/usr/bin/java -ea -Xmx8000000000 -Xss4m -jar ./plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata ./data -tc ../../../trunk/examples/toolchains/AutomizerC.xml -s ../../../trunk/examples/settings/default/automizer/svcomp-Reach-32bit-Automizer_Default.epf -i ../../../trunk/examples/svcomp/forester-heap/dll-rb-sentinel-1.i -------------------------------------------------------------------------------- This is Ultimate 0.1.25-267fbe0 [2020-07-17 22:31:47,945 INFO L177 SettingsManager]: Resetting all preferences to default values... [2020-07-17 22:31:47,948 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2020-07-17 22:31:47,970 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2020-07-17 22:31:47,970 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2020-07-17 22:31:47,972 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2020-07-17 22:31:47,974 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2020-07-17 22:31:47,987 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2020-07-17 22:31:47,990 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2020-07-17 22:31:47,991 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2020-07-17 22:31:47,994 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2020-07-17 22:31:47,996 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2020-07-17 22:31:47,996 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2020-07-17 22:31:47,999 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2020-07-17 22:31:48,000 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2020-07-17 22:31:48,003 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2020-07-17 22:31:48,005 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2020-07-17 22:31:48,008 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2020-07-17 22:31:48,010 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2020-07-17 22:31:48,016 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2020-07-17 22:31:48,019 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2020-07-17 22:31:48,022 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2020-07-17 22:31:48,023 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2020-07-17 22:31:48,024 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2020-07-17 22:31:48,026 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2020-07-17 22:31:48,026 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2020-07-17 22:31:48,027 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2020-07-17 22:31:48,030 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2020-07-17 22:31:48,030 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2020-07-17 22:31:48,032 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2020-07-17 22:31:48,033 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2020-07-17 22:31:48,033 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2020-07-17 22:31:48,035 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2020-07-17 22:31:48,036 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2020-07-17 22:31:48,037 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2020-07-17 22:31:48,037 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2020-07-17 22:31:48,040 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2020-07-17 22:31:48,040 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2020-07-17 22:31:48,040 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2020-07-17 22:31:48,041 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2020-07-17 22:31:48,042 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2020-07-17 22:31:48,043 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/settings/default/automizer/svcomp-Reach-32bit-Automizer_Default.epf [2020-07-17 22:31:48,066 INFO L113 SettingsManager]: Loading preferences was successful [2020-07-17 22:31:48,067 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2020-07-17 22:31:48,069 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2020-07-17 22:31:48,069 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2020-07-17 22:31:48,069 INFO L138 SettingsManager]: * Use SBE=true [2020-07-17 22:31:48,070 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2020-07-17 22:31:48,070 INFO L138 SettingsManager]: * sizeof long=4 [2020-07-17 22:31:48,070 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2020-07-17 22:31:48,070 INFO L138 SettingsManager]: * sizeof POINTER=4 [2020-07-17 22:31:48,070 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2020-07-17 22:31:48,071 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2020-07-17 22:31:48,072 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2020-07-17 22:31:48,072 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2020-07-17 22:31:48,072 INFO L138 SettingsManager]: * sizeof long double=12 [2020-07-17 22:31:48,072 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2020-07-17 22:31:48,073 INFO L138 SettingsManager]: * Use constant arrays=true [2020-07-17 22:31:48,073 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2020-07-17 22:31:48,073 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2020-07-17 22:31:48,073 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2020-07-17 22:31:48,073 INFO L138 SettingsManager]: * To the following directory=./dump/ [2020-07-17 22:31:48,074 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2020-07-17 22:31:48,074 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2020-07-17 22:31:48,074 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2020-07-17 22:31:48,074 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2020-07-17 22:31:48,074 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2020-07-17 22:31:48,075 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2020-07-17 22:31:48,075 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2020-07-17 22:31:48,075 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2020-07-17 22:31:48,075 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2020-07-17 22:31:48,075 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2020-07-17 22:31:48,401 INFO L81 nceAwareModelManager]: Repository-Root is: /tmp [2020-07-17 22:31:48,421 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2020-07-17 22:31:48,426 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2020-07-17 22:31:48,428 INFO L271 PluginConnector]: Initializing CDTParser... [2020-07-17 22:31:48,428 INFO L275 PluginConnector]: CDTParser initialized [2020-07-17 22:31:48,429 INFO L429 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/svcomp/forester-heap/dll-rb-sentinel-1.i [2020-07-17 22:31:48,514 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/a4c85a9ef/f7ab19734d034f81a0bd5f8399c630c1/FLAGbc98a99b8 [2020-07-17 22:31:49,028 INFO L306 CDTParser]: Found 1 translation units. [2020-07-17 22:31:49,029 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/trunk/examples/svcomp/forester-heap/dll-rb-sentinel-1.i [2020-07-17 22:31:49,046 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/a4c85a9ef/f7ab19734d034f81a0bd5f8399c630c1/FLAGbc98a99b8 [2020-07-17 22:31:49,350 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/a4c85a9ef/f7ab19734d034f81a0bd5f8399c630c1 [2020-07-17 22:31:49,359 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2020-07-17 22:31:49,362 INFO L131 ToolchainWalker]: Walking toolchain with 4 elements. [2020-07-17 22:31:49,363 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2020-07-17 22:31:49,363 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2020-07-17 22:31:49,366 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2020-07-17 22:31:49,367 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 17.07 10:31:49" (1/1) ... [2020-07-17 22:31:49,370 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@6ddfa8e1 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.07 10:31:49, skipping insertion in model container [2020-07-17 22:31:49,370 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 17.07 10:31:49" (1/1) ... [2020-07-17 22:31:49,378 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2020-07-17 22:31:49,423 INFO L178 MainTranslator]: Built tables and reachable declarations [2020-07-17 22:31:49,943 INFO L206 PostProcessor]: Analyzing one entry point: main [2020-07-17 22:31:49,957 INFO L203 MainTranslator]: Completed pre-run [2020-07-17 22:31:50,050 INFO L206 PostProcessor]: Analyzing one entry point: main [2020-07-17 22:31:50,111 INFO L208 MainTranslator]: Completed translation [2020-07-17 22:31:50,112 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.07 10:31:50 WrapperNode [2020-07-17 22:31:50,112 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2020-07-17 22:31:50,113 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2020-07-17 22:31:50,113 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2020-07-17 22:31:50,113 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2020-07-17 22:31:50,126 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.07 10:31:50" (1/1) ... [2020-07-17 22:31:50,126 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.07 10:31:50" (1/1) ... [2020-07-17 22:31:50,143 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.07 10:31:50" (1/1) ... [2020-07-17 22:31:50,143 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.07 10:31:50" (1/1) ... [2020-07-17 22:31:50,170 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.07 10:31:50" (1/1) ... [2020-07-17 22:31:50,181 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.07 10:31:50" (1/1) ... [2020-07-17 22:31:50,185 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.07 10:31:50" (1/1) ... [2020-07-17 22:31:50,198 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2020-07-17 22:31:50,198 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2020-07-17 22:31:50,199 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2020-07-17 22:31:50,199 INFO L275 PluginConnector]: RCFGBuilder initialized [2020-07-17 22:31:50,203 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.07 10:31:50" (1/1) ... No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 Starting monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2020-07-17 22:31:50,261 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.init [2020-07-17 22:31:50,262 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2020-07-17 22:31:50,262 INFO L138 BoogieDeclarations]: Found implementation of procedure main [2020-07-17 22:31:50,262 INFO L130 BoogieDeclarations]: Found specification of procedure __ctype_get_mb_cur_max [2020-07-17 22:31:50,263 INFO L130 BoogieDeclarations]: Found specification of procedure atof [2020-07-17 22:31:50,263 INFO L130 BoogieDeclarations]: Found specification of procedure atoi [2020-07-17 22:31:50,263 INFO L130 BoogieDeclarations]: Found specification of procedure atol [2020-07-17 22:31:50,263 INFO L130 BoogieDeclarations]: Found specification of procedure atoll [2020-07-17 22:31:50,263 INFO L130 BoogieDeclarations]: Found specification of procedure strtod [2020-07-17 22:31:50,263 INFO L130 BoogieDeclarations]: Found specification of procedure strtof [2020-07-17 22:31:50,264 INFO L130 BoogieDeclarations]: Found specification of procedure strtold [2020-07-17 22:31:50,264 INFO L130 BoogieDeclarations]: Found specification of procedure strtol [2020-07-17 22:31:50,264 INFO L130 BoogieDeclarations]: Found specification of procedure strtoul [2020-07-17 22:31:50,264 INFO L130 BoogieDeclarations]: Found specification of procedure strtoq [2020-07-17 22:31:50,265 INFO L130 BoogieDeclarations]: Found specification of procedure strtouq [2020-07-17 22:31:50,266 INFO L130 BoogieDeclarations]: Found specification of procedure strtoll [2020-07-17 22:31:50,266 INFO L130 BoogieDeclarations]: Found specification of procedure strtoull [2020-07-17 22:31:50,266 INFO L130 BoogieDeclarations]: Found specification of procedure l64a [2020-07-17 22:31:50,266 INFO L130 BoogieDeclarations]: Found specification of procedure a64l [2020-07-17 22:31:50,267 INFO L130 BoogieDeclarations]: Found specification of procedure select [2020-07-17 22:31:50,267 INFO L130 BoogieDeclarations]: Found specification of procedure pselect [2020-07-17 22:31:50,267 INFO L130 BoogieDeclarations]: Found specification of procedure gnu_dev_major [2020-07-17 22:31:50,267 INFO L130 BoogieDeclarations]: Found specification of procedure gnu_dev_minor [2020-07-17 22:31:50,267 INFO L130 BoogieDeclarations]: Found specification of procedure gnu_dev_makedev [2020-07-17 22:31:50,268 INFO L130 BoogieDeclarations]: Found specification of procedure random [2020-07-17 22:31:50,269 INFO L130 BoogieDeclarations]: Found specification of procedure srandom [2020-07-17 22:31:50,269 INFO L130 BoogieDeclarations]: Found specification of procedure initstate [2020-07-17 22:31:50,269 INFO L130 BoogieDeclarations]: Found specification of procedure setstate [2020-07-17 22:31:50,269 INFO L130 BoogieDeclarations]: Found specification of procedure random_r [2020-07-17 22:31:50,269 INFO L130 BoogieDeclarations]: Found specification of procedure srandom_r [2020-07-17 22:31:50,270 INFO L130 BoogieDeclarations]: Found specification of procedure initstate_r [2020-07-17 22:31:50,270 INFO L130 BoogieDeclarations]: Found specification of procedure setstate_r [2020-07-17 22:31:50,270 INFO L130 BoogieDeclarations]: Found specification of procedure rand [2020-07-17 22:31:50,270 INFO L130 BoogieDeclarations]: Found specification of procedure srand [2020-07-17 22:31:50,270 INFO L130 BoogieDeclarations]: Found specification of procedure rand_r [2020-07-17 22:31:50,270 INFO L130 BoogieDeclarations]: Found specification of procedure drand48 [2020-07-17 22:31:50,271 INFO L130 BoogieDeclarations]: Found specification of procedure erand48 [2020-07-17 22:31:50,271 INFO L130 BoogieDeclarations]: Found specification of procedure lrand48 [2020-07-17 22:31:50,271 INFO L130 BoogieDeclarations]: Found specification of procedure nrand48 [2020-07-17 22:31:50,271 INFO L130 BoogieDeclarations]: Found specification of procedure mrand48 [2020-07-17 22:31:50,272 INFO L130 BoogieDeclarations]: Found specification of procedure jrand48 [2020-07-17 22:31:50,272 INFO L130 BoogieDeclarations]: Found specification of procedure srand48 [2020-07-17 22:31:50,272 INFO L130 BoogieDeclarations]: Found specification of procedure seed48 [2020-07-17 22:31:50,272 INFO L130 BoogieDeclarations]: Found specification of procedure lcong48 [2020-07-17 22:31:50,273 INFO L130 BoogieDeclarations]: Found specification of procedure drand48_r [2020-07-17 22:31:50,273 INFO L130 BoogieDeclarations]: Found specification of procedure erand48_r [2020-07-17 22:31:50,273 INFO L130 BoogieDeclarations]: Found specification of procedure lrand48_r [2020-07-17 22:31:50,273 INFO L130 BoogieDeclarations]: Found specification of procedure nrand48_r [2020-07-17 22:31:50,273 INFO L130 BoogieDeclarations]: Found specification of procedure mrand48_r [2020-07-17 22:31:50,273 INFO L130 BoogieDeclarations]: Found specification of procedure jrand48_r [2020-07-17 22:31:50,273 INFO L130 BoogieDeclarations]: Found specification of procedure srand48_r [2020-07-17 22:31:50,274 INFO L130 BoogieDeclarations]: Found specification of procedure seed48_r [2020-07-17 22:31:50,274 INFO L130 BoogieDeclarations]: Found specification of procedure lcong48_r [2020-07-17 22:31:50,274 INFO L130 BoogieDeclarations]: Found specification of procedure malloc [2020-07-17 22:31:50,274 INFO L130 BoogieDeclarations]: Found specification of procedure calloc [2020-07-17 22:31:50,274 INFO L130 BoogieDeclarations]: Found specification of procedure realloc [2020-07-17 22:31:50,274 INFO L130 BoogieDeclarations]: Found specification of procedure free [2020-07-17 22:31:50,275 INFO L130 BoogieDeclarations]: Found specification of procedure cfree [2020-07-17 22:31:50,275 INFO L130 BoogieDeclarations]: Found specification of procedure alloca [2020-07-17 22:31:50,275 INFO L130 BoogieDeclarations]: Found specification of procedure valloc [2020-07-17 22:31:50,275 INFO L130 BoogieDeclarations]: Found specification of procedure posix_memalign [2020-07-17 22:31:50,275 INFO L130 BoogieDeclarations]: Found specification of procedure aligned_alloc [2020-07-17 22:31:50,275 INFO L130 BoogieDeclarations]: Found specification of procedure abort [2020-07-17 22:31:50,275 INFO L130 BoogieDeclarations]: Found specification of procedure atexit [2020-07-17 22:31:50,276 INFO L130 BoogieDeclarations]: Found specification of procedure at_quick_exit [2020-07-17 22:31:50,276 INFO L130 BoogieDeclarations]: Found specification of procedure on_exit [2020-07-17 22:31:50,276 INFO L130 BoogieDeclarations]: Found specification of procedure exit [2020-07-17 22:31:50,277 INFO L130 BoogieDeclarations]: Found specification of procedure quick_exit [2020-07-17 22:31:50,278 INFO L130 BoogieDeclarations]: Found specification of procedure _Exit [2020-07-17 22:31:50,278 INFO L130 BoogieDeclarations]: Found specification of procedure getenv [2020-07-17 22:31:50,278 INFO L130 BoogieDeclarations]: Found specification of procedure putenv [2020-07-17 22:31:50,278 INFO L130 BoogieDeclarations]: Found specification of procedure setenv [2020-07-17 22:31:50,278 INFO L130 BoogieDeclarations]: Found specification of procedure unsetenv [2020-07-17 22:31:50,279 INFO L130 BoogieDeclarations]: Found specification of procedure clearenv [2020-07-17 22:31:50,279 INFO L130 BoogieDeclarations]: Found specification of procedure mktemp [2020-07-17 22:31:50,280 INFO L130 BoogieDeclarations]: Found specification of procedure mkstemp [2020-07-17 22:31:50,280 INFO L130 BoogieDeclarations]: Found specification of procedure mkstemps [2020-07-17 22:31:50,281 INFO L130 BoogieDeclarations]: Found specification of procedure mkdtemp [2020-07-17 22:31:50,281 INFO L130 BoogieDeclarations]: Found specification of procedure system [2020-07-17 22:31:50,281 INFO L130 BoogieDeclarations]: Found specification of procedure realpath [2020-07-17 22:31:50,281 INFO L130 BoogieDeclarations]: Found specification of procedure bsearch [2020-07-17 22:31:50,282 INFO L130 BoogieDeclarations]: Found specification of procedure qsort [2020-07-17 22:31:50,282 INFO L130 BoogieDeclarations]: Found specification of procedure abs [2020-07-17 22:31:50,282 INFO L130 BoogieDeclarations]: Found specification of procedure labs [2020-07-17 22:31:50,282 INFO L130 BoogieDeclarations]: Found specification of procedure llabs [2020-07-17 22:31:50,282 INFO L130 BoogieDeclarations]: Found specification of procedure div [2020-07-17 22:31:50,283 INFO L130 BoogieDeclarations]: Found specification of procedure ldiv [2020-07-17 22:31:50,283 INFO L130 BoogieDeclarations]: Found specification of procedure lldiv [2020-07-17 22:31:50,284 INFO L130 BoogieDeclarations]: Found specification of procedure ecvt [2020-07-17 22:31:50,284 INFO L130 BoogieDeclarations]: Found specification of procedure fcvt [2020-07-17 22:31:50,285 INFO L130 BoogieDeclarations]: Found specification of procedure gcvt [2020-07-17 22:31:50,285 INFO L130 BoogieDeclarations]: Found specification of procedure qecvt [2020-07-17 22:31:50,285 INFO L130 BoogieDeclarations]: Found specification of procedure qfcvt [2020-07-17 22:31:50,285 INFO L130 BoogieDeclarations]: Found specification of procedure qgcvt [2020-07-17 22:31:50,285 INFO L130 BoogieDeclarations]: Found specification of procedure ecvt_r [2020-07-17 22:31:50,285 INFO L130 BoogieDeclarations]: Found specification of procedure fcvt_r [2020-07-17 22:31:50,285 INFO L130 BoogieDeclarations]: Found specification of procedure qecvt_r [2020-07-17 22:31:50,286 INFO L130 BoogieDeclarations]: Found specification of procedure qfcvt_r [2020-07-17 22:31:50,286 INFO L130 BoogieDeclarations]: Found specification of procedure mblen [2020-07-17 22:31:50,286 INFO L130 BoogieDeclarations]: Found specification of procedure mbtowc [2020-07-17 22:31:50,286 INFO L130 BoogieDeclarations]: Found specification of procedure wctomb [2020-07-17 22:31:50,286 INFO L130 BoogieDeclarations]: Found specification of procedure mbstowcs [2020-07-17 22:31:50,286 INFO L130 BoogieDeclarations]: Found specification of procedure wcstombs [2020-07-17 22:31:50,286 INFO L130 BoogieDeclarations]: Found specification of procedure rpmatch [2020-07-17 22:31:50,287 INFO L130 BoogieDeclarations]: Found specification of procedure getsubopt [2020-07-17 22:31:50,287 INFO L130 BoogieDeclarations]: Found specification of procedure getloadavg [2020-07-17 22:31:50,287 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_int [2020-07-17 22:31:50,287 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_error [2020-07-17 22:31:50,287 INFO L130 BoogieDeclarations]: Found specification of procedure main [2020-07-17 22:31:50,287 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2020-07-17 22:31:50,287 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2020-07-17 22:31:50,288 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2020-07-17 22:31:50,288 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2020-07-17 22:31:50,288 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2020-07-17 22:31:50,288 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2020-07-17 22:31:50,288 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.init [2020-07-17 22:31:50,289 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2020-07-17 22:31:51,038 INFO L290 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2020-07-17 22:31:51,038 INFO L295 CfgBuilder]: Removed 17 assume(true) statements. [2020-07-17 22:31:51,042 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 17.07 10:31:51 BoogieIcfgContainer [2020-07-17 22:31:51,042 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2020-07-17 22:31:51,044 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2020-07-17 22:31:51,044 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2020-07-17 22:31:51,047 INFO L275 PluginConnector]: TraceAbstraction initialized [2020-07-17 22:31:51,048 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 17.07 10:31:49" (1/3) ... [2020-07-17 22:31:51,049 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@487bb431 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 17.07 10:31:51, skipping insertion in model container [2020-07-17 22:31:51,049 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.07 10:31:50" (2/3) ... [2020-07-17 22:31:51,049 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@487bb431 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 17.07 10:31:51, skipping insertion in model container [2020-07-17 22:31:51,049 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 17.07 10:31:51" (3/3) ... [2020-07-17 22:31:51,051 INFO L109 eAbstractionObserver]: Analyzing ICFG dll-rb-sentinel-1.i [2020-07-17 22:31:51,062 INFO L157 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2020-07-17 22:31:51,070 INFO L169 ceAbstractionStarter]: Appying trace abstraction to program that has 7 error locations. [2020-07-17 22:31:51,085 INFO L251 AbstractCegarLoop]: Starting to check reachability of 7 error locations. [2020-07-17 22:31:51,123 INFO L375 AbstractCegarLoop]: Interprodecural is true [2020-07-17 22:31:51,123 INFO L376 AbstractCegarLoop]: Hoare is true [2020-07-17 22:31:51,124 INFO L377 AbstractCegarLoop]: Compute interpolants for FPandBP [2020-07-17 22:31:51,124 INFO L378 AbstractCegarLoop]: Backedges is STRAIGHT_LINE [2020-07-17 22:31:51,124 INFO L379 AbstractCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2020-07-17 22:31:51,124 INFO L380 AbstractCegarLoop]: Difference is false [2020-07-17 22:31:51,124 INFO L381 AbstractCegarLoop]: Minimize is MINIMIZE_SEVPA [2020-07-17 22:31:51,124 INFO L385 AbstractCegarLoop]: ======== Iteration 0==of CEGAR loop == AllErrorsAtOnce======== [2020-07-17 22:31:51,145 INFO L276 IsEmpty]: Start isEmpty. Operand 52 states. [2020-07-17 22:31:51,151 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 11 [2020-07-17 22:31:51,152 INFO L414 BasicCegarLoop]: Found error trace [2020-07-17 22:31:51,153 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-17 22:31:51,154 INFO L427 AbstractCegarLoop]: === Iteration 1 === [mainErr4ASSERT_VIOLATIONERROR_FUNCTION, mainErr0ASSERT_VIOLATIONERROR_FUNCTION, mainErr2ASSERT_VIOLATIONERROR_FUNCTION, mainErr6ASSERT_VIOLATIONERROR_FUNCTION, mainErr5ASSERT_VIOLATIONERROR_FUNCTION, mainErr3ASSERT_VIOLATIONERROR_FUNCTION, mainErr1ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-17 22:31:51,160 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-17 22:31:51,160 INFO L82 PathProgramCache]: Analyzing trace with hash -1255802584, now seen corresponding path program 1 times [2020-07-17 22:31:51,171 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-17 22:31:51,171 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [105528115] [2020-07-17 22:31:51,172 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-17 22:31:51,291 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-17 22:31:51,389 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-17 22:31:51,407 INFO L280 TraceCheckUtils]: 0: Hoare triple {60#(and (= |#valid| |old(#valid)|) (= |#NULL.base| |old(#NULL.base)|) (= |#NULL.offset| |old(#NULL.offset)|))} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier; {55#true} is VALID [2020-07-17 22:31:51,408 INFO L280 TraceCheckUtils]: 1: Hoare triple {55#true} assume true; {55#true} is VALID [2020-07-17 22:31:51,408 INFO L275 TraceCheckUtils]: 2: Hoare quadruple {55#true} {55#true} #189#return; {55#true} is VALID [2020-07-17 22:31:51,412 INFO L263 TraceCheckUtils]: 0: Hoare triple {55#true} call ULTIMATE.init(); {60#(and (= |#valid| |old(#valid)|) (= |#NULL.base| |old(#NULL.base)|) (= |#NULL.offset| |old(#NULL.offset)|))} is VALID [2020-07-17 22:31:51,412 INFO L280 TraceCheckUtils]: 1: Hoare triple {60#(and (= |#valid| |old(#valid)|) (= |#NULL.base| |old(#NULL.base)|) (= |#NULL.offset| |old(#NULL.offset)|))} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier; {55#true} is VALID [2020-07-17 22:31:51,413 INFO L280 TraceCheckUtils]: 2: Hoare triple {55#true} assume true; {55#true} is VALID [2020-07-17 22:31:51,413 INFO L275 TraceCheckUtils]: 3: Hoare quadruple {55#true} {55#true} #189#return; {55#true} is VALID [2020-07-17 22:31:51,413 INFO L263 TraceCheckUtils]: 4: Hoare triple {55#true} call #t~ret21 := main(); {55#true} is VALID [2020-07-17 22:31:51,414 INFO L280 TraceCheckUtils]: 5: Hoare triple {55#true} call #t~malloc0.base, #t~malloc0.offset := #Ultimate.allocOnHeap(12);~null~0.base, ~null~0.offset := #t~malloc0.base, #t~malloc0.offset;call write~$Pointer$(0, 0, ~null~0.base, ~null~0.offset, 4);call write~$Pointer$(0, 0, ~null~0.base, 4 + ~null~0.offset, 4);call write~int(~unnamed1~0~BLACK, ~null~0.base, 8 + ~null~0.offset, 4);call #t~malloc1.base, #t~malloc1.offset := #Ultimate.allocOnHeap(12);~list~0.base, ~list~0.offset := #t~malloc1.base, #t~malloc1.offset;call write~$Pointer$(~null~0.base, ~null~0.offset, ~list~0.base, ~list~0.offset, 4);call write~$Pointer$(~null~0.base, ~null~0.offset, ~list~0.base, 4 + ~list~0.offset, 4);call write~int(~unnamed1~0~BLACK, ~list~0.base, 8 + ~list~0.offset, 4);~end~0.base, ~end~0.offset := ~list~0.base, ~list~0.offset; {55#true} is VALID [2020-07-17 22:31:51,415 INFO L280 TraceCheckUtils]: 6: Hoare triple {55#true} assume !true; {56#false} is VALID [2020-07-17 22:31:51,415 INFO L280 TraceCheckUtils]: 7: Hoare triple {56#false} ~end~0.base, ~end~0.offset := ~null~0.base, ~null~0.offset;~end~0.base, ~end~0.offset := ~list~0.base, ~list~0.offset; {56#false} is VALID [2020-07-17 22:31:51,416 INFO L280 TraceCheckUtils]: 8: Hoare triple {56#false} assume !(~null~0.base != ~end~0.base || ~null~0.offset != ~end~0.offset); {56#false} is VALID [2020-07-17 22:31:51,416 INFO L280 TraceCheckUtils]: 9: Hoare triple {56#false} assume !false; {56#false} is VALID [2020-07-17 22:31:51,417 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-17 22:31:51,418 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [105528115] [2020-07-17 22:31:51,419 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-17 22:31:51,419 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2020-07-17 22:31:51,420 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [138860953] [2020-07-17 22:31:51,426 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 10 [2020-07-17 22:31:51,429 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-17 22:31:51,433 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states. [2020-07-17 22:31:51,456 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 10 edges. 10 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-17 22:31:51,456 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2020-07-17 22:31:51,457 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-17 22:31:51,465 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2020-07-17 22:31:51,466 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-17 22:31:51,469 INFO L87 Difference]: Start difference. First operand 52 states. Second operand 3 states. [2020-07-17 22:31:51,829 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-17 22:31:51,829 INFO L93 Difference]: Finished difference Result 98 states and 156 transitions. [2020-07-17 22:31:51,829 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2020-07-17 22:31:51,830 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 10 [2020-07-17 22:31:51,830 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-17 22:31:51,831 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-17 22:31:51,847 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 156 transitions. [2020-07-17 22:31:51,847 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-17 22:31:51,852 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 156 transitions. [2020-07-17 22:31:51,852 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 156 transitions. [2020-07-17 22:31:52,046 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 156 edges. 156 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-17 22:31:52,062 INFO L225 Difference]: With dead ends: 98 [2020-07-17 22:31:52,063 INFO L226 Difference]: Without dead ends: 45 [2020-07-17 22:31:52,071 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-17 22:31:52,092 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 45 states. [2020-07-17 22:31:52,131 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 45 to 45. [2020-07-17 22:31:52,132 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-17 22:31:52,132 INFO L82 GeneralOperation]: Start isEquivalent. First operand 45 states. Second operand 45 states. [2020-07-17 22:31:52,133 INFO L74 IsIncluded]: Start isIncluded. First operand 45 states. Second operand 45 states. [2020-07-17 22:31:52,133 INFO L87 Difference]: Start difference. First operand 45 states. Second operand 45 states. [2020-07-17 22:31:52,138 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-17 22:31:52,138 INFO L93 Difference]: Finished difference Result 45 states and 48 transitions. [2020-07-17 22:31:52,138 INFO L276 IsEmpty]: Start isEmpty. Operand 45 states and 48 transitions. [2020-07-17 22:31:52,139 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-17 22:31:52,139 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-17 22:31:52,139 INFO L74 IsIncluded]: Start isIncluded. First operand 45 states. Second operand 45 states. [2020-07-17 22:31:52,140 INFO L87 Difference]: Start difference. First operand 45 states. Second operand 45 states. [2020-07-17 22:31:52,144 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-17 22:31:52,145 INFO L93 Difference]: Finished difference Result 45 states and 48 transitions. [2020-07-17 22:31:52,145 INFO L276 IsEmpty]: Start isEmpty. Operand 45 states and 48 transitions. [2020-07-17 22:31:52,146 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-17 22:31:52,146 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-17 22:31:52,146 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-17 22:31:52,146 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-17 22:31:52,146 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 45 states. [2020-07-17 22:31:52,150 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 45 states to 45 states and 48 transitions. [2020-07-17 22:31:52,151 INFO L78 Accepts]: Start accepts. Automaton has 45 states and 48 transitions. Word has length 10 [2020-07-17 22:31:52,152 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-17 22:31:52,152 INFO L479 AbstractCegarLoop]: Abstraction has 45 states and 48 transitions. [2020-07-17 22:31:52,152 INFO L480 AbstractCegarLoop]: Interpolant automaton has 3 states. [2020-07-17 22:31:52,152 INFO L276 IsEmpty]: Start isEmpty. Operand 45 states and 48 transitions. [2020-07-17 22:31:52,153 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 12 [2020-07-17 22:31:52,153 INFO L414 BasicCegarLoop]: Found error trace [2020-07-17 22:31:52,153 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-17 22:31:52,154 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2020-07-17 22:31:52,154 INFO L427 AbstractCegarLoop]: === Iteration 2 === [mainErr4ASSERT_VIOLATIONERROR_FUNCTION, mainErr0ASSERT_VIOLATIONERROR_FUNCTION, mainErr2ASSERT_VIOLATIONERROR_FUNCTION, mainErr6ASSERT_VIOLATIONERROR_FUNCTION, mainErr5ASSERT_VIOLATIONERROR_FUNCTION, mainErr3ASSERT_VIOLATIONERROR_FUNCTION, mainErr1ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-17 22:31:52,154 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-17 22:31:52,154 INFO L82 PathProgramCache]: Analyzing trace with hash -338068956, now seen corresponding path program 1 times [2020-07-17 22:31:52,155 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-17 22:31:52,155 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1703862627] [2020-07-17 22:31:52,155 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-17 22:31:52,202 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-17 22:31:52,327 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-17 22:31:52,334 INFO L280 TraceCheckUtils]: 0: Hoare triple {320#(and (= |#valid| |old(#valid)|) (= |#NULL.base| |old(#NULL.base)|) (= |#NULL.offset| |old(#NULL.offset)|))} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier; {313#true} is VALID [2020-07-17 22:31:52,335 INFO L280 TraceCheckUtils]: 1: Hoare triple {313#true} assume true; {313#true} is VALID [2020-07-17 22:31:52,335 INFO L275 TraceCheckUtils]: 2: Hoare quadruple {313#true} {313#true} #189#return; {313#true} is VALID [2020-07-17 22:31:52,337 INFO L263 TraceCheckUtils]: 0: Hoare triple {313#true} call ULTIMATE.init(); {320#(and (= |#valid| |old(#valid)|) (= |#NULL.base| |old(#NULL.base)|) (= |#NULL.offset| |old(#NULL.offset)|))} is VALID [2020-07-17 22:31:52,337 INFO L280 TraceCheckUtils]: 1: Hoare triple {320#(and (= |#valid| |old(#valid)|) (= |#NULL.base| |old(#NULL.base)|) (= |#NULL.offset| |old(#NULL.offset)|))} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier; {313#true} is VALID [2020-07-17 22:31:52,337 INFO L280 TraceCheckUtils]: 2: Hoare triple {313#true} assume true; {313#true} is VALID [2020-07-17 22:31:52,338 INFO L275 TraceCheckUtils]: 3: Hoare quadruple {313#true} {313#true} #189#return; {313#true} is VALID [2020-07-17 22:31:52,338 INFO L263 TraceCheckUtils]: 4: Hoare triple {313#true} call #t~ret21 := main(); {313#true} is VALID [2020-07-17 22:31:52,341 INFO L280 TraceCheckUtils]: 5: Hoare triple {313#true} call #t~malloc0.base, #t~malloc0.offset := #Ultimate.allocOnHeap(12);~null~0.base, ~null~0.offset := #t~malloc0.base, #t~malloc0.offset;call write~$Pointer$(0, 0, ~null~0.base, ~null~0.offset, 4);call write~$Pointer$(0, 0, ~null~0.base, 4 + ~null~0.offset, 4);call write~int(~unnamed1~0~BLACK, ~null~0.base, 8 + ~null~0.offset, 4);call #t~malloc1.base, #t~malloc1.offset := #Ultimate.allocOnHeap(12);~list~0.base, ~list~0.offset := #t~malloc1.base, #t~malloc1.offset;call write~$Pointer$(~null~0.base, ~null~0.offset, ~list~0.base, ~list~0.offset, 4);call write~$Pointer$(~null~0.base, ~null~0.offset, ~list~0.base, 4 + ~list~0.offset, 4);call write~int(~unnamed1~0~BLACK, ~list~0.base, 8 + ~list~0.offset, 4);~end~0.base, ~end~0.offset := ~list~0.base, ~list~0.offset; {318#(not (= main_~list~0.base main_~null~0.base))} is VALID [2020-07-17 22:31:52,342 INFO L280 TraceCheckUtils]: 6: Hoare triple {318#(not (= main_~list~0.base main_~null~0.base))} assume -2147483648 <= #t~nondet2 && #t~nondet2 <= 2147483647; {318#(not (= main_~list~0.base main_~null~0.base))} is VALID [2020-07-17 22:31:52,342 INFO L280 TraceCheckUtils]: 7: Hoare triple {318#(not (= main_~list~0.base main_~null~0.base))} assume !(0 != #t~nondet2);havoc #t~nondet2; {318#(not (= main_~list~0.base main_~null~0.base))} is VALID [2020-07-17 22:31:52,343 INFO L280 TraceCheckUtils]: 8: Hoare triple {318#(not (= main_~list~0.base main_~null~0.base))} ~end~0.base, ~end~0.offset := ~null~0.base, ~null~0.offset;~end~0.base, ~end~0.offset := ~list~0.base, ~list~0.offset; {319#(not (= main_~null~0.base main_~end~0.base))} is VALID [2020-07-17 22:31:52,344 INFO L280 TraceCheckUtils]: 9: Hoare triple {319#(not (= main_~null~0.base main_~end~0.base))} assume !(~null~0.base != ~end~0.base || ~null~0.offset != ~end~0.offset); {314#false} is VALID [2020-07-17 22:31:52,345 INFO L280 TraceCheckUtils]: 10: Hoare triple {314#false} assume !false; {314#false} is VALID [2020-07-17 22:31:52,346 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-17 22:31:52,347 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1703862627] [2020-07-17 22:31:52,347 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-17 22:31:52,347 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2020-07-17 22:31:52,347 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [386924670] [2020-07-17 22:31:52,349 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 11 [2020-07-17 22:31:52,349 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-17 22:31:52,350 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states. [2020-07-17 22:31:52,367 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 11 edges. 11 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-17 22:31:52,367 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2020-07-17 22:31:52,368 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-17 22:31:52,368 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2020-07-17 22:31:52,369 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2020-07-17 22:31:52,369 INFO L87 Difference]: Start difference. First operand 45 states and 48 transitions. Second operand 5 states. [2020-07-17 22:31:52,858 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-17 22:31:52,858 INFO L93 Difference]: Finished difference Result 51 states and 56 transitions. [2020-07-17 22:31:52,858 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2020-07-17 22:31:52,858 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 11 [2020-07-17 22:31:52,859 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-17 22:31:52,859 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-17 22:31:52,861 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 56 transitions. [2020-07-17 22:31:52,862 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-17 22:31:52,863 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 56 transitions. [2020-07-17 22:31:52,864 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states and 56 transitions. [2020-07-17 22:31:52,940 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 56 edges. 56 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-17 22:31:52,942 INFO L225 Difference]: With dead ends: 51 [2020-07-17 22:31:52,942 INFO L226 Difference]: Without dead ends: 49 [2020-07-17 22:31:52,943 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=11, Invalid=19, Unknown=0, NotChecked=0, Total=30 [2020-07-17 22:31:52,944 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 49 states. [2020-07-17 22:31:52,960 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 49 to 43. [2020-07-17 22:31:52,960 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-17 22:31:52,961 INFO L82 GeneralOperation]: Start isEquivalent. First operand 49 states. Second operand 43 states. [2020-07-17 22:31:52,961 INFO L74 IsIncluded]: Start isIncluded. First operand 49 states. Second operand 43 states. [2020-07-17 22:31:52,961 INFO L87 Difference]: Start difference. First operand 49 states. Second operand 43 states. [2020-07-17 22:31:52,964 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-17 22:31:52,964 INFO L93 Difference]: Finished difference Result 49 states and 54 transitions. [2020-07-17 22:31:52,965 INFO L276 IsEmpty]: Start isEmpty. Operand 49 states and 54 transitions. [2020-07-17 22:31:52,965 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-17 22:31:52,965 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-17 22:31:52,966 INFO L74 IsIncluded]: Start isIncluded. First operand 43 states. Second operand 49 states. [2020-07-17 22:31:52,966 INFO L87 Difference]: Start difference. First operand 43 states. Second operand 49 states. [2020-07-17 22:31:52,969 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-17 22:31:52,969 INFO L93 Difference]: Finished difference Result 49 states and 54 transitions. [2020-07-17 22:31:52,969 INFO L276 IsEmpty]: Start isEmpty. Operand 49 states and 54 transitions. [2020-07-17 22:31:52,970 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-17 22:31:52,970 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-17 22:31:52,971 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-17 22:31:52,971 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-17 22:31:52,971 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 43 states. [2020-07-17 22:31:52,973 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 43 states to 43 states and 46 transitions. [2020-07-17 22:31:52,973 INFO L78 Accepts]: Start accepts. Automaton has 43 states and 46 transitions. Word has length 11 [2020-07-17 22:31:52,974 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-17 22:31:52,974 INFO L479 AbstractCegarLoop]: Abstraction has 43 states and 46 transitions. [2020-07-17 22:31:52,974 INFO L480 AbstractCegarLoop]: Interpolant automaton has 5 states. [2020-07-17 22:31:52,974 INFO L276 IsEmpty]: Start isEmpty. Operand 43 states and 46 transitions. [2020-07-17 22:31:52,974 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 13 [2020-07-17 22:31:52,975 INFO L414 BasicCegarLoop]: Found error trace [2020-07-17 22:31:52,975 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-17 22:31:52,975 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2020-07-17 22:31:52,975 INFO L427 AbstractCegarLoop]: === Iteration 3 === [mainErr4ASSERT_VIOLATIONERROR_FUNCTION, mainErr0ASSERT_VIOLATIONERROR_FUNCTION, mainErr2ASSERT_VIOLATIONERROR_FUNCTION, mainErr6ASSERT_VIOLATIONERROR_FUNCTION, mainErr5ASSERT_VIOLATIONERROR_FUNCTION, mainErr3ASSERT_VIOLATIONERROR_FUNCTION, mainErr1ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-17 22:31:52,976 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-17 22:31:52,976 INFO L82 PathProgramCache]: Analyzing trace with hash -1890143313, now seen corresponding path program 1 times [2020-07-17 22:31:52,976 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-17 22:31:52,976 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1326379352] [2020-07-17 22:31:52,977 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-17 22:31:53,007 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-17 22:31:53,067 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-17 22:31:53,072 INFO L280 TraceCheckUtils]: 0: Hoare triple {539#(and (= |#valid| |old(#valid)|) (= |#NULL.base| |old(#NULL.base)|) (= |#NULL.offset| |old(#NULL.offset)|))} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier; {532#true} is VALID [2020-07-17 22:31:53,073 INFO L280 TraceCheckUtils]: 1: Hoare triple {532#true} assume true; {532#true} is VALID [2020-07-17 22:31:53,073 INFO L275 TraceCheckUtils]: 2: Hoare quadruple {532#true} {532#true} #189#return; {532#true} is VALID [2020-07-17 22:31:53,074 INFO L263 TraceCheckUtils]: 0: Hoare triple {532#true} call ULTIMATE.init(); {539#(and (= |#valid| |old(#valid)|) (= |#NULL.base| |old(#NULL.base)|) (= |#NULL.offset| |old(#NULL.offset)|))} is VALID [2020-07-17 22:31:53,075 INFO L280 TraceCheckUtils]: 1: Hoare triple {539#(and (= |#valid| |old(#valid)|) (= |#NULL.base| |old(#NULL.base)|) (= |#NULL.offset| |old(#NULL.offset)|))} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier; {532#true} is VALID [2020-07-17 22:31:53,075 INFO L280 TraceCheckUtils]: 2: Hoare triple {532#true} assume true; {532#true} is VALID [2020-07-17 22:31:53,075 INFO L275 TraceCheckUtils]: 3: Hoare quadruple {532#true} {532#true} #189#return; {532#true} is VALID [2020-07-17 22:31:53,076 INFO L263 TraceCheckUtils]: 4: Hoare triple {532#true} call #t~ret21 := main(); {532#true} is VALID [2020-07-17 22:31:53,076 INFO L280 TraceCheckUtils]: 5: Hoare triple {532#true} call #t~malloc0.base, #t~malloc0.offset := #Ultimate.allocOnHeap(12);~null~0.base, ~null~0.offset := #t~malloc0.base, #t~malloc0.offset;call write~$Pointer$(0, 0, ~null~0.base, ~null~0.offset, 4);call write~$Pointer$(0, 0, ~null~0.base, 4 + ~null~0.offset, 4);call write~int(~unnamed1~0~BLACK, ~null~0.base, 8 + ~null~0.offset, 4);call #t~malloc1.base, #t~malloc1.offset := #Ultimate.allocOnHeap(12);~list~0.base, ~list~0.offset := #t~malloc1.base, #t~malloc1.offset;call write~$Pointer$(~null~0.base, ~null~0.offset, ~list~0.base, ~list~0.offset, 4);call write~$Pointer$(~null~0.base, ~null~0.offset, ~list~0.base, 4 + ~list~0.offset, 4);call write~int(~unnamed1~0~BLACK, ~list~0.base, 8 + ~list~0.offset, 4);~end~0.base, ~end~0.offset := ~list~0.base, ~list~0.offset; {532#true} is VALID [2020-07-17 22:31:53,076 INFO L280 TraceCheckUtils]: 6: Hoare triple {532#true} assume -2147483648 <= #t~nondet2 && #t~nondet2 <= 2147483647; {532#true} is VALID [2020-07-17 22:31:53,077 INFO L280 TraceCheckUtils]: 7: Hoare triple {532#true} assume !!(0 != #t~nondet2);havoc #t~nondet2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.allocOnHeap(12);call write~$Pointer$(#t~malloc3.base, #t~malloc3.offset, ~end~0.base, ~end~0.offset, 4);call #t~mem4.base, #t~mem4.offset := read~$Pointer$(~end~0.base, ~end~0.offset, 4);call write~$Pointer$(~end~0.base, ~end~0.offset, #t~mem4.base, 4 + #t~mem4.offset, 4);havoc #t~mem4.base, #t~mem4.offset;call #t~mem5.base, #t~mem5.offset := read~$Pointer$(~end~0.base, ~end~0.offset, 4);~end~0.base, ~end~0.offset := #t~mem5.base, #t~mem5.offset;havoc #t~mem5.base, #t~mem5.offset;call write~$Pointer$(~null~0.base, ~null~0.offset, ~end~0.base, ~end~0.offset, 4);assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647; {532#true} is VALID [2020-07-17 22:31:53,080 INFO L280 TraceCheckUtils]: 8: Hoare triple {532#true} assume !(0 != #t~nondet6);havoc #t~nondet6;call write~int(~unnamed1~0~RED, ~end~0.base, 8 + ~end~0.offset, 4);call #t~malloc7.base, #t~malloc7.offset := #Ultimate.allocOnHeap(12);call write~$Pointer$(#t~malloc7.base, #t~malloc7.offset, ~end~0.base, ~end~0.offset, 4);call #t~mem8.base, #t~mem8.offset := read~$Pointer$(~end~0.base, ~end~0.offset, 4);call write~$Pointer$(~end~0.base, ~end~0.offset, #t~mem8.base, 4 + #t~mem8.offset, 4);havoc #t~mem8.base, #t~mem8.offset;call #t~mem9.base, #t~mem9.offset := read~$Pointer$(~end~0.base, ~end~0.offset, 4);~end~0.base, ~end~0.offset := #t~mem9.base, #t~mem9.offset;havoc #t~mem9.base, #t~mem9.offset;call write~$Pointer$(~null~0.base, ~null~0.offset, ~end~0.base, ~end~0.offset, 4);call write~int(~unnamed1~0~BLACK, ~end~0.base, 8 + ~end~0.offset, 4); {537#(= ~unnamed1~0~BLACK (select (select |#memory_int| main_~end~0.base) (+ main_~end~0.offset 8)))} is VALID [2020-07-17 22:31:53,081 INFO L280 TraceCheckUtils]: 9: Hoare triple {537#(= ~unnamed1~0~BLACK (select (select |#memory_int| main_~end~0.base) (+ main_~end~0.offset 8)))} call #t~mem10 := read~int(~end~0.base, 8 + ~end~0.offset, 4); {538#(= ~unnamed1~0~BLACK |main_#t~mem10|)} is VALID [2020-07-17 22:31:53,081 INFO L280 TraceCheckUtils]: 10: Hoare triple {538#(= ~unnamed1~0~BLACK |main_#t~mem10|)} assume !