VAL   [#NULL.base=0bv32, #NULL.offset=0bv32, #t~malloc0.base=1bv32, #t~malloc0.offset=0bv32, ~a~0.base=1bv32, ~a~0.offset=0bv32, ~i~0=0bv32, ~p~0.base=1bv32, ~p~0.offset=0bv32, ~y~0=0bv32]
[L633-L640]        assume !(~bvslt32(~i~0, 10bv32) && 0bv32 != #t~nondet1);
[L633]             havoc #t~nondet1;
             VAL   [#NULL.base=0bv32, #NULL.offset=0bv32, #t~malloc0.base=1bv32, #t~malloc0.offset=0bv32, ~a~0.base=1bv32, ~a~0.offset=0bv32, ~i~0=0bv32, ~p~0.base=1bv32, ~p~0.offset=0bv32, ~y~0=0bv32]
[L641-L648]        assume !(~bvslt32(~y~0, 10bv32) && 0bv32 != #t~nondet5);
[L641]             havoc #t~nondet5;
             VAL   [#NULL.base=0bv32, #NULL.offset=0bv32, #t~malloc0.base=1bv32, #t~malloc0.offset=0bv32, ~a~0.base=1bv32, ~a~0.offset=0bv32, ~i~0=0bv32, ~p~0.base=1bv32, ~p~0.offset=0bv32, ~y~0=0bv32]
[L649]             call write~intINTTYPE4(3bv32, ~p~0.base, ~p~0.offset, 4bv32);
[L650]             ~i~0 := 0bv32;
[L651]             ~y~0 := 0bv32;
[L652]             ~p~0.base, ~p~0.offset := ~a~0.base, ~a~0.offset;
             VAL   [#NULL.base=0bv32, #NULL.offset=0bv32, #t~malloc0.base=1bv32, #t~malloc0.offset=0bv32, ~a~0.base=1bv32, ~a~0.offset=0bv32, ~i~0=0bv32, ~p~0.base=1bv32, ~p~0.offset=0bv32, ~y~0=0bv32]
[L653]             call #t~mem9 := read~intINTTYPE4(~p~0.base, ~p~0.offset, 4bv32);
             VAL   [#NULL.base=0bv32, #NULL.offset=0bv32, #t~malloc0.base=1bv32, #t~malloc0.offset=0bv32, #t~mem9=3bv32, ~a~0.base=1bv32, ~a~0.offset=0bv32, ~i~0=0bv32, ~p~0.base=1bv32, ~p~0.offset=0bv32, ~y~0=0bv32]
[L653-L656]        assume !(1bv32 == #t~mem9);
[L653]             havoc #t~mem9;
             VAL   [#NULL.base=0bv32, #NULL.offset=0bv32, #t~malloc0.base=1bv32, #t~malloc0.offset=0bv32, ~a~0.base=1bv32, ~a~0.offset=0bv32, ~i~0=0bv32, ~p~0.base=1bv32, ~p~0.offset=0bv32, ~y~0=0bv32]
[L657]             call #t~mem12 := read~intINTTYPE4(~p~0.base, ~p~0.offset, 4bv32);
             VAL   [#NULL.base=0bv32, #NULL.offset=0bv32, #t~malloc0.base=1bv32, #t~malloc0.offset=0bv32, #t~mem12=3bv32, ~a~0.base=1bv32, ~a~0.offset=0bv32, ~i~0=0bv32, ~p~0.base=1bv32, ~p~0.offset=0bv32, ~y~0=0bv32]
[L657-L660]        assume !(2bv32 == #t~mem12);
[L657]             havoc #t~mem12;
             VAL   [#NULL.base=0bv32, #NULL.offset=0bv32, #t~malloc0.base=1bv32, #t~malloc0.offset=0bv32, ~a~0.base=1bv32, ~a~0.offset=0bv32, ~i~0=0bv32, ~p~0.base=1bv32, ~p~0.offset=0bv32, ~y~0=0bv32]
[L661]             call #t~mem15 := read~intINTTYPE4(~p~0.base, ~p~0.offset, 4bv32);
             VAL   [#NULL.base=0bv32, #NULL.offset=0bv32, #t~malloc0.base=1bv32, #t~malloc0.offset=0bv32, #t~mem15=3bv32, ~a~0.base=1bv32, ~a~0.offset=0bv32, ~i~0=0bv32, ~p~0.base=1bv32, ~p~0.offset=0bv32, ~y~0=0bv32]
[L661-L662]        assume 3bv32 != #t~mem15 || ~bvslt32(~bvadd32(~i~0, ~y~0), 20bv32);
[L661]             havoc #t~mem15;
             VAL   [#NULL.base=0bv32, #NULL.offset=0bv32, #t~malloc0.base=1bv32, #t~malloc0.offset=0bv32, ~a~0.base=1bv32, ~a~0.offset=0bv32, ~i~0=0bv32, ~p~0.base=1bv32, ~p~0.offset=0bv32, ~y~0=0bv32]
[L662]             assert false;
             VAL   [#NULL.base=0bv32, #NULL.offset=0bv32, #t~malloc0.base=1bv32, #t~malloc0.offset=0bv32, ~a~0.base=1bv32, ~a~0.offset=0bv32, ~i~0=0bv32, ~p~0.base=1bv32, ~p~0.offset=0bv32, ~y~0=0bv32]

-----
-----
class de.uni_freiburg.informatik.ultimate.boogie.preprocessor.BoogiePreprocessorBacktranslator
[?]          CALL  call ULTIMATE.init();
             VAL   [#NULL.base=0bv32, #NULL.offset=0bv32, old(#NULL.base)=0bv32, old(#NULL.offset)=0bv32]
[?]                #NULL.base, #NULL.offset := 0bv32, 0bv32;
[?]                #valid := #valid[0bv32 := 0bv1];
             VAL   [#NULL.base=0bv32, #NULL.offset=0bv32, old(#NULL.base)=0bv32, old(#NULL.offset)=0bv32]
[?]                ensures true;
             VAL   [#NULL.base=0bv32, #NULL.offset=0bv32, old(#NULL.base)=0bv32, old(#NULL.offset)=0bv32]
[?]          RET   call ULTIMATE.init();
             VAL   [#NULL.base=0bv32, #NULL.offset=0bv32]
[?]          CALL  call #t~ret18 := main();
             VAL   [#NULL.base=0bv32, #NULL.offset=0bv32]
[L627]             ~i~0 := 0bv32;
[L628]             ~y~0 := 0bv32;
[L629]             call #t~malloc0.base, #t~malloc0.offset := #Ultimate.alloc(8bv32);
[L629]             ~a~0.base, ~a~0.offset := #t~malloc0.base, #t~malloc0.offset;
             VAL   [#NULL.base=0bv32, #NULL.offset=0bv32, #t~malloc0.base=1bv32, #t~malloc0.offset=0bv32, ~a~0.base=1bv32, ~a~0.offset=0bv32, ~i~0=0bv32, ~y~0=0bv32]
[L630]             assume !(~a~0.base == 0bv32 && ~a~0.offset == 0bv32);
             VAL   [#NULL.base=0bv32, #NULL.offset=0bv32, #t~malloc0.base=1bv32, #t~malloc0.offset=0bv32, ~a~0.base=1bv32, ~a~0.offset=0bv32, ~i~0=0bv32, ~y~0=0bv32]
[L631]             havoc ~t~0.base, ~t~0.offset;
[L632]             ~p~0.base, ~p~0.offset := ~a~0.base, ~a~0.offset;
             VAL   [#NULL.base=0bv32, #NULL.offset=0bv32, #t~malloc0.base=1bv32, #t~malloc0.offset=0bv32, ~a~0.base=1bv32, ~a~0.offset=0bv32, ~i~0=0bv32, ~p~0.base=1bv32, ~p~0.offset=0bv32, ~y~0=0bv32]
[L633-L640]        assume !(~bvslt32(~i~0, 10bv32) && 0bv32 != #t~nondet1);
[L633]             havoc #t~nondet1;
             VAL   [#NULL.base=0bv32, #NULL.offset=0bv32, #t~malloc0.base=1bv32, #t~malloc0.offset=0bv32, ~a~0.base=1bv32, ~a~0.offset=0bv32, ~i~0=0bv32, ~p~0.base=1bv32, ~p~0.offset=0bv32, ~y~0=0bv32]
[L641-L648]        assume !(~bvslt32(~y~0, 10bv32) && 0bv32 != #t~nondet5);
[L641]             havoc #t~nondet5;
             VAL   [#NULL.base=0bv32, #NULL.offset=0bv32, #t~malloc0.base=1bv32, #t~malloc0.offset=0bv32, ~a~0.base=1bv32, ~a~0.offset=0bv32, ~i~0=0bv32, ~p~0.base=1bv32, ~p~0.offset=0bv32, ~y~0=0bv32]
[L649]             call write~intINTTYPE4(3bv32, ~p~0.base, ~p~0.offset, 4bv32);
[L650]             ~i~0 := 0bv32;
[L651]             ~y~0 := 0bv32;
[L652]             ~p~0.base, ~p~0.offset := ~a~0.base, ~a~0.offset;
             VAL   [#NULL.base=0bv32, #NULL.offset=0bv32, #t~malloc0.base=1bv32, #t~malloc0.offset=0bv32, ~a~0.base=1bv32, ~a~0.offset=0bv32, ~i~0=0bv32, ~p~0.base=1bv32, ~p~0.offset=0bv32, ~y~0=0bv32]
[L653]             call #t~mem9 := read~intINTTYPE4(~p~0.base, ~p~0.offset, 4bv32);
             VAL   [#NULL.base=0bv32, #NULL.offset=0bv32, #t~malloc0.base=1bv32, #t~malloc0.offset=0bv32, #t~mem9=3bv32, ~a~0.base=1bv32, ~a~0.offset=0bv32, ~i~0=0bv32, ~p~0.base=1bv32, ~p~0.offset=0bv32, ~y~0=0bv32]
[L653-L656]        assume !(1bv32 == #t~mem9);
[L653]             havoc #t~mem9;
             VAL   [#NULL.base=0bv32, #NULL.offset=0bv32, #t~malloc0.base=1bv32, #t~malloc0.offset=0bv32, ~a~0.base=1bv32, ~a~0.offset=0bv32, ~i~0=0bv32, ~p~0.base=1bv32, ~p~0.offset=0bv32, ~y~0=0bv32]
[L657]             call #t~mem12 := read~intINTTYPE4(~p~0.base, ~p~0.offset, 4bv32);
             VAL   [#NULL.base=0bv32, #NULL.offset=0bv32, #t~malloc0.base=1bv32, #t~malloc0.offset=0bv32, #t~mem12=3bv32, ~a~0.base=1bv32, ~a~0.offset=0bv32, ~i~0=0bv32, ~p~0.base=1bv32, ~p~0.offset=0bv32, ~y~0=0bv32]
[L657-L660]        assume !(2bv32 == #t~mem12);
[L657]             havoc #t~mem12;
             VAL   [#NULL.base=0bv32, #NULL.offset=0bv32, #t~malloc0.base=1bv32, #t~malloc0.offset=0bv32, ~a~0.base=1bv32, ~a~0.offset=0bv32, ~i~0=0bv32, ~p~0.base=1bv32, ~p~0.offset=0bv32, ~y~0=0bv32]
[L661]             call #t~mem15 := read~intINTTYPE4(~p~0.base, ~p~0.offset, 4bv32);
             VAL   [#NULL.base=0bv32, #NULL.offset=0bv32, #t~malloc0.base=1bv32, #t~malloc0.offset=0bv32, #t~mem15=3bv32, ~a~0.base=1bv32, ~a~0.offset=0bv32, ~i~0=0bv32, ~p~0.base=1bv32, ~p~0.offset=0bv32, ~y~0=0bv32]
[L661-L662]        assume 3bv32 != #t~mem15 || ~bvslt32(~bvadd32(~i~0, ~y~0), 20bv32);
[L661]             havoc #t~mem15;
             VAL   [#NULL.base=0bv32, #NULL.offset=0bv32, #t~malloc0.base=1bv32, #t~malloc0.offset=0bv32, ~a~0.base=1bv32, ~a~0.offset=0bv32, ~i~0=0bv32, ~p~0.base=1bv32, ~p~0.offset=0bv32, ~y~0=0bv32]
[L662]             assert false;
             VAL   [#NULL.base=0bv32, #NULL.offset=0bv32, #t~malloc0.base=1bv32, #t~malloc0.offset=0bv32, ~a~0.base=1bv32, ~a~0.offset=0bv32, ~i~0=0bv32, ~p~0.base=1bv32, ~p~0.offset=0bv32, ~y~0=0bv32]


