java -Xmx6000000000 -jar ./plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data ./data --generate-csv --csv-dir ../../../releaseScripts/default/UAutomizer-linux/csv -tc ../../../trunk/examples/toolchains/AbstractInterpretationC.xml -s ../../../trunk/examples/settings/ai/eq-bench/svcomp-DerefFreeMemtrack-32bit-Automizer_Camel+AI_EQ_imprecise.epf -i ../../../trunk/examples/svcomp/forester-heap/dll-queue_true-unreach-call_true-valid-memsafety.i


--------------------------------------------------------------------------------


This is Ultimate 0.1.23-6b94a2f
[2018-01-24 16:33:57,209 INFO  L170        SettingsManager]: Resetting all preferences to default values...
[2018-01-24 16:33:57,211 INFO  L174        SettingsManager]: Resetting UltimateCore preferences to default values
[2018-01-24 16:33:57,225 INFO  L177        SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring...
[2018-01-24 16:33:57,225 INFO  L174        SettingsManager]: Resetting Boogie Preprocessor preferences to default values
[2018-01-24 16:33:57,226 INFO  L174        SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values
[2018-01-24 16:33:57,226 INFO  L174        SettingsManager]: Resetting Abstract Interpretation preferences to default values
[2018-01-24 16:33:57,228 INFO  L174        SettingsManager]: Resetting LassoRanker preferences to default values
[2018-01-24 16:33:57,229 INFO  L174        SettingsManager]: Resetting Reaching Definitions preferences to default values
[2018-01-24 16:33:57,230 INFO  L174        SettingsManager]: Resetting SyntaxChecker preferences to default values
[2018-01-24 16:33:57,231 INFO  L177        SettingsManager]: Büchi Program Product provides no preferences, ignoring...
[2018-01-24 16:33:57,231 INFO  L174        SettingsManager]: Resetting LTL2Aut preferences to default values
[2018-01-24 16:33:57,232 INFO  L174        SettingsManager]: Resetting BlockEncodingV2 preferences to default values
[2018-01-24 16:33:57,234 INFO  L174        SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values
[2018-01-24 16:33:57,235 INFO  L174        SettingsManager]: Resetting BuchiAutomizer preferences to default values
[2018-01-24 16:33:57,237 INFO  L174        SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values
[2018-01-24 16:33:57,240 INFO  L174        SettingsManager]: Resetting CodeCheck preferences to default values
[2018-01-24 16:33:57,241 INFO  L174        SettingsManager]: Resetting InvariantSynthesis preferences to default values
[2018-01-24 16:33:57,243 INFO  L174        SettingsManager]: Resetting RCFGBuilder preferences to default values
[2018-01-24 16:33:57,244 INFO  L174        SettingsManager]: Resetting TraceAbstraction preferences to default values
[2018-01-24 16:33:57,246 INFO  L177        SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring...
[2018-01-24 16:33:57,247 INFO  L177        SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring...
[2018-01-24 16:33:57,247 INFO  L174        SettingsManager]: Resetting IcfgTransformer preferences to default values
[2018-01-24 16:33:57,248 INFO  L174        SettingsManager]: Resetting Boogie Printer preferences to default values
[2018-01-24 16:33:57,249 INFO  L174        SettingsManager]: Resetting Witness Printer preferences to default values
[2018-01-24 16:33:57,250 INFO  L177        SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring...
[2018-01-24 16:33:57,250 INFO  L174        SettingsManager]: Resetting CDTParser preferences to default values
[2018-01-24 16:33:57,251 INFO  L177        SettingsManager]: PEA to Boogie provides no preferences, ignoring...
[2018-01-24 16:33:57,251 INFO  L177        SettingsManager]: AutomataScriptParser provides no preferences, ignoring...
[2018-01-24 16:33:57,251 INFO  L174        SettingsManager]: Resetting Witness Parser preferences to default values
[2018-01-24 16:33:57,252 INFO  L181        SettingsManager]: Finished resetting all preferences to default values...
[2018-01-24 16:33:57,252 INFO  L98         SettingsManager]: Beginning loading settings from /storage/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/settings/ai/eq-bench/svcomp-DerefFreeMemtrack-32bit-Automizer_Camel+AI_EQ_imprecise.epf
[2018-01-24 16:33:57,262 INFO  L110        SettingsManager]: Loading preferences was successful
[2018-01-24 16:33:57,262 INFO  L112        SettingsManager]: Preferences different from defaults after loading the file:
[2018-01-24 16:33:57,263 INFO  L131        SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults:
[2018-01-24 16:33:57,263 INFO  L133        SettingsManager]:  * to procedures, called more than once=true
[2018-01-24 16:33:57,264 INFO  L131        SettingsManager]: Preferences of Abstract Interpretation differ from their defaults:
[2018-01-24 16:33:57,264 INFO  L133        SettingsManager]:  * Deactivate Weak Equivalences=true
[2018-01-24 16:33:57,264 INFO  L133        SettingsManager]:  * Abstract domain for RCFG-of-the-future=VPDomain
[2018-01-24 16:33:57,264 INFO  L133        SettingsManager]:  * Use the RCFG-of-the-future interface=true
[2018-01-24 16:33:57,265 INFO  L131        SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults:
[2018-01-24 16:33:57,265 INFO  L133        SettingsManager]:  * sizeof long=4
[2018-01-24 16:33:57,265 INFO  L133        SettingsManager]:  * Check unreachability of error function in SV-COMP mode=false
[2018-01-24 16:33:57,266 INFO  L133        SettingsManager]:  * Overapproximate operations on floating types=true
[2018-01-24 16:33:57,266 INFO  L133        SettingsManager]:  * sizeof POINTER=4
[2018-01-24 16:33:57,266 INFO  L133        SettingsManager]:  * Check division by zero=IGNORE
[2018-01-24 16:33:57,266 INFO  L133        SettingsManager]:  * Check for the main procedure if all allocated memory was freed=true
[2018-01-24 16:33:57,266 INFO  L133        SettingsManager]:  * Bitprecise bitfields=true
[2018-01-24 16:33:57,267 INFO  L133        SettingsManager]:  * SV-COMP memtrack compatibility mode=true
[2018-01-24 16:33:57,267 INFO  L133        SettingsManager]:  * If two pointers are subtracted or compared they have the same base address=IGNORE
[2018-01-24 16:33:57,267 INFO  L133        SettingsManager]:  * sizeof long double=12
[2018-01-24 16:33:57,267 INFO  L131        SettingsManager]: Preferences of RCFGBuilder differ from their defaults:
[2018-01-24 16:33:57,267 INFO  L133        SettingsManager]:  * Size of a code block=SequenceOfStatements
[2018-01-24 16:33:57,268 INFO  L133        SettingsManager]:  * To the following directory=./dump/
[2018-01-24 16:33:57,268 INFO  L133        SettingsManager]:  * Add additional assume for each assert=false
[2018-01-24 16:33:57,268 INFO  L133        SettingsManager]:  * SMT solver=External_DefaultMode
[2018-01-24 16:33:57,268 INFO  L133        SettingsManager]:  * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000
[2018-01-24 16:33:57,268 INFO  L131        SettingsManager]: Preferences of TraceAbstraction differ from their defaults:
[2018-01-24 16:33:57,269 INFO  L133        SettingsManager]:  * Interpolant automaton=TWOTRACK
[2018-01-24 16:33:57,269 INFO  L133        SettingsManager]:  * Compute Interpolants along a Counterexample=FPandBP
[2018-01-24 16:33:57,269 INFO  L133        SettingsManager]:  * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles
[2018-01-24 16:33:57,269 INFO  L133        SettingsManager]:  * Trace refinement strategy=CAMEL
[2018-01-24 16:33:57,269 INFO  L133        SettingsManager]:  * SMT solver=External_ModelsAndUnsatCoreMode
[2018-01-24 16:33:57,270 INFO  L133        SettingsManager]:  * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in
[2018-01-24 16:33:57,270 INFO  L133        SettingsManager]:  * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true
[2018-01-24 16:33:57,271 INFO  L131        SettingsManager]: Preferences of IcfgTransformer differ from their defaults:
[2018-01-24 16:33:57,271 INFO  L133        SettingsManager]:  * TransformationType=HEAP_SEPARATOR
[2018-01-24 16:33:57,305 INFO  L81    nceAwareModelManager]: Repository-Root is: /tmp
[2018-01-24 16:33:57,318 INFO  L266   ainManager$Toolchain]: [Toolchain 1]: Parser(s) successfully initialized
[2018-01-24 16:33:57,323 INFO  L222   ainManager$Toolchain]: [Toolchain 1]: Toolchain data selected.
[2018-01-24 16:33:57,324 INFO  L271        PluginConnector]: Initializing CDTParser...
[2018-01-24 16:33:57,325 INFO  L276        PluginConnector]: CDTParser initialized
[2018-01-24 16:33:57,326 INFO  L431   ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/svcomp/forester-heap/dll-queue_true-unreach-call_true-valid-memsafety.i
[2018-01-24 16:33:57,501 INFO  L304   ainManager$Toolchain]: ####################### [Toolchain 1] #######################
[2018-01-24 16:33:57,507 INFO  L131        ToolchainWalker]: Walking toolchain with 4 elements.
[2018-01-24 16:33:57,508 INFO  L113        PluginConnector]: ------------------------CACSL2BoogieTranslator----------------------------
[2018-01-24 16:33:57,508 INFO  L271        PluginConnector]: Initializing CACSL2BoogieTranslator...
[2018-01-24 16:33:57,513 INFO  L276        PluginConnector]: CACSL2BoogieTranslator initialized
[2018-01-24 16:33:57,514 INFO  L185        PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 24.01 04:33:57" (1/1) ...
[2018-01-24 16:33:57,517 INFO  L205        PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@5977c944 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 24.01 04:33:57, skipping insertion in model container
[2018-01-24 16:33:57,517 INFO  L185        PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 24.01 04:33:57" (1/1) ...
[2018-01-24 16:33:57,533 INFO  L153             Dispatcher]: Using SV-COMP mode
[2018-01-24 16:33:57,577 INFO  L153             Dispatcher]: Using SV-COMP mode
[2018-01-24 16:33:57,702 INFO  L450          PostProcessor]: Settings: Checked method=main
[2018-01-24 16:33:57,725 INFO  L450          PostProcessor]: Settings: Checked method=main
[2018-01-24 16:33:57,734 INFO  L202        PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 24.01 04:33:57 WrapperNode
[2018-01-24 16:33:57,734 INFO  L132        PluginConnector]: ------------------------ END CACSL2BoogieTranslator----------------------------
[2018-01-24 16:33:57,735 INFO  L113        PluginConnector]: ------------------------Boogie Preprocessor----------------------------
[2018-01-24 16:33:57,735 INFO  L271        PluginConnector]: Initializing Boogie Preprocessor...
[2018-01-24 16:33:57,735 INFO  L276        PluginConnector]: Boogie Preprocessor initialized
[2018-01-24 16:33:57,749 INFO  L185        PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 24.01 04:33:57" (1/1) ...
[2018-01-24 16:33:57,749 INFO  L185        PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 24.01 04:33:57" (1/1) ...
[2018-01-24 16:33:57,759 INFO  L185        PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 24.01 04:33:57" (1/1) ...
[2018-01-24 16:33:57,759 INFO  L185        PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 24.01 04:33:57" (1/1) ...
[2018-01-24 16:33:57,766 INFO  L185        PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 24.01 04:33:57" (1/1) ...
[2018-01-24 16:33:57,771 INFO  L185        PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 24.01 04:33:57" (1/1) ...
[2018-01-24 16:33:57,773 INFO  L185        PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 24.01 04:33:57" (1/1) ...
[2018-01-24 16:33:57,775 INFO  L132        PluginConnector]: ------------------------ END Boogie Preprocessor----------------------------
[2018-01-24 16:33:57,775 INFO  L113        PluginConnector]: ------------------------RCFGBuilder----------------------------
[2018-01-24 16:33:57,775 INFO  L271        PluginConnector]: Initializing RCFGBuilder...
[2018-01-24 16:33:57,776 INFO  L276        PluginConnector]: RCFGBuilder initialized
[2018-01-24 16:33:57,777 INFO  L185        PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 24.01 04:33:57" (1/1) ...
No working directory specified, using /storage/ultimate/releaseScripts/default/UAutomizer-linux/z3
Starting monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null)
Waiting until toolchain timeout for monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000
[2018-01-24 16:33:57,823 INFO  L136     BoogieDeclarations]: Found implementation of procedure ULTIMATE.init
[2018-01-24 16:33:57,823 INFO  L136     BoogieDeclarations]: Found implementation of procedure ULTIMATE.start
[2018-01-24 16:33:57,823 INFO  L136     BoogieDeclarations]: Found implementation of procedure main
[2018-01-24 16:33:57,823 INFO  L128     BoogieDeclarations]: Found specification of procedure write~int
[2018-01-24 16:33:57,823 INFO  L128     BoogieDeclarations]: Found specification of procedure read~int
[2018-01-24 16:33:57,823 INFO  L128     BoogieDeclarations]: Found specification of procedure write~$Pointer$
[2018-01-24 16:33:57,823 INFO  L128     BoogieDeclarations]: Found specification of procedure read~$Pointer$
[2018-01-24 16:33:57,824 INFO  L128     BoogieDeclarations]: Found specification of procedure ULTIMATE.free
[2018-01-24 16:33:57,824 INFO  L128     BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc
[2018-01-24 16:33:57,824 INFO  L128     BoogieDeclarations]: Found specification of procedure #Ultimate.alloc
[2018-01-24 16:33:57,824 INFO  L128     BoogieDeclarations]: Found specification of procedure malloc
[2018-01-24 16:33:57,824 INFO  L128     BoogieDeclarations]: Found specification of procedure free
[2018-01-24 16:33:57,824 INFO  L128     BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_int
[2018-01-24 16:33:57,824 INFO  L128     BoogieDeclarations]: Found specification of procedure __VERIFIER_error
[2018-01-24 16:33:57,824 INFO  L128     BoogieDeclarations]: Found specification of procedure main
[2018-01-24 16:33:57,824 INFO  L128     BoogieDeclarations]: Found specification of procedure ULTIMATE.init
[2018-01-24 16:33:57,825 INFO  L128     BoogieDeclarations]: Found specification of procedure ULTIMATE.start
[2018-01-24 16:33:58,410 INFO  L257             CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start)
[2018-01-24 16:33:58,411 INFO  L202        PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 24.01 04:33:58 BoogieIcfgContainer
[2018-01-24 16:33:58,412 INFO  L132        PluginConnector]: ------------------------ END RCFGBuilder----------------------------
[2018-01-24 16:33:58,412 INFO  L113        PluginConnector]: ------------------------Abstract Interpretation----------------------------
[2018-01-24 16:33:58,412 INFO  L271        PluginConnector]: Initializing Abstract Interpretation...
[2018-01-24 16:33:58,413 INFO  L276        PluginConnector]: Abstract Interpretation initialized
[2018-01-24 16:33:58,414 INFO  L185        PluginConnector]: Executing the observer AbstractInterpretationRcfgObserver from plugin Abstract Interpretation for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 24.01 04:33:58" (1/1) ...
[2018-01-24 16:33:58,461 INFO  L101         FixpointEngine]: Starting fixpoint engine with domain VPDomain (maxUnwinding=3, maxParallelStates=2)
[2018-01-24 16:34:03,591 INFO  L259    AbstractInterpreter]: Some error location(s) were reachable
[2018-01-24 16:34:03,620 WARN  L343   cessorBacktranslator]: Generated EnsuresSpecification ensures #valid == old(#valid); is not ensure(true)
[2018-01-24 16:34:03,657 INFO  L268    AbstractInterpreter]: Visited 227 different actions 902 times. Merged at 106 different actions 441 times. Widened at 10 different actions 21 times. Found 70 fixpoints after 27 different actions. Largest state had 66 variables.
[2018-01-24 16:34:03,659 INFO  L132        PluginConnector]: ------------------------ END Abstract Interpretation----------------------------
[2018-01-24 16:34:03,660 INFO  L168              Benchmark]: Toolchain (without parser) took 6157.64 ms. Allocated memory was 305.7 MB in the beginning and 891.3 MB in the end (delta: 585.6 MB). Free memory was 264.6 MB in the beginning and 583.7 MB in the end (delta: -319.1 MB). Peak memory consumption was 266.5 MB. Max. memory is 5.3 GB.
[2018-01-24 16:34:03,660 INFO  L168              Benchmark]: CDTParser took 0.20 ms. Allocated memory is still 305.7 MB. Free memory is still 270.5 MB. There was no memory consumed. Max. memory is 5.3 GB.
[2018-01-24 16:34:03,661 INFO  L168              Benchmark]: CACSL2BoogieTranslator took 226.53 ms. Allocated memory is still 305.7 MB. Free memory was 264.6 MB in the beginning and 250.6 MB in the end (delta: 14.0 MB). Peak memory consumption was 14.0 MB. Max. memory is 5.3 GB.
[2018-01-24 16:34:03,661 INFO  L168              Benchmark]: Boogie Preprocessor took 40.08 ms. Allocated memory is still 305.7 MB. Free memory was 250.6 MB in the beginning and 248.6 MB in the end (delta: 2.0 MB). Peak memory consumption was 2.0 MB. Max. memory is 5.3 GB.
[2018-01-24 16:34:03,661 INFO  L168              Benchmark]: RCFGBuilder took 636.28 ms. Allocated memory is still 305.7 MB. Free memory was 248.6 MB in the beginning and 207.7 MB in the end (delta: 40.9 MB). Peak memory consumption was 40.9 MB. Max. memory is 5.3 GB.
[2018-01-24 16:34:03,661 INFO  L168              Benchmark]: Abstract Interpretation took 5246.62 ms. Allocated memory was 305.7 MB in the beginning and 891.3 MB in the end (delta: 585.6 MB). Free memory was 207.7 MB in the beginning and 583.7 MB in the end (delta: -376.0 MB). Peak memory consumption was 209.6 MB. Max. memory is 5.3 GB.
[2018-01-24 16:34:03,663 INFO  L344   ainManager$Toolchain]: #######################  End [Toolchain 1] #######################
 --- Results ---
 * Results from de.uni_freiburg.informatik.ultimate.core:
  - StatisticsResult: Toolchain Benchmarks
    Benchmark results are:
 * CDTParser took 0.20 ms. Allocated memory is still 305.7 MB. Free memory is still 270.5 MB. There was no memory consumed. Max. memory is 5.3 GB.
 * CACSL2BoogieTranslator took 226.53 ms. Allocated memory is still 305.7 MB. Free memory was 264.6 MB in the beginning and 250.6 MB in the end (delta: 14.0 MB). Peak memory consumption was 14.0 MB. Max. memory is 5.3 GB.
 * Boogie Preprocessor took 40.08 ms. Allocated memory is still 305.7 MB. Free memory was 250.6 MB in the beginning and 248.6 MB in the end (delta: 2.0 MB). Peak memory consumption was 2.0 MB. Max. memory is 5.3 GB.
 * RCFGBuilder took 636.28 ms. Allocated memory is still 305.7 MB. Free memory was 248.6 MB in the beginning and 207.7 MB in the end (delta: 40.9 MB). Peak memory consumption was 40.9 MB. Max. memory is 5.3 GB.
 * Abstract Interpretation took 5246.62 ms. Allocated memory was 305.7 MB in the beginning and 891.3 MB in the end (delta: 585.6 MB). Free memory was 207.7 MB in the beginning and 583.7 MB in the end (delta: -376.0 MB). Peak memory consumption was 209.6 MB. Max. memory is 5.3 GB.
 * Results from de.uni_freiburg.informatik.ultimate.plugins.analysis.abstractinterpretationv2:
  - StatisticsResult: ArrayEqualityDomainStatistics
    