(~unnamed1~0~BLACK == #t~mem10);havoc #t~mem10; {533#false} is VALID [2020-07-17 22:31:53,082 INFO L280 TraceCheckUtils]: 11: Hoare triple {533#false} assume !false; {533#false} is VALID [2020-07-17 22:31:53,082 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-17 22:31:53,083 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1326379352] [2020-07-17 22:31:53,083 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-17 22:31:53,083 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2020-07-17 22:31:53,083 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [578247682] [2020-07-17 22:31:53,084 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 12 [2020-07-17 22:31:53,084 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-17 22:31:53,084 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states. [2020-07-17 22:31:53,102 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 12 edges. 12 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-17 22:31:53,102 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2020-07-17 22:31:53,102 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-17 22:31:53,103 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2020-07-17 22:31:53,103 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2020-07-17 22:31:53,103 INFO L87 Difference]: Start difference. First operand 43 states and 46 transitions. Second operand 5 states. [2020-07-17 22:31:53,487 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-17 22:31:53,487 INFO L93 Difference]: Finished difference Result 43 states and 46 transitions. [2020-07-17 22:31:53,487 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2020-07-17 22:31:53,487 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 12 [2020-07-17 22:31:53,487 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-17 22:31:53,488 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-17 22:31:53,489 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 46 transitions. [2020-07-17 22:31:53,490 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-17 22:31:53,494 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 46 transitions. [2020-07-17 22:31:53,495 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states and 46 transitions. [2020-07-17 22:31:53,564 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 46 edges. 46 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-17 22:31:53,565 INFO L225 Difference]: With dead ends: 43 [2020-07-17 22:31:53,566 INFO L226 Difference]: Without dead ends: 41 [2020-07-17 22:31:53,566 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=11, Invalid=19, Unknown=0, NotChecked=0, Total=30 [2020-07-17 22:31:53,567 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 41 states. [2020-07-17 22:31:53,584 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 41 to 41. [2020-07-17 22:31:53,584 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-17 22:31:53,584 INFO L82 GeneralOperation]: Start isEquivalent. First operand 41 states. Second operand 41 states. [2020-07-17 22:31:53,584 INFO L74 IsIncluded]: Start isIncluded. First operand 41 states. Second operand 41 states. [2020-07-17 22:31:53,585 INFO L87 Difference]: Start difference. First operand 41 states. Second operand 41 states. [2020-07-17 22:31:53,587 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-17 22:31:53,587 INFO L93 Difference]: Finished difference Result 41 states and 44 transitions. [2020-07-17 22:31:53,587 INFO L276 IsEmpty]: Start isEmpty. Operand 41 states and 44 transitions. [2020-07-17 22:31:53,588 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-17 22:31:53,588 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-17 22:31:53,588 INFO L74 IsIncluded]: Start isIncluded. First operand 41 states. Second operand 41 states. [2020-07-17 22:31:53,588 INFO L87 Difference]: Start difference. First operand 41 states. Second operand 41 states. [2020-07-17 22:31:53,594 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-17 22:31:53,594 INFO L93 Difference]: Finished difference Result 41 states and 44 transitions. [2020-07-17 22:31:53,594 INFO L276 IsEmpty]: Start isEmpty. Operand 41 states and 44 transitions. [2020-07-17 22:31:53,595 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-17 22:31:53,595 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-17 22:31:53,595 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-17 22:31:53,595 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-17 22:31:53,595 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 41 states. [2020-07-17 22:31:53,598 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 41 states to 41 states and 44 transitions. [2020-07-17 22:31:53,599 INFO L78 Accepts]: Start accepts. Automaton has 41 states and 44 transitions. Word has length 12 [2020-07-17 22:31:53,599 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-17 22:31:53,599 INFO L479 AbstractCegarLoop]: Abstraction has 41 states and 44 transitions. [2020-07-17 22:31:53,599 INFO L480 AbstractCegarLoop]: Interpolant automaton has 5 states. [2020-07-17 22:31:53,599 INFO L276 IsEmpty]: Start isEmpty. Operand 41 states and 44 transitions. [2020-07-17 22:31:53,600 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 15 [2020-07-17 22:31:53,600 INFO L414 BasicCegarLoop]: Found error trace [2020-07-17 22:31:53,600 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-17 22:31:53,604 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2020-07-17 22:31:53,604 INFO L427 AbstractCegarLoop]: === Iteration 4 === [mainErr4ASSERT_VIOLATIONERROR_FUNCTION, mainErr0ASSERT_VIOLATIONERROR_FUNCTION, mainErr2ASSERT_VIOLATIONERROR_FUNCTION, mainErr6ASSERT_VIOLATIONERROR_FUNCTION, mainErr5ASSERT_VIOLATIONERROR_FUNCTION, mainErr3ASSERT_VIOLATIONERROR_FUNCTION, mainErr1ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-17 22:31:53,604 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-17 22:31:53,605 INFO L82 PathProgramCache]: Analyzing trace with hash 290038970, now seen corresponding path program 1 times [2020-07-17 22:31:53,605 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-17 22:31:53,606 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [332161107] [2020-07-17 22:31:53,607 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-17 22:31:53,646 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-17 22:31:53,765 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-17 22:31:53,774 INFO L280 TraceCheckUtils]: 0: Hoare triple {732#(and (= |#valid| |old(#valid)|) (= |#NULL.base| |old(#NULL.base)|) (= |#NULL.offset| |old(#NULL.offset)|))} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier; {724#true} is VALID [2020-07-17 22:31:53,774 INFO L280 TraceCheckUtils]: 1: Hoare triple {724#true} assume true; {724#true} is VALID [2020-07-17 22:31:53,774 INFO L275 TraceCheckUtils]: 2: Hoare quadruple {724#true} {724#true} #189#return; {724#true} is VALID [2020-07-17 22:31:53,776 INFO L263 TraceCheckUtils]: 0: Hoare triple {724#true} call ULTIMATE.init(); {732#(and (= |#valid| |old(#valid)|) (= |#NULL.base| |old(#NULL.base)|) (= |#NULL.offset| |old(#NULL.offset)|))} is VALID [2020-07-17 22:31:53,776 INFO L280 TraceCheckUtils]: 1: Hoare triple {732#(and (= |#valid| |old(#valid)|) (= |#NULL.base| |old(#NULL.base)|) (= |#NULL.offset| |old(#NULL.offset)|))} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier; {724#true} is VALID [2020-07-17 22:31:53,777 INFO L280 TraceCheckUtils]: 2: Hoare triple {724#true} assume true; {724#true} is VALID [2020-07-17 22:31:53,777 INFO L275 TraceCheckUtils]: 3: Hoare quadruple {724#true} {724#true} #189#return; {724#true} is VALID [2020-07-17 22:31:53,777 INFO L263 TraceCheckUtils]: 4: Hoare triple {724#true} call #t~ret21 := main(); {724#true} is VALID [2020-07-17 22:31:53,781 INFO L280 TraceCheckUtils]: 5: Hoare triple {724#true} call #t~malloc0.base, #t~malloc0.offset := #Ultimate.allocOnHeap(12);~null~0.base, ~null~0.offset := #t~malloc0.base, #t~malloc0.offset;call write~$Pointer$(0, 0, ~null~0.base, ~null~0.offset, 4);call write~$Pointer$(0, 0, ~null~0.base, 4 + ~null~0.offset, 4);call write~int(~unnamed1~0~BLACK, ~null~0.base, 8 + ~null~0.offset, 4);call #t~malloc1.base, #t~malloc1.offset := #Ultimate.allocOnHeap(12);~list~0.base, ~list~0.offset := #t~malloc1.base, #t~malloc1.offset;call write~$Pointer$(~null~0.base, ~null~0.offset, ~list~0.base, ~list~0.offset, 4);call write~$Pointer$(~null~0.base, ~null~0.offset, ~list~0.base, 4 + ~list~0.offset, 4);call write~int(~unnamed1~0~BLACK, ~list~0.base, 8 + ~list~0.offset, 4);~end~0.base, ~end~0.offset := ~list~0.base, ~list~0.offset; {729#(and (= 0 main_~list~0.offset) (= ~unnamed1~0~BLACK (select (select |#memory_int| main_~list~0.base) (+ main_~list~0.offset 8))))} is VALID [2020-07-17 22:31:53,783 INFO L280 TraceCheckUtils]: 6: Hoare triple {729#(and (= 0 main_~list~0.offset) (= ~unnamed1~0~BLACK (select (select |#memory_int| main_~list~0.base) (+ main_~list~0.offset 8))))} assume -2147483648 <= #t~nondet2 && #t~nondet2 <= 2147483647; {729#(and (= 0 main_~list~0.offset) (= ~unnamed1~0~BLACK (select (select |#memory_int| main_~list~0.base) (+ main_~list~0.offset 8))))} is VALID [2020-07-17 22:31:53,799 INFO L280 TraceCheckUtils]: 7: Hoare triple {729#(and (= 0 main_~list~0.offset) (= ~unnamed1~0~BLACK (select (select |#memory_int| main_~list~0.base) (+ main_~list~0.offset 8))))} assume !(0 != #t~nondet2);havoc #t~nondet2; {729#(and (= 0 main_~list~0.offset) (= ~unnamed1~0~BLACK (select (select |#memory_int| main_~list~0.base) (+ main_~list~0.offset 8))))} is VALID [2020-07-17 22:31:53,800 INFO L280 TraceCheckUtils]: 8: Hoare triple {729#(and (= 0 main_~list~0.offset) (= ~unnamed1~0~BLACK (select (select |#memory_int| main_~list~0.base) (+ main_~list~0.offset 8))))} ~end~0.base, ~end~0.offset := ~null~0.base, ~null~0.offset;~end~0.base, ~end~0.offset := ~list~0.base, ~list~0.offset; {730#(= ~unnamed1~0~BLACK (select (select |#memory_int| main_~end~0.base) (+ main_~end~0.offset 8)))} is VALID [2020-07-17 22:31:53,809 INFO L280 TraceCheckUtils]: 9: Hoare triple {730#(= ~unnamed1~0~BLACK (select (select |#memory_int| main_~end~0.base) (+ main_~end~0.offset 8)))} assume !!(~null~0.base != ~end~0.base || ~null~0.offset != ~end~0.offset); {730#(= ~unnamed1~0~BLACK (select (select |#memory_int| main_~end~0.base) (+ main_~end~0.offset 8)))} is VALID [2020-07-17 22:31:53,809 INFO L280 TraceCheckUtils]: 10: Hoare triple {730#(= ~unnamed1~0~BLACK (select (select |#memory_int| main_~end~0.base) (+ main_~end~0.offset 8)))} goto; {730#(= ~unnamed1~0~BLACK (select (select |#memory_int| main_~end~0.base) (+ main_~end~0.offset 8)))} is VALID [2020-07-17 22:31:53,811 INFO L280 TraceCheckUtils]: 11: Hoare triple {730#(= ~unnamed1~0~BLACK (select (select |#memory_int| main_~end~0.base) (+ main_~end~0.offset 8)))} call #t~mem12 := read~int(~end~0.base, 8 + ~end~0.offset, 4); {731#(= ~unnamed1~0~BLACK |main_#t~mem12|)} is VALID [2020-07-17 22:31:53,811 INFO L280 TraceCheckUtils]: 12: Hoare triple {731#(= ~unnamed1~0~BLACK |main_#t~mem12|)} assume !(~unnamed1~0~BLACK == #t~mem12);havoc #t~mem12; {725#false} is VALID [2020-07-17 22:31:53,812 INFO L280 TraceCheckUtils]: 13: Hoare triple {725#false} assume !false; {725#false} is VALID [2020-07-17 22:31:53,813 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-17 22:31:53,813 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [332161107] [2020-07-17 22:31:53,813 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-17 22:31:53,813 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2020-07-17 22:31:53,814 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1879322979] [2020-07-17 22:31:53,814 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 14 [2020-07-17 22:31:53,815 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-17 22:31:53,815 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 6 states. [2020-07-17 22:31:53,834 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 14 edges. 14 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-17 22:31:53,834 INFO L459 AbstractCegarLoop]: Interpolant automaton has 6 states [2020-07-17 22:31:53,834 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-17 22:31:53,835 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2020-07-17 22:31:53,835 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2020-07-17 22:31:53,835 INFO L87 Difference]: Start difference. First operand 41 states and 44 transitions. Second operand 6 states. [2020-07-17 22:31:54,456 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-17 22:31:54,457 INFO L93 Difference]: Finished difference Result 66 states and 72 transitions. [2020-07-17 22:31:54,457 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2020-07-17 22:31:54,457 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 14 [2020-07-17 22:31:54,457 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-17 22:31:54,457 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 6 states. [2020-07-17 22:31:54,460 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 72 transitions. [2020-07-17 22:31:54,460 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 6 states. [2020-07-17 22:31:54,462 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 72 transitions. [2020-07-17 22:31:54,462 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 7 states and 72 transitions. [2020-07-17 22:31:54,569 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 72 edges. 72 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-17 22:31:54,571 INFO L225 Difference]: With dead ends: 66 [2020-07-17 22:31:54,572 INFO L226 Difference]: Without dead ends: 64 [2020-07-17 22:31:54,572 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=19, Invalid=37, Unknown=0, NotChecked=0, Total=56 [2020-07-17 22:31:54,573 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 64 states. [2020-07-17 22:31:54,593 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 64 to 48. [2020-07-17 22:31:54,594 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-17 22:31:54,594 INFO L82 GeneralOperation]: Start isEquivalent. First operand 64 states. Second operand 48 states. [2020-07-17 22:31:54,594 INFO L74 IsIncluded]: Start isIncluded. First operand 64 states. Second operand 48 states. [2020-07-17 22:31:54,594 INFO L87 Difference]: Start difference. First operand 64 states. Second operand 48 states. [2020-07-17 22:31:54,597 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-17 22:31:54,597 INFO L93 Difference]: Finished difference Result 64 states and 70 transitions. [2020-07-17 22:31:54,598 INFO L276 IsEmpty]: Start isEmpty. Operand 64 states and 70 transitions. [2020-07-17 22:31:54,598 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-17 22:31:54,599 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-17 22:31:54,599 INFO L74 IsIncluded]: Start isIncluded. First operand 48 states. Second operand 64 states. [2020-07-17 22:31:54,599 INFO L87 Difference]: Start difference. First operand 48 states. Second operand 64 states. [2020-07-17 22:31:54,602 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-17 22:31:54,602 INFO L93 Difference]: Finished difference Result 64 states and 70 transitions. [2020-07-17 22:31:54,603 INFO L276 IsEmpty]: Start isEmpty. Operand 64 states and 70 transitions. [2020-07-17 22:31:54,603 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-17 22:31:54,603 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-17 22:31:54,604 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-17 22:31:54,604 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-17 22:31:54,604 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 48 states. [2020-07-17 22:31:54,606 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 48 states to 48 states and 52 transitions. [2020-07-17 22:31:54,606 INFO L78 Accepts]: Start accepts. Automaton has 48 states and 52 transitions. Word has length 14 [2020-07-17 22:31:54,607 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-17 22:31:54,607 INFO L479 AbstractCegarLoop]: Abstraction has 48 states and 52 transitions. [2020-07-17 22:31:54,607 INFO L480 AbstractCegarLoop]: Interpolant automaton has 6 states. [2020-07-17 22:31:54,607 INFO L276 IsEmpty]: Start isEmpty. Operand 48 states and 52 transitions. [2020-07-17 22:31:54,608 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 16 [2020-07-17 22:31:54,608 INFO L414 BasicCegarLoop]: Found error trace [2020-07-17 22:31:54,608 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-17 22:31:54,608 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2020-07-17 22:31:54,608 INFO L427 AbstractCegarLoop]: === Iteration 5 === [mainErr4ASSERT_VIOLATIONERROR_FUNCTION, mainErr0ASSERT_VIOLATIONERROR_FUNCTION, mainErr2ASSERT_VIOLATIONERROR_FUNCTION, mainErr6ASSERT_VIOLATIONERROR_FUNCTION, mainErr5ASSERT_VIOLATIONERROR_FUNCTION, mainErr3ASSERT_VIOLATIONERROR_FUNCTION, mainErr1ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-17 22:31:54,609 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-17 22:31:54,609 INFO L82 PathProgramCache]: Analyzing trace with hash 2060721718, now seen corresponding path program 1 times [2020-07-17 22:31:54,609 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-17 22:31:54,610 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1761106222] [2020-07-17 22:31:54,610 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-17 22:31:54,638 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-17 22:31:54,718 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-17 22:31:54,722 INFO L280 TraceCheckUtils]: 0: Hoare triple {1007#(and (= |#valid| |old(#valid)|) (= |#NULL.base| |old(#NULL.base)|) (= |#NULL.offset| |old(#NULL.offset)|))} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier; {1000#true} is VALID [2020-07-17 22:31:54,723 INFO L280 TraceCheckUtils]: 1: Hoare triple {1000#true} assume true; {1000#true} is VALID [2020-07-17 22:31:54,723 INFO L275 TraceCheckUtils]: 2: Hoare quadruple {1000#true} {1000#true} #189#return; {1000#true} is VALID [2020-07-17 22:31:54,724 INFO L263 TraceCheckUtils]: 0: Hoare triple {1000#true} call ULTIMATE.init(); {1007#(and (= |#valid| |old(#valid)|) (= |#NULL.base| |old(#NULL.base)|) (= |#NULL.offset| |old(#NULL.offset)|))} is VALID [2020-07-17 22:31:54,725 INFO L280 TraceCheckUtils]: 1: Hoare triple {1007#(and (= |#valid| |old(#valid)|) (= |#NULL.base| |old(#NULL.base)|) (= |#NULL.offset| |old(#NULL.offset)|))} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier; {1000#true} is VALID [2020-07-17 22:31:54,725 INFO L280 TraceCheckUtils]: 2: Hoare triple {1000#true} assume true; {1000#true} is VALID [2020-07-17 22:31:54,725 INFO L275 TraceCheckUtils]: 3: Hoare quadruple {1000#true} {1000#true} #189#return; {1000#true} is VALID [2020-07-17 22:31:54,725 INFO L263 TraceCheckUtils]: 4: Hoare triple {1000#true} call #t~ret21 := main(); {1000#true} is VALID [2020-07-17 22:31:54,726 INFO L280 TraceCheckUtils]: 5: Hoare triple {1000#true} call #t~malloc0.base, #t~malloc0.offset := #Ultimate.allocOnHeap(12);~null~0.base, ~null~0.offset := #t~malloc0.base, #t~malloc0.offset;call write~$Pointer$(0, 0, ~null~0.base, ~null~0.offset, 4);call write~$Pointer$(0, 0, ~null~0.base, 4 + ~null~0.offset, 4);call write~int(~unnamed1~0~BLACK, ~null~0.base, 8 + ~null~0.offset, 4);call #t~malloc1.base, #t~malloc1.offset := #Ultimate.allocOnHeap(12);~list~0.base, ~list~0.offset := #t~malloc1.base, #t~malloc1.offset;call write~$Pointer$(~null~0.base, ~null~0.offset, ~list~0.base, ~list~0.offset, 4);call write~$Pointer$(~null~0.base, ~null~0.offset, ~list~0.base, 4 + ~list~0.offset, 4);call write~int(~unnamed1~0~BLACK, ~list~0.base, 8 + ~list~0.offset, 4);~end~0.base, ~end~0.offset := ~list~0.base, ~list~0.offset; {1000#true} is VALID [2020-07-17 22:31:54,726 INFO L280 TraceCheckUtils]: 6: Hoare triple {1000#true} assume -2147483648 <= #t~nondet2 && #t~nondet2 <= 2147483647; {1000#true} is VALID [2020-07-17 22:31:54,726 INFO L280 TraceCheckUtils]: 7: Hoare triple {1000#true} assume !!(0 != #t~nondet2);havoc #t~nondet2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.allocOnHeap(12);call write~$Pointer$(#t~malloc3.base, #t~malloc3.offset, ~end~0.base, ~end~0.offset, 4);call #t~mem4.base, #t~mem4.offset := read~$Pointer$(~end~0.base, ~end~0.offset, 4);call write~$Pointer$(~end~0.base, ~end~0.offset, #t~mem4.base, 4 + #t~mem4.offset, 4);havoc #t~mem4.base, #t~mem4.offset;call #t~mem5.base, #t~mem5.offset := read~$Pointer$(~end~0.base, ~end~0.offset, 4);~end~0.base, ~end~0.offset := #t~mem5.base, #t~mem5.offset;havoc #t~mem5.base, #t~mem5.offset;call write~$Pointer$(~null~0.base, ~null~0.offset, ~end~0.base, ~end~0.offset, 4);assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647; {1000#true} is VALID [2020-07-17 22:31:54,730 INFO L280 TraceCheckUtils]: 8: Hoare triple {1000#true} assume !(0 != #t~nondet6);havoc #t~nondet6;call write~int(~unnamed1~0~RED, ~end~0.base, 8 + ~end~0.offset, 4);call #t~malloc7.base, #t~malloc7.offset := #Ultimate.allocOnHeap(12);call write~$Pointer$(#t~malloc7.base, #t~malloc7.offset, ~end~0.base, ~end~0.offset, 4);call #t~mem8.base, #t~mem8.offset := read~$Pointer$(~end~0.base, ~end~0.offset, 4);call write~$Pointer$(~end~0.base, ~end~0.offset, #t~mem8.base, 4 + #t~mem8.offset, 4);havoc #t~mem8.base, #t~mem8.offset;call #t~mem9.base, #t~mem9.offset := read~$Pointer$(~end~0.base, ~end~0.offset, 4);~end~0.base, ~end~0.offset := #t~mem9.base, #t~mem9.offset;havoc #t~mem9.base, #t~mem9.offset;call write~$Pointer$(~null~0.base, ~null~0.offset, ~end~0.base, ~end~0.offset, 4);call write~int(~unnamed1~0~BLACK, ~end~0.base, 8 + ~end~0.offset, 4); {1005#(and (= (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset) main_~null~0.base) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset) main_~null~0.offset))} is VALID [2020-07-17 22:31:54,731 INFO L280 TraceCheckUtils]: 9: Hoare triple {1005#(and (= (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset) main_~null~0.base) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset) main_~null~0.offset))} call #t~mem10 := read~int(~end~0.base, 8 + ~end~0.offset, 4); {1005#(and (= (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset) main_~null~0.base) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset) main_~null~0.offset))} is VALID [2020-07-17 22:31:54,732 INFO L280 TraceCheckUtils]: 10: Hoare triple {1005#(and (= (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset) main_~null~0.base) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset) main_~null~0.offset))} assume !!(~unnamed1~0~BLACK == #t~mem10);havoc #t~mem10; {1005#(and (= (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset) main_~null~0.base) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset) main_~null~0.offset))} is VALID [2020-07-17 22:31:54,733 INFO L280 TraceCheckUtils]: 11: Hoare triple {1005#(and (= (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset) main_~null~0.base) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset) main_~null~0.offset))} goto; {1005#(and (= (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset) main_~null~0.base) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset) main_~null~0.offset))} is VALID [2020-07-17 22:31:54,734 INFO L280 TraceCheckUtils]: 12: Hoare triple {1005#(and (= (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset) main_~null~0.base) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset) main_~null~0.offset))} call #t~mem11.base, #t~mem11.offset := read~$Pointer$(~end~0.base, ~end~0.offset, 4); {1006#(and (= |main_#t~mem11.offset| main_~null~0.offset) (= |main_#t~mem11.base| main_~null~0.base))} is VALID [2020-07-17 22:31:54,734 INFO L280 TraceCheckUtils]: 13: Hoare triple {1006#(and (= |main_#t~mem11.offset| main_~null~0.offset) (= |main_#t~mem11.base| main_~null~0.base))} assume !(~null~0.base == #t~mem11.base && ~null~0.offset == #t~mem11.offset);havoc #t~mem11.base, #t~mem11.offset; {1001#false} is VALID [2020-07-17 22:31:54,735 INFO L280 TraceCheckUtils]: 14: Hoare triple {1001#false} assume !false; {1001#false} is VALID [2020-07-17 22:31:54,736 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-17 22:31:54,736 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1761106222] [2020-07-17 22:31:54,736 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-17 22:31:54,736 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2020-07-17 22:31:54,737 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [418833343] [2020-07-17 22:31:54,737 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 15 [2020-07-17 22:31:54,737 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-17 22:31:54,738 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states. [2020-07-17 22:31:54,758 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 15 edges. 15 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-17 22:31:54,758 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2020-07-17 22:31:54,759 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-17 22:31:54,759 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2020-07-17 22:31:54,759 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2020-07-17 22:31:54,759 INFO L87 Difference]: Start difference. First operand 48 states and 52 transitions. Second operand 5 states. [2020-07-17 22:31:55,221 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-17 22:31:55,222 INFO L93 Difference]: Finished difference Result 48 states and 52 transitions. [2020-07-17 22:31:55,222 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2020-07-17 22:31:55,222 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 15 [2020-07-17 22:31:55,223 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-17 22:31:55,223 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-17 22:31:55,225 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 44 transitions. [2020-07-17 22:31:55,225 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-17 22:31:55,229 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 44 transitions. [2020-07-17 22:31:55,229 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states and 44 transitions. [2020-07-17 22:31:55,290 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 44 edges. 44 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-17 22:31:55,292 INFO L225 Difference]: With dead ends: 48 [2020-07-17 22:31:55,292 INFO L226 Difference]: Without dead ends: 46 [2020-07-17 22:31:55,293 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=11, Invalid=19, Unknown=0, NotChecked=0, Total=30 [2020-07-17 22:31:55,293 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 46 states. [2020-07-17 22:31:55,323 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 46 to 46. [2020-07-17 22:31:55,323 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-17 22:31:55,323 INFO L82 GeneralOperation]: Start isEquivalent. First operand 46 states. Second operand 46 states. [2020-07-17 22:31:55,324 INFO L74 IsIncluded]: Start isIncluded. First operand 46 states. Second operand 46 states. [2020-07-17 22:31:55,324 INFO L87 Difference]: Start difference. First operand 46 states. Second operand 46 states. [2020-07-17 22:31:55,326 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-17 22:31:55,326 INFO L93 Difference]: Finished difference Result 46 states and 50 transitions. [2020-07-17 22:31:55,326 INFO L276 IsEmpty]: Start isEmpty. Operand 46 states and 50 transitions. [2020-07-17 22:31:55,327 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-17 22:31:55,327 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-17 22:31:55,327 INFO L74 IsIncluded]: Start isIncluded. First operand 46 states. Second operand 46 states. [2020-07-17 22:31:55,327 INFO L87 Difference]: Start difference. First operand 46 states. Second operand 46 states. [2020-07-17 22:31:55,333 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-17 22:31:55,334 INFO L93 Difference]: Finished difference Result 46 states and 50 transitions. [2020-07-17 22:31:55,334 INFO L276 IsEmpty]: Start isEmpty. Operand 46 states and 50 transitions. [2020-07-17 22:31:55,334 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-17 22:31:55,335 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-17 22:31:55,335 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-17 22:31:55,335 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-17 22:31:55,335 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 46 states. [2020-07-17 22:31:55,337 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 46 states to 46 states and 50 transitions. [2020-07-17 22:31:55,337 INFO L78 Accepts]: Start accepts. Automaton has 46 states and 50 transitions. Word has length 15 [2020-07-17 22:31:55,337 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-17 22:31:55,338 INFO L479 AbstractCegarLoop]: Abstraction has 46 states and 50 transitions. [2020-07-17 22:31:55,338 INFO L480 AbstractCegarLoop]: Interpolant automaton has 5 states. [2020-07-17 22:31:55,338 INFO L276 IsEmpty]: Start isEmpty. Operand 46 states and 50 transitions. [2020-07-17 22:31:55,339 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 18 [2020-07-17 22:31:55,339 INFO L414 BasicCegarLoop]: Found error trace [2020-07-17 22:31:55,339 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-17 22:31:55,339 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2020-07-17 22:31:55,340 INFO L427 AbstractCegarLoop]: === Iteration 6 === [mainErr4ASSERT_VIOLATIONERROR_FUNCTION, mainErr0ASSERT_VIOLATIONERROR_FUNCTION, mainErr2ASSERT_VIOLATIONERROR_FUNCTION, mainErr6ASSERT_VIOLATIONERROR_FUNCTION, mainErr5ASSERT_VIOLATIONERROR_FUNCTION, mainErr3ASSERT_VIOLATIONERROR_FUNCTION, mainErr1ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-17 22:31:55,340 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-17 22:31:55,340 INFO L82 PathProgramCache]: Analyzing trace with hash 373775322, now seen corresponding path program 1 times [2020-07-17 22:31:55,340 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-17 22:31:55,340 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [386527845] [2020-07-17 22:31:55,341 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-17 22:31:55,421 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-17 22:31:55,490 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-17 22:31:55,494 INFO L280 TraceCheckUtils]: 0: Hoare triple {1223#(and (= |#valid| |old(#valid)|) (= |#NULL.base| |old(#NULL.base)|) (= |#NULL.offset| |old(#NULL.offset)|))} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier; {1216#true} is VALID [2020-07-17 22:31:55,495 INFO L280 TraceCheckUtils]: 1: Hoare triple {1216#true} assume true; {1216#true} is VALID [2020-07-17 22:31:55,495 INFO L275 TraceCheckUtils]: 2: Hoare quadruple {1216#true} {1216#true} #189#return; {1216#true} is VALID [2020-07-17 22:31:55,496 INFO L263 TraceCheckUtils]: 0: Hoare triple {1216#true} call ULTIMATE.init(); {1223#(and (= |#valid| |old(#valid)|) (= |#NULL.base| |old(#NULL.base)|) (= |#NULL.offset| |old(#NULL.offset)|))} is VALID [2020-07-17 22:31:55,496 INFO L280 TraceCheckUtils]: 1: Hoare triple {1223#(and (= |#valid| |old(#valid)|) (= |#NULL.base| |old(#NULL.base)|) (= |#NULL.offset| |old(#NULL.offset)|))} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier; {1216#true} is VALID [2020-07-17 22:31:55,496 INFO L280 TraceCheckUtils]: 2: Hoare triple {1216#true} assume true; {1216#true} is VALID [2020-07-17 22:31:55,497 INFO L275 TraceCheckUtils]: 3: Hoare quadruple {1216#true} {1216#true} #189#return; {1216#true} is VALID [2020-07-17 22:31:55,497 INFO L263 TraceCheckUtils]: 4: Hoare triple {1216#true} call #t~ret21 := main(); {1216#true} is VALID [2020-07-17 22:31:55,500 INFO L280 TraceCheckUtils]: 5: Hoare triple {1216#true} call #t~malloc0.base, #t~malloc0.offset := #Ultimate.allocOnHeap(12);~null~0.base, ~null~0.offset := #t~malloc0.base, #t~malloc0.offset;call write~$Pointer$(0, 0, ~null~0.base, ~null~0.offset, 4);call write~$Pointer$(0, 0, ~null~0.base, 4 + ~null~0.offset, 4);call write~int(~unnamed1~0~BLACK, ~null~0.base, 8 + ~null~0.offset, 4);call #t~malloc1.base, #t~malloc1.offset := #Ultimate.allocOnHeap(12);~list~0.base, ~list~0.offset := #t~malloc1.base, #t~malloc1.offset;call write~$Pointer$(~null~0.base, ~null~0.offset, ~list~0.base, ~list~0.offset, 4);call write~$Pointer$(~null~0.base, ~null~0.offset, ~list~0.base, 4 + ~list~0.offset, 4);call write~int(~unnamed1~0~BLACK, ~list~0.base, 8 + ~list~0.offset, 4);~end~0.base, ~end~0.offset := ~list~0.base, ~list~0.offset; {1221#(= 1 (select |#valid| main_~null~0.base))} is VALID [2020-07-17 22:31:55,501 INFO L280 TraceCheckUtils]: 6: Hoare triple {1221#(= 1 (select |#valid| main_~null~0.base))} assume -2147483648 <= #t~nondet2 && #t~nondet2 <= 2147483647; {1221#(= 1 (select |#valid| main_~null~0.base))} is VALID [2020-07-17 22:31:55,504 INFO L280 TraceCheckUtils]: 7: Hoare triple {1221#(= 1 (select |#valid| main_~null~0.base))} assume !!(0 != #t~nondet2);havoc #t~nondet2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.allocOnHeap(12);call write~$Pointer$(#t~malloc3.base, #t~malloc3.offset, ~end~0.base, ~end~0.offset, 4);call #t~mem4.base, #t~mem4.offset := read~$Pointer$(~end~0.base, ~end~0.offset, 4);call write~$Pointer$(~end~0.base, ~end~0.offset, #t~mem4.base, 4 + #t~mem4.offset, 4);havoc #t~mem4.base, #t~mem4.offset;call #t~mem5.base, #t~mem5.offset := read~$Pointer$(~end~0.base, ~end~0.offset, 4);~end~0.base, ~end~0.offset := #t~mem5.base, #t~mem5.offset;havoc #t~mem5.base, #t~mem5.offset;call write~$Pointer$(~null~0.base, ~null~0.offset, ~end~0.base, ~end~0.offset, 4);assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647; {1221#(= 1 (select |#valid| main_~null~0.base))} is VALID [2020-07-17 22:31:55,507 INFO L280 TraceCheckUtils]: 8: Hoare triple {1221#(= 1 (select |#valid| main_~null~0.base))} assume !(0 != #t~nondet6);havoc #t~nondet6;call write~int(~unnamed1~0~RED, ~end~0.base, 8 + ~end~0.offset, 4);call #t~malloc7.base, #t~malloc7.offset := #Ultimate.allocOnHeap(12);call write~$Pointer$(#t~malloc7.base, #t~malloc7.offset, ~end~0.base, ~end~0.offset, 4);call #t~mem8.base, #t~mem8.offset := read~$Pointer$(~end~0.base, ~end~0.offset, 4);call write~$Pointer$(~end~0.base, ~end~0.offset, #t~mem8.base, 4 + #t~mem8.offset, 4);havoc #t~mem8.base, #t~mem8.offset;call #t~mem9.base, #t~mem9.offset := read~$Pointer$(~end~0.base, ~end~0.offset, 4);~end~0.base, ~end~0.offset := #t~mem9.base, #t~mem9.offset;havoc #t~mem9.base, #t~mem9.offset;call write~$Pointer$(~null~0.base, ~null~0.offset, ~end~0.base, ~end~0.offset, 4);call write~int(~unnamed1~0~BLACK, ~end~0.base, 8 + ~end~0.offset, 4); {1222#(not (= main_~null~0.base main_~end~0.base))} is VALID [2020-07-17 22:31:55,508 INFO L280 TraceCheckUtils]: 9: Hoare triple {1222#(not (= main_~null~0.base main_~end~0.base))} call #t~mem10 := read~int(~end~0.base, 8 + ~end~0.offset, 4); {1222#(not (= main_~null~0.base main_~end~0.base))} is VALID [2020-07-17 22:31:55,508 INFO L280 TraceCheckUtils]: 10: Hoare triple {1222#(not (= main_~null~0.base main_~end~0.base))} assume !!(~unnamed1~0~BLACK == #t~mem10);havoc #t~mem10; {1222#(not (= main_~null~0.base main_~end~0.base))} is VALID [2020-07-17 22:31:55,509 INFO L280 TraceCheckUtils]: 11: Hoare triple {1222#(not (= main_~null~0.base main_~end~0.base))} goto; {1222#(not (= main_~null~0.base main_~end~0.base))} is VALID [2020-07-17 22:31:55,510 INFO L280 TraceCheckUtils]: 12: Hoare triple {1222#(not (= main_~null~0.base main_~end~0.base))} call #t~mem11.base, #t~mem11.offset := read~$Pointer$(~end~0.base, ~end~0.offset, 4); {1222#(not (= main_~null~0.base main_~end~0.base))} is VALID [2020-07-17 22:31:55,510 INFO L280 TraceCheckUtils]: 13: Hoare triple {1222#(not (= main_~null~0.base main_~end~0.base))} assume !!(~null~0.base == #t~mem11.base && ~null~0.offset == #t~mem11.offset);havoc #t~mem11.base, #t~mem11.offset; {1222#(not (= main_~null~0.base main_~end~0.base))} is VALID [2020-07-17 22:31:55,511 INFO L280 TraceCheckUtils]: 14: Hoare triple {1222#(not (= main_~null~0.base main_~end~0.base))} goto; {1222#(not (= main_~null~0.base main_~end~0.base))} is VALID [2020-07-17 22:31:55,512 INFO L280 TraceCheckUtils]: 15: Hoare triple {1222#(not (= main_~null~0.base main_~end~0.base))} assume !(~null~0.base != ~end~0.base || ~null~0.offset != ~end~0.offset); {1217#false} is VALID [2020-07-17 22:31:55,512 INFO L280 TraceCheckUtils]: 16: Hoare triple {1217#false} assume !false; {1217#false} is VALID [2020-07-17 22:31:55,513 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-17 22:31:55,513 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [386527845] [2020-07-17 22:31:55,513 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-17 22:31:55,514 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2020-07-17 22:31:55,514 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [783393389] [2020-07-17 22:31:55,514 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 17 [2020-07-17 22:31:55,515 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-17 22:31:55,515 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states. [2020-07-17 22:31:55,537 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 17 edges. 17 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-17 22:31:55,538 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2020-07-17 22:31:55,538 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-17 22:31:55,538 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2020-07-17 22:31:55,539 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2020-07-17 22:31:55,539 INFO L87 Difference]: Start difference. First operand 46 states and 50 transitions. Second operand 5 states. [2020-07-17 22:31:55,868 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-17 22:31:55,869 INFO L93 Difference]: Finished difference Result 46 states and 50 transitions. [2020-07-17 22:31:55,869 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2020-07-17 22:31:55,869 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 17 [2020-07-17 22:31:55,869 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-17 22:31:55,869 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-17 22:31:55,870 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 42 transitions. [2020-07-17 22:31:55,871 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-17 22:31:55,871 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 42 transitions. [2020-07-17 22:31:55,872 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states and 42 transitions. [2020-07-17 22:31:55,928 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 42 edges. 42 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-17 22:31:55,929 INFO L225 Difference]: With dead ends: 46 [2020-07-17 22:31:55,929 INFO L226 Difference]: Without dead ends: 44 [2020-07-17 22:31:55,930 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=11, Invalid=19, Unknown=0, NotChecked=0, Total=30 [2020-07-17 22:31:55,930 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 44 states. [2020-07-17 22:31:55,958 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 44 to 44. [2020-07-17 22:31:55,958 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-17 22:31:55,958 INFO L82 GeneralOperation]: Start isEquivalent. First operand 44 states. Second operand 44 states. [2020-07-17 22:31:55,958 INFO L74 IsIncluded]: Start isIncluded. First operand 44 states. Second operand 44 states. [2020-07-17 22:31:55,958 INFO L87 Difference]: Start difference. First operand 44 states. Second operand 44 states. [2020-07-17 22:31:55,961 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-17 22:31:55,961 INFO L93 Difference]: Finished difference Result 44 states and 48 transitions. [2020-07-17 22:31:55,961 INFO L276 IsEmpty]: Start isEmpty. Operand 44 states and 48 transitions. [2020-07-17 22:31:55,962 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-17 22:31:55,962 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-17 22:31:55,963 INFO L74 IsIncluded]: Start isIncluded. First operand 44 states. Second operand 44 states. [2020-07-17 22:31:55,963 INFO L87 Difference]: Start difference. First operand 44 states. Second operand 44 states. [2020-07-17 22:31:55,964 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-17 22:31:55,965 INFO L93 Difference]: Finished difference Result 44 states and 48 transitions. [2020-07-17 22:31:55,965 INFO L276 IsEmpty]: Start isEmpty. Operand 44 states and 48 transitions. [2020-07-17 22:31:55,965 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-17 22:31:55,966 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-17 22:31:55,966 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-17 22:31:55,966 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-17 22:31:55,966 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 44 states. [2020-07-17 22:31:55,968 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 44 states to 44 states and 48 transitions. [2020-07-17 22:31:55,968 INFO L78 Accepts]: Start accepts. Automaton has 44 states and 48 transitions. Word has length 17 [2020-07-17 22:31:55,968 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-17 22:31:55,968 INFO L479 AbstractCegarLoop]: Abstraction has 44 states and 48 transitions. [2020-07-17 22:31:55,968 INFO L480 AbstractCegarLoop]: Interpolant automaton has 5 states. [2020-07-17 22:31:55,968 INFO L276 IsEmpty]: Start isEmpty. Operand 44 states and 48 transitions. [2020-07-17 22:31:55,969 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 19 [2020-07-17 22:31:55,969 INFO L414 BasicCegarLoop]: Found error trace [2020-07-17 22:31:55,969 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-17 22:31:55,969 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2020-07-17 22:31:55,970 INFO L427 AbstractCegarLoop]: === Iteration 7 === [mainErr4ASSERT_VIOLATIONERROR_FUNCTION, mainErr0ASSERT_VIOLATIONERROR_FUNCTION, mainErr2ASSERT_VIOLATIONERROR_FUNCTION, mainErr6ASSERT_VIOLATIONERROR_FUNCTION, mainErr5ASSERT_VIOLATIONERROR_FUNCTION, mainErr3ASSERT_VIOLATIONERROR_FUNCTION, mainErr1ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-17 22:31:55,970 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-17 22:31:55,970 INFO L82 PathProgramCache]: Analyzing trace with hash 1568846049, now seen corresponding path program 1 times [2020-07-17 22:31:55,970 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-17 22:31:55,970 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1354574450] [2020-07-17 22:31:55,971 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-17 22:31:55,982 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-17 22:31:56,121 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-17 22:31:56,125 INFO L280 TraceCheckUtils]: 0: Hoare triple {1432#(and (= |#valid| |old(#valid)|) (= |#NULL.base| |old(#NULL.base)|) (= |#NULL.offset| |old(#NULL.offset)|))} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier; {1424#true} is VALID [2020-07-17 22:31:56,126 INFO L280 TraceCheckUtils]: 1: Hoare triple {1424#true} assume true; {1424#true} is VALID [2020-07-17 22:31:56,126 INFO L275 TraceCheckUtils]: 2: Hoare quadruple {1424#true} {1424#true} #189#return; {1424#true} is VALID [2020-07-17 22:31:56,134 INFO L263 TraceCheckUtils]: 0: Hoare triple {1424#true} call ULTIMATE.init(); {1432#(and (= |#valid| |old(#valid)|) (= |#NULL.base| |old(#NULL.base)|) (= |#NULL.offset| |old(#NULL.offset)|))} is VALID [2020-07-17 22:31:56,135 INFO L280 TraceCheckUtils]: 1: Hoare triple {1432#(and (= |#valid| |old(#valid)|) (= |#NULL.base| |old(#NULL.base)|) (= |#NULL.offset| |old(#NULL.offset)|))} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier; {1424#true} is VALID [2020-07-17 22:31:56,135 INFO L280 TraceCheckUtils]: 2: Hoare triple {1424#true} assume true; {1424#true} is VALID [2020-07-17 22:31:56,137 INFO L275 TraceCheckUtils]: 3: Hoare quadruple {1424#true} {1424#true} #189#return; {1424#true} is VALID [2020-07-17 22:31:56,138 INFO L263 TraceCheckUtils]: 4: Hoare triple {1424#true} call #t~ret21 := main(); {1424#true} is VALID [2020-07-17 22:31:56,139 INFO L280 TraceCheckUtils]: 5: Hoare triple {1424#true} call #t~malloc0.base, #t~malloc0.offset := #Ultimate.allocOnHeap(12);~null~0.base, ~null~0.offset := #t~malloc0.base, #t~malloc0.offset;call write~$Pointer$(0, 0, ~null~0.base, ~null~0.offset, 4);call write~$Pointer$(0, 0, ~null~0.base, 4 + ~null~0.offset, 4);call write~int(~unnamed1~0~BLACK, ~null~0.base, 8 + ~null~0.offset, 4);call #t~malloc1.base, #t~malloc1.offset := #Ultimate.allocOnHeap(12);~list~0.base, ~list~0.offset := #t~malloc1.base, #t~malloc1.offset;call write~$Pointer$(~null~0.base, ~null~0.offset, ~list~0.base, ~list~0.offset, 4);call write~$Pointer$(~null~0.base, ~null~0.offset, ~list~0.base, 4 + ~list~0.offset, 4);call write~int(~unnamed1~0~BLACK, ~list~0.base, 8 + ~list~0.offset, 4);~end~0.base, ~end~0.offset := ~list~0.base, ~list~0.offset; {1424#true} is VALID [2020-07-17 22:31:56,139 INFO L280 TraceCheckUtils]: 6: Hoare triple {1424#true} assume -2147483648 <= #t~nondet2 && #t~nondet2 <= 2147483647; {1424#true} is VALID [2020-07-17 22:31:56,139 INFO L280 TraceCheckUtils]: 7: Hoare triple {1424#true} assume !(0 != #t~nondet2);havoc #t~nondet2; {1424#true} is VALID [2020-07-17 22:31:56,140 INFO L280 TraceCheckUtils]: 8: Hoare triple {1424#true} ~end~0.base, ~end~0.offset := ~null~0.base, ~null~0.offset;~end~0.base, ~end~0.offset := ~list~0.base, ~list~0.offset; {1424#true} is VALID [2020-07-17 22:31:56,140 INFO L280 TraceCheckUtils]: 9: Hoare triple {1424#true} assume !!(~null~0.base != ~end~0.base || ~null~0.offset != ~end~0.offset); {1424#true} is VALID [2020-07-17 22:31:56,140 INFO L280 TraceCheckUtils]: 10: Hoare triple {1424#true} goto; {1424#true} is VALID [2020-07-17 22:31:56,145 INFO L280 TraceCheckUtils]: 11: Hoare triple {1424#true} call #t~mem12 := read~int(~end~0.base, 8 + ~end~0.offset, 4); {1429#(= |main_#t~mem12| (select (select |#memory_int| main_~end~0.base) (+ main_~end~0.offset 8)))} is VALID [2020-07-17 22:31:56,154 INFO L280 TraceCheckUtils]: 12: Hoare triple {1429#(= |main_#t~mem12| (select (select |#memory_int| main_~end~0.base) (+ main_~end~0.offset 8)))} assume !!(~unnamed1~0~BLACK == #t~mem12);havoc #t~mem12; {1430#(= ~unnamed1~0~BLACK (select (select |#memory_int| main_~end~0.base) (+ main_~end~0.offset 8)))} is VALID [2020-07-17 22:31:56,158 INFO L280 TraceCheckUtils]: 13: Hoare triple {1430#(= ~unnamed1~0~BLACK (select (select |#memory_int| main_~end~0.base) (+ main_~end~0.offset 8)))} goto; {1430#(= ~unnamed1~0~BLACK (select (select |#memory_int| main_~end~0.base) (+ main_~end~0.offset 8)))} is VALID [2020-07-17 22:31:56,160 INFO L280 TraceCheckUtils]: 14: Hoare triple {1430#(= ~unnamed1~0~BLACK (select (select |#memory_int| main_~end~0.base) (+ main_~end~0.offset 8)))} assume !!(~null~0.base != ~end~0.base || ~null~0.offset != ~end~0.offset);call #t~mem13 := read~int(~end~0.base, 8 + ~end~0.offset, 4); {1431#(= ~unnamed1~0~BLACK |main_#t~mem13|)} is VALID [2020-07-17 22:31:56,161 INFO L280 TraceCheckUtils]: 15: Hoare triple {1431#(= ~unnamed1~0~BLACK |main_#t~mem13|)} assume ~unnamed1~0~RED == #t~mem13;havoc #t~mem13;call #t~mem14.base, #t~mem14.offset := read~$Pointer$(~end~0.base, ~end~0.offset, 4);~end~0.base, ~end~0.offset := #t~mem14.base, #t~mem14.offset;havoc #t~mem14.base, #t~mem14.offset; {1425#false} is VALID [2020-07-17 22:31:56,161 INFO L280 TraceCheckUtils]: 16: Hoare triple {1425#false} assume !