java -ea -Xmx8000000000 -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc ../../../trunk/examples/toolchains/AutomizerCInline_WitnessPrinter.xml -s ../../../trunk/examples/settings/default/automizer/svcomp-Reach-32bit-Automizer_Bitvector.epf -i ../../../trunk/examples/svcomp/forester-heap/sll-simple-white-blue_false-unreach-call_false-valid-memcleanup.i


--------------------------------------------------------------------------------


This is Ultimate 0.1.23-61f4311
[2018-11-23 11:09:40,015 INFO  L170        SettingsManager]: Resetting all preferences to default values...
[2018-11-23 11:09:40,017 INFO  L174        SettingsManager]: Resetting UltimateCore preferences to default values
[2018-11-23 11:09:40,029 INFO  L177        SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring...
[2018-11-23 11:09:40,029 INFO  L174        SettingsManager]: Resetting Boogie Preprocessor preferences to default values
[2018-11-23 11:09:40,030 INFO  L174        SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values
[2018-11-23 11:09:40,032 INFO  L174        SettingsManager]: Resetting Abstract Interpretation preferences to default values
[2018-11-23 11:09:40,033 INFO  L174        SettingsManager]: Resetting LassoRanker preferences to default values
[2018-11-23 11:09:40,035 INFO  L174        SettingsManager]: Resetting Reaching Definitions preferences to default values
[2018-11-23 11:09:40,036 INFO  L174        SettingsManager]: Resetting SyntaxChecker preferences to default values
[2018-11-23 11:09:40,037 INFO  L177        SettingsManager]: Büchi Program Product provides no preferences, ignoring...
[2018-11-23 11:09:40,037 INFO  L174        SettingsManager]: Resetting LTL2Aut preferences to default values
[2018-11-23 11:09:40,038 INFO  L174        SettingsManager]: Resetting PEA to Boogie preferences to default values
[2018-11-23 11:09:40,039 INFO  L174        SettingsManager]: Resetting BlockEncodingV2 preferences to default values
[2018-11-23 11:09:40,040 INFO  L174        SettingsManager]: Resetting ChcToBoogie preferences to default values
[2018-11-23 11:09:40,041 INFO  L174        SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values
[2018-11-23 11:09:40,042 INFO  L174        SettingsManager]: Resetting BuchiAutomizer preferences to default values
[2018-11-23 11:09:40,044 INFO  L174        SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values
[2018-11-23 11:09:40,045 INFO  L174        SettingsManager]: Resetting CodeCheck preferences to default values
[2018-11-23 11:09:40,047 INFO  L174        SettingsManager]: Resetting InvariantSynthesis preferences to default values
[2018-11-23 11:09:40,048 INFO  L174        SettingsManager]: Resetting RCFGBuilder preferences to default values
[2018-11-23 11:09:40,049 INFO  L174        SettingsManager]: Resetting TraceAbstraction preferences to default values
[2018-11-23 11:09:40,051 INFO  L177        SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring...
[2018-11-23 11:09:40,052 INFO  L177        SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring...
[2018-11-23 11:09:40,052 INFO  L174        SettingsManager]: Resetting TreeAutomizer preferences to default values
[2018-11-23 11:09:40,053 INFO  L174        SettingsManager]: Resetting IcfgTransformer preferences to default values
[2018-11-23 11:09:40,054 INFO  L174        SettingsManager]: Resetting Boogie Printer preferences to default values
[2018-11-23 11:09:40,054 INFO  L174        SettingsManager]: Resetting ReqPrinter preferences to default values
[2018-11-23 11:09:40,055 INFO  L174        SettingsManager]: Resetting Witness Printer preferences to default values
[2018-11-23 11:09:40,056 INFO  L177        SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring...
[2018-11-23 11:09:40,056 INFO  L174        SettingsManager]: Resetting CDTParser preferences to default values
[2018-11-23 11:09:40,057 INFO  L177        SettingsManager]: AutomataScriptParser provides no preferences, ignoring...
[2018-11-23 11:09:40,057 INFO  L177        SettingsManager]: ReqParser provides no preferences, ignoring...
[2018-11-23 11:09:40,058 INFO  L174        SettingsManager]: Resetting SmtParser preferences to default values
[2018-11-23 11:09:40,058 INFO  L174        SettingsManager]: Resetting Witness Parser preferences to default values
[2018-11-23 11:09:40,059 INFO  L181        SettingsManager]: Finished resetting all preferences to default values...
[2018-11-23 11:09:40,059 INFO  L98         SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/settings/default/automizer/svcomp-Reach-32bit-Automizer_Bitvector.epf
[2018-11-23 11:09:40,075 INFO  L110        SettingsManager]: Loading preferences was successful
[2018-11-23 11:09:40,076 INFO  L112        SettingsManager]: Preferences different from defaults after loading the file:
[2018-11-23 11:09:40,076 INFO  L131        SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults:
[2018-11-23 11:09:40,077 INFO  L133        SettingsManager]:  * ... calls to implemented procedures=ONLY_FOR_CONCURRENT_PROGRAMS
[2018-11-23 11:09:40,077 INFO  L131        SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults:
[2018-11-23 11:09:40,077 INFO  L133        SettingsManager]:  * Create parallel compositions if possible=false
[2018-11-23 11:09:40,078 INFO  L133        SettingsManager]:  * Use SBE=true
[2018-11-23 11:09:40,079 INFO  L131        SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults:
[2018-11-23 11:09:40,079 INFO  L133        SettingsManager]:  * sizeof long=4
[2018-11-23 11:09:40,079 INFO  L133        SettingsManager]:  * sizeof POINTER=4
[2018-11-23 11:09:40,079 INFO  L133        SettingsManager]:  * Check division by zero=IGNORE
[2018-11-23 11:09:40,079 INFO  L133        SettingsManager]:  * Pointer to allocated memory at dereference=IGNORE
[2018-11-23 11:09:40,080 INFO  L133        SettingsManager]:  * If two pointers are subtracted or compared they have the same base address=IGNORE
[2018-11-23 11:09:40,080 INFO  L133        SettingsManager]:  * Check array bounds for arrays that are off heap=IGNORE
[2018-11-23 11:09:40,080 INFO  L133        SettingsManager]:  * Use bitvectors instead of ints=true
[2018-11-23 11:09:40,080 INFO  L133        SettingsManager]:  * Memory model=HoenickeLindenmann_4ByteResolution
[2018-11-23 11:09:40,080 INFO  L133        SettingsManager]:  * sizeof long double=12
[2018-11-23 11:09:40,080 INFO  L133        SettingsManager]:  * Check if freed pointer was valid=false
[2018-11-23 11:09:40,081 INFO  L133        SettingsManager]:  * Use constant arrays=true
[2018-11-23 11:09:40,081 INFO  L133        SettingsManager]:  * Pointer base address is valid at dereference=IGNORE
[2018-11-23 11:09:40,082 INFO  L131        SettingsManager]: Preferences of RCFGBuilder differ from their defaults:
[2018-11-23 11:09:40,082 INFO  L133        SettingsManager]:  * Size of a code block=SequenceOfStatements
[2018-11-23 11:09:40,082 INFO  L133        SettingsManager]:  * To the following directory=./dump/
[2018-11-23 11:09:40,082 INFO  L133        SettingsManager]:  * SMT solver=External_DefaultMode
[2018-11-23 11:09:40,082 INFO  L133        SettingsManager]:  * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000
[2018-11-23 11:09:40,083 INFO  L131        SettingsManager]: Preferences of TraceAbstraction differ from their defaults:
[2018-11-23 11:09:40,083 INFO  L133        SettingsManager]:  * Compute Interpolants along a Counterexample=FPandBP
[2018-11-23 11:09:40,083 INFO  L133        SettingsManager]:  * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles
[2018-11-23 11:09:40,083 INFO  L133        SettingsManager]:  * Trace refinement strategy=WOLF
[2018-11-23 11:09:40,083 INFO  L133        SettingsManager]:  * SMT solver=External_ModelsAndUnsatCoreMode
[2018-11-23 11:09:40,083 INFO  L133        SettingsManager]:  * Command for external solver=cvc4nyu --tear-down-incremental --rewrite-divk --print-success --lang smt
[2018-11-23 11:09:40,084 INFO  L133        SettingsManager]:  * Logic for external solver=AUFBV
[2018-11-23 11:09:40,084 INFO  L133        SettingsManager]:  * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true
[2018-11-23 11:09:40,148 INFO  L81    nceAwareModelManager]: Repository-Root is: /tmp
[2018-11-23 11:09:40,163 INFO  L258   ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized
[2018-11-23 11:09:40,166 INFO  L214   ainManager$Toolchain]: [Toolchain 1]: Toolchain selected.
[2018-11-23 11:09:40,168 INFO  L271        PluginConnector]: Initializing CDTParser...
[2018-11-23 11:09:40,169 INFO  L276        PluginConnector]: CDTParser initialized
[2018-11-23 11:09:40,169 INFO  L418   ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/svcomp/forester-heap/sll-simple-white-blue_false-unreach-call_false-valid-memcleanup.i
[2018-11-23 11:09:40,223 INFO  L221              CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/6c1ab652d/95c1c07db81f41ed99b2b6f647c8748f/FLAGf1fd6836f
[2018-11-23 11:09:40,738 INFO  L307              CDTParser]: Found 1 translation units.
[2018-11-23 11:09:40,739 INFO  L161              CDTParser]: Scanning /storage/repos/ultimate/trunk/examples/svcomp/forester-heap/sll-simple-white-blue_false-unreach-call_false-valid-memcleanup.i
[2018-11-23 11:09:40,751 INFO  L355              CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/6c1ab652d/95c1c07db81f41ed99b2b6f647c8748f/FLAGf1fd6836f
[2018-11-23 11:09:41,006 INFO  L363              CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/6c1ab652d/95c1c07db81f41ed99b2b6f647c8748f
[2018-11-23 11:09:41,019 INFO  L296   ainManager$Toolchain]: ####################### [Toolchain 1] #######################
[2018-11-23 11:09:41,021 INFO  L131        ToolchainWalker]: Walking toolchain with 6 elements.
[2018-11-23 11:09:41,022 INFO  L113        PluginConnector]: ------------------------CACSL2BoogieTranslator----------------------------
[2018-11-23 11:09:41,022 INFO  L271        PluginConnector]: Initializing CACSL2BoogieTranslator...
[2018-11-23 11:09:41,030 INFO  L276        PluginConnector]: CACSL2BoogieTranslator initialized
[2018-11-23 11:09:41,031 INFO  L185        PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 11:09:41" (1/1) ...
[2018-11-23 11:09:41,034 INFO  L205        PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@761874d3 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 11:09:41, skipping insertion in model container
[2018-11-23 11:09:41,034 INFO  L185        PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 11:09:41" (1/1) ...
[2018-11-23 11:09:41,045 INFO  L145         MainTranslator]: Starting translation in SV-COMP mode 
[2018-11-23 11:09:41,103 INFO  L176         MainTranslator]: Built tables and reachable declarations
[2018-11-23 11:09:41,524 INFO  L201          PostProcessor]: Analyzing one entry point: main
[2018-11-23 11:09:41,543 INFO  L191         MainTranslator]: Completed pre-run
[2018-11-23 11:09:41,604 INFO  L201          PostProcessor]: Analyzing one entry point: main
[2018-11-23 11:09:41,691 INFO  L195         MainTranslator]: Completed translation
[2018-11-23 11:09:41,692 INFO  L202        PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 11:09:41 WrapperNode
[2018-11-23 11:09:41,692 INFO  L132        PluginConnector]: ------------------------ END CACSL2BoogieTranslator----------------------------
[2018-11-23 11:09:41,693 INFO  L113        PluginConnector]: ------------------------Boogie Procedure Inliner----------------------------
[2018-11-23 11:09:41,693 INFO  L271        PluginConnector]: Initializing Boogie Procedure Inliner...
[2018-11-23 11:09:41,693 INFO  L276        PluginConnector]: Boogie Procedure Inliner initialized
[2018-11-23 11:09:41,701 INFO  L185        PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 11:09:41" (1/1) ...
[2018-11-23 11:09:41,803 INFO  L185        PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 11:09:41" (1/1) ...
[2018-11-23 11:09:41,818 INFO  L132        PluginConnector]: ------------------------ END Boogie Procedure Inliner----------------------------
[2018-11-23 11:09:41,818 INFO  L113        PluginConnector]: ------------------------Boogie Preprocessor----------------------------
[2018-11-23 11:09:41,818 INFO  L271        PluginConnector]: Initializing Boogie Preprocessor...
[2018-11-23 11:09:41,819 INFO  L276        PluginConnector]: Boogie Preprocessor initialized
[2018-11-23 11:09:41,827 INFO  L185        PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 11:09:41" (1/1) ...
[2018-11-23 11:09:41,828 INFO  L185        PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 11:09:41" (1/1) ...
[2018-11-23 11:09:41,833 INFO  L185        PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 11:09:41" (1/1) ...
[2018-11-23 11:09:41,833 INFO  L185        PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 11:09:41" (1/1) ...
[2018-11-23 11:09:41,856 INFO  L185        PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 11:09:41" (1/1) ...
[2018-11-23 11:09:41,864 INFO  L185        PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 11:09:41" (1/1) ...
[2018-11-23 11:09:41,866 INFO  L185        PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 11:09:41" (1/1) ...
[2018-11-23 11:09:41,870 INFO  L132        PluginConnector]: ------------------------ END Boogie Preprocessor----------------------------
[2018-11-23 11:09:41,871 INFO  L113        PluginConnector]: ------------------------RCFGBuilder----------------------------
[2018-11-23 11:09:41,871 INFO  L271        PluginConnector]: Initializing RCFGBuilder...
[2018-11-23 11:09:41,871 INFO  L276        PluginConnector]: RCFGBuilder initialized
[2018-11-23 11:09:41,872 INFO  L185        PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 11:09:41" (1/1) ...
No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3
Starting monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null)
Waiting until toolchain timeout for monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000
[2018-11-23 11:09:41,922 INFO  L130     BoogieDeclarations]: Found specification of procedure #Ultimate.alloc
[2018-11-23 11:09:41,923 INFO  L130     BoogieDeclarations]: Found specification of procedure read~intINTTYPE4
[2018-11-23 11:09:41,923 INFO  L130     BoogieDeclarations]: Found specification of procedure ULTIMATE.init
[2018-11-23 11:09:41,923 INFO  L138     BoogieDeclarations]: Found implementation of procedure ULTIMATE.init
[2018-11-23 11:09:41,923 INFO  L130     BoogieDeclarations]: Found specification of procedure main
[2018-11-23 11:09:41,923 INFO  L138     BoogieDeclarations]: Found implementation of procedure main
[2018-11-23 11:09:41,923 INFO  L130     BoogieDeclarations]: Found specification of procedure write~$Pointer$
[2018-11-23 11:09:41,924 INFO  L130     BoogieDeclarations]: Found specification of procedure read~$Pointer$
[2018-11-23 11:09:41,924 INFO  L130     BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc
[2018-11-23 11:09:41,924 INFO  L130     BoogieDeclarations]: Found specification of procedure write~intINTTYPE4
[2018-11-23 11:09:41,924 INFO  L130     BoogieDeclarations]: Found specification of procedure ULTIMATE.start
[2018-11-23 11:09:41,924 INFO  L138     BoogieDeclarations]: Found implementation of procedure ULTIMATE.start
[2018-11-23 11:09:42,911 INFO  L275             CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start)
[2018-11-23 11:09:42,911 INFO  L280             CfgBuilder]: Removed 8 assue(true) statements.
[2018-11-23 11:09:42,912 INFO  L202        PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 11:09:42 BoogieIcfgContainer
[2018-11-23 11:09:42,912 INFO  L132        PluginConnector]: ------------------------ END RCFGBuilder----------------------------
[2018-11-23 11:09:42,913 INFO  L113        PluginConnector]: ------------------------TraceAbstraction----------------------------
[2018-11-23 11:09:42,913 INFO  L271        PluginConnector]: Initializing TraceAbstraction...
[2018-11-23 11:09:42,917 INFO  L276        PluginConnector]: TraceAbstraction initialized
[2018-11-23 11:09:42,917 INFO  L185        PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 23.11 11:09:41" (1/3) ...
[2018-11-23 11:09:42,918 INFO  L205        PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@6a677bc5 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 23.11 11:09:42, skipping insertion in model container
[2018-11-23 11:09:42,918 INFO  L185        PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 11:09:41" (2/3) ...
[2018-11-23 11:09:42,918 INFO  L205        PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@6a677bc5 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 23.11 11:09:42, skipping insertion in model container
[2018-11-23 11:09:42,919 INFO  L185        PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 11:09:42" (3/3) ...
[2018-11-23 11:09:42,920 INFO  L112   eAbstractionObserver]: Analyzing ICFG sll-simple-white-blue_false-unreach-call_false-valid-memcleanup.i
[2018-11-23 11:09:42,931 INFO  L156   ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION
[2018-11-23 11:09:42,939 INFO  L168   ceAbstractionStarter]: Appying trace abstraction to program that has 1 error locations.
[2018-11-23 11:09:42,957 INFO  L257      AbstractCegarLoop]: Starting to check reachability of 1 error locations.
[2018-11-23 11:09:42,988 INFO  L133   ementStrategyFactory]: Using default assertion order modulation
[2018-11-23 11:09:42,988 INFO  L382      AbstractCegarLoop]: Interprodecural is true
[2018-11-23 11:09:42,989 INFO  L383      AbstractCegarLoop]: Hoare is true
[2018-11-23 11:09:42,989 INFO  L384      AbstractCegarLoop]: Compute interpolants for FPandBP
[2018-11-23 11:09:42,989 INFO  L385      AbstractCegarLoop]: Backedges is STRAIGHT_LINE