[?]          CALL        call ULTIMATE.init();
             VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, old(#NULL!base)=0bv32, old(#NULL!offset)=0bv32]
[?]                      #NULL := { base: 0bv32, offset: 0bv32 };
[?]                      #valid[0bv32] := 0bv1;
             VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, old(#NULL!base)=0bv32, old(#NULL!offset)=0bv32]
[?]          RET         call ULTIMATE.init();
             VAL         [#NULL!base=0bv32, #NULL!offset=0bv32]
[?]          CALL        call #t~ret18 := main();
             VAL         [#NULL!base=0bv32, #NULL!offset=0bv32]
[L627]                   ~i~0 := 0bv32;
[L628]                   ~y~0 := 0bv32;
[L629]       FCALL       call #t~malloc0 := #Ultimate.alloc(8bv32);
[L629]                   ~a~0 := #t~malloc0;
             VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, ~a~0!base=1bv32, ~a~0!offset=0bv32, ~i~0=0bv32, ~y~0=0bv32]
[L630]       COND FALSE  !(~a~0 == { base: 0bv32, offset: 0bv32 })
             VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, ~a~0!base=1bv32, ~a~0!offset=0bv32, ~i~0=0bv32, ~y~0=0bv32]
[L631]                   havoc ~t~0;
[L632]                   ~p~0 := ~a~0;
             VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, ~a~0!base=1bv32, ~a~0!offset=0bv32, ~i~0=0bv32, ~p~0!base=1bv32, ~p~0!offset=0bv32, ~y~0=0bv32]
[L633-L640]  COND TRUE   !(~bvslt32(~i~0, 10bv32) && 0bv32 != #t~nondet1)
[L633]                   havoc #t~nondet1;
             VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, ~a~0!base=1bv32, ~a~0!offset=0bv32, ~i~0=0bv32, ~p~0!base=1bv32, ~p~0!offset=0bv32, ~y~0=0bv32]
[L641-L648]  COND TRUE   !(~bvslt32(~y~0, 10bv32) && 0bv32 != #t~nondet5)
[L641]                   havoc #t~nondet5;
             VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, ~a~0!base=1bv32, ~a~0!offset=0bv32, ~i~0=0bv32, ~p~0!base=1bv32, ~p~0!offset=0bv32, ~y~0=0bv32]
[L649]       FCALL       call write~intINTTYPE4(3bv32, { base: ~p~0!base, offset: ~p~0!offset }, 4bv32);
[L650]                   ~i~0 := 0bv32;
[L651]                   ~y~0 := 0bv32;
[L652]                   ~p~0 := ~a~0;
             VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, ~a~0!base=1bv32, ~a~0!offset=0bv32, ~i~0=0bv32, ~p~0!base=1bv32, ~p~0!offset=0bv32, ~y~0=0bv32]
[L653]       FCALL       call #t~mem9 := read~intINTTYPE4({ base: ~p~0!base, offset: ~p~0!offset }, 4bv32);
             VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, #t~mem9=3bv32, ~a~0!base=1bv32, ~a~0!offset=0bv32, ~i~0=0bv32, ~p~0!base=1bv32, ~p~0!offset=0bv32, ~y~0=0bv32]
[L653-L656]  COND TRUE   !(1bv32 == #t~mem9)
[L653]                   havoc #t~mem9;
             VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, ~a~0!base=1bv32, ~a~0!offset=0bv32, ~i~0=0bv32, ~p~0!base=1bv32, ~p~0!offset=0bv32, ~y~0=0bv32]
[L657]       FCALL       call #t~mem12 := read~intINTTYPE4({ base: ~p~0!base, offset: ~p~0!offset }, 4bv32);
             VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, #t~mem12=3bv32, ~a~0!base=1bv32, ~a~0!offset=0bv32, ~i~0=0bv32, ~p~0!base=1bv32, ~p~0!offset=0bv32, ~y~0=0bv32]
[L657-L660]  COND TRUE   !(2bv32 == #t~mem12)
[L657]                   havoc #t~mem12;
             VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, ~a~0!base=1bv32, ~a~0!offset=0bv32, ~i~0=0bv32, ~p~0!base=1bv32, ~p~0!offset=0bv32, ~y~0=0bv32]
[L661]       FCALL       call #t~mem15 := read~intINTTYPE4({ base: ~p~0!base, offset: ~p~0!offset }, 4bv32);
             VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, #t~mem15=3bv32, ~a~0!base=1bv32, ~a~0!offset=0bv32, ~i~0=0bv32, ~p~0!base=1bv32, ~p~0!offset=0bv32, ~y~0=0bv32]
[L661]       COND TRUE   3bv32 != #t~mem15 || ~bvslt32(~bvadd32(~i~0, ~y~0), 20bv32)
[L661]                   havoc #t~mem15;
             VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, ~a~0!base=1bv32, ~a~0!offset=0bv32, ~i~0=0bv32, ~p~0!base=1bv32, ~p~0!offset=0bv32, ~y~0=0bv32]
[L662]                   assert false;
             VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, ~a~0!base=1bv32, ~a~0!offset=0bv32, ~i~0=0bv32, ~p~0!base=1bv32, ~p~0!offset=0bv32, ~y~0=0bv32]

-----
-----
class de.uni_freiburg.informatik.ultimate.boogie.procedureinliner.backtranslation.InlinerBacktranslator
[?]          CALL        call ULTIMATE.init();
             VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, old(#NULL!base)=0bv32, old(#NULL!offset)=0bv32]
[?]                      #NULL := { base: 0bv32, offset: 0bv32 };
[?]                      #valid[0bv32] := 0bv1;
             VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, old(#NULL!base)=0bv32, old(#NULL!offset)=0bv32]
[?]          RET         call ULTIMATE.init();
             VAL         [#NULL!base=0bv32, #NULL!offset=0bv32]
[?]          CALL        call #t~ret18 := main();
             VAL         [#NULL!base=0bv32, #NULL!offset=0bv32]
[L627]                   ~i~0 := 0bv32;
[L628]                   ~y~0 := 0bv32;
[L629]       FCALL       call #t~malloc0 := #Ultimate.alloc(8bv32);
[L629]                   ~a~0 := #t~malloc0;
             VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, ~a~0!base=1bv32, ~a~0!offset=0bv32, ~i~0=0bv32, ~y~0=0bv32]
[L630]       COND FALSE  !(~a~0 == { base: 0bv32, offset: 0bv32 })
             VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, ~a~0!base=1bv32, ~a~0!offset=0bv32, ~i~0=0bv32, ~y~0=0bv32]
[L631]                   havoc ~t~0;
[L632]                   ~p~0 := ~a~0;
             VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, ~a~0!base=1bv32, ~a~0!offset=0bv32, ~i~0=0bv32, ~p~0!base=1bv32, ~p~0!offset=0bv32, ~y~0=0bv32]
[L633-L640]  COND TRUE   !(~bvslt32(~i~0, 10bv32) && 0bv32 != #t~nondet1)
[L633]                   havoc #t~nondet1;
             VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, ~a~0!base=1bv32, ~a~0!offset=0bv32, ~i~0=0bv32, ~p~0!base=1bv32, ~p~0!offset=0bv32, ~y~0=0bv32]
[L641-L648]  COND TRUE   !(~bvslt32(~y~0, 10bv32) && 0bv32 != #t~nondet5)
[L641]                   havoc #t~nondet5;
             VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, ~a~0!base=1bv32, ~a~0!offset=0bv32, ~i~0=0bv32, ~p~0!base=1bv32, ~p~0!offset=0bv32, ~y~0=0bv32]
[L649]       FCALL       call write~intINTTYPE4(3bv32, { base: ~p~0!base, offset: ~p~0!offset }, 4bv32);
[L650]                   ~i~0 := 0bv32;
[L651]                   ~y~0 := 0bv32;
[L652]                   ~p~0 := ~a~0;
             VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, ~a~0!base=1bv32, ~a~0!offset=0bv32, ~i~0=0bv32, ~p~0!base=1bv32, ~p~0!offset=0bv32, ~y~0=0bv32]
[L653]       FCALL       call #t~mem9 := read~intINTTYPE4({ base: ~p~0!base, offset: ~p~0!offset }, 4bv32);
             VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, #t~mem9=3bv32, ~a~0!base=1bv32, ~a~0!offset=0bv32, ~i~0=0bv32, ~p~0!base=1bv32, ~p~0!offset=0bv32, ~y~0=0bv32]
[L653-L656]  COND TRUE   !(1bv32 == #t~mem9)
[L653]                   havoc #t~mem9;
             VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, ~a~0!base=1bv32, ~a~0!offset=0bv32, ~i~0=0bv32, ~p~0!base=1bv32, ~p~0!offset=0bv32, ~y~0=0bv32]
[L657]       FCALL       call #t~mem12 := read~intINTTYPE4({ base: ~p~0!base, offset: ~p~0!offset }, 4bv32);
             VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, #t~mem12=3bv32, ~a~0!base=1bv32, ~a~0!offset=0bv32, ~i~0=0bv32, ~p~0!base=1bv32, ~p~0!offset=0bv32, ~y~0=0bv32]
[L657-L660]  COND TRUE   !(2bv32 == #t~mem12)
[L657]                   havoc #t~mem12;
             VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, ~a~0!base=1bv32, ~a~0!offset=0bv32, ~i~0=0bv32, ~p~0!base=1bv32, ~p~0!offset=0bv32, ~y~0=0bv32]
[L661]       FCALL       call #t~mem15 := read~intINTTYPE4({ base: ~p~0!base, offset: ~p~0!offset }, 4bv32);
             VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, #t~mem15=3bv32, ~a~0!base=1bv32, ~a~0!offset=0bv32, ~i~0=0bv32, ~p~0!base=1bv32, ~p~0!offset=0bv32, ~y~0=0bv32]
[L661]       COND TRUE   3bv32 != #t~mem15 || ~bvslt32(~bvadd32(~i~0, ~y~0), 20bv32)
[L661]                   havoc #t~mem15;
             VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, ~a~0!base=1bv32, ~a~0!offset=0bv32, ~i~0=0bv32, ~p~0!base=1bv32, ~p~0!offset=0bv32, ~y~0=0bv32]
[L662]                   assert false;
             VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, ~a~0!base=1bv32, ~a~0!offset=0bv32, ~i~0=0bv32, ~p~0!base=1bv32, ~p~0!offset=0bv32, ~y~0=0bv32]