#Locations                               :     154 
LocStat_MAX_WEQGRAPH_SIZE                :       0 
LocStat_MAX_SIZEOF_WEQEDGELABEL          :       0 
LocStat_NO_SUPPORTING_EQUALITIES         :    1779 
LocStat_NO_SUPPORTING_DISEQUALITIES      :     531 
LocStat_NO_DISJUNCTIONS                  :    -308 
LocStat_MAX_NO_DISJUNCTIONS              :      -1 
#Transitions                             :     231 
TransStat_MAX_WEQGRAPH_SIZE              :       0 
TransStat_MAX_SIZEOF_WEQEDGELABEL        :       0 
TransStat_NO_SUPPORTING_EQUALITIES       :     235 
TransStat_NO_SUPPORTING_DISEQUALITIES    :      79 
TransStat_NO_DISJUNCTIONS                :     236 
TransStat_MAX_NO_DISJUNCTIONS            :       4 

  - StatisticsResult: EqConstraintFactoryStatistics
    
CONJOIN_DISJUNCTIVE(MILLISECONDS)        : 0.195625 
RENAME_VARIABLES(MILLISECONDS)           : 0.161731 
UNFREEZE(MILLISECONDS)                   : 0.000000 
CONJOIN(MILLISECONDS)                    : 0.182269 
PROJECTAWAY(MILLISECONDS)                : 0.030780 
ADD_WEAK_EQUALITY(MILLISECONDS)          : 0.001060 
DISJOIN(MILLISECONDS)                    : 0.714553 
RENAME_VARIABLES_DISJUNCTIVE(MILLISECONDS) : 0.181891 
ADD_EQUALITY(MILLISECONDS)               : 0.029286 
DISJOIN_DISJUNCTIVE(MILLISECONDS)        : 0.000000 
ADD_DISEQUALITY(MILLISECONDS)            : 0.014271 
#CONJOIN_DISJUNCTIVE                     :    1765 
#RENAME_VARIABLES                        :    3496 
#UNFREEZE                                :       0 
#CONJOIN                                 :    2025 
#PROJECTAWAY                             :    1771 
#ADD_WEAK_EQUALITY                       :      60 
#DISJOIN                                 :     575 
#RENAME_VARIABLES_DISJUNCTIVE            :    3458 
#ADD_EQUALITY                            :     263 
#DISJOIN_DISJUNCTIVE                     :       0 
#ADD_DISEQUALITY                         :      72 

  - UnprovableResult [Line: 1]: Unable to prove that pointer dereference always succeeds
    Unable to prove that pointer dereference always succeeds
 Reason: abstract domain could reach this error location. 
Possible FailurePath: 
[L986]  EXPR, FCALL  malloc(sizeof(SLL))
[L986]               SLL* head = malloc(sizeof(SLL));
[L987]  FCALL        head->next = ((void*)0)

  - UnprovableResult [Line: 1]: Unable to prove that pointer dereference always succeeds
    Unable to prove that pointer dereference always succeeds
 Reason: abstract domain could reach this error location. 
Possible FailurePath: 
[L986]  EXPR, FCALL  malloc(sizeof(SLL))
[L986]               SLL* head = malloc(sizeof(SLL));
[L987]  FCALL        head->next = ((void*)0)
[L988]  FCALL        head->prev = ((void*)0)

  - UnprovableResult [Line: 1]: Unable to prove that pointer dereference always succeeds
    Unable to prove that pointer dereference always succeeds
 Reason: abstract domain could reach this error location. 
Possible FailurePath: 
[L986]  EXPR, FCALL  malloc(sizeof(SLL))
[L986]               SLL* head = malloc(sizeof(SLL));
[L987]  FCALL        head->next = ((void*)0)
[L988]  FCALL        head->prev = ((void*)0)
[L989]  FCALL        head->data = 0

  - UnprovableResult [Line: 1]: Unable to prove that pointer dereference always succeeds
    Unable to prove that pointer dereference always succeeds
 Reason: abstract domain could reach this error location. 
Possible FailurePath: 
[L986]  EXPR, FCALL  malloc(sizeof(SLL))
[L986]               SLL* head = malloc(sizeof(SLL));
[L987]  FCALL        head->next = ((void*)0)
[L988]  FCALL        head->prev = ((void*)0)
[L989]  FCALL        head->data = 0
[L990]               SLL* item = head;
[L991]               int status = 0;
[L993]  COND TRUE    __VERIFIER_nondet_int()
[L995]  EXPR, FCALL  malloc(sizeof(SLL))
[L995]  FCALL        item->next = malloc(sizeof(SLL))

  - UnprovableResult [Line: 1]: Unable to prove that pointer dereference always succeeds
    Unable to prove that pointer dereference always succeeds
 Reason: abstract domain could reach this error location. 
Possible FailurePath: 
[L986]  EXPR, FCALL  malloc(sizeof(SLL))
[L986]               SLL* head = malloc(sizeof(SLL));
[L987]  FCALL        head->next = ((void*)0)
[L988]  FCALL        head->prev = ((void*)0)
[L989]  FCALL        head->data = 0
[L990]               SLL* item = head;
[L991]               int status = 0;
[L993]  COND TRUE    __VERIFIER_nondet_int()
[L995]  EXPR, FCALL  malloc(sizeof(SLL))
[L995]  FCALL        item->next = malloc(sizeof(SLL))