[2018-11-23 11:09:42,989 INFO  L386      AbstractCegarLoop]: Determinization is PREDICATE_ABSTRACTION
[2018-11-23 11:09:42,989 INFO  L387      AbstractCegarLoop]: Difference is false
[2018-11-23 11:09:42,990 INFO  L388      AbstractCegarLoop]: Minimize is MINIMIZE_SEVPA
[2018-11-23 11:09:42,990 INFO  L393      AbstractCegarLoop]: ======== Iteration 0==of CEGAR loop == AllErrorsAtOnce========
[2018-11-23 11:09:43,006 INFO  L276                IsEmpty]: Start isEmpty. Operand 29 states.
[2018-11-23 11:09:43,012 INFO  L282                IsEmpty]: Finished isEmpty. Found accepting run of length 15
[2018-11-23 11:09:43,012 INFO  L394         BasicCegarLoop]: Found error trace
[2018-11-23 11:09:43,013 INFO  L402         BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1]
[2018-11-23 11:09:43,016 INFO  L423      AbstractCegarLoop]: === Iteration 1 === [mainErr0ASSERT_VIOLATIONERROR_FUNCTION]===
[2018-11-23 11:09:43,022 INFO  L141       PredicateUnifier]: Initialized classic predicate unifier
[2018-11-23 11:09:43,022 INFO  L82        PathProgramCache]: Analyzing trace with hash 1157674678, now seen corresponding path program 1 times
[2018-11-23 11:09:43,027 INFO  L223   ckRefinementStrategy]: Switched to mode CVC4_FPBP
[2018-11-23 11:09:43,028 INFO  L69    tionRefinementEngine]: Using refinement strategy WolfRefinementStrategy
No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/cvc4nyu
Starting monitored process 2 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null)
Waiting until toolchain timeout for monitored process 2 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk
[2018-11-23 11:09:43,047 INFO  L103   rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY
[2018-11-23 11:09:43,110 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2018-11-23 11:09:43,125 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2018-11-23 11:09:43,128 INFO  L273         TraceCheckSpWp]: Computing forward predicates...
[2018-11-23 11:09:43,208 INFO  L256        TraceCheckUtils]: 0: Hoare triple {32#true} call ULTIMATE.init(); {32#true} is VALID
[2018-11-23 11:09:43,212 INFO  L273        TraceCheckUtils]: 1: Hoare triple {32#true} #NULL.base, #NULL.offset := 0bv32, 0bv32;#valid := #valid[0bv32 := 0bv1]; {32#true} is VALID
[2018-11-23 11:09:43,213 INFO  L273        TraceCheckUtils]: 2: Hoare triple {32#true} assume true; {32#true} is VALID
[2018-11-23 11:09:43,214 INFO  L268        TraceCheckUtils]: 3: Hoare quadruple {32#true} {32#true} #110#return; {32#true} is VALID
[2018-11-23 11:09:43,214 INFO  L256        TraceCheckUtils]: 4: Hoare triple {32#true} call #t~ret19 := main(); {32#true} is VALID
[2018-11-23 11:09:43,214 INFO  L273        TraceCheckUtils]: 5: Hoare triple {32#true} call #t~malloc0.base, #t~malloc0.offset := #Ultimate.alloc(8bv32);~head~0.base, ~head~0.offset := #t~malloc0.base, #t~malloc0.offset;call write~$Pointer$(0bv32, 0bv32, ~head~0.base, ~head~0.offset, 4bv32);call write~intINTTYPE4(0bv32, ~head~0.base, ~bvadd32(4bv32, ~head~0.offset), 4bv32);~x~0.base, ~x~0.offset := ~head~0.base, ~head~0.offset; {32#true} is VALID
[2018-11-23 11:09:43,218 INFO  L273        TraceCheckUtils]: 6: Hoare triple {32#true} assume !true; {33#false} is VALID
[2018-11-23 11:09:43,218 INFO  L273        TraceCheckUtils]: 7: Hoare triple {33#false} assume 0bv32 != #t~nondet4;havoc #t~nondet4;call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(8bv32);~x~0.base, ~x~0.offset := #t~malloc5.base, #t~malloc5.offset;call write~intINTTYPE4(1bv32, ~x~0.base, ~bvadd32(4bv32, ~x~0.offset), 4bv32);call write~$Pointer$(~head~0.base, ~head~0.offset, ~x~0.base, ~x~0.offset, 4bv32);~head~0.base, ~head~0.offset := ~x~0.base, ~x~0.offset; {33#false} is VALID
[2018-11-23 11:09:43,219 INFO  L273        TraceCheckUtils]: 8: Hoare triple {33#false} ~x~0.base, ~x~0.offset := ~head~0.base, ~head~0.offset; {33#false} is VALID
[2018-11-23 11:09:43,219 INFO  L273        TraceCheckUtils]: 9: Hoare triple {33#false} assume !true; {33#false} is VALID
[2018-11-23 11:09:43,219 INFO  L273        TraceCheckUtils]: 10: Hoare triple {33#false} call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~x~0.base, ~x~0.offset, 4bv32);~x~0.base, ~x~0.offset := #t~mem15.base, #t~mem15.offset;havoc #t~mem15.base, #t~mem15.offset; {33#false} is VALID
[2018-11-23 11:09:43,219 INFO  L273        TraceCheckUtils]: 11: Hoare triple {33#false} assume !!(~x~0.base != 0bv32 || ~x~0.offset != 0bv32);call #t~mem16 := read~intINTTYPE4(~x~0.base, ~bvadd32(4bv32, ~x~0.offset), 4bv32); {33#false} is VALID
[2018-11-23 11:09:43,220 INFO  L273        TraceCheckUtils]: 12: Hoare triple {33#false} assume 1bv32 != #t~mem16;havoc #t~mem16; {33#false} is VALID
[2018-11-23 11:09:43,220 INFO  L273        TraceCheckUtils]: 13: Hoare triple {33#false} assume !false; {33#false} is VALID
[2018-11-23 11:09:43,223 INFO  L134       CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked.
[2018-11-23 11:09:43,223 INFO  L312         TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect
[2018-11-23 11:09:43,232 INFO  L312   seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences.
[2018-11-23 11:09:43,232 INFO  L327   seRefinementStrategy]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2
[2018-11-23 11:09:43,238 INFO  L78                 Accepts]: Start accepts. Automaton has 2 states. Word has length 14
[2018-11-23 11:09:43,242 INFO  L84                 Accepts]: Finished accepts. word is accepted.
[2018-11-23 11:09:43,248 INFO  L86        InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 2 states.
[2018-11-23 11:09:43,327 INFO  L119       InductivityCheck]: Floyd-Hoare automaton has 14 edges. 14 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. 
[2018-11-23 11:09:43,327 INFO  L459      AbstractCegarLoop]: Interpolant automaton has 2 states
[2018-11-23 11:09:43,337 INFO  L142   InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants.
[2018-11-23 11:09:43,338 INFO  L144   InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2
[2018-11-23 11:09:43,341 INFO  L87              Difference]: Start difference. First operand 29 states. Second operand 2 states.
[2018-11-23 11:09:43,828 INFO  L144             Difference]: Subtrahend was deterministic. Have not used determinization.
[2018-11-23 11:09:43,828 INFO  L93              Difference]: Finished difference Result 50 states and 77 transitions.
[2018-11-23 11:09:43,828 INFO  L142   InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. 
[2018-11-23 11:09:43,828 INFO  L78                 Accepts]: Start accepts. Automaton has 2 states. Word has length 14
[2018-11-23 11:09:43,829 INFO  L84                 Accepts]: Finished accepts. some prefix is accepted.
[2018-11-23 11:09:43,830 INFO  L82        GeneralOperation]: Start removeUnreachable. Operand 2 states.
[2018-11-23 11:09:43,841 INFO  L88        GeneralOperation]: Finished removeUnreachable. Reduced from 2 states to 2 states and 77 transitions.
[2018-11-23 11:09:43,841 INFO  L82        GeneralOperation]: Start removeUnreachable. Operand 2 states.
[2018-11-23 11:09:43,845 INFO  L88        GeneralOperation]: Finished removeUnreachable. Reduced from 2 states to 2 states and 77 transitions.
[2018-11-23 11:09:43,845 INFO  L86        InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 2 states and 77 transitions.
[2018-11-23 11:09:44,069 INFO  L119       InductivityCheck]: Floyd-Hoare automaton has 77 edges. 77 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. 
[2018-11-23 11:09:44,082 INFO  L225             Difference]: With dead ends: 50
[2018-11-23 11:09:44,083 INFO  L226             Difference]: Without dead ends: 21
[2018-11-23 11:09:44,086 INFO  L631         BasicCegarLoop]: 0 DeclaredPredicates, 13 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2
[2018-11-23 11:09:44,102 INFO  L82        GeneralOperation]: Start minimizeSevpa. Operand 21 states.
[2018-11-23 11:09:44,221 INFO  L88        GeneralOperation]: Finished minimizeSevpa. Reduced states from 21 to 21.
[2018-11-23 11:09:44,222 INFO  L214    AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa
[2018-11-23 11:09:44,223 INFO  L82        GeneralOperation]: Start isEquivalent. First operand 21 states. Second operand 21 states.
[2018-11-23 11:09:44,223 INFO  L74              IsIncluded]: Start isIncluded. First operand 21 states. Second operand 21 states.
[2018-11-23 11:09:44,223 INFO  L87              Difference]: Start difference. First operand 21 states. Second operand 21 states.
[2018-11-23 11:09:44,227 INFO  L144             Difference]: Subtrahend was deterministic. Have not used determinization.
[2018-11-23 11:09:44,228 INFO  L93              Difference]: Finished difference Result 21 states and 26 transitions.
[2018-11-23 11:09:44,229 INFO  L276                IsEmpty]: Start isEmpty. Operand 21 states and 26 transitions.
[2018-11-23 11:09:44,230 INFO  L282                IsEmpty]: Finished isEmpty. No accepting run.
[2018-11-23 11:09:44,230 INFO  L83              IsIncluded]: Finished isIncluded. Language is included
[2018-11-23 11:09:44,230 INFO  L74              IsIncluded]: Start isIncluded. First operand 21 states. Second operand 21 states.
[2018-11-23 11:09:44,230 INFO  L87              Difference]: Start difference. First operand 21 states. Second operand 21 states.
[2018-11-23 11:09:44,236 INFO  L144             Difference]: Subtrahend was deterministic. Have not used determinization.
[2018-11-23 11:09:44,237 INFO  L93              Difference]: Finished difference Result 21 states and 26 transitions.
[2018-11-23 11:09:44,237 INFO  L276                IsEmpty]: Start isEmpty. Operand 21 states and 26 transitions.
[2018-11-23 11:09:44,237 INFO  L282                IsEmpty]: Finished isEmpty. No accepting run.
[2018-11-23 11:09:44,240 INFO  L83              IsIncluded]: Finished isIncluded. Language is included
[2018-11-23 11:09:44,240 INFO  L88        GeneralOperation]: Finished isEquivalent.
[2018-11-23 11:09:44,241 INFO  L221    AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa
[2018-11-23 11:09:44,241 INFO  L82        GeneralOperation]: Start removeUnreachable. Operand 21 states.
[2018-11-23 11:09:44,245 INFO  L88        GeneralOperation]: Finished removeUnreachable. Reduced from 21 states to 21 states and 26 transitions.
[2018-11-23 11:09:44,248 INFO  L78                 Accepts]: Start accepts. Automaton has 21 states and 26 transitions. Word has length 14
[2018-11-23 11:09:44,248 INFO  L84                 Accepts]: Finished accepts. word is rejected.
[2018-11-23 11:09:44,248 INFO  L480      AbstractCegarLoop]: Abstraction has 21 states and 26 transitions.
[2018-11-23 11:09:44,248 INFO  L481      AbstractCegarLoop]: Interpolant automaton has 2 states.
[2018-11-23 11:09:44,249 INFO  L276                IsEmpty]: Start isEmpty. Operand 21 states and 26 transitions.
[2018-11-23 11:09:44,249 INFO  L282                IsEmpty]: Finished isEmpty. Found accepting run of length 16
[2018-11-23 11:09:44,250 INFO  L394         BasicCegarLoop]: Found error trace
[2018-11-23 11:09:44,250 INFO  L402         BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1]
[2018-11-23 11:09:44,251 INFO  L423      AbstractCegarLoop]: === Iteration 2 === [mainErr0ASSERT_VIOLATIONERROR_FUNCTION]===
[2018-11-23 11:09:44,251 INFO  L141       PredicateUnifier]: Initialized classic predicate unifier
[2018-11-23 11:09:44,251 INFO  L82        PathProgramCache]: Analyzing trace with hash -38156386, now seen corresponding path program 1 times
[2018-11-23 11:09:44,252 INFO  L223   ckRefinementStrategy]: Switched to mode CVC4_FPBP
[2018-11-23 11:09:44,252 INFO  L69    tionRefinementEngine]: Using refinement strategy WolfRefinementStrategy
No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/cvc4nyu
Starting monitored process 3 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null)
Waiting until toolchain timeout for monitored process 3 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk
[2018-11-23 11:09:44,277 INFO  L103   rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY
[2018-11-23 11:09:44,344 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is sat
[2018-11-23 11:09:44,405 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is sat
[2018-11-23 11:09:44,443 INFO  L469         BasicCegarLoop]: Counterexample might be feasible
-----
class de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder.RCFGBacktranslator
[?]  CALL  call ULTIMATE.init();
     VAL   [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |old(#NULL.base)|=(_ bv0 32), |old(#NULL.offset)|=(_ bv0 32)]
[?]        #NULL.base, #NULL.offset := 0bv32, 0bv32;#valid := #valid[0bv32 := 0bv1];
     VAL   [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |old(#NULL.base)|=(_ bv0 32), |old(#NULL.offset)|=(_ bv0 32)]
[?]        assume true;
     VAL   [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |old(#NULL.base)|=(_ bv0 32), |old(#NULL.offset)|=(_ bv0 32)]
[?]  RET   #110#return;
     VAL   [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32)]
[?]  CALL  call #t~ret19 := main();
     VAL   [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32)]
[?]        call #t~malloc0.base, #t~malloc0.offset := #Ultimate.alloc(8bv32);~head~0.base, ~head~0.offset := #t~malloc0.base, #t~malloc0.offset;call write~$Pointer$(0bv32, 0bv32, ~head~0.base, ~head~0.offset, 4bv32);call write~intINTTYPE4(0bv32, ~head~0.base, ~bvadd32(4bv32, ~head~0.offset), 4bv32);~x~0.base, ~x~0.offset := ~head~0.base, ~head~0.offset;
     VAL   [main_~head~0.base=(_ bv1 32), main_~head~0.offset=(_ bv0 32), main_~x~0.base=(_ bv1 32), main_~x~0.offset=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |main_#t~malloc0.base|=(_ bv1 32), |main_#t~malloc0.offset|=(_ bv0 32)]
[?]        assume !(0bv32 != #t~nondet1);havoc #t~nondet1;
     VAL   [main_~head~0.base=(_ bv1 32), main_~head~0.offset=(_ bv0 32), main_~x~0.base=(_ bv1 32), main_~x~0.offset=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |main_#t~malloc0.base|=(_ bv1 32), |main_#t~malloc0.offset|=(_ bv0 32)]
[?]        assume 0bv32 != #t~nondet4;havoc #t~nondet4;call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(8bv32);~x~0.base, ~x~0.offset := #t~malloc5.base, #t~malloc5.offset;call write~intINTTYPE4(1bv32, ~x~0.base, ~bvadd32(4bv32, ~x~0.offset), 4bv32);call write~$Pointer$(~head~0.base, ~head~0.offset, ~x~0.base, ~x~0.offset, 4bv32);~head~0.base, ~head~0.offset := ~x~0.base, ~x~0.offset;
     VAL   [main_~head~0.base=(_ bv2130574326 32), main_~head~0.offset=(_ bv0 32), main_~x~0.base=(_ bv2130574326 32), main_~x~0.offset=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |main_#t~malloc0.base|=(_ bv1 32), |main_#t~malloc0.offset|=(_ bv0 32), |main_#t~malloc5.base|=(_ bv2130574326 32), |main_#t~malloc5.offset|=(_ bv0 32)]
[?]        ~x~0.base, ~x~0.offset := ~head~0.base, ~head~0.offset;
     VAL   [main_~head~0.base=(_ bv2130574326 32), main_~head~0.offset=(_ bv0 32), main_~x~0.base=(_ bv2130574326 32), main_~x~0.offset=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |main_#t~malloc0.base|=(_ bv1 32), |main_#t~malloc0.offset|=(_ bv0 32), |main_#t~malloc5.base|=(_ bv2130574326 32), |main_#t~malloc5.offset|=(_ bv0 32)]
[?]        call #t~mem13 := read~intINTTYPE4(~x~0.base, ~bvadd32(4bv32, ~x~0.offset), 4bv32);
     VAL   [main_~head~0.base=(_ bv2130574326 32), main_~head~0.offset=(_ bv0 32), main_~x~0.base=(_ bv2130574326 32), main_~x~0.offset=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |main_#t~malloc0.base|=(_ bv1 32), |main_#t~malloc0.offset|=(_ bv0 32), |main_#t~malloc5.base|=(_ bv2130574326 32), |main_#t~malloc5.offset|=(_ bv0 32), |main_#t~mem13|=(_ bv1 32)]
[?]        assume !(1bv32 != #t~mem13);havoc #t~mem13;
     VAL   [main_~head~0.base=(_ bv2130574326 32), main_~head~0.offset=(_ bv0 32), main_~x~0.base=(_ bv2130574326 32), main_~x~0.offset=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |main_#t~malloc0.base|=(_ bv1 32), |main_#t~malloc0.offset|=(_ bv0 32), |main_#t~malloc5.base|=(_ bv2130574326 32), |main_#t~malloc5.offset|=(_ bv0 32)]
[?]        call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~x~0.base, ~x~0.offset, 4bv32);~x~0.base, ~x~0.offset := #t~mem15.base, #t~mem15.offset;havoc #t~mem15.base, #t~mem15.offset;
     VAL   [main_~head~0.base=(_ bv2130574326 32), main_~head~0.offset=(_ bv0 32), main_~x~0.base=(_ bv1 32), main_~x~0.offset=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |main_#t~malloc0.base|=(_ bv1 32), |main_#t~malloc0.offset|=(_ bv0 32), |main_#t~malloc5.base|=(_ bv2130574326 32), |main_#t~malloc5.offset|=(_ bv0 32)]
[?]        assume !!(~x~0.base != 0bv32 || ~x~0.offset != 0bv32);call #t~mem16 := read~intINTTYPE4(~x~0.base, ~bvadd32(4bv32, ~x~0.offset), 4bv32);
     VAL   [main_~head~0.base=(_ bv2130574326 32), main_~head~0.offset=(_ bv0 32), main_~x~0.base=(_ bv1 32), main_~x~0.offset=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |main_#t~malloc0.base|=(_ bv1 32), |main_#t~malloc0.offset|=(_ bv0 32), |main_#t~malloc5.base|=(_ bv2130574326 32), |main_#t~malloc5.offset|=(_ bv0 32), |main_#t~mem16|=(_ bv0 32)]
[?]        assume 1bv32 != #t~mem16;havoc #t~mem16;
     VAL   [main_~head~0.base=(_ bv2130574326 32), main_~head~0.offset=(_ bv0 32), main_~x~0.base=(_ bv1 32), main_~x~0.offset=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |main_#t~malloc0.base|=(_ bv1 32), |main_#t~malloc0.offset|=(_ bv0 32), |main_#t~malloc5.base|=(_ bv2130574326 32), |main_#t~malloc5.offset|=(_ bv0 32)]
[?]        assume !false;
     VAL   [main_~head~0.base=(_ bv2130574326 32), main_~head~0.offset=(_ bv0 32), main_~x~0.base=(_ bv1 32), main_~x~0.offset=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |main_#t~malloc0.base|=(_ bv1 32), |main_#t~malloc0.offset|=(_ bv0 32), |main_#t~malloc5.base|=(_ bv2130574326 32), |main_#t~malloc5.offset|=(_ bv0 32)]