[?]          CALL        call ULTIMATE.init();
             VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, old(#NULL!base)=0bv32, old(#NULL!offset)=0bv32]
[?]                      #NULL := { base: 0bv32, offset: 0bv32 };
[?]                      #valid[0bv32] := 0bv1;
             VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, old(#NULL!base)=0bv32, old(#NULL!offset)=0bv32]
[?]          RET         call ULTIMATE.init();
             VAL         [#NULL!base=0bv32, #NULL!offset=0bv32]
[?]          CALL        call #t~ret18 := main();
             VAL         [#NULL!base=0bv32, #NULL!offset=0bv32]
[L627]                   ~i~0 := 0bv32;
[L628]                   ~y~0 := 0bv32;
[L629]       FCALL       call #t~malloc0 := #Ultimate.alloc(8bv32);
[L629]                   ~a~0 := #t~malloc0;
             VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, ~a~0!base=1bv32, ~a~0!offset=0bv32, ~i~0=0bv32, ~y~0=0bv32]
[L630]       COND FALSE  !(~a~0 == { base: 0bv32, offset: 0bv32 })
             VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, ~a~0!base=1bv32, ~a~0!offset=0bv32, ~i~0=0bv32, ~y~0=0bv32]
[L631]                   havoc ~t~0;
[L632]                   ~p~0 := ~a~0;
             VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, ~a~0!base=1bv32, ~a~0!offset=0bv32, ~i~0=0bv32, ~p~0!base=1bv32, ~p~0!offset=0bv32, ~y~0=0bv32]
[L633-L640]  COND TRUE   !(~bvslt32(~i~0, 10bv32) && 0bv32 != #t~nondet1)
[L633]                   havoc #t~nondet1;
             VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, ~a~0!base=1bv32, ~a~0!offset=0bv32, ~i~0=0bv32, ~p~0!base=1bv32, ~p~0!offset=0bv32, ~y~0=0bv32]
[L641-L648]  COND TRUE   !(~bvslt32(~y~0, 10bv32) && 0bv32 != #t~nondet5)
[L641]                   havoc #t~nondet5;
             VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, ~a~0!base=1bv32, ~a~0!offset=0bv32, ~i~0=0bv32, ~p~0!base=1bv32, ~p~0!offset=0bv32, ~y~0=0bv32]
[L649]       FCALL       call write~intINTTYPE4(3bv32, { base: ~p~0!base, offset: ~p~0!offset }, 4bv32);
[L650]                   ~i~0 := 0bv32;
[L651]                   ~y~0 := 0bv32;
[L652]                   ~p~0 := ~a~0;
             VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, ~a~0!base=1bv32, ~a~0!offset=0bv32, ~i~0=0bv32, ~p~0!base=1bv32, ~p~0!offset=0bv32, ~y~0=0bv32]
[L653]       FCALL       call #t~mem9 := read~intINTTYPE4({ base: ~p~0!base, offset: ~p~0!offset }, 4bv32);
             VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, #t~mem9=3bv32, ~a~0!base=1bv32, ~a~0!offset=0bv32, ~i~0=0bv32, ~p~0!base=1bv32, ~p~0!offset=0bv32, ~y~0=0bv32]
[L653-L656]  COND TRUE   !(1bv32 == #t~mem9)
[L653]                   havoc #t~mem9;
             VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, ~a~0!base=1bv32, ~a~0!offset=0bv32, ~i~0=0bv32, ~p~0!base=1bv32, ~p~0!offset=0bv32, ~y~0=0bv32]
[L657]       FCALL       call #t~mem12 := read~intINTTYPE4({ base: ~p~0!base, offset: ~p~0!offset }, 4bv32);
             VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, #t~mem12=3bv32, ~a~0!base=1bv32, ~a~0!offset=0bv32, ~i~0=0bv32, ~p~0!base=1bv32, ~p~0!offset=0bv32, ~y~0=0bv32]
[L657-L660]  COND TRUE   !(2bv32 == #t~mem12)
[L657]                   havoc #t~mem12;
             VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, ~a~0!base=1bv32, ~a~0!offset=0bv32, ~i~0=0bv32, ~p~0!base=1bv32, ~p~0!offset=0bv32, ~y~0=0bv32]
[L661]       FCALL       call #t~mem15 := read~intINTTYPE4({ base: ~p~0!base, offset: ~p~0!offset }, 4bv32);
             VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, #t~mem15=3bv32, ~a~0!base=1bv32, ~a~0!offset=0bv32, ~i~0=0bv32, ~p~0!base=1bv32, ~p~0!offset=0bv32, ~y~0=0bv32]
[L661]       COND TRUE   3bv32 != #t~mem15 || ~bvslt32(~bvadd32(~i~0, ~y~0), 20bv32)
[L661]                   havoc #t~mem15;
             VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, ~a~0!base=1bv32, ~a~0!offset=0bv32, ~i~0=0bv32, ~p~0!base=1bv32, ~p~0!offset=0bv32, ~y~0=0bv32]
[L662]                   assert false;
             VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, ~a~0!base=1bv32, ~a~0!offset=0bv32, ~i~0=0bv32, ~p~0!base=1bv32, ~p~0!offset=0bv32, ~y~0=0bv32]

-----
-----
class de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.CACSL2BoogieBacktranslator
[?]          CALL        call ULTIMATE.init();
             VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, old(#NULL!base)=0bv32, old(#NULL!offset)=0bv32]
[?]                      #NULL := { base: 0bv32, offset: 0bv32 };
[?]                      #valid[0bv32] := 0bv1;
             VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, old(#NULL!base)=0bv32, old(#NULL!offset)=0bv32]
[?]          RET         call ULTIMATE.init();
             VAL         [#NULL!base=0bv32, #NULL!offset=0bv32]
[?]          CALL        call #t~ret18 := main();
             VAL         [#NULL!base=0bv32, #NULL!offset=0bv32]
[L627]                   ~i~0 := 0bv32;
[L628]                   ~y~0 := 0bv32;
[L629]       FCALL       call #t~malloc0 := #Ultimate.alloc(8bv32);
[L629]                   ~a~0 := #t~malloc0;
             VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, ~a~0!base=1bv32, ~a~0!offset=0bv32, ~i~0=0bv32, ~y~0=0bv32]
[L630]       COND FALSE  !(~a~0 == { base: 0bv32, offset: 0bv32 })
             VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, ~a~0!base=1bv32, ~a~0!offset=0bv32, ~i~0=0bv32, ~y~0=0bv32]
[L631]                   havoc ~t~0;
[L632]                   ~p~0 := ~a~0;
             VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, ~a~0!base=1bv32, ~a~0!offset=0bv32, ~i~0=0bv32, ~p~0!base=1bv32, ~p~0!offset=0bv32, ~y~0=0bv32]
[L633-L640]  COND TRUE   !(~bvslt32(~i~0, 10bv32) && 0bv32 != #t~nondet1)
[L633]                   havoc #t~nondet1;
             VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, ~a~0!base=1bv32, ~a~0!offset=0bv32, ~i~0=0bv32, ~p~0!base=1bv32, ~p~0!offset=0bv32, ~y~0=0bv32]
[L641-L648]  COND TRUE   !(~bvslt32(~y~0, 10bv32) && 0bv32 != #t~nondet5)
[L641]                   havoc #t~nondet5;
             VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, ~a~0!base=1bv32, ~a~0!offset=0bv32, ~i~0=0bv32, ~p~0!base=1bv32, ~p~0!offset=0bv32, ~y~0=0bv32]
[L649]       FCALL       call write~intINTTYPE4(3bv32, { base: ~p~0!base, offset: ~p~0!offset }, 4bv32);
[L650]                   ~i~0 := 0bv32;
[L651]                   ~y~0 := 0bv32;
[L652]                   ~p~0 := ~a~0;
             VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, ~a~0!base=1bv32, ~a~0!offset=0bv32, ~i~0=0bv32, ~p~0!base=1bv32, ~p~0!offset=0bv32, ~y~0=0bv32]
[L653]       FCALL       call #t~mem9 := read~intINTTYPE4({ base: ~p~0!base, offset: ~p~0!offset }, 4bv32);
             VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, #t~mem9=3bv32, ~a~0!base=1bv32, ~a~0!offset=0bv32, ~i~0=0bv32, ~p~0!base=1bv32, ~p~0!offset=0bv32, ~y~0=0bv32]
[L653-L656]  COND TRUE   !(1bv32 == #t~mem9)
[L653]                   havoc #t~mem9;
             VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, ~a~0!base=1bv32, ~a~0!offset=0bv32, ~i~0=0bv32, ~p~0!base=1bv32, ~p~0!offset=0bv32, ~y~0=0bv32]
[L657]       FCALL       call #t~mem12 := read~intINTTYPE4({ base: ~p~0!base, offset: ~p~0!offset }, 4bv32);
             VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, #t~mem12=3bv32, ~a~0!base=1bv32, ~a~0!offset=0bv32, ~i~0=0bv32, ~p~0!base=1bv32, ~p~0!offset=0bv32, ~y~0=0bv32]
[L657-L660]  COND TRUE   !(2bv32 == #t~mem12)
[L657]                   havoc #t~mem12;
             VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, ~a~0!base=1bv32, ~a~0!offset=0bv32, ~i~0=0bv32, ~p~0!base=1bv32, ~p~0!offset=0bv32, ~y~0=0bv32]
[L661]       FCALL       call #t~mem15 := read~intINTTYPE4({ base: ~p~0!base, offset: ~p~0!offset }, 4bv32);
             VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, #t~mem15=3bv32, ~a~0!base=1bv32, ~a~0!offset=0bv32, ~i~0=0bv32, ~p~0!base=1bv32, ~p~0!offset=0bv32, ~y~0=0bv32]
[L661]       COND TRUE   3bv32 != #t~mem15 || ~bvslt32(~bvadd32(~i~0, ~y~0), 20bv32)
[L661]                   havoc #t~mem15;
             VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, ~a~0!base=1bv32, ~a~0!offset=0bv32, ~i~0=0bv32, ~p~0!base=1bv32, ~p~0!offset=0bv32, ~y~0=0bv32]
[L662]                   assert false;
             VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, ~a~0!base=1bv32, ~a~0!offset=0bv32, ~i~0=0bv32, ~p~0!base=1bv32, ~p~0!offset=0bv32, ~y~0=0bv32]


[L627]              int i = 0;
[L628]              int y = 0;
[L629]              List a = (List) malloc(sizeof(struct node));
        VAL         [a={1:0}, i=0, malloc(sizeof(struct node))={1:0}, y=0]
[L630]  COND FALSE  !(a == 0)
        VAL         [a={1:0}, i=0, malloc(sizeof(struct node))={1:0}, y=0]
[L631]              List t;
[L632]              List p = a;
        VAL         [a={1:0}, i=0, malloc(sizeof(struct node))={1:0}, p={1:0}, y=0]
[L633]  COND FALSE  !(i < 10 && __VERIFIER_nondet_int())
[L641]  COND FALSE  !(y < 10 && __VERIFIER_nondet_int())
[L649]              p->h = 3
[L650]              i = 0
[L651]              y = 0
[L652]              p = a
        VAL         [a={1:0}, i=0, malloc(sizeof(struct node))={1:0}, p={1:0}, y=0]
[L653]  EXPR        p->h
        VAL         [a={1:0}, i=0, malloc(sizeof(struct node))={1:0}, p={1:0}, p->h=3, y=0]
[L653]  COND FALSE  !(p->h == 1)
[L657]  EXPR        p->h
        VAL         [a={1:0}, i=0, malloc(sizeof(struct node))={1:0}, p={1:0}, p->h=3, y=0]
[L657]  COND FALSE  !(p->h == 2)
[L661]  EXPR        p->h
        VAL         [a={1:0}, i=0, malloc(sizeof(struct node))={1:0}, p={1:0}, p->h=3, y=0]
[L661]  COND TRUE   p->h != 3 || (i + y) < 20
[L662]              __VERIFIER_error()
        VAL         [a={1:0}, i=0, malloc(sizeof(struct node))={1:0}, p={1:0}, y=0]