  - UnprovableResult [Line: 1]: Unable to prove that pointer dereference always succeeds
    Unable to prove that pointer dereference always succeeds
 Reason: abstract domain could reach this error location. 
Possible FailurePath: 
[L986]  EXPR, FCALL  malloc(sizeof(SLL))
[L986]               SLL* head = malloc(sizeof(SLL));
[L987]  FCALL        head->next = ((void*)0)
[L988]  FCALL        head->prev = ((void*)0)
[L989]  FCALL        head->data = 0
[L990]               SLL* item = head;
[L991]               int status = 0;
[L993]  COND TRUE    __VERIFIER_nondet_int()
[L995]  EXPR, FCALL  malloc(sizeof(SLL))
[L995]  FCALL        item->next = malloc(sizeof(SLL))
[L996]  FCALL        item->next

  - UnprovableResult [Line: 1]: Unable to prove that pointer dereference always succeeds
    Unable to prove that pointer dereference always succeeds
 Reason: abstract domain could reach this error location. 
Possible FailurePath: 
[L986]  EXPR, FCALL  malloc(sizeof(SLL))
[L986]               SLL* head = malloc(sizeof(SLL));
[L987]  FCALL        head->next = ((void*)0)
[L988]  FCALL        head->prev = ((void*)0)
[L989]  FCALL        head->data = 0
[L990]               SLL* item = head;
[L991]               int status = 0;
[L993]  COND TRUE    __VERIFIER_nondet_int()
[L995]  EXPR, FCALL  malloc(sizeof(SLL))
[L995]  FCALL        item->next = malloc(sizeof(SLL))
[L996]  EXPR, FCALL  item->next
[L996]  FCALL        item->next->prev = item

  - UnprovableResult [Line: 1]: Unable to prove that pointer dereference always succeeds
    Unable to prove that pointer dereference always succeeds
 Reason: abstract domain could reach this error location. 
Possible FailurePath: 
[L986]  EXPR, FCALL  malloc(sizeof(SLL))
[L986]               SLL* head = malloc(sizeof(SLL));
[L987]  FCALL        head->next = ((void*)0)
[L988]  FCALL        head->prev = ((void*)0)
[L989]  FCALL        head->data = 0
[L990]               SLL* item = head;
[L991]               int status = 0;
[L993]  COND TRUE    __VERIFIER_nondet_int()
[L995]  EXPR, FCALL  malloc(sizeof(SLL))
[L995]  FCALL        item->next = malloc(sizeof(SLL))
[L996]  EXPR, FCALL  item->next
[L996]  FCALL        item->next->prev = item
[L997]  FCALL        item->next

  - UnprovableResult [Line: 1]: Unable to prove that pointer dereference always succeeds
    Unable to prove that pointer dereference always succeeds
 Reason: abstract domain could reach this error location. 
Possible FailurePath: 
[L986]   EXPR, FCALL  malloc(sizeof(SLL))
[L986]                SLL* head = malloc(sizeof(SLL));
[L987]   FCALL        head->next = ((void*)0)
[L988]   FCALL        head->prev = ((void*)0)
[L989]   FCALL        head->data = 0
[L990]                SLL* item = head;
[L991]                int status = 0;
[L993]   COND FALSE   !(__VERIFIER_nondet_int())
[L1020]  COND FALSE   !(!(head != ((void*)0)))
[L1020]  COND FALSE   !(0)
[L1021]  COND FALSE   !(status == 1)
[L1026]  COND FALSE   !(status == 2)
[L1032]  COND FALSE   !(status == 3)
[L1041]  FCALL        head->next

  - UnprovableResult [Line: 1]: Unable to prove that pointer dereference always succeeds
    Unable to prove that pointer dereference always succeeds
 Reason: abstract domain could reach this error location. 
Possible FailurePath: 
[L986]  EXPR, FCALL  malloc(sizeof(SLL))
[L986]               SLL* head = malloc(sizeof(SLL));
[L987]  FCALL        head->next = ((void*)0)
[L988]  FCALL        head->prev = ((void*)0)
[L989]  FCALL        head->data = 0
[L990]               SLL* item = head;
[L991]               int status = 0;
[L993]  COND TRUE    __VERIFIER_nondet_int()
[L995]  EXPR, FCALL  malloc(sizeof(SLL))
[L995]  FCALL        item->next = malloc(sizeof(SLL))
[L996]  EXPR, FCALL  item->next
[L996]  FCALL        item->next->prev = item
[L997]  EXPR, FCALL  item->next
[L997]               item = item->next
[L998]  FCALL        item->next = ((void*)0)

  - UnprovableResult [Line: 1]: Unable to prove that pointer dereference always succeeds
    Unable to prove that pointer dereference always succeeds
 Reason: abstract domain could reach this error location. 
Possible FailurePath: 
[L986]  EXPR, FCALL  malloc(sizeof(SLL))
[L986]               SLL* head = malloc(sizeof(SLL));
[L987]  FCALL        head->next = ((void*)0)
[L988]  FCALL        head->prev = ((void*)0)
[L989]  FCALL        head->data = 0
[L990]               SLL* item = head;
[L991]               int status = 0;
[L993]  COND TRUE    __VERIFIER_nondet_int()
[L995]  EXPR, FCALL  malloc(sizeof(SLL))
[L995]  FCALL        item->next = malloc(sizeof(SLL))
[L996]  EXPR, FCALL  item->next
[L996]  FCALL        item->next->prev = item
[L997]  EXPR, FCALL  item->next
[L997]               item = item->next
[L998]  FCALL        item->next = ((void*)0)

  - UnprovableResult [Line: 1]: Unable to prove that pointer dereference always succeeds
    Unable to prove that pointer dereference always succeeds
 Reason: abstract domain could reach this error location. 
Possible FailurePath: 
[L986]   EXPR, FCALL  malloc(sizeof(SLL))
[L986]                SLL* head = malloc(sizeof(SLL));
[L987]   FCALL        head->next = ((void*)0)
[L988]   FCALL        head->prev = ((void*)0)
[L989]   FCALL        head->data = 0
[L990]                SLL* item = head;
[L991]                int status = 0;
[L993]   COND TRUE    __VERIFIER_nondet_int()
[L995]   EXPR, FCALL  malloc(sizeof(SLL))
[L995]   FCALL        item->next = malloc(sizeof(SLL))
[L996]   EXPR, FCALL  item->next
[L996]   FCALL        item->next->prev = item
[L997]   EXPR, FCALL  item->next
[L997]                item = item->next
[L998]   FCALL        item->next = ((void*)0)
[L1000]  COND TRUE    !status
[L1002]  FCALL        item->data = 1

  - UnprovableResult [Line: 1]: Unable to prove that pointer dereference always succeeds
    Unable to prove that pointer dereference always succeeds
 Reason: abstract domain could reach this error location. 
Possible FailurePath: 
[L986]   EXPR, FCALL  malloc(sizeof(SLL))
[L986]                SLL* head = malloc(sizeof(SLL));
[L987]   FCALL        head->next = ((void*)0)
[L988]   FCALL        head->prev = ((void*)0)
[L989]   FCALL        head->data = 0
[L990]                SLL* item = head;
[L991]                int status = 0;
[L993]   COND FALSE   !(__VERIFIER_nondet_int())
[L1020]  COND FALSE   !(!(head != ((void*)0)))
[L1020]  COND FALSE   !(0)
[L1021]  COND FALSE   !(status == 1)
[L1026]  COND FALSE   !(status == 2)
[L1032]  COND FALSE   !(status == 3)
[L1041]  EXPR, FCALL  head->next
[L1041]               item = head->next
[L1042]               item && __VERIFIER_nondet_int()
[L1042]               item && __VERIFIER_nondet_int()
[L1042]  COND FALSE   !(item && __VERIFIER_nondet_int())
[L1049]  COND TRUE    \read(*head)
[L1051]               item = head
[L1052]  FCALL        head->next

  - UnprovableResult [Line: 1]: Unable to prove that pointer dereference always succeeds
    Unable to prove that pointer dereference always succeeds
 Reason: abstract domain could reach this error location. 
Possible FailurePath: 
[L986]   EXPR, FCALL  malloc(sizeof(SLL))
[L986]                SLL* head = malloc(sizeof(SLL));
[L987]   FCALL        head->next = ((void*)0)
[L988]   FCALL        head->prev = ((void*)0)
[L989]   FCALL        head->data = 0
[L990]                SLL* item = head;
[L991]                int status = 0;
[L993]   COND FALSE   !(__VERIFIER_nondet_int())
[L1020]  COND FALSE   !(!(head != ((void*)0)))
[L1020]  COND FALSE   !(0)
[L1021]  COND FALSE   !(status == 1)
[L1026]  COND FALSE   !(status == 2)
[L1032]  COND FALSE   !(status == 3)
[L1041]  EXPR, FCALL  head->next
[L1041]               item = head->next
[L1042]               item && __VERIFIER_nondet_int()
[L1042]               item && __VERIFIER_nondet_int()
[L1042]  COND TRUE    item && __VERIFIER_nondet_int()
[L1044]  EXPR         !status || item->data > 0
[L1044]  COND FALSE   !(!(!status || item->data > 0))
[L1044]  COND FALSE   !(0)
[L1045]  FCALL        item->next

  - UnprovableResult [Line: 1]: Unable to prove that pointer dereference always succeeds
    Unable to prove that pointer dereference always succeeds
 Reason: abstract domain could reach this error location. 
Possible FailurePath: 
[L986]   EXPR, FCALL  malloc(sizeof(SLL))
[L986]                SLL* head = malloc(sizeof(SLL));
[L987]   FCALL        head->next = ((void*)0)
[L988]   FCALL        head->prev = ((void*)0)
[L989]   FCALL        head->data = 0
[L990]                SLL* item = head;
[L991]                int status = 0;
[L993]   COND FALSE   !(__VERIFIER_nondet_int())
[L1020]  COND FALSE   !(!(head != ((void*)0)))
[L1020]  COND FALSE   !(0)
[L1021]  COND FALSE   !(status == 1)
[L1026]  COND FALSE   !(status == 2)
[L1032]  COND FALSE   !(status == 3)
[L1041]  EXPR, FCALL  head->next
[L1041]               item = head->next
[L1042]               item && __VERIFIER_nondet_int()
[L1042]               item && __VERIFIER_nondet_int()
[L1042]  COND TRUE    item && __VERIFIER_nondet_int()
[L1044]  EXPR         !status || item->data > 0
[L1044]  COND FALSE   !(!(!status || item->data > 0))
[L1044]  COND FALSE   !(0)
[L1045]  FCALL        item->next

  - UnprovableResult [Line: 1]: Unable to prove that pointer dereference always succeeds
    Unable to prove that pointer dereference always succeeds
 Reason: abstract domain could reach this error location. 
Possible FailurePath: 
[L986]   EXPR, FCALL  malloc(sizeof(SLL))
[L986]                SLL* head = malloc(sizeof(SLL));
[L987]   FCALL        head->next = ((void*)0)
[L988]   FCALL        head->prev = ((void*)0)
[L989]   FCALL        head->data = 0
[L990]                SLL* item = head;
[L991]                int status = 0;
[L993]   COND FALSE   !(__VERIFIER_nondet_int())
[L1020]  COND FALSE   !(!(head != ((void*)0)))
[L1020]  COND FALSE   !(0)
[L1021]  COND FALSE   !(status == 1)
[L1026]  COND FALSE   !(status == 2)
[L1032]  COND FALSE   !(status == 3)
[L1041]  EXPR, FCALL  head->next
[L1041]               item = head->next
[L1042]               item && __VERIFIER_nondet_int()
[L1042]               item && __VERIFIER_nondet_int()
[L1042]  COND FALSE   !(item && __VERIFIER_nondet_int())
[L1049]  COND TRUE    \read(*head)
[L1051]               item = head
[L1052]  EXPR, FCALL  head->next
[L1052]               head = head->next
[L1053]  FCALL        free(item)
[L1049]  COND TRUE    \read(*head)
[L1051]               item = head
[L1052]  FCALL        head->next

  - UnprovableResult [Line: 983]: Unable to prove that all allocated memory was freed
    Unable to prove that all allocated memory was freed
 Reason: abstract domain could reach this error location. 
Possible FailurePath: 
[L986]   EXPR, FCALL  malloc(sizeof(SLL))
[L986]                SLL* head = malloc(sizeof(SLL));
[L987]   FCALL        head->next = ((void*)0)
[L988]   FCALL        head->prev = ((void*)0)
[L989]   FCALL        head->data = 0
[L990]                SLL* item = head;
[L991]                int status = 0;
[L993]   COND FALSE   !(__VERIFIER_nondet_int())
[L1020]  COND FALSE   !(!(head != ((void*)0)))
[L1020]  COND FALSE   !(0)
[L1021]  COND FALSE   !(status == 1)
[L1026]  COND FALSE   !(status == 2)
[L1032]  COND FALSE   !(status == 3)
[L1041]  EXPR, FCALL  head->next
[L1041]               item = head->next
[L1042]               item && __VERIFIER_nondet_int()
[L1042]               item && __VERIFIER_nondet_int()
[L1042]  COND FALSE   !(item && __VERIFIER_nondet_int())
[L1049]  COND TRUE    \read(*head)
[L1051]               item = head
[L1052]  EXPR, FCALL  head->next
[L1052]               head = head->next
[L1053]  FCALL        free(item)
[L1049]  COND FALSE   !(\read(*head))
[L1056]               return 0;