[?]            CALL  call ULTIMATE.init();
               VAL   [#NULL.base=0bv32, #NULL.offset=0bv32, old(#NULL.base)=0bv32, old(#NULL.offset)=0bv32]
[?]                  #NULL.base, #NULL.offset := 0bv32, 0bv32;
[?]                  #valid := #valid[0bv32 := 0bv1];
               VAL   [#NULL.base=0bv32, #NULL.offset=0bv32, old(#NULL.base)=0bv32, old(#NULL.offset)=0bv32]
[?]                  ensures true;
               VAL   [#NULL.base=0bv32, #NULL.offset=0bv32, old(#NULL.base)=0bv32, old(#NULL.offset)=0bv32]
[?]            RET   call ULTIMATE.init();
               VAL   [#NULL.base=0bv32, #NULL.offset=0bv32]
[?]            CALL  call #t~ret19 := main();
               VAL   [#NULL.base=0bv32, #NULL.offset=0bv32]
[L988]               call #t~malloc0.base, #t~malloc0.offset := #Ultimate.alloc(8bv32);
[L988]               ~head~0.base, ~head~0.offset := #t~malloc0.base, #t~malloc0.offset;
[L989]               call write~$Pointer$(0bv32, 0bv32, ~head~0.base, ~head~0.offset, 4bv32);
[L990]               call write~intINTTYPE4(0bv32, ~head~0.base, ~bvadd32(4bv32, ~head~0.offset), 4bv32);
[L992]               ~x~0.base, ~x~0.offset := ~head~0.base, ~head~0.offset;
               VAL   [#NULL.base=0bv32, #NULL.offset=0bv32, #t~malloc0.base=1bv32, #t~malloc0.offset=0bv32, ~head~0.base=1bv32, ~head~0.offset=0bv32, ~x~0.base=1bv32, ~x~0.offset=0bv32]
[L995-L1002]         assume !(0bv32 != #t~nondet1);
[L995]               havoc #t~nondet1;
               VAL   [#NULL.base=0bv32, #NULL.offset=0bv32, #t~malloc0.base=1bv32, #t~malloc0.offset=0bv32, ~head~0.base=1bv32, ~head~0.offset=0bv32, ~x~0.base=1bv32, ~x~0.offset=0bv32]
[L1005-L1026]        assume 0bv32 != #t~nondet4;
[L1005]              havoc #t~nondet4;
[L1006]              call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(8bv32);
[L1006]              ~x~0.base, ~x~0.offset := #t~malloc5.base, #t~malloc5.offset;
[L1007]              call write~intINTTYPE4(1bv32, ~x~0.base, ~bvadd32(4bv32, ~x~0.offset), 4bv32);
[L1008]              call write~$Pointer$(~head~0.base, ~head~0.offset, ~x~0.base, ~x~0.offset, 4bv32);
[L1009]              ~head~0.base, ~head~0.offset := ~x~0.base, ~x~0.offset;
               VAL   [#NULL.base=0bv32, #NULL.offset=0bv32, #t~malloc0.base=1bv32, #t~malloc0.offset=0bv32, #t~malloc5.base=2130574326bv32, #t~malloc5.offset=0bv32, ~head~0.base=2130574326bv32, ~head~0.offset=0bv32, ~x~0.base=2130574326bv32, ~x~0.offset=0bv32]
[L1029]              ~x~0.base, ~x~0.offset := ~head~0.base, ~head~0.offset;
               VAL   [#NULL.base=0bv32, #NULL.offset=0bv32, #t~malloc0.base=1bv32, #t~malloc0.offset=0bv32, #t~malloc5.base=2130574326bv32, #t~malloc5.offset=0bv32, ~head~0.base=2130574326bv32, ~head~0.offset=0bv32, ~x~0.base=2130574326bv32, ~x~0.offset=0bv32]
[L1032]              call #t~mem13 := read~intINTTYPE4(~x~0.base, ~bvadd32(4bv32, ~x~0.offset), 4bv32);
               VAL   [#NULL.base=0bv32, #NULL.offset=0bv32, #t~malloc0.base=1bv32, #t~malloc0.offset=0bv32, #t~malloc5.base=2130574326bv32, #t~malloc5.offset=0bv32, #t~mem13=1bv32, ~head~0.base=2130574326bv32, ~head~0.offset=0bv32, ~x~0.base=2130574326bv32, ~x~0.offset=0bv32]
[L1032-L1035]        assume !(1bv32 != #t~mem13);
[L1032]              havoc #t~mem13;
               VAL   [#NULL.base=0bv32, #NULL.offset=0bv32, #t~malloc0.base=1bv32, #t~malloc0.offset=0bv32, #t~malloc5.base=2130574326bv32, #t~malloc5.offset=0bv32, ~head~0.base=2130574326bv32, ~head~0.offset=0bv32, ~x~0.base=2130574326bv32, ~x~0.offset=0bv32]
[L1038]              call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~x~0.base, ~x~0.offset, 4bv32);
[L1038]              ~x~0.base, ~x~0.offset := #t~mem15.base, #t~mem15.offset;
[L1038]              havoc #t~mem15.base, #t~mem15.offset;
               VAL   [#NULL.base=0bv32, #NULL.offset=0bv32, #t~malloc0.base=1bv32, #t~malloc0.offset=0bv32, #t~malloc5.base=2130574326bv32, #t~malloc5.offset=0bv32, ~head~0.base=2130574326bv32, ~head~0.offset=0bv32, ~x~0.base=1bv32, ~x~0.offset=0bv32]
[L1039-L1044]        assume !!(~x~0.base != 0bv32 || ~x~0.offset != 0bv32);
[L1041]              call #t~mem16 := read~intINTTYPE4(~x~0.base, ~bvadd32(4bv32, ~x~0.offset), 4bv32);
               VAL   [#NULL.base=0bv32, #NULL.offset=0bv32, #t~malloc0.base=1bv32, #t~malloc0.offset=0bv32, #t~malloc5.base=2130574326bv32, #t~malloc5.offset=0bv32, #t~mem16=0bv32, ~head~0.base=2130574326bv32, ~head~0.offset=0bv32, ~x~0.base=1bv32, ~x~0.offset=0bv32]
[L1041-L1042]        assume 1bv32 != #t~mem16;
[L1041]              havoc #t~mem16;
               VAL   [#NULL.base=0bv32, #NULL.offset=0bv32, #t~malloc0.base=1bv32, #t~malloc0.offset=0bv32, #t~malloc5.base=2130574326bv32, #t~malloc5.offset=0bv32, ~head~0.base=2130574326bv32, ~head~0.offset=0bv32, ~x~0.base=1bv32, ~x~0.offset=0bv32]
[L1042]              assert false;
               VAL   [#NULL.base=0bv32, #NULL.offset=0bv32, #t~malloc0.base=1bv32, #t~malloc0.offset=0bv32, #t~malloc5.base=2130574326bv32, #t~malloc5.offset=0bv32, ~head~0.base=2130574326bv32, ~head~0.offset=0bv32, ~x~0.base=1bv32, ~x~0.offset=0bv32]

-----
-----
class de.uni_freiburg.informatik.ultimate.boogie.preprocessor.BoogiePreprocessorBacktranslator
[?]            CALL  call ULTIMATE.init();
               VAL   [#NULL.base=0bv32, #NULL.offset=0bv32, old(#NULL.base)=0bv32, old(#NULL.offset)=0bv32]
[?]                  #NULL.base, #NULL.offset := 0bv32, 0bv32;
[?]                  #valid := #valid[0bv32 := 0bv1];
               VAL   [#NULL.base=0bv32, #NULL.offset=0bv32, old(#NULL.base)=0bv32, old(#NULL.offset)=0bv32]
[?]                  ensures true;
               VAL   [#NULL.base=0bv32, #NULL.offset=0bv32, old(#NULL.base)=0bv32, old(#NULL.offset)=0bv32]
[?]            RET   call ULTIMATE.init();
               VAL   [#NULL.base=0bv32, #NULL.offset=0bv32]
[?]            CALL  call #t~ret19 := main();
               VAL   [#NULL.base=0bv32, #NULL.offset=0bv32]
[L988]               call #t~malloc0.base, #t~malloc0.offset := #Ultimate.alloc(8bv32);
[L988]               ~head~0.base, ~head~0.offset := #t~malloc0.base, #t~malloc0.offset;
[L989]               call write~$Pointer$(0bv32, 0bv32, ~head~0.base, ~head~0.offset, 4bv32);
[L990]               call write~intINTTYPE4(0bv32, ~head~0.base, ~bvadd32(4bv32, ~head~0.offset), 4bv32);
[L992]               ~x~0.base, ~x~0.offset := ~head~0.base, ~head~0.offset;
               VAL   [#NULL.base=0bv32, #NULL.offset=0bv32, #t~malloc0.base=1bv32, #t~malloc0.offset=0bv32, ~head~0.base=1bv32, ~head~0.offset=0bv32, ~x~0.base=1bv32, ~x~0.offset=0bv32]
[L995-L1002]         assume !(0bv32 != #t~nondet1);
[L995]               havoc #t~nondet1;
               VAL   [#NULL.base=0bv32, #NULL.offset=0bv32, #t~malloc0.base=1bv32, #t~malloc0.offset=0bv32, ~head~0.base=1bv32, ~head~0.offset=0bv32, ~x~0.base=1bv32, ~x~0.offset=0bv32]
[L1005-L1026]        assume 0bv32 != #t~nondet4;
[L1005]              havoc #t~nondet4;
[L1006]              call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(8bv32);
[L1006]              ~x~0.base, ~x~0.offset := #t~malloc5.base, #t~malloc5.offset;
[L1007]              call write~intINTTYPE4(1bv32, ~x~0.base, ~bvadd32(4bv32, ~x~0.offset), 4bv32);
[L1008]              call write~$Pointer$(~head~0.base, ~head~0.offset, ~x~0.base, ~x~0.offset, 4bv32);
[L1009]              ~head~0.base, ~head~0.offset := ~x~0.base, ~x~0.offset;
               VAL   [#NULL.base=0bv32, #NULL.offset=0bv32, #t~malloc0.base=1bv32, #t~malloc0.offset=0bv32, #t~malloc5.base=2130574326bv32, #t~malloc5.offset=0bv32, ~head~0.base=2130574326bv32, ~head~0.offset=0bv32, ~x~0.base=2130574326bv32, ~x~0.offset=0bv32]
[L1029]              ~x~0.base, ~x~0.offset := ~head~0.base, ~head~0.offset;
               VAL   [#NULL.base=0bv32, #NULL.offset=0bv32, #t~malloc0.base=1bv32, #t~malloc0.offset=0bv32, #t~malloc5.base=2130574326bv32, #t~malloc5.offset=0bv32, ~head~0.base=2130574326bv32, ~head~0.offset=0bv32, ~x~0.base=2130574326bv32, ~x~0.offset=0bv32]
[L1032]              call #t~mem13 := read~intINTTYPE4(~x~0.base, ~bvadd32(4bv32, ~x~0.offset), 4bv32);
               VAL   [#NULL.base=0bv32, #NULL.offset=0bv32, #t~malloc0.base=1bv32, #t~malloc0.offset=0bv32, #t~malloc5.base=2130574326bv32, #t~malloc5.offset=0bv32, #t~mem13=1bv32, ~head~0.base=2130574326bv32, ~head~0.offset=0bv32, ~x~0.base=2130574326bv32, ~x~0.offset=0bv32]
[L1032-L1035]        assume !(1bv32 != #t~mem13);
[L1032]              havoc #t~mem13;
               VAL   [#NULL.base=0bv32, #NULL.offset=0bv32, #t~malloc0.base=1bv32, #t~malloc0.offset=0bv32, #t~malloc5.base=2130574326bv32, #t~malloc5.offset=0bv32, ~head~0.base=2130574326bv32, ~head~0.offset=0bv32, ~x~0.base=2130574326bv32, ~x~0.offset=0bv32]
[L1038]              call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~x~0.base, ~x~0.offset, 4bv32);
[L1038]              ~x~0.base, ~x~0.offset := #t~mem15.base, #t~mem15.offset;
[L1038]              havoc #t~mem15.base, #t~mem15.offset;
               VAL   [#NULL.base=0bv32, #NULL.offset=0bv32, #t~malloc0.base=1bv32, #t~malloc0.offset=0bv32, #t~malloc5.base=2130574326bv32, #t~malloc5.offset=0bv32, ~head~0.base=2130574326bv32, ~head~0.offset=0bv32, ~x~0.base=1bv32, ~x~0.offset=0bv32]
[L1039-L1044]        assume !!(~x~0.base != 0bv32 || ~x~0.offset != 0bv32);
[L1041]              call #t~mem16 := read~intINTTYPE4(~x~0.base, ~bvadd32(4bv32, ~x~0.offset), 4bv32);
               VAL   [#NULL.base=0bv32, #NULL.offset=0bv32, #t~malloc0.base=1bv32, #t~malloc0.offset=0bv32, #t~malloc5.base=2130574326bv32, #t~malloc5.offset=0bv32, #t~mem16=0bv32, ~head~0.base=2130574326bv32, ~head~0.offset=0bv32, ~x~0.base=1bv32, ~x~0.offset=0bv32]
[L1041-L1042]        assume 1bv32 != #t~mem16;
[L1041]              havoc #t~mem16;
               VAL   [#NULL.base=0bv32, #NULL.offset=0bv32, #t~malloc0.base=1bv32, #t~malloc0.offset=0bv32, #t~malloc5.base=2130574326bv32, #t~malloc5.offset=0bv32, ~head~0.base=2130574326bv32, ~head~0.offset=0bv32, ~x~0.base=1bv32, ~x~0.offset=0bv32]
[L1042]              assert false;
               VAL   [#NULL.base=0bv32, #NULL.offset=0bv32, #t~malloc0.base=1bv32, #t~malloc0.offset=0bv32, #t~malloc5.base=2130574326bv32, #t~malloc5.offset=0bv32, ~head~0.base=2130574326bv32, ~head~0.offset=0bv32, ~x~0.base=1bv32, ~x~0.offset=0bv32]