-----
[2018-11-23 11:10:02,800 WARN  L170   areAnnotationChecker]: exitENTRY has no Hoare annotation
[2018-11-23 11:10:02,801 WARN  L170   areAnnotationChecker]: ULTIMATE.initENTRY has no Hoare annotation
[2018-11-23 11:10:02,801 WARN  L170   areAnnotationChecker]: ULTIMATE.startENTRY has no Hoare annotation
[2018-11-23 11:10:02,801 WARN  L170   areAnnotationChecker]: ULTIMATE.startENTRY has no Hoare annotation
[2018-11-23 11:10:02,801 WARN  L170   areAnnotationChecker]: mainENTRY has no Hoare annotation
[2018-11-23 11:10:02,801 WARN  L170   areAnnotationChecker]: L620 has no Hoare annotation
[2018-11-23 11:10:02,801 WARN  L170   areAnnotationChecker]: ULTIMATE.initFINAL has no Hoare annotation
[2018-11-23 11:10:02,802 WARN  L170   areAnnotationChecker]: L-1 has no Hoare annotation
[2018-11-23 11:10:02,802 WARN  L170   areAnnotationChecker]: L-1 has no Hoare annotation
[2018-11-23 11:10:02,802 WARN  L170   areAnnotationChecker]: L630 has no Hoare annotation
[2018-11-23 11:10:02,802 WARN  L170   areAnnotationChecker]: L630 has no Hoare annotation
[2018-11-23 11:10:02,802 WARN  L170   areAnnotationChecker]: ULTIMATE.initEXIT has no Hoare annotation
[2018-11-23 11:10:02,802 WARN  L170   areAnnotationChecker]: ULTIMATE.startFINAL has no Hoare annotation
[2018-11-23 11:10:02,803 WARN  L170   areAnnotationChecker]: L630-1 has no Hoare annotation
[2018-11-23 11:10:02,803 WARN  L170   areAnnotationChecker]: L630-1 has no Hoare annotation
[2018-11-23 11:10:02,803 WARN  L170   areAnnotationChecker]: L630-3 has no Hoare annotation
[2018-11-23 11:10:02,803 WARN  L170   areAnnotationChecker]: L633-2 has no Hoare annotation
[2018-11-23 11:10:02,803 WARN  L170   areAnnotationChecker]: L633-2 has no Hoare annotation
[2018-11-23 11:10:02,803 WARN  L170   areAnnotationChecker]: L633-2 has no Hoare annotation
[2018-11-23 11:10:02,804 WARN  L170   areAnnotationChecker]: L641-1 has no Hoare annotation
[2018-11-23 11:10:02,805 WARN  L170   areAnnotationChecker]: L641-1 has no Hoare annotation
[2018-11-23 11:10:02,805 WARN  L170   areAnnotationChecker]: L641-1 has no Hoare annotation
[2018-11-23 11:10:02,805 WARN  L170   areAnnotationChecker]: L637 has no Hoare annotation
[2018-11-23 11:10:02,805 WARN  L170   areAnnotationChecker]: L637 has no Hoare annotation
[2018-11-23 11:10:02,805 WARN  L170   areAnnotationChecker]: L641-2 has no Hoare annotation
[2018-11-23 11:10:02,806 WARN  L170   areAnnotationChecker]: L645 has no Hoare annotation
[2018-11-23 11:10:02,806 WARN  L170   areAnnotationChecker]: L645 has no Hoare annotation
[2018-11-23 11:10:02,806 WARN  L170   areAnnotationChecker]: L637-1 has no Hoare annotation
[2018-11-23 11:10:02,806 WARN  L170   areAnnotationChecker]: L637-1 has no Hoare annotation
[2018-11-23 11:10:02,806 WARN  L170   areAnnotationChecker]: L637-3 has no Hoare annotation
[2018-11-23 11:10:02,806 WARN  L170   areAnnotationChecker]: L653-3 has no Hoare annotation
[2018-11-23 11:10:02,807 WARN  L170   areAnnotationChecker]: L653-3 has no Hoare annotation
[2018-11-23 11:10:02,807 WARN  L170   areAnnotationChecker]: L645-1 has no Hoare annotation
[2018-11-23 11:10:02,807 WARN  L170   areAnnotationChecker]: L645-1 has no Hoare annotation
[2018-11-23 11:10:02,807 WARN  L170   areAnnotationChecker]: L645-3 has no Hoare annotation
[2018-11-23 11:10:02,807 WARN  L170   areAnnotationChecker]: L657-2 has no Hoare annotation
[2018-11-23 11:10:02,808 WARN  L170   areAnnotationChecker]: L657-2 has no Hoare annotation
[2018-11-23 11:10:02,808 WARN  L170   areAnnotationChecker]: L653-1 has no Hoare annotation
[2018-11-23 11:10:02,808 WARN  L170   areAnnotationChecker]: L653-1 has no Hoare annotation
[2018-11-23 11:10:02,808 WARN  L170   areAnnotationChecker]: L657-3 has no Hoare annotation
[2018-11-23 11:10:02,808 WARN  L170   areAnnotationChecker]: L657 has no Hoare annotation
[2018-11-23 11:10:02,808 WARN  L170   areAnnotationChecker]: L657 has no Hoare annotation
[2018-11-23 11:10:02,809 WARN  L170   areAnnotationChecker]: L661 has no Hoare annotation
[2018-11-23 11:10:02,809 WARN  L170   areAnnotationChecker]: L661 has no Hoare annotation
[2018-11-23 11:10:02,809 WARN  L170   areAnnotationChecker]: L662 has no Hoare annotation
[2018-11-23 11:10:02,809 WARN  L170   areAnnotationChecker]: L662 has no Hoare annotation
[2018-11-23 11:10:02,809 WARN  L170   areAnnotationChecker]: L661-2 has no Hoare annotation
[2018-11-23 11:10:02,809 WARN  L170   areAnnotationChecker]: L664-3 has no Hoare annotation
[2018-11-23 11:10:02,810 WARN  L170   areAnnotationChecker]: L664-3 has no Hoare annotation
[2018-11-23 11:10:02,810 WARN  L170   areAnnotationChecker]: L664-4 has no Hoare annotation
[2018-11-23 11:10:02,810 WARN  L170   areAnnotationChecker]: L664-1 has no Hoare annotation
[2018-11-23 11:10:02,810 WARN  L170   areAnnotationChecker]: L664-1 has no Hoare annotation
[2018-11-23 11:10:02,810 WARN  L170   areAnnotationChecker]: mainFINAL has no Hoare annotation
[2018-11-23 11:10:02,811 WARN  L170   areAnnotationChecker]: mainEXIT has no Hoare annotation
[2018-11-23 11:10:02,811 INFO  L163   areAnnotationChecker]: CFG has 0 edges. 0 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. 0 times interpolants missing.
[2018-11-23 11:10:02,814 INFO  L202        PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 23.11 11:10:02 BoogieIcfgContainer
[2018-11-23 11:10:02,814 INFO  L132        PluginConnector]: ------------------------ END TraceAbstraction----------------------------
[2018-11-23 11:10:02,814 INFO  L113        PluginConnector]: ------------------------Witness Printer----------------------------
[2018-11-23 11:10:02,815 INFO  L271        PluginConnector]: Initializing Witness Printer...
[2018-11-23 11:10:02,815 INFO  L276        PluginConnector]: Witness Printer initialized
[2018-11-23 11:10:02,815 INFO  L185        PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 11:10:00" (3/4) ...
[2018-11-23 11:10:02,819 INFO  L138         WitnessPrinter]: Generating witness for reachability counterexample
-----
class de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder.RCFGBacktranslator
[?]  CALL  call ULTIMATE.init();
     VAL   [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |old(#NULL.base)|=(_ bv0 32), |old(#NULL.offset)|=(_ bv0 32)]
[?]        #NULL.base, #NULL.offset := 0bv32, 0bv32;#valid := #valid[0bv32 := 0bv1];
     VAL   [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |old(#NULL.base)|=(_ bv0 32), |old(#NULL.offset)|=(_ bv0 32)]
[?]        assume true;
     VAL   [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |old(#NULL.base)|=(_ bv0 32), |old(#NULL.offset)|=(_ bv0 32)]
[?]  RET   #111#return;
     VAL   [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32)]
[?]  CALL  call #t~ret18 := main();
     VAL   [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32)]
[?]        ~i~0 := 0bv32;~y~0 := 0bv32;call #t~malloc0.base, #t~malloc0.offset := #Ultimate.alloc(8bv32);~a~0.base, ~a~0.offset := #t~malloc0.base, #t~malloc0.offset;
     VAL   [main_~a~0.base=(_ bv1 32), main_~a~0.offset=(_ bv0 32), main_~i~0=(_ bv0 32), main_~y~0=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |main_#t~malloc0.base|=(_ bv1 32), |main_#t~malloc0.offset|=(_ bv0 32)]
[?]        assume !(~a~0.base == 0bv32 && ~a~0.offset == 0bv32);
     VAL   [main_~a~0.base=(_ bv1 32), main_~a~0.offset=(_ bv0 32), main_~i~0=(_ bv0 32), main_~y~0=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |main_#t~malloc0.base|=(_ bv1 32), |main_#t~malloc0.offset|=(_ bv0 32)]
[?]        havoc ~t~0.base, ~t~0.offset;~p~0.base, ~p~0.offset := ~a~0.base, ~a~0.offset;
     VAL   [main_~a~0.base=(_ bv1 32), main_~a~0.offset=(_ bv0 32), main_~i~0=(_ bv0 32), main_~p~0.base=(_ bv1 32), main_~p~0.offset=(_ bv0 32), main_~y~0=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |main_#t~malloc0.base|=(_ bv1 32), |main_#t~malloc0.offset|=(_ bv0 32)]
[?]        assume !(~bvslt32(~i~0, 10bv32) && 0bv32 != #t~nondet1);havoc #t~nondet1;
     VAL   [main_~a~0.base=(_ bv1 32), main_~a~0.offset=(_ bv0 32), main_~i~0=(_ bv0 32), main_~p~0.base=(_ bv1 32), main_~p~0.offset=(_ bv0 32), main_~y~0=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |main_#t~malloc0.base|=(_ bv1 32), |main_#t~malloc0.offset|=(_ bv0 32)]
[?]        assume !(~bvslt32(~y~0, 10bv32) && 0bv32 != #t~nondet5);havoc #t~nondet5;
     VAL   [main_~a~0.base=(_ bv1 32), main_~a~0.offset=(_ bv0 32), main_~i~0=(_ bv0 32), main_~p~0.base=(_ bv1 32), main_~p~0.offset=(_ bv0 32), main_~y~0=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |main_#t~malloc0.base|=(_ bv1 32), |main_#t~malloc0.offset|=(_ bv0 32)]
[?]        call write~intINTTYPE4(3bv32, ~p~0.base, ~p~0.offset, 4bv32);~i~0 := 0bv32;~y~0 := 0bv32;~p~0.base, ~p~0.offset := ~a~0.base, ~a~0.offset;
     VAL   [main_~a~0.base=(_ bv1 32), main_~a~0.offset=(_ bv0 32), main_~i~0=(_ bv0 32), main_~p~0.base=(_ bv1 32), main_~p~0.offset=(_ bv0 32), main_~y~0=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |main_#t~malloc0.base|=(_ bv1 32), |main_#t~malloc0.offset|=(_ bv0 32)]
[?]        call #t~mem9 := read~intINTTYPE4(~p~0.base, ~p~0.offset, 4bv32);
     VAL   [main_~a~0.base=(_ bv1 32), main_~a~0.offset=(_ bv0 32), main_~i~0=(_ bv0 32), main_~p~0.base=(_ bv1 32), main_~p~0.offset=(_ bv0 32), main_~y~0=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |main_#t~malloc0.base|=(_ bv1 32), |main_#t~malloc0.offset|=(_ bv0 32), |main_#t~mem9|=(_ bv3 32)]
[?]        assume !(1bv32 == #t~mem9);havoc #t~mem9;
     VAL   [main_~a~0.base=(_ bv1 32), main_~a~0.offset=(_ bv0 32), main_~i~0=(_ bv0 32), main_~p~0.base=(_ bv1 32), main_~p~0.offset=(_ bv0 32), main_~y~0=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |main_#t~malloc0.base|=(_ bv1 32), |main_#t~malloc0.offset|=(_ bv0 32)]
[?]        call #t~mem12 := read~intINTTYPE4(~p~0.base, ~p~0.offset, 4bv32);
     VAL   [main_~a~0.base=(_ bv1 32), main_~a~0.offset=(_ bv0 32), main_~i~0=(_ bv0 32), main_~p~0.base=(_ bv1 32), main_~p~0.offset=(_ bv0 32), main_~y~0=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |main_#t~malloc0.base|=(_ bv1 32), |main_#t~malloc0.offset|=(_ bv0 32), |main_#t~mem12|=(_ bv3 32)]
[?]        assume !(2bv32 == #t~mem12);havoc #t~mem12;
     VAL   [main_~a~0.base=(_ bv1 32), main_~a~0.offset=(_ bv0 32), main_~i~0=(_ bv0 32), main_~p~0.base=(_ bv1 32), main_~p~0.offset=(_ bv0 32), main_~y~0=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |main_#t~malloc0.base|=(_ bv1 32), |main_#t~malloc0.offset|=(_ bv0 32)]
[?]        call #t~mem15 := read~intINTTYPE4(~p~0.base, ~p~0.offset, 4bv32);
     VAL   [main_~a~0.base=(_ bv1 32), main_~a~0.offset=(_ bv0 32), main_~i~0=(_ bv0 32), main_~p~0.base=(_ bv1 32), main_~p~0.offset=(_ bv0 32), main_~y~0=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |main_#t~malloc0.base|=(_ bv1 32), |main_#t~malloc0.offset|=(_ bv0 32), |main_#t~mem15|=(_ bv3 32)]
[?]        assume 3bv32 != #t~mem15 || ~bvslt32(~bvadd32(~i~0, ~y~0), 20bv32);havoc #t~mem15;
     VAL   [main_~a~0.base=(_ bv1 32), main_~a~0.offset=(_ bv0 32), main_~i~0=(_ bv0 32), main_~p~0.base=(_ bv1 32), main_~p~0.offset=(_ bv0 32), main_~y~0=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |main_#t~malloc0.base|=(_ bv1 32), |main_#t~malloc0.offset|=(_ bv0 32)]
[?]        assume !false;
     VAL   [main_~a~0.base=(_ bv1 32), main_~a~0.offset=(_ bv0 32), main_~i~0=(_ bv0 32), main_~p~0.base=(_ bv1 32), main_~p~0.offset=(_ bv0 32), main_~y~0=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |main_#t~malloc0.base|=(_ bv1 32), |main_#t~malloc0.offset|=(_ bv0 32)]