(~null~0.base != ~end~0.base || ~null~0.offset != ~end~0.offset); {1425#false} is VALID [2020-07-17 22:31:56,161 INFO L280 TraceCheckUtils]: 17: Hoare triple {1425#false} assume !false; {1425#false} is VALID [2020-07-17 22:31:56,162 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-17 22:31:56,162 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1354574450] [2020-07-17 22:31:56,163 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-17 22:31:56,163 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2020-07-17 22:31:56,163 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2024434251] [2020-07-17 22:31:56,169 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 18 [2020-07-17 22:31:56,169 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-17 22:31:56,169 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 6 states. [2020-07-17 22:31:56,199 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 18 edges. 18 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-17 22:31:56,199 INFO L459 AbstractCegarLoop]: Interpolant automaton has 6 states [2020-07-17 22:31:56,199 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-17 22:31:56,200 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2020-07-17 22:31:56,200 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2020-07-17 22:31:56,200 INFO L87 Difference]: Start difference. First operand 44 states and 48 transitions. Second operand 6 states. [2020-07-17 22:31:56,710 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-17 22:31:56,710 INFO L93 Difference]: Finished difference Result 59 states and 65 transitions. [2020-07-17 22:31:56,710 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2020-07-17 22:31:56,710 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 18 [2020-07-17 22:31:56,710 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-17 22:31:56,711 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 6 states. [2020-07-17 22:31:56,718 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 57 transitions. [2020-07-17 22:31:56,718 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 6 states. [2020-07-17 22:31:56,720 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 57 transitions. [2020-07-17 22:31:56,720 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 6 states and 57 transitions. [2020-07-17 22:31:56,783 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 57 edges. 57 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-17 22:31:56,784 INFO L225 Difference]: With dead ends: 59 [2020-07-17 22:31:56,785 INFO L226 Difference]: Without dead ends: 47 [2020-07-17 22:31:56,785 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 1 SyntacticMatches, 2 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2020-07-17 22:31:56,786 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 47 states. [2020-07-17 22:31:56,818 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 47 to 46. [2020-07-17 22:31:56,818 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-17 22:31:56,819 INFO L82 GeneralOperation]: Start isEquivalent. First operand 47 states. Second operand 46 states. [2020-07-17 22:31:56,819 INFO L74 IsIncluded]: Start isIncluded. First operand 47 states. Second operand 46 states. [2020-07-17 22:31:56,819 INFO L87 Difference]: Start difference. First operand 47 states. Second operand 46 states. [2020-07-17 22:31:56,821 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-17 22:31:56,821 INFO L93 Difference]: Finished difference Result 47 states and 51 transitions. [2020-07-17 22:31:56,821 INFO L276 IsEmpty]: Start isEmpty. Operand 47 states and 51 transitions. [2020-07-17 22:31:56,821 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-17 22:31:56,822 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-17 22:31:56,822 INFO L74 IsIncluded]: Start isIncluded. First operand 46 states. Second operand 47 states. [2020-07-17 22:31:56,822 INFO L87 Difference]: Start difference. First operand 46 states. Second operand 47 states. [2020-07-17 22:31:56,824 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-17 22:31:56,824 INFO L93 Difference]: Finished difference Result 47 states and 51 transitions. [2020-07-17 22:31:56,824 INFO L276 IsEmpty]: Start isEmpty. Operand 47 states and 51 transitions. [2020-07-17 22:31:56,824 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-17 22:31:56,824 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-17 22:31:56,825 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-17 22:31:56,825 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-17 22:31:56,825 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 46 states. [2020-07-17 22:31:56,827 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 46 states to 46 states and 50 transitions. [2020-07-17 22:31:56,827 INFO L78 Accepts]: Start accepts. Automaton has 46 states and 50 transitions. Word has length 18 [2020-07-17 22:31:56,827 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-17 22:31:56,827 INFO L479 AbstractCegarLoop]: Abstraction has 46 states and 50 transitions. [2020-07-17 22:31:56,827 INFO L480 AbstractCegarLoop]: Interpolant automaton has 6 states. [2020-07-17 22:31:56,828 INFO L276 IsEmpty]: Start isEmpty. Operand 46 states and 50 transitions. [2020-07-17 22:31:56,828 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 22 [2020-07-17 22:31:56,828 INFO L414 BasicCegarLoop]: Found error trace [2020-07-17 22:31:56,828 INFO L422 BasicCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-17 22:31:56,829 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2020-07-17 22:31:56,829 INFO L427 AbstractCegarLoop]: === Iteration 8 === [mainErr4ASSERT_VIOLATIONERROR_FUNCTION, mainErr0ASSERT_VIOLATIONERROR_FUNCTION, mainErr2ASSERT_VIOLATIONERROR_FUNCTION, mainErr6ASSERT_VIOLATIONERROR_FUNCTION, mainErr5ASSERT_VIOLATIONERROR_FUNCTION, mainErr3ASSERT_VIOLATIONERROR_FUNCTION, mainErr1ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-17 22:31:56,829 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-17 22:31:56,829 INFO L82 PathProgramCache]: Analyzing trace with hash 777661568, now seen corresponding path program 1 times [2020-07-17 22:31:56,830 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-17 22:31:56,830 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1868601385] [2020-07-17 22:31:56,830 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-17 22:31:56,842 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-17 22:31:56,919 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-17 22:31:56,925 INFO L280 TraceCheckUtils]: 0: Hoare triple {1663#(and (= |#valid| |old(#valid)|) (= |#NULL.base| |old(#NULL.base)|) (= |#NULL.offset| |old(#NULL.offset)|))} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier; {1655#true} is VALID [2020-07-17 22:31:56,925 INFO L280 TraceCheckUtils]: 1: Hoare triple {1655#true} assume true; {1655#true} is VALID [2020-07-17 22:31:56,926 INFO L275 TraceCheckUtils]: 2: Hoare quadruple {1655#true} {1655#true} #189#return; {1655#true} is VALID [2020-07-17 22:31:56,942 INFO L263 TraceCheckUtils]: 0: Hoare triple {1655#true} call ULTIMATE.init(); {1663#(and (= |#valid| |old(#valid)|) (= |#NULL.base| |old(#NULL.base)|) (= |#NULL.offset| |old(#NULL.offset)|))} is VALID [2020-07-17 22:31:56,943 INFO L280 TraceCheckUtils]: 1: Hoare triple {1663#(and (= |#valid| |old(#valid)|) (= |#NULL.base| |old(#NULL.base)|) (= |#NULL.offset| |old(#NULL.offset)|))} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier; {1655#true} is VALID [2020-07-17 22:31:56,943 INFO L280 TraceCheckUtils]: 2: Hoare triple {1655#true} assume true; {1655#true} is VALID [2020-07-17 22:31:56,943 INFO L275 TraceCheckUtils]: 3: Hoare quadruple {1655#true} {1655#true} #189#return; {1655#true} is VALID [2020-07-17 22:31:56,944 INFO L263 TraceCheckUtils]: 4: Hoare triple {1655#true} call #t~ret21 := main(); {1655#true} is VALID [2020-07-17 22:31:56,947 INFO L280 TraceCheckUtils]: 5: Hoare triple {1655#true} call #t~malloc0.base, #t~malloc0.offset := #Ultimate.allocOnHeap(12);~null~0.base, ~null~0.offset := #t~malloc0.base, #t~malloc0.offset;call write~$Pointer$(0, 0, ~null~0.base, ~null~0.offset, 4);call write~$Pointer$(0, 0, ~null~0.base, 4 + ~null~0.offset, 4);call write~int(~unnamed1~0~BLACK, ~null~0.base, 8 + ~null~0.offset, 4);call #t~malloc1.base, #t~malloc1.offset := #Ultimate.allocOnHeap(12);~list~0.base, ~list~0.offset := #t~malloc1.base, #t~malloc1.offset;call write~$Pointer$(~null~0.base, ~null~0.offset, ~list~0.base, ~list~0.offset, 4);call write~$Pointer$(~null~0.base, ~null~0.offset, ~list~0.base, 4 + ~list~0.offset, 4);call write~int(~unnamed1~0~BLACK, ~list~0.base, 8 + ~list~0.offset, 4);~end~0.base, ~end~0.offset := ~list~0.base, ~list~0.offset; {1660#(and (= 0 main_~null~0.offset) (= 0 (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) main_~null~0.base))} is VALID [2020-07-17 22:31:56,948 INFO L280 TraceCheckUtils]: 6: Hoare triple {1660#(and (= 0 main_~null~0.offset) (= 0 (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) main_~null~0.base))} assume -2147483648 <= #t~nondet2 && #t~nondet2 <= 2147483647; {1660#(and (= 0 main_~null~0.offset) (= 0 (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) main_~null~0.base))} is VALID [2020-07-17 22:31:56,952 INFO L280 TraceCheckUtils]: 7: Hoare triple {1660#(and (= 0 main_~null~0.offset) (= 0 (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) main_~null~0.base))} assume !(0 != #t~nondet2);havoc #t~nondet2; {1660#(and (= 0 main_~null~0.offset) (= 0 (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) main_~null~0.base))} is VALID [2020-07-17 22:31:56,953 INFO L280 TraceCheckUtils]: 8: Hoare triple {1660#(and (= 0 main_~null~0.offset) (= 0 (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) main_~null~0.base))} ~end~0.base, ~end~0.offset := ~null~0.base, ~null~0.offset;~end~0.base, ~end~0.offset := ~list~0.base, ~list~0.offset; {1661#(and (= (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset) main_~null~0.base) (= 0 main_~null~0.offset) (= 0 (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)))} is VALID [2020-07-17 22:31:56,954 INFO L280 TraceCheckUtils]: 9: Hoare triple {1661#(and (= (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset) main_~null~0.base) (= 0 main_~null~0.offset) (= 0 (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)))} assume !!(~null~0.base != ~end~0.base || ~null~0.offset != ~end~0.offset); {1661#(and (= (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset) main_~null~0.base) (= 0 main_~null~0.offset) (= 0 (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)))} is VALID [2020-07-17 22:31:56,955 INFO L280 TraceCheckUtils]: 10: Hoare triple {1661#(and (= (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset) main_~null~0.base) (= 0 main_~null~0.offset) (= 0 (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)))} goto; {1661#(and (= (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset) main_~null~0.base) (= 0 main_~null~0.offset) (= 0 (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)))} is VALID [2020-07-17 22:31:56,956 INFO L280 TraceCheckUtils]: 11: Hoare triple {1661#(and (= (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset) main_~null~0.base) (= 0 main_~null~0.offset) (= 0 (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)))} call #t~mem12 := read~int(~end~0.base, 8 + ~end~0.offset, 4); {1661#(and (= (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset) main_~null~0.base) (= 0 main_~null~0.offset) (= 0 (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)))} is VALID [2020-07-17 22:31:56,957 INFO L280 TraceCheckUtils]: 12: Hoare triple {1661#(and (= (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset) main_~null~0.base) (= 0 main_~null~0.offset) (= 0 (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)))} assume !!(~unnamed1~0~BLACK == #t~mem12);havoc #t~mem12; {1661#(and (= (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset) main_~null~0.base) (= 0 main_~null~0.offset) (= 0 (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)))} is VALID [2020-07-17 22:31:56,958 INFO L280 TraceCheckUtils]: 13: Hoare triple {1661#(and (= (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset) main_~null~0.base) (= 0 main_~null~0.offset) (= 0 (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)))} goto; {1661#(and (= (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset) main_~null~0.base) (= 0 main_~null~0.offset) (= 0 (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)))} is VALID [2020-07-17 22:31:56,959 INFO L280 TraceCheckUtils]: 14: Hoare triple {1661#(and (= (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset) main_~null~0.base) (= 0 main_~null~0.offset) (= 0 (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)))} assume !!(~null~0.base != ~end~0.base || ~null~0.offset != ~end~0.offset);call #t~mem13 := read~int(~end~0.base, 8 + ~end~0.offset, 4); {1661#(and (= (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset) main_~null~0.base) (= 0 main_~null~0.offset) (= 0 (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)))} is VALID [2020-07-17 22:31:56,960 INFO L280 TraceCheckUtils]: 15: Hoare triple {1661#(and (= (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset) main_~null~0.base) (= 0 main_~null~0.offset) (= 0 (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)))} assume !(~unnamed1~0~RED == #t~mem13);havoc #t~mem13; {1661#(and (= (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset) main_~null~0.base) (= 0 main_~null~0.offset) (= 0 (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)))} is VALID [2020-07-17 22:31:56,960 INFO L280 TraceCheckUtils]: 16: Hoare triple {1661#(and (= (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset) main_~null~0.base) (= 0 main_~null~0.offset) (= 0 (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)))} call #t~mem16.base, #t~mem16.offset := read~$Pointer$(~end~0.base, ~end~0.offset, 4);~end~0.base, ~end~0.offset := #t~mem16.base, #t~mem16.offset;havoc #t~mem16.base, #t~mem16.offset; {1662#(and (= 0 main_~null~0.offset) (= 0 main_~end~0.offset) (= main_~null~0.base main_~end~0.base))} is VALID [2020-07-17 22:31:56,961 INFO L280 TraceCheckUtils]: 17: Hoare triple {1662#(and (= 0 main_~null~0.offset) (= 0 main_~end~0.offset) (= main_~null~0.base main_~end~0.base))} assume !!(~null~0.base != ~end~0.base || ~null~0.offset != ~end~0.offset);call #t~mem13 := read~int(~end~0.base, 8 + ~end~0.offset, 4); {1656#false} is VALID [2020-07-17 22:31:56,961 INFO L280 TraceCheckUtils]: 18: Hoare triple {1656#false} assume ~unnamed1~0~RED == #t~mem13;havoc #t~mem13;call #t~mem14.base, #t~mem14.offset := read~$Pointer$(~end~0.base, ~end~0.offset, 4);~end~0.base, ~end~0.offset := #t~mem14.base, #t~mem14.offset;havoc #t~mem14.base, #t~mem14.offset; {1656#false} is VALID [2020-07-17 22:31:56,962 INFO L280 TraceCheckUtils]: 19: Hoare triple {1656#false} assume !(~null~0.base != ~end~0.base || ~null~0.offset != ~end~0.offset); {1656#false} is VALID [2020-07-17 22:31:56,962 INFO L280 TraceCheckUtils]: 20: Hoare triple {1656#false} assume !false; {1656#false} is VALID [2020-07-17 22:31:56,964 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 1 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-17 22:31:56,965 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1868601385] [2020-07-17 22:31:56,965 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1480670709] [2020-07-17 22:31:56,965 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 Starting monitored process 2 with z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 2 with z3 -smt2 -in SMTLIB2_COMPLIANT=true [2020-07-17 22:31:57,065 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-17 22:31:57,067 INFO L264 TraceCheckSpWp]: Trace formula consists of 104 conjuncts, 11 conjunts are in the unsatisfiable core [2020-07-17 22:31:57,077 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-17 22:31:57,082 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2020-07-17 22:31:57,161 INFO L190 IndexEqualityManager]: detected not equals via solver [2020-07-17 22:31:57,162 INFO L190 IndexEqualityManager]: detected not equals via solver [2020-07-17 22:31:57,163 INFO L190 IndexEqualityManager]: detected not equals via solver [2020-07-17 22:31:57,174 INFO L384 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 27 treesize of output 17 [2020-07-17 22:31:57,175 INFO L544 ElimStorePlain]: Start of recursive call 2: End of recursive call: and 1 xjuncts. [2020-07-17 22:31:57,214 INFO L624 ElimStorePlain]: treesize reduction 0, result has 100.0 percent of original size [2020-07-17 22:31:57,218 INFO L190 IndexEqualityManager]: detected not equals via solver [2020-07-17 22:31:57,219 INFO L190 IndexEqualityManager]: detected not equals via solver [2020-07-17 22:31:57,220 INFO L190 IndexEqualityManager]: detected not equals via solver [2020-07-17 22:31:57,223 INFO L384 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 27 treesize of output 17 [2020-07-17 22:31:57,225 INFO L544 ElimStorePlain]: Start of recursive call 3: End of recursive call: and 1 xjuncts. [2020-07-17 22:31:57,234 INFO L624 ElimStorePlain]: treesize reduction 0, result has 100.0 percent of original size [2020-07-17 22:31:57,235 INFO L544 ElimStorePlain]: Start of recursive call 1: 2 dim-2 vars, End of recursive call: and 1 xjuncts. [2020-07-17 22:31:57,235 INFO L244 ElimStorePlain]: Needed 3 recursive calls to eliminate 2 variables, input treesize:55, output treesize:33 [2020-07-17 22:31:59,446 WARN L406 uantifierElimination]: Trying to double check SDD result, but SMT solver's response was UNKNOWN. [2020-07-17 22:31:59,446 WARN L407 uantifierElimination]: Input elimination task: ∃ [|v_#memory_$Pointer$.offset_29|, |v_#memory_$Pointer$.base_29|]. (let ((.cse0 (+ main_~list~0.offset 4)) (.cse1 (+ main_~list~0.offset 8))) (and (= (store |v_#memory_$Pointer$.offset_29| main_~list~0.base (store (store (store (select |v_#memory_$Pointer$.offset_29| main_~list~0.base) main_~list~0.offset main_~null~0.offset) .cse0 main_~null~0.offset) .cse1 (select (select |#memory_$Pointer$.offset| main_~list~0.base) .cse1))) |#memory_$Pointer$.offset|) (= (store |v_#memory_$Pointer$.base_29| main_~list~0.base (store (store (store (select |v_#memory_$Pointer$.base_29| main_~list~0.base) main_~list~0.offset main_~null~0.base) .cse0 main_~null~0.base) .cse1 (select (select |#memory_$Pointer$.base| main_~list~0.base) .cse1))) |#memory_$Pointer$.base|))) [2020-07-17 22:31:59,447 WARN L408 uantifierElimination]: ElimStorePlain result: ∃ []. (let ((.cse0 (select |#memory_$Pointer$.offset| main_~list~0.base)) (.cse1 (+ main_~list~0.offset 4)) (.cse2 (select |#memory_$Pointer$.base| main_~list~0.base))) (and (= (select .cse0 .cse1) main_~null~0.offset) (= (select .cse0 main_~list~0.offset) main_~null~0.offset) (= (select .cse2 .cse1) main_~null~0.base) (= (select .cse2 main_~list~0.offset) main_~null~0.base))) [2020-07-17 22:31:59,670 INFO L190 IndexEqualityManager]: detected not equals via solver [2020-07-17 22:31:59,672 INFO L384 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 0 case distinctions, treesize of input 24 treesize of output 10 [2020-07-17 22:31:59,677 INFO L544 ElimStorePlain]: Start of recursive call 2: End of recursive call: and 1 xjuncts. [2020-07-17 22:31:59,689 INFO L624 ElimStorePlain]: treesize reduction 0, result has 100.0 percent of original size [2020-07-17 22:31:59,697 INFO L350 Elim1Store]: treesize reduction 9, result has 10.0 percent of original size [2020-07-17 22:31:59,698 INFO L384 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 24 treesize of output 10 [2020-07-17 22:31:59,701 INFO L544 ElimStorePlain]: Start of recursive call 3: End of recursive call: and 1 xjuncts. [2020-07-17 22:31:59,706 INFO L624 ElimStorePlain]: treesize reduction 0, result has 100.0 percent of original size [2020-07-17 22:31:59,706 INFO L544 ElimStorePlain]: Start of recursive call 1: 2 dim-0 vars, 2 dim-2 vars, End of recursive call: and 1 xjuncts. [2020-07-17 22:31:59,707 INFO L244 ElimStorePlain]: Needed 3 recursive calls to eliminate 4 variables, input treesize:47, output treesize:7 [2020-07-17 22:31:59,714 WARN L406 uantifierElimination]: Trying to double check SDD result, but SMT solver's response was UNKNOWN. [2020-07-17 22:31:59,715 WARN L407 uantifierElimination]: Input elimination task: ∃ [|#memory_$Pointer$.offset|, v_main_~end~0.base_27, v_main_~end~0.offset_27, |#memory_$Pointer$.base|]. (let ((.cse1 (select |#memory_$Pointer$.offset| v_main_~end~0.base_27)) (.cse3 (select |#memory_$Pointer$.base| v_main_~end~0.base_27))) (let ((.cse2 (+ v_main_~end~0.offset_27 4)) (.cse4 (select .cse3 v_main_~end~0.offset_27)) (.cse0 (select .cse1 v_main_~end~0.offset_27))) (and (= .cse0 main_~null~0.offset) (= (select .cse1 .cse2) main_~null~0.offset) (= (select .cse3 .cse2) main_~null~0.base) (= .cse4 main_~end~0.base) (= .cse4 main_~null~0.base) (= main_~end~0.offset .cse0)))) [2020-07-17 22:31:59,715 WARN L408 uantifierElimination]: ElimStorePlain result: ∃ []. (and (= main_~end~0.offset main_~null~0.offset) (= main_~null~0.base main_~end~0.base)) [2020-07-17 22:31:59,745 INFO L263 TraceCheckUtils]: 0: Hoare triple {1655#true} call ULTIMATE.init(); {1655#true} is VALID [2020-07-17 22:31:59,745 INFO L280 TraceCheckUtils]: 1: Hoare triple {1655#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier; {1655#true} is VALID [2020-07-17 22:31:59,745 INFO L280 TraceCheckUtils]: 2: Hoare triple {1655#true} assume true; {1655#true} is VALID [2020-07-17 22:31:59,745 INFO L275 TraceCheckUtils]: 3: Hoare quadruple {1655#true} {1655#true} #189#return; {1655#true} is VALID [2020-07-17 22:31:59,745 INFO L263 TraceCheckUtils]: 4: Hoare triple {1655#true} call #t~ret21 := main(); {1655#true} is VALID [2020-07-17 22:31:59,750 INFO L280 TraceCheckUtils]: 5: Hoare triple {1655#true} call #t~malloc0.base, #t~malloc0.offset := #Ultimate.allocOnHeap(12);~null~0.base, ~null~0.offset := #t~malloc0.base, #t~malloc0.offset;call write~$Pointer$(0, 0, ~null~0.base, ~null~0.offset, 4);call write~$Pointer$(0, 0, ~null~0.base, 4 + ~null~0.offset, 4);call write~int(~unnamed1~0~BLACK, ~null~0.base, 8 + ~null~0.offset, 4);call #t~malloc1.base, #t~malloc1.offset := #Ultimate.allocOnHeap(12);~list~0.base, ~list~0.offset := #t~malloc1.base, #t~malloc1.offset;call write~$Pointer$(~null~0.base, ~null~0.offset, ~list~0.base, ~list~0.offset, 4);call write~$Pointer$(~null~0.base, ~null~0.offset, ~list~0.base, 4 + ~list~0.offset, 4);call write~int(~unnamed1~0~BLACK, ~list~0.base, 8 + ~list~0.offset, 4);~end~0.base, ~end~0.offset := ~list~0.base, ~list~0.offset; {1682#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (+ main_~list~0.offset 4)) main_~null~0.offset) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (+ main_~list~0.offset 4)) main_~null~0.base) (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset) main_~null~0.offset) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) main_~null~0.base))} is VALID [2020-07-17 22:31:59,751 INFO L280 TraceCheckUtils]: 6: Hoare triple {1682#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (+ main_~list~0.offset 4)) main_~null~0.offset) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (+ main_~list~0.offset 4)) main_~null~0.base) (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset) main_~null~0.offset) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) main_~null~0.base))} assume -2147483648 <= #t~nondet2 && #t~nondet2 <= 2147483647; {1682#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (+ main_~list~0.offset 4)) main_~null~0.offset) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (+ main_~list~0.offset 4)) main_~null~0.base) (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset) main_~null~0.offset) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) main_~null~0.base))} is VALID [2020-07-17 22:31:59,753 INFO L280 TraceCheckUtils]: 7: Hoare triple {1682#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (+ main_~list~0.offset 4)) main_~null~0.offset) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (+ main_~list~0.offset 4)) main_~null~0.base) (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset) main_~null~0.offset) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) main_~null~0.base))} assume !(0 != #t~nondet2);havoc #t~nondet2; {1682#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (+ main_~list~0.offset 4)) main_~null~0.offset) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (+ main_~list~0.offset 4)) main_~null~0.base) (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset) main_~null~0.offset) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) main_~null~0.base))} is VALID [2020-07-17 22:31:59,754 INFO L280 TraceCheckUtils]: 8: Hoare triple {1682#(and (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) (+ main_~list~0.offset 4)) main_~null~0.offset) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) (+ main_~list~0.offset 4)) main_~null~0.base) (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset) main_~null~0.offset) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) main_~null~0.base))} ~end~0.base, ~end~0.offset := ~null~0.base, ~null~0.offset;~end~0.base, ~end~0.offset := ~list~0.base, ~list~0.offset; {1692#(and (= (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset) main_~null~0.base) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset) main_~null~0.offset) (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (+ main_~end~0.offset 4)) main_~null~0.base) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (+ main_~end~0.offset 4)) main_~null~0.offset))} is VALID [2020-07-17 22:31:59,755 INFO L280 TraceCheckUtils]: 9: Hoare triple {1692#(and (= (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset) main_~null~0.base) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset) main_~null~0.offset) (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (+ main_~end~0.offset 4)) main_~null~0.base) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (+ main_~end~0.offset 4)) main_~null~0.offset))} assume !!(~null~0.base != ~end~0.base || ~null~0.offset != ~end~0.offset); {1692#(and (= (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset) main_~null~0.base) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset) main_~null~0.offset) (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (+ main_~end~0.offset 4)) main_~null~0.base) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (+ main_~end~0.offset 4)) main_~null~0.offset))} is VALID [2020-07-17 22:31:59,756 INFO L280 TraceCheckUtils]: 10: Hoare triple {1692#(and (= (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset) main_~null~0.base) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset) main_~null~0.offset) (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (+ main_~end~0.offset 4)) main_~null~0.base) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (+ main_~end~0.offset 4)) main_~null~0.offset))} goto; {1692#(and (= (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset) main_~null~0.base) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset) main_~null~0.offset) (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (+ main_~end~0.offset 4)) main_~null~0.base) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (+ main_~end~0.offset 4)) main_~null~0.offset))} is VALID [2020-07-17 22:31:59,756 INFO L280 TraceCheckUtils]: 11: Hoare triple {1692#(and (= (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset) main_~null~0.base) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset) main_~null~0.offset) (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (+ main_~end~0.offset 4)) main_~null~0.base) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (+ main_~end~0.offset 4)) main_~null~0.offset))} call #t~mem12 := read~int(~end~0.base, 8 + ~end~0.offset, 4); {1692#(and (= (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset) main_~null~0.base) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset) main_~null~0.offset) (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (+ main_~end~0.offset 4)) main_~null~0.base) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (+ main_~end~0.offset 4)) main_~null~0.offset))} is VALID [2020-07-17 22:31:59,757 INFO L280 TraceCheckUtils]: 12: Hoare triple {1692#(and (= (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset) main_~null~0.base) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset) main_~null~0.offset) (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (+ main_~end~0.offset 4)) main_~null~0.base) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (+ main_~end~0.offset 4)) main_~null~0.offset))} assume !!(~unnamed1~0~BLACK == #t~mem12);havoc #t~mem12; {1692#(and (= (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset) main_~null~0.base) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset) main_~null~0.offset) (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (+ main_~end~0.offset 4)) main_~null~0.base) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (+ main_~end~0.offset 4)) main_~null~0.offset))} is VALID [2020-07-17 22:31:59,758 INFO L280 TraceCheckUtils]: 13: Hoare triple {1692#(and (= (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset) main_~null~0.base) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset) main_~null~0.offset) (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (+ main_~end~0.offset 4)) main_~null~0.base) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (+ main_~end~0.offset 4)) main_~null~0.offset))} goto; {1692#(and (= (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset) main_~null~0.base) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset) main_~null~0.offset) (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (+ main_~end~0.offset 4)) main_~null~0.base) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (+ main_~end~0.offset 4)) main_~null~0.offset))} is VALID [2020-07-17 22:31:59,759 INFO L280 TraceCheckUtils]: 14: Hoare triple {1692#(and (= (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset) main_~null~0.base) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset) main_~null~0.offset) (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (+ main_~end~0.offset 4)) main_~null~0.base) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (+ main_~end~0.offset 4)) main_~null~0.offset))} assume !!(~null~0.base != ~end~0.base || ~null~0.offset != ~end~0.offset);call #t~mem13 := read~int(~end~0.base, 8 + ~end~0.offset, 4); {1692#(and (= (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset) main_~null~0.base) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset) main_~null~0.offset) (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (+ main_~end~0.offset 4)) main_~null~0.base) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (+ main_~end~0.offset 4)) main_~null~0.offset))} is VALID [2020-07-17 22:31:59,759 INFO L280 TraceCheckUtils]: 15: Hoare triple {1692#(and (= (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset) main_~null~0.base) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset) main_~null~0.offset) (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (+ main_~end~0.offset 4)) main_~null~0.base) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (+ main_~end~0.offset 4)) main_~null~0.offset))} assume !(~unnamed1~0~RED == #t~mem13);havoc #t~mem13; {1692#(and (= (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset) main_~null~0.base) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset) main_~null~0.offset) (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (+ main_~end~0.offset 4)) main_~null~0.base) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (+ main_~end~0.offset 4)) main_~null~0.offset))} is VALID [2020-07-17 22:31:59,760 INFO L280 TraceCheckUtils]: 16: Hoare triple {1692#(and (= (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset) main_~null~0.base) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset) main_~null~0.offset) (= (select (select |#memory_$Pointer$.base| main_~end~0.base) (+ main_~end~0.offset 4)) main_~null~0.base) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) (+ main_~end~0.offset 4)) main_~null~0.offset))} call #t~mem16.base, #t~mem16.offset := read~$Pointer$(~end~0.base, ~end~0.offset, 4);~end~0.base, ~end~0.offset := #t~mem16.base, #t~mem16.offset;havoc #t~mem16.base, #t~mem16.offset; {1717#(and (= main_~end~0.offset main_~null~0.offset) (= main_~null~0.base main_~end~0.base))} is VALID [2020-07-17 22:31:59,760 INFO L280 TraceCheckUtils]: 17: Hoare triple {1717#(and (= main_~end~0.offset main_~null~0.offset) (= main_~null~0.base main_~end~0.base))} assume !!(~null~0.base != ~end~0.base || ~null~0.offset != ~end~0.offset);call #t~mem13 := read~int(~end~0.base, 8 + ~end~0.offset, 4); {1656#false} is VALID [2020-07-17 22:31:59,761 INFO L280 TraceCheckUtils]: 18: Hoare triple {1656#false} assume ~unnamed1~0~RED == #t~mem13;havoc #t~mem13;call #t~mem14.base, #t~mem14.offset := read~$Pointer$(~end~0.base, ~end~0.offset, 4);~end~0.base, ~end~0.offset := #t~mem14.base, #t~mem14.offset;havoc #t~mem14.base, #t~mem14.offset; {1656#false} is VALID [2020-07-17 22:31:59,761 INFO L280 TraceCheckUtils]: 19: Hoare triple {1656#false} assume !(~null~0.base != ~end~0.base || ~null~0.offset != ~end~0.offset); {1656#false} is VALID [2020-07-17 22:31:59,761 INFO L280 TraceCheckUtils]: 20: Hoare triple {1656#false} assume !false; {1656#false} is VALID [2020-07-17 22:31:59,763 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 1 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-17 22:31:59,764 INFO L220 FreeRefinementEngine]: Constructing automaton from 0 perfect and 2 imperfect interpolant sequences. [2020-07-17 22:31:59,764 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [6, 5] total 9 [2020-07-17 22:31:59,764 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1555734461] [2020-07-17 22:31:59,765 INFO L78 Accepts]: Start accepts. Automaton has 9 states. Word has length 21 [2020-07-17 22:31:59,765 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-17 22:31:59,765 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 9 states. [2020-07-17 22:31:59,837 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 36 edges. 36 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-17 22:31:59,838 INFO L459 AbstractCegarLoop]: Interpolant automaton has 9 states [2020-07-17 22:31:59,838 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-17 22:31:59,838 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2020-07-17 22:31:59,839 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=16, Invalid=56, Unknown=0, NotChecked=0, Total=72 [2020-07-17 22:31:59,839 INFO L87 Difference]: Start difference. First operand 46 states and 50 transitions. Second operand 9 states. [2020-07-17 22:32:00,848 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-17 22:32:00,848 INFO L93 Difference]: Finished difference Result 63 states and 68 transitions. [2020-07-17 22:32:00,848 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2020-07-17 22:32:00,848 INFO L78 Accepts]: Start accepts. Automaton has 9 states. Word has length 21 [2020-07-17 22:32:00,848 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-17 22:32:00,848 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 9 states. [2020-07-17 22:32:00,850 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 66 transitions. [2020-07-17 22:32:00,850 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 9 states. [2020-07-17 22:32:00,852 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 66 transitions. [2020-07-17 22:32:00,852 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 7 states and 66 transitions. [2020-07-17 22:32:00,943 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 66 edges. 66 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-17 22:32:00,945 INFO L225 Difference]: With dead ends: 63 [2020-07-17 22:32:00,945 INFO L226 Difference]: Without dead ends: 41 [2020-07-17 22:32:00,946 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 29 GetRequests, 20 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=28, Invalid=82, Unknown=0, NotChecked=0, Total=110 [2020-07-17 22:32:00,946 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 41 states. [2020-07-17 22:32:00,972 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 41 to 41. [2020-07-17 22:32:00,973 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-17 22:32:00,973 INFO L82 GeneralOperation]: Start isEquivalent. First operand 41 states. Second operand 41 states. [2020-07-17 22:32:00,973 INFO L74 IsIncluded]: Start isIncluded. First operand 41 states. Second operand 41 states. [2020-07-17 22:32:00,973 INFO L87 Difference]: Start difference. First operand 41 states. Second operand 41 states. [2020-07-17 22:32:00,974 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-17 22:32:00,975 INFO L93 Difference]: Finished difference Result 41 states and 44 transitions. [2020-07-17 22:32:00,975 INFO L276 IsEmpty]: Start isEmpty. Operand 41 states and 44 transitions. [2020-07-17 22:32:00,975 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-17 22:32:00,975 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-17 22:32:00,975 INFO L74 IsIncluded]: Start isIncluded. First operand 41 states. Second operand 41 states. [2020-07-17 22:32:00,975 INFO L87 Difference]: Start difference. First operand 41 states. Second operand 41 states. [2020-07-17 22:32:00,977 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-17 22:32:00,977 INFO L93 Difference]: Finished difference Result 41 states and 44 transitions. [2020-07-17 22:32:00,977 INFO L276 IsEmpty]: Start isEmpty. Operand 41 states and 44 transitions. [2020-07-17 22:32:00,977 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-17 22:32:00,978 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-17 22:32:00,978 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-17 22:32:00,978 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-17 22:32:00,978 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 41 states. [2020-07-17 22:32:00,979 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 41 states to 41 states and 44 transitions. [2020-07-17 22:32:00,979 INFO L78 Accepts]: Start accepts. Automaton has 41 states and 44 transitions. Word has length 21 [2020-07-17 22:32:00,980 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-17 22:32:00,980 INFO L479 AbstractCegarLoop]: Abstraction has 41 states and 44 transitions. [2020-07-17 22:32:00,980 INFO L480 AbstractCegarLoop]: Interpolant automaton has 9 states. [2020-07-17 22:32:00,980 INFO L276 IsEmpty]: Start isEmpty. Operand 41 states and 44 transitions. [2020-07-17 22:32:00,980 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2020-07-17 22:32:00,980 INFO L414 BasicCegarLoop]: Found error trace [2020-07-17 22:32:00,981 INFO L422 BasicCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-17 22:32:01,191 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable7 [2020-07-17 22:32:01,192 INFO L427 AbstractCegarLoop]: === Iteration 9 === [mainErr4ASSERT_VIOLATIONERROR_FUNCTION, mainErr0ASSERT_VIOLATIONERROR_FUNCTION, mainErr2ASSERT_VIOLATIONERROR_FUNCTION, mainErr6ASSERT_VIOLATIONERROR_FUNCTION, mainErr5ASSERT_VIOLATIONERROR_FUNCTION, mainErr3ASSERT_VIOLATIONERROR_FUNCTION, mainErr1ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-17 22:32:01,193 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-17 22:32:01,193 INFO L82 PathProgramCache]: Analyzing trace with hash -1056872398, now seen corresponding path program 1 times [2020-07-17 22:32:01,193 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-17 22:32:01,194 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [139297866] [2020-07-17 22:32:01,194 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-17 22:32:01,233 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-17 22:32:01,464 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-17 22:32:01,472 INFO L280 TraceCheckUtils]: 0: Hoare triple {1947#(and (= |#valid| |old(#valid)|) (= |#NULL.base| |old(#NULL.base)|) (= |#NULL.offset| |old(#NULL.offset)|))} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier; {1937#true} is VALID [2020-07-17 22:32:01,472 INFO L280 TraceCheckUtils]: 1: Hoare triple {1937#true} assume true; {1937#true} is VALID [2020-07-17 22:32:01,472 INFO L275 TraceCheckUtils]: 2: Hoare quadruple {1937#true} {1937#true} #189#return; {1937#true} is VALID [2020-07-17 22:32:01,474 INFO L263 TraceCheckUtils]: 0: Hoare triple {1937#true} call ULTIMATE.init(); {1947#(and (= |#valid| |old(#valid)|) (= |#NULL.base| |old(#NULL.base)|) (= |#NULL.offset| |old(#NULL.offset)|))} is VALID [2020-07-17 22:32:01,474 INFO L280 TraceCheckUtils]: 1: Hoare triple {1947#(and (= |#valid| |old(#valid)|) (= |#NULL.base| |old(#NULL.base)|) (= |#NULL.offset| |old(#NULL.offset)|))} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier; {1937#true} is VALID [2020-07-17 22:32:01,475 INFO L280 TraceCheckUtils]: 2: Hoare triple {1937#true} assume true; {1937#true} is VALID [2020-07-17 22:32:01,475 INFO L275 TraceCheckUtils]: 3: Hoare quadruple {1937#true} {1937#true} #189#return; {1937#true} is VALID [2020-07-17 22:32:01,475 INFO L263 TraceCheckUtils]: 4: Hoare triple {1937#true} call #t~ret21 := main(); {1937#true} is VALID [2020-07-17 22:32:01,479 INFO L280 TraceCheckUtils]: 5: Hoare triple {1937#true} call #t~malloc0.base, #t~malloc0.offset := #Ultimate.allocOnHeap(12);~null~0.base, ~null~0.offset := #t~malloc0.base, #t~malloc0.offset;call write~$Pointer$(0, 0, ~null~0.base, ~null~0.offset, 4);call write~$Pointer$(0, 0, ~null~0.base, 4 + ~null~0.offset, 4);call write~int(~unnamed1~0~BLACK, ~null~0.base, 8 + ~null~0.offset, 4);call #t~malloc1.base, #t~malloc1.offset := #Ultimate.allocOnHeap(12);~list~0.base, ~list~0.offset := #t~malloc1.base, #t~malloc1.offset;call write~$Pointer$(~null~0.base, ~null~0.offset, ~list~0.base, ~list~0.offset, 4);call write~$Pointer$(~null~0.base, ~null~0.offset, ~list~0.base, 4 + ~list~0.offset, 4);call write~int(~unnamed1~0~BLACK, ~list~0.base, 8 + ~list~0.offset, 4);~end~0.base, ~end~0.offset := ~list~0.base, ~list~0.offset; {1942#(and (= 0 main_~list~0.offset) (= main_~list~0.base main_~end~0.base) (= (select (select |#memory_int| main_~end~0.base) (+ main_~list~0.offset 8)) ~unnamed1~0~BLACK) (not (= (+ main_~list~0.offset 8) main_~end~0.offset)) (= 1 (select |#valid| main_~end~0.base)))} is VALID [2020-07-17 22:32:01,480 INFO L280 TraceCheckUtils]: 6: Hoare triple {1942#(and (= 0 main_~list~0.offset) (= main_~list~0.base main_~end~0.base) (= (select (select |#memory_int| main_~end~0.base) (+ main_~list~0.offset 8)) ~unnamed1~0~BLACK) (not (= (+ main_~list~0.offset 8) main_~end~0.offset)) (= 1 (select |#valid| main_~end~0.base)))} assume -2147483648 <= #t~nondet2 && #t~nondet2 <= 2147483647; {1942#(and (= 0 main_~list~0.offset) (= main_~list~0.base main_~end~0.base) (= (select (select |#memory_int| main_~end~0.base) (+ main_~list~0.offset 8)) ~unnamed1~0~BLACK) (not (= (+ main_~list~0.offset 8) main_~end~0.offset)) (= 1 (select |#valid| main_~end~0.base)))} is VALID [2020-07-17 22:32:01,483 INFO L280 TraceCheckUtils]: 7: Hoare triple {1942#(and (= 0 main_~list~0.offset) (= main_~list~0.base main_~end~0.base) (= (select (select |#memory_int| main_~end~0.base) (+ main_~list~0.offset 8)) ~unnamed1~0~BLACK) (not (= (+ main_~list~0.offset 8) main_~end~0.offset)) (= 1 (select |#valid| main_~end~0.base)))} assume !!(0 != #t~nondet2);havoc #t~nondet2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.allocOnHeap(12);call write~$Pointer$(#t~malloc3.base, #t~malloc3.offset, ~end~0.base, ~end~0.offset, 4);call #t~mem4.base, #t~mem4.offset := read~$Pointer$(~end~0.base, ~end~0.offset, 4);call write~$Pointer$(~end~0.base, ~end~0.offset, #t~mem4.base, 4 + #t~mem4.offset, 4);havoc #t~mem4.base, #t~mem4.offset;call #t~mem5.base, #t~mem5.offset := read~$Pointer$(~end~0.base, ~end~0.offset, 4);~end~0.base, ~end~0.offset := #t~mem5.base, #t~mem5.offset;havoc #t~mem5.base, #t~mem5.offset;call write~$Pointer$(~null~0.base, ~null~0.offset, ~end~0.base, ~end~0.offset, 4);assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647; {1943#(and (not (= main_~list~0.base main_~end~0.base)) (= 0 main_~list~0.offset) (= 1 (select |#valid| main_~list~0.base)) (= ~unnamed1~0~BLACK (select (select |#memory_int| main_~list~0.base) (+ main_~list~0.offset 8))) (= 1 (select |#valid| main_~end~0.base)))} is VALID [2020-07-17 22:32:01,488 INFO L280 TraceCheckUtils]: 8: Hoare triple {1943#(and (not (= main_~list~0.base main_~end~0.base)) (= 0 main_~list~0.offset) (= 1 (select |#valid| main_~list~0.base)) (= ~unnamed1~0~BLACK (select (select |#memory_int| main_~list~0.base) (+ main_~list~0.offset 8))) (= 1 (select |#valid| main_~end~0.base)))} assume !(0 != #t~nondet6);havoc #t~nondet6;call write~int(~unnamed1~0~RED, ~end~0.base, 8 + ~end~0.offset, 4);call #t~malloc7.base, #t~malloc7.offset := #Ultimate.allocOnHeap(12);call write~$Pointer$(#t~malloc7.base, #t~malloc7.offset, ~end~0.base, ~end~0.offset, 4);call #t~mem8.base, #t~mem8.offset := read~$Pointer$(~end~0.base, ~end~0.offset, 4);call write~$Pointer$(~end~0.base, ~end~0.offset, #t~mem8.base, 4 + #t~mem8.offset, 4);havoc #t~mem8.base, #t~mem8.offset;call #t~mem9.base, #t~mem9.offset := read~$Pointer$(~end~0.base, ~end~0.offset, 4);~end~0.base, ~end~0.offset := #t~mem9.base, #t~mem9.offset;havoc #t~mem9.base, #t~mem9.offset;call write~$Pointer$(~null~0.base, ~null~0.offset, ~end~0.base, ~end~0.offset, 4);call write~int(~unnamed1~0~BLACK, ~end~0.base, 8 + ~end~0.offset, 4); {1944#(and (= 0 main_~list~0.offset) (= ~unnamed1~0~BLACK (select (select |#memory_int| main_~list~0.base) (+ main_~list~0.offset 8))))} is VALID [2020-07-17 22:32:01,489 INFO L280 TraceCheckUtils]: 9: Hoare triple {1944#(and (= 0 main_~list~0.offset) (= ~unnamed1~0~BLACK (select (select |#memory_int| main_~list~0.base) (+ main_~list~0.offset 8))))} call #t~mem10 := read~int(~end~0.base, 8 + ~end~0.offset, 4); {1944#(and (= 0 main_~list~0.offset) (= ~unnamed1~0~BLACK (select (select |#memory_int| main_~list~0.base) (+ main_~list~0.offset 8))))} is VALID [2020-07-17 22:32:01,490 INFO L280 TraceCheckUtils]: 10: Hoare triple {1944#(and (= 0 main_~list~0.offset) (= ~unnamed1~0~BLACK (select (select |#memory_int| main_~list~0.base) (+ main_~list~0.offset 8))))} assume !!(~unnamed1~0~BLACK == #t~mem10);havoc #t~mem10; {1944#(and (= 0 main_~list~0.offset) (= ~unnamed1~0~BLACK (select (select |#memory_int| main_~list~0.base) (+ main_~list~0.offset 8))))} is VALID [2020-07-17 22:32:01,491 INFO L280 TraceCheckUtils]: 11: Hoare triple {1944#(and (= 0 main_~list~0.offset) (= ~unnamed1~0~BLACK (select (select |#memory_int| main_~list~0.base) (+ main_~list~0.offset 8))))} goto; {1944#(and (= 0 main_~list~0.offset) (= ~unnamed1~0~BLACK (select (select |#memory_int| main_~list~0.base) (+ main_~list~0.offset 8))))} is VALID [2020-07-17 22:32:01,492 INFO L280 TraceCheckUtils]: 12: Hoare triple {1944#(and (= 0 main_~list~0.offset) (= ~unnamed1~0~BLACK (select (select |#memory_int| main_~list~0.base) (+ main_~list~0.offset 8))))} call #t~mem11.base, #t~mem11.offset := read~$Pointer$(~end~0.base, ~end~0.offset, 4); {1944#(and (= 0 main_~list~0.offset) (= ~unnamed1~0~BLACK (select (select |#memory_int| main_~list~0.base) (+ main_~list~0.offset 8))))} is VALID [2020-07-17 22:32:01,493 INFO L280 TraceCheckUtils]: 13: Hoare triple {1944#(and (= 0 main_~list~0.offset) (= ~unnamed1~0~BLACK (select (select |#memory_int| main_~list~0.base) (+ main_~list~0.offset 8))))} assume !!