[?]            CALL        call ULTIMATE.init();
               VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, old(#NULL!base)=0bv32, old(#NULL!offset)=0bv32]
[?]                        #NULL := { base: 0bv32, offset: 0bv32 };
[?]                        #valid[0bv32] := 0bv1;
               VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, old(#NULL!base)=0bv32, old(#NULL!offset)=0bv32]
[?]            RET         call ULTIMATE.init();
               VAL         [#NULL!base=0bv32, #NULL!offset=0bv32]
[?]            CALL        call #t~ret19 := main();
               VAL         [#NULL!base=0bv32, #NULL!offset=0bv32]
[L988]         FCALL       call #t~malloc0 := #Ultimate.alloc(8bv32);
[L988]                     ~head~0 := #t~malloc0;
[L989]         FCALL       call write~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~head~0!base, offset: ~head~0!offset }, 4bv32);
[L990]         FCALL       call write~intINTTYPE4(0bv32, { base: ~head~0!base, offset: ~bvadd32(4bv32, ~head~0!offset) }, 4bv32);
[L992]                     ~x~0 := ~head~0;
               VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, ~head~0!base=1bv32, ~head~0!offset=0bv32, ~x~0!base=1bv32, ~x~0!offset=0bv32]
[L995-L1002]   COND TRUE   !(0bv32 != #t~nondet1)
[L995]                     havoc #t~nondet1;
               VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, ~head~0!base=1bv32, ~head~0!offset=0bv32, ~x~0!base=1bv32, ~x~0!offset=0bv32]
[L1005-L1026]  COND TRUE   0bv32 != #t~nondet4
[L1005]                    havoc #t~nondet4;
[L1006]        FCALL       call #t~malloc5 := #Ultimate.alloc(8bv32);
[L1006]                    ~x~0 := #t~malloc5;
[L1007]        FCALL       call write~intINTTYPE4(1bv32, { base: ~x~0!base, offset: ~bvadd32(4bv32, ~x~0!offset) }, 4bv32);
[L1008]        FCALL       call write~$Pointer$(~head~0, { base: ~x~0!base, offset: ~x~0!offset }, 4bv32);
[L1009]                    ~head~0 := ~x~0;
               VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, #t~malloc5!base=2130574326bv32, #t~malloc5!offset=0bv32, ~head~0!base=2130574326bv32, ~head~0!offset=0bv32, ~x~0!base=2130574326bv32, ~x~0!offset=0bv32]
[L1029]                    ~x~0 := ~head~0;
               VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, #t~malloc5!base=2130574326bv32, #t~malloc5!offset=0bv32, ~head~0!base=2130574326bv32, ~head~0!offset=0bv32, ~x~0!base=2130574326bv32, ~x~0!offset=0bv32]
[L1032]        FCALL       call #t~mem13 := read~intINTTYPE4({ base: ~x~0!base, offset: ~bvadd32(4bv32, ~x~0!offset) }, 4bv32);
               VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, #t~malloc5!base=2130574326bv32, #t~malloc5!offset=0bv32, #t~mem13=1bv32, ~head~0!base=2130574326bv32, ~head~0!offset=0bv32, ~x~0!base=2130574326bv32, ~x~0!offset=0bv32]
[L1032-L1035]  COND TRUE   !(1bv32 != #t~mem13)
[L1032]                    havoc #t~mem13;
               VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, #t~malloc5!base=2130574326bv32, #t~malloc5!offset=0bv32, ~head~0!base=2130574326bv32, ~head~0!offset=0bv32, ~x~0!base=2130574326bv32, ~x~0!offset=0bv32]
[L1038]        FCALL       call #t~mem15 := read~$Pointer$({ base: ~x~0!base, offset: ~x~0!offset }, 4bv32);
[L1038]                    ~x~0 := #t~mem15;
[L1038]                    havoc #t~mem15;
               VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, #t~malloc5!base=2130574326bv32, #t~malloc5!offset=0bv32, ~head~0!base=2130574326bv32, ~head~0!offset=0bv32, ~x~0!base=1bv32, ~x~0!offset=0bv32]
[L1039-L1044]  COND FALSE  !(!(~x~0 != { base: 0bv32, offset: 0bv32 }))
[L1041]        FCALL       call #t~mem16 := read~intINTTYPE4({ base: ~x~0!base, offset: ~bvadd32(4bv32, ~x~0!offset) }, 4bv32);
               VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, #t~malloc5!base=2130574326bv32, #t~malloc5!offset=0bv32, #t~mem16=0bv32, ~head~0!base=2130574326bv32, ~head~0!offset=0bv32, ~x~0!base=1bv32, ~x~0!offset=0bv32]
[L1041]        COND TRUE   1bv32 != #t~mem16
[L1041]                    havoc #t~mem16;
               VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, #t~malloc5!base=2130574326bv32, #t~malloc5!offset=0bv32, ~head~0!base=2130574326bv32, ~head~0!offset=0bv32, ~x~0!base=1bv32, ~x~0!offset=0bv32]
[L1042]                    assert false;
               VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, #t~malloc5!base=2130574326bv32, #t~malloc5!offset=0bv32, ~head~0!base=2130574326bv32, ~head~0!offset=0bv32, ~x~0!base=1bv32, ~x~0!offset=0bv32]

-----
-----
class de.uni_freiburg.informatik.ultimate.boogie.procedureinliner.backtranslation.InlinerBacktranslator
[?]            CALL        call ULTIMATE.init();
               VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, old(#NULL!base)=0bv32, old(#NULL!offset)=0bv32]
[?]                        #NULL := { base: 0bv32, offset: 0bv32 };
[?]                        #valid[0bv32] := 0bv1;
               VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, old(#NULL!base)=0bv32, old(#NULL!offset)=0bv32]
[?]            RET         call ULTIMATE.init();
               VAL         [#NULL!base=0bv32, #NULL!offset=0bv32]
[?]            CALL        call #t~ret19 := main();
               VAL         [#NULL!base=0bv32, #NULL!offset=0bv32]
[L988]         FCALL       call #t~malloc0 := #Ultimate.alloc(8bv32);
[L988]                     ~head~0 := #t~malloc0;
[L989]         FCALL       call write~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~head~0!base, offset: ~head~0!offset }, 4bv32);
[L990]         FCALL       call write~intINTTYPE4(0bv32, { base: ~head~0!base, offset: ~bvadd32(4bv32, ~head~0!offset) }, 4bv32);
[L992]                     ~x~0 := ~head~0;
               VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, ~head~0!base=1bv32, ~head~0!offset=0bv32, ~x~0!base=1bv32, ~x~0!offset=0bv32]
[L995-L1002]   COND TRUE   !(0bv32 != #t~nondet1)
[L995]                     havoc #t~nondet1;
               VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, ~head~0!base=1bv32, ~head~0!offset=0bv32, ~x~0!base=1bv32, ~x~0!offset=0bv32]
[L1005-L1026]  COND TRUE   0bv32 != #t~nondet4
[L1005]                    havoc #t~nondet4;
[L1006]        FCALL       call #t~malloc5 := #Ultimate.alloc(8bv32);
[L1006]                    ~x~0 := #t~malloc5;
[L1007]        FCALL       call write~intINTTYPE4(1bv32, { base: ~x~0!base, offset: ~bvadd32(4bv32, ~x~0!offset) }, 4bv32);
[L1008]        FCALL       call write~$Pointer$(~head~0, { base: ~x~0!base, offset: ~x~0!offset }, 4bv32);
[L1009]                    ~head~0 := ~x~0;
               VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, #t~malloc5!base=2130574326bv32, #t~malloc5!offset=0bv32, ~head~0!base=2130574326bv32, ~head~0!offset=0bv32, ~x~0!base=2130574326bv32, ~x~0!offset=0bv32]
[L1029]                    ~x~0 := ~head~0;
               VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, #t~malloc5!base=2130574326bv32, #t~malloc5!offset=0bv32, ~head~0!base=2130574326bv32, ~head~0!offset=0bv32, ~x~0!base=2130574326bv32, ~x~0!offset=0bv32]
[L1032]        FCALL       call #t~mem13 := read~intINTTYPE4({ base: ~x~0!base, offset: ~bvadd32(4bv32, ~x~0!offset) }, 4bv32);
               VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, #t~malloc5!base=2130574326bv32, #t~malloc5!offset=0bv32, #t~mem13=1bv32, ~head~0!base=2130574326bv32, ~head~0!offset=0bv32, ~x~0!base=2130574326bv32, ~x~0!offset=0bv32]
[L1032-L1035]  COND TRUE   !(1bv32 != #t~mem13)
[L1032]                    havoc #t~mem13;
               VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, #t~malloc5!base=2130574326bv32, #t~malloc5!offset=0bv32, ~head~0!base=2130574326bv32, ~head~0!offset=0bv32, ~x~0!base=2130574326bv32, ~x~0!offset=0bv32]
[L1038]        FCALL       call #t~mem15 := read~$Pointer$({ base: ~x~0!base, offset: ~x~0!offset }, 4bv32);
[L1038]                    ~x~0 := #t~mem15;
[L1038]                    havoc #t~mem15;
               VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, #t~malloc5!base=2130574326bv32, #t~malloc5!offset=0bv32, ~head~0!base=2130574326bv32, ~head~0!offset=0bv32, ~x~0!base=1bv32, ~x~0!offset=0bv32]
[L1039-L1044]  COND FALSE  !(!(~x~0 != { base: 0bv32, offset: 0bv32 }))
[L1041]        FCALL       call #t~mem16 := read~intINTTYPE4({ base: ~x~0!base, offset: ~bvadd32(4bv32, ~x~0!offset) }, 4bv32);
               VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, #t~malloc5!base=2130574326bv32, #t~malloc5!offset=0bv32, #t~mem16=0bv32, ~head~0!base=2130574326bv32, ~head~0!offset=0bv32, ~x~0!base=1bv32, ~x~0!offset=0bv32]
[L1041]        COND TRUE   1bv32 != #t~mem16
[L1041]                    havoc #t~mem16;
               VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, #t~malloc5!base=2130574326bv32, #t~malloc5!offset=0bv32, ~head~0!base=2130574326bv32, ~head~0!offset=0bv32, ~x~0!base=1bv32, ~x~0!offset=0bv32]
[L1042]                    assert false;
               VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, #t~malloc5!base=2130574326bv32, #t~malloc5!offset=0bv32, ~head~0!base=2130574326bv32, ~head~0!offset=0bv32, ~x~0!base=1bv32, ~x~0!offset=0bv32]


[?]            CALL        call ULTIMATE.init();
               VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, old(#NULL!base)=0bv32, old(#NULL!offset)=0bv32]
[?]                        #NULL := { base: 0bv32, offset: 0bv32 };
[?]                        #valid[0bv32] := 0bv1;
               VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, old(#NULL!base)=0bv32, old(#NULL!offset)=0bv32]
[?]            RET         call ULTIMATE.init();
               VAL         [#NULL!base=0bv32, #NULL!offset=0bv32]
[?]            CALL        call #t~ret19 := main();
               VAL         [#NULL!base=0bv32, #NULL!offset=0bv32]
[L988]         FCALL       call #t~malloc0 := #Ultimate.alloc(8bv32);
[L988]                     ~head~0 := #t~malloc0;
[L989]         FCALL       call write~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~head~0!base, offset: ~head~0!offset }, 4bv32);
[L990]         FCALL       call write~intINTTYPE4(0bv32, { base: ~head~0!base, offset: ~bvadd32(4bv32, ~head~0!offset) }, 4bv32);
[L992]                     ~x~0 := ~head~0;
               VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, ~head~0!base=1bv32, ~head~0!offset=0bv32, ~x~0!base=1bv32, ~x~0!offset=0bv32]
[L995-L1002]   COND TRUE   !(0bv32 != #t~nondet1)
[L995]                     havoc #t~nondet1;
               VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, ~head~0!base=1bv32, ~head~0!offset=0bv32, ~x~0!base=1bv32, ~x~0!offset=0bv32]
[L1005-L1026]  COND TRUE   0bv32 != #t~nondet4
[L1005]                    havoc #t~nondet4;
[L1006]        FCALL       call #t~malloc5 := #Ultimate.alloc(8bv32);
[L1006]                    ~x~0 := #t~malloc5;
[L1007]        FCALL       call write~intINTTYPE4(1bv32, { base: ~x~0!base, offset: ~bvadd32(4bv32, ~x~0!offset) }, 4bv32);
[L1008]        FCALL       call write~$Pointer$(~head~0, { base: ~x~0!base, offset: ~x~0!offset }, 4bv32);
[L1009]                    ~head~0 := ~x~0;
               VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, #t~malloc5!base=2130574326bv32, #t~malloc5!offset=0bv32, ~head~0!base=2130574326bv32, ~head~0!offset=0bv32, ~x~0!base=2130574326bv32, ~x~0!offset=0bv32]
[L1029]                    ~x~0 := ~head~0;
               VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, #t~malloc5!base=2130574326bv32, #t~malloc5!offset=0bv32, ~head~0!base=2130574326bv32, ~head~0!offset=0bv32, ~x~0!base=2130574326bv32, ~x~0!offset=0bv32]
[L1032]        FCALL       call #t~mem13 := read~intINTTYPE4({ base: ~x~0!base, offset: ~bvadd32(4bv32, ~x~0!offset) }, 4bv32);
               VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, #t~malloc5!base=2130574326bv32, #t~malloc5!offset=0bv32, #t~mem13=1bv32, ~head~0!base=2130574326bv32, ~head~0!offset=0bv32, ~x~0!base=2130574326bv32, ~x~0!offset=0bv32]
[L1032-L1035]  COND TRUE   !(1bv32 != #t~mem13)
[L1032]                    havoc #t~mem13;
               VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, #t~malloc5!base=2130574326bv32, #t~malloc5!offset=0bv32, ~head~0!base=2130574326bv32, ~head~0!offset=0bv32, ~x~0!base=2130574326bv32, ~x~0!offset=0bv32]
[L1038]        FCALL       call #t~mem15 := read~$Pointer$({ base: ~x~0!base, offset: ~x~0!offset }, 4bv32);
[L1038]                    ~x~0 := #t~mem15;
[L1038]                    havoc #t~mem15;
               VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, #t~malloc5!base=2130574326bv32, #t~malloc5!offset=0bv32, ~head~0!base=2130574326bv32, ~head~0!offset=0bv32, ~x~0!base=1bv32, ~x~0!offset=0bv32]
[L1039-L1044]  COND FALSE  !(!(~x~0 != { base: 0bv32, offset: 0bv32 }))
[L1041]        FCALL       call #t~mem16 := read~intINTTYPE4({ base: ~x~0!base, offset: ~bvadd32(4bv32, ~x~0!offset) }, 4bv32);
               VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, #t~malloc5!base=2130574326bv32, #t~malloc5!offset=0bv32, #t~mem16=0bv32, ~head~0!base=2130574326bv32, ~head~0!offset=0bv32, ~x~0!base=1bv32, ~x~0!offset=0bv32]
[L1041]        COND TRUE   1bv32 != #t~mem16
[L1041]                    havoc #t~mem16;
               VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, #t~malloc5!base=2130574326bv32, #t~malloc5!offset=0bv32, ~head~0!base=2130574326bv32, ~head~0!offset=0bv32, ~x~0!base=1bv32, ~x~0!offset=0bv32]
[L1042]                    assert false;
               VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, #t~malloc5!base=2130574326bv32, #t~malloc5!offset=0bv32, ~head~0!base=2130574326bv32, ~head~0!offset=0bv32, ~x~0!base=1bv32, ~x~0!offset=0bv32]