[?]          CALL  call ULTIMATE.init();
             VAL   [#NULL.base=0bv32, #NULL.offset=0bv32, old(#NULL.base)=0bv32, old(#NULL.offset)=0bv32]
[?]                #NULL.base, #NULL.offset := 0bv32, 0bv32;
[?]                #valid := #valid[0bv32 := 0bv1];
             VAL   [#NULL.base=0bv32, #NULL.offset=0bv32, old(#NULL.base)=0bv32, old(#NULL.offset)=0bv32]
[?]                ensures true;
             VAL   [#NULL.base=0bv32, #NULL.offset=0bv32, old(#NULL.base)=0bv32, old(#NULL.offset)=0bv32]
[?]          RET   call ULTIMATE.init();
             VAL   [#NULL.base=0bv32, #NULL.offset=0bv32]
[?]          CALL  call #t~ret18 := main();
             VAL   [#NULL.base=0bv32, #NULL.offset=0bv32]
[L627]             ~i~0 := 0bv32;
[L628]             ~y~0 := 0bv32;
[L629]             call #t~malloc0.base, #t~malloc0.offset := #Ultimate.alloc(8bv32);
[L629]             ~a~0.base, ~a~0.offset := #t~malloc0.base, #t~malloc0.offset;
             VAL   [#NULL.base=0bv32, #NULL.offset=0bv32, #t~malloc0.base=1bv32, #t~malloc0.offset=0bv32, ~a~0.base=1bv32, ~a~0.offset=0bv32, ~i~0=0bv32, ~y~0=0bv32]
[L630]             assume !(~a~0.base == 0bv32 && ~a~0.offset == 0bv32);
             VAL   [#NULL.base=0bv32, #NULL.offset=0bv32, #t~malloc0.base=1bv32, #t~malloc0.offset=0bv32, ~a~0.base=1bv32, ~a~0.offset=0bv32, ~i~0=0bv32, ~y~0=0bv32]
[L631]             havoc ~t~0.base, ~t~0.offset;
[L632]             ~p~0.base, ~p~0.offset := ~a~0.base, ~a~0.offset;
             VAL   [#NULL.base=0bv32, #NULL.offset=0bv32, #t~malloc0.base=1bv32, #t~malloc0.offset=0bv32, ~a~0.base=1bv32, ~a~0.offset=0bv32, ~i~0=0bv32, ~p~0.base=1bv32, ~p~0.offset=0bv32, ~y~0=0bv32]
[L633-L640]        assume !(~bvslt32(~i~0, 10bv32) && 0bv32 != #t~nondet1);
[L633]             havoc #t~nondet1;
             VAL   [#NULL.base=0bv32, #NULL.offset=0bv32, #t~malloc0.base=1bv32, #t~malloc0.offset=0bv32, ~a~0.base=1bv32, ~a~0.offset=0bv32, ~i~0=0bv32, ~p~0.base=1bv32, ~p~0.offset=0bv32, ~y~0=0bv32]
[L641-L648]        assume !(~bvslt32(~y~0, 10bv32) && 0bv32 != #t~nondet5);
[L641]             havoc #t~nondet5;
             VAL   [#NULL.base=0bv32, #NULL.offset=0bv32, #t~malloc0.base=1bv32, #t~malloc0.offset=0bv32, ~a~0.base=1bv32, ~a~0.offset=0bv32, ~i~0=0bv32, ~p~0.base=1bv32, ~p~0.offset=0bv32, ~y~0=0bv32]
[L649]             call write~intINTTYPE4(3bv32, ~p~0.base, ~p~0.offset, 4bv32);
[L650]             ~i~0 := 0bv32;
[L651]             ~y~0 := 0bv32;
[L652]             ~p~0.base, ~p~0.offset := ~a~0.base, ~a~0.offset;
             VAL   [#NULL.base=0bv32, #NULL.offset=0bv32, #t~malloc0.base=1bv32, #t~malloc0.offset=0bv32, ~a~0.base=1bv32, ~a~0.offset=0bv32, ~i~0=0bv32, ~p~0.base=1bv32, ~p~0.offset=0bv32, ~y~0=0bv32]
[L653]             call #t~mem9 := read~intINTTYPE4(~p~0.base, ~p~0.offset, 4bv32);
             VAL   [#NULL.base=0bv32, #NULL.offset=0bv32, #t~malloc0.base=1bv32, #t~malloc0.offset=0bv32, #t~mem9=3bv32, ~a~0.base=1bv32, ~a~0.offset=0bv32, ~i~0=0bv32, ~p~0.base=1bv32, ~p~0.offset=0bv32, ~y~0=0bv32]
[L653-L656]        assume !(1bv32 == #t~mem9);
[L653]             havoc #t~mem9;
             VAL   [#NULL.base=0bv32, #NULL.offset=0bv32, #t~malloc0.base=1bv32, #t~malloc0.offset=0bv32, ~a~0.base=1bv32, ~a~0.offset=0bv32, ~i~0=0bv32, ~p~0.base=1bv32, ~p~0.offset=0bv32, ~y~0=0bv32]
[L657]             call #t~mem12 := read~intINTTYPE4(~p~0.base, ~p~0.offset, 4bv32);
             VAL   [#NULL.base=0bv32, #NULL.offset=0bv32, #t~malloc0.base=1bv32, #t~malloc0.offset=0bv32, #t~mem12=3bv32, ~a~0.base=1bv32, ~a~0.offset=0bv32, ~i~0=0bv32, ~p~0.base=1bv32, ~p~0.offset=0bv32, ~y~0=0bv32]
[L657-L660]        assume !(2bv32 == #t~mem12);
[L657]             havoc #t~mem12;
             VAL   [#NULL.base=0bv32, #NULL.offset=0bv32, #t~malloc0.base=1bv32, #t~malloc0.offset=0bv32, ~a~0.base=1bv32, ~a~0.offset=0bv32, ~i~0=0bv32, ~p~0.base=1bv32, ~p~0.offset=0bv32, ~y~0=0bv32]
[L661]             call #t~mem15 := read~intINTTYPE4(~p~0.base, ~p~0.offset, 4bv32);
             VAL   [#NULL.base=0bv32, #NULL.offset=0bv32, #t~malloc0.base=1bv32, #t~malloc0.offset=0bv32, #t~mem15=3bv32, ~a~0.base=1bv32, ~a~0.offset=0bv32, ~i~0=0bv32, ~p~0.base=1bv32, ~p~0.offset=0bv32, ~y~0=0bv32]
[L661-L662]        assume 3bv32 != #t~mem15 || ~bvslt32(~bvadd32(~i~0, ~y~0), 20bv32);
[L661]             havoc #t~mem15;
             VAL   [#NULL.base=0bv32, #NULL.offset=0bv32, #t~malloc0.base=1bv32, #t~malloc0.offset=0bv32, ~a~0.base=1bv32, ~a~0.offset=0bv32, ~i~0=0bv32, ~p~0.base=1bv32, ~p~0.offset=0bv32, ~y~0=0bv32]
[L662]             assert false;
             VAL   [#NULL.base=0bv32, #NULL.offset=0bv32, #t~malloc0.base=1bv32, #t~malloc0.offset=0bv32, ~a~0.base=1bv32, ~a~0.offset=0bv32, ~i~0=0bv32, ~p~0.base=1bv32, ~p~0.offset=0bv32, ~y~0=0bv32]