(~null~0.base == #t~mem11.base && ~null~0.offset == #t~mem11.offset);havoc #t~mem11.base, #t~mem11.offset; {1944#(and (= 0 main_~list~0.offset) (= ~unnamed1~0~BLACK (select (select |#memory_int| main_~list~0.base) (+ main_~list~0.offset 8))))} is VALID [2020-07-17 22:32:01,494 INFO L280 TraceCheckUtils]: 14: Hoare triple {1944#(and (= 0 main_~list~0.offset) (= ~unnamed1~0~BLACK (select (select |#memory_int| main_~list~0.base) (+ main_~list~0.offset 8))))} goto; {1944#(and (= 0 main_~list~0.offset) (= ~unnamed1~0~BLACK (select (select |#memory_int| main_~list~0.base) (+ main_~list~0.offset 8))))} is VALID [2020-07-17 22:32:01,496 INFO L280 TraceCheckUtils]: 15: Hoare triple {1944#(and (= 0 main_~list~0.offset) (= ~unnamed1~0~BLACK (select (select |#memory_int| main_~list~0.base) (+ main_~list~0.offset 8))))} assume !!(~null~0.base != ~end~0.base || ~null~0.offset != ~end~0.offset); {1944#(and (= 0 main_~list~0.offset) (= ~unnamed1~0~BLACK (select (select |#memory_int| main_~list~0.base) (+ main_~list~0.offset 8))))} is VALID [2020-07-17 22:32:01,497 INFO L280 TraceCheckUtils]: 16: Hoare triple {1944#(and (= 0 main_~list~0.offset) (= ~unnamed1~0~BLACK (select (select |#memory_int| main_~list~0.base) (+ main_~list~0.offset 8))))} goto; {1944#(and (= 0 main_~list~0.offset) (= ~unnamed1~0~BLACK (select (select |#memory_int| main_~list~0.base) (+ main_~list~0.offset 8))))} is VALID [2020-07-17 22:32:01,498 INFO L280 TraceCheckUtils]: 17: Hoare triple {1944#(and (= 0 main_~list~0.offset) (= ~unnamed1~0~BLACK (select (select |#memory_int| main_~list~0.base) (+ main_~list~0.offset 8))))} assume -2147483648 <= #t~nondet2 && #t~nondet2 <= 2147483647; {1944#(and (= 0 main_~list~0.offset) (= ~unnamed1~0~BLACK (select (select |#memory_int| main_~list~0.base) (+ main_~list~0.offset 8))))} is VALID [2020-07-17 22:32:01,499 INFO L280 TraceCheckUtils]: 18: Hoare triple {1944#(and (= 0 main_~list~0.offset) (= ~unnamed1~0~BLACK (select (select |#memory_int| main_~list~0.base) (+ main_~list~0.offset 8))))} assume !(0 != #t~nondet2);havoc #t~nondet2; {1944#(and (= 0 main_~list~0.offset) (= ~unnamed1~0~BLACK (select (select |#memory_int| main_~list~0.base) (+ main_~list~0.offset 8))))} is VALID [2020-07-17 22:32:01,500 INFO L280 TraceCheckUtils]: 19: Hoare triple {1944#(and (= 0 main_~list~0.offset) (= ~unnamed1~0~BLACK (select (select |#memory_int| main_~list~0.base) (+ main_~list~0.offset 8))))} ~end~0.base, ~end~0.offset := ~null~0.base, ~null~0.offset;~end~0.base, ~end~0.offset := ~list~0.base, ~list~0.offset; {1945#(= ~unnamed1~0~BLACK (select (select |#memory_int| main_~end~0.base) (+ main_~end~0.offset 8)))} is VALID [2020-07-17 22:32:01,501 INFO L280 TraceCheckUtils]: 20: Hoare triple {1945#(= ~unnamed1~0~BLACK (select (select |#memory_int| main_~end~0.base) (+ main_~end~0.offset 8)))} assume !!(~null~0.base != ~end~0.base || ~null~0.offset != ~end~0.offset); {1945#(= ~unnamed1~0~BLACK (select (select |#memory_int| main_~end~0.base) (+ main_~end~0.offset 8)))} is VALID [2020-07-17 22:32:01,501 INFO L280 TraceCheckUtils]: 21: Hoare triple {1945#(= ~unnamed1~0~BLACK (select (select |#memory_int| main_~end~0.base) (+ main_~end~0.offset 8)))} goto; {1945#(= ~unnamed1~0~BLACK (select (select |#memory_int| main_~end~0.base) (+ main_~end~0.offset 8)))} is VALID [2020-07-17 22:32:01,502 INFO L280 TraceCheckUtils]: 22: Hoare triple {1945#(= ~unnamed1~0~BLACK (select (select |#memory_int| main_~end~0.base) (+ main_~end~0.offset 8)))} call #t~mem12 := read~int(~end~0.base, 8 + ~end~0.offset, 4); {1946#(= ~unnamed1~0~BLACK |main_#t~mem12|)} is VALID [2020-07-17 22:32:01,503 INFO L280 TraceCheckUtils]: 23: Hoare triple {1946#(= ~unnamed1~0~BLACK |main_#t~mem12|)} assume !(~unnamed1~0~BLACK == #t~mem12);havoc #t~mem12; {1938#false} is VALID [2020-07-17 22:32:01,503 INFO L280 TraceCheckUtils]: 24: Hoare triple {1938#false} assume !false; {1938#false} is VALID [2020-07-17 22:32:01,507 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-17 22:32:01,507 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [139297866] [2020-07-17 22:32:01,508 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [113846695] [2020-07-17 22:32:01,508 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 Starting monitored process 3 with z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 3 with z3 -smt2 -in SMTLIB2_COMPLIANT=true [2020-07-17 22:32:01,641 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-17 22:32:01,643 INFO L264 TraceCheckSpWp]: Trace formula consists of 141 conjuncts, 44 conjunts are in the unsatisfiable core [2020-07-17 22:32:01,662 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-17 22:32:01,665 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2020-07-17 22:32:01,707 INFO L350 Elim1Store]: treesize reduction 15, result has 25.0 percent of original size [2020-07-17 22:32:01,707 INFO L384 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 9 treesize of output 11 [2020-07-17 22:32:01,708 INFO L544 ElimStorePlain]: Start of recursive call 2: End of recursive call: and 1 xjuncts. [2020-07-17 22:32:01,722 INFO L624 ElimStorePlain]: treesize reduction 0, result has 100.0 percent of original size [2020-07-17 22:32:01,727 INFO L384 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2020-07-17 22:32:01,728 INFO L544 ElimStorePlain]: Start of recursive call 3: End of recursive call: and 1 xjuncts. [2020-07-17 22:32:01,741 INFO L624 ElimStorePlain]: treesize reduction 0, result has 100.0 percent of original size [2020-07-17 22:32:01,742 INFO L544 ElimStorePlain]: Start of recursive call 1: 1 dim-0 vars, 1 dim-1 vars, 1 dim-2 vars, End of recursive call: 1 dim-0 vars, and 1 xjuncts. [2020-07-17 22:32:01,743 INFO L244 ElimStorePlain]: Needed 3 recursive calls to eliminate 3 variables, input treesize:32, output treesize:29 [2020-07-17 22:32:01,749 WARN L406 uantifierElimination]: Trying to double check SDD result, but SMT solver's response was UNKNOWN. [2020-07-17 22:32:01,750 WARN L407 uantifierElimination]: Input elimination task: ∃ [|v_#valid_19|, |main_#t~malloc0.base|, |v_#memory_int_36|]. (and (<= main_~end~0.offset main_~list~0.offset) (= |#valid| (store (store |v_#valid_19| |main_#t~malloc0.base| 1) main_~list~0.base 1)) (= 0 main_~list~0.offset) (= |#memory_int| (store |v_#memory_int_36| main_~list~0.base (store (select |v_#memory_int_36| main_~list~0.base) (+ main_~list~0.offset 8) ~unnamed1~0~BLACK))) (= main_~list~0.base main_~end~0.base)) [2020-07-17 22:32:01,750 WARN L408 uantifierElimination]: ElimStorePlain result: ∃ [|main_#t~malloc0.base|]. (and (<= main_~end~0.offset main_~list~0.offset) (= 0 main_~list~0.offset) (= 1 (select |#valid| main_~list~0.base)) (= main_~list~0.base main_~end~0.base) (= 1 (select |#valid| |main_#t~malloc0.base|)) (= ~unnamed1~0~BLACK (select (select |#memory_int| main_~list~0.base) (+ main_~list~0.offset 8)))) [2020-07-17 22:32:01,886 INFO L350 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2020-07-17 22:32:01,887 INFO L384 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 17 treesize of output 39 [2020-07-17 22:32:01,892 INFO L544 ElimStorePlain]: Start of recursive call 2: End of recursive call: and 1 xjuncts. [2020-07-17 22:32:01,984 INFO L624 ElimStorePlain]: treesize reduction 14, result has 88.9 percent of original size [2020-07-17 22:32:02,006 INFO L544 ElimStorePlain]: Start of recursive call 3: 1 dim-0 vars, End of recursive call: 1 dim-0 vars, and 1 xjuncts. [2020-07-17 22:32:02,042 INFO L624 ElimStorePlain]: treesize reduction 0, result has 100.0 percent of original size [2020-07-17 22:32:02,046 INFO L544 ElimStorePlain]: Start of recursive call 4: 1 dim-0 vars, End of recursive call: 1 dim-0 vars, and 1 xjuncts. [2020-07-17 22:32:02,076 INFO L624 ElimStorePlain]: treesize reduction 0, result has 100.0 percent of original size [2020-07-17 22:32:02,081 INFO L190 IndexEqualityManager]: detected not equals via solver [2020-07-17 22:32:02,083 INFO L544 ElimStorePlain]: Start of recursive call 5: End of recursive call: and 1 xjuncts. [2020-07-17 22:32:02,105 INFO L624 ElimStorePlain]: treesize reduction 0, result has 100.0 percent of original size [2020-07-17 22:32:02,117 INFO L190 IndexEqualityManager]: detected not equals via solver [2020-07-17 22:32:02,141 INFO L350 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2020-07-17 22:32:02,142 INFO L384 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 2 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 77 treesize of output 55 [2020-07-17 22:32:02,144 INFO L544 ElimStorePlain]: Start of recursive call 6: End of recursive call: and 1 xjuncts. [2020-07-17 22:32:02,202 INFO L624 ElimStorePlain]: treesize reduction 20, result has 73.3 percent of original size [2020-07-17 22:32:02,211 INFO L544 ElimStorePlain]: Start of recursive call 1: 3 dim-0 vars, 1 dim-1 vars, 4 dim-2 vars, End of recursive call: and 1 xjuncts. [2020-07-17 22:32:02,212 INFO L244 ElimStorePlain]: Needed 6 recursive calls to eliminate 8 variables, input treesize:114, output treesize:27 [2020-07-17 22:32:02,226 WARN L406 uantifierElimination]: Trying to double check SDD result, but SMT solver's response was UNKNOWN. [2020-07-17 22:32:02,226 WARN L407 uantifierElimination]: Input elimination task: ∃ [|v_#memory_$Pointer$.base_31|, v_main_~end~0.offset_28, |main_#t~malloc3.base|, |main_#t~malloc3.offset|, |v_#valid_20|, |v_#memory_int_37|, |v_#memory_int_42|, |v_#memory_int_38|]. (let ((.cse0 (select |v_#memory_int_42| main_~list~0.base)) (.cse2 (+ |main_#t~malloc3.offset| 4))) (and (<= v_main_~end~0.offset_28 main_~list~0.offset) (= 0 main_~list~0.offset) (= 0 (select |v_#valid_20| |main_#t~malloc3.base|)) (= (store |v_#memory_int_37| main_~end~0.base (store (select |v_#memory_int_37| main_~end~0.base) main_~end~0.offset (select (select |#memory_int| main_~end~0.base) main_~end~0.offset))) |#memory_int|) (= ~unnamed1~0~BLACK (select .cse0 (+ main_~list~0.offset 8))) (= |#valid| (store |v_#valid_20| |main_#t~malloc3.base| 1)) (= 1 (select |v_#valid_20| main_~list~0.base)) (= |v_#memory_int_38| (store |v_#memory_int_42| main_~list~0.base (store .cse0 v_main_~end~0.offset_28 (select (select |v_#memory_int_38| main_~list~0.base) v_main_~end~0.offset_28)))) (= (select (select (let ((.cse1 (store |v_#memory_$Pointer$.base_31| main_~list~0.base (store (select |v_#memory_$Pointer$.base_31| main_~list~0.base) v_main_~end~0.offset_28 |main_#t~malloc3.base|)))) (store .cse1 |main_#t~malloc3.base| (store (select .cse1 |main_#t~malloc3.base|) .cse2 main_~list~0.base))) main_~list~0.base) v_main_~end~0.offset_28) main_~end~0.base) (= (store |v_#memory_int_38| |main_#t~malloc3.base| (store (select |v_#memory_int_38| |main_#t~malloc3.base|) .cse2 (select (select |v_#memory_int_37| |main_#t~malloc3.base|) .cse2))) |v_#memory_int_37|))) [2020-07-17 22:32:02,226 WARN L408 uantifierElimination]: ElimStorePlain result: ∃ []. (and (not (= main_~list~0.base main_~end~0.base)) (= 0 main_~list~0.offset) (= 1 (select |#valid| main_~list~0.base)) (= ~unnamed1~0~BLACK (select (select |#memory_int| main_~list~0.base) (+ main_~list~0.offset 8))) (= 1 (select |#valid| main_~end~0.base))) [2020-07-17 22:32:02,361 INFO L350 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2020-07-17 22:32:02,362 INFO L384 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 3 select indices, 3 select index equivalence classes, 1 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 2 case distinctions, treesize of input 16 treesize of output 26 [2020-07-17 22:32:02,367 INFO L544 ElimStorePlain]: Start of recursive call 2: End of recursive call: and 1 xjuncts. [2020-07-17 22:32:02,493 WARN L193 SmtUtils]: Spent 124.00 ms on a formula simplification that was a NOOP. DAG size: 69 [2020-07-17 22:32:02,494 INFO L624 ElimStorePlain]: treesize reduction 0, result has 100.0 percent of original size [2020-07-17 22:32:02,498 INFO L440 ElimStorePlain]: Different costs {2=[|v_#memory_int_39|, |v_#memory_int_40|, |v_#memory_$Pointer$.base_30|, |v_#memory_int_41|, |v_#memory_$Pointer$.offset_30|], 4=[|v_#memory_int_43|]} [2020-07-17 22:32:02,501 INFO L544 ElimStorePlain]: Start of recursive call 3: 1 dim-0 vars, End of recursive call: 1 dim-0 vars, and 1 xjuncts. [2020-07-17 22:32:02,573 INFO L624 ElimStorePlain]: treesize reduction 0, result has 100.0 percent of original size [2020-07-17 22:32:02,576 INFO L544 ElimStorePlain]: Start of recursive call 4: 1 dim-0 vars, End of recursive call: 1 dim-0 vars, and 1 xjuncts. [2020-07-17 22:32:02,631 INFO L624 ElimStorePlain]: treesize reduction 0, result has 100.0 percent of original size [2020-07-17 22:32:02,642 INFO L190 IndexEqualityManager]: detected not equals via solver [2020-07-17 22:32:02,645 INFO L544 ElimStorePlain]: Start of recursive call 5: End of recursive call: and 1 xjuncts. [2020-07-17 22:32:02,678 INFO L624 ElimStorePlain]: treesize reduction 0, result has 100.0 percent of original size [2020-07-17 22:32:02,685 INFO L544 ElimStorePlain]: Start of recursive call 6: 1 dim-0 vars, End of recursive call: 1 dim-0 vars, and 1 xjuncts. [2020-07-17 22:32:02,720 INFO L624 ElimStorePlain]: treesize reduction 0, result has 100.0 percent of original size [2020-07-17 22:32:02,724 INFO L190 IndexEqualityManager]: detected not equals via solver [2020-07-17 22:32:02,726 INFO L544 ElimStorePlain]: Start of recursive call 7: End of recursive call: and 1 xjuncts. [2020-07-17 22:32:02,746 INFO L624 ElimStorePlain]: treesize reduction 0, result has 100.0 percent of original size [2020-07-17 22:32:02,771 INFO L190 IndexEqualityManager]: detected not equals via solver [2020-07-17 22:32:02,784 INFO L350 Elim1Store]: treesize reduction 23, result has 28.1 percent of original size [2020-07-17 22:32:02,784 INFO L384 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 7 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 53 treesize of output 50 [2020-07-17 22:32:02,787 INFO L544 ElimStorePlain]: Start of recursive call 8: End of recursive call: and 1 xjuncts. [2020-07-17 22:32:02,811 INFO L624 ElimStorePlain]: treesize reduction 0, result has 100.0 percent of original size [2020-07-17 22:32:02,831 INFO L544 ElimStorePlain]: Start of recursive call 1: 3 dim-0 vars, 1 dim-1 vars, 6 dim-2 vars, End of recursive call: 3 dim-0 vars, and 1 xjuncts. [2020-07-17 22:32:02,832 INFO L244 ElimStorePlain]: Needed 8 recursive calls to eliminate 10 variables, input treesize:319, output treesize:41 [2020-07-17 22:32:05,024 WARN L406 uantifierElimination]: Trying to double check SDD result, but SMT solver's response was UNKNOWN. [2020-07-17 22:32:05,024 WARN L407 uantifierElimination]: Input elimination task: ∃ [|v_#memory_$Pointer$.base_30|, v_main_~end~0.base_29, v_main_~end~0.offset_29, |main_#t~malloc7.base|, |v_#memory_int_39|, |v_#memory_$Pointer$.offset_30|, |v_#memory_int_40|, |v_#memory_int_41|, |v_#valid_21|, |v_#memory_int_43|]. (let ((.cse0 (select (select (let ((.cse4 (store |v_#memory_$Pointer$.base_30| v_main_~end~0.base_29 (store (select |v_#memory_$Pointer$.base_30| v_main_~end~0.base_29) v_main_~end~0.offset_29 |main_#t~malloc7.base|)))) (store .cse4 |main_#t~malloc7.base| (store (select .cse4 |main_#t~malloc7.base|) 4 v_main_~end~0.base_29))) v_main_~end~0.base_29) v_main_~end~0.offset_29))) (let ((.cse2 (select |v_#memory_int_39| .cse0)) (.cse1 (select (select (let ((.cse3 (store |v_#memory_$Pointer$.offset_30| v_main_~end~0.base_29 (store (select |v_#memory_$Pointer$.offset_30| v_main_~end~0.base_29) v_main_~end~0.offset_29 0)))) (store .cse3 |main_#t~malloc7.base| (store (select .cse3 |main_#t~malloc7.base|) 4 v_main_~end~0.offset_29))) v_main_~end~0.base_29) v_main_~end~0.offset_29))) (and (= (store |v_#memory_int_40| .cse0 (store (select |v_#memory_int_40| .cse0) .cse1 (select .cse2 .cse1))) |v_#memory_int_39|) (= |v_#memory_int_40| (store |v_#memory_int_41| |main_#t~malloc7.base| (store (select |v_#memory_int_41| |main_#t~malloc7.base|) 4 (select (select |v_#memory_int_40| |main_#t~malloc7.base|) 4)))) (= 1 (select |v_#valid_21| v_main_~end~0.base_29)) (= (store |v_#memory_int_43| v_main_~end~0.base_29 (store (store (select |v_#memory_int_43| v_main_~end~0.base_29) (+ v_main_~end~0.offset_29 8) ~unnamed1~0~RED) v_main_~end~0.offset_29 (select (select |v_#memory_int_41| v_main_~end~0.base_29) v_main_~end~0.offset_29))) |v_#memory_int_41|) (= 0 main_~list~0.offset) (= (store |v_#memory_int_39| .cse0 (store .cse2 (+ .cse1 8) ~unnamed1~0~BLACK)) |#memory_int|) (= ~unnamed1~0~BLACK (select (select |v_#memory_int_43| main_~list~0.base) (+ main_~list~0.offset 8))) (not (= v_main_~end~0.base_29 main_~list~0.base)) (= 1 (select |v_#valid_21| main_~list~0.base)) (= 0 (select |v_#valid_21| |main_#t~malloc7.base|))))) [2020-07-17 22:32:05,024 WARN L408 uantifierElimination]: ElimStorePlain result: ∃ [v_main_~end~0.base_29, v_main_~end~0.offset_29, |main_#t~malloc7.base|]. (and (= 0 main_~list~0.offset) (= ~unnamed1~0~RED (select (select |#memory_int| v_main_~end~0.base_29) (+ v_main_~end~0.offset_29 8))) (= ~unnamed1~0~BLACK (select (select |#memory_int| |main_#t~malloc7.base|) 8)) (not (= v_main_~end~0.base_29 main_~list~0.base)) (not (= v_main_~end~0.base_29 |main_#t~malloc7.base|)) (= ~unnamed1~0~BLACK (select (select |#memory_int| main_~list~0.base) (+ main_~list~0.offset 8))) (not (= |main_#t~malloc7.base| main_~list~0.base))) [2020-07-17 22:32:05,746 INFO L384 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 3 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 0 case distinctions, treesize of input 31 treesize of output 13 [2020-07-17 22:32:05,747 INFO L544 ElimStorePlain]: Start of recursive call 2: End of recursive call: and 1 xjuncts. [2020-07-17 22:32:05,755 INFO L624 ElimStorePlain]: treesize reduction 0, result has 100.0 percent of original size [2020-07-17 22:32:05,759 INFO L544 ElimStorePlain]: Start of recursive call 1: 4 dim-0 vars, 1 dim-2 vars, End of recursive call: and 1 xjuncts. [2020-07-17 22:32:05,759 INFO L244 ElimStorePlain]: Needed 2 recursive calls to eliminate 5 variables, input treesize:43, output treesize:3 [2020-07-17 22:32:05,762 WARN L406 uantifierElimination]: Trying to double check SDD result, but SMT solver's response was UNKNOWN. [2020-07-17 22:32:05,763 WARN L407 uantifierElimination]: Input elimination task: ∃ [|#memory_int|, main_~end~0.base, v_main_~end~0.base_29, v_main_~end~0.offset_29, |main_#t~malloc7.base|]. (let ((.cse0 (select (select |#memory_int| main_~end~0.base) 8))) (and (= |main_#t~mem12| .cse0) (= ~unnamed1~0~RED (select (select |#memory_int| v_main_~end~0.base_29) (+ v_main_~end~0.offset_29 8))) (= ~unnamed1~0~BLACK (select (select |#memory_int| |main_#t~malloc7.base|) 8)) (not (= v_main_~end~0.base_29 main_~end~0.base)) (not (= v_main_~end~0.base_29 |main_#t~malloc7.base|)) (= ~unnamed1~0~BLACK .cse0) (not (= |main_#t~malloc7.base| main_~end~0.base)))) [2020-07-17 22:32:05,763 WARN L408 uantifierElimination]: ElimStorePlain result: ∃ []. (= ~unnamed1~0~BLACK |main_#t~mem12|) [2020-07-17 22:32:05,764 INFO L263 TraceCheckUtils]: 0: Hoare triple {1937#true} call ULTIMATE.init(); {1937#true} is VALID [2020-07-17 22:32:05,764 INFO L280 TraceCheckUtils]: 1: Hoare triple {1937#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier; {1937#true} is VALID [2020-07-17 22:32:05,764 INFO L280 TraceCheckUtils]: 2: Hoare triple {1937#true} assume true; {1937#true} is VALID [2020-07-17 22:32:05,765 INFO L275 TraceCheckUtils]: 3: Hoare quadruple {1937#true} {1937#true} #189#return; {1937#true} is VALID [2020-07-17 22:32:05,765 INFO L263 TraceCheckUtils]: 4: Hoare triple {1937#true} call #t~ret21 := main(); {1937#true} is VALID [2020-07-17 22:32:05,768 INFO L280 TraceCheckUtils]: 5: Hoare triple {1937#true} call #t~malloc0.base, #t~malloc0.offset := #Ultimate.allocOnHeap(12);~null~0.base, ~null~0.offset := #t~malloc0.base, #t~malloc0.offset;call write~$Pointer$(0, 0, ~null~0.base, ~null~0.offset, 4);call write~$Pointer$(0, 0, ~null~0.base, 4 + ~null~0.offset, 4);call write~int(~unnamed1~0~BLACK, ~null~0.base, 8 + ~null~0.offset, 4);call #t~malloc1.base, #t~malloc1.offset := #Ultimate.allocOnHeap(12);~list~0.base, ~list~0.offset := #t~malloc1.base, #t~malloc1.offset;call write~$Pointer$(~null~0.base, ~null~0.offset, ~list~0.base, ~list~0.offset, 4);call write~$Pointer$(~null~0.base, ~null~0.offset, ~list~0.base, 4 + ~list~0.offset, 4);call write~int(~unnamed1~0~BLACK, ~list~0.base, 8 + ~list~0.offset, 4);~end~0.base, ~end~0.offset := ~list~0.base, ~list~0.offset; {1966#(and (<= main_~end~0.offset main_~list~0.offset) (= 0 main_~list~0.offset) (= 1 (select |#valid| main_~list~0.base)) (= main_~list~0.base main_~end~0.base) (= ~unnamed1~0~BLACK (select (select |#memory_int| main_~list~0.base) (+ main_~list~0.offset 8))))} is VALID [2020-07-17 22:32:05,769 INFO L280 TraceCheckUtils]: 6: Hoare triple {1966#(and (<= main_~end~0.offset main_~list~0.offset) (= 0 main_~list~0.offset) (= 1 (select |#valid| main_~list~0.base)) (= main_~list~0.base main_~end~0.base) (= ~unnamed1~0~BLACK (select (select |#memory_int| main_~list~0.base) (+ main_~list~0.offset 8))))} assume -2147483648 <= #t~nondet2 && #t~nondet2 <= 2147483647; {1966#(and (<= main_~end~0.offset main_~list~0.offset) (= 0 main_~list~0.offset) (= 1 (select |#valid| main_~list~0.base)) (= main_~list~0.base main_~end~0.base) (= ~unnamed1~0~BLACK (select (select |#memory_int| main_~list~0.base) (+ main_~list~0.offset 8))))} is VALID [2020-07-17 22:32:05,771 INFO L280 TraceCheckUtils]: 7: Hoare triple {1966#(and (<= main_~end~0.offset main_~list~0.offset) (= 0 main_~list~0.offset) (= 1 (select |#valid| main_~list~0.base)) (= main_~list~0.base main_~end~0.base) (= ~unnamed1~0~BLACK (select (select |#memory_int| main_~list~0.base) (+ main_~list~0.offset 8))))} assume !!(0 != #t~nondet2);havoc #t~nondet2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.allocOnHeap(12);call write~$Pointer$(#t~malloc3.base, #t~malloc3.offset, ~end~0.base, ~end~0.offset, 4);call #t~mem4.base, #t~mem4.offset := read~$Pointer$(~end~0.base, ~end~0.offset, 4);call write~$Pointer$(~end~0.base, ~end~0.offset, #t~mem4.base, 4 + #t~mem4.offset, 4);havoc #t~mem4.base, #t~mem4.offset;call #t~mem5.base, #t~mem5.offset := read~$Pointer$(~end~0.base, ~end~0.offset, 4);~end~0.base, ~end~0.offset := #t~mem5.base, #t~mem5.offset;havoc #t~mem5.base, #t~mem5.offset;call write~$Pointer$(~null~0.base, ~null~0.offset, ~end~0.base, ~end~0.offset, 4);assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647; {1943#(and (not (= main_~list~0.base main_~end~0.base)) (= 0 main_~list~0.offset) (= 1 (select |#valid| main_~list~0.base)) (= ~unnamed1~0~BLACK (select (select |#memory_int| main_~list~0.base) (+ main_~list~0.offset 8))) (= 1 (select |#valid| main_~end~0.base)))} is VALID [2020-07-17 22:32:05,789 INFO L280 TraceCheckUtils]: 8: Hoare triple {1943#(and (not (= main_~list~0.base main_~end~0.base)) (= 0 main_~list~0.offset) (= 1 (select |#valid| main_~list~0.base)) (= ~unnamed1~0~BLACK (select (select |#memory_int| main_~list~0.base) (+ main_~list~0.offset 8))) (= 1 (select |#valid| main_~end~0.base)))} assume !(0 != #t~nondet6);havoc #t~nondet6;call write~int(~unnamed1~0~RED, ~end~0.base, 8 + ~end~0.offset, 4);call #t~malloc7.base, #t~malloc7.offset := #Ultimate.allocOnHeap(12);call write~$Pointer$(#t~malloc7.base, #t~malloc7.offset, ~end~0.base, ~end~0.offset, 4);call #t~mem8.base, #t~mem8.offset := read~$Pointer$(~end~0.base, ~end~0.offset, 4);call write~$Pointer$(~end~0.base, ~end~0.offset, #t~mem8.base, 4 + #t~mem8.offset, 4);havoc #t~mem8.base, #t~mem8.offset;call #t~mem9.base, #t~mem9.offset := read~$Pointer$(~end~0.base, ~end~0.offset, 4);~end~0.base, ~end~0.offset := #t~mem9.base, #t~mem9.offset;havoc #t~mem9.base, #t~mem9.offset;call write~$Pointer$(~null~0.base, ~null~0.offset, ~end~0.base, ~end~0.offset, 4);call write~int(~unnamed1~0~BLACK, ~end~0.base, 8 + ~end~0.offset, 4); {1976#(and (= 0 main_~list~0.offset) (= ~unnamed1~0~BLACK (select (select |#memory_int| main_~list~0.base) (+ main_~list~0.offset 8))) (exists ((|main_#t~malloc7.base| Int) (v_main_~end~0.base_29 Int) (v_main_~end~0.offset_29 Int)) (and (= ~unnamed1~0~RED (select (select |#memory_int| v_main_~end~0.base_29) (+ v_main_~end~0.offset_29 8))) (= ~unnamed1~0~BLACK (select (select |#memory_int| |main_#t~malloc7.base|) 8)) (not (= v_main_~end~0.base_29 main_~list~0.base)) (not (= v_main_~end~0.base_29 |main_#t~malloc7.base|)) (not (= |main_#t~malloc7.base| main_~list~0.base)))))} is VALID [2020-07-17 22:32:05,791 INFO L280 TraceCheckUtils]: 9: Hoare triple {1976#(and (= 0 main_~list~0.offset) (= ~unnamed1~0~BLACK (select (select |#memory_int| main_~list~0.base) (+ main_~list~0.offset 8))) (exists ((|main_#t~malloc7.base| Int) (v_main_~end~0.base_29 Int) (v_main_~end~0.offset_29 Int)) (and (= ~unnamed1~0~RED (select (select |#memory_int| v_main_~end~0.base_29) (+ v_main_~end~0.offset_29 8))) (= ~unnamed1~0~BLACK (select (select |#memory_int| |main_#t~malloc7.base|) 8)) (not (= v_main_~end~0.base_29 main_~list~0.base)) (not (= v_main_~end~0.base_29 |main_#t~malloc7.base|)) (not (= |main_#t~malloc7.base| main_~list~0.base)))))} call #t~mem10 := read~int(~end~0.base, 8 + ~end~0.offset, 4); {1976#(and (= 0 main_~list~0.offset) (= ~unnamed1~0~BLACK (select (select |#memory_int| main_~list~0.base) (+ main_~list~0.offset 8))) (exists ((|main_#t~malloc7.base| Int) (v_main_~end~0.base_29 Int) (v_main_~end~0.offset_29 Int)) (and (= ~unnamed1~0~RED (select (select |#memory_int| v_main_~end~0.base_29) (+ v_main_~end~0.offset_29 8))) (= ~unnamed1~0~BLACK (select (select |#memory_int| |main_#t~malloc7.base|) 8)) (not (= v_main_~end~0.base_29 main_~list~0.base)) (not (= v_main_~end~0.base_29 |main_#t~malloc7.base|)) (not (= |main_#t~malloc7.base| main_~list~0.base)))))} is VALID [2020-07-17 22:32:05,794 INFO L280 TraceCheckUtils]: 10: Hoare triple {1976#(and (= 0 main_~list~0.offset) (= ~unnamed1~0~BLACK (select (select |#memory_int| main_~list~0.base) (+ main_~list~0.offset 8))) (exists ((|main_#t~malloc7.base| Int) (v_main_~end~0.base_29 Int) (v_main_~end~0.offset_29 Int)) (and (= ~unnamed1~0~RED (select (select |#memory_int| v_main_~end~0.base_29) (+ v_main_~end~0.offset_29 8))) (= ~unnamed1~0~BLACK (select (select |#memory_int| |main_#t~malloc7.base|) 8)) (not (= v_main_~end~0.base_29 main_~list~0.base)) (not (= v_main_~end~0.base_29 |main_#t~malloc7.base|)) (not (= |main_#t~malloc7.base| main_~list~0.base)))))} assume !!(~unnamed1~0~BLACK == #t~mem10);havoc #t~mem10; {1976#(and (= 0 main_~list~0.offset) (= ~unnamed1~0~BLACK (select (select |#memory_int| main_~list~0.base) (+ main_~list~0.offset 8))) (exists ((|main_#t~malloc7.base| Int) (v_main_~end~0.base_29 Int) (v_main_~end~0.offset_29 Int)) (and (= ~unnamed1~0~RED (select (select |#memory_int| v_main_~end~0.base_29) (+ v_main_~end~0.offset_29 8))) (= ~unnamed1~0~BLACK (select (select |#memory_int| |main_#t~malloc7.base|) 8)) (not (= v_main_~end~0.base_29 main_~list~0.base)) (not (= v_main_~end~0.base_29 |main_#t~malloc7.base|)) (not (= |main_#t~malloc7.base| main_~list~0.base)))))} is VALID [2020-07-17 22:32:05,796 INFO L280 TraceCheckUtils]: 11: Hoare triple {1976#(and (= 0 main_~list~0.offset) (= ~unnamed1~0~BLACK (select (select |#memory_int| main_~list~0.base) (+ main_~list~0.offset 8))) (exists ((|main_#t~malloc7.base| Int) (v_main_~end~0.base_29 Int) (v_main_~end~0.offset_29 Int)) (and (= ~unnamed1~0~RED (select (select |#memory_int| v_main_~end~0.base_29) (+ v_main_~end~0.offset_29 8))) (= ~unnamed1~0~BLACK (select (select |#memory_int| |main_#t~malloc7.base|) 8)) (not (= v_main_~end~0.base_29 main_~list~0.base)) (not (= v_main_~end~0.base_29 |main_#t~malloc7.base|)) (not (= |main_#t~malloc7.base| main_~list~0.base)))))} goto; {1976#(and (= 0 main_~list~0.offset) (= ~unnamed1~0~BLACK (select (select |#memory_int| main_~list~0.base) (+ main_~list~0.offset 8))) (exists ((|main_#t~malloc7.base| Int) (v_main_~end~0.base_29 Int) (v_main_~end~0.offset_29 Int)) (and (= ~unnamed1~0~RED (select (select |#memory_int| v_main_~end~0.base_29) (+ v_main_~end~0.offset_29 8))) (= ~unnamed1~0~BLACK (select (select |#memory_int| |main_#t~malloc7.base|) 8)) (not (= v_main_~end~0.base_29 main_~list~0.base)) (not (= v_main_~end~0.base_29 |main_#t~malloc7.base|)) (not (= |main_#t~malloc7.base| main_~list~0.base)))))} is VALID [2020-07-17 22:32:05,797 INFO L280 TraceCheckUtils]: 12: Hoare triple {1976#(and (= 0 main_~list~0.offset) (= ~unnamed1~0~BLACK (select (select |#memory_int| main_~list~0.base) (+ main_~list~0.offset 8))) (exists ((|main_#t~malloc7.base| Int) (v_main_~end~0.base_29 Int) (v_main_~end~0.offset_29 Int)) (and (= ~unnamed1~0~RED (select (select |#memory_int| v_main_~end~0.base_29) (+ v_main_~end~0.offset_29 8))) (= ~unnamed1~0~BLACK (select (select |#memory_int| |main_#t~malloc7.base|) 8)) (not (= v_main_~end~0.base_29 main_~list~0.base)) (not (= v_main_~end~0.base_29 |main_#t~malloc7.base|)) (not (= |main_#t~malloc7.base| main_~list~0.base)))))} call #t~mem11.base, #t~mem11.offset := read~$Pointer$(~end~0.base, ~end~0.offset, 4); {1976#(and (= 0 main_~list~0.offset) (= ~unnamed1~0~BLACK (select (select |#memory_int| main_~list~0.base) (+ main_~list~0.offset 8))) (exists ((|main_#t~malloc7.base| Int) (v_main_~end~0.base_29 Int) (v_main_~end~0.offset_29 Int)) (and (= ~unnamed1~0~RED (select (select |#memory_int| v_main_~end~0.base_29) (+ v_main_~end~0.offset_29 8))) (= ~unnamed1~0~BLACK (select (select |#memory_int| |main_#t~malloc7.base|) 8)) (not (= v_main_~end~0.base_29 main_~list~0.base)) (not (= v_main_~end~0.base_29 |main_#t~malloc7.base|)) (not (= |main_#t~malloc7.base| main_~list~0.base)))))} is VALID [2020-07-17 22:32:05,798 INFO L280 TraceCheckUtils]: 13: Hoare triple {1976#(and (= 0 main_~list~0.offset) (= ~unnamed1~0~BLACK (select (select |#memory_int| main_~list~0.base) (+ main_~list~0.offset 8))) (exists ((|main_#t~malloc7.base| Int) (v_main_~end~0.base_29 Int) (v_main_~end~0.offset_29 Int)) (and (= ~unnamed1~0~RED (select (select |#memory_int| v_main_~end~0.base_29) (+ v_main_~end~0.offset_29 8))) (= ~unnamed1~0~BLACK (select (select |#memory_int| |main_#t~malloc7.base|) 8)) (not (= v_main_~end~0.base_29 main_~list~0.base)) (not (= v_main_~end~0.base_29 |main_#t~malloc7.base|)) (not (= |main_#t~malloc7.base| main_~list~0.base)))))} assume !!(~null~0.base == #t~mem11.base && ~null~0.offset == #t~mem11.offset);havoc #t~mem11.base, #t~mem11.offset; {1976#(and (= 0 main_~list~0.offset) (= ~unnamed1~0~BLACK (select (select |#memory_int| main_~list~0.base) (+ main_~list~0.offset 8))) (exists ((|main_#t~malloc7.base| Int) (v_main_~end~0.base_29 Int) (v_main_~end~0.offset_29 Int)) (and (= ~unnamed1~0~RED (select (select |#memory_int| v_main_~end~0.base_29) (+ v_main_~end~0.offset_29 8))) (= ~unnamed1~0~BLACK (select (select |#memory_int| |main_#t~malloc7.base|) 8)) (not (= v_main_~end~0.base_29 main_~list~0.base)) (not (= v_main_~end~0.base_29 |main_#t~malloc7.base|)) (not (= |main_#t~malloc7.base| main_~list~0.base)))))} is VALID [2020-07-17 22:32:05,799 INFO L280 TraceCheckUtils]: 14: Hoare triple {1976#(and (= 0 main_~list~0.offset) (= ~unnamed1~0~BLACK (select (select |#memory_int| main_~list~0.base) (+ main_~list~0.offset 8))) (exists ((|main_#t~malloc7.base| Int) (v_main_~end~0.base_29 Int) (v_main_~end~0.offset_29 Int)) (and (= ~unnamed1~0~RED (select (select |#memory_int| v_main_~end~0.base_29) (+ v_main_~end~0.offset_29 8))) (= ~unnamed1~0~BLACK (select (select |#memory_int| |main_#t~malloc7.base|) 8)) (not (= v_main_~end~0.base_29 main_~list~0.base)) (not (= v_main_~end~0.base_29 |main_#t~malloc7.base|)) (not (= |main_#t~malloc7.base| main_~list~0.base)))))} goto; {1976#(and (= 0 main_~list~0.offset) (= ~unnamed1~0~BLACK (select (select |#memory_int| main_~list~0.base) (+ main_~list~0.offset 8))) (exists ((|main_#t~malloc7.base| Int) (v_main_~end~0.base_29 Int) (v_main_~end~0.offset_29 Int)) (and (= ~unnamed1~0~RED (select (select |#memory_int| v_main_~end~0.base_29) (+ v_main_~end~0.offset_29 8))) (= ~unnamed1~0~BLACK (select (select |#memory_int| |main_#t~malloc7.base|) 8)) (not (= v_main_~end~0.base_29 main_~list~0.base)) (not (= v_main_~end~0.base_29 |main_#t~malloc7.base|)) (not (= |main_#t~malloc7.base| main_~list~0.base)))))} is VALID [2020-07-17 22:32:05,799 INFO L280 TraceCheckUtils]: 15: Hoare triple {1976#(and (= 0 main_~list~0.offset) (= ~unnamed1~0~BLACK (select (select |#memory_int| main_~list~0.base) (+ main_~list~0.offset 8))) (exists ((|main_#t~malloc7.base| Int) (v_main_~end~0.base_29 Int) (v_main_~end~0.offset_29 Int)) (and (= ~unnamed1~0~RED (select (select |#memory_int| v_main_~end~0.base_29) (+ v_main_~end~0.offset_29 8))) (= ~unnamed1~0~BLACK (select (select |#memory_int| |main_#t~malloc7.base|) 8)) (not (= v_main_~end~0.base_29 main_~list~0.base)) (not (= v_main_~end~0.base_29 |main_#t~malloc7.base|)) (not (= |main_#t~malloc7.base| main_~list~0.base)))))} assume !!(~null~0.base != ~end~0.base || ~null~0.offset != ~end~0.offset); {1976#(and (= 0 main_~list~0.offset) (= ~unnamed1~0~BLACK (select (select |#memory_int| main_~list~0.base) (+ main_~list~0.offset 8))) (exists ((|main_#t~malloc7.base| Int) (v_main_~end~0.base_29 Int) (v_main_~end~0.offset_29 Int)) (and (= ~unnamed1~0~RED (select (select |#memory_int| v_main_~end~0.base_29) (+ v_main_~end~0.offset_29 8))) (= ~unnamed1~0~BLACK (select (select |#memory_int| |main_#t~malloc7.base|) 8)) (not (= v_main_~end~0.base_29 main_~list~0.base)) (not (= v_main_~end~0.base_29 |main_#t~malloc7.base|)) (not (= |main_#t~malloc7.base| main_~list~0.base)))))} is VALID [2020-07-17 22:32:05,800 INFO L280 TraceCheckUtils]: 16: Hoare triple {1976#(and (= 0 main_~list~0.offset) (= ~unnamed1~0~BLACK (select (select |#memory_int| main_~list~0.base) (+ main_~list~0.offset 8))) (exists ((|main_#t~malloc7.base| Int) (v_main_~end~0.base_29 Int) (v_main_~end~0.offset_29 Int)) (and (= ~unnamed1~0~RED (select (select |#memory_int| v_main_~end~0.base_29) (+ v_main_~end~0.offset_29 8))) (= ~unnamed1~0~BLACK (select (select |#memory_int| |main_#t~malloc7.base|) 8)) (not (= v_main_~end~0.base_29 main_~list~0.base)) (not (= v_main_~end~0.base_29 |main_#t~malloc7.base|)) (not (= |main_#t~malloc7.base| main_~list~0.base)))))} goto; {1976#(and (= 0 main_~list~0.offset) (= ~unnamed1~0~BLACK (select (select |#memory_int| main_~list~0.base) (+ main_~list~0.offset 8))) (exists ((|main_#t~malloc7.base| Int) (v_main_~end~0.base_29 Int) (v_main_~end~0.offset_29 Int)) (and (= ~unnamed1~0~RED (select (select |#memory_int| v_main_~end~0.base_29) (+ v_main_~end~0.offset_29 8))) (= ~unnamed1~0~BLACK (select (select |#memory_int| |main_#t~malloc7.base|) 8)) (not (= v_main_~end~0.base_29 main_~list~0.base)) (not (= v_main_~end~0.base_29 |main_#t~malloc7.base|)) (not (= |main_#t~malloc7.base| main_~list~0.base)))))} is VALID [2020-07-17 22:32:05,801 INFO L280 TraceCheckUtils]: 17: Hoare triple {1976#(and (= 0 main_~list~0.offset) (= ~unnamed1~0~BLACK (select (select |#memory_int| main_~list~0.base) (+ main_~list~0.offset 8))) (exists ((|main_#t~malloc7.base| Int) (v_main_~end~0.base_29 Int) (v_main_~end~0.offset_29 Int)) (and (= ~unnamed1~0~RED (select (select |#memory_int| v_main_~end~0.base_29) (+ v_main_~end~0.offset_29 8))) (= ~unnamed1~0~BLACK (select (select |#memory_int| |main_#t~malloc7.base|) 8)) (not (= v_main_~end~0.base_29 main_~list~0.base)) (not (= v_main_~end~0.base_29 |main_#t~malloc7.base|)) (not (= |main_#t~malloc7.base| main_~list~0.base)))))} assume -2147483648 <= #t~nondet2 && #t~nondet2 <= 2147483647; {1976#(and (= 0 main_~list~0.offset) (= ~unnamed1~0~BLACK (select (select |#memory_int| main_~list~0.base) (+ main_~list~0.offset 8))) (exists ((|main_#t~malloc7.base| Int) (v_main_~end~0.base_29 Int) (v_main_~end~0.offset_29 Int)) (and (= ~unnamed1~0~RED (select (select |#memory_int| v_main_~end~0.base_29) (+ v_main_~end~0.offset_29 8))) (= ~unnamed1~0~BLACK (select (select |#memory_int| |main_#t~malloc7.base|) 8)) (not (= v_main_~end~0.base_29 main_~list~0.base)) (not (= v_main_~end~0.base_29 |main_#t~malloc7.base|)) (not (= |main_#t~malloc7.base| main_~list~0.base)))))} is VALID [2020-07-17 22:32:05,803 INFO L280 TraceCheckUtils]: 18: Hoare triple {1976#(and (= 0 main_~list~0.offset) (= ~unnamed1~0~BLACK (select (select |#memory_int| main_~list~0.base) (+ main_~list~0.offset 8))) (exists ((|main_#t~malloc7.base| Int) (v_main_~end~0.base_29 Int) (v_main_~end~0.offset_29 Int)) (and (= ~unnamed1~0~RED (select (select |#memory_int| v_main_~end~0.base_29) (+ v_main_~end~0.offset_29 8))) (= ~unnamed1~0~BLACK (select (select |#memory_int| |main_#t~malloc7.base|) 8)) (not (= v_main_~end~0.base_29 main_~list~0.base)) (not (= v_main_~end~0.base_29 |main_#t~malloc7.base|)) (not (= |main_#t~malloc7.base| main_~list~0.base)))))} assume !(0 != #t~nondet2);havoc #t~nondet2; {1976#(and (= 0 main_~list~0.offset) (= ~unnamed1~0~BLACK (select (select |#memory_int| main_~list~0.base) (+ main_~list~0.offset 8))) (exists ((|main_#t~malloc7.base| Int) (v_main_~end~0.base_29 Int) (v_main_~end~0.offset_29 Int)) (and (= ~unnamed1~0~RED (select (select |#memory_int| v_main_~end~0.base_29) (+ v_main_~end~0.offset_29 8))) (= ~unnamed1~0~BLACK (select (select |#memory_int| |main_#t~malloc7.base|) 8)) (not (= v_main_~end~0.base_29 main_~list~0.base)) (not (= v_main_~end~0.base_29 |main_#t~malloc7.base|)) (not (= |main_#t~malloc7.base| main_~list~0.base)))))} is VALID [2020-07-17 22:32:05,803 INFO L280 TraceCheckUtils]: 19: Hoare triple {1976#(and (= 0 main_~list~0.offset) (= ~unnamed1~0~BLACK (select (select |#memory_int| main_~list~0.base) (+ main_~list~0.offset 8))) (exists ((|main_#t~malloc7.base| Int) (v_main_~end~0.base_29 Int) (v_main_~end~0.offset_29 Int)) (and (= ~unnamed1~0~RED (select (select |#memory_int| v_main_~end~0.base_29) (+ v_main_~end~0.offset_29 8))) (= ~unnamed1~0~BLACK (select (select |#memory_int| |main_#t~malloc7.base|) 8)) (not (= v_main_~end~0.base_29 main_~list~0.base)) (not (= v_main_~end~0.base_29 |main_#t~malloc7.base|)) (not (= |main_#t~malloc7.base| main_~list~0.base)))))} ~end~0.base, ~end~0.offset := ~null~0.base, ~null~0.offset;~end~0.base, ~end~0.offset := ~list~0.base, ~list~0.offset; {2010#(and (exists ((|main_#t~malloc7.base| Int) (v_main_~end~0.base_29 Int) (v_main_~end~0.offset_29 Int)) (and (= ~unnamed1~0~RED (select (select |#memory_int| v_main_~end~0.base_29) (+ v_main_~end~0.offset_29 8))) (= ~unnamed1~0~BLACK (select (select |#memory_int| |main_#t~malloc7.base|) 8)) (not (= v_main_~end~0.base_29 main_~end~0.base)) (not (= v_main_~end~0.base_29 |main_#t~malloc7.base|)) (not (= |main_#t~malloc7.base| main_~end~0.base)))) (= 0 main_~end~0.offset) (= ~unnamed1~0~BLACK (select (select |#memory_int| main_~end~0.base) (+ main_~end~0.offset 8))))} is VALID [2020-07-17 22:32:05,809 INFO L280 TraceCheckUtils]: 20: Hoare triple {2010#(and (exists ((|main_#t~malloc7.base| Int) (v_main_~end~0.base_29 Int) (v_main_~end~0.offset_29 Int)) (and (= ~unnamed1~0~RED (select (select |#memory_int| v_main_~end~0.base_29) (+ v_main_~end~0.offset_29 8))) (= ~unnamed1~0~BLACK (select (select |#memory_int| |main_#t~malloc7.base|) 8)) (not (= v_main_~end~0.base_29 main_~end~0.base)) (not (= v_main_~end~0.base_29 |main_#t~malloc7.base|)) (not (= |main_#t~malloc7.base| main_~end~0.base)))) (= 0 main_~end~0.offset) (= ~unnamed1~0~BLACK (select (select |#memory_int| main_~end~0.base) (+ main_~end~0.offset 8))))} assume !!(~null~0.base != ~end~0.base || ~null~0.offset != ~end~0.offset); {2010#(and (exists ((|main_#t~malloc7.base| Int) (v_main_~end~0.base_29 Int) (v_main_~end~0.offset_29 Int)) (and (= ~unnamed1~0~RED (select (select |#memory_int| v_main_~end~0.base_29) (+ v_main_~end~0.offset_29 8))) (= ~unnamed1~0~BLACK (select (select |#memory_int| |main_#t~malloc7.base|) 8)) (not (= v_main_~end~0.base_29 main_~end~0.base)) (not (= v_main_~end~0.base_29 |main_#t~malloc7.base|)) (not (= |main_#t~malloc7.base| main_~end~0.base)))) (= 0 main_~end~0.offset) (= ~unnamed1~0~BLACK (select (select |#memory_int| main_~end~0.base) (+ main_~end~0.offset 8))))} is VALID [2020-07-17 22:32:05,810 INFO L280 TraceCheckUtils]: 21: Hoare triple {2010#(and (exists ((|main_#t~malloc7.base| Int) (v_main_~end~0.base_29 Int) (v_main_~end~0.offset_29 Int)) (and (= ~unnamed1~0~RED (select (select |#memory_int| v_main_~end~0.base_29) (+ v_main_~end~0.offset_29 8))) (= ~unnamed1~0~BLACK (select (select |#memory_int| |main_#t~malloc7.base|) 8)) (not (= v_main_~end~0.base_29 main_~end~0.base)) (not (= v_main_~end~0.base_29 |main_#t~malloc7.base|)) (not (= |main_#t~malloc7.base| main_~end~0.base)))) (= 0 main_~end~0.offset) (= ~unnamed1~0~BLACK (select (select |#memory_int| main_~end~0.base) (+ main_~end~0.offset 8))))} goto; {2010#(and (exists ((|main_#t~malloc7.base| Int) (v_main_~end~0.base_29 Int) (v_main_~end~0.offset_29 Int)) (and (= ~unnamed1~0~RED (select (select |#memory_int| v_main_~end~0.base_29) (+ v_main_~end~0.offset_29 8))) (= ~unnamed1~0~BLACK (select (select |#memory_int| |main_#t~malloc7.base|) 8)) (not (= v_main_~end~0.base_29 main_~end~0.base)) (not (= v_main_~end~0.base_29 |main_#t~malloc7.base|)) (not (= |main_#t~malloc7.base| main_~end~0.base)))) (= 0 main_~end~0.offset) (= ~unnamed1~0~BLACK (select (select |#memory_int| main_~end~0.base) (+ main_~end~0.offset 8))))} is VALID [2020-07-17 22:32:05,811 INFO L280 TraceCheckUtils]: 22: Hoare triple {2010#(and (exists ((|main_#t~malloc7.base| Int) (v_main_~end~0.base_29 Int) (v_main_~end~0.offset_29 Int)) (and (= ~unnamed1~0~RED (select (select |#memory_int| v_main_~end~0.base_29) (+ v_main_~end~0.offset_29 8))) (= ~unnamed1~0~BLACK (select (select |#memory_int| |main_#t~malloc7.base|) 8)) (not (= v_main_~end~0.base_29 main_~end~0.base)) (not (= v_main_~end~0.base_29 |main_#t~malloc7.base|)) (not (= |main_#t~malloc7.base| main_~end~0.base)))) (= 0 main_~end~0.offset) (= ~unnamed1~0~BLACK (select (select |#memory_int| main_~end~0.base) (+ main_~end~0.offset 8))))} call #t~mem12 := read~int(~end~0.base, 8 + ~end~0.offset, 4); {1946#(= ~unnamed1~0~BLACK |main_#t~mem12|)} is VALID [2020-07-17 22:32:05,811 INFO L280 TraceCheckUtils]: 23: Hoare triple {1946#(= ~unnamed1~0~BLACK |main_#t~mem12|)} assume !(~unnamed1~0~BLACK == #t~mem12);havoc #t~mem12; {1938#false} is VALID [2020-07-17 22:32:05,812 INFO L280 TraceCheckUtils]: 24: Hoare triple {1938#false} assume !false; {1938#false} is VALID [2020-07-17 22:32:05,819 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-17 22:32:05,820 INFO L220 FreeRefinementEngine]: Constructing automaton from 0 perfect and 2 imperfect interpolant sequences. [2020-07-17 22:32:05,820 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [8, 7] total 11 [2020-07-17 22:32:05,820 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1175905217] [2020-07-17 22:32:05,821 INFO L78 Accepts]: Start accepts. Automaton has 11 states. Word has length 25 [2020-07-17 22:32:05,821 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-17 22:32:05,821 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 11 states. [2020-07-17 22:32:05,924 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 45 edges. 45 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-17 22:32:05,924 INFO L459 AbstractCegarLoop]: Interpolant automaton has 11 states [2020-07-17 22:32:05,924 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-17 22:32:05,924 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 11 interpolants. [2020-07-17 22:32:05,925 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=25, Invalid=85, Unknown=0, NotChecked=0, Total=110 [2020-07-17 22:32:05,925 INFO L87 Difference]: Start difference. First operand 41 states and 44 transitions. Second operand 11 states. [2020-07-17 22:32:17,477 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-17 22:32:17,477 INFO L93 Difference]: Finished difference Result 73 states and 79 transitions. [2020-07-17 22:32:17,478 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2020-07-17 22:32:17,478 INFO L78 Accepts]: Start accepts. Automaton has 11 states. Word has length 25 [2020-07-17 22:32:17,478 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-17 22:32:17,478 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 11 states. [2020-07-17 22:32:17,480 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12 states to 12 states and 79 transitions. [2020-07-17 22:32:17,480 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 11 states. [2020-07-17 22:32:17,482 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12 states to 12 states and 79 transitions. [2020-07-17 22:32:17,482 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 12 states and 79 transitions. [2020-07-17 22:32:17,678 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 79 edges. 