  - UnprovableResult [Line: 1]: Unable to prove that free always succeeds
    Unable to prove that free always succeeds
 Reason: abstract domain could reach this error location. 
Possible FailurePath: 
[L986]   EXPR, FCALL  malloc(sizeof(SLL))
[L986]                SLL* head = malloc(sizeof(SLL));
[L987]   FCALL        head->next = ((void*)0)
[L988]   FCALL        head->prev = ((void*)0)
[L989]   FCALL        head->data = 0
[L990]                SLL* item = head;
[L991]                int status = 0;
[L993]   COND FALSE   !(__VERIFIER_nondet_int())
[L1020]  COND FALSE   !(!(head != ((void*)0)))
[L1020]  COND FALSE   !(0)
[L1021]  COND FALSE   !(status == 1)
[L1026]  COND FALSE   !(status == 2)
[L1032]  COND FALSE   !(status == 3)
[L1041]  EXPR, FCALL  head->next
[L1041]               item = head->next
[L1042]               item && __VERIFIER_nondet_int()
[L1042]               item && __VERIFIER_nondet_int()
[L1042]  COND FALSE   !(item && __VERIFIER_nondet_int())
[L1049]  COND TRUE    \read(*head)
[L1051]               item = head
[L1052]  EXPR, FCALL  head->next
[L1052]               head = head->next
[L1053]  FCALL        free(item)
[L1049]  COND TRUE    \read(*head)
[L1051]               item = head
[L1052]  EXPR, FCALL  head->next
[L1052]               head = head->next
[L1053]  FCALL        free(item)

  - UnprovableResult [Line: 1]: Unable to prove that pointer dereference always succeeds
    Unable to prove that pointer dereference always succeeds
 Reason: abstract domain could reach this error location. 
Possible FailurePath: 
[L986]   EXPR, FCALL  malloc(sizeof(SLL))
[L986]                SLL* head = malloc(sizeof(SLL));
[L987]   FCALL        head->next = ((void*)0)
[L988]   FCALL        head->prev = ((void*)0)
[L989]   FCALL        head->data = 0
[L990]                SLL* item = head;
[L991]                int status = 0;
[L993]   COND TRUE    __VERIFIER_nondet_int()
[L995]   EXPR, FCALL  malloc(sizeof(SLL))
[L995]   FCALL        item->next = malloc(sizeof(SLL))
[L996]   EXPR, FCALL  item->next
[L996]   FCALL        item->next->prev = item
[L997]   EXPR, FCALL  item->next
[L997]                item = item->next
[L998]   FCALL        item->next = ((void*)0)
[L1000]  COND TRUE    !status
[L1002]  FCALL        item->data = 1
[L1003]               status = 1
[L1016]  COND FALSE   !(!(head != ((void*)0)))
[L1016]  COND FALSE   !(0)
[L1017]  COND FALSE   !(!(item != ((void*)0)))
[L1017]  COND FALSE   !(0)
[L993]   COND FALSE   !(__VERIFIER_nondet_int())
[L1020]  COND FALSE   !(!(head != ((void*)0)))
[L1020]  COND FALSE   !(0)
[L1021]  COND TRUE    status == 1
[L1023]  COND FALSE   !(!(head != ((void*)0)))
[L1023]  COND FALSE   !(0)
[L1024]  FCALL        head->next

  - UnprovableResult [Line: 1]: Unable to prove that pointer dereference always succeeds
    Unable to prove that pointer dereference always succeeds
 Reason: abstract domain could reach this error location. 
Possible FailurePath: 
[L986]   EXPR, FCALL  malloc(sizeof(SLL))
[L986]                SLL* head = malloc(sizeof(SLL));
[L987]   FCALL        head->next = ((void*)0)
[L988]   FCALL        head->prev = ((void*)0)
[L989]   FCALL        head->data = 0
[L990]                SLL* item = head;
[L991]                int status = 0;
[L993]   COND TRUE    __VERIFIER_nondet_int()
[L995]   EXPR, FCALL  malloc(sizeof(SLL))
[L995]   FCALL        item->next = malloc(sizeof(SLL))
[L996]   EXPR, FCALL  item->next
[L996]   FCALL        item->next->prev = item
[L997]   EXPR, FCALL  item->next
[L997]                item = item->next
[L998]   FCALL        item->next = ((void*)0)
[L1000]  COND TRUE    !status
[L1002]  FCALL        item->data = 1
[L1003]               status = 1
[L1016]  COND FALSE   !(!(head != ((void*)0)))
[L1016]  COND FALSE   !(0)
[L1017]  COND FALSE   !(!(item != ((void*)0)))
[L1017]  COND FALSE   !(0)
[L993]   COND FALSE   !(__VERIFIER_nondet_int())
[L1020]  COND FALSE   !(!(head != ((void*)0)))
[L1020]  COND FALSE   !(0)
[L1021]  COND FALSE   !(status == 1)
[L1026]  COND TRUE    status == 2
[L1028]  COND FALSE   !(!(head != ((void*)0)))
[L1028]  COND FALSE   !(0)
[L1029]  FCALL        head->next

  - UnprovableResult [Line: 1]: Unable to prove that pointer dereference always succeeds
    Unable to prove that pointer dereference always succeeds
 Reason: abstract domain could reach this error location. 
Possible FailurePath: 
[L986]   EXPR, FCALL  malloc(sizeof(SLL))
[L986]                SLL* head = malloc(sizeof(SLL));
[L987]   FCALL        head->next = ((void*)0)
[L988]   FCALL        head->prev = ((void*)0)
[L989]   FCALL        head->data = 0
[L990]                SLL* item = head;
[L991]                int status = 0;
[L993]   COND TRUE    __VERIFIER_nondet_int()
[L995]   EXPR, FCALL  malloc(sizeof(SLL))
[L995]   FCALL        item->next = malloc(sizeof(SLL))
[L996]   EXPR, FCALL  item->next
[L996]   FCALL        item->next->prev = item
[L997]   EXPR, FCALL  item->next
[L997]                item = item->next
[L998]   FCALL        item->next = ((void*)0)
[L1000]  COND TRUE    !status
[L1002]  FCALL        item->data = 1
[L1003]               status = 1
[L1016]  COND FALSE   !(!(head != ((void*)0)))
[L1016]  COND FALSE   !(0)
[L1017]  COND FALSE   !(!(item != ((void*)0)))
[L1017]  COND FALSE   !(0)
[L993]   COND FALSE   !(__VERIFIER_nondet_int())
[L1020]  COND FALSE   !(!(head != ((void*)0)))
[L1020]  COND FALSE   !(0)
[L1021]  COND FALSE   !(status == 1)
[L1026]  COND FALSE   !(status == 2)
[L1032]  COND TRUE    status == 3
[L1034]  COND FALSE   !(!(head != ((void*)0)))
[L1034]  COND FALSE   !(0)
[L1035]  FCALL        head->next

  - UnprovableResult [Line: 1]: Unable to prove that pointer dereference always succeeds
    Unable to prove that pointer dereference always succeeds
 Reason: abstract domain could reach this error location. 
Possible FailurePath: 
[L986]   EXPR, FCALL  malloc(sizeof(SLL))
[L986]                SLL* head = malloc(sizeof(SLL));
[L987]   FCALL        head->next = ((void*)0)
[L988]   FCALL        head->prev = ((void*)0)
[L989]   FCALL        head->data = 0
[L990]                SLL* item = head;
[L991]                int status = 0;
[L993]   COND TRUE    __VERIFIER_nondet_int()
[L995]   EXPR, FCALL  malloc(sizeof(SLL))
[L995]   FCALL        item->next = malloc(sizeof(SLL))
[L996]   EXPR, FCALL  item->next
[L996]   FCALL        item->next->prev = item
[L997]   EXPR, FCALL  item->next
[L997]                item = item->next
[L998]   FCALL        item->next = ((void*)0)
[L1000]  COND TRUE    !status
[L1002]  FCALL        item->data = 1
[L1003]               status = 1
[L1016]  COND FALSE   !(!(head != ((void*)0)))
[L1016]  COND FALSE   !(0)
[L1017]  COND FALSE   !(!(item != ((void*)0)))
[L1017]  COND FALSE   !(0)
[L993]   COND TRUE    __VERIFIER_nondet_int()
[L995]   EXPR, FCALL  malloc(sizeof(SLL))
[L995]   FCALL        item->next = malloc(sizeof(SLL))
[L996]   EXPR, FCALL  item->next
[L996]   FCALL        item->next->prev = item
[L997]   EXPR, FCALL  item->next
[L997]                item = item->next
[L998]   FCALL        item->next = ((void*)0)
[L1000]  COND FALSE   !(!status)
[L1005]  COND TRUE    status == 1
[L1007]  FCALL        item->data = 2

  - UnprovableResult [Line: 1]: Unable to prove that pointer dereference always succeeds
    Unable to prove that pointer dereference always succeeds
 Reason: abstract domain could reach this error location. 
Possible FailurePath: 
[L986]   EXPR, FCALL  malloc(sizeof(SLL))
[L986]                SLL* head = malloc(sizeof(SLL));
[L987]   FCALL        head->next = ((void*)0)
[L988]   FCALL        head->prev = ((void*)0)
[L989]   FCALL        head->data = 0
[L990]                SLL* item = head;
[L991]                int status = 0;
[L993]   COND TRUE    __VERIFIER_nondet_int()
[L995]   EXPR, FCALL  malloc(sizeof(SLL))
[L995]   FCALL        item->next = malloc(sizeof(SLL))
[L996]   EXPR, FCALL  item->next
[L996]   FCALL        item->next->prev = item
[L997]   EXPR, FCALL  item->next
[L997]                item = item->next
[L998]   FCALL        item->next = ((void*)0)
[L1000]  COND TRUE    !status
[L1002]  FCALL        item->data = 1
[L1003]               status = 1
[L1016]  COND FALSE   !(!(head != ((void*)0)))
[L1016]  COND FALSE   !(0)
[L1017]  COND FALSE   !(!(item != ((void*)0)))
[L1017]  COND FALSE   !(0)
[L993]   COND TRUE    __VERIFIER_nondet_int()
[L995]   EXPR, FCALL  malloc(sizeof(SLL))
[L995]   FCALL        item->next = malloc(sizeof(SLL))
[L996]   EXPR, FCALL  item->next
[L996]   FCALL        item->next->prev = item
[L997]   EXPR, FCALL  item->next
[L997]                item = item->next
[L998]   FCALL        item->next = ((void*)0)
[L1000]  COND FALSE   !(!status)
[L1005]  COND FALSE   !(status == 1)
[L1010]  COND TRUE    status >= 2
[L1012]  FCALL        item->data = 3

  - UnprovableResult [Line: 1]: Unable to prove that pointer dereference always succeeds
    Unable to prove that pointer dereference always succeeds
 Reason: abstract domain could reach this error location. 
Possible FailurePath: 
[L986]   EXPR, FCALL  malloc(sizeof(SLL))
[L986]                SLL* head = malloc(sizeof(SLL));
[L987]   FCALL        head->next = ((void*)0)
[L988]   FCALL        head->prev = ((void*)0)
[L989]   FCALL        head->data = 0
[L990]                SLL* item = head;
[L991]                int status = 0;
[L993]   COND TRUE    __VERIFIER_nondet_int()
[L995]   EXPR, FCALL  malloc(sizeof(SLL))
[L995]   FCALL        item->next = malloc(sizeof(SLL))
[L996]   EXPR, FCALL  item->next
[L996]   FCALL        item->next->prev = item
[L997]   EXPR, FCALL  item->next
[L997]                item = item->next
[L998]   FCALL        item->next = ((void*)0)
[L1000]  COND TRUE    !status
[L1002]  FCALL        item->data = 1
[L1003]               status = 1
[L1016]  COND FALSE   !(!(head != ((void*)0)))
[L1016]  COND FALSE   !(0)
[L1017]  COND FALSE   !(!(item != ((void*)0)))
[L1017]  COND FALSE   !(0)
[L993]   COND FALSE   !(__VERIFIER_nondet_int())
[L1020]  COND FALSE   !(!(head != ((void*)0)))
[L1020]  COND FALSE   !(0)
[L1021]  COND FALSE   !(status == 1)
[L1026]  COND TRUE    status == 2
[L1028]  COND FALSE   !(!(head != ((void*)0)))
[L1028]  COND FALSE   !(0)
[L1029]  EXPR, FCALL  head->next
[L1029]  COND FALSE   !(!(head->next != ((void*)0)))
[L1029]  COND FALSE   !(0)
[L1030]  FCALL        head->next