-----
-----
class de.uni_freiburg.informatik.ultimate.boogie.preprocessor.BoogiePreprocessorBacktranslator
[?]          CALL  call ULTIMATE.init();
             VAL   [#NULL.base=0bv32, #NULL.offset=0bv32, old(#NULL.base)=0bv32, old(#NULL.offset)=0bv32]
[?]                #NULL.base, #NULL.offset := 0bv32, 0bv32;
[?]                #valid := #valid[0bv32 := 0bv1];
             VAL   [#NULL.base=0bv32, #NULL.offset=0bv32, old(#NULL.base)=0bv32, old(#NULL.offset)=0bv32]
[?]                ensures true;
             VAL   [#NULL.base=0bv32, #NULL.offset=0bv32, old(#NULL.base)=0bv32, old(#NULL.offset)=0bv32]
[?]          RET   call ULTIMATE.init();
             VAL   [#NULL.base=0bv32, #NULL.offset=0bv32]
[?]          CALL  call #t~ret18 := main();
             VAL   [#NULL.base=0bv32, #NULL.offset=0bv32]
[L627]             ~i~0 := 0bv32;
[L628]             ~y~0 := 0bv32;
[L629]             call #t~malloc0.base, #t~malloc0.offset := #Ultimate.alloc(8bv32);
[L629]             ~a~0.base, ~a~0.offset := #t~malloc0.base, #t~malloc0.offset;
             VAL   [#NULL.base=0bv32, #NULL.offset=0bv32, #t~malloc0.base=1bv32, #t~malloc0.offset=0bv32, ~a~0.base=1bv32, ~a~0.offset=0bv32, ~i~0=0bv32, ~y~0=0bv32]
[L630]             assume !(~a~0.base == 0bv32 && ~a~0.offset == 0bv32);
             VAL   [#NULL.base=0bv32, #NULL.offset=0bv32, #t~malloc0.base=1bv32, #t~malloc0.offset=0bv32, ~a~0.base=1bv32, ~a~0.offset=0bv32, ~i~0=0bv32, ~y~0=0bv32]
[L631]             havoc ~t~0.base, ~t~0.offset;
[L632]             ~p~0.base, ~p~0.offset := ~a~0.base, ~a~0.offset;
             VAL   [#NULL.base=0bv32, #NULL.offset=0bv32, #t~malloc0.base=1bv32, #t~malloc0.offset=0bv32, ~a~0.base=1bv32, ~a~0.offset=0bv32, ~i~0=0bv32, ~p~0.base=1bv32, ~p~0.offset=0bv32, ~y~0=0bv32]
[L633-L640]        assume !(~bvslt32(~i~0, 10bv32) && 0bv32 != #t~nondet1);
[L633]             havoc #t~nondet1;
             VAL   [#NULL.base=0bv32, #NULL.offset=0bv32, #t~malloc0.base=1bv32, #t~malloc0.offset=0bv32, ~a~0.base=1bv32, ~a~0.offset=0bv32, ~i~0=0bv32, ~p~0.base=1bv32, ~p~0.offset=0bv32, ~y~0=0bv32]
[L641-L648]        assume !(~bvslt32(~y~0, 10bv32) && 0bv32 != #t~nondet5);
[L641]             havoc #t~nondet5;
             VAL   [#NULL.base=0bv32, #NULL.offset=0bv32, #t~malloc0.base=1bv32, #t~malloc0.offset=0bv32, ~a~0.base=1bv32, ~a~0.offset=0bv32, ~i~0=0bv32, ~p~0.base=1bv32, ~p~0.offset=0bv32, ~y~0=0bv32]
[L649]             call write~intINTTYPE4(3bv32, ~p~0.base, ~p~0.offset, 4bv32);
[L650]             ~i~0 := 0bv32;
[L651]             ~y~0 := 0bv32;
[L652]             ~p~0.base, ~p~0.offset := ~a~0.base, ~a~0.offset;
             VAL   [#NULL.base=0bv32, #NULL.offset=0bv32, #t~malloc0.base=1bv32, #t~malloc0.offset=0bv32, ~a~0.base=1bv32, ~a~0.offset=0bv32, ~i~0=0bv32, ~p~0.base=1bv32, ~p~0.offset=0bv32, ~y~0=0bv32]
[L653]             call #t~mem9 := read~intINTTYPE4(~p~0.base, ~p~0.offset, 4bv32);
             VAL   [#NULL.base=0bv32, #NULL.offset=0bv32, #t~malloc0.base=1bv32, #t~malloc0.offset=0bv32, #t~mem9=3bv32, ~a~0.base=1bv32, ~a~0.offset=0bv32, ~i~0=0bv32, ~p~0.base=1bv32, ~p~0.offset=0bv32, ~y~0=0bv32]
[L653-L656]        assume !(1bv32 == #t~mem9);
[L653]             havoc #t~mem9;
             VAL   [#NULL.base=0bv32, #NULL.offset=0bv32, #t~malloc0.base=1bv32, #t~malloc0.offset=0bv32, ~a~0.base=1bv32, ~a~0.offset=0bv32, ~i~0=0bv32, ~p~0.base=1bv32, ~p~0.offset=0bv32, ~y~0=0bv32]
[L657]             call #t~mem12 := read~intINTTYPE4(~p~0.base, ~p~0.offset, 4bv32);
             VAL   [#NULL.base=0bv32, #NULL.offset=0bv32, #t~malloc0.base=1bv32, #t~malloc0.offset=0bv32, #t~mem12=3bv32, ~a~0.base=1bv32, ~a~0.offset=0bv32, ~i~0=0bv32, ~p~0.base=1bv32, ~p~0.offset=0bv32, ~y~0=0bv32]
[L657-L660]        assume !(2bv32 == #t~mem12);
[L657]             havoc #t~mem12;
             VAL   [#NULL.base=0bv32, #NULL.offset=0bv32, #t~malloc0.base=1bv32, #t~malloc0.offset=0bv32, ~a~0.base=1bv32, ~a~0.offset=0bv32, ~i~0=0bv32, ~p~0.base=1bv32, ~p~0.offset=0bv32, ~y~0=0bv32]
[L661]             call #t~mem15 := read~intINTTYPE4(~p~0.base, ~p~0.offset, 4bv32);
             VAL   [#NULL.base=0bv32, #NULL.offset=0bv32, #t~malloc0.base=1bv32, #t~malloc0.offset=0bv32, #t~mem15=3bv32, ~a~0.base=1bv32, ~a~0.offset=0bv32, ~i~0=0bv32, ~p~0.base=1bv32, ~p~0.offset=0bv32, ~y~0=0bv32]
[L661-L662]        assume 3bv32 != #t~mem15 || ~bvslt32(~bvadd32(~i~0, ~y~0), 20bv32);
[L661]             havoc #t~mem15;
             VAL   [#NULL.base=0bv32, #NULL.offset=0bv32, #t~malloc0.base=1bv32, #t~malloc0.offset=0bv32, ~a~0.base=1bv32, ~a~0.offset=0bv32, ~i~0=0bv32, ~p~0.base=1bv32, ~p~0.offset=0bv32, ~y~0=0bv32]
[L662]             assert false;
             VAL   [#NULL.base=0bv32, #NULL.offset=0bv32, #t~malloc0.base=1bv32, #t~malloc0.offset=0bv32, ~a~0.base=1bv32, ~a~0.offset=0bv32, ~i~0=0bv32, ~p~0.base=1bv32, ~p~0.offset=0bv32, ~y~0=0bv32]


[?]          CALL        call ULTIMATE.init();
             VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, old(#NULL!base)=0bv32, old(#NULL!offset)=0bv32]
[?]                      #NULL := { base: 0bv32, offset: 0bv32 };
[?]                      #valid[0bv32] := 0bv1;
             VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, old(#NULL!base)=0bv32, old(#NULL!offset)=0bv32]
[?]          RET         call ULTIMATE.init();
             VAL         [#NULL!base=0bv32, #NULL!offset=0bv32]
[?]          CALL        call #t~ret18 := main();
             VAL         [#NULL!base=0bv32, #NULL!offset=0bv32]
[L627]                   ~i~0 := 0bv32;
[L628]                   ~y~0 := 0bv32;
[L629]       FCALL       call #t~malloc0 := #Ultimate.alloc(8bv32);
[L629]                   ~a~0 := #t~malloc0;
             VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, ~a~0!base=1bv32, ~a~0!offset=0bv32, ~i~0=0bv32, ~y~0=0bv32]
[L630]       COND FALSE  !(~a~0 == { base: 0bv32, offset: 0bv32 })
             VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, ~a~0!base=1bv32, ~a~0!offset=0bv32, ~i~0=0bv32, ~y~0=0bv32]
[L631]                   havoc ~t~0;
[L632]                   ~p~0 := ~a~0;
             VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, ~a~0!base=1bv32, ~a~0!offset=0bv32, ~i~0=0bv32, ~p~0!base=1bv32, ~p~0!offset=0bv32, ~y~0=0bv32]
[L633-L640]  COND TRUE   !(~bvslt32(~i~0, 10bv32) && 0bv32 != #t~nondet1)
[L633]                   havoc #t~nondet1;
             VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, ~a~0!base=1bv32, ~a~0!offset=0bv32, ~i~0=0bv32, ~p~0!base=1bv32, ~p~0!offset=0bv32, ~y~0=0bv32]
[L641-L648]  COND TRUE   !(~bvslt32(~y~0, 10bv32) && 0bv32 != #t~nondet5)
[L641]                   havoc #t~nondet5;
             VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, ~a~0!base=1bv32, ~a~0!offset=0bv32, ~i~0=0bv32, ~p~0!base=1bv32, ~p~0!offset=0bv32, ~y~0=0bv32]
[L649]       FCALL       call write~intINTTYPE4(3bv32, { base: ~p~0!base, offset: ~p~0!offset }, 4bv32);
[L650]                   ~i~0 := 0bv32;
[L651]                   ~y~0 := 0bv32;
[L652]                   ~p~0 := ~a~0;
             VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, ~a~0!base=1bv32, ~a~0!offset=0bv32, ~i~0=0bv32, ~p~0!base=1bv32, ~p~0!offset=0bv32, ~y~0=0bv32]
[L653]       FCALL       call #t~mem9 := read~intINTTYPE4({ base: ~p~0!base, offset: ~p~0!offset }, 4bv32);
             VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, #t~mem9=3bv32, ~a~0!base=1bv32, ~a~0!offset=0bv32, ~i~0=0bv32, ~p~0!base=1bv32, ~p~0!offset=0bv32, ~y~0=0bv32]
[L653-L656]  COND TRUE   !(1bv32 == #t~mem9)
[L653]                   havoc #t~mem9;
             VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, ~a~0!base=1bv32, ~a~0!offset=0bv32, ~i~0=0bv32, ~p~0!base=1bv32, ~p~0!offset=0bv32, ~y~0=0bv32]
[L657]       FCALL       call #t~mem12 := read~intINTTYPE4({ base: ~p~0!base, offset: ~p~0!offset }, 4bv32);
             VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, #t~mem12=3bv32, ~a~0!base=1bv32, ~a~0!offset=0bv32, ~i~0=0bv32, ~p~0!base=1bv32, ~p~0!offset=0bv32, ~y~0=0bv32]
[L657-L660]  COND TRUE   !(2bv32 == #t~mem12)
[L657]                   havoc #t~mem12;
             VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, ~a~0!base=1bv32, ~a~0!offset=0bv32, ~i~0=0bv32, ~p~0!base=1bv32, ~p~0!offset=0bv32, ~y~0=0bv32]
[L661]       FCALL       call #t~mem15 := read~intINTTYPE4({ base: ~p~0!base, offset: ~p~0!offset }, 4bv32);
             VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, #t~mem15=3bv32, ~a~0!base=1bv32, ~a~0!offset=0bv32, ~i~0=0bv32, ~p~0!base=1bv32, ~p~0!offset=0bv32, ~y~0=0bv32]
[L661]       COND TRUE   3bv32 != #t~mem15 || ~bvslt32(~bvadd32(~i~0, ~y~0), 20bv32)
[L661]                   havoc #t~mem15;
             VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, ~a~0!base=1bv32, ~a~0!offset=0bv32, ~i~0=0bv32, ~p~0!base=1bv32, ~p~0!offset=0bv32, ~y~0=0bv32]
[L662]                   assert false;
             VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, ~a~0!base=1bv32, ~a~0!offset=0bv32, ~i~0=0bv32, ~p~0!base=1bv32, ~p~0!offset=0bv32, ~y~0=0bv32]