79 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-17 22:32:17,680 INFO L225 Difference]: With dead ends: 73 [2020-07-17 22:32:17,681 INFO L226 Difference]: Without dead ends: 71 [2020-07-17 22:32:17,681 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 39 GetRequests, 24 SyntacticMatches, 0 SemanticMatches, 15 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 23 ImplicationChecksByTransitivity, 0.5s TimeCoverageRelationStatistics Valid=73, Invalid=199, Unknown=0, NotChecked=0, Total=272 [2020-07-17 22:32:17,681 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 71 states. [2020-07-17 22:32:17,717 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 71 to 39. [2020-07-17 22:32:17,717 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-17 22:32:17,717 INFO L82 GeneralOperation]: Start isEquivalent. First operand 71 states. Second operand 39 states. [2020-07-17 22:32:17,718 INFO L74 IsIncluded]: Start isIncluded. First operand 71 states. Second operand 39 states. [2020-07-17 22:32:17,718 INFO L87 Difference]: Start difference. First operand 71 states. Second operand 39 states. [2020-07-17 22:32:17,721 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-17 22:32:17,721 INFO L93 Difference]: Finished difference Result 71 states and 76 transitions. [2020-07-17 22:32:17,722 INFO L276 IsEmpty]: Start isEmpty. Operand 71 states and 76 transitions. [2020-07-17 22:32:17,722 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-17 22:32:17,722 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-17 22:32:17,722 INFO L74 IsIncluded]: Start isIncluded. First operand 39 states. Second operand 71 states. [2020-07-17 22:32:17,722 INFO L87 Difference]: Start difference. First operand 39 states. Second operand 71 states. [2020-07-17 22:32:17,724 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-17 22:32:17,724 INFO L93 Difference]: Finished difference Result 71 states and 76 transitions. [2020-07-17 22:32:17,724 INFO L276 IsEmpty]: Start isEmpty. Operand 71 states and 76 transitions. [2020-07-17 22:32:17,725 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-17 22:32:17,725 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-17 22:32:17,725 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-17 22:32:17,725 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-17 22:32:17,725 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 39 states. [2020-07-17 22:32:17,726 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 39 states to 39 states and 42 transitions. [2020-07-17 22:32:17,726 INFO L78 Accepts]: Start accepts. Automaton has 39 states and 42 transitions. Word has length 25 [2020-07-17 22:32:17,727 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-17 22:32:17,727 INFO L479 AbstractCegarLoop]: Abstraction has 39 states and 42 transitions. [2020-07-17 22:32:17,727 INFO L480 AbstractCegarLoop]: Interpolant automaton has 11 states. [2020-07-17 22:32:17,727 INFO L276 IsEmpty]: Start isEmpty. Operand 39 states and 42 transitions. [2020-07-17 22:32:17,727 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2020-07-17 22:32:17,728 INFO L414 BasicCegarLoop]: Found error trace [2020-07-17 22:32:17,728 INFO L422 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-17 22:32:17,934 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8,3 z3 -smt2 -in SMTLIB2_COMPLIANT=true [2020-07-17 22:32:17,935 INFO L427 AbstractCegarLoop]: === Iteration 10 === [mainErr4ASSERT_VIOLATIONERROR_FUNCTION, mainErr0ASSERT_VIOLATIONERROR_FUNCTION, mainErr2ASSERT_VIOLATIONERROR_FUNCTION, mainErr6ASSERT_VIOLATIONERROR_FUNCTION, mainErr5ASSERT_VIOLATIONERROR_FUNCTION, mainErr3ASSERT_VIOLATIONERROR_FUNCTION, mainErr1ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-17 22:32:17,935 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-17 22:32:17,936 INFO L82 PathProgramCache]: Analyzing trace with hash -377613816, now seen corresponding path program 1 times [2020-07-17 22:32:17,936 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-17 22:32:17,936 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1880743577] [2020-07-17 22:32:17,937 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-17 22:32:17,989 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-17 22:32:18,277 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-17 22:32:18,280 INFO L280 TraceCheckUtils]: 0: Hoare triple {2322#(and (= |#valid| |old(#valid)|) (= |#NULL.base| |old(#NULL.base)|) (= |#NULL.offset| |old(#NULL.offset)|))} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier; {2310#true} is VALID [2020-07-17 22:32:18,281 INFO L280 TraceCheckUtils]: 1: Hoare triple {2310#true} assume true; {2310#true} is VALID [2020-07-17 22:32:18,281 INFO L275 TraceCheckUtils]: 2: Hoare quadruple {2310#true} {2310#true} #189#return; {2310#true} is VALID [2020-07-17 22:32:18,282 INFO L263 TraceCheckUtils]: 0: Hoare triple {2310#true} call ULTIMATE.init(); {2322#(and (= |#valid| |old(#valid)|) (= |#NULL.base| |old(#NULL.base)|) (= |#NULL.offset| |old(#NULL.offset)|))} is VALID [2020-07-17 22:32:18,282 INFO L280 TraceCheckUtils]: 1: Hoare triple {2322#(and (= |#valid| |old(#valid)|) (= |#NULL.base| |old(#NULL.base)|) (= |#NULL.offset| |old(#NULL.offset)|))} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier; {2310#true} is VALID [2020-07-17 22:32:18,283 INFO L280 TraceCheckUtils]: 2: Hoare triple {2310#true} assume true; {2310#true} is VALID [2020-07-17 22:32:18,283 INFO L275 TraceCheckUtils]: 3: Hoare quadruple {2310#true} {2310#true} #189#return; {2310#true} is VALID [2020-07-17 22:32:18,283 INFO L263 TraceCheckUtils]: 4: Hoare triple {2310#true} call #t~ret21 := main(); {2310#true} is VALID [2020-07-17 22:32:18,287 INFO L280 TraceCheckUtils]: 5: Hoare triple {2310#true} call #t~malloc0.base, #t~malloc0.offset := #Ultimate.allocOnHeap(12);~null~0.base, ~null~0.offset := #t~malloc0.base, #t~malloc0.offset;call write~$Pointer$(0, 0, ~null~0.base, ~null~0.offset, 4);call write~$Pointer$(0, 0, ~null~0.base, 4 + ~null~0.offset, 4);call write~int(~unnamed1~0~BLACK, ~null~0.base, 8 + ~null~0.offset, 4);call #t~malloc1.base, #t~malloc1.offset := #Ultimate.allocOnHeap(12);~list~0.base, ~list~0.offset := #t~malloc1.base, #t~malloc1.offset;call write~$Pointer$(~null~0.base, ~null~0.offset, ~list~0.base, ~list~0.offset, 4);call write~$Pointer$(~null~0.base, ~null~0.offset, ~list~0.base, 4 + ~list~0.offset, 4);call write~int(~unnamed1~0~BLACK, ~list~0.base, 8 + ~list~0.offset, 4);~end~0.base, ~end~0.offset := ~list~0.base, ~list~0.offset; {2315#(and (= main_~list~0.offset main_~end~0.offset) (= main_~list~0.base main_~end~0.base) (= 1 (select |#valid| main_~null~0.base)) (= 1 (select |#valid| main_~end~0.base)))} is VALID [2020-07-17 22:32:18,288 INFO L280 TraceCheckUtils]: 6: Hoare triple {2315#(and (= main_~list~0.offset main_~end~0.offset) (= main_~list~0.base main_~end~0.base) (= 1 (select |#valid| main_~null~0.base)) (= 1 (select |#valid| main_~end~0.base)))} assume -2147483648 <= #t~nondet2 && #t~nondet2 <= 2147483647; {2315#(and (= main_~list~0.offset main_~end~0.offset) (= main_~list~0.base main_~end~0.base) (= 1 (select |#valid| main_~null~0.base)) (= 1 (select |#valid| main_~end~0.base)))} is VALID [2020-07-17 22:32:18,291 INFO L280 TraceCheckUtils]: 7: Hoare triple {2315#(and (= main_~list~0.offset main_~end~0.offset) (= main_~list~0.base main_~end~0.base) (= 1 (select |#valid| main_~null~0.base)) (= 1 (select |#valid| main_~end~0.base)))} assume !!(0 != #t~nondet2);havoc #t~nondet2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.allocOnHeap(12);call write~$Pointer$(#t~malloc3.base, #t~malloc3.offset, ~end~0.base, ~end~0.offset, 4);call #t~mem4.base, #t~mem4.offset := read~$Pointer$(~end~0.base, ~end~0.offset, 4);call write~$Pointer$(~end~0.base, ~end~0.offset, #t~mem4.base, 4 + #t~mem4.offset, 4);havoc #t~mem4.base, #t~mem4.offset;call #t~mem5.base, #t~mem5.offset := read~$Pointer$(~end~0.base, ~end~0.offset, 4);~end~0.base, ~end~0.offset := #t~mem5.base, #t~mem5.offset;havoc #t~mem5.base, #t~mem5.offset;call write~$Pointer$(~null~0.base, ~null~0.offset, ~end~0.base, ~end~0.offset, 4);assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647; {2316#(and (not (= main_~list~0.base main_~end~0.base)) (= 1 (select |#valid| main_~list~0.base)) (or (and (= 1 (select |#valid| main_~null~0.base)) (= main_~end~0.offset (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset))) (and (= main_~list~0.base main_~null~0.base) (= main_~list~0.offset main_~null~0.offset))) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) main_~end~0.base) (= 1 (select |#valid| main_~end~0.base)))} is VALID [2020-07-17 22:32:18,295 INFO L280 TraceCheckUtils]: 8: Hoare triple {2316#(and (not (= main_~list~0.base main_~end~0.base)) (= 1 (select |#valid| main_~list~0.base)) (or (and (= 1 (select |#valid| main_~null~0.base)) (= main_~end~0.offset (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset))) (and (= main_~list~0.base main_~null~0.base) (= main_~list~0.offset main_~null~0.offset))) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) main_~end~0.base) (= 1 (select |#valid| main_~end~0.base)))} assume !(0 != #t~nondet6);havoc #t~nondet6;call write~int(~unnamed1~0~RED, ~end~0.base, 8 + ~end~0.offset, 4);call #t~malloc7.base, #t~malloc7.offset := #Ultimate.allocOnHeap(12);call write~$Pointer$(#t~malloc7.base, #t~malloc7.offset, ~end~0.base, ~end~0.offset, 4);call #t~mem8.base, #t~mem8.offset := read~$Pointer$(~end~0.base, ~end~0.offset, 4);call write~$Pointer$(~end~0.base, ~end~0.offset, #t~mem8.base, 4 + #t~mem8.offset, 4);havoc #t~mem8.base, #t~mem8.offset;call #t~mem9.base, #t~mem9.offset := read~$Pointer$(~end~0.base, ~end~0.offset, 4);~end~0.base, ~end~0.offset := #t~mem9.base, #t~mem9.offset;havoc #t~mem9.base, #t~mem9.offset;call write~$Pointer$(~null~0.base, ~null~0.offset, ~end~0.base, ~end~0.offset, 4);call write~int(~unnamed1~0~BLACK, ~end~0.base, 8 + ~end~0.offset, 4); {2317#(or (not (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) main_~null~0.base)) (and (= main_~list~0.base main_~null~0.base) (= main_~list~0.offset main_~null~0.offset)))} is VALID [2020-07-17 22:32:18,296 INFO L280 TraceCheckUtils]: 9: Hoare triple {2317#(or (not (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) main_~null~0.base)) (and (= main_~list~0.base main_~null~0.base) (= main_~list~0.offset main_~null~0.offset)))} call #t~mem10 := read~int(~end~0.base, 8 + ~end~0.offset, 4); {2317#(or (not (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) main_~null~0.base)) (and (= main_~list~0.base main_~null~0.base) (= main_~list~0.offset main_~null~0.offset)))} is VALID [2020-07-17 22:32:18,297 INFO L280 TraceCheckUtils]: 10: Hoare triple {2317#(or (not (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) main_~null~0.base)) (and (= main_~list~0.base main_~null~0.base) (= main_~list~0.offset main_~null~0.offset)))} assume !!(~unnamed1~0~BLACK == #t~mem10);havoc #t~mem10; {2317#(or (not (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) main_~null~0.base)) (and (= main_~list~0.base main_~null~0.base) (= main_~list~0.offset main_~null~0.offset)))} is VALID [2020-07-17 22:32:18,297 INFO L280 TraceCheckUtils]: 11: Hoare triple {2317#(or (not (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) main_~null~0.base)) (and (= main_~list~0.base main_~null~0.base) (= main_~list~0.offset main_~null~0.offset)))} goto; {2317#(or (not (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) main_~null~0.base)) (and (= main_~list~0.base main_~null~0.base) (= main_~list~0.offset main_~null~0.offset)))} is VALID [2020-07-17 22:32:18,298 INFO L280 TraceCheckUtils]: 12: Hoare triple {2317#(or (not (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) main_~null~0.base)) (and (= main_~list~0.base main_~null~0.base) (= main_~list~0.offset main_~null~0.offset)))} call #t~mem11.base, #t~mem11.offset := read~$Pointer$(~end~0.base, ~end~0.offset, 4); {2317#(or (not (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) main_~null~0.base)) (and (= main_~list~0.base main_~null~0.base) (= main_~list~0.offset main_~null~0.offset)))} is VALID [2020-07-17 22:32:18,299 INFO L280 TraceCheckUtils]: 13: Hoare triple {2317#(or (not (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) main_~null~0.base)) (and (= main_~list~0.base main_~null~0.base) (= main_~list~0.offset main_~null~0.offset)))} assume !!(~null~0.base == #t~mem11.base && ~null~0.offset == #t~mem11.offset);havoc #t~mem11.base, #t~mem11.offset; {2317#(or (not (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) main_~null~0.base)) (and (= main_~list~0.base main_~null~0.base) (= main_~list~0.offset main_~null~0.offset)))} is VALID [2020-07-17 22:32:18,299 INFO L280 TraceCheckUtils]: 14: Hoare triple {2317#(or (not (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) main_~null~0.base)) (and (= main_~list~0.base main_~null~0.base) (= main_~list~0.offset main_~null~0.offset)))} goto; {2317#(or (not (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) main_~null~0.base)) (and (= main_~list~0.base main_~null~0.base) (= main_~list~0.offset main_~null~0.offset)))} is VALID [2020-07-17 22:32:18,300 INFO L280 TraceCheckUtils]: 15: Hoare triple {2317#(or (not (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) main_~null~0.base)) (and (= main_~list~0.base main_~null~0.base) (= main_~list~0.offset main_~null~0.offset)))} assume !!(~null~0.base != ~end~0.base || ~null~0.offset != ~end~0.offset); {2317#(or (not (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) main_~null~0.base)) (and (= main_~list~0.base main_~null~0.base) (= main_~list~0.offset main_~null~0.offset)))} is VALID [2020-07-17 22:32:18,300 INFO L280 TraceCheckUtils]: 16: Hoare triple {2317#(or (not (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) main_~null~0.base)) (and (= main_~list~0.base main_~null~0.base) (= main_~list~0.offset main_~null~0.offset)))} goto; {2317#(or (not (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) main_~null~0.base)) (and (= main_~list~0.base main_~null~0.base) (= main_~list~0.offset main_~null~0.offset)))} is VALID [2020-07-17 22:32:18,301 INFO L280 TraceCheckUtils]: 17: Hoare triple {2317#(or (not (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) main_~null~0.base)) (and (= main_~list~0.base main_~null~0.base) (= main_~list~0.offset main_~null~0.offset)))} assume -2147483648 <= #t~nondet2 && #t~nondet2 <= 2147483647; {2317#(or (not (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) main_~null~0.base)) (and (= main_~list~0.base main_~null~0.base) (= main_~list~0.offset main_~null~0.offset)))} is VALID [2020-07-17 22:32:18,302 INFO L280 TraceCheckUtils]: 18: Hoare triple {2317#(or (not (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) main_~null~0.base)) (and (= main_~list~0.base main_~null~0.base) (= main_~list~0.offset main_~null~0.offset)))} assume !(0 != #t~nondet2);havoc #t~nondet2; {2317#(or (not (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) main_~null~0.base)) (and (= main_~list~0.base main_~null~0.base) (= main_~list~0.offset main_~null~0.offset)))} is VALID [2020-07-17 22:32:18,303 INFO L280 TraceCheckUtils]: 19: Hoare triple {2317#(or (not (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) main_~null~0.base)) (and (= main_~list~0.base main_~null~0.base) (= main_~list~0.offset main_~null~0.offset)))} ~end~0.base, ~end~0.offset := ~null~0.base, ~null~0.offset;~end~0.base, ~end~0.offset := ~list~0.base, ~list~0.offset; {2318#(or (and (= main_~end~0.offset main_~null~0.offset) (= main_~null~0.base main_~end~0.base)) (not (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) main_~null~0.base)))} is VALID [2020-07-17 22:32:18,304 INFO L280 TraceCheckUtils]: 20: Hoare triple {2318#(or (and (= main_~end~0.offset main_~null~0.offset) (= main_~null~0.base main_~end~0.base)) (not (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) main_~null~0.base)))} assume !!(~null~0.base != ~end~0.base || ~null~0.offset != ~end~0.offset); {2319#(not (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) main_~null~0.base))} is VALID [2020-07-17 22:32:18,305 INFO L280 TraceCheckUtils]: 21: Hoare triple {2319#(not (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) main_~null~0.base))} goto; {2319#(not (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) main_~null~0.base))} is VALID [2020-07-17 22:32:18,305 INFO L280 TraceCheckUtils]: 22: Hoare triple {2319#(not (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) main_~null~0.base))} call #t~mem12 := read~int(~end~0.base, 8 + ~end~0.offset, 4); {2319#(not (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) main_~null~0.base))} is VALID [2020-07-17 22:32:18,306 INFO L280 TraceCheckUtils]: 23: Hoare triple {2319#(not (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) main_~null~0.base))} assume !!(~unnamed1~0~BLACK == #t~mem12);havoc #t~mem12; {2319#(not (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) main_~null~0.base))} is VALID [2020-07-17 22:32:18,306 INFO L280 TraceCheckUtils]: 24: Hoare triple {2319#(not (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) main_~null~0.base))} goto; {2319#(not (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) main_~null~0.base))} is VALID [2020-07-17 22:32:18,307 INFO L280 TraceCheckUtils]: 25: Hoare triple {2319#(not (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) main_~null~0.base))} assume !!(~null~0.base != ~end~0.base || ~null~0.offset != ~end~0.offset);call #t~mem13 := read~int(~end~0.base, 8 + ~end~0.offset, 4); {2319#(not (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) main_~null~0.base))} is VALID [2020-07-17 22:32:18,307 INFO L280 TraceCheckUtils]: 26: Hoare triple {2319#(not (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) main_~null~0.base))} assume !(~unnamed1~0~RED == #t~mem13);havoc #t~mem13; {2319#(not (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) main_~null~0.base))} is VALID [2020-07-17 22:32:18,308 INFO L280 TraceCheckUtils]: 27: Hoare triple {2319#(not (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) main_~null~0.base))} call #t~mem16.base, #t~mem16.offset := read~$Pointer$(~end~0.base, ~end~0.offset, 4);~end~0.base, ~end~0.offset := #t~mem16.base, #t~mem16.offset;havoc #t~mem16.base, #t~mem16.offset; {2320#(not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset) main_~null~0.base))} is VALID [2020-07-17 22:32:18,309 INFO L280 TraceCheckUtils]: 28: Hoare triple {2320#(not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset) main_~null~0.base))} assume !!(~null~0.base != ~end~0.base || ~null~0.offset != ~end~0.offset);call #t~mem13 := read~int(~end~0.base, 8 + ~end~0.offset, 4); {2320#(not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset) main_~null~0.base))} is VALID [2020-07-17 22:32:18,310 INFO L280 TraceCheckUtils]: 29: Hoare triple {2320#(not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset) main_~null~0.base))} assume ~unnamed1~0~RED == #t~mem13;havoc #t~mem13;call #t~mem14.base, #t~mem14.offset := read~$Pointer$(~end~0.base, ~end~0.offset, 4);~end~0.base, ~end~0.offset := #t~mem14.base, #t~mem14.offset;havoc #t~mem14.base, #t~mem14.offset; {2321#(not (= main_~null~0.base main_~end~0.base))} is VALID [2020-07-17 22:32:18,311 INFO L280 TraceCheckUtils]: 30: Hoare triple {2321#(not (= main_~null~0.base main_~end~0.base))} assume !(~null~0.base != ~end~0.base || ~null~0.offset != ~end~0.offset); {2311#false} is VALID [2020-07-17 22:32:18,311 INFO L280 TraceCheckUtils]: 31: Hoare triple {2311#false} assume !false; {2311#false} is VALID [2020-07-17 22:32:18,317 INFO L134 CoverageAnalysis]: Checked inductivity of 4 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-17 22:32:18,317 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1880743577] [2020-07-17 22:32:18,317 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [352167500] [2020-07-17 22:32:18,318 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 Starting monitored process 4 with z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 4 with z3 -smt2 -in SMTLIB2_COMPLIANT=true [2020-07-17 22:32:18,442 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-17 22:32:18,445 INFO L264 TraceCheckSpWp]: Trace formula consists of 164 conjuncts, 62 conjunts are in the unsatisfiable core [2020-07-17 22:32:18,465 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-17 22:32:18,470 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2020-07-17 22:32:18,505 INFO L350 Elim1Store]: treesize reduction 15, result has 25.0 percent of original size [2020-07-17 22:32:18,506 INFO L384 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 9 treesize of output 11 [2020-07-17 22:32:18,506 INFO L544 ElimStorePlain]: Start of recursive call 2: End of recursive call: and 1 xjuncts. [2020-07-17 22:32:18,517 INFO L624 ElimStorePlain]: treesize reduction 0, result has 100.0 percent of original size [2020-07-17 22:32:18,518 INFO L544 ElimStorePlain]: Start of recursive call 1: 1 dim-0 vars, 1 dim-1 vars, End of recursive call: 1 dim-0 vars, and 1 xjuncts. [2020-07-17 22:32:18,518 INFO L244 ElimStorePlain]: Needed 2 recursive calls to eliminate 2 variables, input treesize:22, output treesize:23 [2020-07-17 22:32:18,522 WARN L406 uantifierElimination]: Trying to double check SDD result, but SMT solver's response was UNKNOWN. [2020-07-17 22:32:18,522 WARN L407 uantifierElimination]: Input elimination task: ∃ [|v_#valid_22|, |main_#t~malloc0.base|]. (and (= main_~list~0.offset main_~end~0.offset) (= 0 main_~null~0.offset) (= 0 main_~list~0.offset) (= (store (store |v_#valid_22| |main_#t~malloc0.base| 1) main_~list~0.base 1) |#valid|) (= main_~list~0.base main_~end~0.base)) [2020-07-17 22:32:18,523 WARN L408 uantifierElimination]: ElimStorePlain result: ∃ [|main_#t~malloc0.base|]. (and (= main_~list~0.offset main_~end~0.offset) (= 0 main_~null~0.offset) (= 0 main_~list~0.offset) (= 1 (select |#valid| main_~list~0.base)) (= main_~list~0.base main_~end~0.base) (= 1 (select |#valid| |main_#t~malloc0.base|))) [2020-07-17 22:32:18,636 INFO L350 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2020-07-17 22:32:18,636 INFO L384 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 17 treesize of output 39 [2020-07-17 22:32:18,638 INFO L544 ElimStorePlain]: Start of recursive call 2: End of recursive call: and 1 xjuncts. [2020-07-17 22:32:18,745 WARN L193 SmtUtils]: Spent 106.00 ms on a formula simplification. DAG size of input: 52 DAG size of output: 50 [2020-07-17 22:32:18,746 INFO L624 ElimStorePlain]: treesize reduction 14, result has 93.5 percent of original size [2020-07-17 22:32:18,750 INFO L190 IndexEqualityManager]: detected not equals via solver [2020-07-17 22:32:18,763 INFO L190 IndexEqualityManager]: detected not equals via solver [2020-07-17 22:32:18,764 INFO L173 IndexEqualityManager]: detected equality via solver [2020-07-17 22:32:18,779 INFO L350 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2020-07-17 22:32:18,780 INFO L384 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 63 treesize of output 41 [2020-07-17 22:32:18,780 INFO L544 ElimStorePlain]: Start of recursive call 3: End of recursive call: and 1 xjuncts. [2020-07-17 22:32:18,851 INFO L624 ElimStorePlain]: treesize reduction 16, result has 89.4 percent of original size [2020-07-17 22:32:18,854 INFO L190 IndexEqualityManager]: detected not equals via solver [2020-07-17 22:32:18,869 INFO L190 IndexEqualityManager]: detected not equals via solver [2020-07-17 22:32:18,882 INFO L350 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2020-07-17 22:32:18,882 INFO L384 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 2 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 63 treesize of output 41 [2020-07-17 22:32:18,883 INFO L544 ElimStorePlain]: Start of recursive call 4: End of recursive call: and 1 xjuncts. [2020-07-17 22:32:18,947 INFO L624 ElimStorePlain]: treesize reduction 16, result has 81.2 percent of original size [2020-07-17 22:32:18,956 INFO L544 ElimStorePlain]: Start of recursive call 1: 1 dim-0 vars, 1 dim-1 vars, 2 dim-2 vars, End of recursive call: and 1 xjuncts. [2020-07-17 22:32:18,957 INFO L244 ElimStorePlain]: Needed 4 recursive calls to eliminate 4 variables, input treesize:203, output treesize:82 [2020-07-17 22:32:18,970 WARN L406 uantifierElimination]: Trying to double check SDD result, but SMT solver's response was UNKNOWN. [2020-07-17 22:32:18,970 WARN L407 uantifierElimination]: Input elimination task: ∃ [|v_#memory_$Pointer$.offset_32|, |main_#t~malloc3.base|, |v_#valid_23|, |v_#memory_$Pointer$.base_33|]. (let ((.cse0 (let ((.cse3 (store |v_#memory_$Pointer$.offset_32| main_~list~0.base (store (select |v_#memory_$Pointer$.offset_32| main_~list~0.base) main_~list~0.offset 0)))) (store .cse3 |main_#t~malloc3.base| (store (select .cse3 |main_#t~malloc3.base|) 4 main_~list~0.offset)))) (.cse1 (let ((.cse2 (store |v_#memory_$Pointer$.base_33| main_~list~0.base (store (select |v_#memory_$Pointer$.base_33| main_~list~0.base) main_~list~0.offset |main_#t~malloc3.base|)))) (store .cse2 |main_#t~malloc3.base| (store (select .cse2 |main_#t~malloc3.base|) 4 main_~list~0.base))))) (and (= 0 (select |v_#valid_23| |main_#t~malloc3.base|)) (= 0 main_~null~0.offset) (= (select (select .cse0 main_~list~0.base) main_~list~0.offset) main_~end~0.offset) (= 0 main_~list~0.offset) (= |#valid| (store |v_#valid_23| |main_#t~malloc3.base| 1)) (= |#memory_$Pointer$.offset| (store .cse0 main_~end~0.base (store (select .cse0 main_~end~0.base) main_~end~0.offset main_~null~0.offset))) (= 1 (select |v_#valid_23| main_~list~0.base)) (= |#memory_$Pointer$.base| (store .cse1 main_~end~0.base (store (select .cse1 main_~end~0.base) main_~end~0.offset main_~null~0.base))) (= main_~end~0.base (select (select .cse1 main_~list~0.base) main_~list~0.offset)))) [2020-07-17 22:32:18,971 WARN L408 uantifierElimination]: ElimStorePlain result: ∃ []. (let ((.cse0 (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset))) (and (= (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset) main_~null~0.base) (= 0 main_~null~0.offset) (= 0 (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= 0 main_~list~0.offset) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset) main_~null~0.offset) (= 1 (select |#valid| main_~list~0.base)) (= 0 main_~end~0.offset) (not (= main_~list~0.base .cse0)) (= main_~list~0.offset (select (select |#memory_$Pointer$.offset| .cse0) 4)) (= (select (select |#memory_$Pointer$.base| .cse0) 4) main_~list~0.base) (= .cse0 main_~end~0.base) (= 1 (select |#valid| .cse0)))) [2020-07-17 22:32:19,139 INFO L350 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2020-07-17 22:32:19,140 INFO L384 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 3 select indices, 3 select index equivalence classes, 1 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 2 case distinctions, treesize of input 20 treesize of output 30 [2020-07-17 22:32:19,142 INFO L544 ElimStorePlain]: Start of recursive call 2: End of recursive call: and 1 xjuncts. [2020-07-17 22:32:19,299 WARN L193 SmtUtils]: Spent 156.00 ms on a formula simplification that was a NOOP. DAG size: 81 [2020-07-17 22:32:19,300 INFO L624 ElimStorePlain]: treesize reduction 0, result has 100.0 percent of original size [2020-07-17 22:32:19,305 INFO L440 ElimStorePlain]: Different costs {6=[|v_#memory_$Pointer$.base_34|, |v_#memory_$Pointer$.offset_33|], 11=[|v_#memory_$Pointer$.offset_31|, |v_#memory_$Pointer$.base_32|]} [2020-07-17 22:32:19,316 INFO L350 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2020-07-17 22:32:19,317 INFO L384 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 3 select indices, 3 select index equivalence classes, 4 disjoint index pairs (out of 3 index pairs), introduced 4 new quantified variables, introduced 3 case distinctions, treesize of input 433 treesize of output 289 [2020-07-17 22:32:19,331 INFO L544 ElimStorePlain]: Start of recursive call 3: End of recursive call: and 1 xjuncts. [2020-07-17 22:32:19,537 WARN L193 SmtUtils]: Spent 205.00 ms on a formula simplification. DAG size of input: 77 DAG size of output: 75 [2020-07-17 22:32:19,537 INFO L624 ElimStorePlain]: treesize reduction 16, result has 96.4 percent of original size [2020-07-17 22:32:19,578 INFO L384 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 3 select indices, 3 select index equivalence classes, 6 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 0 case distinctions, treesize of input 57 treesize of output 39 [2020-07-17 22:32:19,581 INFO L544 ElimStorePlain]: Start of recursive call 4: End of recursive call: and 1 xjuncts. [2020-07-17 22:32:19,742 WARN L193 SmtUtils]: Spent 160.00 ms on a formula simplification that was a NOOP. DAG size: 69 [2020-07-17 22:32:19,742 INFO L624 ElimStorePlain]: treesize reduction 0, result has 100.0 percent of original size [2020-07-17 22:32:19,748 INFO L190 IndexEqualityManager]: detected not equals via solver [2020-07-17 22:32:19,772 INFO L190 IndexEqualityManager]: detected not equals via solver [2020-07-17 22:32:19,774 INFO L190 IndexEqualityManager]: detected not equals via solver [2020-07-17 22:32:19,775 INFO L173 IndexEqualityManager]: detected equality via solver [2020-07-17 22:32:19,779 INFO L190 IndexEqualityManager]: detected not equals via solver [2020-07-17 22:32:19,827 INFO L350 Elim1Store]: treesize reduction 5, result has 90.7 percent of original size [2020-07-17 22:32:19,828 INFO L384 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 3 select indices, 3 select index equivalence classes, 5 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 1 case distinctions, treesize of input 135 treesize of output 97 [2020-07-17 22:32:19,832 INFO L544 ElimStorePlain]: Start of recursive call 5: End of recursive call: and 1 xjuncts. [2020-07-17 22:32:19,946 WARN L193 SmtUtils]: Spent 114.00 ms on a formula simplification. DAG size of input: 70 DAG size of output: 60 [2020-07-17 22:32:19,947 INFO L624 ElimStorePlain]: treesize reduction 41, result has 86.4 percent of original size [2020-07-17 22:32:19,972 INFO L190 IndexEqualityManager]: detected not equals via solver [2020-07-17 22:32:19,974 INFO L190 IndexEqualityManager]: detected not equals via solver [2020-07-17 22:32:20,018 INFO L350 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2020-07-17 22:32:20,019 INFO L384 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 3 select indices, 3 select index equivalence classes, 4 disjoint index pairs (out of 3 index pairs), introduced 4 new quantified variables, introduced 7 case distinctions, treesize of input 174 treesize of output 144 [2020-07-17 22:32:20,025 INFO L544 ElimStorePlain]: Start of recursive call 6: End of recursive call: and 1 xjuncts. [2020-07-17 22:32:20,164 WARN L193 SmtUtils]: Spent 138.00 ms on a formula simplification. DAG size of input: 66 DAG size of output: 45 [2020-07-17 22:32:20,164 INFO L624 ElimStorePlain]: treesize reduction 134, result has 42.7 percent of original size [2020-07-17 22:32:20,170 INFO L544 ElimStorePlain]: Start of recursive call 1: 1 dim-0 vars, 1 dim-1 vars, 4 dim-2 vars, End of recursive call: and 1 xjuncts. [2020-07-17 22:32:20,170 INFO L244 ElimStorePlain]: Needed 6 recursive calls to eliminate 6 variables, input treesize:457, output treesize:97 [2020-07-17 22:32:22,379 WARN L406 uantifierElimination]: Trying to double check SDD result, but SMT solver's response was UNKNOWN. [2020-07-17 22:32:22,379 WARN L407 uantifierElimination]: Input elimination task: ∃ [|v_#memory_$Pointer$.base_34|, |v_#memory_$Pointer$.base_32|, |main_#t~malloc7.base|, |v_#memory_$Pointer$.offset_33|, |v_#memory_$Pointer$.offset_31|, |v_#valid_24|]. (let ((.cse0 (select (select |v_#memory_$Pointer$.base_34| main_~list~0.base) main_~list~0.offset))) (let ((.cse7 (select |v_#memory_$Pointer$.base_32| .cse0)) (.cse2 (select |v_#memory_$Pointer$.offset_31| .cse0))) (let ((.cse3 (let ((.cse9 (store |v_#memory_$Pointer$.offset_31| .cse0 (store .cse2 0 0)))) (store .cse9 |main_#t~malloc7.base| (store (select .cse9 |main_#t~malloc7.base|) 4 0)))) (.cse5 (+ main_~end~0.offset 8)) (.cse6 (select |v_#memory_$Pointer$.base_34| .cse0)) (.cse4 (let ((.cse8 (store |v_#memory_$Pointer$.base_32| .cse0 (store .cse7 0 |main_#t~malloc7.base|)))) (store .cse8 |main_#t~malloc7.base| (store (select .cse8 |main_#t~malloc7.base|) 4 .cse0)))) (.cse1 (select |v_#memory_$Pointer$.offset_33| .cse0))) (and (= (store |v_#memory_$Pointer$.offset_33| .cse0 (store .cse1 8 (select .cse2 8))) |v_#memory_$Pointer$.offset_31|) (= (select |v_#valid_24| main_~list~0.base) 1) (= 0 main_~null~0.offset) (= main_~end~0.offset (select (select .cse3 .cse0) 0)) (= 0 main_~list~0.offset) (not (= main_~list~0.base .cse0)) (= |#memory_$Pointer$.base| (store .cse4 main_~end~0.base (store (store (select .cse4 main_~end~0.base) main_~end~0.offset main_~null~0.base) .cse5 (select (select |#memory_$Pointer$.base| main_~end~0.base) .cse5)))) (= 0 (select |v_#valid_24| |main_#t~malloc7.base|)) (= main_~null~0.base (select .cse6 0)) (= 0 (select (select |v_#memory_$Pointer$.offset_33| main_~list~0.base) main_~list~0.offset)) (= (select .cse1 0) main_~null~0.offset) (= (store .cse3 main_~end~0.base (store (store (select .cse3 main_~end~0.base) main_~end~0.offset main_~null~0.offset) .cse5 (select (select |#memory_$Pointer$.offset| main_~end~0.base) .cse5))) |#memory_$Pointer$.offset|) (= (select .cse6 4) main_~list~0.base) (= (store |v_#memory_$Pointer$.base_34| .cse0 (store .cse6 8 (select .cse7 8))) |v_#memory_$Pointer$.base_32|) (= (select (select .cse4 .cse0) 0) main_~end~0.base) (= 1 (select |v_#valid_24| .cse0)) (= main_~list~0.offset (select .cse1 4)))))) [2020-07-17 22:32:22,380 WARN L408 uantifierElimination]: ElimStorePlain result: ∃ []. (let ((.cse0 (select |#memory_$Pointer$.base| main_~end~0.base))) (let ((.cse3 (select .cse0 4))) (let ((.cse1 (select |#memory_$Pointer$.offset| main_~end~0.base)) (.cse2 (select |#memory_$Pointer$.base| .cse3)) (.cse4 (select |#memory_$Pointer$.offset| .cse3))) (and (= (select .cse0 main_~end~0.offset) main_~null~0.base) (= 0 (select .cse1 4)) (= 0 main_~null~0.offset) (= 0 main_~list~0.offset) (= (select .cse1 main_~end~0.offset) main_~null~0.offset) (= (select .cse2 4) main_~list~0.base) (= 0 main_~end~0.offset) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) .cse3) (= 0 (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= (select .cse2 0) main_~end~0.base) (not (= main_~list~0.base main_~end~0.base)) (= 0 (select .cse4 0)) (= main_~list~0.offset (select .cse4 4)))))) [2020-07-17 22:32:22,613 INFO L501 QuantifierPusher]: Distributing 2 conjuncts over 10 disjuncts [2020-07-17 22:32:23,198 INFO L190 IndexEqualityManager]: detected not equals via solver [2020-07-17 22:32:23,200 INFO L190 IndexEqualityManager]: detected not equals via solver [2020-07-17 22:32:23,201 INFO L384 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 5 select indices, 5 select index equivalence classes, 5 disjoint index pairs (out of 10 index pairs), introduced 5 new quantified variables, introduced 0 case distinctions, treesize of input 67 treesize of output 19 [2020-07-17 22:32:23,203 INFO L544 ElimStorePlain]: Start of recursive call 2: End of recursive call: and 1 xjuncts. [2020-07-17 22:32:23,220 INFO L624 ElimStorePlain]: treesize reduction 0, result has 100.0 percent of original size [2020-07-17 22:32:23,224 INFO L544 ElimStorePlain]: Start of recursive call 1: 1 dim-0 vars, 1 dim-2 vars, End of recursive call: 1 dim-0 vars, and 1 xjuncts. [2020-07-17 22:32:23,225 INFO L244 ElimStorePlain]: Needed 2 recursive calls to eliminate 2 variables, input treesize:138, output treesize:75 [2020-07-17 22:32:23,230 WARN L406 uantifierElimination]: Trying to double check SDD result, but SMT solver's response was UNKNOWN. [2020-07-17 22:32:23,230 WARN L407 uantifierElimination]: Input elimination task: ∃ [v_subst_2, |#memory_$Pointer$.offset|]. (let ((.cse5 (select |#memory_$Pointer$.base| v_subst_2))) (let ((.cse2 (select .cse5 4))) (let ((.cse6 (select |#memory_$Pointer$.base| .cse2))) (let ((.cse7 (select .cse6 4))) (let ((.cse0 (select |#memory_$Pointer$.offset| .cse2)) (.cse3 (select (select |#memory_$Pointer$.base| .cse7) 0)) (.cse1 (select (select |#memory_$Pointer$.offset| .cse7) 0)) (.cse4 (select |#memory_$Pointer$.offset| v_subst_2))) (and (not (= main_~null~0.base v_subst_2)) (= 0 main_~null~0.offset) (= 0 (select .cse0 0)) (= 0 .cse1) (= 0 (select .cse0 4)) (= .cse2 .cse3) (= .cse3 main_~end~0.base) (= (select .cse4 0) main_~null~0.offset) (= (select .cse5 0) main_~null~0.base) (= .cse1 main_~end~0.offset) (= (select .cse6 0) v_subst_2) (= 0 (select .cse4 4)) (not (= .cse7 v_subst_2)))))))) [2020-07-17 22:32:23,230 WARN L408 uantifierElimination]: ElimStorePlain result: ∃ [v_subst_2]. (let ((.cse3 (select |#memory_$Pointer$.base| v_subst_2))) (let ((.cse0 (select .cse3 4))) (let ((.cse4 (select |#memory_$Pointer$.base| .cse0))) (let ((.cse2 (select .cse4 4))) (let ((.cse1 (select (select |#memory_$Pointer$.base| .cse2) 0))) (and (not (= main_~null~0.base v_subst_2)) (= 0 main_~null~0.offset) (= 0 main_~end~0.offset) (= .cse0 .cse1) (= .cse1 main_~end~0.base) (not (= .cse2 v_subst_2)) (= (select .cse3 0) main_~null~0.base) (= (select .cse4 0) v_subst_2))))))) [2020-07-17 22:32:23,430 INFO L350 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2020-07-17 22:32:23,431 INFO L384 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 6 select indices, 6 select index equivalence classes, 2 disjoint index pairs (out of 15 index pairs), introduced 9 new quantified variables, introduced 14 case distinctions, treesize of input 85 treesize of output 86 [2020-07-17 22:32:23,447 INFO L501 QuantifierPusher]: Distributing 2 conjuncts over 5 disjuncts [2020-07-17 22:32:23,450 INFO L501 QuantifierPusher]: Distributing 2 conjuncts over 4 disjuncts [2020-07-17 22:32:23,453 INFO L501 QuantifierPusher]: Distributing 2 conjuncts over 3 disjuncts [2020-07-17 22:32:23,454 INFO L501 QuantifierPusher]: Distributing 2 conjuncts over 2 disjuncts [2020-07-17 22:32:23,459 INFO L501 QuantifierPusher]: Distributing 2 conjuncts over 3 disjuncts [2020-07-17 22:32:23,467 INFO L501 QuantifierPusher]: Distributing 2 conjuncts over 5 disjuncts [2020-07-17 22:32:23,470 INFO L501 QuantifierPusher]: Distributing 2 conjuncts over 4 disjuncts [2020-07-17 22:32:23,473 INFO L501 QuantifierPusher]: Distributing 2 conjuncts over 3 disjuncts [2020-07-17 22:32:23,481 INFO L501 QuantifierPusher]: Distributing 2 conjuncts over 4 disjuncts [2020-07-17 22:32:23,488 INFO L501 QuantifierPusher]: Distributing 2 conjuncts over 4 disjuncts [2020-07-17 22:32:23,497 INFO L501 QuantifierPusher]: Distributing 2 conjuncts over 3 disjuncts [2020-07-17 22:32:23,512 INFO L501 QuantifierPusher]: Distributing 2 conjuncts over 3 disjuncts [2020-07-17 22:32:23,518 INFO L501 QuantifierPusher]: Distributing 2 conjuncts over 2 disjuncts [2020-07-17 22:32:23,529 INFO L501 QuantifierPusher]: Distributing 2 conjuncts over 3 disjuncts [2020-07-17 22:32:23,532 INFO L544 ElimStorePlain]: Start of recursive call 2: End of recursive call: and 1 xjuncts. [2020-07-17 22:32:23,537 INFO L624 ElimStorePlain]: treesize reduction 0, result has 100.0 percent of original size [2020-07-17 22:32:23,538 INFO L544 ElimStorePlain]: Start of recursive call 1: 1 dim-0 vars, 1 dim-2 vars, End of recursive call: and 1 xjuncts. [2020-07-17 22:32:23,538 INFO L244 ElimStorePlain]: Needed 2 recursive calls to eliminate 2 variables, input treesize:89, output treesize:4 [2020-07-17 22:32:23,541 WARN L406 uantifierElimination]: Trying to double check SDD result, but SMT solver's response was UNKNOWN. [2020-07-17 22:32:23,542 WARN L407 uantifierElimination]: Input elimination task: ∃ [|#memory_$Pointer$.base|, v_subst_2]. (let ((.cse3 (select |#memory_$Pointer$.base| v_subst_2))) (let ((.cse1 (select .cse3 4))) (let ((.cse4 (select |#memory_$Pointer$.base| .cse1))) (let ((.cse2 (select .cse4 4))) (let ((.cse0 (select (select |#memory_$Pointer$.base| .cse2) 0))) (and (= (select (select |#memory_$Pointer$.base| .cse0) 0) main_~end~0.base) (not (= main_~null~0.base v_subst_2)) (not (= .cse0 main_~null~0.base)) (= .cse1 .cse0) (not (= .cse2 v_subst_2)) (= (select .cse3 0) main_~null~0.base) (= (select .cse4 0) v_subst_2))))))) [2020-07-17 22:32:23,542 WARN L408 uantifierElimination]: ElimStorePlain result: ∃ []. (not (= main_~null~0.base main_~end~0.base)) [2020-07-17 22:32:23,543 INFO L263 TraceCheckUtils]: 0: Hoare triple {2310#true} call ULTIMATE.init(); {2310#true} is VALID [2020-07-17 22:32:23,543 INFO L280 TraceCheckUtils]: 1: Hoare triple {2310#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier; {2310#true} is VALID [2020-07-17 22:32:23,544 INFO L280 TraceCheckUtils]: 2: Hoare triple {2310#true} assume true; {2310#true} is VALID [2020-07-17 22:32:23,544 INFO L275 TraceCheckUtils]: 3: Hoare quadruple {2310#true} {2310#true} #189#return; {2310#true} is VALID [2020-07-17 22:32:23,544 INFO L263 TraceCheckUtils]: 4: Hoare triple {2310#true} call #t~ret21 := main(); {2310#true} is VALID [2020-07-17 22:32:23,549 INFO L280 TraceCheckUtils]: 5: Hoare triple {2310#true} call #t~malloc0.base, #t~malloc0.offset := #Ultimate.allocOnHeap(12);~null~0.base, ~null~0.offset := #t~malloc0.base, #t~malloc0.offset;call write~$Pointer$(0, 0, ~null~0.base, ~null~0.offset, 4);call write~$Pointer$(0, 0, ~null~0.base, 4 + ~null~0.offset, 4);call write~int(~unnamed1~0~BLACK, ~null~0.base, 8 + ~null~0.offset, 4);call #t~malloc1.base, #t~malloc1.offset := #Ultimate.allocOnHeap(12);~list~0.base, ~list~0.offset := #t~malloc1.base, #t~malloc1.offset;call write~$Pointer$(~null~0.base, ~null~0.offset, ~list~0.base, ~list~0.offset, 4);call write~$Pointer$(~null~0.base, ~null~0.offset, ~list~0.base, 4 + ~list~0.offset, 4);call write~int(~unnamed1~0~BLACK, ~list~0.base, 8 + ~list~0.offset, 4);~end~0.base, ~end~0.offset := ~list~0.base, ~list~0.offset; {2341#(and (= main_~list~0.offset main_~end~0.offset) (= 0 main_~null~0.offset) (= 0 main_~list~0.offset) (= 1 (select |#valid| main_~list~0.base)) (= main_~list~0.base main_~end~0.base))} is VALID [2020-07-17 22:32:23,550 INFO L280 TraceCheckUtils]: 6: Hoare triple {2341#(and (= main_~list~0.offset main_~end~0.offset) (= 0 main_~null~0.offset) (= 0 main_~list~0.offset) (= 1 (select |#valid| main_~list~0.base)) (= main_~list~0.base main_~end~0.base))} assume -2147483648 <= #t~nondet2 && #t~nondet2 <= 2147483647; {2341#(and (= main_~list~0.offset main_~end~0.offset) (= 0 main_~null~0.offset) (= 0 main_~list~0.offset) (= 1 (select |#valid| main_~list~0.base)) (= main_~list~0.base main_~end~0.base))} is VALID [2020-07-17 22:32:23,554 INFO L280 TraceCheckUtils]: 7: Hoare triple {2341#(and (= main_~list~0.offset main_~end~0.offset) (= 0 main_~null~0.offset) (= 0 main_~list~0.offset) (= 1 (select |#valid| main_~list~0.base)) (= main_~list~0.base main_~end~0.base))} assume !!(0 != #t~nondet2);havoc #t~nondet2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.allocOnHeap(12);call write~$Pointer$(#t~malloc3.base, #t~malloc3.offset, ~end~0.base, ~end~0.offset, 4);call #t~mem4.base, #t~mem4.offset := read~$Pointer$(~end~0.base, ~end~0.offset, 4);call write~$Pointer$(~end~0.base, ~end~0.offset, #t~mem4.base, 4 + #t~mem4.offset, 4);havoc #t~mem4.base, #t~mem4.offset;call #t~mem5.base, #t~mem5.offset := read~$Pointer$(~end~0.base, ~end~0.offset, 4);~end~0.base, ~end~0.offset := #t~mem5.base, #t~mem5.offset;havoc #t~mem5.base, #t~mem5.offset;call write~$Pointer$(~null~0.base, ~null~0.offset, ~end~0.base, ~end~0.offset, 4);assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647; {2348#(and (= (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset) main_~null~0.base) (= 0 main_~null~0.offset) (= 0 (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= 0 main_~list~0.offset) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset) main_~null~0.offset) (= 1 (select |#valid| main_~list~0.base)) (= 0 main_~end~0.offset) (= main_~list~0.offset (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) 4)) (not (= main_~list~0.base (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) 4) main_~list~0.base) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) main_~end~0.base) (= 1 (select |#valid| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset))))} is VALID [2020-07-17 22:32:23,558 INFO L280 TraceCheckUtils]: 8: Hoare triple {2348#(and (= (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset) main_~null~0.base) (= 0 main_~null~0.offset) (= 0 (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= 0 main_~list~0.offset) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset) main_~null~0.offset) (= 1 (select |#valid| main_~list~0.base)) (= 0 main_~end~0.offset) (= main_~list~0.offset (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) 4)) (not (= main_~list~0.base (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) 4) main_~list~0.base) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) main_~end~0.base) (= 1 (select |#valid| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset))))} assume !(0 != #t~nondet6);havoc #t~nondet6;call write~int(~unnamed1~0~RED, ~end~0.base, 8 + ~end~0.offset, 4);call #t~malloc7.base, #t~malloc7.offset := #Ultimate.allocOnHeap(12);call write~$Pointer$(#t~malloc7.base, #t~malloc7.offset, ~end~0.base, ~end~0.offset, 4);call #t~mem8.base, #t~mem8.offset := read~$Pointer$(~end~0.base, ~end~0.offset, 4);call write~$Pointer$(~end~0.base, ~end~0.offset, #t~mem8.base, 4 + #t~mem8.offset, 4);havoc #t~mem8.base, #t~mem8.offset;call #t~mem9.base, #t~mem9.offset := read~$Pointer$(~end~0.base, ~end~0.offset, 4);~end~0.base, ~end~0.offset := #t~mem9.base, #t~mem9.offset;havoc #t~mem9.base, #t~mem9.offset;call write~$Pointer$(~null~0.base, ~null~0.offset, ~end~0.base, ~end~0.offset, 4);call write~int(~unnamed1~0~BLACK, ~end~0.base, 8 + ~end~0.offset, 4); {2352#(and (= (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset) main_~null~0.base) (= 0 (select (select |#memory_$Pointer$.offset| main_~end~0.base) 4)) (= 0 main_~null~0.offset) (= 0 main_~list~0.offset) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset) main_~null~0.offset) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 4) main_~list~0.base) (= 0 main_~end~0.offset) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 0) main_~end~0.base) (not (= main_~list~0.base main_~end~0.base)) (= 0 (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= 0 (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 0)) (= main_~list~0.offset (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 4)))} is VALID [2020-07-17 22:32:23,560 INFO L280 TraceCheckUtils]: 9: Hoare triple {2352#(and (= (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset) main_~null~0.base) (= 0 (select (select |#memory_$Pointer$.offset| main_~end~0.base) 4)) (= 0 main_~null~0.offset) (= 0 main_~list~0.offset) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset) main_~null~0.offset) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 4) main_~list~0.base) (= 0 main_~end~0.offset) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 0) main_~end~0.base) (not (= main_~list~0.base main_~end~0.base)) (= 0 (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= 0 (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 0)) (= main_~list~0.offset (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 4)))} call #t~mem10 := read~int(~end~0.base, 8 + ~end~0.offset, 4); {2352#(and (= (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset) main_~null~0.base) (= 0 (select (select |#memory_$Pointer$.offset| main_~end~0.base) 4)) (= 0 main_~null~0.offset) (= 0 main_~list~0.offset) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset) main_~null~0.offset) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 4) main_~list~0.base) (= 0 main_~end~0.offset) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 0) main_~end~0.base) (not (= main_~list~0.base main_~end~0.base)) (= 0 (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= 0 (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 0)) (= main_~list~0.offset (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 4)))} is VALID [2020-07-17 22:32:23,561 INFO L280 TraceCheckUtils]: 10: Hoare triple {2352#(and (= (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset) main_~null~0.base) (= 0 (select (select |#memory_$Pointer$.offset| main_~end~0.base) 4)) (= 0 main_~null~0.offset) (= 0 main_~list~0.offset) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset) main_~null~0.offset) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 4) main_~list~0.base) (= 0 main_~end~0.offset) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 0) main_~end~0.base) (not (= main_~list~0.base main_~end~0.base)) (= 0 (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= 0 (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 0)) (= main_~list~0.offset (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 4)))} assume !!