  - UnprovableResult [Line: 1]: Unable to prove that pointer dereference always succeeds
    Unable to prove that pointer dereference always succeeds
 Reason: abstract domain could reach this error location. 
Possible FailurePath: 
[L986]   EXPR, FCALL  malloc(sizeof(SLL))
[L986]                SLL* head = malloc(sizeof(SLL));
[L987]   FCALL        head->next = ((void*)0)
[L988]   FCALL        head->prev = ((void*)0)
[L989]   FCALL        head->data = 0
[L990]                SLL* item = head;
[L991]                int status = 0;
[L993]   COND TRUE    __VERIFIER_nondet_int()
[L995]   EXPR, FCALL  malloc(sizeof(SLL))
[L995]   FCALL        item->next = malloc(sizeof(SLL))
[L996]   EXPR, FCALL  item->next
[L996]   FCALL        item->next->prev = item
[L997]   EXPR, FCALL  item->next
[L997]                item = item->next
[L998]   FCALL        item->next = ((void*)0)
[L1000]  COND TRUE    !status
[L1002]  FCALL        item->data = 1
[L1003]               status = 1
[L1016]  COND FALSE   !(!(head != ((void*)0)))
[L1016]  COND FALSE   !(0)
[L1017]  COND FALSE   !(!(item != ((void*)0)))
[L1017]  COND FALSE   !(0)
[L993]   COND FALSE   !(__VERIFIER_nondet_int())
[L1020]  COND FALSE   !(!(head != ((void*)0)))
[L1020]  COND FALSE   !(0)
[L1021]  COND FALSE   !(status == 1)
[L1026]  COND FALSE   !(status == 2)
[L1032]  COND FALSE   !(status == 3)
[L1041]  EXPR, FCALL  head->next
[L1041]               item = head->next
[L1042]               item && __VERIFIER_nondet_int()
[L1042]               item && __VERIFIER_nondet_int()
[L1042]  COND TRUE    item && __VERIFIER_nondet_int()
[L1044]               !status || item->data > 0
[L1044]  FCALL        item->data

  - UnprovableResult [Line: 1]: Unable to prove that pointer dereference always succeeds
    Unable to prove that pointer dereference always succeeds
 Reason: abstract domain could reach this error location. 
Possible FailurePath: 
[L986]   EXPR, FCALL  malloc(sizeof(SLL))
[L986]                SLL* head = malloc(sizeof(SLL));
[L987]   FCALL        head->next = ((void*)0)
[L988]   FCALL        head->prev = ((void*)0)
[L989]   FCALL        head->data = 0
[L990]                SLL* item = head;
[L991]                int status = 0;
[L993]   COND TRUE    __VERIFIER_nondet_int()
[L995]   EXPR, FCALL  malloc(sizeof(SLL))
[L995]   FCALL        item->next = malloc(sizeof(SLL))
[L996]   EXPR, FCALL  item->next
[L996]   FCALL        item->next->prev = item
[L997]   EXPR, FCALL  item->next
[L997]                item = item->next
[L998]   FCALL        item->next = ((void*)0)
[L1000]  COND TRUE    !status
[L1002]  FCALL        item->data = 1
[L1003]               status = 1
[L1016]  COND FALSE   !(!(head != ((void*)0)))
[L1016]  COND FALSE   !(0)
[L1017]  COND FALSE   !(!(item != ((void*)0)))
[L1017]  COND FALSE   !(0)
[L993]   COND FALSE   !(__VERIFIER_nondet_int())
[L1020]  COND FALSE   !(!(head != ((void*)0)))
[L1020]  COND FALSE   !(0)
[L1021]  COND FALSE   !(status == 1)
[L1026]  COND FALSE   !(status == 2)
[L1032]  COND FALSE   !(status == 3)
[L1041]  EXPR, FCALL  head->next
[L1041]               item = head->next
[L1042]               item && __VERIFIER_nondet_int()
[L1042]               item && __VERIFIER_nondet_int()
[L1042]  COND TRUE    item && __VERIFIER_nondet_int()
[L1044]               !status || item->data > 0
[L1044]  FCALL        item->data

  - UnprovableResult [Line: 1]: Unable to prove that pointer dereference always succeeds
    Unable to prove that pointer dereference always succeeds
 Reason: abstract domain could reach this error location. 
Possible FailurePath: 
[L986]   EXPR, FCALL  malloc(sizeof(SLL))
[L986]                SLL* head = malloc(sizeof(SLL));
[L987]   FCALL        head->next = ((void*)0)
[L988]   FCALL        head->prev = ((void*)0)
[L989]   FCALL        head->data = 0
[L990]                SLL* item = head;
[L991]                int status = 0;
[L993]   COND TRUE    __VERIFIER_nondet_int()
[L995]   EXPR, FCALL  malloc(sizeof(SLL))
[L995]   FCALL        item->next = malloc(sizeof(SLL))
[L996]   EXPR, FCALL  item->next
[L996]   FCALL        item->next->prev = item
[L997]   EXPR, FCALL  item->next
[L997]                item = item->next
[L998]   FCALL        item->next = ((void*)0)
[L1000]  COND TRUE    !status
[L1002]  FCALL        item->data = 1
[L1003]               status = 1
[L1016]  COND FALSE   !(!(head != ((void*)0)))
[L1016]  COND FALSE   !(0)
[L1017]  COND FALSE   !(!(item != ((void*)0)))
[L1017]  COND FALSE   !(0)
[L993]   COND FALSE   !(__VERIFIER_nondet_int())
[L1020]  COND FALSE   !(!(head != ((void*)0)))
[L1020]  COND FALSE   !(0)
[L1021]  COND FALSE   !(status == 1)
[L1026]  COND FALSE   !(status == 2)
[L1032]  COND TRUE    status == 3
[L1034]  COND FALSE   !(!(head != ((void*)0)))
[L1034]  COND FALSE   !(0)
[L1035]  EXPR, FCALL  head->next
[L1035]  COND FALSE   !(!(head->next != ((void*)0)))
[L1035]  COND FALSE   !(0)
[L1036]  FCALL        head->next

  - UnprovableResult [Line: 1]: Unable to prove that pointer dereference always succeeds
    Unable to prove that pointer dereference always succeeds
 Reason: abstract domain could reach this error location. 
Possible FailurePath: 
[L986]   EXPR, FCALL  malloc(sizeof(SLL))
[L986]                SLL* head = malloc(sizeof(SLL));
[L987]   FCALL        head->next = ((void*)0)
[L988]   FCALL        head->prev = ((void*)0)
[L989]   FCALL        head->data = 0
[L990]                SLL* item = head;
[L991]                int status = 0;
[L993]   COND TRUE    __VERIFIER_nondet_int()
[L995]   EXPR, FCALL  malloc(sizeof(SLL))
[L995]   FCALL        item->next = malloc(sizeof(SLL))
[L996]   EXPR, FCALL  item->next
[L996]   FCALL        item->next->prev = item
[L997]   EXPR, FCALL  item->next
[L997]                item = item->next
[L998]   FCALL        item->next = ((void*)0)
[L1000]  COND TRUE    !status
[L1002]  FCALL        item->data = 1
[L1003]               status = 1
[L1016]  COND FALSE   !(!(head != ((void*)0)))
[L1016]  COND FALSE   !(0)
[L1017]  COND FALSE   !(!(item != ((void*)0)))
[L1017]  COND FALSE   !(0)
[L993]   COND FALSE   !(__VERIFIER_nondet_int())
[L1020]  COND FALSE   !(!(head != ((void*)0)))
[L1020]  COND FALSE   !(0)
[L1021]  COND FALSE   !(status == 1)
[L1026]  COND TRUE    status == 2
[L1028]  COND FALSE   !(!(head != ((void*)0)))
[L1028]  COND FALSE   !(0)
[L1029]  EXPR, FCALL  head->next
[L1029]  COND FALSE   !(!(head->next != ((void*)0)))
[L1029]  COND FALSE   !(0)
[L1030]  EXPR, FCALL  head->next
[L1030]  FCALL        head->next->next

  - UnprovableResult [Line: 1]: Unable to prove that pointer dereference always succeeds
    Unable to prove that pointer dereference always succeeds
 Reason: abstract domain could reach this error location. 
Possible FailurePath: 
[L986]   EXPR, FCALL  malloc(sizeof(SLL))
[L986]                SLL* head = malloc(sizeof(SLL));
[L987]   FCALL        head->next = ((void*)0)
[L988]   FCALL        head->prev = ((void*)0)
[L989]   FCALL        head->data = 0
[L990]                SLL* item = head;
[L991]                int status = 0;
[L993]   COND TRUE    __VERIFIER_nondet_int()
[L995]   EXPR, FCALL  malloc(sizeof(SLL))
[L995]   FCALL        item->next = malloc(sizeof(SLL))
[L996]   EXPR, FCALL  item->next
[L996]   FCALL        item->next->prev = item
[L997]   EXPR, FCALL  item->next
[L997]                item = item->next
[L998]   FCALL        item->next = ((void*)0)
[L1000]  COND TRUE    !status
[L1002]  FCALL        item->data = 1
[L1003]               status = 1
[L1016]  COND FALSE   !(!(head != ((void*)0)))
[L1016]  COND FALSE   !(0)
[L1017]  COND FALSE   !(!(item != ((void*)0)))
[L1017]  COND FALSE   !(0)
[L993]   COND FALSE   !(__VERIFIER_nondet_int())
[L1020]  COND FALSE   !(!(head != ((void*)0)))
[L1020]  COND FALSE   !(0)
[L1021]  COND FALSE   !(status == 1)
[L1026]  COND TRUE    status == 2
[L1028]  COND FALSE   !(!(head != ((void*)0)))
[L1028]  COND FALSE   !(0)
[L1029]  EXPR, FCALL  head->next
[L1029]  COND FALSE   !(!(head->next != ((void*)0)))
[L1029]  COND FALSE   !(0)
[L1030]  EXPR, FCALL  head->next
[L1030]  FCALL        head->next->next

  - UnprovableResult [Line: 1]: Unable to prove that pointer dereference always succeeds
    Unable to prove that pointer dereference always succeeds
 Reason: abstract domain could reach this error location. 
Possible FailurePath: 
[L986]   EXPR, FCALL  malloc(sizeof(SLL))
[L986]                SLL* head = malloc(sizeof(SLL));
[L987]   FCALL        head->next = ((void*)0)
[L988]   FCALL        head->prev = ((void*)0)
[L989]   FCALL        head->data = 0
[L990]                SLL* item = head;
[L991]                int status = 0;
[L993]   COND TRUE    __VERIFIER_nondet_int()
[L995]   EXPR, FCALL  malloc(sizeof(SLL))
[L995]   FCALL        item->next = malloc(sizeof(SLL))
[L996]   EXPR, FCALL  item->next
[L996]   FCALL        item->next->prev = item
[L997]   EXPR, FCALL  item->next
[L997]                item = item->next
[L998]   FCALL        item->next = ((void*)0)
[L1000]  COND TRUE    !status
[L1002]  FCALL        item->data = 1
[L1003]               status = 1
[L1016]  COND FALSE   !(!(head != ((void*)0)))
[L1016]  COND FALSE   !(0)
[L1017]  COND FALSE   !(!(item != ((void*)0)))
[L1017]  COND FALSE   !(0)
[L993]   COND FALSE   !(__VERIFIER_nondet_int())
[L1020]  COND FALSE   !(!(head != ((void*)0)))
[L1020]  COND FALSE   !(0)
[L1021]  COND FALSE   !(status == 1)
[L1026]  COND FALSE   !(status == 2)
[L1032]  COND TRUE    status == 3
[L1034]  COND FALSE   !(!(head != ((void*)0)))
[L1034]  COND FALSE   !(0)
[L1035]  EXPR, FCALL  head->next
[L1035]  COND FALSE   !(!(head->next != ((void*)0)))
[L1035]  COND FALSE   !(0)
[L1036]  EXPR, FCALL  head->next
[L1036]  FCALL        head->next->next