-----
-----
class de.uni_freiburg.informatik.ultimate.boogie.procedureinliner.backtranslation.InlinerBacktranslator
[?]          CALL        call ULTIMATE.init();
             VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, old(#NULL!base)=0bv32, old(#NULL!offset)=0bv32]
[?]                      #NULL := { base: 0bv32, offset: 0bv32 };
[?]                      #valid[0bv32] := 0bv1;
             VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, old(#NULL!base)=0bv32, old(#NULL!offset)=0bv32]
[?]          RET         call ULTIMATE.init();
             VAL         [#NULL!base=0bv32, #NULL!offset=0bv32]
[?]          CALL        call #t~ret18 := main();
             VAL         [#NULL!base=0bv32, #NULL!offset=0bv32]
[L627]                   ~i~0 := 0bv32;
[L628]                   ~y~0 := 0bv32;
[L629]       FCALL       call #t~malloc0 := #Ultimate.alloc(8bv32);
[L629]                   ~a~0 := #t~malloc0;
             VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, ~a~0!base=1bv32, ~a~0!offset=0bv32, ~i~0=0bv32, ~y~0=0bv32]
[L630]       COND FALSE  !(~a~0 == { base: 0bv32, offset: 0bv32 })
             VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, ~a~0!base=1bv32, ~a~0!offset=0bv32, ~i~0=0bv32, ~y~0=0bv32]
[L631]                   havoc ~t~0;
[L632]                   ~p~0 := ~a~0;
             VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, ~a~0!base=1bv32, ~a~0!offset=0bv32, ~i~0=0bv32, ~p~0!base=1bv32, ~p~0!offset=0bv32, ~y~0=0bv32]
[L633-L640]  COND TRUE   !(~bvslt32(~i~0, 10bv32) && 0bv32 != #t~nondet1)
[L633]                   havoc #t~nondet1;
             VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, ~a~0!base=1bv32, ~a~0!offset=0bv32, ~i~0=0bv32, ~p~0!base=1bv32, ~p~0!offset=0bv32, ~y~0=0bv32]
[L641-L648]  COND TRUE   !(~bvslt32(~y~0, 10bv32) && 0bv32 != #t~nondet5)
[L641]                   havoc #t~nondet5;
             VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, ~a~0!base=1bv32, ~a~0!offset=0bv32, ~i~0=0bv32, ~p~0!base=1bv32, ~p~0!offset=0bv32, ~y~0=0bv32]
[L649]       FCALL       call write~intINTTYPE4(3bv32, { base: ~p~0!base, offset: ~p~0!offset }, 4bv32);
[L650]                   ~i~0 := 0bv32;
[L651]                   ~y~0 := 0bv32;
[L652]                   ~p~0 := ~a~0;
             VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, ~a~0!base=1bv32, ~a~0!offset=0bv32, ~i~0=0bv32, ~p~0!base=1bv32, ~p~0!offset=0bv32, ~y~0=0bv32]
[L653]       FCALL       call #t~mem9 := read~intINTTYPE4({ base: ~p~0!base, offset: ~p~0!offset }, 4bv32);
             VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, #t~mem9=3bv32, ~a~0!base=1bv32, ~a~0!offset=0bv32, ~i~0=0bv32, ~p~0!base=1bv32, ~p~0!offset=0bv32, ~y~0=0bv32]
[L653-L656]  COND TRUE   !(1bv32 == #t~mem9)
[L653]                   havoc #t~mem9;
             VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, ~a~0!base=1bv32, ~a~0!offset=0bv32, ~i~0=0bv32, ~p~0!base=1bv32, ~p~0!offset=0bv32, ~y~0=0bv32]
[L657]       FCALL       call #t~mem12 := read~intINTTYPE4({ base: ~p~0!base, offset: ~p~0!offset }, 4bv32);
             VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, #t~mem12=3bv32, ~a~0!base=1bv32, ~a~0!offset=0bv32, ~i~0=0bv32, ~p~0!base=1bv32, ~p~0!offset=0bv32, ~y~0=0bv32]
[L657-L660]  COND TRUE   !(2bv32 == #t~mem12)
[L657]                   havoc #t~mem12;
             VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, ~a~0!base=1bv32, ~a~0!offset=0bv32, ~i~0=0bv32, ~p~0!base=1bv32, ~p~0!offset=0bv32, ~y~0=0bv32]
[L661]       FCALL       call #t~mem15 := read~intINTTYPE4({ base: ~p~0!base, offset: ~p~0!offset }, 4bv32);
             VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, #t~mem15=3bv32, ~a~0!base=1bv32, ~a~0!offset=0bv32, ~i~0=0bv32, ~p~0!base=1bv32, ~p~0!offset=0bv32, ~y~0=0bv32]
[L661]       COND TRUE   3bv32 != #t~mem15 || ~bvslt32(~bvadd32(~i~0, ~y~0), 20bv32)
[L661]                   havoc #t~mem15;
             VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, ~a~0!base=1bv32, ~a~0!offset=0bv32, ~i~0=0bv32, ~p~0!base=1bv32, ~p~0!offset=0bv32, ~y~0=0bv32]
[L662]                   assert false;
             VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, ~a~0!base=1bv32, ~a~0!offset=0bv32, ~i~0=0bv32, ~p~0!base=1bv32, ~p~0!offset=0bv32, ~y~0=0bv32]


[?]          CALL        call ULTIMATE.init();
             VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, old(#NULL!base)=0bv32, old(#NULL!offset)=0bv32]
[?]                      #NULL := { base: 0bv32, offset: 0bv32 };
[?]                      #valid[0bv32] := 0bv1;
             VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, old(#NULL!base)=0bv32, old(#NULL!offset)=0bv32]
[?]          RET         call ULTIMATE.init();
             VAL         [#NULL!base=0bv32, #NULL!offset=0bv32]
[?]          CALL        call #t~ret18 := main();
             VAL         [#NULL!base=0bv32, #NULL!offset=0bv32]
[L627]                   ~i~0 := 0bv32;
[L628]                   ~y~0 := 0bv32;
[L629]       FCALL       call #t~malloc0 := #Ultimate.alloc(8bv32);
[L629]                   ~a~0 := #t~malloc0;
             VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, ~a~0!base=1bv32, ~a~0!offset=0bv32, ~i~0=0bv32, ~y~0=0bv32]
[L630]       COND FALSE  !(~a~0 == { base: 0bv32, offset: 0bv32 })
             VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, ~a~0!base=1bv32, ~a~0!offset=0bv32, ~i~0=0bv32, ~y~0=0bv32]
[L631]                   havoc ~t~0;
[L632]                   ~p~0 := ~a~0;
             VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, ~a~0!base=1bv32, ~a~0!offset=0bv32, ~i~0=0bv32, ~p~0!base=1bv32, ~p~0!offset=0bv32, ~y~0=0bv32]
[L633-L640]  COND TRUE   !(~bvslt32(~i~0, 10bv32) && 0bv32 != #t~nondet1)
[L633]                   havoc #t~nondet1;
             VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, ~a~0!base=1bv32, ~a~0!offset=0bv32, ~i~0=0bv32, ~p~0!base=1bv32, ~p~0!offset=0bv32, ~y~0=0bv32]
[L641-L648]  COND TRUE   !(~bvslt32(~y~0, 10bv32) && 0bv32 != #t~nondet5)
[L641]                   havoc #t~nondet5;
             VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, ~a~0!base=1bv32, ~a~0!offset=0bv32, ~i~0=0bv32, ~p~0!base=1bv32, ~p~0!offset=0bv32, ~y~0=0bv32]
[L649]       FCALL       call write~intINTTYPE4(3bv32, { base: ~p~0!base, offset: ~p~0!offset }, 4bv32);
[L650]                   ~i~0 := 0bv32;
[L651]                   ~y~0 := 0bv32;
[L652]                   ~p~0 := ~a~0;
             VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, ~a~0!base=1bv32, ~a~0!offset=0bv32, ~i~0=0bv32, ~p~0!base=1bv32, ~p~0!offset=0bv32, ~y~0=0bv32]
[L653]       FCALL       call #t~mem9 := read~intINTTYPE4({ base: ~p~0!base, offset: ~p~0!offset }, 4bv32);
             VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, #t~mem9=3bv32, ~a~0!base=1bv32, ~a~0!offset=0bv32, ~i~0=0bv32, ~p~0!base=1bv32, ~p~0!offset=0bv32, ~y~0=0bv32]
[L653-L656]  COND TRUE   !(1bv32 == #t~mem9)
[L653]                   havoc #t~mem9;
             VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, ~a~0!base=1bv32, ~a~0!offset=0bv32, ~i~0=0bv32, ~p~0!base=1bv32, ~p~0!offset=0bv32, ~y~0=0bv32]
[L657]       FCALL       call #t~mem12 := read~intINTTYPE4({ base: ~p~0!base, offset: ~p~0!offset }, 4bv32);
             VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, #t~mem12=3bv32, ~a~0!base=1bv32, ~a~0!offset=0bv32, ~i~0=0bv32, ~p~0!base=1bv32, ~p~0!offset=0bv32, ~y~0=0bv32]
[L657-L660]  COND TRUE   !(2bv32 == #t~mem12)
[L657]                   havoc #t~mem12;
             VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, ~a~0!base=1bv32, ~a~0!offset=0bv32, ~i~0=0bv32, ~p~0!base=1bv32, ~p~0!offset=0bv32, ~y~0=0bv32]
[L661]       FCALL       call #t~mem15 := read~intINTTYPE4({ base: ~p~0!base, offset: ~p~0!offset }, 4bv32);
             VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, #t~mem15=3bv32, ~a~0!base=1bv32, ~a~0!offset=0bv32, ~i~0=0bv32, ~p~0!base=1bv32, ~p~0!offset=0bv32, ~y~0=0bv32]
[L661]       COND TRUE   3bv32 != #t~mem15 || ~bvslt32(~bvadd32(~i~0, ~y~0), 20bv32)
[L661]                   havoc #t~mem15;
             VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, ~a~0!base=1bv32, ~a~0!offset=0bv32, ~i~0=0bv32, ~p~0!base=1bv32, ~p~0!offset=0bv32, ~y~0=0bv32]
[L662]                   assert false;
             VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, ~a~0!base=1bv32, ~a~0!offset=0bv32, ~i~0=0bv32, ~p~0!base=1bv32, ~p~0!offset=0bv32, ~y~0=0bv32]

-----
-----
class de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.CACSL2BoogieBacktranslator
[?]          CALL        call ULTIMATE.init();
             VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, old(#NULL!base)=0bv32, old(#NULL!offset)=0bv32]
[?]                      #NULL := { base: 0bv32, offset: 0bv32 };
[?]                      #valid[0bv32] := 0bv1;
             VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, old(#NULL!base)=0bv32, old(#NULL!offset)=0bv32]
[?]          RET         call ULTIMATE.init();
             VAL         [#NULL!base=0bv32, #NULL!offset=0bv32]
[?]          CALL        call #t~ret18 := main();
             VAL         [#NULL!base=0bv32, #NULL!offset=0bv32]
[L627]                   ~i~0 := 0bv32;
[L628]                   ~y~0 := 0bv32;
[L629]       FCALL       call #t~malloc0 := #Ultimate.alloc(8bv32);
[L629]                   ~a~0 := #t~malloc0;
             VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, ~a~0!base=1bv32, ~a~0!offset=0bv32, ~i~0=0bv32, ~y~0=0bv32]
[L630]       COND FALSE  !(~a~0 == { base: 0bv32, offset: 0bv32 })
             VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, ~a~0!base=1bv32, ~a~0!offset=0bv32, ~i~0=0bv32, ~y~0=0bv32]
[L631]                   havoc ~t~0;
[L632]                   ~p~0 := ~a~0;
             VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, ~a~0!base=1bv32, ~a~0!offset=0bv32, ~i~0=0bv32, ~p~0!base=1bv32, ~p~0!offset=0bv32, ~y~0=0bv32]
[L633-L640]  COND TRUE   !(~bvslt32(~i~0, 10bv32) && 0bv32 != #t~nondet1)
[L633]                   havoc #t~nondet1;
             VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, ~a~0!base=1bv32, ~a~0!offset=0bv32, ~i~0=0bv32, ~p~0!base=1bv32, ~p~0!offset=0bv32, ~y~0=0bv32]
[L641-L648]  COND TRUE   !(~bvslt32(~y~0, 10bv32) && 0bv32 != #t~nondet5)
[L641]                   havoc #t~nondet5;
             VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, ~a~0!base=1bv32, ~a~0!offset=0bv32, ~i~0=0bv32, ~p~0!base=1bv32, ~p~0!offset=0bv32, ~y~0=0bv32]
[L649]       FCALL       call write~intINTTYPE4(3bv32, { base: ~p~0!base, offset: ~p~0!offset }, 4bv32);
[L650]                   ~i~0 := 0bv32;
[L651]                   ~y~0 := 0bv32;
[L652]                   ~p~0 := ~a~0;
             VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, ~a~0!base=1bv32, ~a~0!offset=0bv32, ~i~0=0bv32, ~p~0!base=1bv32, ~p~0!offset=0bv32, ~y~0=0bv32]
[L653]       FCALL       call #t~mem9 := read~intINTTYPE4({ base: ~p~0!base, offset: ~p~0!offset }, 4bv32);
             VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, #t~mem9=3bv32, ~a~0!base=1bv32, ~a~0!offset=0bv32, ~i~0=0bv32, ~p~0!base=1bv32, ~p~0!offset=0bv32, ~y~0=0bv32]
[L653-L656]  COND TRUE   !(1bv32 == #t~mem9)
[L653]                   havoc #t~mem9;
             VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, ~a~0!base=1bv32, ~a~0!offset=0bv32, ~i~0=0bv32, ~p~0!base=1bv32, ~p~0!offset=0bv32, ~y~0=0bv32]
[L657]       FCALL       call #t~mem12 := read~intINTTYPE4({ base: ~p~0!base, offset: ~p~0!offset }, 4bv32);
             VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, #t~mem12=3bv32, ~a~0!base=1bv32, ~a~0!offset=0bv32, ~i~0=0bv32, ~p~0!base=1bv32, ~p~0!offset=0bv32, ~y~0=0bv32]
[L657-L660]  COND TRUE   !(2bv32 == #t~mem12)
[L657]                   havoc #t~mem12;
             VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, ~a~0!base=1bv32, ~a~0!offset=0bv32, ~i~0=0bv32, ~p~0!base=1bv32, ~p~0!offset=0bv32, ~y~0=0bv32]
[L661]       FCALL       call #t~mem15 := read~intINTTYPE4({ base: ~p~0!base, offset: ~p~0!offset }, 4bv32);
             VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, #t~mem15=3bv32, ~a~0!base=1bv32, ~a~0!offset=0bv32, ~i~0=0bv32, ~p~0!base=1bv32, ~p~0!offset=0bv32, ~y~0=0bv32]
[L661]       COND TRUE   3bv32 != #t~mem15 || ~bvslt32(~bvadd32(~i~0, ~y~0), 20bv32)
[L661]                   havoc #t~mem15;
             VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, ~a~0!base=1bv32, ~a~0!offset=0bv32, ~i~0=0bv32, ~p~0!base=1bv32, ~p~0!offset=0bv32, ~y~0=0bv32]
[L662]                   assert false;
             VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, ~a~0!base=1bv32, ~a~0!offset=0bv32, ~i~0=0bv32, ~p~0!base=1bv32, ~p~0!offset=0bv32, ~y~0=0bv32]