(~unnamed1~0~BLACK == #t~mem10);havoc #t~mem10; {2352#(and (= (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset) main_~null~0.base) (= 0 (select (select |#memory_$Pointer$.offset| main_~end~0.base) 4)) (= 0 main_~null~0.offset) (= 0 main_~list~0.offset) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset) main_~null~0.offset) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 4) main_~list~0.base) (= 0 main_~end~0.offset) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 0) main_~end~0.base) (not (= main_~list~0.base main_~end~0.base)) (= 0 (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= 0 (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 0)) (= main_~list~0.offset (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 4)))} is VALID [2020-07-17 22:32:23,562 INFO L280 TraceCheckUtils]: 11: Hoare triple {2352#(and (= (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset) main_~null~0.base) (= 0 (select (select |#memory_$Pointer$.offset| main_~end~0.base) 4)) (= 0 main_~null~0.offset) (= 0 main_~list~0.offset) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset) main_~null~0.offset) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 4) main_~list~0.base) (= 0 main_~end~0.offset) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 0) main_~end~0.base) (not (= main_~list~0.base main_~end~0.base)) (= 0 (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= 0 (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 0)) (= main_~list~0.offset (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 4)))} goto; {2352#(and (= (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset) main_~null~0.base) (= 0 (select (select |#memory_$Pointer$.offset| main_~end~0.base) 4)) (= 0 main_~null~0.offset) (= 0 main_~list~0.offset) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset) main_~null~0.offset) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 4) main_~list~0.base) (= 0 main_~end~0.offset) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 0) main_~end~0.base) (not (= main_~list~0.base main_~end~0.base)) (= 0 (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= 0 (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 0)) (= main_~list~0.offset (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 4)))} is VALID [2020-07-17 22:32:23,564 INFO L280 TraceCheckUtils]: 12: Hoare triple {2352#(and (= (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset) main_~null~0.base) (= 0 (select (select |#memory_$Pointer$.offset| main_~end~0.base) 4)) (= 0 main_~null~0.offset) (= 0 main_~list~0.offset) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset) main_~null~0.offset) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 4) main_~list~0.base) (= 0 main_~end~0.offset) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 0) main_~end~0.base) (not (= main_~list~0.base main_~end~0.base)) (= 0 (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= 0 (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 0)) (= main_~list~0.offset (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 4)))} call #t~mem11.base, #t~mem11.offset := read~$Pointer$(~end~0.base, ~end~0.offset, 4); {2365#(and (= (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset) main_~null~0.base) (= 0 (select (select |#memory_$Pointer$.offset| main_~end~0.base) 4)) (= 0 main_~null~0.offset) (= 0 main_~list~0.offset) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset) main_~null~0.offset) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 4) main_~list~0.base) (= 0 main_~end~0.offset) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 0) main_~end~0.base) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset) |main_#t~mem11.offset|) (not (= main_~list~0.base main_~end~0.base)) (= 0 (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset) |main_#t~mem11.base|) (= 0 (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 0)) (= main_~list~0.offset (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 4)))} is VALID [2020-07-17 22:32:23,565 INFO L280 TraceCheckUtils]: 13: Hoare triple {2365#(and (= (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset) main_~null~0.base) (= 0 (select (select |#memory_$Pointer$.offset| main_~end~0.base) 4)) (= 0 main_~null~0.offset) (= 0 main_~list~0.offset) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset) main_~null~0.offset) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 4) main_~list~0.base) (= 0 main_~end~0.offset) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 0) main_~end~0.base) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset) |main_#t~mem11.offset|) (not (= main_~list~0.base main_~end~0.base)) (= 0 (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset) |main_#t~mem11.base|) (= 0 (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 0)) (= main_~list~0.offset (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 4)))} assume !!(~null~0.base == #t~mem11.base && ~null~0.offset == #t~mem11.offset);havoc #t~mem11.base, #t~mem11.offset; {2352#(and (= (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset) main_~null~0.base) (= 0 (select (select |#memory_$Pointer$.offset| main_~end~0.base) 4)) (= 0 main_~null~0.offset) (= 0 main_~list~0.offset) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset) main_~null~0.offset) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 4) main_~list~0.base) (= 0 main_~end~0.offset) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 0) main_~end~0.base) (not (= main_~list~0.base main_~end~0.base)) (= 0 (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= 0 (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 0)) (= main_~list~0.offset (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 4)))} is VALID [2020-07-17 22:32:23,567 INFO L280 TraceCheckUtils]: 14: Hoare triple {2352#(and (= (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset) main_~null~0.base) (= 0 (select (select |#memory_$Pointer$.offset| main_~end~0.base) 4)) (= 0 main_~null~0.offset) (= 0 main_~list~0.offset) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset) main_~null~0.offset) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 4) main_~list~0.base) (= 0 main_~end~0.offset) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 0) main_~end~0.base) (not (= main_~list~0.base main_~end~0.base)) (= 0 (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= 0 (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 0)) (= main_~list~0.offset (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 4)))} goto; {2352#(and (= (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset) main_~null~0.base) (= 0 (select (select |#memory_$Pointer$.offset| main_~end~0.base) 4)) (= 0 main_~null~0.offset) (= 0 main_~list~0.offset) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset) main_~null~0.offset) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 4) main_~list~0.base) (= 0 main_~end~0.offset) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 0) main_~end~0.base) (not (= main_~list~0.base main_~end~0.base)) (= 0 (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= 0 (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 0)) (= main_~list~0.offset (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 4)))} is VALID [2020-07-17 22:32:23,569 INFO L280 TraceCheckUtils]: 15: Hoare triple {2352#(and (= (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset) main_~null~0.base) (= 0 (select (select |#memory_$Pointer$.offset| main_~end~0.base) 4)) (= 0 main_~null~0.offset) (= 0 main_~list~0.offset) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset) main_~null~0.offset) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 4) main_~list~0.base) (= 0 main_~end~0.offset) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 0) main_~end~0.base) (not (= main_~list~0.base main_~end~0.base)) (= 0 (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= 0 (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 0)) (= main_~list~0.offset (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 4)))} assume !!(~null~0.base != ~end~0.base || ~null~0.offset != ~end~0.offset); {2375#(and (= 0 main_~null~0.offset) (= 0 (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= 0 main_~list~0.offset) (exists ((main_~end~0.base Int)) (and (= 0 (select (select |#memory_$Pointer$.offset| main_~end~0.base) 4)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) 0) main_~null~0.offset) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 0) main_~end~0.base) (not (= main_~list~0.base main_~end~0.base)) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 4) main_~list~0.base) (= 0 (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 0)) (= main_~list~0.offset (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 4)) (= (select (select |#memory_$Pointer$.base| main_~end~0.base) 0) main_~null~0.base) (not (= main_~null~0.base main_~end~0.base)))))} is VALID [2020-07-17 22:32:23,570 INFO L280 TraceCheckUtils]: 16: Hoare triple {2375#(and (= 0 main_~null~0.offset) (= 0 (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= 0 main_~list~0.offset) (exists ((main_~end~0.base Int)) (and (= 0 (select (select |#memory_$Pointer$.offset| main_~end~0.base) 4)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) 0) main_~null~0.offset) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 0) main_~end~0.base) (not (= main_~list~0.base main_~end~0.base)) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 4) main_~list~0.base) (= 0 (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 0)) (= main_~list~0.offset (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 4)) (= (select (select |#memory_$Pointer$.base| main_~end~0.base) 0) main_~null~0.base) (not (= main_~null~0.base main_~end~0.base)))))} goto; {2375#(and (= 0 main_~null~0.offset) (= 0 (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= 0 main_~list~0.offset) (exists ((main_~end~0.base Int)) (and (= 0 (select (select |#memory_$Pointer$.offset| main_~end~0.base) 4)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) 0) main_~null~0.offset) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 0) main_~end~0.base) (not (= main_~list~0.base main_~end~0.base)) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 4) main_~list~0.base) (= 0 (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 0)) (= main_~list~0.offset (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 4)) (= (select (select |#memory_$Pointer$.base| main_~end~0.base) 0) main_~null~0.base) (not (= main_~null~0.base main_~end~0.base)))))} is VALID [2020-07-17 22:32:23,572 INFO L280 TraceCheckUtils]: 17: Hoare triple {2375#(and (= 0 main_~null~0.offset) (= 0 (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= 0 main_~list~0.offset) (exists ((main_~end~0.base Int)) (and (= 0 (select (select |#memory_$Pointer$.offset| main_~end~0.base) 4)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) 0) main_~null~0.offset) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 0) main_~end~0.base) (not (= main_~list~0.base main_~end~0.base)) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 4) main_~list~0.base) (= 0 (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 0)) (= main_~list~0.offset (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 4)) (= (select (select |#memory_$Pointer$.base| main_~end~0.base) 0) main_~null~0.base) (not (= main_~null~0.base main_~end~0.base)))))} assume -2147483648 <= #t~nondet2 && #t~nondet2 <= 2147483647; {2375#(and (= 0 main_~null~0.offset) (= 0 (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= 0 main_~list~0.offset) (exists ((main_~end~0.base Int)) (and (= 0 (select (select |#memory_$Pointer$.offset| main_~end~0.base) 4)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) 0) main_~null~0.offset) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 0) main_~end~0.base) (not (= main_~list~0.base main_~end~0.base)) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 4) main_~list~0.base) (= 0 (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 0)) (= main_~list~0.offset (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 4)) (= (select (select |#memory_$Pointer$.base| main_~end~0.base) 0) main_~null~0.base) (not (= main_~null~0.base main_~end~0.base)))))} is VALID [2020-07-17 22:32:23,573 INFO L280 TraceCheckUtils]: 18: Hoare triple {2375#(and (= 0 main_~null~0.offset) (= 0 (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= 0 main_~list~0.offset) (exists ((main_~end~0.base Int)) (and (= 0 (select (select |#memory_$Pointer$.offset| main_~end~0.base) 4)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) 0) main_~null~0.offset) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 0) main_~end~0.base) (not (= main_~list~0.base main_~end~0.base)) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 4) main_~list~0.base) (= 0 (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 0)) (= main_~list~0.offset (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 4)) (= (select (select |#memory_$Pointer$.base| main_~end~0.base) 0) main_~null~0.base) (not (= main_~null~0.base main_~end~0.base)))))} assume !(0 != #t~nondet2);havoc #t~nondet2; {2375#(and (= 0 main_~null~0.offset) (= 0 (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= 0 main_~list~0.offset) (exists ((main_~end~0.base Int)) (and (= 0 (select (select |#memory_$Pointer$.offset| main_~end~0.base) 4)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) 0) main_~null~0.offset) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 0) main_~end~0.base) (not (= main_~list~0.base main_~end~0.base)) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 4) main_~list~0.base) (= 0 (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 0)) (= main_~list~0.offset (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 4)) (= (select (select |#memory_$Pointer$.base| main_~end~0.base) 0) main_~null~0.base) (not (= main_~null~0.base main_~end~0.base)))))} is VALID [2020-07-17 22:32:23,579 INFO L280 TraceCheckUtils]: 19: Hoare triple {2375#(and (= 0 main_~null~0.offset) (= 0 (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= 0 main_~list~0.offset) (exists ((main_~end~0.base Int)) (and (= 0 (select (select |#memory_$Pointer$.offset| main_~end~0.base) 4)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) 0) main_~null~0.offset) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 0) main_~end~0.base) (not (= main_~list~0.base main_~end~0.base)) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 4) main_~list~0.base) (= 0 (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 0)) (= main_~list~0.offset (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 4)) (= (select (select |#memory_$Pointer$.base| main_~end~0.base) 0) main_~null~0.base) (not (= main_~null~0.base main_~end~0.base)))))} ~end~0.base, ~end~0.offset := ~null~0.base, ~null~0.offset;~end~0.base, ~end~0.offset := ~list~0.base, ~list~0.offset; {2388#(and (= 0 main_~null~0.offset) (= 0 (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (exists ((v_subst_2 Int)) (and (not (= main_~null~0.base v_subst_2)) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| v_subst_2) 4)) 4) main_~end~0.base) (= 0 (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| v_subst_2) 4)) 0)) (not (= main_~end~0.base v_subst_2)) (= 0 (select (select |#memory_$Pointer$.offset| v_subst_2) 4)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| v_subst_2) 4)) 4) main_~end~0.offset) (= (select (select |#memory_$Pointer$.offset| v_subst_2) 0) main_~null~0.offset) (= (select (select |#memory_$Pointer$.base| v_subst_2) 0) main_~null~0.base) (= (select (select |#memory_$Pointer$.base| v_subst_2) 4) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| v_subst_2) 4)) 0) v_subst_2))) (= 0 main_~end~0.offset))} is VALID [2020-07-17 22:32:23,580 INFO L280 TraceCheckUtils]: 20: Hoare triple {2388#(and (= 0 main_~null~0.offset) (= 0 (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (exists ((v_subst_2 Int)) (and (not (= main_~null~0.base v_subst_2)) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| v_subst_2) 4)) 4) main_~end~0.base) (= 0 (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| v_subst_2) 4)) 0)) (not (= main_~end~0.base v_subst_2)) (= 0 (select (select |#memory_$Pointer$.offset| v_subst_2) 4)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| v_subst_2) 4)) 4) main_~end~0.offset) (= (select (select |#memory_$Pointer$.offset| v_subst_2) 0) main_~null~0.offset) (= (select (select |#memory_$Pointer$.base| v_subst_2) 0) main_~null~0.base) (= (select (select |#memory_$Pointer$.base| v_subst_2) 4) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| v_subst_2) 4)) 0) v_subst_2))) (= 0 main_~end~0.offset))} assume !!(~null~0.base != ~end~0.base || ~null~0.offset != ~end~0.offset); {2388#(and (= 0 main_~null~0.offset) (= 0 (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (exists ((v_subst_2 Int)) (and (not (= main_~null~0.base v_subst_2)) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| v_subst_2) 4)) 4) main_~end~0.base) (= 0 (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| v_subst_2) 4)) 0)) (not (= main_~end~0.base v_subst_2)) (= 0 (select (select |#memory_$Pointer$.offset| v_subst_2) 4)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| v_subst_2) 4)) 4) main_~end~0.offset) (= (select (select |#memory_$Pointer$.offset| v_subst_2) 0) main_~null~0.offset) (= (select (select |#memory_$Pointer$.base| v_subst_2) 0) main_~null~0.base) (= (select (select |#memory_$Pointer$.base| v_subst_2) 4) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| v_subst_2) 4)) 0) v_subst_2))) (= 0 main_~end~0.offset))} is VALID [2020-07-17 22:32:23,582 INFO L280 TraceCheckUtils]: 21: Hoare triple {2388#(and (= 0 main_~null~0.offset) (= 0 (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (exists ((v_subst_2 Int)) (and (not (= main_~null~0.base v_subst_2)) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| v_subst_2) 4)) 4) main_~end~0.base) (= 0 (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| v_subst_2) 4)) 0)) (not (= main_~end~0.base v_subst_2)) (= 0 (select (select |#memory_$Pointer$.offset| v_subst_2) 4)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| v_subst_2) 4)) 4) main_~end~0.offset) (= (select (select |#memory_$Pointer$.offset| v_subst_2) 0) main_~null~0.offset) (= (select (select |#memory_$Pointer$.base| v_subst_2) 0) main_~null~0.base) (= (select (select |#memory_$Pointer$.base| v_subst_2) 4) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| v_subst_2) 4)) 0) v_subst_2))) (= 0 main_~end~0.offset))} goto; {2388#(and (= 0 main_~null~0.offset) (= 0 (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (exists ((v_subst_2 Int)) (and (not (= main_~null~0.base v_subst_2)) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| v_subst_2) 4)) 4) main_~end~0.base) (= 0 (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| v_subst_2) 4)) 0)) (not (= main_~end~0.base v_subst_2)) (= 0 (select (select |#memory_$Pointer$.offset| v_subst_2) 4)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| v_subst_2) 4)) 4) main_~end~0.offset) (= (select (select |#memory_$Pointer$.offset| v_subst_2) 0) main_~null~0.offset) (= (select (select |#memory_$Pointer$.base| v_subst_2) 0) main_~null~0.base) (= (select (select |#memory_$Pointer$.base| v_subst_2) 4) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| v_subst_2) 4)) 0) v_subst_2))) (= 0 main_~end~0.offset))} is VALID [2020-07-17 22:32:23,583 INFO L280 TraceCheckUtils]: 22: Hoare triple {2388#(and (= 0 main_~null~0.offset) (= 0 (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (exists ((v_subst_2 Int)) (and (not (= main_~null~0.base v_subst_2)) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| v_subst_2) 4)) 4) main_~end~0.base) (= 0 (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| v_subst_2) 4)) 0)) (not (= main_~end~0.base v_subst_2)) (= 0 (select (select |#memory_$Pointer$.offset| v_subst_2) 4)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| v_subst_2) 4)) 4) main_~end~0.offset) (= (select (select |#memory_$Pointer$.offset| v_subst_2) 0) main_~null~0.offset) (= (select (select |#memory_$Pointer$.base| v_subst_2) 0) main_~null~0.base) (= (select (select |#memory_$Pointer$.base| v_subst_2) 4) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| v_subst_2) 4)) 0) v_subst_2))) (= 0 main_~end~0.offset))} call #t~mem12 := read~int(~end~0.base, 8 + ~end~0.offset, 4); {2388#(and (= 0 main_~null~0.offset) (= 0 (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (exists ((v_subst_2 Int)) (and (not (= main_~null~0.base v_subst_2)) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| v_subst_2) 4)) 4) main_~end~0.base) (= 0 (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| v_subst_2) 4)) 0)) (not (= main_~end~0.base v_subst_2)) (= 0 (select (select |#memory_$Pointer$.offset| v_subst_2) 4)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| v_subst_2) 4)) 4) main_~end~0.offset) (= (select (select |#memory_$Pointer$.offset| v_subst_2) 0) main_~null~0.offset) (= (select (select |#memory_$Pointer$.base| v_subst_2) 0) main_~null~0.base) (= (select (select |#memory_$Pointer$.base| v_subst_2) 4) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| v_subst_2) 4)) 0) v_subst_2))) (= 0 main_~end~0.offset))} is VALID [2020-07-17 22:32:23,584 INFO L280 TraceCheckUtils]: 23: Hoare triple {2388#(and (= 0 main_~null~0.offset) (= 0 (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (exists ((v_subst_2 Int)) (and (not (= main_~null~0.base v_subst_2)) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| v_subst_2) 4)) 4) main_~end~0.base) (= 0 (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| v_subst_2) 4)) 0)) (not (= main_~end~0.base v_subst_2)) (= 0 (select (select |#memory_$Pointer$.offset| v_subst_2) 4)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| v_subst_2) 4)) 4) main_~end~0.offset) (= (select (select |#memory_$Pointer$.offset| v_subst_2) 0) main_~null~0.offset) (= (select (select |#memory_$Pointer$.base| v_subst_2) 0) main_~null~0.base) (= (select (select |#memory_$Pointer$.base| v_subst_2) 4) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| v_subst_2) 4)) 0) v_subst_2))) (= 0 main_~end~0.offset))} assume !!(~unnamed1~0~BLACK == #t~mem12);havoc #t~mem12; {2388#(and (= 0 main_~null~0.offset) (= 0 (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (exists ((v_subst_2 Int)) (and (not (= main_~null~0.base v_subst_2)) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| v_subst_2) 4)) 4) main_~end~0.base) (= 0 (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| v_subst_2) 4)) 0)) (not (= main_~end~0.base v_subst_2)) (= 0 (select (select |#memory_$Pointer$.offset| v_subst_2) 4)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| v_subst_2) 4)) 4) main_~end~0.offset) (= (select (select |#memory_$Pointer$.offset| v_subst_2) 0) main_~null~0.offset) (= (select (select |#memory_$Pointer$.base| v_subst_2) 0) main_~null~0.base) (= (select (select |#memory_$Pointer$.base| v_subst_2) 4) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| v_subst_2) 4)) 0) v_subst_2))) (= 0 main_~end~0.offset))} is VALID [2020-07-17 22:32:23,586 INFO L280 TraceCheckUtils]: 24: Hoare triple {2388#(and (= 0 main_~null~0.offset) (= 0 (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (exists ((v_subst_2 Int)) (and (not (= main_~null~0.base v_subst_2)) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| v_subst_2) 4)) 4) main_~end~0.base) (= 0 (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| v_subst_2) 4)) 0)) (not (= main_~end~0.base v_subst_2)) (= 0 (select (select |#memory_$Pointer$.offset| v_subst_2) 4)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| v_subst_2) 4)) 4) main_~end~0.offset) (= (select (select |#memory_$Pointer$.offset| v_subst_2) 0) main_~null~0.offset) (= (select (select |#memory_$Pointer$.base| v_subst_2) 0) main_~null~0.base) (= (select (select |#memory_$Pointer$.base| v_subst_2) 4) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| v_subst_2) 4)) 0) v_subst_2))) (= 0 main_~end~0.offset))} goto; {2388#(and (= 0 main_~null~0.offset) (= 0 (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (exists ((v_subst_2 Int)) (and (not (= main_~null~0.base v_subst_2)) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| v_subst_2) 4)) 4) main_~end~0.base) (= 0 (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| v_subst_2) 4)) 0)) (not (= main_~end~0.base v_subst_2)) (= 0 (select (select |#memory_$Pointer$.offset| v_subst_2) 4)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| v_subst_2) 4)) 4) main_~end~0.offset) (= (select (select |#memory_$Pointer$.offset| v_subst_2) 0) main_~null~0.offset) (= (select (select |#memory_$Pointer$.base| v_subst_2) 0) main_~null~0.base) (= (select (select |#memory_$Pointer$.base| v_subst_2) 4) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| v_subst_2) 4)) 0) v_subst_2))) (= 0 main_~end~0.offset))} is VALID [2020-07-17 22:32:23,587 INFO L280 TraceCheckUtils]: 25: Hoare triple {2388#(and (= 0 main_~null~0.offset) (= 0 (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (exists ((v_subst_2 Int)) (and (not (= main_~null~0.base v_subst_2)) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| v_subst_2) 4)) 4) main_~end~0.base) (= 0 (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| v_subst_2) 4)) 0)) (not (= main_~end~0.base v_subst_2)) (= 0 (select (select |#memory_$Pointer$.offset| v_subst_2) 4)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| v_subst_2) 4)) 4) main_~end~0.offset) (= (select (select |#memory_$Pointer$.offset| v_subst_2) 0) main_~null~0.offset) (= (select (select |#memory_$Pointer$.base| v_subst_2) 0) main_~null~0.base) (= (select (select |#memory_$Pointer$.base| v_subst_2) 4) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| v_subst_2) 4)) 0) v_subst_2))) (= 0 main_~end~0.offset))} assume !!(~null~0.base != ~end~0.base || ~null~0.offset != ~end~0.offset);call #t~mem13 := read~int(~end~0.base, 8 + ~end~0.offset, 4); {2388#(and (= 0 main_~null~0.offset) (= 0 (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (exists ((v_subst_2 Int)) (and (not (= main_~null~0.base v_subst_2)) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| v_subst_2) 4)) 4) main_~end~0.base) (= 0 (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| v_subst_2) 4)) 0)) (not (= main_~end~0.base v_subst_2)) (= 0 (select (select |#memory_$Pointer$.offset| v_subst_2) 4)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| v_subst_2) 4)) 4) main_~end~0.offset) (= (select (select |#memory_$Pointer$.offset| v_subst_2) 0) main_~null~0.offset) (= (select (select |#memory_$Pointer$.base| v_subst_2) 0) main_~null~0.base) (= (select (select |#memory_$Pointer$.base| v_subst_2) 4) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| v_subst_2) 4)) 0) v_subst_2))) (= 0 main_~end~0.offset))} is VALID [2020-07-17 22:32:23,588 INFO L280 TraceCheckUtils]: 26: Hoare triple {2388#(and (= 0 main_~null~0.offset) (= 0 (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (exists ((v_subst_2 Int)) (and (not (= main_~null~0.base v_subst_2)) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| v_subst_2) 4)) 4) main_~end~0.base) (= 0 (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| v_subst_2) 4)) 0)) (not (= main_~end~0.base v_subst_2)) (= 0 (select (select |#memory_$Pointer$.offset| v_subst_2) 4)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| v_subst_2) 4)) 4) main_~end~0.offset) (= (select (select |#memory_$Pointer$.offset| v_subst_2) 0) main_~null~0.offset) (= (select (select |#memory_$Pointer$.base| v_subst_2) 0) main_~null~0.base) (= (select (select |#memory_$Pointer$.base| v_subst_2) 4) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| v_subst_2) 4)) 0) v_subst_2))) (= 0 main_~end~0.offset))} assume !(~unnamed1~0~RED == #t~mem13);havoc #t~mem13; {2388#(and (= 0 main_~null~0.offset) (= 0 (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (exists ((v_subst_2 Int)) (and (not (= main_~null~0.base v_subst_2)) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| v_subst_2) 4)) 4) main_~end~0.base) (= 0 (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| v_subst_2) 4)) 0)) (not (= main_~end~0.base v_subst_2)) (= 0 (select (select |#memory_$Pointer$.offset| v_subst_2) 4)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| v_subst_2) 4)) 4) main_~end~0.offset) (= (select (select |#memory_$Pointer$.offset| v_subst_2) 0) main_~null~0.offset) (= (select (select |#memory_$Pointer$.base| v_subst_2) 0) main_~null~0.base) (= (select (select |#memory_$Pointer$.base| v_subst_2) 4) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| v_subst_2) 4)) 0) v_subst_2))) (= 0 main_~end~0.offset))} is VALID [2020-07-17 22:32:23,591 INFO L280 TraceCheckUtils]: 27: Hoare triple {2388#(and (= 0 main_~null~0.offset) (= 0 (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (exists ((v_subst_2 Int)) (and (not (= main_~null~0.base v_subst_2)) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| v_subst_2) 4)) 4) main_~end~0.base) (= 0 (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| v_subst_2) 4)) 0)) (not (= main_~end~0.base v_subst_2)) (= 0 (select (select |#memory_$Pointer$.offset| v_subst_2) 4)) (= (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| v_subst_2) 4)) 4) main_~end~0.offset) (= (select (select |#memory_$Pointer$.offset| v_subst_2) 0) main_~null~0.offset) (= (select (select |#memory_$Pointer$.base| v_subst_2) 0) main_~null~0.base) (= (select (select |#memory_$Pointer$.base| v_subst_2) 4) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| v_subst_2) 4)) 0) v_subst_2))) (= 0 main_~end~0.offset))} call #t~mem16.base, #t~mem16.offset := read~$Pointer$(~end~0.base, ~end~0.offset, 4);~end~0.base, ~end~0.offset := #t~mem16.base, #t~mem16.offset;havoc #t~mem16.base, #t~mem16.offset; {2413#(and (= 0 main_~null~0.offset) (exists ((v_subst_2 Int)) (and (not (= main_~null~0.base v_subst_2)) (not (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| v_subst_2) 4)) 4) v_subst_2)) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| v_subst_2) 4)) 4)) 0) main_~end~0.base) (= (select (select |#memory_$Pointer$.base| v_subst_2) 4) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| v_subst_2) 4)) 4)) 0)) (= (select (select |#memory_$Pointer$.base| v_subst_2) 0) main_~null~0.base) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| v_subst_2) 4)) 0) v_subst_2))) (= 0 main_~end~0.offset))} is VALID [2020-07-17 22:32:23,592 INFO L280 TraceCheckUtils]: 28: Hoare triple {2413#(and (= 0 main_~null~0.offset) (exists ((v_subst_2 Int)) (and (not (= main_~null~0.base v_subst_2)) (not (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| v_subst_2) 4)) 4) v_subst_2)) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| v_subst_2) 4)) 4)) 0) main_~end~0.base) (= (select (select |#memory_$Pointer$.base| v_subst_2) 4) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| v_subst_2) 4)) 4)) 0)) (= (select (select |#memory_$Pointer$.base| v_subst_2) 0) main_~null~0.base) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| v_subst_2) 4)) 0) v_subst_2))) (= 0 main_~end~0.offset))} assume !!(~null~0.base != ~end~0.base || ~null~0.offset != ~end~0.offset);call #t~mem13 := read~int(~end~0.base, 8 + ~end~0.offset, 4); {2417#(and (exists ((v_subst_2 Int)) (and (not (= main_~null~0.base v_subst_2)) (not (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| v_subst_2) 4)) 4) v_subst_2)) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| v_subst_2) 4)) 4)) 0) main_~end~0.base) (= (select (select |#memory_$Pointer$.base| v_subst_2) 4) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| v_subst_2) 4)) 4)) 0)) (= (select (select |#memory_$Pointer$.base| v_subst_2) 0) main_~null~0.base) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| v_subst_2) 4)) 0) v_subst_2))) (= 0 main_~end~0.offset) (not (= main_~null~0.base main_~end~0.base)))} is VALID [2020-07-17 22:32:23,593 INFO L280 TraceCheckUtils]: 29: Hoare triple {2417#(and (exists ((v_subst_2 Int)) (and (not (= main_~null~0.base v_subst_2)) (not (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| v_subst_2) 4)) 4) v_subst_2)) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| v_subst_2) 4)) 4)) 0) main_~end~0.base) (= (select (select |#memory_$Pointer$.base| v_subst_2) 4) (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| v_subst_2) 4)) 4)) 0)) (= (select (select |#memory_$Pointer$.base| v_subst_2) 0) main_~null~0.base) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| v_subst_2) 4)) 0) v_subst_2))) (= 0 main_~end~0.offset) (not (= main_~null~0.base main_~end~0.base)))} assume ~unnamed1~0~RED == #t~mem13;havoc #t~mem13;call #t~mem14.base, #t~mem14.offset := read~$Pointer$(~end~0.base, ~end~0.offset, 4);~end~0.base, ~end~0.offset := #t~mem14.base, #t~mem14.offset;havoc #t~mem14.base, #t~mem14.offset; {2321#(not (= main_~null~0.base main_~end~0.base))} is VALID [2020-07-17 22:32:23,594 INFO L280 TraceCheckUtils]: 30: Hoare triple {2321#(not (= main_~null~0.base main_~end~0.base))} assume !(~null~0.base != ~end~0.base || ~null~0.offset != ~end~0.offset); {2311#false} is VALID [2020-07-17 22:32:23,594 INFO L280 TraceCheckUtils]: 31: Hoare triple {2311#false} assume !false; {2311#false} is VALID [2020-07-17 22:32:23,608 INFO L134 CoverageAnalysis]: Checked inductivity of 4 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-17 22:32:23,608 INFO L220 FreeRefinementEngine]: Constructing automaton from 0 perfect and 2 imperfect interpolant sequences. [2020-07-17 22:32:23,608 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [10, 11] total 18 [2020-07-17 22:32:23,609 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [83572440] [2020-07-17 22:32:23,610 INFO L78 Accepts]: Start accepts. Automaton has 18 states. Word has length 32 [2020-07-17 22:32:23,610 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-17 22:32:23,610 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 18 states. [2020-07-17 22:32:23,726 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 59 edges. 59 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-17 22:32:23,726 INFO L459 AbstractCegarLoop]: Interpolant automaton has 18 states [2020-07-17 22:32:23,727 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-17 22:32:23,727 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 18 interpolants. [2020-07-17 22:32:23,727 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=41, Invalid=265, Unknown=0, NotChecked=0, Total=306 [2020-07-17 22:32:23,728 INFO L87 Difference]: Start difference. First operand 39 states and 42 transitions. Second operand 18 states. [2020-07-17 22:32:28,711 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-17 22:32:28,711 INFO L93 Difference]: Finished difference Result 109 states and 120 transitions. [2020-07-17 22:32:28,712 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 18 states. [2020-07-17 22:32:28,712 INFO L78 Accepts]: Start accepts. Automaton has 18 states. Word has length 32 [2020-07-17 22:32:28,712 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-17 22:32:28,712 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 18 states. [2020-07-17 22:32:28,715 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 18 states to 18 states and 118 transitions. [2020-07-17 22:32:28,715 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 18 states. [2020-07-17 22:32:28,717 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 18 states to 18 states and 118 transitions. [2020-07-17 22:32:28,717 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 18 states and 118 transitions. [2020-07-17 22:32:28,986 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 118 edges. 118 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-17 22:32:28,989 INFO L225 Difference]: With dead ends: 109 [2020-07-17 22:32:28,989 INFO L226 Difference]: Without dead ends: 107 [2020-07-17 22:32:28,990 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 54 GetRequests, 26 SyntacticMatches, 0 SemanticMatches, 28 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 131 ImplicationChecksByTransitivity, 1.5s TimeCoverageRelationStatistics Valid=127, Invalid=743, Unknown=0, NotChecked=0, Total=870 [2020-07-17 22:32:28,990 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 107 states. [2020-07-17 22:32:29,077 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 107 to 73. [2020-07-17 22:32:29,078 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-17 22:32:29,078 INFO L82 GeneralOperation]: Start isEquivalent. First operand 107 states. Second operand 73 states. [2020-07-17 22:32:29,078 INFO L74 IsIncluded]: Start isIncluded. First operand 107 states. Second operand 73 states. [2020-07-17 22:32:29,078 INFO L87 Difference]: Start difference. First operand 107 states. Second operand 73 states. [2020-07-17 22:32:29,082 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-17 22:32:29,082 INFO L93 Difference]: Finished difference Result 107 states and 118 transitions. [2020-07-17 22:32:29,082 INFO L276 IsEmpty]: Start isEmpty. Operand 107 states and 118 transitions. [2020-07-17 22:32:29,083 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-17 22:32:29,083 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-17 22:32:29,083 INFO L74 IsIncluded]: Start isIncluded. First operand 73 states. Second operand 107 states. [2020-07-17 22:32:29,083 INFO L87 Difference]: Start difference. First operand 73 states. Second operand 107 states. [2020-07-17 22:32:29,086 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-17 22:32:29,086 INFO L93 Difference]: Finished difference Result 107 states and 118 transitions. [2020-07-17 22:32:29,087 INFO L276 IsEmpty]: Start isEmpty. Operand 107 states and 118 transitions. [2020-07-17 22:32:29,087 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-17 22:32:29,087 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-17 22:32:29,087 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-17 22:32:29,087 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-17 22:32:29,088 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 73 states. [2020-07-17 22:32:29,089 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 73 states to 73 states and 81 transitions. [2020-07-17 22:32:29,090 INFO L78 Accepts]: Start accepts. Automaton has 73 states and 81 transitions. Word has length 32 [2020-07-17 22:32:29,090 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-17 22:32:29,090 INFO L479 AbstractCegarLoop]: Abstraction has 73 states and 81 transitions. [2020-07-17 22:32:29,090 INFO L480 AbstractCegarLoop]: Interpolant automaton has 18 states. [2020-07-17 22:32:29,090 INFO L276 IsEmpty]: Start isEmpty. Operand 73 states and 81 transitions. [2020-07-17 22:32:29,091 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2020-07-17 22:32:29,091 INFO L414 BasicCegarLoop]: Found error trace [2020-07-17 22:32:29,092 INFO L422 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-17 22:32:29,320 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2020-07-17 22:32:29,321 INFO L427 AbstractCegarLoop]: === Iteration 11 === [mainErr4ASSERT_VIOLATIONERROR_FUNCTION, mainErr0ASSERT_VIOLATIONERROR_FUNCTION, mainErr2ASSERT_VIOLATIONERROR_FUNCTION, mainErr6ASSERT_VIOLATIONERROR_FUNCTION, mainErr5ASSERT_VIOLATIONERROR_FUNCTION, mainErr3ASSERT_VIOLATIONERROR_FUNCTION, mainErr1ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-17 22:32:29,321 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-17 22:32:29,322 INFO L82 PathProgramCache]: Analyzing trace with hash -243600310, now seen corresponding path program 1 times [2020-07-17 22:32:29,322 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-17 22:32:29,322 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1436957181] [2020-07-17 22:32:29,323 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-17 22:32:29,355 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-17 22:32:29,622 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-17 22:32:29,628 INFO L280 TraceCheckUtils]: 0: Hoare triple {2887#(and (= |#valid| |old(#valid)|) (= |#NULL.base| |old(#NULL.base)|) (= |#NULL.offset| |old(#NULL.offset)|))} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier; {2872#true} is VALID [2020-07-17 22:32:29,629 INFO L280 TraceCheckUtils]: 1: Hoare triple {2872#true} assume true; {2872#true} is VALID [2020-07-17 22:32:29,629 INFO L275 TraceCheckUtils]: 2: Hoare quadruple {2872#true} {2872#true} #189#return; {2872#true} is VALID [2020-07-17 22:32:29,631 INFO L263 TraceCheckUtils]: 0: Hoare triple {2872#true} call ULTIMATE.init(); {2887#(and (= |#valid| |old(#valid)|) (= |#NULL.base| |old(#NULL.base)|) (= |#NULL.offset| |old(#NULL.offset)|))} is VALID [2020-07-17 22:32:29,631 INFO L280 TraceCheckUtils]: 1: Hoare triple {2887#(and (= |#valid| |old(#valid)|) (= |#NULL.base| |old(#NULL.base)|) (= |#NULL.offset| |old(#NULL.offset)|))} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier; {2872#true} is VALID [2020-07-17 22:32:29,631 INFO L280 TraceCheckUtils]: 2: Hoare triple {2872#true} assume true; {2872#true} is VALID [2020-07-17 22:32:29,632 INFO L275 TraceCheckUtils]: 3: Hoare quadruple {2872#true} {2872#true} #189#return; {2872#true} is VALID [2020-07-17 22:32:29,632 INFO L263 TraceCheckUtils]: 4: Hoare triple {2872#true} call #t~ret21 := main(); {2872#true} is VALID [2020-07-17 22:32:29,635 INFO L280 TraceCheckUtils]: 5: Hoare triple {2872#true} call #t~malloc0.base, #t~malloc0.offset := #Ultimate.allocOnHeap(12);~null~0.base, ~null~0.offset := #t~malloc0.base, #t~malloc0.offset;call write~$Pointer$(0, 0, ~null~0.base, ~null~0.offset, 4);call write~$Pointer$(0, 0, ~null~0.base, 4 + ~null~0.offset, 4);call write~int(~unnamed1~0~BLACK, ~null~0.base, 8 + ~null~0.offset, 4);call #t~malloc1.base, #t~malloc1.offset := #Ultimate.allocOnHeap(12);~list~0.base, ~list~0.offset := #t~malloc1.base, #t~malloc1.offset;call write~$Pointer$(~null~0.base, ~null~0.offset, ~list~0.base, ~list~0.offset, 4);call write~$Pointer$(~null~0.base, ~null~0.offset, ~list~0.base, 4 + ~list~0.offset, 4);call write~int(~unnamed1~0~BLACK, ~list~0.base, 8 + ~list~0.offset, 4);~end~0.base, ~end~0.offset := ~list~0.base, ~list~0.offset; {2877#(and (= main_~list~0.offset main_~end~0.offset) (= 0 main_~null~0.offset) (= main_~list~0.base main_~end~0.base) (= 1 (select |#valid| main_~end~0.base)))} is VALID [2020-07-17 22:32:29,636 INFO L280 TraceCheckUtils]: 6: Hoare triple {2877#(and (= main_~list~0.offset main_~end~0.offset) (= 0 main_~null~0.offset) (= main_~list~0.base main_~end~0.base) (= 1 (select |#valid| main_~end~0.base)))} assume -2147483648 <= #t~nondet2 && #t~nondet2 <= 2147483647; {2877#(and (= main_~list~0.offset main_~end~0.offset) (= 0 main_~null~0.offset) (= main_~list~0.base main_~end~0.base) (= 1 (select |#valid| main_~end~0.base)))} is VALID [2020-07-17 22:32:29,638 INFO L280 TraceCheckUtils]: 7: Hoare triple {2877#(and (= main_~list~0.offset main_~end~0.offset) (= 0 main_~null~0.offset) (= main_~list~0.base main_~end~0.base) (= 1 (select |#valid| main_~end~0.base)))} assume !!(0 != #t~nondet2);havoc #t~nondet2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.allocOnHeap(12);call write~$Pointer$(#t~malloc3.base, #t~malloc3.offset, ~end~0.base, ~end~0.offset, 4);call #t~mem4.base, #t~mem4.offset := read~$Pointer$(~end~0.base, ~end~0.offset, 4);call write~$Pointer$(~end~0.base, ~end~0.offset, #t~mem4.base, 4 + #t~mem4.offset, 4);havoc #t~mem4.base, #t~mem4.offset;call #t~mem5.base, #t~mem5.offset := read~$Pointer$(~end~0.base, ~end~0.offset, 4);~end~0.base, ~end~0.offset := #t~mem5.base, #t~mem5.offset;havoc #t~mem5.base, #t~mem5.offset;call write~$Pointer$(~null~0.base, ~null~0.offset, ~end~0.base, ~end~0.offset, 4);assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647; {2878#(and (not (= main_~list~0.base main_~end~0.base)) (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset) main_~end~0.offset) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) main_~end~0.base))} is VALID [2020-07-17 22:32:29,640 INFO L280 TraceCheckUtils]: 8: Hoare triple {2878#(and (not (= main_~list~0.base main_~end~0.base)) (= (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset) main_~end~0.offset) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) main_~end~0.base))} assume 0 != #t~nondet6;havoc #t~nondet6;call write~int(~unnamed1~0~BLACK, ~end~0.base, 8 + ~end~0.offset, 4); {2879#(= ~unnamed1~0~BLACK (select (select |#memory_int| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (+ (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset) 8)))} is VALID [2020-07-17 22:32:29,641 INFO L280 TraceCheckUtils]: 9: Hoare triple {2879#(= ~unnamed1~0~BLACK (select (select |#memory_int| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (+ (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset) 8)))} call #t~mem10 := read~int(~end~0.base, 8 + ~end~0.offset, 4); {2879#(= ~unnamed1~0~BLACK (select (select |#memory_int| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (+ (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset) 8)))} is VALID [2020-07-17 22:32:29,641 INFO L280 TraceCheckUtils]: 10: Hoare triple {2879#(= ~unnamed1~0~BLACK (select (select |#memory_int| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (+ (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset) 8)))} assume !!(~unnamed1~0~BLACK == #t~mem10);havoc #t~mem10; {2879#(= ~unnamed1~0~BLACK (select (select |#memory_int| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (+ (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset) 8)))} is VALID [2020-07-17 22:32:29,642 INFO L280 TraceCheckUtils]: 11: Hoare triple {2879#(= ~unnamed1~0~BLACK (select (select |#memory_int| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (+ (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset) 8)))} goto; {2879#(= ~unnamed1~0~BLACK (select (select |#memory_int| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (+ (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset) 8)))} is VALID [2020-07-17 22:32:29,642 INFO L280 TraceCheckUtils]: 12: Hoare triple {2879#(= ~unnamed1~0~BLACK (select (select |#memory_int| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (+ (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset) 8)))} call #t~mem11.base, #t~mem11.offset := read~$Pointer$(~end~0.base, ~end~0.offset, 4); {2879#(= ~unnamed1~0~BLACK (select (select |#memory_int| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (+ (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset) 8)))} is VALID [2020-07-17 22:32:29,643 INFO L280 TraceCheckUtils]: 13: Hoare triple {2879#(= ~unnamed1~0~BLACK (select (select |#memory_int| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (+ (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset) 8)))} assume !!(~null~0.base == #t~mem11.base && ~null~0.offset == #t~mem11.offset);havoc #t~mem11.base, #t~mem11.offset; {2879#(= ~unnamed1~0~BLACK (select (select |#memory_int| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (+ (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset) 8)))} is VALID [2020-07-17 22:32:29,643 INFO L280 TraceCheckUtils]: 14: Hoare triple {2879#(= ~unnamed1~0~BLACK (select (select |#memory_int| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (+ (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset) 8)))} goto; {2879#(= ~unnamed1~0~BLACK (select (select |#memory_int| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (+ (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset) 8)))} is VALID [2020-07-17 22:32:29,644 INFO L280 TraceCheckUtils]: 15: Hoare triple {2879#(= ~unnamed1~0~BLACK (select (select |#memory_int| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (+ (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset) 8)))} assume !!(~null~0.base != ~end~0.base || ~null~0.offset != ~end~0.offset); {2879#(= ~unnamed1~0~BLACK (select (select |#memory_int| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (+ (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset) 8)))} is VALID [2020-07-17 22:32:29,644 INFO L280 TraceCheckUtils]: 16: Hoare triple {2879#(= ~unnamed1~0~BLACK (select (select |#memory_int| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (+ (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset) 8)))} goto; {2879#(= ~unnamed1~0~BLACK (select (select |#memory_int| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (+ (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset) 8)))} is VALID [2020-07-17 22:32:29,645 INFO L280 TraceCheckUtils]: 17: Hoare triple {2879#(= ~unnamed1~0~BLACK (select (select |#memory_int| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (+ (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset) 8)))} assume -2147483648 <= #t~nondet2 && #t~nondet2 <= 2147483647; {2879#(= ~unnamed1~0~BLACK (select (select |#memory_int| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (+ (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset) 8)))} is VALID [2020-07-17 22:32:29,645 INFO L280 TraceCheckUtils]: 18: Hoare triple {2879#(= ~unnamed1~0~BLACK (select (select |#memory_int| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (+ (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset) 8)))} assume !(0 != #t~nondet2);havoc #t~nondet2; {2879#(= ~unnamed1~0~BLACK (select (select |#memory_int| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (+ (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset) 8)))} is VALID [2020-07-17 22:32:29,646 INFO L280 TraceCheckUtils]: 19: Hoare triple {2879#(= ~unnamed1~0~BLACK (select (select |#memory_int| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (+ (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset) 8)))} ~end~0.base, ~end~0.offset := ~null~0.base, ~null~0.offset;~end~0.base, ~end~0.offset := ~list~0.base, ~list~0.offset; {2880#(= ~unnamed1~0~BLACK (select (select |#memory_int| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (+ (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset) 8)))} is VALID [2020-07-17 22:32:29,647 INFO L280 TraceCheckUtils]: 20: Hoare triple {2880#(= ~unnamed1~0~BLACK (select (select |#memory_int| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (+ (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset) 8)))} assume !!