-----
-----
class de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.CACSL2BoogieBacktranslator
[?]            CALL        call ULTIMATE.init();
               VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, old(#NULL!base)=0bv32, old(#NULL!offset)=0bv32]
[?]                        #NULL := { base: 0bv32, offset: 0bv32 };
[?]                        #valid[0bv32] := 0bv1;
               VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, old(#NULL!base)=0bv32, old(#NULL!offset)=0bv32]
[?]            RET         call ULTIMATE.init();
               VAL         [#NULL!base=0bv32, #NULL!offset=0bv32]
[?]            CALL        call #t~ret19 := main();
               VAL         [#NULL!base=0bv32, #NULL!offset=0bv32]
[L988]         FCALL       call #t~malloc0 := #Ultimate.alloc(8bv32);
[L988]                     ~head~0 := #t~malloc0;
[L989]         FCALL       call write~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~head~0!base, offset: ~head~0!offset }, 4bv32);
[L990]         FCALL       call write~intINTTYPE4(0bv32, { base: ~head~0!base, offset: ~bvadd32(4bv32, ~head~0!offset) }, 4bv32);
[L992]                     ~x~0 := ~head~0;
               VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, ~head~0!base=1bv32, ~head~0!offset=0bv32, ~x~0!base=1bv32, ~x~0!offset=0bv32]
[L995-L1002]   COND TRUE   !(0bv32 != #t~nondet1)
[L995]                     havoc #t~nondet1;
               VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, ~head~0!base=1bv32, ~head~0!offset=0bv32, ~x~0!base=1bv32, ~x~0!offset=0bv32]
[L1005-L1026]  COND TRUE   0bv32 != #t~nondet4
[L1005]                    havoc #t~nondet4;
[L1006]        FCALL       call #t~malloc5 := #Ultimate.alloc(8bv32);
[L1006]                    ~x~0 := #t~malloc5;
[L1007]        FCALL       call write~intINTTYPE4(1bv32, { base: ~x~0!base, offset: ~bvadd32(4bv32, ~x~0!offset) }, 4bv32);
[L1008]        FCALL       call write~$Pointer$(~head~0, { base: ~x~0!base, offset: ~x~0!offset }, 4bv32);
[L1009]                    ~head~0 := ~x~0;
               VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, #t~malloc5!base=2130574326bv32, #t~malloc5!offset=0bv32, ~head~0!base=2130574326bv32, ~head~0!offset=0bv32, ~x~0!base=2130574326bv32, ~x~0!offset=0bv32]
[L1029]                    ~x~0 := ~head~0;
               VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, #t~malloc5!base=2130574326bv32, #t~malloc5!offset=0bv32, ~head~0!base=2130574326bv32, ~head~0!offset=0bv32, ~x~0!base=2130574326bv32, ~x~0!offset=0bv32]
[L1032]        FCALL       call #t~mem13 := read~intINTTYPE4({ base: ~x~0!base, offset: ~bvadd32(4bv32, ~x~0!offset) }, 4bv32);
               VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, #t~malloc5!base=2130574326bv32, #t~malloc5!offset=0bv32, #t~mem13=1bv32, ~head~0!base=2130574326bv32, ~head~0!offset=0bv32, ~x~0!base=2130574326bv32, ~x~0!offset=0bv32]
[L1032-L1035]  COND TRUE   !(1bv32 != #t~mem13)
[L1032]                    havoc #t~mem13;
               VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, #t~malloc5!base=2130574326bv32, #t~malloc5!offset=0bv32, ~head~0!base=2130574326bv32, ~head~0!offset=0bv32, ~x~0!base=2130574326bv32, ~x~0!offset=0bv32]
[L1038]        FCALL       call #t~mem15 := read~$Pointer$({ base: ~x~0!base, offset: ~x~0!offset }, 4bv32);
[L1038]                    ~x~0 := #t~mem15;
[L1038]                    havoc #t~mem15;
               VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, #t~malloc5!base=2130574326bv32, #t~malloc5!offset=0bv32, ~head~0!base=2130574326bv32, ~head~0!offset=0bv32, ~x~0!base=1bv32, ~x~0!offset=0bv32]
[L1039-L1044]  COND FALSE  !(!(~x~0 != { base: 0bv32, offset: 0bv32 }))
[L1041]        FCALL       call #t~mem16 := read~intINTTYPE4({ base: ~x~0!base, offset: ~bvadd32(4bv32, ~x~0!offset) }, 4bv32);
               VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, #t~malloc5!base=2130574326bv32, #t~malloc5!offset=0bv32, #t~mem16=0bv32, ~head~0!base=2130574326bv32, ~head~0!offset=0bv32, ~x~0!base=1bv32, ~x~0!offset=0bv32]
[L1041]        COND TRUE   1bv32 != #t~mem16
[L1041]                    havoc #t~mem16;
               VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, #t~malloc5!base=2130574326bv32, #t~malloc5!offset=0bv32, ~head~0!base=2130574326bv32, ~head~0!offset=0bv32, ~x~0!base=1bv32, ~x~0!offset=0bv32]
[L1042]                    assert false;
               VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, #t~malloc5!base=2130574326bv32, #t~malloc5!offset=0bv32, ~head~0!base=2130574326bv32, ~head~0!offset=0bv32, ~x~0!base=1bv32, ~x~0!offset=0bv32]


[L988]               SLL* head = malloc(sizeof(SLL));
[L989]               head->next = ((void*)0)
[L990]               head->data = 0
[L992]               SLL* x = head;
         VAL         [head={1:0}, malloc(sizeof(SLL))={1:0}, x={1:0}]
[L995]   COND FALSE  !(__VERIFIER_nondet_int())
[L1005]  COND TRUE   __VERIFIER_nondet_int()
[L1006]              x = malloc(sizeof(SLL))
[L1007]              x->data = 1
[L1008]              x->next = head
[L1009]              head = x
         VAL         [head={2130574326:0}, malloc(sizeof(SLL))={2130574326:0}, malloc(sizeof(SLL))={1:0}, x={2130574326:0}]
[L1029]              x = head
         VAL         [head={2130574326:0}, malloc(sizeof(SLL))={2130574326:0}, malloc(sizeof(SLL))={1:0}, x={2130574326:0}]
[L1032]  EXPR        x->data
         VAL         [head={2130574326:0}, malloc(sizeof(SLL))={2130574326:0}, malloc(sizeof(SLL))={1:0}, x={2130574326:0}, x->data=1]
[L1032]  COND FALSE  !(x->data != 1)
[L1038]  EXPR        x->next
[L1038]              x = x->next
[L1039]  COND TRUE   \read(*x)
[L1041]  EXPR        x->data
         VAL         [head={2130574326:0}, malloc(sizeof(SLL))={2130574326:0}, malloc(sizeof(SLL))={1:0}, x={1:0}, x->data=0]
[L1041]  COND TRUE   x->data != 1
[L1042]              __VERIFIER_error()
         VAL         [head={2130574326:0}, malloc(sizeof(SLL))={2130574326:0}, malloc(sizeof(SLL))={1:0}, x={1:0}]

-----
[2018-11-23 11:09:44,536 WARN  L170   areAnnotationChecker]: ULTIMATE.initENTRY has no Hoare annotation
[2018-11-23 11:09:44,536 WARN  L170   areAnnotationChecker]: ULTIMATE.startENTRY has no Hoare annotation
[2018-11-23 11:09:44,536 WARN  L170   areAnnotationChecker]: ULTIMATE.startENTRY has no Hoare annotation
[2018-11-23 11:09:44,536 WARN  L170   areAnnotationChecker]: mainENTRY has no Hoare annotation
[2018-11-23 11:09:44,537 WARN  L170   areAnnotationChecker]: ULTIMATE.initFINAL has no Hoare annotation
[2018-11-23 11:09:44,537 WARN  L170   areAnnotationChecker]: L-1 has no Hoare annotation
[2018-11-23 11:09:44,537 WARN  L170   areAnnotationChecker]: L-1 has no Hoare annotation
[2018-11-23 11:09:44,537 WARN  L170   areAnnotationChecker]: L995-2 has no Hoare annotation
[2018-11-23 11:09:44,537 WARN  L170   areAnnotationChecker]: L995-2 has no Hoare annotation
[2018-11-23 11:09:44,538 WARN  L170   areAnnotationChecker]: L995-2 has no Hoare annotation
[2018-11-23 11:09:44,538 WARN  L170   areAnnotationChecker]: ULTIMATE.initEXIT has no Hoare annotation
[2018-11-23 11:09:44,538 WARN  L170   areAnnotationChecker]: ULTIMATE.startFINAL has no Hoare annotation
[2018-11-23 11:09:44,538 WARN  L170   areAnnotationChecker]: L995-3 has no Hoare annotation
[2018-11-23 11:09:44,538 WARN  L170   areAnnotationChecker]: L995-3 has no Hoare annotation
[2018-11-23 11:09:44,538 WARN  L170   areAnnotationChecker]: L1005-1 has no Hoare annotation
[2018-11-23 11:09:44,539 WARN  L170   areAnnotationChecker]: L1015-3 has no Hoare annotation
[2018-11-23 11:09:44,539 WARN  L170   areAnnotationChecker]: L1015-3 has no Hoare annotation
[2018-11-23 11:09:44,539 WARN  L170   areAnnotationChecker]: L1032-3 has no Hoare annotation
[2018-11-23 11:09:44,539 WARN  L170   areAnnotationChecker]: L1032-3 has no Hoare annotation
[2018-11-23 11:09:44,539 WARN  L170   areAnnotationChecker]: L1015-4 has no Hoare annotation
[2018-11-23 11:09:44,539 WARN  L170   areAnnotationChecker]: L1015-1 has no Hoare annotation
[2018-11-23 11:09:44,540 WARN  L170   areAnnotationChecker]: L1015-1 has no Hoare annotation
[2018-11-23 11:09:44,540 WARN  L170   areAnnotationChecker]: L1032-4 has no Hoare annotation
[2018-11-23 11:09:44,540 WARN  L170   areAnnotationChecker]: L1032-1 has no Hoare annotation
[2018-11-23 11:09:44,540 WARN  L170   areAnnotationChecker]: L1032-1 has no Hoare annotation
[2018-11-23 11:09:44,540 WARN  L170   areAnnotationChecker]: L1017 has no Hoare annotation
[2018-11-23 11:09:44,540 WARN  L170   areAnnotationChecker]: L1017 has no Hoare annotation
[2018-11-23 11:09:44,541 WARN  L170   areAnnotationChecker]: L1039-2 has no Hoare annotation
[2018-11-23 11:09:44,541 WARN  L170   areAnnotationChecker]: L1039-2 has no Hoare annotation
[2018-11-23 11:09:44,541 WARN  L170   areAnnotationChecker]: L1039-2 has no Hoare annotation
[2018-11-23 11:09:44,541 WARN  L170   areAnnotationChecker]: L1039-3 has no Hoare annotation
[2018-11-23 11:09:44,541 WARN  L170   areAnnotationChecker]: L1041 has no Hoare annotation
[2018-11-23 11:09:44,541 WARN  L170   areAnnotationChecker]: L1041 has no Hoare annotation
[2018-11-23 11:09:44,542 WARN  L170   areAnnotationChecker]: L1048-2 has no Hoare annotation
[2018-11-23 11:09:44,542 WARN  L170   areAnnotationChecker]: L1048-2 has no Hoare annotation
[2018-11-23 11:09:44,542 WARN  L170   areAnnotationChecker]: L1048-2 has no Hoare annotation
[2018-11-23 11:09:44,542 WARN  L170   areAnnotationChecker]: L1042-3 has no Hoare annotation
[2018-11-23 11:09:44,542 WARN  L170   areAnnotationChecker]: L1042-3 has no Hoare annotation
[2018-11-23 11:09:44,543 WARN  L170   areAnnotationChecker]: L1042-3 has no Hoare annotation
[2018-11-23 11:09:44,543 WARN  L170   areAnnotationChecker]: L1042-3 has no Hoare annotation
[2018-11-23 11:09:44,543 WARN  L170   areAnnotationChecker]: L1041-1 has no Hoare annotation
[2018-11-23 11:09:44,543 WARN  L170   areAnnotationChecker]: L1048-3 has no Hoare annotation
[2018-11-23 11:09:44,543 WARN  L170   areAnnotationChecker]: L1042-2 has no Hoare annotation
[2018-11-23 11:09:44,543 WARN  L170   areAnnotationChecker]: L1042-2 has no Hoare annotation
[2018-11-23 11:09:44,543 WARN  L170   areAnnotationChecker]: mainFINAL has no Hoare annotation
[2018-11-23 11:09:44,544 WARN  L170   areAnnotationChecker]: mainEXIT has no Hoare annotation
[2018-11-23 11:09:44,544 INFO  L163   areAnnotationChecker]: CFG has 0 edges. 0 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. 0 times interpolants missing.
[2018-11-23 11:09:44,546 INFO  L202        PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 23.11 11:09:44 BoogieIcfgContainer
[2018-11-23 11:09:44,546 INFO  L132        PluginConnector]: ------------------------ END TraceAbstraction----------------------------
[2018-11-23 11:09:44,547 INFO  L113        PluginConnector]: ------------------------Witness Printer----------------------------
[2018-11-23 11:09:44,547 INFO  L271        PluginConnector]: Initializing Witness Printer...
[2018-11-23 11:09:44,547 INFO  L276        PluginConnector]: Witness Printer initialized
[2018-11-23 11:09:44,548 INFO  L185        PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 11:09:42" (3/4) ...
[2018-11-23 11:09:44,550 INFO  L138         WitnessPrinter]: Generating witness for reachability counterexample
-----
class de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder.RCFGBacktranslator
[?]  CALL  call ULTIMATE.init();
     VAL   [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |old(#NULL.base)|=(_ bv0 32), |old(#NULL.offset)|=(_ bv0 32)]
[?]        #NULL.base, #NULL.offset := 0bv32, 0bv32;#valid := #valid[0bv32 := 0bv1];
     VAL   [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |old(#NULL.base)|=(_ bv0 32), |old(#NULL.offset)|=(_ bv0 32)]
[?]        assume true;
     VAL   [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |old(#NULL.base)|=(_ bv0 32), |old(#NULL.offset)|=(_ bv0 32)]
[?]  RET   #110#return;
     VAL   [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32)]
[?]  CALL  call #t~ret19 := main();
     VAL   [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32)]
[?]        call #t~malloc0.base, #t~malloc0.offset := #Ultimate.alloc(8bv32);~head~0.base, ~head~0.offset := #t~malloc0.base, #t~malloc0.offset;call write~$Pointer$(0bv32, 0bv32, ~head~0.base, ~head~0.offset, 4bv32);call write~intINTTYPE4(0bv32, ~head~0.base, ~bvadd32(4bv32, ~head~0.offset), 4bv32);~x~0.base, ~x~0.offset := ~head~0.base, ~head~0.offset;
     VAL   [main_~head~0.base=(_ bv1 32), main_~head~0.offset=(_ bv0 32), main_~x~0.base=(_ bv1 32), main_~x~0.offset=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |main_#t~malloc0.base|=(_ bv1 32), |main_#t~malloc0.offset|=(_ bv0 32)]
[?]        assume !(0bv32 != #t~nondet1);havoc #t~nondet1;
     VAL   [main_~head~0.base=(_ bv1 32), main_~head~0.offset=(_ bv0 32), main_~x~0.base=(_ bv1 32), main_~x~0.offset=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |main_#t~malloc0.base|=(_ bv1 32), |main_#t~malloc0.offset|=(_ bv0 32)]
[?]        assume 0bv32 != #t~nondet4;havoc #t~nondet4;call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(8bv32);~x~0.base, ~x~0.offset := #t~malloc5.base, #t~malloc5.offset;call write~intINTTYPE4(1bv32, ~x~0.base, ~bvadd32(4bv32, ~x~0.offset), 4bv32);call write~$Pointer$(~head~0.base, ~head~0.offset, ~x~0.base, ~x~0.offset, 4bv32);~head~0.base, ~head~0.offset := ~x~0.base, ~x~0.offset;
     VAL   [main_~head~0.base=(_ bv2130574326 32), main_~head~0.offset=(_ bv0 32), main_~x~0.base=(_ bv2130574326 32), main_~x~0.offset=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |main_#t~malloc0.base|=(_ bv1 32), |main_#t~malloc0.offset|=(_ bv0 32), |main_#t~malloc5.base|=(_ bv2130574326 32), |main_#t~malloc5.offset|=(_ bv0 32)]
[?]        ~x~0.base, ~x~0.offset := ~head~0.base, ~head~0.offset;
     VAL   [main_~head~0.base=(_ bv2130574326 32), main_~head~0.offset=(_ bv0 32), main_~x~0.base=(_ bv2130574326 32), main_~x~0.offset=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |main_#t~malloc0.base|=(_ bv1 32), |main_#t~malloc0.offset|=(_ bv0 32), |main_#t~malloc5.base|=(_ bv2130574326 32), |main_#t~malloc5.offset|=(_ bv0 32)]
[?]        call #t~mem13 := read~intINTTYPE4(~x~0.base, ~bvadd32(4bv32, ~x~0.offset), 4bv32);
     VAL   [main_~head~0.base=(_ bv2130574326 32), main_~head~0.offset=(_ bv0 32), main_~x~0.base=(_ bv2130574326 32), main_~x~0.offset=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |main_#t~malloc0.base|=(_ bv1 32), |main_#t~malloc0.offset|=(_ bv0 32), |main_#t~malloc5.base|=(_ bv2130574326 32), |main_#t~malloc5.offset|=(_ bv0 32), |main_#t~mem13|=(_ bv1 32)]
[?]        assume !(1bv32 != #t~mem13);havoc #t~mem13;
     VAL   [main_~head~0.base=(_ bv2130574326 32), main_~head~0.offset=(_ bv0 32), main_~x~0.base=(_ bv2130574326 32), main_~x~0.offset=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |main_#t~malloc0.base|=(_ bv1 32), |main_#t~malloc0.offset|=(_ bv0 32), |main_#t~malloc5.base|=(_ bv2130574326 32), |main_#t~malloc5.offset|=(_ bv0 32)]
[?]        call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~x~0.base, ~x~0.offset, 4bv32);~x~0.base, ~x~0.offset := #t~mem15.base, #t~mem15.offset;havoc #t~mem15.base, #t~mem15.offset;
     VAL   [main_~head~0.base=(_ bv2130574326 32), main_~head~0.offset=(_ bv0 32), main_~x~0.base=(_ bv1 32), main_~x~0.offset=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |main_#t~malloc0.base|=(_ bv1 32), |main_#t~malloc0.offset|=(_ bv0 32), |main_#t~malloc5.base|=(_ bv2130574326 32), |main_#t~malloc5.offset|=(_ bv0 32)]
[?]        assume !!(~x~0.base != 0bv32 || ~x~0.offset != 0bv32);call #t~mem16 := read~intINTTYPE4(~x~0.base, ~bvadd32(4bv32, ~x~0.offset), 4bv32);
     VAL   [main_~head~0.base=(_ bv2130574326 32), main_~head~0.offset=(_ bv0 32), main_~x~0.base=(_ bv1 32), main_~x~0.offset=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |main_#t~malloc0.base|=(_ bv1 32), |main_#t~malloc0.offset|=(_ bv0 32), |main_#t~malloc5.base|=(_ bv2130574326 32), |main_#t~malloc5.offset|=(_ bv0 32), |main_#t~mem16|=(_ bv0 32)]
[?]        assume 1bv32 != #t~mem16;havoc #t~mem16;
     VAL   [main_~head~0.base=(_ bv2130574326 32), main_~head~0.offset=(_ bv0 32), main_~x~0.base=(_ bv1 32), main_~x~0.offset=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |main_#t~malloc0.base|=(_ bv1 32), |main_#t~malloc0.offset|=(_ bv0 32), |main_#t~malloc5.base|=(_ bv2130574326 32), |main_#t~malloc5.offset|=(_ bv0 32)]
[?]        assume !false;
     VAL   [main_~head~0.base=(_ bv2130574326 32), main_~head~0.offset=(_ bv0 32), main_~x~0.base=(_ bv1 32), main_~x~0.offset=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |main_#t~malloc0.base|=(_ bv1 32), |main_#t~malloc0.offset|=(_ bv0 32), |main_#t~malloc5.base|=(_ bv2130574326 32), |main_#t~malloc5.offset|=(_ bv0 32)]