  - UnprovableResult [Line: 1]: Unable to prove that pointer dereference always succeeds
    Unable to prove that pointer dereference always succeeds
 Reason: abstract domain could reach this error location. 
Possible FailurePath: 
[L986]   EXPR, FCALL  malloc(sizeof(SLL))
[L986]                SLL* head = malloc(sizeof(SLL));
[L987]   FCALL        head->next = ((void*)0)
[L988]   FCALL        head->prev = ((void*)0)
[L989]   FCALL        head->data = 0
[L990]                SLL* item = head;
[L991]                int status = 0;
[L993]   COND TRUE    __VERIFIER_nondet_int()
[L995]   EXPR, FCALL  malloc(sizeof(SLL))
[L995]   FCALL        item->next = malloc(sizeof(SLL))
[L996]   EXPR, FCALL  item->next
[L996]   FCALL        item->next->prev = item
[L997]   EXPR, FCALL  item->next
[L997]                item = item->next
[L998]   FCALL        item->next = ((void*)0)
[L1000]  COND TRUE    !status
[L1002]  FCALL        item->data = 1
[L1003]               status = 1
[L1016]  COND FALSE   !(!(head != ((void*)0)))
[L1016]  COND FALSE   !(0)
[L1017]  COND FALSE   !(!(item != ((void*)0)))
[L1017]  COND FALSE   !(0)
[L993]   COND FALSE   !(__VERIFIER_nondet_int())
[L1020]  COND FALSE   !(!(head != ((void*)0)))
[L1020]  COND FALSE   !(0)
[L1021]  COND FALSE   !(status == 1)
[L1026]  COND FALSE   !(status == 2)
[L1032]  COND TRUE    status == 3
[L1034]  COND FALSE   !(!(head != ((void*)0)))
[L1034]  COND FALSE   !(0)
[L1035]  EXPR, FCALL  head->next
[L1035]  COND FALSE   !(!(head->next != ((void*)0)))
[L1035]  COND FALSE   !(0)
[L1036]  EXPR, FCALL  head->next
[L1036]  FCALL        head->next->next

  - UnprovableResult [Line: 1]: Unable to prove that pointer dereference always succeeds
    Unable to prove that pointer dereference always succeeds
 Reason: abstract domain could reach this error location. 
Possible FailurePath: 
[L986]   EXPR, FCALL  malloc(sizeof(SLL))
[L986]                SLL* head = malloc(sizeof(SLL));
[L987]   FCALL        head->next = ((void*)0)
[L988]   FCALL        head->prev = ((void*)0)
[L989]   FCALL        head->data = 0
[L990]                SLL* item = head;
[L991]                int status = 0;
[L993]   COND TRUE    __VERIFIER_nondet_int()
[L995]   EXPR, FCALL  malloc(sizeof(SLL))
[L995]   FCALL        item->next = malloc(sizeof(SLL))
[L996]   EXPR, FCALL  item->next
[L996]   FCALL        item->next->prev = item
[L997]   EXPR, FCALL  item->next
[L997]                item = item->next
[L998]   FCALL        item->next = ((void*)0)
[L1000]  COND TRUE    !status
[L1002]  FCALL        item->data = 1
[L1003]               status = 1
[L1016]  COND FALSE   !(!(head != ((void*)0)))
[L1016]  COND FALSE   !(0)
[L1017]  COND FALSE   !(!(item != ((void*)0)))
[L1017]  COND FALSE   !(0)
[L993]   COND FALSE   !(__VERIFIER_nondet_int())
[L1020]  COND FALSE   !(!(head != ((void*)0)))
[L1020]  COND FALSE   !(0)
[L1021]  COND FALSE   !(status == 1)
[L1026]  COND FALSE   !(status == 2)
[L1032]  COND TRUE    status == 3
[L1034]  COND FALSE   !(!(head != ((void*)0)))
[L1034]  COND FALSE   !(0)
[L1035]  EXPR, FCALL  head->next
[L1035]  COND FALSE   !(!(head->next != ((void*)0)))
[L1035]  COND FALSE   !(0)
[L1036]  EXPR, FCALL  head->next
[L1036]  EXPR, FCALL  head->next->next
[L1036]  COND FALSE   !(!(head->next->next != ((void*)0)))
[L1036]  COND FALSE   !(0)
[L1037]  FCALL        head->next

  - UnprovableResult [Line: 1]: Unable to prove that pointer dereference always succeeds
    Unable to prove that pointer dereference always succeeds
 Reason: abstract domain could reach this error location. 
Possible FailurePath: 
[L986]   EXPR, FCALL  malloc(sizeof(SLL))
[L986]                SLL* head = malloc(sizeof(SLL));
[L987]   FCALL        head->next = ((void*)0)
[L988]   FCALL        head->prev = ((void*)0)
[L989]   FCALL        head->data = 0
[L990]                SLL* item = head;
[L991]                int status = 0;
[L993]   COND TRUE    __VERIFIER_nondet_int()
[L995]   EXPR, FCALL  malloc(sizeof(SLL))
[L995]   FCALL        item->next = malloc(sizeof(SLL))
[L996]   EXPR, FCALL  item->next
[L996]   FCALL        item->next->prev = item
[L997]   EXPR, FCALL  item->next
[L997]                item = item->next
[L998]   FCALL        item->next = ((void*)0)
[L1000]  COND TRUE    !status
[L1002]  FCALL        item->data = 1
[L1003]               status = 1
[L1016]  COND FALSE   !(!(head != ((void*)0)))
[L1016]  COND FALSE   !(0)
[L1017]  COND FALSE   !(!(item != ((void*)0)))
[L1017]  COND FALSE   !(0)
[L993]   COND FALSE   !(__VERIFIER_nondet_int())
[L1020]  COND FALSE   !(!(head != ((void*)0)))
[L1020]  COND FALSE   !(0)
[L1021]  COND FALSE   !(status == 1)
[L1026]  COND FALSE   !(status == 2)
[L1032]  COND TRUE    status == 3
[L1034]  COND FALSE   !(!(head != ((void*)0)))
[L1034]  COND FALSE   !(0)
[L1035]  EXPR, FCALL  head->next
[L1035]  COND FALSE   !(!(head->next != ((void*)0)))
[L1035]  COND FALSE   !(0)
[L1036]  EXPR, FCALL  head->next
[L1036]  EXPR, FCALL  head->next->next
[L1036]  COND FALSE   !(!(head->next->next != ((void*)0)))
[L1036]  COND FALSE   !(0)
[L1037]  EXPR, FCALL  head->next
[L1037]  FCALL        head->next->next

  - UnprovableResult [Line: 1]: Unable to prove that pointer dereference always succeeds
    Unable to prove that pointer dereference always succeeds
 Reason: abstract domain could reach this error location. 
Possible FailurePath: 
[L986]   EXPR, FCALL  malloc(sizeof(SLL))
[L986]                SLL* head = malloc(sizeof(SLL));
[L987]   FCALL        head->next = ((void*)0)
[L988]   FCALL        head->prev = ((void*)0)
[L989]   FCALL        head->data = 0
[L990]                SLL* item = head;
[L991]                int status = 0;
[L993]   COND TRUE    __VERIFIER_nondet_int()
[L995]   EXPR, FCALL  malloc(sizeof(SLL))
[L995]   FCALL        item->next = malloc(sizeof(SLL))
[L996]   EXPR, FCALL  item->next
[L996]   FCALL        item->next->prev = item
[L997]   EXPR, FCALL  item->next
[L997]                item = item->next
[L998]   FCALL        item->next = ((void*)0)
[L1000]  COND TRUE    !status
[L1002]  FCALL        item->data = 1
[L1003]               status = 1
[L1016]  COND FALSE   !(!(head != ((void*)0)))
[L1016]  COND FALSE   !(0)
[L1017]  COND FALSE   !(!(item != ((void*)0)))
[L1017]  COND FALSE   !(0)
[L993]   COND FALSE   !(__VERIFIER_nondet_int())
[L1020]  COND FALSE   !(!(head != ((void*)0)))
[L1020]  COND FALSE   !(0)
[L1021]  COND FALSE   !(status == 1)
[L1026]  COND FALSE   !(status == 2)
[L1032]  COND TRUE    status == 3
[L1034]  COND FALSE   !(!(head != ((void*)0)))
[L1034]  COND FALSE   !(0)
[L1035]  EXPR, FCALL  head->next
[L1035]  COND FALSE   !(!(head->next != ((void*)0)))
[L1035]  COND FALSE   !(0)
[L1036]  EXPR, FCALL  head->next
[L1036]  EXPR, FCALL  head->next->next
[L1036]  COND FALSE   !(!(head->next->next != ((void*)0)))
[L1036]  COND FALSE   !(0)
[L1037]  EXPR, FCALL  head->next
[L1037]  EXPR, FCALL  head->next->next
[L1037]  FCALL        head->next->next->next

  - UnprovableResult [Line: 1]: Unable to prove that pointer dereference always succeeds
    Unable to prove that pointer dereference always succeeds
 Reason: abstract domain could reach this error location. 
Possible FailurePath: 
[L986]   EXPR, FCALL  malloc(sizeof(SLL))
[L986]                SLL* head = malloc(sizeof(SLL));
[L987]   FCALL        head->next = ((void*)0)
[L988]   FCALL        head->prev = ((void*)0)
[L989]   FCALL        head->data = 0
[L990]                SLL* item = head;
[L991]                int status = 0;
[L993]   COND TRUE    __VERIFIER_nondet_int()
[L995]   EXPR, FCALL  malloc(sizeof(SLL))
[L995]   FCALL        item->next = malloc(sizeof(SLL))
[L996]   EXPR, FCALL  item->next
[L996]   FCALL        item->next->prev = item
[L997]   EXPR, FCALL  item->next
[L997]                item = item->next
[L998]   FCALL        item->next = ((void*)0)
[L1000]  COND TRUE    !status
[L1002]  FCALL        item->data = 1
[L1003]               status = 1
[L1016]  COND FALSE   !(!(head != ((void*)0)))
[L1016]  COND FALSE   !(0)
[L1017]  COND FALSE   !(!(item != ((void*)0)))
[L1017]  COND FALSE   !(0)
[L993]   COND FALSE   !(__VERIFIER_nondet_int())
[L1020]  COND FALSE   !(!(head != ((void*)0)))
[L1020]  COND FALSE   !(0)
[L1021]  COND FALSE   !(status == 1)
[L1026]  COND FALSE   !(status == 2)
[L1032]  COND TRUE    status == 3
[L1034]  COND FALSE   !(!(head != ((void*)0)))
[L1034]  COND FALSE   !(0)
[L1035]  EXPR, FCALL  head->next
[L1035]  COND FALSE   !(!(head->next != ((void*)0)))
[L1035]  COND FALSE   !(0)
[L1036]  EXPR, FCALL  head->next
[L1036]  EXPR, FCALL  head->next->next
[L1036]  COND FALSE   !(!(head->next->next != ((void*)0)))
[L1036]  COND FALSE   !(0)
[L1037]  EXPR, FCALL  head->next
[L1037]  EXPR, FCALL  head->next->next
[L1037]  FCALL        head->next->next->next

  - UnprovableResult [Line: 1]: Unable to prove that pointer dereference always succeeds
    Unable to prove that pointer dereference always succeeds
 Reason: abstract domain could reach this error location. 
Possible FailurePath: 
[L986]   EXPR, FCALL  malloc(sizeof(SLL))
[L986]                SLL* head = malloc(sizeof(SLL));
[L987]   FCALL        head->next = ((void*)0)
[L988]   FCALL        head->prev = ((void*)0)
[L989]   FCALL        head->data = 0
[L990]                SLL* item = head;
[L991]                int status = 0;
[L993]   COND TRUE    __VERIFIER_nondet_int()
[L995]   EXPR, FCALL  malloc(sizeof(SLL))
[L995]   FCALL        item->next = malloc(sizeof(SLL))
[L996]   EXPR, FCALL  item->next
[L996]   FCALL        item->next->prev = item
[L997]   EXPR, FCALL  item->next
[L997]                item = item->next
[L998]   FCALL        item->next = ((void*)0)
[L1000]  COND TRUE    !status
[L1002]  FCALL        item->data = 1
[L1003]               status = 1
[L1016]  COND FALSE   !(!(head != ((void*)0)))
[L1016]  COND FALSE   !(0)
[L1017]  COND FALSE   !(!(item != ((void*)0)))
[L1017]  COND FALSE   !(0)
[L993]   COND FALSE   !(__VERIFIER_nondet_int())
[L1020]  COND FALSE   !(!(head != ((void*)0)))
[L1020]  COND FALSE   !(0)
[L1021]  COND FALSE   !(status == 1)
[L1026]  COND FALSE   !(status == 2)
[L1032]  COND TRUE    status == 3
[L1034]  COND FALSE   !(!(head != ((void*)0)))
[L1034]  COND FALSE   !(0)
[L1035]  EXPR, FCALL  head->next
[L1035]  COND FALSE   !(!(head->next != ((void*)0)))
[L1035]  COND FALSE   !(0)
[L1036]  EXPR, FCALL  head->next
[L1036]  EXPR, FCALL  head->next->next
[L1036]  COND FALSE   !(!(head->next->next != ((void*)0)))
[L1036]  COND FALSE   !(0)
[L1037]  EXPR, FCALL  head->next
[L1037]  EXPR, FCALL  head->next->next
[L1037]  EXPR, FCALL  head->next->next->next
[L1037]  COND FALSE   !(!(head->next->next->next != ((void*)0)))
[L1037]  COND FALSE   !(0)
[L1038]  FCALL        head->next