(~null~0.base != ~end~0.base || ~null~0.offset != ~end~0.offset); {2880#(= ~unnamed1~0~BLACK (select (select |#memory_int| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (+ (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset) 8)))} is VALID [2020-07-17 22:32:29,647 INFO L280 TraceCheckUtils]: 21: Hoare triple {2880#(= ~unnamed1~0~BLACK (select (select |#memory_int| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (+ (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset) 8)))} goto; {2880#(= ~unnamed1~0~BLACK (select (select |#memory_int| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (+ (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset) 8)))} is VALID [2020-07-17 22:32:29,648 INFO L280 TraceCheckUtils]: 22: Hoare triple {2880#(= ~unnamed1~0~BLACK (select (select |#memory_int| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (+ (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset) 8)))} call #t~mem12 := read~int(~end~0.base, 8 + ~end~0.offset, 4); {2881#(and (= ~unnamed1~0~BLACK (select (select |#memory_int| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (+ (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset) 8))) (= |main_#t~mem12| (select (select |#memory_int| main_~end~0.base) (+ main_~end~0.offset 8))))} is VALID [2020-07-17 22:32:29,649 INFO L280 TraceCheckUtils]: 23: Hoare triple {2881#(and (= ~unnamed1~0~BLACK (select (select |#memory_int| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (+ (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset) 8))) (= |main_#t~mem12| (select (select |#memory_int| main_~end~0.base) (+ main_~end~0.offset 8))))} assume !!(~unnamed1~0~BLACK == #t~mem12);havoc #t~mem12; {2882#(= (select (select |#memory_int| main_~end~0.base) (+ main_~end~0.offset 8)) (select (select |#memory_int| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (+ (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset) 8)))} is VALID [2020-07-17 22:32:29,649 INFO L280 TraceCheckUtils]: 24: Hoare triple {2882#(= (select (select |#memory_int| main_~end~0.base) (+ main_~end~0.offset 8)) (select (select |#memory_int| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (+ (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset) 8)))} goto; {2882#(= (select (select |#memory_int| main_~end~0.base) (+ main_~end~0.offset 8)) (select (select |#memory_int| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (+ (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset) 8)))} is VALID [2020-07-17 22:32:29,650 INFO L280 TraceCheckUtils]: 25: Hoare triple {2882#(= (select (select |#memory_int| main_~end~0.base) (+ main_~end~0.offset 8)) (select (select |#memory_int| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (+ (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset) 8)))} assume !!(~null~0.base != ~end~0.base || ~null~0.offset != ~end~0.offset);call #t~mem13 := read~int(~end~0.base, 8 + ~end~0.offset, 4); {2883#(= |main_#t~mem13| (select (select |#memory_int| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (+ (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset) 8)))} is VALID [2020-07-17 22:32:29,651 INFO L280 TraceCheckUtils]: 26: Hoare triple {2883#(= |main_#t~mem13| (select (select |#memory_int| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (+ (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset) 8)))} assume !(~unnamed1~0~RED == #t~mem13);havoc #t~mem13; {2884#(not (= ~unnamed1~0~RED (select (select |#memory_int| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (+ (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset) 8))))} is VALID [2020-07-17 22:32:29,651 INFO L280 TraceCheckUtils]: 27: Hoare triple {2884#(not (= ~unnamed1~0~RED (select (select |#memory_int| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (+ (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset) 8))))} call #t~mem16.base, #t~mem16.offset := read~$Pointer$(~end~0.base, ~end~0.offset, 4);~end~0.base, ~end~0.offset := #t~mem16.base, #t~mem16.offset;havoc #t~mem16.base, #t~mem16.offset; {2885#(not (= ~unnamed1~0~RED (select (select |#memory_int| main_~end~0.base) (+ main_~end~0.offset 8))))} is VALID [2020-07-17 22:32:29,652 INFO L280 TraceCheckUtils]: 28: Hoare triple {2885#(not (= ~unnamed1~0~RED (select (select |#memory_int| main_~end~0.base) (+ main_~end~0.offset 8))))} assume !!(~null~0.base != ~end~0.base || ~null~0.offset != ~end~0.offset);call #t~mem13 := read~int(~end~0.base, 8 + ~end~0.offset, 4); {2886#(not (= |main_#t~mem13| ~unnamed1~0~RED))} is VALID [2020-07-17 22:32:29,653 INFO L280 TraceCheckUtils]: 29: Hoare triple {2886#(not (= |main_#t~mem13| ~unnamed1~0~RED))} assume ~unnamed1~0~RED == #t~mem13;havoc #t~mem13;call #t~mem14.base, #t~mem14.offset := read~$Pointer$(~end~0.base, ~end~0.offset, 4);~end~0.base, ~end~0.offset := #t~mem14.base, #t~mem14.offset;havoc #t~mem14.base, #t~mem14.offset; {2873#false} is VALID [2020-07-17 22:32:29,653 INFO L280 TraceCheckUtils]: 30: Hoare triple {2873#false} assume !(~null~0.base != ~end~0.base || ~null~0.offset != ~end~0.offset); {2873#false} is VALID [2020-07-17 22:32:29,653 INFO L280 TraceCheckUtils]: 31: Hoare triple {2873#false} assume !false; {2873#false} is VALID [2020-07-17 22:32:29,658 INFO L134 CoverageAnalysis]: Checked inductivity of 4 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-17 22:32:29,658 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1436957181] [2020-07-17 22:32:29,658 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [566527173] [2020-07-17 22:32:29,658 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 Starting monitored process 5 with z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 5 with z3 -smt2 -in SMTLIB2_COMPLIANT=true [2020-07-17 22:32:29,761 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-17 22:32:29,763 INFO L264 TraceCheckSpWp]: Trace formula consists of 146 conjuncts, 37 conjunts are in the unsatisfiable core [2020-07-17 22:32:29,785 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-17 22:32:29,787 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2020-07-17 22:32:29,819 INFO L350 Elim1Store]: treesize reduction 15, result has 25.0 percent of original size [2020-07-17 22:32:29,820 INFO L384 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 9 treesize of output 11 [2020-07-17 22:32:29,820 INFO L544 ElimStorePlain]: Start of recursive call 2: End of recursive call: and 1 xjuncts. [2020-07-17 22:32:29,834 INFO L624 ElimStorePlain]: treesize reduction 0, result has 100.0 percent of original size [2020-07-17 22:32:29,835 INFO L544 ElimStorePlain]: Start of recursive call 1: 1 dim-0 vars, 1 dim-1 vars, End of recursive call: 1 dim-0 vars, and 1 xjuncts. [2020-07-17 22:32:29,835 INFO L244 ElimStorePlain]: Needed 2 recursive calls to eliminate 2 variables, input treesize:22, output treesize:23 [2020-07-17 22:32:29,839 WARN L406 uantifierElimination]: Trying to double check SDD result, but SMT solver's response was UNKNOWN. [2020-07-17 22:32:29,839 WARN L407 uantifierElimination]: Input elimination task: ∃ [|v_#valid_25|, |main_#t~malloc0.base|]. (and (= main_~list~0.offset main_~end~0.offset) (= 0 main_~null~0.offset) (= 0 main_~list~0.offset) (= main_~list~0.base main_~end~0.base) (= |#valid| (store (store |v_#valid_25| |main_#t~malloc0.base| 1) main_~list~0.base 1))) [2020-07-17 22:32:29,840 WARN L408 uantifierElimination]: ElimStorePlain result: ∃ [|main_#t~malloc0.base|]. (and (= main_~list~0.offset main_~end~0.offset) (= 0 main_~null~0.offset) (= 0 main_~list~0.offset) (= 1 (select |#valid| main_~list~0.base)) (= main_~list~0.base main_~end~0.base) (= 1 (select |#valid| |main_#t~malloc0.base|))) [2020-07-17 22:32:29,939 INFO L350 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2020-07-17 22:32:29,940 INFO L384 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 11 treesize of output 15 [2020-07-17 22:32:29,943 INFO L501 QuantifierPusher]: Distributing 2 conjuncts over 2 disjuncts [2020-07-17 22:32:29,943 INFO L544 ElimStorePlain]: Start of recursive call 2: End of recursive call: and 1 xjuncts. [2020-07-17 22:32:29,972 INFO L624 ElimStorePlain]: treesize reduction 0, result has 100.0 percent of original size [2020-07-17 22:32:29,980 INFO L190 IndexEqualityManager]: detected not equals via solver [2020-07-17 22:32:29,993 INFO L173 IndexEqualityManager]: detected equality via solver [2020-07-17 22:32:30,004 INFO L350 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2020-07-17 22:32:30,004 INFO L384 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 2 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 63 treesize of output 41 [2020-07-17 22:32:30,005 INFO L544 ElimStorePlain]: Start of recursive call 3: End of recursive call: and 1 xjuncts. [2020-07-17 22:32:30,056 INFO L624 ElimStorePlain]: treesize reduction 16, result has 88.4 percent of original size [2020-07-17 22:32:30,059 INFO L190 IndexEqualityManager]: detected not equals via solver [2020-07-17 22:32:30,082 INFO L350 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2020-07-17 22:32:30,083 INFO L384 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 63 treesize of output 41 [2020-07-17 22:32:30,084 INFO L544 ElimStorePlain]: Start of recursive call 4: End of recursive call: and 1 xjuncts. [2020-07-17 22:32:30,129 INFO L624 ElimStorePlain]: treesize reduction 16, result has 77.8 percent of original size [2020-07-17 22:32:30,131 INFO L544 ElimStorePlain]: Start of recursive call 1: 2 dim-0 vars, 1 dim-1 vars, 2 dim-2 vars, End of recursive call: and 1 xjuncts. [2020-07-17 22:32:30,132 INFO L244 ElimStorePlain]: Needed 4 recursive calls to eliminate 5 variables, input treesize:194, output treesize:58 [2020-07-17 22:32:30,145 WARN L406 uantifierElimination]: Trying to double check SDD result, but SMT solver's response was UNKNOWN. [2020-07-17 22:32:30,145 WARN L407 uantifierElimination]: Input elimination task: ∃ [|v_#memory_$Pointer$.base_35|, |main_#t~malloc3.base|, main_~null~0.base, |v_#valid_26|, |v_#memory_$Pointer$.offset_34|]. (let ((.cse1 (let ((.cse3 (store |v_#memory_$Pointer$.base_35| main_~list~0.base (store (select |v_#memory_$Pointer$.base_35| main_~list~0.base) main_~list~0.offset |main_#t~malloc3.base|)))) (store .cse3 |main_#t~malloc3.base| (store (select .cse3 |main_#t~malloc3.base|) 4 main_~list~0.base)))) (.cse0 (let ((.cse2 (store |v_#memory_$Pointer$.offset_34| main_~list~0.base (store (select |v_#memory_$Pointer$.offset_34| main_~list~0.base) main_~list~0.offset 0)))) (store .cse2 |main_#t~malloc3.base| (store (select .cse2 |main_#t~malloc3.base|) 4 main_~list~0.offset))))) (and (= 1 (select |v_#valid_26| main_~list~0.base)) (= 0 main_~list~0.offset) (= (store .cse0 main_~end~0.base (store (select .cse0 main_~end~0.base) main_~end~0.offset 0)) |#memory_$Pointer$.offset|) (= (select (select .cse1 main_~list~0.base) main_~list~0.offset) main_~end~0.base) (= |#memory_$Pointer$.base| (store .cse1 main_~end~0.base (store (select .cse1 main_~end~0.base) main_~end~0.offset main_~null~0.base))) (<= (select |v_#valid_26| |main_#t~malloc3.base|) 0) (= main_~end~0.offset (select (select .cse0 main_~list~0.base) main_~list~0.offset)))) [2020-07-17 22:32:30,145 WARN L408 uantifierElimination]: ElimStorePlain result: ∃ []. (let ((.cse0 (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset))) (and (= 0 (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= 0 main_~list~0.offset) (not (= main_~list~0.base .cse0)) (= main_~list~0.offset (select (select |#memory_$Pointer$.offset| .cse0) 4)) (= 0 main_~end~0.offset) (= 0 (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (= (select (select |#memory_$Pointer$.base| .cse0) 4) main_~list~0.base) (= .cse0 main_~end~0.base))) [2020-07-17 22:32:30,218 INFO L440 ElimStorePlain]: Different costs {0=[|v_#memory_int_44|], 4=[|v_#memory_$Pointer$.base_36|], 6=[|v_#memory_$Pointer$.offset_35|]} [2020-07-17 22:32:30,224 INFO L384 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 19 treesize of output 11 [2020-07-17 22:32:30,224 INFO L544 ElimStorePlain]: Start of recursive call 2: End of recursive call: and 1 xjuncts. [2020-07-17 22:32:30,248 INFO L624 ElimStorePlain]: treesize reduction 0, result has 100.0 percent of original size [2020-07-17 22:32:30,258 INFO L350 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2020-07-17 22:32:30,259 INFO L384 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 3 disjoint index pairs (out of 1 index pairs), introduced 3 new quantified variables, introduced 1 case distinctions, treesize of input 107 treesize of output 72 [2020-07-17 22:32:30,263 INFO L544 ElimStorePlain]: Start of recursive call 3: End of recursive call: and 1 xjuncts. [2020-07-17 22:32:30,284 INFO L624 ElimStorePlain]: treesize reduction 0, result has 100.0 percent of original size [2020-07-17 22:32:30,293 INFO L384 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 3 select indices, 3 select index equivalence classes, 4 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 0 case distinctions, treesize of input 57 treesize of output 39 [2020-07-17 22:32:30,297 INFO L544 ElimStorePlain]: Start of recursive call 4: End of recursive call: and 1 xjuncts. [2020-07-17 22:32:30,311 INFO L624 ElimStorePlain]: treesize reduction 0, result has 100.0 percent of original size [2020-07-17 22:32:30,312 INFO L544 ElimStorePlain]: Start of recursive call 1: 3 dim-2 vars, End of recursive call: and 1 xjuncts. [2020-07-17 22:32:30,312 INFO L244 ElimStorePlain]: Needed 4 recursive calls to eliminate 3 variables, input treesize:125, output treesize:63 [2020-07-17 22:32:31,738 INFO L440 ElimStorePlain]: Different costs {0=[|#memory_$Pointer$.base|], 1=[|#memory_$Pointer$.offset|]} [2020-07-17 22:32:31,742 INFO L350 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2020-07-17 22:32:31,743 INFO L384 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 3 new quantified variables, introduced 1 case distinctions, treesize of input 60 treesize of output 35 [2020-07-17 22:32:31,746 INFO L544 ElimStorePlain]: Start of recursive call 2: End of recursive call: and 1 xjuncts. [2020-07-17 22:32:31,757 INFO L624 ElimStorePlain]: treesize reduction 0, result has 100.0 percent of original size [2020-07-17 22:32:31,763 INFO L384 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 2 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 0 case distinctions, treesize of input 29 treesize of output 13 [2020-07-17 22:32:31,765 INFO L544 ElimStorePlain]: Start of recursive call 3: End of recursive call: and 1 xjuncts. [2020-07-17 22:32:31,771 INFO L624 ElimStorePlain]: treesize reduction 0, result has 100.0 percent of original size [2020-07-17 22:32:31,772 INFO L544 ElimStorePlain]: Start of recursive call 1: 1 dim-0 vars, 2 dim-2 vars, End of recursive call: and 1 xjuncts. [2020-07-17 22:32:31,773 INFO L244 ElimStorePlain]: Needed 3 recursive calls to eliminate 3 variables, input treesize:74, output treesize:11 [2020-07-17 22:32:31,775 WARN L406 uantifierElimination]: Trying to double check SDD result, but SMT solver's response was UNKNOWN. [2020-07-17 22:32:31,776 WARN L407 uantifierElimination]: Input elimination task: ∃ [|#memory_$Pointer$.offset|, v_main_~end~0.base_35, |#memory_$Pointer$.base|]. (let ((.cse1 (select (select |#memory_$Pointer$.base| v_main_~end~0.base_35) 0))) (let ((.cse2 (select |#memory_$Pointer$.offset| .cse1)) (.cse0 (select (select |#memory_$Pointer$.offset| v_main_~end~0.base_35) 0))) (and (= .cse0 main_~end~0.offset) (= ~unnamed1~0~BLACK (select (select |#memory_int| .cse1) 8)) (= v_main_~end~0.base_35 (select (select |#memory_$Pointer$.base| .cse1) 4)) (= .cse1 main_~end~0.base) (= 0 (select .cse2 4)) (= 0 (select .cse2 0)) (= 0 .cse0) (not (= v_main_~end~0.base_35 .cse1))))) [2020-07-17 22:32:31,776 WARN L408 uantifierElimination]: ElimStorePlain result: ∃ []. (and (= 0 main_~end~0.offset) (= ~unnamed1~0~BLACK (select (select |#memory_int| main_~end~0.base) 8))) [2020-07-17 22:32:31,813 INFO L384 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 7 [2020-07-17 22:32:31,817 INFO L544 ElimStorePlain]: Start of recursive call 2: End of recursive call: and 1 xjuncts. [2020-07-17 22:32:31,819 INFO L624 ElimStorePlain]: treesize reduction 0, result has 100.0 percent of original size [2020-07-17 22:32:31,819 INFO L544 ElimStorePlain]: Start of recursive call 1: 1 dim-0 vars, 1 dim-2 vars, End of recursive call: and 1 xjuncts. [2020-07-17 22:32:31,819 INFO L244 ElimStorePlain]: Needed 2 recursive calls to eliminate 2 variables, input treesize:15, output treesize:3 [2020-07-17 22:32:31,823 WARN L406 uantifierElimination]: Trying to double check SDD result, but SMT solver's response was UNKNOWN. [2020-07-17 22:32:31,824 WARN L407 uantifierElimination]: Input elimination task: ∃ [|#memory_int|, main_~end~0.base]. (let ((.cse0 (select (select |#memory_int| main_~end~0.base) 8))) (and (= ~unnamed1~0~BLACK .cse0) (<= .cse0 |main_#t~mem13|))) [2020-07-17 22:32:31,824 WARN L408 uantifierElimination]: ElimStorePlain result: ∃ []. (<= ~unnamed1~0~BLACK |main_#t~mem13|) [2020-07-17 22:32:31,855 INFO L263 TraceCheckUtils]: 0: Hoare triple {2872#true} call ULTIMATE.init(); {2872#true} is VALID [2020-07-17 22:32:31,855 INFO L280 TraceCheckUtils]: 1: Hoare triple {2872#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier; {2872#true} is VALID [2020-07-17 22:32:31,855 INFO L280 TraceCheckUtils]: 2: Hoare triple {2872#true} assume true; {2872#true} is VALID [2020-07-17 22:32:31,855 INFO L275 TraceCheckUtils]: 3: Hoare quadruple {2872#true} {2872#true} #189#return; {2872#true} is VALID [2020-07-17 22:32:31,856 INFO L263 TraceCheckUtils]: 4: Hoare triple {2872#true} call #t~ret21 := main(); {2872#true} is VALID [2020-07-17 22:32:31,858 INFO L280 TraceCheckUtils]: 5: Hoare triple {2872#true} call #t~malloc0.base, #t~malloc0.offset := #Ultimate.allocOnHeap(12);~null~0.base, ~null~0.offset := #t~malloc0.base, #t~malloc0.offset;call write~$Pointer$(0, 0, ~null~0.base, ~null~0.offset, 4);call write~$Pointer$(0, 0, ~null~0.base, 4 + ~null~0.offset, 4);call write~int(~unnamed1~0~BLACK, ~null~0.base, 8 + ~null~0.offset, 4);call #t~malloc1.base, #t~malloc1.offset := #Ultimate.allocOnHeap(12);~list~0.base, ~list~0.offset := #t~malloc1.base, #t~malloc1.offset;call write~$Pointer$(~null~0.base, ~null~0.offset, ~list~0.base, ~list~0.offset, 4);call write~$Pointer$(~null~0.base, ~null~0.offset, ~list~0.base, 4 + ~list~0.offset, 4);call write~int(~unnamed1~0~BLACK, ~list~0.base, 8 + ~list~0.offset, 4);~end~0.base, ~end~0.offset := ~list~0.base, ~list~0.offset; {2906#(and (= main_~list~0.offset main_~end~0.offset) (= 0 main_~null~0.offset) (= 0 main_~list~0.offset) (= 1 (select |#valid| main_~list~0.base)) (= main_~list~0.base main_~end~0.base))} is VALID [2020-07-17 22:32:31,859 INFO L280 TraceCheckUtils]: 6: Hoare triple {2906#(and (= main_~list~0.offset main_~end~0.offset) (= 0 main_~null~0.offset) (= 0 main_~list~0.offset) (= 1 (select |#valid| main_~list~0.base)) (= main_~list~0.base main_~end~0.base))} assume -2147483648 <= #t~nondet2 && #t~nondet2 <= 2147483647; {2906#(and (= main_~list~0.offset main_~end~0.offset) (= 0 main_~null~0.offset) (= 0 main_~list~0.offset) (= 1 (select |#valid| main_~list~0.base)) (= main_~list~0.base main_~end~0.base))} is VALID [2020-07-17 22:32:31,863 INFO L280 TraceCheckUtils]: 7: Hoare triple {2906#(and (= main_~list~0.offset main_~end~0.offset) (= 0 main_~null~0.offset) (= 0 main_~list~0.offset) (= 1 (select |#valid| main_~list~0.base)) (= main_~list~0.base main_~end~0.base))} assume !!(0 != #t~nondet2);havoc #t~nondet2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.allocOnHeap(12);call write~$Pointer$(#t~malloc3.base, #t~malloc3.offset, ~end~0.base, ~end~0.offset, 4);call #t~mem4.base, #t~mem4.offset := read~$Pointer$(~end~0.base, ~end~0.offset, 4);call write~$Pointer$(~end~0.base, ~end~0.offset, #t~mem4.base, 4 + #t~mem4.offset, 4);havoc #t~mem4.base, #t~mem4.offset;call #t~mem5.base, #t~mem5.offset := read~$Pointer$(~end~0.base, ~end~0.offset, 4);~end~0.base, ~end~0.offset := #t~mem5.base, #t~mem5.offset;havoc #t~mem5.base, #t~mem5.offset;call write~$Pointer$(~null~0.base, ~null~0.offset, ~end~0.base, ~end~0.offset, 4);assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647; {2913#(and (= 0 (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= 0 main_~list~0.offset) (= 0 (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (= 0 main_~end~0.offset) (= main_~list~0.offset (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) 4)) (not (= main_~list~0.base (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) 4) main_~list~0.base) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) main_~end~0.base))} is VALID [2020-07-17 22:32:31,865 INFO L280 TraceCheckUtils]: 8: Hoare triple {2913#(and (= 0 (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= 0 main_~list~0.offset) (= 0 (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (= 0 main_~end~0.offset) (= main_~list~0.offset (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) 4)) (not (= main_~list~0.base (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) 4) main_~list~0.base) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) main_~end~0.base))} assume 0 != #t~nondet6;havoc #t~nondet6;call write~int(~unnamed1~0~BLACK, ~end~0.base, 8 + ~end~0.offset, 4); {2917#(and (= 0 (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= ~unnamed1~0~BLACK (select (select |#memory_int| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) 8)) (= 0 main_~list~0.offset) (= main_~list~0.offset (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) 4)) (not (= main_~list~0.base (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) 4) main_~list~0.base) (= 0 (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) 0)))} is VALID [2020-07-17 22:32:31,866 INFO L280 TraceCheckUtils]: 9: Hoare triple {2917#(and (= 0 (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= ~unnamed1~0~BLACK (select (select |#memory_int| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) 8)) (= 0 main_~list~0.offset) (= main_~list~0.offset (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) 4)) (not (= main_~list~0.base (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) 4) main_~list~0.base) (= 0 (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) 0)))} call #t~mem10 := read~int(~end~0.base, 8 + ~end~0.offset, 4); {2917#(and (= 0 (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= ~unnamed1~0~BLACK (select (select |#memory_int| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) 8)) (= 0 main_~list~0.offset) (= main_~list~0.offset (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) 4)) (not (= main_~list~0.base (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) 4) main_~list~0.base) (= 0 (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) 0)))} is VALID [2020-07-17 22:32:31,866 INFO L280 TraceCheckUtils]: 10: Hoare triple {2917#(and (= 0 (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= ~unnamed1~0~BLACK (select (select |#memory_int| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) 8)) (= 0 main_~list~0.offset) (= main_~list~0.offset (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) 4)) (not (= main_~list~0.base (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) 4) main_~list~0.base) (= 0 (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) 0)))} assume !!(~unnamed1~0~BLACK == #t~mem10);havoc #t~mem10; {2917#(and (= 0 (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= ~unnamed1~0~BLACK (select (select |#memory_int| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) 8)) (= 0 main_~list~0.offset) (= main_~list~0.offset (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) 4)) (not (= main_~list~0.base (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) 4) main_~list~0.base) (= 0 (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) 0)))} is VALID [2020-07-17 22:32:31,867 INFO L280 TraceCheckUtils]: 11: Hoare triple {2917#(and (= 0 (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= ~unnamed1~0~BLACK (select (select |#memory_int| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) 8)) (= 0 main_~list~0.offset) (= main_~list~0.offset (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) 4)) (not (= main_~list~0.base (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) 4) main_~list~0.base) (= 0 (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) 0)))} goto; {2917#(and (= 0 (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= ~unnamed1~0~BLACK (select (select |#memory_int| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) 8)) (= 0 main_~list~0.offset) (= main_~list~0.offset (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) 4)) (not (= main_~list~0.base (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) 4) main_~list~0.base) (= 0 (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) 0)))} is VALID [2020-07-17 22:32:31,868 INFO L280 TraceCheckUtils]: 12: Hoare triple {2917#(and (= 0 (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= ~unnamed1~0~BLACK (select (select |#memory_int| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) 8)) (= 0 main_~list~0.offset) (= main_~list~0.offset (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) 4)) (not (= main_~list~0.base (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) 4) main_~list~0.base) (= 0 (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) 0)))} call #t~mem11.base, #t~mem11.offset := read~$Pointer$(~end~0.base, ~end~0.offset, 4); {2917#(and (= 0 (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= ~unnamed1~0~BLACK (select (select |#memory_int| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) 8)) (= 0 main_~list~0.offset) (= main_~list~0.offset (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) 4)) (not (= main_~list~0.base (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) 4) main_~list~0.base) (= 0 (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) 0)))} is VALID [2020-07-17 22:32:31,869 INFO L280 TraceCheckUtils]: 13: Hoare triple {2917#(and (= 0 (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= ~unnamed1~0~BLACK (select (select |#memory_int| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) 8)) (= 0 main_~list~0.offset) (= main_~list~0.offset (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) 4)) (not (= main_~list~0.base (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) 4) main_~list~0.base) (= 0 (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) 0)))} assume !!(~null~0.base == #t~mem11.base && ~null~0.offset == #t~mem11.offset);havoc #t~mem11.base, #t~mem11.offset; {2917#(and (= 0 (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= ~unnamed1~0~BLACK (select (select |#memory_int| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) 8)) (= 0 main_~list~0.offset) (= main_~list~0.offset (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) 4)) (not (= main_~list~0.base (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) 4) main_~list~0.base) (= 0 (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) 0)))} is VALID [2020-07-17 22:32:31,871 INFO L280 TraceCheckUtils]: 14: Hoare triple {2917#(and (= 0 (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= ~unnamed1~0~BLACK (select (select |#memory_int| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) 8)) (= 0 main_~list~0.offset) (= main_~list~0.offset (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) 4)) (not (= main_~list~0.base (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) 4) main_~list~0.base) (= 0 (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) 0)))} goto; {2917#(and (= 0 (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= ~unnamed1~0~BLACK (select (select |#memory_int| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) 8)) (= 0 main_~list~0.offset) (= main_~list~0.offset (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) 4)) (not (= main_~list~0.base (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) 4) main_~list~0.base) (= 0 (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) 0)))} is VALID [2020-07-17 22:32:31,872 INFO L280 TraceCheckUtils]: 15: Hoare triple {2917#(and (= 0 (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= ~unnamed1~0~BLACK (select (select |#memory_int| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) 8)) (= 0 main_~list~0.offset) (= main_~list~0.offset (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) 4)) (not (= main_~list~0.base (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) 4) main_~list~0.base) (= 0 (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) 0)))} assume !!(~null~0.base != ~end~0.base || ~null~0.offset != ~end~0.offset); {2917#(and (= 0 (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= ~unnamed1~0~BLACK (select (select |#memory_int| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) 8)) (= 0 main_~list~0.offset) (= main_~list~0.offset (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) 4)) (not (= main_~list~0.base (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) 4) main_~list~0.base) (= 0 (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) 0)))} is VALID [2020-07-17 22:32:31,873 INFO L280 TraceCheckUtils]: 16: Hoare triple {2917#(and (= 0 (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= ~unnamed1~0~BLACK (select (select |#memory_int| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) 8)) (= 0 main_~list~0.offset) (= main_~list~0.offset (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) 4)) (not (= main_~list~0.base (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) 4) main_~list~0.base) (= 0 (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) 0)))} goto; {2917#(and (= 0 (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= ~unnamed1~0~BLACK (select (select |#memory_int| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) 8)) (= 0 main_~list~0.offset) (= main_~list~0.offset (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) 4)) (not (= main_~list~0.base (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) 4) main_~list~0.base) (= 0 (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) 0)))} is VALID [2020-07-17 22:32:31,873 INFO L280 TraceCheckUtils]: 17: Hoare triple {2917#(and (= 0 (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= ~unnamed1~0~BLACK (select (select |#memory_int| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) 8)) (= 0 main_~list~0.offset) (= main_~list~0.offset (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) 4)) (not (= main_~list~0.base (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) 4) main_~list~0.base) (= 0 (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) 0)))} assume -2147483648 <= #t~nondet2 && #t~nondet2 <= 2147483647; {2917#(and (= 0 (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= ~unnamed1~0~BLACK (select (select |#memory_int| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) 8)) (= 0 main_~list~0.offset) (= main_~list~0.offset (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) 4)) (not (= main_~list~0.base (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) 4) main_~list~0.base) (= 0 (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) 0)))} is VALID [2020-07-17 22:32:31,874 INFO L280 TraceCheckUtils]: 18: Hoare triple {2917#(and (= 0 (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= ~unnamed1~0~BLACK (select (select |#memory_int| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) 8)) (= 0 main_~list~0.offset) (= main_~list~0.offset (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) 4)) (not (= main_~list~0.base (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) 4) main_~list~0.base) (= 0 (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) 0)))} assume !(0 != #t~nondet2);havoc #t~nondet2; {2917#(and (= 0 (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= ~unnamed1~0~BLACK (select (select |#memory_int| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) 8)) (= 0 main_~list~0.offset) (= main_~list~0.offset (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) 4)) (not (= main_~list~0.base (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) 4) main_~list~0.base) (= 0 (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) 0)))} is VALID [2020-07-17 22:32:31,875 INFO L280 TraceCheckUtils]: 19: Hoare triple {2917#(and (= 0 (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= ~unnamed1~0~BLACK (select (select |#memory_int| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) 8)) (= 0 main_~list~0.offset) (= main_~list~0.offset (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) 4)) (not (= main_~list~0.base (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) 4) main_~list~0.base) (= 0 (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) 0)))} ~end~0.base, ~end~0.offset := ~null~0.base, ~null~0.offset;~end~0.base, ~end~0.offset := ~list~0.base, ~list~0.offset; {2951#(and (= 0 (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) 0)) (= ~unnamed1~0~BLACK (select (select |#memory_int| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) 8)) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset) main_~end~0.base)) (= 0 (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (= 0 main_~end~0.offset) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) 4) main_~end~0.base) (= main_~end~0.offset (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) 4)))} is VALID [2020-07-17 22:32:31,876 INFO L280 TraceCheckUtils]: 20: Hoare triple {2951#(and (= 0 (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) 0)) (= ~unnamed1~0~BLACK (select (select |#memory_int| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) 8)) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset) main_~end~0.base)) (= 0 (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (= 0 main_~end~0.offset) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) 4) main_~end~0.base) (= main_~end~0.offset (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) 4)))} assume !!(~null~0.base != ~end~0.base || ~null~0.offset != ~end~0.offset); {2951#(and (= 0 (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) 0)) (= ~unnamed1~0~BLACK (select (select |#memory_int| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) 8)) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset) main_~end~0.base)) (= 0 (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (= 0 main_~end~0.offset) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) 4) main_~end~0.base) (= main_~end~0.offset (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) 4)))} is VALID [2020-07-17 22:32:31,877 INFO L280 TraceCheckUtils]: 21: Hoare triple {2951#(and (= 0 (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) 0)) (= ~unnamed1~0~BLACK (select (select |#memory_int| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) 8)) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset) main_~end~0.base)) (= 0 (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (= 0 main_~end~0.offset) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) 4) main_~end~0.base) (= main_~end~0.offset (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) 4)))} goto; {2951#(and (= 0 (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) 0)) (= ~unnamed1~0~BLACK (select (select |#memory_int| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) 8)) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset) main_~end~0.base)) (= 0 (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (= 0 main_~end~0.offset) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) 4) main_~end~0.base) (= main_~end~0.offset (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) 4)))} is VALID [2020-07-17 22:32:31,877 INFO L280 TraceCheckUtils]: 22: Hoare triple {2951#(and (= 0 (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) 0)) (= ~unnamed1~0~BLACK (select (select |#memory_int| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) 8)) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset) main_~end~0.base)) (= 0 (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (= 0 main_~end~0.offset) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) 4) main_~end~0.base) (= main_~end~0.offset (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) 4)))} call #t~mem12 := read~int(~end~0.base, 8 + ~end~0.offset, 4); {2951#(and (= 0 (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) 0)) (= ~unnamed1~0~BLACK (select (select |#memory_int| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) 8)) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset) main_~end~0.base)) (= 0 (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (= 0 main_~end~0.offset) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) 4) main_~end~0.base) (= main_~end~0.offset (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) 4)))} is VALID [2020-07-17 22:32:31,882 INFO L280 TraceCheckUtils]: 23: Hoare triple {2951#(and (= 0 (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) 0)) (= ~unnamed1~0~BLACK (select (select |#memory_int| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) 8)) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset) main_~end~0.base)) (= 0 (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (= 0 main_~end~0.offset) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) 4) main_~end~0.base) (= main_~end~0.offset (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) 4)))} assume !!(~unnamed1~0~BLACK == #t~mem12);havoc #t~mem12; {2951#(and (= 0 (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) 0)) (= ~unnamed1~0~BLACK (select (select |#memory_int| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) 8)) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset) main_~end~0.base)) (= 0 (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (= 0 main_~end~0.offset) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) 4) main_~end~0.base) (= main_~end~0.offset (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) 4)))} is VALID [2020-07-17 22:32:31,883 INFO L280 TraceCheckUtils]: 24: Hoare triple {2951#(and (= 0 (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) 0)) (= ~unnamed1~0~BLACK (select (select |#memory_int| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) 8)) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset) main_~end~0.base)) (= 0 (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (= 0 main_~end~0.offset) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) 4) main_~end~0.base) (= main_~end~0.offset (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) 4)))} goto; {2951#(and (= 0 (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) 0)) (= ~unnamed1~0~BLACK (select (select |#memory_int| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) 8)) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset) main_~end~0.base)) (= 0 (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (= 0 main_~end~0.offset) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) 4) main_~end~0.base) (= main_~end~0.offset (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) 4)))} is VALID [2020-07-17 22:32:31,884 INFO L280 TraceCheckUtils]: 25: Hoare triple {2951#(and (= 0 (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) 0)) (= ~unnamed1~0~BLACK (select (select |#memory_int| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) 8)) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset) main_~end~0.base)) (= 0 (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (= 0 main_~end~0.offset) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) 4) main_~end~0.base) (= main_~end~0.offset (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) 4)))} assume !!(~null~0.base != ~end~0.base || ~null~0.offset != ~end~0.offset);call #t~mem13 := read~int(~end~0.base, 8 + ~end~0.offset, 4); {2951#(and (= 0 (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) 0)) (= ~unnamed1~0~BLACK (select (select |#memory_int| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) 8)) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset) main_~end~0.base)) (= 0 (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (= 0 main_~end~0.offset) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) 4) main_~end~0.base) (= main_~end~0.offset (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) 4)))} is VALID [2020-07-17 22:32:31,885 INFO L280 TraceCheckUtils]: 26: Hoare triple {2951#(and (= 0 (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) 0)) (= ~unnamed1~0~BLACK (select (select |#memory_int| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) 8)) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset) main_~end~0.base)) (= 0 (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (= 0 main_~end~0.offset) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) 4) main_~end~0.base) (= main_~end~0.offset (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) 4)))} assume !(~unnamed1~0~RED == #t~mem13);havoc #t~mem13; {2951#(and (= 0 (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) 0)) (= ~unnamed1~0~BLACK (select (select |#memory_int| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) 8)) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset) main_~end~0.base)) (= 0 (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (= 0 main_~end~0.offset) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) 4) main_~end~0.base) (= main_~end~0.offset (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) 4)))} is VALID [2020-07-17 22:32:31,885 INFO L280 TraceCheckUtils]: 27: Hoare triple {2951#(and (= 0 (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) 0)) (= ~unnamed1~0~BLACK (select (select |#memory_int| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) 8)) (not (= (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset) main_~end~0.base)) (= 0 (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (= 0 main_~end~0.offset) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) 4) main_~end~0.base) (= main_~end~0.offset (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) 4)))} call #t~mem16.base, #t~mem16.offset := read~$Pointer$(~end~0.base, ~end~0.offset, 4);~end~0.base, ~end~0.offset := #t~mem16.base, #t~mem16.offset;havoc #t~mem16.base, #t~mem16.offset; {2976#(and (= 0 main_~end~0.offset) (= ~unnamed1~0~BLACK (select (select |#memory_int| main_~end~0.base) 8)))} is VALID [2020-07-17 22:32:31,886 INFO L280 TraceCheckUtils]: 28: Hoare triple {2976#(and (= 0 main_~end~0.offset) (= ~unnamed1~0~BLACK (select (select |#memory_int| main_~end~0.base) 8)))} assume !!(~null~0.base != ~end~0.base || ~null~0.offset != ~end~0.offset);call #t~mem13 := read~int(~end~0.base, 8 + ~end~0.offset, 4); {2980#(<= ~unnamed1~0~BLACK |main_#t~mem13|)} is VALID [2020-07-17 22:32:31,887 INFO L280 TraceCheckUtils]: 29: Hoare triple {2980#(<= ~unnamed1~0~BLACK |main_#t~mem13|)} assume ~unnamed1~0~RED == #t~mem13;havoc #t~mem13;call #t~mem14.base, #t~mem14.offset := read~$Pointer$(~end~0.base, ~end~0.offset, 4);~end~0.base, ~end~0.offset := #t~mem14.base, #t~mem14.offset;havoc #t~mem14.base, #t~mem14.offset; {2873#false} is VALID [2020-07-17 22:32:31,887 INFO L280 TraceCheckUtils]: 30: Hoare triple {2873#false} assume !(~null~0.base != ~end~0.base || ~null~0.offset != ~end~0.offset); {2873#false} is VALID [2020-07-17 22:32:31,887 INFO L280 TraceCheckUtils]: 31: Hoare triple {2873#false} assume !false; {2873#false} is VALID [2020-07-17 22:32:31,894 INFO L134 CoverageAnalysis]: Checked inductivity of 4 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-17 22:32:31,895 INFO L220 FreeRefinementEngine]: Constructing automaton from 0 perfect and 2 imperfect interpolant sequences. [2020-07-17 22:32:31,895 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [13, 8] total 19 [2020-07-17 22:32:31,895 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1990836157] [2020-07-17 22:32:31,895 INFO L78 Accepts]: Start accepts. Automaton has 19 states. Word has length 32 [2020-07-17 22:32:31,896 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-17 22:32:31,896 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 19 states. [2020-07-17 22:32:32,003 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 59 edges. 59 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-17 22:32:32,004 INFO L459 AbstractCegarLoop]: Interpolant automaton has 19 states [2020-07-17 22:32:32,004 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-17 22:32:32,004 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 19 interpolants. [2020-07-17 22:32:32,005 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=45, Invalid=297, Unknown=0, NotChecked=0, Total=342 [2020-07-17 22:32:32,005 INFO L87 Difference]: Start difference. First operand 73 states and 81 transitions. Second operand 19 states. [2020-07-17 22:32:35,324 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-17 22:32:35,325 INFO L93 Difference]: Finished difference Result 120 states and 132 transitions. [2020-07-17 22:32:35,325 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2020-07-17 22:32:35,325 INFO L78 Accepts]: Start accepts. Automaton has 19 states. Word has length 32 [2020-07-17 22:32:35,325 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-17 22:32:35,325 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 19 states. [2020-07-17 22:32:35,331 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15 states to 15 states and 104 transitions. [2020-07-17 22:32:35,331 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 19 states. [2020-07-17 22:32:35,333 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15 states to 15 states and 104 transitions. [2020-07-17 22:32:35,333 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 15 states and 104 transitions. [2020-07-17 22:32:35,493 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 104 edges. 