[?]            CALL  call ULTIMATE.init();
               VAL   [#NULL.base=0bv32, #NULL.offset=0bv32, old(#NULL.base)=0bv32, old(#NULL.offset)=0bv32]
[?]                  #NULL.base, #NULL.offset := 0bv32, 0bv32;
[?]                  #valid := #valid[0bv32 := 0bv1];
               VAL   [#NULL.base=0bv32, #NULL.offset=0bv32, old(#NULL.base)=0bv32, old(#NULL.offset)=0bv32]
[?]                  ensures true;
               VAL   [#NULL.base=0bv32, #NULL.offset=0bv32, old(#NULL.base)=0bv32, old(#NULL.offset)=0bv32]
[?]            RET   call ULTIMATE.init();
               VAL   [#NULL.base=0bv32, #NULL.offset=0bv32]
[?]            CALL  call #t~ret19 := main();
               VAL   [#NULL.base=0bv32, #NULL.offset=0bv32]
[L988]               call #t~malloc0.base, #t~malloc0.offset := #Ultimate.alloc(8bv32);
[L988]               ~head~0.base, ~head~0.offset := #t~malloc0.base, #t~malloc0.offset;
[L989]               call write~$Pointer$(0bv32, 0bv32, ~head~0.base, ~head~0.offset, 4bv32);
[L990]               call write~intINTTYPE4(0bv32, ~head~0.base, ~bvadd32(4bv32, ~head~0.offset), 4bv32);
[L992]               ~x~0.base, ~x~0.offset := ~head~0.base, ~head~0.offset;
               VAL   [#NULL.base=0bv32, #NULL.offset=0bv32, #t~malloc0.base=1bv32, #t~malloc0.offset=0bv32, ~head~0.base=1bv32, ~head~0.offset=0bv32, ~x~0.base=1bv32, ~x~0.offset=0bv32]
[L995-L1002]         assume !(0bv32 != #t~nondet1);
[L995]               havoc #t~nondet1;
               VAL   [#NULL.base=0bv32, #NULL.offset=0bv32, #t~malloc0.base=1bv32, #t~malloc0.offset=0bv32, ~head~0.base=1bv32, ~head~0.offset=0bv32, ~x~0.base=1bv32, ~x~0.offset=0bv32]
[L1005-L1026]        assume 0bv32 != #t~nondet4;
[L1005]              havoc #t~nondet4;
[L1006]              call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(8bv32);
[L1006]              ~x~0.base, ~x~0.offset := #t~malloc5.base, #t~malloc5.offset;
[L1007]              call write~intINTTYPE4(1bv32, ~x~0.base, ~bvadd32(4bv32, ~x~0.offset), 4bv32);
[L1008]              call write~$Pointer$(~head~0.base, ~head~0.offset, ~x~0.base, ~x~0.offset, 4bv32);
[L1009]              ~head~0.base, ~head~0.offset := ~x~0.base, ~x~0.offset;
               VAL   [#NULL.base=0bv32, #NULL.offset=0bv32, #t~malloc0.base=1bv32, #t~malloc0.offset=0bv32, #t~malloc5.base=2130574326bv32, #t~malloc5.offset=0bv32, ~head~0.base=2130574326bv32, ~head~0.offset=0bv32, ~x~0.base=2130574326bv32, ~x~0.offset=0bv32]
[L1029]              ~x~0.base, ~x~0.offset := ~head~0.base, ~head~0.offset;
               VAL   [#NULL.base=0bv32, #NULL.offset=0bv32, #t~malloc0.base=1bv32, #t~malloc0.offset=0bv32, #t~malloc5.base=2130574326bv32, #t~malloc5.offset=0bv32, ~head~0.base=2130574326bv32, ~head~0.offset=0bv32, ~x~0.base=2130574326bv32, ~x~0.offset=0bv32]
[L1032]              call #t~mem13 := read~intINTTYPE4(~x~0.base, ~bvadd32(4bv32, ~x~0.offset), 4bv32);
               VAL   [#NULL.base=0bv32, #NULL.offset=0bv32, #t~malloc0.base=1bv32, #t~malloc0.offset=0bv32, #t~malloc5.base=2130574326bv32, #t~malloc5.offset=0bv32, #t~mem13=1bv32, ~head~0.base=2130574326bv32, ~head~0.offset=0bv32, ~x~0.base=2130574326bv32, ~x~0.offset=0bv32]
[L1032-L1035]        assume !(1bv32 != #t~mem13);
[L1032]              havoc #t~mem13;
               VAL   [#NULL.base=0bv32, #NULL.offset=0bv32, #t~malloc0.base=1bv32, #t~malloc0.offset=0bv32, #t~malloc5.base=2130574326bv32, #t~malloc5.offset=0bv32, ~head~0.base=2130574326bv32, ~head~0.offset=0bv32, ~x~0.base=2130574326bv32, ~x~0.offset=0bv32]
[L1038]              call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~x~0.base, ~x~0.offset, 4bv32);
[L1038]              ~x~0.base, ~x~0.offset := #t~mem15.base, #t~mem15.offset;
[L1038]              havoc #t~mem15.base, #t~mem15.offset;
               VAL   [#NULL.base=0bv32, #NULL.offset=0bv32, #t~malloc0.base=1bv32, #t~malloc0.offset=0bv32, #t~malloc5.base=2130574326bv32, #t~malloc5.offset=0bv32, ~head~0.base=2130574326bv32, ~head~0.offset=0bv32, ~x~0.base=1bv32, ~x~0.offset=0bv32]
[L1039-L1044]        assume !!(~x~0.base != 0bv32 || ~x~0.offset != 0bv32);
[L1041]              call #t~mem16 := read~intINTTYPE4(~x~0.base, ~bvadd32(4bv32, ~x~0.offset), 4bv32);
               VAL   [#NULL.base=0bv32, #NULL.offset=0bv32, #t~malloc0.base=1bv32, #t~malloc0.offset=0bv32, #t~malloc5.base=2130574326bv32, #t~malloc5.offset=0bv32, #t~mem16=0bv32, ~head~0.base=2130574326bv32, ~head~0.offset=0bv32, ~x~0.base=1bv32, ~x~0.offset=0bv32]
[L1041-L1042]        assume 1bv32 != #t~mem16;
[L1041]              havoc #t~mem16;
               VAL   [#NULL.base=0bv32, #NULL.offset=0bv32, #t~malloc0.base=1bv32, #t~malloc0.offset=0bv32, #t~malloc5.base=2130574326bv32, #t~malloc5.offset=0bv32, ~head~0.base=2130574326bv32, ~head~0.offset=0bv32, ~x~0.base=1bv32, ~x~0.offset=0bv32]
[L1042]              assert false;
               VAL   [#NULL.base=0bv32, #NULL.offset=0bv32, #t~malloc0.base=1bv32, #t~malloc0.offset=0bv32, #t~malloc5.base=2130574326bv32, #t~malloc5.offset=0bv32, ~head~0.base=2130574326bv32, ~head~0.offset=0bv32, ~x~0.base=1bv32, ~x~0.offset=0bv32]

-----
-----
class de.uni_freiburg.informatik.ultimate.boogie.preprocessor.BoogiePreprocessorBacktranslator
[?]            CALL  call ULTIMATE.init();
               VAL   [#NULL.base=0bv32, #NULL.offset=0bv32, old(#NULL.base)=0bv32, old(#NULL.offset)=0bv32]
[?]                  #NULL.base, #NULL.offset := 0bv32, 0bv32;
[?]                  #valid := #valid[0bv32 := 0bv1];
               VAL   [#NULL.base=0bv32, #NULL.offset=0bv32, old(#NULL.base)=0bv32, old(#NULL.offset)=0bv32]
[?]                  ensures true;
               VAL   [#NULL.base=0bv32, #NULL.offset=0bv32, old(#NULL.base)=0bv32, old(#NULL.offset)=0bv32]
[?]            RET   call ULTIMATE.init();
               VAL   [#NULL.base=0bv32, #NULL.offset=0bv32]
[?]            CALL  call #t~ret19 := main();
               VAL   [#NULL.base=0bv32, #NULL.offset=0bv32]
[L988]               call #t~malloc0.base, #t~malloc0.offset := #Ultimate.alloc(8bv32);
[L988]               ~head~0.base, ~head~0.offset := #t~malloc0.base, #t~malloc0.offset;
[L989]               call write~$Pointer$(0bv32, 0bv32, ~head~0.base, ~head~0.offset, 4bv32);
[L990]               call write~intINTTYPE4(0bv32, ~head~0.base, ~bvadd32(4bv32, ~head~0.offset), 4bv32);
[L992]               ~x~0.base, ~x~0.offset := ~head~0.base, ~head~0.offset;
               VAL   [#NULL.base=0bv32, #NULL.offset=0bv32, #t~malloc0.base=1bv32, #t~malloc0.offset=0bv32, ~head~0.base=1bv32, ~head~0.offset=0bv32, ~x~0.base=1bv32, ~x~0.offset=0bv32]
[L995-L1002]         assume !(0bv32 != #t~nondet1);
[L995]               havoc #t~nondet1;
               VAL   [#NULL.base=0bv32, #NULL.offset=0bv32, #t~malloc0.base=1bv32, #t~malloc0.offset=0bv32, ~head~0.base=1bv32, ~head~0.offset=0bv32, ~x~0.base=1bv32, ~x~0.offset=0bv32]
[L1005-L1026]        assume 0bv32 != #t~nondet4;
[L1005]              havoc #t~nondet4;
[L1006]              call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(8bv32);
[L1006]              ~x~0.base, ~x~0.offset := #t~malloc5.base, #t~malloc5.offset;
[L1007]              call write~intINTTYPE4(1bv32, ~x~0.base, ~bvadd32(4bv32, ~x~0.offset), 4bv32);
[L1008]              call write~$Pointer$(~head~0.base, ~head~0.offset, ~x~0.base, ~x~0.offset, 4bv32);
[L1009]              ~head~0.base, ~head~0.offset := ~x~0.base, ~x~0.offset;
               VAL   [#NULL.base=0bv32, #NULL.offset=0bv32, #t~malloc0.base=1bv32, #t~malloc0.offset=0bv32, #t~malloc5.base=2130574326bv32, #t~malloc5.offset=0bv32, ~head~0.base=2130574326bv32, ~head~0.offset=0bv32, ~x~0.base=2130574326bv32, ~x~0.offset=0bv32]
[L1029]              ~x~0.base, ~x~0.offset := ~head~0.base, ~head~0.offset;
               VAL   [#NULL.base=0bv32, #NULL.offset=0bv32, #t~malloc0.base=1bv32, #t~malloc0.offset=0bv32, #t~malloc5.base=2130574326bv32, #t~malloc5.offset=0bv32, ~head~0.base=2130574326bv32, ~head~0.offset=0bv32, ~x~0.base=2130574326bv32, ~x~0.offset=0bv32]
[L1032]              call #t~mem13 := read~intINTTYPE4(~x~0.base, ~bvadd32(4bv32, ~x~0.offset), 4bv32);
               VAL   [#NULL.base=0bv32, #NULL.offset=0bv32, #t~malloc0.base=1bv32, #t~malloc0.offset=0bv32, #t~malloc5.base=2130574326bv32, #t~malloc5.offset=0bv32, #t~mem13=1bv32, ~head~0.base=2130574326bv32, ~head~0.offset=0bv32, ~x~0.base=2130574326bv32, ~x~0.offset=0bv32]
[L1032-L1035]        assume !(1bv32 != #t~mem13);
[L1032]              havoc #t~mem13;
               VAL   [#NULL.base=0bv32, #NULL.offset=0bv32, #t~malloc0.base=1bv32, #t~malloc0.offset=0bv32, #t~malloc5.base=2130574326bv32, #t~malloc5.offset=0bv32, ~head~0.base=2130574326bv32, ~head~0.offset=0bv32, ~x~0.base=2130574326bv32, ~x~0.offset=0bv32]
[L1038]              call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~x~0.base, ~x~0.offset, 4bv32);
[L1038]              ~x~0.base, ~x~0.offset := #t~mem15.base, #t~mem15.offset;
[L1038]              havoc #t~mem15.base, #t~mem15.offset;
               VAL   [#NULL.base=0bv32, #NULL.offset=0bv32, #t~malloc0.base=1bv32, #t~malloc0.offset=0bv32, #t~malloc5.base=2130574326bv32, #t~malloc5.offset=0bv32, ~head~0.base=2130574326bv32, ~head~0.offset=0bv32, ~x~0.base=1bv32, ~x~0.offset=0bv32]
[L1039-L1044]        assume !!(~x~0.base != 0bv32 || ~x~0.offset != 0bv32);
[L1041]              call #t~mem16 := read~intINTTYPE4(~x~0.base, ~bvadd32(4bv32, ~x~0.offset), 4bv32);
               VAL   [#NULL.base=0bv32, #NULL.offset=0bv32, #t~malloc0.base=1bv32, #t~malloc0.offset=0bv32, #t~malloc5.base=2130574326bv32, #t~malloc5.offset=0bv32, #t~mem16=0bv32, ~head~0.base=2130574326bv32, ~head~0.offset=0bv32, ~x~0.base=1bv32, ~x~0.offset=0bv32]
[L1041-L1042]        assume 1bv32 != #t~mem16;
[L1041]              havoc #t~mem16;
               VAL   [#NULL.base=0bv32, #NULL.offset=0bv32, #t~malloc0.base=1bv32, #t~malloc0.offset=0bv32, #t~malloc5.base=2130574326bv32, #t~malloc5.offset=0bv32, ~head~0.base=2130574326bv32, ~head~0.offset=0bv32, ~x~0.base=1bv32, ~x~0.offset=0bv32]
[L1042]              assert false;
               VAL   [#NULL.base=0bv32, #NULL.offset=0bv32, #t~malloc0.base=1bv32, #t~malloc0.offset=0bv32, #t~malloc5.base=2130574326bv32, #t~malloc5.offset=0bv32, ~head~0.base=2130574326bv32, ~head~0.offset=0bv32, ~x~0.base=1bv32, ~x~0.offset=0bv32]