[L627]              int i = 0;
[L628]              int y = 0;
[L629]              List a = (List) malloc(sizeof(struct node));
        VAL         [a={1:0}, i=0, malloc(sizeof(struct node))={1:0}, y=0]
[L630]  COND FALSE  !(a == 0)
        VAL         [a={1:0}, i=0, malloc(sizeof(struct node))={1:0}, y=0]
[L631]              List t;
[L632]              List p = a;
        VAL         [a={1:0}, i=0, malloc(sizeof(struct node))={1:0}, p={1:0}, y=0]
[L633]  COND FALSE  !(i < 10 && __VERIFIER_nondet_int())
[L641]  COND FALSE  !(y < 10 && __VERIFIER_nondet_int())
[L649]              p->h = 3
[L650]              i = 0
[L651]              y = 0
[L652]              p = a
        VAL         [a={1:0}, i=0, malloc(sizeof(struct node))={1:0}, p={1:0}, y=0]
[L653]  EXPR        p->h
        VAL         [a={1:0}, i=0, malloc(sizeof(struct node))={1:0}, p={1:0}, p->h=3, y=0]
[L653]  COND FALSE  !(p->h == 1)
[L657]  EXPR        p->h
        VAL         [a={1:0}, i=0, malloc(sizeof(struct node))={1:0}, p={1:0}, p->h=3, y=0]
[L657]  COND FALSE  !(p->h == 2)
[L661]  EXPR        p->h
        VAL         [a={1:0}, i=0, malloc(sizeof(struct node))={1:0}, p={1:0}, p->h=3, y=0]
[L661]  COND TRUE   p->h != 3 || (i + y) < 20
[L662]              __VERIFIER_error()
        VAL         [a={1:0}, i=0, malloc(sizeof(struct node))={1:0}, p={1:0}, y=0]

-----
[2018-11-23 11:10:02,895 INFO  L145         WitnessManager]: Wrote witness to /storage/repos/svcomp/c/list-ext-properties/list-ext_false-unreach-call_false-valid-deref.i-witness.graphml
[2018-11-23 11:10:02,896 INFO  L132        PluginConnector]: ------------------------ END Witness Printer----------------------------
[2018-11-23 11:10:02,897 INFO  L168              Benchmark]: Toolchain (without parser) took 3878.04 ms. Allocated memory was 1.5 GB in the beginning and 2.3 GB in the end (delta: 730.3 MB). Free memory was 1.4 GB in the beginning and 2.1 GB in the end (delta: -642.7 MB). Peak memory consumption was 87.7 MB. Max. memory is 7.1 GB.
[2018-11-23 11:10:02,899 INFO  L168              Benchmark]: CDTParser took 0.31 ms. Allocated memory is still 1.5 GB. Free memory is still 1.5 GB. There was no memory consumed. Max. memory is 7.1 GB.
[2018-11-23 11:10:02,900 INFO  L168              Benchmark]: CACSL2BoogieTranslator took 748.74 ms. Allocated memory was 1.5 GB in the beginning and 2.3 GB in the end (delta: 730.3 MB). Free memory was 1.4 GB in the beginning and 2.2 GB in the end (delta: -778.5 MB). Peak memory consumption was 49.6 MB. Max. memory is 7.1 GB.
[2018-11-23 11:10:02,901 INFO  L168              Benchmark]: Boogie Procedure Inliner took 39.21 ms. Allocated memory is still 2.3 GB. Free memory is still 2.2 GB. There was no memory consumed. Max. memory is 7.1 GB.
[2018-11-23 11:10:02,902 INFO  L168              Benchmark]: Boogie Preprocessor took 50.76 ms. Allocated memory is still 2.3 GB. Free memory is still 2.2 GB. There was no memory consumed. Max. memory is 7.1 GB.
[2018-11-23 11:10:02,902 INFO  L168              Benchmark]: RCFGBuilder took 1029.37 ms. Allocated memory is still 2.3 GB. Free memory was 2.2 GB in the beginning and 2.2 GB in the end (delta: 35.6 MB). Peak memory consumption was 35.6 MB. Max. memory is 7.1 GB.
[2018-11-23 11:10:02,903 INFO  L168              Benchmark]: TraceAbstraction took 1922.45 ms. Allocated memory is still 2.3 GB. Free memory was 2.2 GB in the beginning and 2.1 GB in the end (delta: 86.9 MB). Peak memory consumption was 86.9 MB. Max. memory is 7.1 GB.
[2018-11-23 11:10:02,904 INFO  L168              Benchmark]: Witness Printer took 81.36 ms. Allocated memory is still 2.3 GB. Free memory was 2.1 GB in the beginning and 2.1 GB in the end (delta: 13.4 MB). Peak memory consumption was 13.4 MB. Max. memory is 7.1 GB.
[2018-11-23 11:10:02,908 INFO  L336   ainManager$Toolchain]: #######################  End [Toolchain 1] #######################
 --- Results ---
 * Results from de.uni_freiburg.informatik.ultimate.core:
  - GenericResult: Assertions are enabled
    Assertions are enabled
  - StatisticsResult: Toolchain Benchmarks
    Benchmark results are:
 * CDTParser took 0.31 ms. Allocated memory is still 1.5 GB. Free memory is still 1.5 GB. There was no memory consumed. Max. memory is 7.1 GB.
 * CACSL2BoogieTranslator took 748.74 ms. Allocated memory was 1.5 GB in the beginning and 2.3 GB in the end (delta: 730.3 MB). Free memory was 1.4 GB in the beginning and 2.2 GB in the end (delta: -778.5 MB). Peak memory consumption was 49.6 MB. Max. memory is 7.1 GB.
 * Boogie Procedure Inliner took 39.21 ms. Allocated memory is still 2.3 GB. Free memory is still 2.2 GB. There was no memory consumed. Max. memory is 7.1 GB.
 * Boogie Preprocessor took 50.76 ms. Allocated memory is still 2.3 GB. Free memory is still 2.2 GB. There was no memory consumed. Max. memory is 7.1 GB.
 * RCFGBuilder took 1029.37 ms. Allocated memory is still 2.3 GB. Free memory was 2.2 GB in the beginning and 2.2 GB in the end (delta: 35.6 MB). Peak memory consumption was 35.6 MB. Max. memory is 7.1 GB.
 * TraceAbstraction took 1922.45 ms. Allocated memory is still 2.3 GB. Free memory was 2.2 GB in the beginning and 2.1 GB in the end (delta: 86.9 MB). Peak memory consumption was 86.9 MB. Max. memory is 7.1 GB.
 * Witness Printer took 81.36 ms. Allocated memory is still 2.3 GB. Free memory was 2.1 GB in the beginning and 2.1 GB in the end (delta: 13.4 MB). Peak memory consumption was 13.4 MB. Max. memory is 7.1 GB.
 * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction:
  - CounterExampleResult [Line: 662]: a call of __VERIFIER_error() is reachable
    a call of __VERIFIER_error() is reachable
We found a FailurePath: 
[L627]              int i = 0;
[L628]              int y = 0;
[L629]              List a = (List) malloc(sizeof(struct node));
        VAL         [a={1:0}, i=0, malloc(sizeof(struct node))={1:0}, y=0]
[L630]  COND FALSE  !(a == 0)
        VAL         [a={1:0}, i=0, malloc(sizeof(struct node))={1:0}, y=0]
[L631]              List t;
[L632]              List p = a;
        VAL         [a={1:0}, i=0, malloc(sizeof(struct node))={1:0}, p={1:0}, y=0]
[L633]  COND FALSE  !(i < 10 && __VERIFIER_nondet_int())
[L641]  COND FALSE  !(y < 10 && __VERIFIER_nondet_int())
[L649]              p->h = 3
[L650]              i = 0
[L651]              y = 0
[L652]              p = a
        VAL         [a={1:0}, i=0, malloc(sizeof(struct node))={1:0}, p={1:0}, y=0]
[L653]  EXPR        p->h
        VAL         [a={1:0}, i=0, malloc(sizeof(struct node))={1:0}, p={1:0}, p->h=3, y=0]
[L653]  COND FALSE  !(p->h == 1)
[L657]  EXPR        p->h
        VAL         [a={1:0}, i=0, malloc(sizeof(struct node))={1:0}, p={1:0}, p->h=3, y=0]
[L657]  COND FALSE  !(p->h == 2)
[L661]  EXPR        p->h
        VAL         [a={1:0}, i=0, malloc(sizeof(struct node))={1:0}, p={1:0}, p->h=3, y=0]
[L661]  COND TRUE   p->h != 3 || (i + y) < 20
[L662]              __VERIFIER_error()
        VAL         [a={1:0}, i=0, malloc(sizeof(struct node))={1:0}, p={1:0}, y=0]

  - StatisticsResult: Ultimate Automizer benchmark data
    CFG has 4 procedures, 38 locations, 1 error locations. UNSAFE Result, 1.8s OverallTime, 2 OverallIterations, 1 TraceHistogramMax, 1.0s AutomataDifference, 0.0s DeadEndRemovalTime, 0.0s HoareAnnotationTime, HoareTripleCheckerStatistics: 43 SDtfs, 0 SDslu, 0 SDs, 0 SdLazy, 0 SolverSat, 0 SolverUnsat, 0 SolverUnknown, 0 SolverNotchecked, 0.0s Time, PredicateUnifierStatistics: 0 DeclaredPredicates, 15 GetRequests, 15 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=36occurred in iteration=0, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s AbstIntTime, 0 AbstIntIterations, 0 AbstIntStrong, NaN AbsIntWeakeningRatio, NaN AbsIntAvgWeakeningVarsNumRemoved, NaN AbsIntAvgWeakenedConjuncts, 0.0s DumpTime, AutomataMinimizationStatistics: 0.1s AutomataMinimizationTime, 1 MinimizatonAttempts, 0 StatesRemovedByMinimization, 0 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TraceCheckStatistics: 0.0s SsaConstructionTime, 0.0s SatisfiabilityAnalysisTime, 0.1s InterpolantComputationTime, 34 NumberOfCodeBlocks, 34 NumberOfCodeBlocksAsserted, 2 NumberOfCheckSat, 15 ConstructedInterpolants, 0 QuantifiedInterpolants, 225 SizeOfPredicates, 0 NumberOfNonLiveVariables, 51 ConjunctsInSsa, 1 ConjunctsInUnsatCore, 1 InterpolantComputations, 1 PerfectInterpolantSequences, 0/0 InterpolantCoveringCapability, InvariantSynthesisStatistics: No data available, InterpolantConsolidationStatistics: No data available, ReuseStatistics: No data available
RESULT: Ultimate proved your program to be incorrect!
Received shutdown request...