  - UnprovableResult [Line: 1]: Unable to prove that pointer dereference always succeeds
    Unable to prove that pointer dereference always succeeds
 Reason: abstract domain could reach this error location. 
Possible FailurePath: 
[L986]   EXPR, FCALL  malloc(sizeof(SLL))
[L986]                SLL* head = malloc(sizeof(SLL));
[L987]   FCALL        head->next = ((void*)0)
[L988]   FCALL        head->prev = ((void*)0)
[L989]   FCALL        head->data = 0
[L990]                SLL* item = head;
[L991]                int status = 0;
[L993]   COND TRUE    __VERIFIER_nondet_int()
[L995]   EXPR, FCALL  malloc(sizeof(SLL))
[L995]   FCALL        item->next = malloc(sizeof(SLL))
[L996]   EXPR, FCALL  item->next
[L996]   FCALL        item->next->prev = item
[L997]   EXPR, FCALL  item->next
[L997]                item = item->next
[L998]   FCALL        item->next = ((void*)0)
[L1000]  COND TRUE    !status
[L1002]  FCALL        item->data = 1
[L1003]               status = 1
[L1016]  COND FALSE   !(!(head != ((void*)0)))
[L1016]  COND FALSE   !(0)
[L1017]  COND FALSE   !(!(item != ((void*)0)))
[L1017]  COND FALSE   !(0)
[L993]   COND FALSE   !(__VERIFIER_nondet_int())
[L1020]  COND FALSE   !(!(head != ((void*)0)))
[L1020]  COND FALSE   !(0)
[L1021]  COND FALSE   !(status == 1)
[L1026]  COND FALSE   !(status == 2)
[L1032]  COND TRUE    status == 3
[L1034]  COND FALSE   !(!(head != ((void*)0)))
[L1034]  COND FALSE   !(0)
[L1035]  EXPR, FCALL  head->next
[L1035]  COND FALSE   !(!(head->next != ((void*)0)))
[L1035]  COND FALSE   !(0)
[L1036]  EXPR, FCALL  head->next
[L1036]  EXPR, FCALL  head->next->next
[L1036]  COND FALSE   !(!(head->next->next != ((void*)0)))
[L1036]  COND FALSE   !(0)
[L1037]  EXPR, FCALL  head->next
[L1037]  EXPR, FCALL  head->next->next
[L1037]  EXPR, FCALL  head->next->next->next
[L1037]  COND FALSE   !(!(head->next->next->next != ((void*)0)))
[L1037]  COND FALSE   !(0)
[L1038]  EXPR, FCALL  head->next
[L1038]  FCALL        head->next->next

  - UnprovableResult [Line: 1]: Unable to prove that pointer dereference always succeeds
    Unable to prove that pointer dereference always succeeds
 Reason: abstract domain could reach this error location. 
Possible FailurePath: 
[L986]   EXPR, FCALL  malloc(sizeof(SLL))
[L986]                SLL* head = malloc(sizeof(SLL));
[L987]   FCALL        head->next = ((void*)0)
[L988]   FCALL        head->prev = ((void*)0)
[L989]   FCALL        head->data = 0
[L990]                SLL* item = head;
[L991]                int status = 0;
[L993]   COND TRUE    __VERIFIER_nondet_int()
[L995]   EXPR, FCALL  malloc(sizeof(SLL))
[L995]   FCALL        item->next = malloc(sizeof(SLL))
[L996]   EXPR, FCALL  item->next
[L996]   FCALL        item->next->prev = item
[L997]   EXPR, FCALL  item->next
[L997]                item = item->next
[L998]   FCALL        item->next = ((void*)0)
[L1000]  COND TRUE    !status
[L1002]  FCALL        item->data = 1
[L1003]               status = 1
[L1016]  COND FALSE   !(!(head != ((void*)0)))
[L1016]  COND FALSE   !(0)
[L1017]  COND FALSE   !(!(item != ((void*)0)))
[L1017]  COND FALSE   !(0)
[L993]   COND TRUE    __VERIFIER_nondet_int()
[L995]   EXPR, FCALL  malloc(sizeof(SLL))
[L995]   FCALL        item->next = malloc(sizeof(SLL))
[L996]   EXPR, FCALL  item->next
[L996]   FCALL        item->next->prev = item
[L997]   EXPR, FCALL  item->next
[L997]                item = item->next
[L998]   FCALL        item->next = ((void*)0)
[L1000]  COND FALSE   !(!status)
[L1005]  COND FALSE   !(status == 1)
[L1010]  COND FALSE   !(status >= 2)
[L1016]  COND FALSE   !(!(head != ((void*)0)))
[L1016]  COND FALSE   !(0)
[L1017]  COND FALSE   !(!(item != ((void*)0)))
[L1017]  COND FALSE   !(0)
[L993]   COND FALSE   !(__VERIFIER_nondet_int())
[L1020]  COND FALSE   !(!(head != ((void*)0)))
[L1020]  COND FALSE   !(0)
[L1021]  COND FALSE   !(status == 1)
[L1026]  COND FALSE   !(status == 2)
[L1032]  COND FALSE   !(status == 3)
[L1041]  FCALL        head->next

  - UnprovableResult [Line: 1]: Unable to prove that pointer dereference always succeeds
    Unable to prove that pointer dereference always succeeds
 Reason: abstract domain could reach this error location. 
Possible FailurePath: 
[L986]   EXPR, FCALL  malloc(sizeof(SLL))
[L986]                SLL* head = malloc(sizeof(SLL));
[L987]   FCALL        head->next = ((void*)0)
[L988]   FCALL        head->prev = ((void*)0)
[L989]   FCALL        head->data = 0
[L990]                SLL* item = head;
[L991]                int status = 0;
[L993]   COND TRUE    __VERIFIER_nondet_int()
[L995]   EXPR, FCALL  malloc(sizeof(SLL))
[L995]   FCALL        item->next = malloc(sizeof(SLL))
[L996]   EXPR, FCALL  item->next
[L996]   FCALL        item->next->prev = item
[L997]   EXPR, FCALL  item->next
[L997]                item = item->next
[L998]   FCALL        item->next = ((void*)0)
[L1000]  COND TRUE    !status
[L1002]  FCALL        item->data = 1
[L1003]               status = 1
[L1016]  COND FALSE   !(!(head != ((void*)0)))
[L1016]  COND FALSE   !(0)
[L1017]  COND FALSE   !(!(item != ((void*)0)))
[L1017]  COND FALSE   !(0)
[L993]   COND FALSE   !(__VERIFIER_nondet_int())
[L1020]  COND FALSE   !(!(head != ((void*)0)))
[L1020]  COND FALSE   !(0)
[L1021]  COND FALSE   !(status == 1)
[L1026]  COND FALSE   !(status == 2)
[L1032]  COND TRUE    status == 3
[L1034]  COND FALSE   !(!(head != ((void*)0)))
[L1034]  COND FALSE   !(0)
[L1035]  EXPR, FCALL  head->next
[L1035]  COND FALSE   !(!(head->next != ((void*)0)))
[L1035]  COND FALSE   !(0)
[L1036]  EXPR, FCALL  head->next
[L1036]  EXPR, FCALL  head->next->next
[L1036]  COND FALSE   !(!(head->next->next != ((void*)0)))
[L1036]  COND FALSE   !(0)
[L1037]  EXPR, FCALL  head->next
[L1037]  EXPR, FCALL  head->next->next
[L1037]  EXPR, FCALL  head->next->next->next
[L1037]  COND FALSE   !(!(head->next->next->next != ((void*)0)))
[L1037]  COND FALSE   !(0)
[L1038]  EXPR, FCALL  head->next
[L1038]  EXPR, FCALL  head->next->next
[L1038]  FCALL        head->next->next->next

  - UnprovableResult [Line: 1]: Unable to prove that pointer dereference always succeeds
    Unable to prove that pointer dereference always succeeds
 Reason: abstract domain could reach this error location. 
Possible FailurePath: 
[L986]   EXPR, FCALL  malloc(sizeof(SLL))
[L986]                SLL* head = malloc(sizeof(SLL));
[L987]   FCALL        head->next = ((void*)0)
[L988]   FCALL        head->prev = ((void*)0)
[L989]   FCALL        head->data = 0
[L990]                SLL* item = head;
[L991]                int status = 0;
[L993]   COND TRUE    __VERIFIER_nondet_int()
[L995]   EXPR, FCALL  malloc(sizeof(SLL))
[L995]   FCALL        item->next = malloc(sizeof(SLL))
[L996]   EXPR, FCALL  item->next
[L996]   FCALL        item->next->prev = item
[L997]   EXPR, FCALL  item->next
[L997]                item = item->next
[L998]   FCALL        item->next = ((void*)0)
[L1000]  COND TRUE    !status
[L1002]  FCALL        item->data = 1
[L1003]               status = 1
[L1016]  COND FALSE   !(!(head != ((void*)0)))
[L1016]  COND FALSE   !(0)
[L1017]  COND FALSE   !(!(item != ((void*)0)))
[L1017]  COND FALSE   !(0)
[L993]   COND FALSE   !(__VERIFIER_nondet_int())
[L1020]  COND FALSE   !(!(head != ((void*)0)))
[L1020]  COND FALSE   !(0)
[L1021]  COND FALSE   !(status == 1)
[L1026]  COND FALSE   !(status == 2)
[L1032]  COND TRUE    status == 3
[L1034]  COND FALSE   !(!(head != ((void*)0)))
[L1034]  COND FALSE   !(0)
[L1035]  EXPR, FCALL  head->next
[L1035]  COND FALSE   !(!(head->next != ((void*)0)))
[L1035]  COND FALSE   !(0)
[L1036]  EXPR, FCALL  head->next
[L1036]  EXPR, FCALL  head->next->next
[L1036]  COND FALSE   !(!(head->next->next != ((void*)0)))
[L1036]  COND FALSE   !(0)
[L1037]  EXPR, FCALL  head->next
[L1037]  EXPR, FCALL  head->next->next
[L1037]  EXPR, FCALL  head->next->next->next
[L1037]  COND FALSE   !(!(head->next->next->next != ((void*)0)))
[L1037]  COND FALSE   !(0)
[L1038]  EXPR, FCALL  head->next
[L1038]  EXPR, FCALL  head->next->next
[L1038]  EXPR, FCALL  head->next->next->next
[L1038]  FCALL        head->next->next->next->data

  - UnprovableResult [Line: 1]: Unable to prove that pointer dereference always succeeds
    Unable to prove that pointer dereference always succeeds
 Reason: abstract domain could reach this error location. 
Possible FailurePath: 
[L986]   EXPR, FCALL  malloc(sizeof(SLL))
[L986]                SLL* head = malloc(sizeof(SLL));
[L987]   FCALL        head->next = ((void*)0)
[L988]   FCALL        head->prev = ((void*)0)
[L989]   FCALL        head->data = 0
[L990]                SLL* item = head;
[L991]                int status = 0;
[L993]   COND TRUE    __VERIFIER_nondet_int()
[L995]   EXPR, FCALL  malloc(sizeof(SLL))
[L995]   FCALL        item->next = malloc(sizeof(SLL))
[L996]   EXPR, FCALL  item->next
[L996]   FCALL        item->next->prev = item
[L997]   EXPR, FCALL  item->next
[L997]                item = item->next
[L998]   FCALL        item->next = ((void*)0)
[L1000]  COND TRUE    !status
[L1002]  FCALL        item->data = 1
[L1003]               status = 1
[L1016]  COND FALSE   !(!(head != ((void*)0)))
[L1016]  COND FALSE   !(0)
[L1017]  COND FALSE   !(!(item != ((void*)0)))
[L1017]  COND FALSE   !(0)
[L993]   COND FALSE   !(__VERIFIER_nondet_int())
[L1020]  COND FALSE   !(!(head != ((void*)0)))
[L1020]  COND FALSE   !(0)
[L1021]  COND FALSE   !(status == 1)
[L1026]  COND FALSE   !(status == 2)
[L1032]  COND TRUE    status == 3
[L1034]  COND FALSE   !(!(head != ((void*)0)))
[L1034]  COND FALSE   !(0)
[L1035]  EXPR, FCALL  head->next
[L1035]  COND FALSE   !(!(head->next != ((void*)0)))
[L1035]  COND FALSE   !(0)
[L1036]  EXPR, FCALL  head->next
[L1036]  EXPR, FCALL  head->next->next
[L1036]  COND FALSE   !(!(head->next->next != ((void*)0)))
[L1036]  COND FALSE   !(0)
[L1037]  EXPR, FCALL  head->next
[L1037]  EXPR, FCALL  head->next->next
[L1037]  EXPR, FCALL  head->next->next->next
[L1037]  COND FALSE   !(!(head->next->next->next != ((void*)0)))
[L1037]  COND FALSE   !(0)
[L1038]  EXPR, FCALL  head->next
[L1038]  EXPR, FCALL  head->next->next
[L1038]  EXPR, FCALL  head->next->next->next
[L1038]  FCALL        head->next->next->next->data