[?]            CALL        call ULTIMATE.init();
               VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, old(#NULL!base)=0bv32, old(#NULL!offset)=0bv32]
[?]                        #NULL := { base: 0bv32, offset: 0bv32 };
[?]                        #valid[0bv32] := 0bv1;
               VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, old(#NULL!base)=0bv32, old(#NULL!offset)=0bv32]
[?]            RET         call ULTIMATE.init();
               VAL         [#NULL!base=0bv32, #NULL!offset=0bv32]
[?]            CALL        call #t~ret19 := main();
               VAL         [#NULL!base=0bv32, #NULL!offset=0bv32]
[L988]         FCALL       call #t~malloc0 := #Ultimate.alloc(8bv32);
[L988]                     ~head~0 := #t~malloc0;
[L989]         FCALL       call write~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~head~0!base, offset: ~head~0!offset }, 4bv32);
[L990]         FCALL       call write~intINTTYPE4(0bv32, { base: ~head~0!base, offset: ~bvadd32(4bv32, ~head~0!offset) }, 4bv32);
[L992]                     ~x~0 := ~head~0;
               VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, ~head~0!base=1bv32, ~head~0!offset=0bv32, ~x~0!base=1bv32, ~x~0!offset=0bv32]
[L995-L1002]   COND TRUE   !(0bv32 != #t~nondet1)
[L995]                     havoc #t~nondet1;
               VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, ~head~0!base=1bv32, ~head~0!offset=0bv32, ~x~0!base=1bv32, ~x~0!offset=0bv32]
[L1005-L1026]  COND TRUE   0bv32 != #t~nondet4
[L1005]                    havoc #t~nondet4;
[L1006]        FCALL       call #t~malloc5 := #Ultimate.alloc(8bv32);
[L1006]                    ~x~0 := #t~malloc5;
[L1007]        FCALL       call write~intINTTYPE4(1bv32, { base: ~x~0!base, offset: ~bvadd32(4bv32, ~x~0!offset) }, 4bv32);
[L1008]        FCALL       call write~$Pointer$(~head~0, { base: ~x~0!base, offset: ~x~0!offset }, 4bv32);
[L1009]                    ~head~0 := ~x~0;
               VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, #t~malloc5!base=2130574326bv32, #t~malloc5!offset=0bv32, ~head~0!base=2130574326bv32, ~head~0!offset=0bv32, ~x~0!base=2130574326bv32, ~x~0!offset=0bv32]
[L1029]                    ~x~0 := ~head~0;
               VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, #t~malloc5!base=2130574326bv32, #t~malloc5!offset=0bv32, ~head~0!base=2130574326bv32, ~head~0!offset=0bv32, ~x~0!base=2130574326bv32, ~x~0!offset=0bv32]
[L1032]        FCALL       call #t~mem13 := read~intINTTYPE4({ base: ~x~0!base, offset: ~bvadd32(4bv32, ~x~0!offset) }, 4bv32);
               VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, #t~malloc5!base=2130574326bv32, #t~malloc5!offset=0bv32, #t~mem13=1bv32, ~head~0!base=2130574326bv32, ~head~0!offset=0bv32, ~x~0!base=2130574326bv32, ~x~0!offset=0bv32]
[L1032-L1035]  COND TRUE   !(1bv32 != #t~mem13)
[L1032]                    havoc #t~mem13;
               VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, #t~malloc5!base=2130574326bv32, #t~malloc5!offset=0bv32, ~head~0!base=2130574326bv32, ~head~0!offset=0bv32, ~x~0!base=2130574326bv32, ~x~0!offset=0bv32]
[L1038]        FCALL       call #t~mem15 := read~$Pointer$({ base: ~x~0!base, offset: ~x~0!offset }, 4bv32);
[L1038]                    ~x~0 := #t~mem15;
[L1038]                    havoc #t~mem15;
               VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, #t~malloc5!base=2130574326bv32, #t~malloc5!offset=0bv32, ~head~0!base=2130574326bv32, ~head~0!offset=0bv32, ~x~0!base=1bv32, ~x~0!offset=0bv32]
[L1039-L1044]  COND FALSE  !(!(~x~0 != { base: 0bv32, offset: 0bv32 }))
[L1041]        FCALL       call #t~mem16 := read~intINTTYPE4({ base: ~x~0!base, offset: ~bvadd32(4bv32, ~x~0!offset) }, 4bv32);
               VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, #t~malloc5!base=2130574326bv32, #t~malloc5!offset=0bv32, #t~mem16=0bv32, ~head~0!base=2130574326bv32, ~head~0!offset=0bv32, ~x~0!base=1bv32, ~x~0!offset=0bv32]
[L1041]        COND TRUE   1bv32 != #t~mem16
[L1041]                    havoc #t~mem16;
               VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, #t~malloc5!base=2130574326bv32, #t~malloc5!offset=0bv32, ~head~0!base=2130574326bv32, ~head~0!offset=0bv32, ~x~0!base=1bv32, ~x~0!offset=0bv32]
[L1042]                    assert false;
               VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, #t~malloc5!base=2130574326bv32, #t~malloc5!offset=0bv32, ~head~0!base=2130574326bv32, ~head~0!offset=0bv32, ~x~0!base=1bv32, ~x~0!offset=0bv32]

-----
-----
class de.uni_freiburg.informatik.ultimate.boogie.procedureinliner.backtranslation.InlinerBacktranslator
[?]            CALL        call ULTIMATE.init();
               VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, old(#NULL!base)=0bv32, old(#NULL!offset)=0bv32]
[?]                        #NULL := { base: 0bv32, offset: 0bv32 };
[?]                        #valid[0bv32] := 0bv1;
               VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, old(#NULL!base)=0bv32, old(#NULL!offset)=0bv32]
[?]            RET         call ULTIMATE.init();
               VAL         [#NULL!base=0bv32, #NULL!offset=0bv32]
[?]            CALL        call #t~ret19 := main();
               VAL         [#NULL!base=0bv32, #NULL!offset=0bv32]
[L988]         FCALL       call #t~malloc0 := #Ultimate.alloc(8bv32);
[L988]                     ~head~0 := #t~malloc0;
[L989]         FCALL       call write~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~head~0!base, offset: ~head~0!offset }, 4bv32);
[L990]         FCALL       call write~intINTTYPE4(0bv32, { base: ~head~0!base, offset: ~bvadd32(4bv32, ~head~0!offset) }, 4bv32);
[L992]                     ~x~0 := ~head~0;
               VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, ~head~0!base=1bv32, ~head~0!offset=0bv32, ~x~0!base=1bv32, ~x~0!offset=0bv32]
[L995-L1002]   COND TRUE   !(0bv32 != #t~nondet1)
[L995]                     havoc #t~nondet1;
               VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, ~head~0!base=1bv32, ~head~0!offset=0bv32, ~x~0!base=1bv32, ~x~0!offset=0bv32]
[L1005-L1026]  COND TRUE   0bv32 != #t~nondet4
[L1005]                    havoc #t~nondet4;
[L1006]        FCALL       call #t~malloc5 := #Ultimate.alloc(8bv32);
[L1006]                    ~x~0 := #t~malloc5;
[L1007]        FCALL       call write~intINTTYPE4(1bv32, { base: ~x~0!base, offset: ~bvadd32(4bv32, ~x~0!offset) }, 4bv32);
[L1008]        FCALL       call write~$Pointer$(~head~0, { base: ~x~0!base, offset: ~x~0!offset }, 4bv32);
[L1009]                    ~head~0 := ~x~0;
               VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, #t~malloc5!base=2130574326bv32, #t~malloc5!offset=0bv32, ~head~0!base=2130574326bv32, ~head~0!offset=0bv32, ~x~0!base=2130574326bv32, ~x~0!offset=0bv32]
[L1029]                    ~x~0 := ~head~0;
               VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, #t~malloc5!base=2130574326bv32, #t~malloc5!offset=0bv32, ~head~0!base=2130574326bv32, ~head~0!offset=0bv32, ~x~0!base=2130574326bv32, ~x~0!offset=0bv32]
[L1032]        FCALL       call #t~mem13 := read~intINTTYPE4({ base: ~x~0!base, offset: ~bvadd32(4bv32, ~x~0!offset) }, 4bv32);
               VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, #t~malloc5!base=2130574326bv32, #t~malloc5!offset=0bv32, #t~mem13=1bv32, ~head~0!base=2130574326bv32, ~head~0!offset=0bv32, ~x~0!base=2130574326bv32, ~x~0!offset=0bv32]
[L1032-L1035]  COND TRUE   !(1bv32 != #t~mem13)
[L1032]                    havoc #t~mem13;
               VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, #t~malloc5!base=2130574326bv32, #t~malloc5!offset=0bv32, ~head~0!base=2130574326bv32, ~head~0!offset=0bv32, ~x~0!base=2130574326bv32, ~x~0!offset=0bv32]
[L1038]        FCALL       call #t~mem15 := read~$Pointer$({ base: ~x~0!base, offset: ~x~0!offset }, 4bv32);
[L1038]                    ~x~0 := #t~mem15;
[L1038]                    havoc #t~mem15;
               VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, #t~malloc5!base=2130574326bv32, #t~malloc5!offset=0bv32, ~head~0!base=2130574326bv32, ~head~0!offset=0bv32, ~x~0!base=1bv32, ~x~0!offset=0bv32]
[L1039-L1044]  COND FALSE  !(!(~x~0 != { base: 0bv32, offset: 0bv32 }))
[L1041]        FCALL       call #t~mem16 := read~intINTTYPE4({ base: ~x~0!base, offset: ~bvadd32(4bv32, ~x~0!offset) }, 4bv32);
               VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, #t~malloc5!base=2130574326bv32, #t~malloc5!offset=0bv32, #t~mem16=0bv32, ~head~0!base=2130574326bv32, ~head~0!offset=0bv32, ~x~0!base=1bv32, ~x~0!offset=0bv32]
[L1041]        COND TRUE   1bv32 != #t~mem16
[L1041]                    havoc #t~mem16;
               VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, #t~malloc5!base=2130574326bv32, #t~malloc5!offset=0bv32, ~head~0!base=2130574326bv32, ~head~0!offset=0bv32, ~x~0!base=1bv32, ~x~0!offset=0bv32]
[L1042]                    assert false;
               VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, #t~malloc5!base=2130574326bv32, #t~malloc5!offset=0bv32, ~head~0!base=2130574326bv32, ~head~0!offset=0bv32, ~x~0!base=1bv32, ~x~0!offset=0bv32]


[?]            CALL        call ULTIMATE.init();
               VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, old(#NULL!base)=0bv32, old(#NULL!offset)=0bv32]
[?]                        #NULL := { base: 0bv32, offset: 0bv32 };
[?]                        #valid[0bv32] := 0bv1;
               VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, old(#NULL!base)=0bv32, old(#NULL!offset)=0bv32]
[?]            RET         call ULTIMATE.init();
               VAL         [#NULL!base=0bv32, #NULL!offset=0bv32]
[?]            CALL        call #t~ret19 := main();
               VAL         [#NULL!base=0bv32, #NULL!offset=0bv32]
[L988]         FCALL       call #t~malloc0 := #Ultimate.alloc(8bv32);
[L988]                     ~head~0 := #t~malloc0;
[L989]         FCALL       call write~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~head~0!base, offset: ~head~0!offset }, 4bv32);
[L990]         FCALL       call write~intINTTYPE4(0bv32, { base: ~head~0!base, offset: ~bvadd32(4bv32, ~head~0!offset) }, 4bv32);
[L992]                     ~x~0 := ~head~0;
               VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, ~head~0!base=1bv32, ~head~0!offset=0bv32, ~x~0!base=1bv32, ~x~0!offset=0bv32]
[L995-L1002]   COND TRUE   !(0bv32 != #t~nondet1)
[L995]                     havoc #t~nondet1;
               VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, ~head~0!base=1bv32, ~head~0!offset=0bv32, ~x~0!base=1bv32, ~x~0!offset=0bv32]
[L1005-L1026]  COND TRUE   0bv32 != #t~nondet4
[L1005]                    havoc #t~nondet4;
[L1006]        FCALL       call #t~malloc5 := #Ultimate.alloc(8bv32);
[L1006]                    ~x~0 := #t~malloc5;
[L1007]        FCALL       call write~intINTTYPE4(1bv32, { base: ~x~0!base, offset: ~bvadd32(4bv32, ~x~0!offset) }, 4bv32);
[L1008]        FCALL       call write~$Pointer$(~head~0, { base: ~x~0!base, offset: ~x~0!offset }, 4bv32);
[L1009]                    ~head~0 := ~x~0;
               VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, #t~malloc5!base=2130574326bv32, #t~malloc5!offset=0bv32, ~head~0!base=2130574326bv32, ~head~0!offset=0bv32, ~x~0!base=2130574326bv32, ~x~0!offset=0bv32]
[L1029]                    ~x~0 := ~head~0;
               VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, #t~malloc5!base=2130574326bv32, #t~malloc5!offset=0bv32, ~head~0!base=2130574326bv32, ~head~0!offset=0bv32, ~x~0!base=2130574326bv32, ~x~0!offset=0bv32]
[L1032]        FCALL       call #t~mem13 := read~intINTTYPE4({ base: ~x~0!base, offset: ~bvadd32(4bv32, ~x~0!offset) }, 4bv32);
               VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, #t~malloc5!base=2130574326bv32, #t~malloc5!offset=0bv32, #t~mem13=1bv32, ~head~0!base=2130574326bv32, ~head~0!offset=0bv32, ~x~0!base=2130574326bv32, ~x~0!offset=0bv32]
[L1032-L1035]  COND TRUE   !(1bv32 != #t~mem13)
[L1032]                    havoc #t~mem13;
               VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, #t~malloc5!base=2130574326bv32, #t~malloc5!offset=0bv32, ~head~0!base=2130574326bv32, ~head~0!offset=0bv32, ~x~0!base=2130574326bv32, ~x~0!offset=0bv32]
[L1038]        FCALL       call #t~mem15 := read~$Pointer$({ base: ~x~0!base, offset: ~x~0!offset }, 4bv32);
[L1038]                    ~x~0 := #t~mem15;
[L1038]                    havoc #t~mem15;
               VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, #t~malloc5!base=2130574326bv32, #t~malloc5!offset=0bv32, ~head~0!base=2130574326bv32, ~head~0!offset=0bv32, ~x~0!base=1bv32, ~x~0!offset=0bv32]
[L1039-L1044]  COND FALSE  !(!(~x~0 != { base: 0bv32, offset: 0bv32 }))
[L1041]        FCALL       call #t~mem16 := read~intINTTYPE4({ base: ~x~0!base, offset: ~bvadd32(4bv32, ~x~0!offset) }, 4bv32);
               VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, #t~malloc5!base=2130574326bv32, #t~malloc5!offset=0bv32, #t~mem16=0bv32, ~head~0!base=2130574326bv32, ~head~0!offset=0bv32, ~x~0!base=1bv32, ~x~0!offset=0bv32]
[L1041]        COND TRUE   1bv32 != #t~mem16
[L1041]                    havoc #t~mem16;
               VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, #t~malloc5!base=2130574326bv32, #t~malloc5!offset=0bv32, ~head~0!base=2130574326bv32, ~head~0!offset=0bv32, ~x~0!base=1bv32, ~x~0!offset=0bv32]
[L1042]                    assert false;
               VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, #t~malloc5!base=2130574326bv32, #t~malloc5!offset=0bv32, ~head~0!base=2130574326bv32, ~head~0!offset=0bv32, ~x~0!base=1bv32, ~x~0!offset=0bv32]

-----
-----
class de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.CACSL2BoogieBacktranslator
[?]            CALL        call ULTIMATE.init();
               VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, old(#NULL!base)=0bv32, old(#NULL!offset)=0bv32]
[?]                        #NULL := { base: 0bv32, offset: 0bv32 };
[?]                        #valid[0bv32] := 0bv1;
               VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, old(#NULL!base)=0bv32, old(#NULL!offset)=0bv32]
[?]            RET         call ULTIMATE.init();
               VAL         [#NULL!base=0bv32, #NULL!offset=0bv32]
[?]            CALL        call #t~ret19 := main();
               VAL         [#NULL!base=0bv32, #NULL!offset=0bv32]
[L988]         FCALL       call #t~malloc0 := #Ultimate.alloc(8bv32);
[L988]                     ~head~0 := #t~malloc0;
[L989]         FCALL       call write~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~head~0!base, offset: ~head~0!offset }, 4bv32);
[L990]         FCALL       call write~intINTTYPE4(0bv32, { base: ~head~0!base, offset: ~bvadd32(4bv32, ~head~0!offset) }, 4bv32);
[L992]                     ~x~0 := ~head~0;
               VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, ~head~0!base=1bv32, ~head~0!offset=0bv32, ~x~0!base=1bv32, ~x~0!offset=0bv32]
[L995-L1002]   COND TRUE   !(0bv32 != #t~nondet1)
[L995]                     havoc #t~nondet1;
               VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, ~head~0!base=1bv32, ~head~0!offset=0bv32, ~x~0!base=1bv32, ~x~0!offset=0bv32]
[L1005-L1026]  COND TRUE   0bv32 != #t~nondet4
[L1005]                    havoc #t~nondet4;
[L1006]        FCALL       call #t~malloc5 := #Ultimate.alloc(8bv32);
[L1006]                    ~x~0 := #t~malloc5;
[L1007]        FCALL       call write~intINTTYPE4(1bv32, { base: ~x~0!base, offset: ~bvadd32(4bv32, ~x~0!offset) }, 4bv32);
[L1008]        FCALL       call write~$Pointer$(~head~0, { base: ~x~0!base, offset: ~x~0!offset }, 4bv32);
[L1009]                    ~head~0 := ~x~0;
               VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, #t~malloc5!base=2130574326bv32, #t~malloc5!offset=0bv32, ~head~0!base=2130574326bv32, ~head~0!offset=0bv32, ~x~0!base=2130574326bv32, ~x~0!offset=0bv32]
[L1029]                    ~x~0 := ~head~0;
               VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, #t~malloc5!base=2130574326bv32, #t~malloc5!offset=0bv32, ~head~0!base=2130574326bv32, ~head~0!offset=0bv32, ~x~0!base=2130574326bv32, ~x~0!offset=0bv32]
[L1032]        FCALL       call #t~mem13 := read~intINTTYPE4({ base: ~x~0!base, offset: ~bvadd32(4bv32, ~x~0!offset) }, 4bv32);
               VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, #t~malloc5!base=2130574326bv32, #t~malloc5!offset=0bv32, #t~mem13=1bv32, ~head~0!base=2130574326bv32, ~head~0!offset=0bv32, ~x~0!base=2130574326bv32, ~x~0!offset=0bv32]
[L1032-L1035]  COND TRUE   !(1bv32 != #t~mem13)
[L1032]                    havoc #t~mem13;
               VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, #t~malloc5!base=2130574326bv32, #t~malloc5!offset=0bv32, ~head~0!base=2130574326bv32, ~head~0!offset=0bv32, ~x~0!base=2130574326bv32, ~x~0!offset=0bv32]
[L1038]        FCALL       call #t~mem15 := read~$Pointer$({ base: ~x~0!base, offset: ~x~0!offset }, 4bv32);
[L1038]                    ~x~0 := #t~mem15;
[L1038]                    havoc #t~mem15;
               VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, #t~malloc5!base=2130574326bv32, #t~malloc5!offset=0bv32, ~head~0!base=2130574326bv32, ~head~0!offset=0bv32, ~x~0!base=1bv32, ~x~0!offset=0bv32]
[L1039-L1044]  COND FALSE  !(!(~x~0 != { base: 0bv32, offset: 0bv32 }))
[L1041]        FCALL       call #t~mem16 := read~intINTTYPE4({ base: ~x~0!base, offset: ~bvadd32(4bv32, ~x~0!offset) }, 4bv32);
               VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, #t~malloc5!base=2130574326bv32, #t~malloc5!offset=0bv32, #t~mem16=0bv32, ~head~0!base=2130574326bv32, ~head~0!offset=0bv32, ~x~0!base=1bv32, ~x~0!offset=0bv32]
[L1041]        COND TRUE   1bv32 != #t~mem16
[L1041]                    havoc #t~mem16;
               VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, #t~malloc5!base=2130574326bv32, #t~malloc5!offset=0bv32, ~head~0!base=2130574326bv32, ~head~0!offset=0bv32, ~x~0!base=1bv32, ~x~0!offset=0bv32]
[L1042]                    assert false;
               VAL         [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc0!base=1bv32, #t~malloc0!offset=0bv32, #t~malloc5!base=2130574326bv32, #t~malloc5!offset=0bv32, ~head~0!base=2130574326bv32, ~head~0!offset=0bv32, ~x~0!base=1bv32, ~x~0!offset=0bv32]


[L988]               SLL* head = malloc(sizeof(SLL));
[L989]               head->next = ((void*)0)
[L990]               head->data = 0
[L992]               SLL* x = head;
         VAL         [head={1:0}, malloc(sizeof(SLL))={1:0}, x={1:0}]
[L995]   COND FALSE  !(__VERIFIER_nondet_int())
[L1005]  COND TRUE   __VERIFIER_nondet_int()
[L1006]              x = malloc(sizeof(SLL))
[L1007]              x->data = 1
[L1008]              x->next = head
[L1009]              head = x
         VAL         [head={2130574326:0}, malloc(sizeof(SLL))={2130574326:0}, malloc(sizeof(SLL))={1:0}, x={2130574326:0}]
[L1029]              x = head
         VAL         [head={2130574326:0}, malloc(sizeof(SLL))={2130574326:0}, malloc(sizeof(SLL))={1:0}, x={2130574326:0}]
[L1032]  EXPR        x->data
         VAL         [head={2130574326:0}, malloc(sizeof(SLL))={2130574326:0}, malloc(sizeof(SLL))={1:0}, x={2130574326:0}, x->data=1]
[L1032]  COND FALSE  !(x->data != 1)
[L1038]  EXPR        x->next
[L1038]              x = x->next
[L1039]  COND TRUE   \read(*x)
[L1041]  EXPR        x->data
         VAL         [head={2130574326:0}, malloc(sizeof(SLL))={2130574326:0}, malloc(sizeof(SLL))={1:0}, x={1:0}, x->data=0]
[L1041]  COND TRUE   x->data != 1
[L1042]              __VERIFIER_error()
         VAL         [head={2130574326:0}, malloc(sizeof(SLL))={2130574326:0}, malloc(sizeof(SLL))={1:0}, x={1:0}]

-----
[2018-11-23 11:09:44,649 INFO  L145         WitnessManager]: Wrote witness to /storage/repos/svcomp/c/forester-heap/sll-simple-white-blue_false-unreach-call_false-valid-memcleanup.i-witness.graphml
[2018-11-23 11:09:44,649 INFO  L132        PluginConnector]: ------------------------ END Witness Printer----------------------------
[2018-11-23 11:09:44,651 INFO  L168              Benchmark]: Toolchain (without parser) took 3632.11 ms. Allocated memory was 1.5 GB in the beginning and 2.3 GB in the end (delta: 740.3 MB). Free memory was 1.4 GB in the beginning and 2.1 GB in the end (delta: -648.7 MB). Peak memory consumption was 91.6 MB. Max. memory is 7.1 GB.
[2018-11-23 11:09:44,654 INFO  L168              Benchmark]: CDTParser took 0.21 ms. Allocated memory is still 1.5 GB. Free memory is still 1.5 GB. There was no memory consumed. Max. memory is 7.1 GB.
[2018-11-23 11:09:44,654 INFO  L168              Benchmark]: CACSL2BoogieTranslator took 670.24 ms. Allocated memory is still 1.5 GB. Free memory was 1.4 GB in the beginning and 1.4 GB in the end (delta: 31.7 MB). Peak memory consumption was 31.7 MB. Max. memory is 7.1 GB.
[2018-11-23 11:09:44,656 INFO  L168              Benchmark]: Boogie Procedure Inliner took 125.56 ms. Allocated memory was 1.5 GB in the beginning and 2.3 GB in the end (delta: 740.3 MB). Free memory was 1.4 GB in the beginning and 2.2 GB in the end (delta: -819.1 MB). Peak memory consumption was 16.3 MB. Max. memory is 7.1 GB.
[2018-11-23 11:09:44,658 INFO  L168              Benchmark]: Boogie Preprocessor took 52.24 ms. Allocated memory is still 2.3 GB. Free memory is still 2.2 GB. There was no memory consumed. Max. memory is 7.1 GB.
[2018-11-23 11:09:44,662 INFO  L168              Benchmark]: RCFGBuilder took 1041.44 ms. Allocated memory is still 2.3 GB. Free memory was 2.2 GB in the beginning and 2.2 GB in the end (delta: 36.7 MB). Peak memory consumption was 36.7 MB. Max. memory is 7.1 GB.
[2018-11-23 11:09:44,662 INFO  L168              Benchmark]: TraceAbstraction took 1633.35 ms. Allocated memory is still 2.3 GB. Free memory was 2.2 GB in the beginning and 2.1 GB in the end (delta: 89.0 MB). Peak memory consumption was 89.0 MB. Max. memory is 7.1 GB.
[2018-11-23 11:09:44,663 INFO  L168              Benchmark]: Witness Printer took 102.48 ms. Allocated memory is still 2.3 GB. Free memory was 2.1 GB in the beginning and 2.1 GB in the end (delta: 13.1 MB). Peak memory consumption was 13.1 MB. Max. memory is 7.1 GB.
[2018-11-23 11:09:44,673 INFO  L336   ainManager$Toolchain]: #######################  End [Toolchain 1] #######################
 --- Results ---
 * Results from de.uni_freiburg.informatik.ultimate.core:
  - GenericResult: Assertions are enabled
    Assertions are enabled
  - StatisticsResult: Toolchain Benchmarks
    Benchmark results are:
 * CDTParser took 0.21 ms. Allocated memory is still 1.5 GB. Free memory is still 1.5 GB. There was no memory consumed. Max. memory is 7.1 GB.
 * CACSL2BoogieTranslator took 670.24 ms. Allocated memory is still 1.5 GB. Free memory was 1.4 GB in the beginning and 1.4 GB in the end (delta: 31.7 MB). Peak memory consumption was 31.7 MB. Max. memory is 7.1 GB.
 * Boogie Procedure Inliner took 125.56 ms. Allocated memory was 1.5 GB in the beginning and 2.3 GB in the end (delta: 740.3 MB). Free memory was 1.4 GB in the beginning and 2.2 GB in the end (delta: -819.1 MB). Peak memory consumption was 16.3 MB. Max. memory is 7.1 GB.
 * Boogie Preprocessor took 52.24 ms. Allocated memory is still 2.3 GB. Free memory is still 2.2 GB. There was no memory consumed. Max. memory is 7.1 GB.
 * RCFGBuilder took 1041.44 ms. Allocated memory is still 2.3 GB. Free memory was 2.2 GB in the beginning and 2.2 GB in the end (delta: 36.7 MB). Peak memory consumption was 36.7 MB. Max. memory is 7.1 GB.
 * TraceAbstraction took 1633.35 ms. Allocated memory is still 2.3 GB. Free memory was 2.2 GB in the beginning and 2.1 GB in the end (delta: 89.0 MB). Peak memory consumption was 89.0 MB. Max. memory is 7.1 GB.
 * Witness Printer took 102.48 ms. Allocated memory is still 2.3 GB. Free memory was 2.1 GB in the beginning and 2.1 GB in the end (delta: 13.1 MB). Peak memory consumption was 13.1 MB. Max. memory is 7.1 GB.
 * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction:
  - CounterExampleResult [Line: 1042]: a call of __VERIFIER_error() is reachable
    a call of __VERIFIER_error() is reachable
We found a FailurePath: 
[L988]               SLL* head = malloc(sizeof(SLL));
[L989]               head->next = ((void*)0)
[L990]               head->data = 0
[L992]               SLL* x = head;
         VAL         [head={1:0}, malloc(sizeof(SLL))={1:0}, x={1:0}]
[L995]   COND FALSE  !(__VERIFIER_nondet_int())
[L1005]  COND TRUE   __VERIFIER_nondet_int()
[L1006]              x = malloc(sizeof(SLL))
[L1007]              x->data = 1
[L1008]              x->next = head
[L1009]              head = x
         VAL         [head={2130574326:0}, malloc(sizeof(SLL))={2130574326:0}, malloc(sizeof(SLL))={1:0}, x={2130574326:0}]
[L1029]              x = head
         VAL         [head={2130574326:0}, malloc(sizeof(SLL))={2130574326:0}, malloc(sizeof(SLL))={1:0}, x={2130574326:0}]
[L1032]  EXPR        x->data
         VAL         [head={2130574326:0}, malloc(sizeof(SLL))={2130574326:0}, malloc(sizeof(SLL))={1:0}, x={2130574326:0}, x->data=1]
[L1032]  COND FALSE  !(x->data != 1)
[L1038]  EXPR        x->next
[L1038]              x = x->next
[L1039]  COND TRUE   \read(*x)
[L1041]  EXPR        x->data
         VAL         [head={2130574326:0}, malloc(sizeof(SLL))={2130574326:0}, malloc(sizeof(SLL))={1:0}, x={1:0}, x->data=0]
[L1041]  COND TRUE   x->data != 1
[L1042]              __VERIFIER_error()
         VAL         [head={2130574326:0}, malloc(sizeof(SLL))={2130574326:0}, malloc(sizeof(SLL))={1:0}, x={1:0}]

  - StatisticsResult: Ultimate Automizer benchmark data
    CFG has 3 procedures, 29 locations, 1 error locations. UNSAFE Result, 1.5s OverallTime, 2 OverallIterations, 1 TraceHistogramMax, 0.7s AutomataDifference, 0.0s DeadEndRemovalTime, 0.0s HoareAnnotationTime, HoareTripleCheckerStatistics: 34 SDtfs, 0 SDslu, 0 SDs, 0 SdLazy, 0 SolverSat, 0 SolverUnsat, 0 SolverUnknown, 0 SolverNotchecked, 0.0s Time, PredicateUnifierStatistics: 0 DeclaredPredicates, 13 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=29occurred in iteration=0, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s AbstIntTime, 0 AbstIntIterations, 0 AbstIntStrong, NaN AbsIntWeakeningRatio, NaN AbsIntAvgWeakeningVarsNumRemoved, NaN AbsIntAvgWeakenedConjuncts, 0.0s DumpTime, AutomataMinimizationStatistics: 0.1s AutomataMinimizationTime, 1 MinimizatonAttempts, 0 StatesRemovedByMinimization, 0 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TraceCheckStatistics: 0.0s SsaConstructionTime, 0.0s SatisfiabilityAnalysisTime, 0.1s InterpolantComputationTime, 29 NumberOfCodeBlocks, 29 NumberOfCodeBlocksAsserted, 2 NumberOfCheckSat, 13 ConstructedInterpolants, 0 QuantifiedInterpolants, 169 SizeOfPredicates, 0 NumberOfNonLiveVariables, 63 ConjunctsInSsa, 1 ConjunctsInUnsatCore, 1 InterpolantComputations, 1 PerfectInterpolantSequences, 0/0 InterpolantCoveringCapability, InvariantSynthesisStatistics: No data available, InterpolantConsolidationStatistics: No data available, ReuseStatistics: No data available
RESULT: Ultimate proved your program to be incorrect!
Received shutdown request...