  - UnprovableResult [Line: 1]: Unable to prove that pointer dereference always succeeds
    Unable to prove that pointer dereference always succeeds
 Reason: abstract domain could reach this error location. 
Possible FailurePath: 
[L986]   EXPR, FCALL  malloc(sizeof(SLL))
[L986]                SLL* head = malloc(sizeof(SLL));
[L987]   FCALL        head->next = ((void*)0)
[L988]   FCALL        head->prev = ((void*)0)
[L989]   FCALL        head->data = 0
[L990]                SLL* item = head;
[L991]                int status = 0;
[L993]   COND TRUE    __VERIFIER_nondet_int()
[L995]   EXPR, FCALL  malloc(sizeof(SLL))
[L995]   FCALL        item->next = malloc(sizeof(SLL))
[L996]   EXPR, FCALL  item->next
[L996]   FCALL        item->next->prev = item
[L997]   EXPR, FCALL  item->next
[L997]                item = item->next
[L998]   FCALL        item->next = ((void*)0)
[L1000]  COND TRUE    !status
[L1002]  FCALL        item->data = 1
[L1003]               status = 1
[L1016]  COND FALSE   !(!(head != ((void*)0)))
[L1016]  COND FALSE   !(0)
[L1017]  COND FALSE   !(!(item != ((void*)0)))
[L1017]  COND FALSE   !(0)
[L993]   COND TRUE    __VERIFIER_nondet_int()
[L995]   EXPR, FCALL  malloc(sizeof(SLL))
[L995]   FCALL        item->next = malloc(sizeof(SLL))
[L996]   EXPR, FCALL  item->next
[L996]   FCALL        item->next->prev = item
[L997]   EXPR, FCALL  item->next
[L997]                item = item->next
[L998]   FCALL        item->next = ((void*)0)
[L1000]  COND TRUE    !status
[L1002]  FCALL        item->data = 1
[L1003]               status = 1
[L1016]  COND FALSE   !(!(head != ((void*)0)))
[L1016]  COND FALSE   !(0)
[L1017]  COND FALSE   !(!(item != ((void*)0)))
[L1017]  COND FALSE   !(0)
[L993]   COND FALSE   !(__VERIFIER_nondet_int())
[L1020]  COND FALSE   !(!(head != ((void*)0)))
[L1020]  COND FALSE   !(0)
[L1021]  COND TRUE    status == 1
[L1023]  COND FALSE   !(!(head != ((void*)0)))
[L1023]  COND FALSE   !(0)
[L1024]  FCALL        head->next

  - UnprovableResult [Line: 1]: Unable to prove that pointer dereference always succeeds
    Unable to prove that pointer dereference always succeeds
 Reason: abstract domain could reach this error location. 
Possible FailurePath: 
[L986]   EXPR, FCALL  malloc(sizeof(SLL))
[L986]                SLL* head = malloc(sizeof(SLL));
[L987]   FCALL        head->next = ((void*)0)
[L988]   FCALL        head->prev = ((void*)0)
[L989]   FCALL        head->data = 0
[L990]                SLL* item = head;
[L991]                int status = 0;
[L993]   COND TRUE    __VERIFIER_nondet_int()
[L995]   EXPR, FCALL  malloc(sizeof(SLL))
[L995]   FCALL        item->next = malloc(sizeof(SLL))
[L996]   EXPR, FCALL  item->next
[L996]   FCALL        item->next->prev = item
[L997]   EXPR, FCALL  item->next
[L997]                item = item->next
[L998]   FCALL        item->next = ((void*)0)
[L1000]  COND TRUE    !status
[L1002]  FCALL        item->data = 1
[L1003]               status = 1
[L1016]  COND FALSE   !(!(head != ((void*)0)))
[L1016]  COND FALSE   !(0)
[L1017]  COND FALSE   !(!(item != ((void*)0)))
[L1017]  COND FALSE   !(0)
[L993]   COND TRUE    __VERIFIER_nondet_int()
[L995]   EXPR, FCALL  malloc(sizeof(SLL))
[L995]   FCALL        item->next = malloc(sizeof(SLL))
[L996]   EXPR, FCALL  item->next
[L996]   FCALL        item->next->prev = item
[L997]   EXPR, FCALL  item->next
[L997]                item = item->next
[L998]   FCALL        item->next = ((void*)0)
[L1000]  COND FALSE   !(!status)
[L1005]  COND FALSE   !(status == 1)
[L1010]  COND FALSE   !(status >= 2)
[L1016]  COND FALSE   !(!(head != ((void*)0)))
[L1016]  COND FALSE   !(0)
[L1017]  COND FALSE   !(!(item != ((void*)0)))
[L1017]  COND FALSE   !(0)
[L993]   COND FALSE   !(__VERIFIER_nondet_int())
[L1020]  COND FALSE   !(!(head != ((void*)0)))
[L1020]  COND FALSE   !(0)
[L1021]  COND FALSE   !(status == 1)
[L1026]  COND TRUE    status == 2
[L1028]  COND FALSE   !(!(head != ((void*)0)))
[L1028]  COND FALSE   !(0)
[L1029]  FCALL        head->next

  - UnprovableResult [Line: 1]: Unable to prove that pointer dereference always succeeds
    Unable to prove that pointer dereference always succeeds
 Reason: abstract domain could reach this error location. 
Possible FailurePath: 
[L986]   EXPR, FCALL  malloc(sizeof(SLL))
[L986]                SLL* head = malloc(sizeof(SLL));
[L987]   FCALL        head->next = ((void*)0)
[L988]   FCALL        head->prev = ((void*)0)
[L989]   FCALL        head->data = 0
[L990]                SLL* item = head;
[L991]                int status = 0;
[L993]   COND TRUE    __VERIFIER_nondet_int()
[L995]   EXPR, FCALL  malloc(sizeof(SLL))
[L995]   FCALL        item->next = malloc(sizeof(SLL))
[L996]   EXPR, FCALL  item->next
[L996]   FCALL        item->next->prev = item
[L997]   EXPR, FCALL  item->next
[L997]                item = item->next
[L998]   FCALL        item->next = ((void*)0)
[L1000]  COND TRUE    !status
[L1002]  FCALL        item->data = 1
[L1003]               status = 1
[L1016]  COND FALSE   !(!(head != ((void*)0)))
[L1016]  COND FALSE   !(0)
[L1017]  COND FALSE   !(!(item != ((void*)0)))
[L1017]  COND FALSE   !(0)
[L993]   COND TRUE    __VERIFIER_nondet_int()
[L995]   EXPR, FCALL  malloc(sizeof(SLL))
[L995]   FCALL        item->next = malloc(sizeof(SLL))
[L996]   EXPR, FCALL  item->next
[L996]   FCALL        item->next->prev = item
[L997]   EXPR, FCALL  item->next
[L997]                item = item->next
[L998]   FCALL        item->next = ((void*)0)
[L1000]  COND FALSE   !(!status)
[L1005]  COND FALSE   !(status == 1)
[L1010]  COND FALSE   !(status >= 2)
[L1016]  COND FALSE   !(!(head != ((void*)0)))
[L1016]  COND FALSE   !(0)
[L1017]  COND FALSE   !(!(item != ((void*)0)))
[L1017]  COND FALSE   !(0)
[L993]   COND FALSE   !(__VERIFIER_nondet_int())
[L1020]  COND FALSE   !(!(head != ((void*)0)))
[L1020]  COND FALSE   !(0)
[L1021]  COND FALSE   !(status == 1)
[L1026]  COND FALSE   !(status == 2)
[L1032]  COND TRUE    status == 3
[L1034]  COND FALSE   !(!(head != ((void*)0)))
[L1034]  COND FALSE   !(0)
[L1035]  FCALL        head->next

  - PositiveResult [Line: 1]: pointer dereference always succeeds
    For all program executions holds that pointer dereference always succeeds at this location
  - PositiveResult [Line: 1]: pointer dereference always succeeds
    For all program executions holds that pointer dereference always succeeds at this location
  - PositiveResult [Line: 1]: pointer dereference always succeeds
    For all program executions holds that pointer dereference always succeeds at this location
  - PositiveResult [Line: 1]: free always succeeds
    For all program executions holds that free always succeeds at this location
  - PositiveResult [Line: 1]: pointer dereference always succeeds
    For all program executions holds that pointer dereference always succeeds at this location
  - PositiveResult [Line: 1]: pointer dereference always succeeds
    For all program executions holds that pointer dereference always succeeds at this location
  - PositiveResult [Line: 1]: pointer dereference always succeeds
    For all program executions holds that pointer dereference always succeeds at this location
  - PositiveResult [Line: 1]: pointer dereference always succeeds
    For all program executions holds that pointer dereference always succeeds at this location
  - PositiveResult [Line: 1]: pointer dereference always succeeds
    For all program executions holds that pointer dereference always succeeds at this location
  - PositiveResult [Line: 1]: pointer dereference always succeeds
    For all program executions holds that pointer dereference always succeeds at this location
  - PositiveResult [Line: 1]: pointer dereference always succeeds
    For all program executions holds that pointer dereference always succeeds at this location
  - PositiveResult [Line: 1]: pointer dereference always succeeds
    For all program executions holds that pointer dereference always succeeds at this location
  - PositiveResult [Line: 1]: pointer dereference always succeeds
    For all program executions holds that pointer dereference always succeeds at this location
  - PositiveResult [Line: 1]: pointer dereference always succeeds
    For all program executions holds that pointer dereference always succeeds at this location
  - PositiveResult [Line: 1]: pointer dereference always succeeds
    For all program executions holds that pointer dereference always succeeds at this location
  - PositiveResult [Line: 1]: pointer dereference always succeeds
    For all program executions holds that pointer dereference always succeeds at this location
  - PositiveResult [Line: 1]: pointer dereference always succeeds
    For all program executions holds that pointer dereference always succeeds at this location
 * Results from de.uni_freiburg.informatik.ultimate.boogie.preprocessor:
  - GenericResult: Unfinished Backtranslation
    Generated EnsuresSpecification ensures #valid == old(#valid); is not ensure(true)
RESULT: Ultimate could not prove your program: unable to determine feasibility of some traces
Written .csv to /storage/ultimate/releaseScripts/default/UAutomizer-linux/../../../releaseScripts/default/UAutomizer-linux/csv/dll-queue_true-unreach-call_true-valid-memsafety.i_svcomp-DerefFreeMemtrack-32bit-Automizer_Camel+AI_EQ_imprecise.epf_AbstractInterpretationC.xml/Csv-Benchmark-0-2018-01-24_16-34-03-675.csv
Written .csv to /storage/ultimate/releaseScripts/default/UAutomizer-linux/../../../releaseScripts/default/UAutomizer-linux/csv/dll-queue_true-unreach-call_true-valid-memsafety.i_svcomp-DerefFreeMemtrack-32bit-Automizer_Camel+AI_EQ_imprecise.epf_AbstractInterpretationC.xml/Csv-VPDomainBenchmark-0-2018-01-24_16-34-03-675.csv
Written .csv to /storage/ultimate/releaseScripts/default/UAutomizer-linux/../../../releaseScripts/default/UAutomizer-linux/csv/dll-queue_true-unreach-call_true-valid-memsafety.i_svcomp-DerefFreeMemtrack-32bit-Automizer_Camel+AI_EQ_imprecise.epf_AbstractInterpretationC.xml/Csv-BenchmarkWithCounters-0-2018-01-24_16-34-03-675.csv
Received shutdown request...