104 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-17 22:32:35,495 INFO L225 Difference]: With dead ends: 120 [2020-07-17 22:32:35,495 INFO L226 Difference]: Without dead ends: 108 [2020-07-17 22:32:35,496 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 53 GetRequests, 27 SyntacticMatches, 1 SemanticMatches, 25 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 89 ImplicationChecksByTransitivity, 1.0s TimeCoverageRelationStatistics Valid=124, Invalid=578, Unknown=0, NotChecked=0, Total=702 [2020-07-17 22:32:35,497 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 108 states. [2020-07-17 22:32:35,617 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 108 to 82. [2020-07-17 22:32:35,618 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-17 22:32:35,618 INFO L82 GeneralOperation]: Start isEquivalent. First operand 108 states. Second operand 82 states. [2020-07-17 22:32:35,618 INFO L74 IsIncluded]: Start isIncluded. First operand 108 states. Second operand 82 states. [2020-07-17 22:32:35,618 INFO L87 Difference]: Start difference. First operand 108 states. Second operand 82 states. [2020-07-17 22:32:35,621 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-17 22:32:35,621 INFO L93 Difference]: Finished difference Result 108 states and 118 transitions. [2020-07-17 22:32:35,622 INFO L276 IsEmpty]: Start isEmpty. Operand 108 states and 118 transitions. [2020-07-17 22:32:35,622 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-17 22:32:35,622 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-17 22:32:35,622 INFO L74 IsIncluded]: Start isIncluded. First operand 82 states. Second operand 108 states. [2020-07-17 22:32:35,622 INFO L87 Difference]: Start difference. First operand 82 states. Second operand 108 states. [2020-07-17 22:32:35,625 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-17 22:32:35,625 INFO L93 Difference]: Finished difference Result 108 states and 118 transitions. [2020-07-17 22:32:35,625 INFO L276 IsEmpty]: Start isEmpty. Operand 108 states and 118 transitions. [2020-07-17 22:32:35,625 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-17 22:32:35,626 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-17 22:32:35,626 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-17 22:32:35,626 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-17 22:32:35,626 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 82 states. [2020-07-17 22:32:35,628 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 82 states to 82 states and 90 transitions. [2020-07-17 22:32:35,628 INFO L78 Accepts]: Start accepts. Automaton has 82 states and 90 transitions. Word has length 32 [2020-07-17 22:32:35,628 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-17 22:32:35,628 INFO L479 AbstractCegarLoop]: Abstraction has 82 states and 90 transitions. [2020-07-17 22:32:35,629 INFO L480 AbstractCegarLoop]: Interpolant automaton has 19 states. [2020-07-17 22:32:35,629 INFO L276 IsEmpty]: Start isEmpty. Operand 82 states and 90 transitions. [2020-07-17 22:32:35,629 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 36 [2020-07-17 22:32:35,629 INFO L414 BasicCegarLoop]: Found error trace [2020-07-17 22:32:35,630 INFO L422 BasicCegarLoop]: trace histogram [3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-17 22:32:35,842 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10,5 z3 -smt2 -in SMTLIB2_COMPLIANT=true [2020-07-17 22:32:35,843 INFO L427 AbstractCegarLoop]: === Iteration 12 === [mainErr4ASSERT_VIOLATIONERROR_FUNCTION, mainErr0ASSERT_VIOLATIONERROR_FUNCTION, mainErr2ASSERT_VIOLATIONERROR_FUNCTION, mainErr6ASSERT_VIOLATIONERROR_FUNCTION, mainErr5ASSERT_VIOLATIONERROR_FUNCTION, mainErr3ASSERT_VIOLATIONERROR_FUNCTION, mainErr1ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-17 22:32:35,843 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-17 22:32:35,843 INFO L82 PathProgramCache]: Analyzing trace with hash 145286649, now seen corresponding path program 2 times [2020-07-17 22:32:35,844 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-17 22:32:35,844 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [900281424] [2020-07-17 22:32:35,844 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-17 22:32:35,900 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-17 22:32:36,205 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-17 22:32:36,208 INFO L280 TraceCheckUtils]: 0: Hoare triple {3468#(and (= |#valid| |old(#valid)|) (= |#NULL.base| |old(#NULL.base)|) (= |#NULL.offset| |old(#NULL.offset)|))} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier; {3452#true} is VALID [2020-07-17 22:32:36,208 INFO L280 TraceCheckUtils]: 1: Hoare triple {3452#true} assume true; {3452#true} is VALID [2020-07-17 22:32:36,209 INFO L275 TraceCheckUtils]: 2: Hoare quadruple {3452#true} {3452#true} #189#return; {3452#true} is VALID [2020-07-17 22:32:36,209 INFO L263 TraceCheckUtils]: 0: Hoare triple {3452#true} call ULTIMATE.init(); {3468#(and (= |#valid| |old(#valid)|) (= |#NULL.base| |old(#NULL.base)|) (= |#NULL.offset| |old(#NULL.offset)|))} is VALID [2020-07-17 22:32:36,210 INFO L280 TraceCheckUtils]: 1: Hoare triple {3468#(and (= |#valid| |old(#valid)|) (= |#NULL.base| |old(#NULL.base)|) (= |#NULL.offset| |old(#NULL.offset)|))} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier; {3452#true} is VALID [2020-07-17 22:32:36,210 INFO L280 TraceCheckUtils]: 2: Hoare triple {3452#true} assume true; {3452#true} is VALID [2020-07-17 22:32:36,210 INFO L275 TraceCheckUtils]: 3: Hoare quadruple {3452#true} {3452#true} #189#return; {3452#true} is VALID [2020-07-17 22:32:36,211 INFO L263 TraceCheckUtils]: 4: Hoare triple {3452#true} call #t~ret21 := main(); {3452#true} is VALID [2020-07-17 22:32:36,214 INFO L280 TraceCheckUtils]: 5: Hoare triple {3452#true} call #t~malloc0.base, #t~malloc0.offset := #Ultimate.allocOnHeap(12);~null~0.base, ~null~0.offset := #t~malloc0.base, #t~malloc0.offset;call write~$Pointer$(0, 0, ~null~0.base, ~null~0.offset, 4);call write~$Pointer$(0, 0, ~null~0.base, 4 + ~null~0.offset, 4);call write~int(~unnamed1~0~BLACK, ~null~0.base, 8 + ~null~0.offset, 4);call #t~malloc1.base, #t~malloc1.offset := #Ultimate.allocOnHeap(12);~list~0.base, ~list~0.offset := #t~malloc1.base, #t~malloc1.offset;call write~$Pointer$(~null~0.base, ~null~0.offset, ~list~0.base, ~list~0.offset, 4);call write~$Pointer$(~null~0.base, ~null~0.offset, ~list~0.base, 4 + ~list~0.offset, 4);call write~int(~unnamed1~0~BLACK, ~list~0.base, 8 + ~list~0.offset, 4);~end~0.base, ~end~0.offset := ~list~0.base, ~list~0.offset; {3457#(and (= main_~list~0.offset main_~end~0.offset) (= 0 main_~null~0.offset) (= main_~list~0.base main_~end~0.base) (= 1 (select |#valid| main_~end~0.base)))} is VALID [2020-07-17 22:32:36,215 INFO L280 TraceCheckUtils]: 6: Hoare triple {3457#(and (= main_~list~0.offset main_~end~0.offset) (= 0 main_~null~0.offset) (= main_~list~0.base main_~end~0.base) (= 1 (select |#valid| main_~end~0.base)))} assume -2147483648 <= #t~nondet2 && #t~nondet2 <= 2147483647; {3457#(and (= main_~list~0.offset main_~end~0.offset) (= 0 main_~null~0.offset) (= main_~list~0.base main_~end~0.base) (= 1 (select |#valid| main_~end~0.base)))} is VALID [2020-07-17 22:32:36,217 INFO L280 TraceCheckUtils]: 7: Hoare triple {3457#(and (= main_~list~0.offset main_~end~0.offset) (= 0 main_~null~0.offset) (= main_~list~0.base main_~end~0.base) (= 1 (select |#valid| main_~end~0.base)))} assume !!(0 != #t~nondet2);havoc #t~nondet2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.allocOnHeap(12);call write~$Pointer$(#t~malloc3.base, #t~malloc3.offset, ~end~0.base, ~end~0.offset, 4);call #t~mem4.base, #t~mem4.offset := read~$Pointer$(~end~0.base, ~end~0.offset, 4);call write~$Pointer$(~end~0.base, ~end~0.offset, #t~mem4.base, 4 + #t~mem4.offset, 4);havoc #t~mem4.base, #t~mem4.offset;call #t~mem5.base, #t~mem5.offset := read~$Pointer$(~end~0.base, ~end~0.offset, 4);~end~0.base, ~end~0.offset := #t~mem5.base, #t~mem5.offset;havoc #t~mem5.base, #t~mem5.offset;call write~$Pointer$(~null~0.base, ~null~0.offset, ~end~0.base, ~end~0.offset, 4);assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647; {3458#(and (= 0 main_~null~0.offset) (not (= main_~list~0.base main_~end~0.base)) (= 1 (select |#valid| main_~list~0.base)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) main_~end~0.base) (= 1 (select |#valid| main_~end~0.base)) (= main_~end~0.offset (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)))} is VALID [2020-07-17 22:32:36,222 INFO L280 TraceCheckUtils]: 8: Hoare triple {3458#(and (= 0 main_~null~0.offset) (not (= main_~list~0.base main_~end~0.base)) (= 1 (select |#valid| main_~list~0.base)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) main_~end~0.base) (= 1 (select |#valid| main_~end~0.base)) (= main_~end~0.offset (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)))} assume !(0 != #t~nondet6);havoc #t~nondet6;call write~int(~unnamed1~0~RED, ~end~0.base, 8 + ~end~0.offset, 4);call #t~malloc7.base, #t~malloc7.offset := #Ultimate.allocOnHeap(12);call write~$Pointer$(#t~malloc7.base, #t~malloc7.offset, ~end~0.base, ~end~0.offset, 4);call #t~mem8.base, #t~mem8.offset := read~$Pointer$(~end~0.base, ~end~0.offset, 4);call write~$Pointer$(~end~0.base, ~end~0.offset, #t~mem8.base, 4 + #t~mem8.offset, 4);havoc #t~mem8.base, #t~mem8.offset;call #t~mem9.base, #t~mem9.offset := read~$Pointer$(~end~0.base, ~end~0.offset, 4);~end~0.base, ~end~0.offset := #t~mem9.base, #t~mem9.offset;havoc #t~mem9.base, #t~mem9.offset;call write~$Pointer$(~null~0.base, ~null~0.offset, ~end~0.base, ~end~0.offset, 4);call write~int(~unnamed1~0~BLACK, ~end~0.base, 8 + ~end~0.offset, 4); {3459#(= ~unnamed1~0~BLACK (select (select |#memory_int| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset))) (+ (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) 8)))} is VALID [2020-07-17 22:32:36,223 INFO L280 TraceCheckUtils]: 9: Hoare triple {3459#(= ~unnamed1~0~BLACK (select (select |#memory_int| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset))) (+ (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) 8)))} call #t~mem10 := read~int(~end~0.base, 8 + ~end~0.offset, 4); {3459#(= ~unnamed1~0~BLACK (select (select |#memory_int| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset))) (+ (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) 8)))} is VALID [2020-07-17 22:32:36,223 INFO L280 TraceCheckUtils]: 10: Hoare triple {3459#(= ~unnamed1~0~BLACK (select (select |#memory_int| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset))) (+ (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) 8)))} assume !!(~unnamed1~0~BLACK == #t~mem10);havoc #t~mem10; {3459#(= ~unnamed1~0~BLACK (select (select |#memory_int| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset))) (+ (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) 8)))} is VALID [2020-07-17 22:32:36,224 INFO L280 TraceCheckUtils]: 11: Hoare triple {3459#(= ~unnamed1~0~BLACK (select (select |#memory_int| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset))) (+ (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) 8)))} goto; {3459#(= ~unnamed1~0~BLACK (select (select |#memory_int| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset))) (+ (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) 8)))} is VALID [2020-07-17 22:32:36,224 INFO L280 TraceCheckUtils]: 12: Hoare triple {3459#(= ~unnamed1~0~BLACK (select (select |#memory_int| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset))) (+ (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) 8)))} call #t~mem11.base, #t~mem11.offset := read~$Pointer$(~end~0.base, ~end~0.offset, 4); {3459#(= ~unnamed1~0~BLACK (select (select |#memory_int| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset))) (+ (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) 8)))} is VALID [2020-07-17 22:32:36,225 INFO L280 TraceCheckUtils]: 13: Hoare triple {3459#(= ~unnamed1~0~BLACK (select (select |#memory_int| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset))) (+ (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) 8)))} assume !!(~null~0.base == #t~mem11.base && ~null~0.offset == #t~mem11.offset);havoc #t~mem11.base, #t~mem11.offset; {3459#(= ~unnamed1~0~BLACK (select (select |#memory_int| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset))) (+ (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) 8)))} is VALID [2020-07-17 22:32:36,226 INFO L280 TraceCheckUtils]: 14: Hoare triple {3459#(= ~unnamed1~0~BLACK (select (select |#memory_int| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset))) (+ (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) 8)))} goto; {3459#(= ~unnamed1~0~BLACK (select (select |#memory_int| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset))) (+ (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) 8)))} is VALID [2020-07-17 22:32:36,226 INFO L280 TraceCheckUtils]: 15: Hoare triple {3459#(= ~unnamed1~0~BLACK (select (select |#memory_int| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset))) (+ (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) 8)))} assume !!(~null~0.base != ~end~0.base || ~null~0.offset != ~end~0.offset); {3459#(= ~unnamed1~0~BLACK (select (select |#memory_int| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset))) (+ (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) 8)))} is VALID [2020-07-17 22:32:36,227 INFO L280 TraceCheckUtils]: 16: Hoare triple {3459#(= ~unnamed1~0~BLACK (select (select |#memory_int| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset))) (+ (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) 8)))} goto; {3459#(= ~unnamed1~0~BLACK (select (select |#memory_int| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset))) (+ (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) 8)))} is VALID [2020-07-17 22:32:36,227 INFO L280 TraceCheckUtils]: 17: Hoare triple {3459#(= ~unnamed1~0~BLACK (select (select |#memory_int| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset))) (+ (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) 8)))} assume -2147483648 <= #t~nondet2 && #t~nondet2 <= 2147483647; {3459#(= ~unnamed1~0~BLACK (select (select |#memory_int| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset))) (+ (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) 8)))} is VALID [2020-07-17 22:32:36,228 INFO L280 TraceCheckUtils]: 18: Hoare triple {3459#(= ~unnamed1~0~BLACK (select (select |#memory_int| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset))) (+ (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) 8)))} assume !(0 != #t~nondet2);havoc #t~nondet2; {3459#(= ~unnamed1~0~BLACK (select (select |#memory_int| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset))) (+ (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) 8)))} is VALID [2020-07-17 22:32:36,229 INFO L280 TraceCheckUtils]: 19: Hoare triple {3459#(= ~unnamed1~0~BLACK (select (select |#memory_int| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset))) (+ (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) 8)))} ~end~0.base, ~end~0.offset := ~null~0.base, ~null~0.offset;~end~0.base, ~end~0.offset := ~list~0.base, ~list~0.offset; {3460#(= ~unnamed1~0~BLACK (select (select |#memory_int| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset))) (+ (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) 8)))} is VALID [2020-07-17 22:32:36,229 INFO L280 TraceCheckUtils]: 20: Hoare triple {3460#(= ~unnamed1~0~BLACK (select (select |#memory_int| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset))) (+ (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) 8)))} assume !!(~null~0.base != ~end~0.base || ~null~0.offset != ~end~0.offset); {3460#(= ~unnamed1~0~BLACK (select (select |#memory_int| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset))) (+ (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) 8)))} is VALID [2020-07-17 22:32:36,230 INFO L280 TraceCheckUtils]: 21: Hoare triple {3460#(= ~unnamed1~0~BLACK (select (select |#memory_int| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset))) (+ (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) 8)))} goto; {3460#(= ~unnamed1~0~BLACK (select (select |#memory_int| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset))) (+ (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) 8)))} is VALID [2020-07-17 22:32:36,231 INFO L280 TraceCheckUtils]: 22: Hoare triple {3460#(= ~unnamed1~0~BLACK (select (select |#memory_int| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset))) (+ (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) 8)))} call #t~mem12 := read~int(~end~0.base, 8 + ~end~0.offset, 4); {3461#(and (= ~unnamed1~0~BLACK (select (select |#memory_int| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset))) (+ (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) 8))) (= |main_#t~mem12| (select (select |#memory_int| main_~end~0.base) (+ main_~end~0.offset 8))))} is VALID [2020-07-17 22:32:36,232 INFO L280 TraceCheckUtils]: 23: Hoare triple {3461#(and (= ~unnamed1~0~BLACK (select (select |#memory_int| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset))) (+ (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) 8))) (= |main_#t~mem12| (select (select |#memory_int| main_~end~0.base) (+ main_~end~0.offset 8))))} assume !!(~unnamed1~0~BLACK == #t~mem12);havoc #t~mem12; {3462#(= (select (select |#memory_int| main_~end~0.base) (+ main_~end~0.offset 8)) (select (select |#memory_int| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset))) (+ (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) 8)))} is VALID [2020-07-17 22:32:36,235 INFO L280 TraceCheckUtils]: 24: Hoare triple {3462#(= (select (select |#memory_int| main_~end~0.base) (+ main_~end~0.offset 8)) (select (select |#memory_int| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset))) (+ (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) 8)))} goto; {3462#(= (select (select |#memory_int| main_~end~0.base) (+ main_~end~0.offset 8)) (select (select |#memory_int| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset))) (+ (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) 8)))} is VALID [2020-07-17 22:32:36,236 INFO L280 TraceCheckUtils]: 25: Hoare triple {3462#(= (select (select |#memory_int| main_~end~0.base) (+ main_~end~0.offset 8)) (select (select |#memory_int| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset))) (+ (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) 8)))} assume !!(~null~0.base != ~end~0.base || ~null~0.offset != ~end~0.offset);call #t~mem13 := read~int(~end~0.base, 8 + ~end~0.offset, 4); {3463#(= |main_#t~mem13| (select (select |#memory_int| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset))) (+ (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) 8)))} is VALID [2020-07-17 22:32:36,236 INFO L280 TraceCheckUtils]: 26: Hoare triple {3463#(= |main_#t~mem13| (select (select |#memory_int| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset))) (+ (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) 8)))} assume !(~unnamed1~0~RED == #t~mem13);havoc #t~mem13; {3464#(not (= ~unnamed1~0~RED (select (select |#memory_int| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset))) (+ (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) 8))))} is VALID [2020-07-17 22:32:36,237 INFO L280 TraceCheckUtils]: 27: Hoare triple {3464#(not (= ~unnamed1~0~RED (select (select |#memory_int| (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset))) (+ (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) 8))))} call #t~mem16.base, #t~mem16.offset := read~$Pointer$(~end~0.base, ~end~0.offset, 4);~end~0.base, ~end~0.offset := #t~mem16.base, #t~mem16.offset;havoc #t~mem16.base, #t~mem16.offset; {3465#(not (= ~unnamed1~0~RED (select (select |#memory_int| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (+ (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset) 8))))} is VALID [2020-07-17 22:32:36,238 INFO L280 TraceCheckUtils]: 28: Hoare triple {3465#(not (= ~unnamed1~0~RED (select (select |#memory_int| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (+ (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset) 8))))} assume !!(~null~0.base != ~end~0.base || ~null~0.offset != ~end~0.offset);call #t~mem13 := read~int(~end~0.base, 8 + ~end~0.offset, 4); {3465#(not (= ~unnamed1~0~RED (select (select |#memory_int| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (+ (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset) 8))))} is VALID [2020-07-17 22:32:36,239 INFO L280 TraceCheckUtils]: 29: Hoare triple {3465#(not (= ~unnamed1~0~RED (select (select |#memory_int| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (+ (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset) 8))))} assume !(~unnamed1~0~RED == #t~mem13);havoc #t~mem13; {3465#(not (= ~unnamed1~0~RED (select (select |#memory_int| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (+ (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset) 8))))} is VALID [2020-07-17 22:32:36,240 INFO L280 TraceCheckUtils]: 30: Hoare triple {3465#(not (= ~unnamed1~0~RED (select (select |#memory_int| (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (+ (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset) 8))))} call #t~mem16.base, #t~mem16.offset := read~$Pointer$(~end~0.base, ~end~0.offset, 4);~end~0.base, ~end~0.offset := #t~mem16.base, #t~mem16.offset;havoc #t~mem16.base, #t~mem16.offset; {3466#(not (= ~unnamed1~0~RED (select (select |#memory_int| main_~end~0.base) (+ main_~end~0.offset 8))))} is VALID [2020-07-17 22:32:36,245 INFO L280 TraceCheckUtils]: 31: Hoare triple {3466#(not (= ~unnamed1~0~RED (select (select |#memory_int| main_~end~0.base) (+ main_~end~0.offset 8))))} assume !!(~null~0.base != ~end~0.base || ~null~0.offset != ~end~0.offset);call #t~mem13 := read~int(~end~0.base, 8 + ~end~0.offset, 4); {3467#(not (= |main_#t~mem13| ~unnamed1~0~RED))} is VALID [2020-07-17 22:32:36,246 INFO L280 TraceCheckUtils]: 32: Hoare triple {3467#(not (= |main_#t~mem13| ~unnamed1~0~RED))} assume ~unnamed1~0~RED == #t~mem13;havoc #t~mem13;call #t~mem14.base, #t~mem14.offset := read~$Pointer$(~end~0.base, ~end~0.offset, 4);~end~0.base, ~end~0.offset := #t~mem14.base, #t~mem14.offset;havoc #t~mem14.base, #t~mem14.offset; {3453#false} is VALID [2020-07-17 22:32:36,246 INFO L280 TraceCheckUtils]: 33: Hoare triple {3453#false} assume !(~null~0.base != ~end~0.base || ~null~0.offset != ~end~0.offset); {3453#false} is VALID [2020-07-17 22:32:36,246 INFO L280 TraceCheckUtils]: 34: Hoare triple {3453#false} assume !false; {3453#false} is VALID [2020-07-17 22:32:36,251 INFO L134 CoverageAnalysis]: Checked inductivity of 9 backedges. 0 proven. 9 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-17 22:32:36,251 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [900281424] [2020-07-17 22:32:36,251 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [16550404] [2020-07-17 22:32:36,251 INFO L92 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 Starting monitored process 6 with z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 6 with z3 -smt2 -in SMTLIB2_COMPLIANT=true [2020-07-17 22:32:36,394 INFO L249 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2020-07-17 22:32:36,394 INFO L250 tOrderPrioritization]: Conjunction of SSA is unsat [2020-07-17 22:32:36,396 INFO L264 TraceCheckSpWp]: Trace formula consists of 172 conjuncts, 60 conjunts are in the unsatisfiable core [2020-07-17 22:32:36,413 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-17 22:32:36,415 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2020-07-17 22:32:36,447 INFO L350 Elim1Store]: treesize reduction 15, result has 25.0 percent of original size [2020-07-17 22:32:36,447 INFO L384 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 9 treesize of output 11 [2020-07-17 22:32:36,448 INFO L544 ElimStorePlain]: Start of recursive call 2: End of recursive call: and 1 xjuncts. [2020-07-17 22:32:36,463 INFO L624 ElimStorePlain]: treesize reduction 0, result has 100.0 percent of original size [2020-07-17 22:32:36,464 INFO L544 ElimStorePlain]: Start of recursive call 1: 1 dim-0 vars, 1 dim-1 vars, End of recursive call: 1 dim-0 vars, and 1 xjuncts. [2020-07-17 22:32:36,464 INFO L244 ElimStorePlain]: Needed 2 recursive calls to eliminate 2 variables, input treesize:22, output treesize:23 [2020-07-17 22:32:36,467 WARN L406 uantifierElimination]: Trying to double check SDD result, but SMT solver's response was UNKNOWN. [2020-07-17 22:32:36,468 WARN L407 uantifierElimination]: Input elimination task: ∃ [|v_#valid_27|, |main_#t~malloc0.base|]. (and (= main_~list~0.offset main_~end~0.offset) (= 0 main_~null~0.offset) (= 0 main_~list~0.offset) (= |#valid| (store (store |v_#valid_27| |main_#t~malloc0.base| 1) main_~list~0.base 1)) (= main_~list~0.base main_~end~0.base)) [2020-07-17 22:32:36,468 WARN L408 uantifierElimination]: ElimStorePlain result: ∃ [|main_#t~malloc0.base|]. (and (= main_~list~0.offset main_~end~0.offset) (= 0 main_~null~0.offset) (= 0 main_~list~0.offset) (= 1 (select |#valid| main_~list~0.base)) (= main_~list~0.base main_~end~0.base) (= 1 (select |#valid| |main_#t~malloc0.base|))) [2020-07-17 22:32:36,581 INFO L350 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2020-07-17 22:32:36,582 INFO L384 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 17 treesize of output 39 [2020-07-17 22:32:36,584 INFO L501 QuantifierPusher]: Distributing 2 conjuncts over 2 disjuncts [2020-07-17 22:32:36,585 INFO L544 ElimStorePlain]: Start of recursive call 2: End of recursive call: and 1 xjuncts. [2020-07-17 22:32:36,674 INFO L624 ElimStorePlain]: treesize reduction 14, result has 93.5 percent of original size [2020-07-17 22:32:36,678 INFO L190 IndexEqualityManager]: detected not equals via solver [2020-07-17 22:32:36,692 INFO L190 IndexEqualityManager]: detected not equals via solver [2020-07-17 22:32:36,693 INFO L173 IndexEqualityManager]: detected equality via solver [2020-07-17 22:32:36,708 INFO L350 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2020-07-17 22:32:36,708 INFO L384 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 63 treesize of output 41 [2020-07-17 22:32:36,709 INFO L544 ElimStorePlain]: Start of recursive call 3: End of recursive call: and 1 xjuncts. [2020-07-17 22:32:36,775 INFO L624 ElimStorePlain]: treesize reduction 16, result has 89.4 percent of original size [2020-07-17 22:32:36,779 INFO L190 IndexEqualityManager]: detected not equals via solver [2020-07-17 22:32:36,800 INFO L190 IndexEqualityManager]: detected not equals via solver [2020-07-17 22:32:36,812 INFO L350 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2020-07-17 22:32:36,812 INFO L384 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 2 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 63 treesize of output 41 [2020-07-17 22:32:36,812 INFO L544 ElimStorePlain]: Start of recursive call 4: End of recursive call: and 1 xjuncts. [2020-07-17 22:32:36,873 INFO L624 ElimStorePlain]: treesize reduction 16, result has 81.2 percent of original size [2020-07-17 22:32:36,877 INFO L544 ElimStorePlain]: Start of recursive call 1: 1 dim-0 vars, 1 dim-1 vars, 2 dim-2 vars, End of recursive call: and 1 xjuncts. [2020-07-17 22:32:36,877 INFO L244 ElimStorePlain]: Needed 4 recursive calls to eliminate 4 variables, input treesize:203, output treesize:82 [2020-07-17 22:32:36,903 WARN L406 uantifierElimination]: Trying to double check SDD result, but SMT solver's response was UNKNOWN. [2020-07-17 22:32:36,904 WARN L407 uantifierElimination]: Input elimination task: ∃ [|v_#memory_$Pointer$.offset_37|, |main_#t~malloc3.base|, |v_#memory_$Pointer$.base_38|, |v_#valid_28|]. (let ((.cse1 (let ((.cse3 (store |v_#memory_$Pointer$.base_38| main_~list~0.base (store (select |v_#memory_$Pointer$.base_38| main_~list~0.base) main_~list~0.offset |main_#t~malloc3.base|)))) (store .cse3 |main_#t~malloc3.base| (store (select .cse3 |main_#t~malloc3.base|) 4 main_~list~0.base)))) (.cse0 (let ((.cse2 (store |v_#memory_$Pointer$.offset_37| main_~list~0.base (store (select |v_#memory_$Pointer$.offset_37| main_~list~0.base) main_~list~0.offset 0)))) (store .cse2 |main_#t~malloc3.base| (store (select .cse2 |main_#t~malloc3.base|) 4 main_~list~0.offset))))) (and (= (store .cse0 main_~end~0.base (store (select .cse0 main_~end~0.base) main_~end~0.offset main_~null~0.offset)) |#memory_$Pointer$.offset|) (= 0 main_~null~0.offset) (= 0 main_~list~0.offset) (= (select (select .cse1 main_~list~0.base) main_~list~0.offset) main_~end~0.base) (= |#valid| (store |v_#valid_28| |main_#t~malloc3.base| 1)) (= 1 (select |v_#valid_28| main_~list~0.base)) (= |#memory_$Pointer$.base| (store .cse1 main_~end~0.base (store (select .cse1 main_~end~0.base) main_~end~0.offset main_~null~0.base))) (= main_~end~0.offset (select (select .cse0 main_~list~0.base) main_~list~0.offset)) (<= (select |v_#valid_28| |main_#t~malloc3.base|) 0))) [2020-07-17 22:32:36,904 WARN L408 uantifierElimination]: ElimStorePlain result: ∃ []. (let ((.cse0 (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset))) (and (= (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset) main_~null~0.base) (= 0 main_~null~0.offset) (= 0 (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= 0 main_~list~0.offset) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset) main_~null~0.offset) (= 1 (select |#valid| main_~list~0.base)) (= 0 main_~end~0.offset) (not (= main_~list~0.base .cse0)) (= main_~list~0.offset (select (select |#memory_$Pointer$.offset| .cse0) 4)) (= (select (select |#memory_$Pointer$.base| .cse0) 4) main_~list~0.base) (= .cse0 main_~end~0.base) (= 1 (select |#valid| .cse0)))) [2020-07-17 22:32:37,208 INFO L350 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2020-07-17 22:32:37,209 INFO L384 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 3 select indices, 3 select index equivalence classes, 1 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 2 case distinctions, treesize of input 20 treesize of output 30 [2020-07-17 22:32:37,212 INFO L501 QuantifierPusher]: Distributing 2 conjuncts over 3 disjuncts [2020-07-17 22:32:37,215 INFO L501 QuantifierPusher]: Distributing 2 conjuncts over 2 disjuncts [2020-07-17 22:32:37,217 INFO L544 ElimStorePlain]: Start of recursive call 2: End of recursive call: and 1 xjuncts. [2020-07-17 22:32:37,617 WARN L193 SmtUtils]: Spent 399.00 ms on a formula simplification that was a NOOP. DAG size: 110 [2020-07-17 22:32:37,617 INFO L624 ElimStorePlain]: treesize reduction 0, result has 100.0 percent of original size [2020-07-17 22:32:37,621 INFO L440 ElimStorePlain]: Different costs {0=[|v_#memory_int_48|, |v_#memory_int_47|], 2=[|v_#memory_int_45|, |v_#memory_int_46|], 6=[|v_#memory_$Pointer$.base_39|, |v_#memory_$Pointer$.offset_38|], 11=[|v_#memory_$Pointer$.base_37|, |v_#memory_$Pointer$.offset_36|]} [2020-07-17 22:32:37,674 INFO L384 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 30 treesize of output 11 [2020-07-17 22:32:37,674 INFO L544 ElimStorePlain]: Start of recursive call 3: End of recursive call: and 1 xjuncts. [2020-07-17 22:32:37,972 WARN L193 SmtUtils]: Spent 297.00 ms on a formula simplification that was a NOOP. DAG size: 105 [2020-07-17 22:32:37,973 INFO L624 ElimStorePlain]: treesize reduction 0, result has 100.0 percent of original size [2020-07-17 22:32:38,017 INFO L384 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 27 treesize of output 15 [2020-07-17 22:32:38,019 INFO L544 ElimStorePlain]: Start of recursive call 4: End of recursive call: and 1 xjuncts. [2020-07-17 22:32:38,275 WARN L193 SmtUtils]: Spent 255.00 ms on a formula simplification that was a NOOP. DAG size: 98 [2020-07-17 22:32:38,275 INFO L624 ElimStorePlain]: treesize reduction 0, result has 100.0 percent of original size [2020-07-17 22:32:38,283 INFO L544 ElimStorePlain]: Start of recursive call 5: 1 dim-0 vars, End of recursive call: 1 dim-0 vars, and 1 xjuncts. [2020-07-17 22:32:38,484 WARN L193 SmtUtils]: Spent 200.00 ms on a formula simplification that was a NOOP. DAG size: 94 [2020-07-17 22:32:38,485 INFO L624 ElimStorePlain]: treesize reduction 0, result has 100.0 percent of original size [2020-07-17 22:32:38,509 INFO L190 IndexEqualityManager]: detected not equals via solver [2020-07-17 22:32:38,514 INFO L190 IndexEqualityManager]: detected not equals via solver [2020-07-17 22:32:38,515 INFO L384 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 28 treesize of output 31 [2020-07-17 22:32:38,516 INFO L544 ElimStorePlain]: Start of recursive call 6: End of recursive call: and 1 xjuncts. [2020-07-17 22:32:38,851 WARN L193 SmtUtils]: Spent 335.00 ms on a formula simplification. DAG size of input: 93 DAG size of output: 91 [2020-07-17 22:32:38,852 INFO L624 ElimStorePlain]: treesize reduction 8, result has 98.3 percent of original size [2020-07-17 22:32:38,862 INFO L350 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2020-07-17 22:32:38,863 INFO L384 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 3 select indices, 3 select index equivalence classes, 4 disjoint index pairs (out of 3 index pairs), introduced 4 new quantified variables, introduced 3 case distinctions, treesize of input 436 treesize of output 292 [2020-07-17 22:32:38,879 INFO L544 ElimStorePlain]: Start of recursive call 7: End of recursive call: and 1 xjuncts. [2020-07-17 22:32:39,137 WARN L193 SmtUtils]: Spent 257.00 ms on a formula simplification. DAG size of input: 87 DAG size of output: 85 [2020-07-17 22:32:39,138 INFO L624 ElimStorePlain]: treesize reduction 24, result has 94.8 percent of original size [2020-07-17 22:32:39,161 INFO L384 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 3 select indices, 3 select index equivalence classes, 5 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 0 case distinctions, treesize of input 57 treesize of output 39 [2020-07-17 22:32:39,164 INFO L544 ElimStorePlain]: Start of recursive call 8: End of recursive call: and 1 xjuncts. [2020-07-17 22:32:39,290 WARN L193 SmtUtils]: Spent 125.00 ms on a formula simplification that was a NOOP. DAG size: 79 [2020-07-17 22:32:39,290 INFO L624 ElimStorePlain]: treesize reduction 0, result has 100.0 percent of original size [2020-07-17 22:32:39,321 INFO L190 IndexEqualityManager]: detected not equals via solver [2020-07-17 22:32:39,623 WARN L193 SmtUtils]: Spent 294.00 ms on a formula simplification. DAG size of input: 85 DAG size of output: 69 [2020-07-17 22:32:39,624 INFO L350 Elim1Store]: treesize reduction 160, result has 55.9 percent of original size [2020-07-17 22:32:39,625 INFO L384 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 3 select indices, 3 select index equivalence classes, 3 disjoint index pairs (out of 3 index pairs), introduced 4 new quantified variables, introduced 8 case distinctions, treesize of input 330 treesize of output 348 [2020-07-17 22:32:39,637 INFO L501 QuantifierPusher]: Distributing 3 conjuncts over 14 disjuncts [2020-07-17 22:32:39,657 INFO L501 QuantifierPusher]: Distributing 3 conjuncts over 14 disjuncts [2020-07-17 22:32:39,676 INFO L501 QuantifierPusher]: Distributing 3 conjuncts over 13 disjuncts [2020-07-17 22:32:39,685 INFO L501 QuantifierPusher]: Distributing 4 conjuncts over 12 disjuncts [2020-07-17 22:32:39,698 INFO L501 QuantifierPusher]: Distributing 4 conjuncts over 11 disjuncts [2020-07-17 22:32:39,705 INFO L501 QuantifierPusher]: Distributing 4 conjuncts over 10 disjuncts [2020-07-17 22:32:39,710 INFO L501 QuantifierPusher]: Distributing 3 conjuncts over 10 disjuncts [2020-07-17 22:32:39,714 INFO L501 QuantifierPusher]: Distributing 2 conjuncts over 10 disjuncts [2020-07-17 22:32:39,735 INFO L501 QuantifierPusher]: Distributing 3 conjuncts over 14 disjuncts [2020-07-17 22:32:39,742 INFO L501 QuantifierPusher]: Distributing 4 conjuncts over 13 disjuncts [2020-07-17 22:32:39,749 INFO L501 QuantifierPusher]: Distributing 4 conjuncts over 12 disjuncts [2020-07-17 22:32:39,756 INFO L501 QuantifierPusher]: Distributing 4 conjuncts over 11 disjuncts [2020-07-17 22:32:39,767 INFO L501 QuantifierPusher]: Distributing 3 conjuncts over 11 disjuncts [2020-07-17 22:32:39,772 INFO L501 QuantifierPusher]: Distributing 2 conjuncts over 11 disjuncts [2020-07-17 22:32:39,792 INFO L501 QuantifierPusher]: Distributing 4 conjuncts over 11 disjuncts [2020-07-17 22:32:39,807 INFO L501 QuantifierPusher]: Distributing 3 conjuncts over 11 disjuncts [2020-07-17 22:32:39,811 INFO L501 QuantifierPusher]: Distributing 2 conjuncts over 11 disjuncts [2020-07-17 22:32:39,841 INFO L501 QuantifierPusher]: Distributing 3 conjuncts over 14 disjuncts [2020-07-17 22:32:39,850 INFO L501 QuantifierPusher]: Distributing 3 conjuncts over 13 disjuncts [2020-07-17 22:32:39,860 INFO L501 QuantifierPusher]: Distributing 4 conjuncts over 12 disjuncts [2020-07-17 22:32:39,867 INFO L501 QuantifierPusher]: Distributing 4 conjuncts over 11 disjuncts [2020-07-17 22:32:39,876 INFO L501 QuantifierPusher]: Distributing 4 conjuncts over 10 disjuncts [2020-07-17 22:32:39,896 INFO L501 QuantifierPusher]: Distributing 3 conjuncts over 10 disjuncts [2020-07-17 22:32:39,905 INFO L501 QuantifierPusher]: Distributing 2 conjuncts over 10 disjuncts [2020-07-17 22:32:39,939 INFO L501 QuantifierPusher]: Distributing 3 conjuncts over 14 disjuncts [2020-07-17 22:32:39,951 INFO L501 QuantifierPusher]: Distributing 4 conjuncts over 13 disjuncts [2020-07-17 22:32:39,960 INFO L501 QuantifierPusher]: Distributing 4 conjuncts over 12 disjuncts [2020-07-17 22:32:39,970 INFO L501 QuantifierPusher]: Distributing 4 conjuncts over 11 disjuncts [2020-07-17 22:32:39,983 INFO L501 QuantifierPusher]: Distributing 3 conjuncts over 11 disjuncts [2020-07-17 22:32:39,989 INFO L501 QuantifierPusher]: Distributing 2 conjuncts over 11 disjuncts [2020-07-17 22:32:40,006 INFO L501 QuantifierPusher]: Distributing 4 conjuncts over 11 disjuncts [2020-07-17 22:32:40,013 INFO L501 QuantifierPusher]: Distributing 3 conjuncts over 11 disjuncts [2020-07-17 22:32:40,017 INFO L501 QuantifierPusher]: Distributing 2 conjuncts over 11 disjuncts [2020-07-17 22:32:40,058 INFO L501 QuantifierPusher]: Distributing 3 conjuncts over 14 disjuncts [2020-07-17 22:32:40,066 INFO L501 QuantifierPusher]: Distributing 4 conjuncts over 13 disjuncts [2020-07-17 22:32:40,079 INFO L501 QuantifierPusher]: Distributing 4 conjuncts over 12 disjuncts [2020-07-17 22:32:40,085 INFO L501 QuantifierPusher]: Distributing 4 conjuncts over 11 disjuncts [2020-07-17 22:32:40,090 INFO L501 QuantifierPusher]: Distributing 3 conjuncts over 11 disjuncts [2020-07-17 22:32:40,098 INFO L501 QuantifierPusher]: Distributing 2 conjuncts over 11 disjuncts [2020-07-17 22:32:40,124 INFO L501 QuantifierPusher]: Distributing 4 conjuncts over 11 disjuncts [2020-07-17 22:32:40,139 INFO L501 QuantifierPusher]: Distributing 3 conjuncts over 11 disjuncts [2020-07-17 22:32:40,142 INFO L501 QuantifierPusher]: Distributing 2 conjuncts over 11 disjuncts [2020-07-17 22:32:40,169 INFO L501 QuantifierPusher]: Distributing 3 conjuncts over 13 disjuncts [2020-07-17 22:32:40,178 INFO L501 QuantifierPusher]: Distributing 3 conjuncts over 12 disjuncts [2020-07-17 22:32:40,187 INFO L501 QuantifierPusher]: Distributing 4 conjuncts over 11 disjuncts [2020-07-17 22:32:40,198 INFO L501 QuantifierPusher]: Distributing 4 conjuncts over 10 disjuncts [2020-07-17 22:32:40,205 INFO L501 QuantifierPusher]: Distributing 4 conjuncts over 9 disjuncts [2020-07-17 22:32:40,211 INFO L501 QuantifierPusher]: Distributing 3 conjuncts over 9 disjuncts [2020-07-17 22:32:40,219 INFO L501 QuantifierPusher]: Distributing 2 conjuncts over 9 disjuncts [2020-07-17 22:32:40,244 INFO L501 QuantifierPusher]: Distributing 4 conjuncts over 12 disjuncts [2020-07-17 22:32:40,260 INFO L501 QuantifierPusher]: Distributing 4 conjuncts over 11 disjuncts [2020-07-17 22:32:40,267 INFO L501 QuantifierPusher]: Distributing 4 conjuncts over 10 disjuncts [2020-07-17 22:32:40,272 INFO L501 QuantifierPusher]: Distributing 3 conjuncts over 10 disjuncts [2020-07-17 22:32:40,276 INFO L501 QuantifierPusher]: Distributing 2 conjuncts over 10 disjuncts [2020-07-17 22:32:40,297 INFO L501 QuantifierPusher]: Distributing 4 conjuncts over 10 disjuncts [2020-07-17 22:32:40,304 INFO L501 QuantifierPusher]: Distributing 3 conjuncts over 10 disjuncts [2020-07-17 22:32:40,308 INFO L501 QuantifierPusher]: Distributing 2 conjuncts over 10 disjuncts [2020-07-17 22:32:40,328 INFO L501 QuantifierPusher]: Distributing 4 conjuncts over 12 disjuncts [2020-07-17 22:32:40,337 INFO L501 QuantifierPusher]: Distributing 4 conjuncts over 11 disjuncts [2020-07-17 22:32:40,342 INFO L501 QuantifierPusher]: Distributing 4 conjuncts over 10 disjuncts [2020-07-17 22:32:40,355 INFO L501 QuantifierPusher]: Distributing 3 conjuncts over 10 disjuncts [2020-07-17 22:32:40,363 INFO L501 QuantifierPusher]: Distributing 2 conjuncts over 10 disjuncts [2020-07-17 22:32:40,379 INFO L501 QuantifierPusher]: Distributing 4 conjuncts over 10 disjuncts [2020-07-17 22:32:40,393 INFO L501 QuantifierPusher]: Distributing 3 conjuncts over 10 disjuncts [2020-07-17 22:32:40,401 INFO L501 QuantifierPusher]: Distributing 2 conjuncts over 10 disjuncts [2020-07-17 22:32:40,428 INFO L501 QuantifierPusher]: Distributing 3 conjuncts over 14 disjuncts [2020-07-17 22:32:40,438 INFO L501 QuantifierPusher]: Distributing 3 conjuncts over 13 disjuncts [2020-07-17 22:32:40,447 INFO L501 QuantifierPusher]: Distributing 3 conjuncts over 12 disjuncts [2020-07-17 22:32:40,454 INFO L501 QuantifierPusher]: Distributing 4 conjuncts over 12 disjuncts [2020-07-17 22:32:40,463 INFO L501 QuantifierPusher]: Distributing 4 conjuncts over 11 disjuncts [2020-07-17 22:32:40,468 INFO L501 QuantifierPusher]: Distributing 4 conjuncts over 10 disjuncts [2020-07-17 22:32:40,472 INFO L501 QuantifierPusher]: Distributing 3 conjuncts over 10 disjuncts [2020-07-17 22:32:40,478 INFO L501 QuantifierPusher]: Distributing 2 conjuncts over 10 disjuncts [2020-07-17 22:32:40,502 INFO L501 QuantifierPusher]: Distributing 4 conjuncts over 10 disjuncts [2020-07-17 22:32:40,523 INFO L501 QuantifierPusher]: Distributing 3 conjuncts over 10 disjuncts [2020-07-17 22:32:40,531 INFO L501 QuantifierPusher]: Distributing 2 conjuncts over 10 disjuncts [2020-07-17 22:32:40,555 INFO L501 QuantifierPusher]: Distributing 4 conjuncts over 12 disjuncts [2020-07-17 22:32:40,570 INFO L501 QuantifierPusher]: Distributing 4 conjuncts over 11 disjuncts [2020-07-17 22:32:40,577 INFO L501 QuantifierPusher]: Distributing 4 conjuncts over 10 disjuncts [2020-07-17 22:32:40,583 INFO L501 QuantifierPusher]: Distributing 3 conjuncts over 10 disjuncts [2020-07-17 22:32:40,588 INFO L501 QuantifierPusher]: Distributing 2 conjuncts over 10 disjuncts [2020-07-17 22:32:40,609 INFO L501 QuantifierPusher]: Distributing 4 conjuncts over 10 disjuncts [2020-07-17 22:32:40,616 INFO L501 QuantifierPusher]: Distributing 3 conjuncts over 10 disjuncts [2020-07-17 22:32:40,620 INFO L501 QuantifierPusher]: Distributing 2 conjuncts over 10 disjuncts [2020-07-17 22:32:40,640 INFO L501 QuantifierPusher]: Distributing 4 conjuncts over 11 disjuncts [2020-07-17 22:32:40,650 INFO L501 QuantifierPusher]: Distributing 4 conjuncts over 10 disjuncts [2020-07-17 22:32:40,659 INFO L501 QuantifierPusher]: Distributing 4 conjuncts over 9 disjuncts [2020-07-17 22:32:40,666 INFO L501 QuantifierPusher]: Distributing 3 conjuncts over 9 disjuncts [2020-07-17 22:32:40,674 INFO L501 QuantifierPusher]: Distributing 2 conjuncts over 9 disjuncts [2020-07-17 22:32:40,703 INFO L501 QuantifierPusher]: Distributing 3 conjuncts over 14 disjuncts [2020-07-17 22:32:40,711 INFO L501 QuantifierPusher]: Distributing 3 conjuncts over 14 disjuncts [2020-07-17 22:32:40,719 INFO L501 QuantifierPusher]: Distributing 4 conjuncts over 13 disjuncts [2020-07-17 22:32:40,727 INFO L501 QuantifierPusher]: Distributing 4 conjuncts over 12 disjuncts [2020-07-17 22:32:40,733 INFO L501 QuantifierPusher]: Distributing 4 conjuncts over 11 disjuncts [2020-07-17 22:32:40,746 INFO L501 QuantifierPusher]: Distributing 3 conjuncts over 11 disjuncts [2020-07-17 22:32:40,750 INFO L501 QuantifierPusher]: Distributing 2 conjuncts over 11 disjuncts [2020-07-17 22:32:40,762 INFO L501 QuantifierPusher]: Distributing 4 conjuncts over 11 disjuncts [2020-07-17 22:32:40,767 INFO L501 QuantifierPusher]: Distributing 3 conjuncts over 11 disjuncts [2020-07-17 22:32:40,770 INFO L501 QuantifierPusher]: Distributing 2 conjuncts over 11 disjuncts [2020-07-17 22:32:40,801 INFO L501 QuantifierPusher]: Distributing 3 conjuncts over 13 disjuncts [2020-07-17 22:32:40,810 INFO L501 QuantifierPusher]: Distributing 4 conjuncts over 12 disjuncts [2020-07-17 22:32:40,820 INFO L501 QuantifierPusher]: Distributing 4 conjuncts over 11 disjuncts [2020-07-17 22:32:40,827 INFO L501 QuantifierPusher]: Distributing 4 conjuncts over 10 disjuncts [2020-07-17 22:32:40,834 INFO L501 QuantifierPusher]: Distributing 3 conjuncts over 10 disjuncts [2020-07-17 22:32:40,837 INFO L501 QuantifierPusher]: Distributing 2 conjuncts over 10 disjuncts [2020-07-17 22:32:40,871 INFO L501 QuantifierPusher]: Distributing 3 conjuncts over 14 disjuncts [2020-07-17 22:32:40,879 INFO L501 QuantifierPusher]: Distributing 3 conjuncts over 13 disjuncts [2020-07-17 22:32:40,892 INFO L501 QuantifierPusher]: Distributing 4 conjuncts over 12 disjuncts [2020-07-17 22:32:40,902 INFO L501 QuantifierPusher]: Distributing 4 conjuncts over 11 disjuncts [2020-07-17 22:32:40,909 INFO L501 QuantifierPusher]: Distributing 4 conjuncts over 10 disjuncts [2020-07-17 22:32:40,923 INFO L501 QuantifierPusher]: Distributing 3 conjuncts over 10 disjuncts [2020-07-17 22:32:40,931 INFO L501 QuantifierPusher]: Distributing 2 conjuncts over 10 disjuncts [2020-07-17 22:32:40,946 INFO L501 QuantifierPusher]: Distributing 3 conjuncts over 14 disjuncts [2020-07-17 22:32:40,953 INFO L501 QuantifierPusher]: Distributing 4 conjuncts over 13 disjuncts [2020-07-17 22:32:40,964 INFO L501 QuantifierPusher]: Distributing 4 conjuncts over 12 disjuncts [2020-07-17 22:32:40,968 INFO L501 QuantifierPusher]: Distributing 4 conjuncts over 11 disjuncts [2020-07-17 22:32:40,972 INFO L501 QuantifierPusher]: Distributing 3 conjuncts over 11 disjuncts [2020-07-17 22:32:40,979 INFO L501 QuantifierPusher]: Distributing 2 conjuncts over 11 disjuncts [2020-07-17 22:32:41,000 INFO L501 QuantifierPusher]: Distributing 4 conjuncts over 11 disjuncts [2020-07-17 22:32:41,020 INFO L501 QuantifierPusher]: Distributing 3 conjuncts over 11 disjuncts [2020-07-17 22:32:41,025 INFO L501 QuantifierPusher]: Distributing 2 conjuncts over 11 disjuncts [2020-07-17 22:32:41,066 INFO L501 QuantifierPusher]: Distributing 3 conjuncts over 14 disjuncts [2020-07-17 22:32:41,073 INFO L501 QuantifierPusher]: Distributing 4 conjuncts over 13 disjuncts [2020-07-17 22:32:41,081 INFO L501 QuantifierPusher]: Distributing 4 conjuncts over 12 disjuncts [2020-07-17 22:32:41,087 INFO L501 QuantifierPusher]: Distributing 4 conjuncts over 11 disjuncts [2020-07-17 22:32:41,093 INFO L501 QuantifierPusher]: Distributing 3 conjuncts over 11 disjuncts [2020-07-17 22:32:41,097 INFO L501 QuantifierPusher]: Distributing 2 conjuncts over 11 disjuncts [2020-07-17 22:32:41,114 INFO L501 QuantifierPusher]: Distributing 4 conjuncts over 11 disjuncts [2020-07-17 22:32:41,127 INFO L501 QuantifierPusher]: Distributing 3 conjuncts over 11 disjuncts [2020-07-17 22:32:41,133 INFO L501 QuantifierPusher]: Distributing 2 conjuncts over 11 disjuncts [2020-07-17 22:32:41,158 INFO L544 ElimStorePlain]: Start of recursive call 9: 1 dim-0 vars, End of recursive call: 1 dim-0 vars, and 1 xjuncts. [2020-07-17 22:32:41,506 WARN L193 SmtUtils]: Spent 347.00 ms on a formula simplification. DAG size of input: 111 DAG size of output: 70 [2020-07-17 22:32:41,507 INFO L624 ElimStorePlain]: treesize reduction 178, result has 52.2 percent of original size [2020-07-17 22:32:41,511 INFO L190 IndexEqualityManager]: detected not equals via solver [2020-07-17 22:32:41,537 INFO L190 IndexEqualityManager]: detected not equals via solver [2020-07-17 22:32:41,539 INFO L190 IndexEqualityManager]: detected not equals via solver [2020-07-17 22:32:41,544 INFO L190 IndexEqualityManager]: detected not equals via solver [2020-07-17 22:32:41,604 INFO L350 Elim1Store]: treesize reduction 5, result has 90.7 percent of original size [2020-07-17 22:32:41,605 INFO L384 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 3 select indices, 3 select index equivalence classes, 5 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 1 case distinctions, treesize of input 95 treesize of output 89 [2020-07-17 22:32:41,607 INFO L544 ElimStorePlain]: Start of recursive call 10: End of recursive call: and 1 xjuncts. [2020-07-17 22:32:41,712 WARN L193 SmtUtils]: Spent 103.00 ms on a formula simplification. DAG size of input: 71 DAG size of output: 61 [2020-07-17 22:32:41,713 INFO L624 ElimStorePlain]: treesize reduction 41, result has 72.8 percent of original size [2020-07-17 22:32:41,720 INFO L544 ElimStorePlain]: Start of recursive call 1: 1 dim-0 vars, 1 dim-1 vars, 8 dim-2 vars, End of recursive call: and 1 xjuncts. [2020-07-17 22:32:41,721 INFO L244 ElimStorePlain]: Needed 10 recursive calls to eliminate 10 variables, input treesize:530, output treesize:117 [2020-07-17 22:32:42,336 WARN L406 uantifierElimination]: Trying to double check SDD result, but SMT solver's response was UNKNOWN. [2020-07-17 22:32:42,336 WARN L407 uantifierElimination]: Input elimination task: ∃ [|v_#memory_$Pointer$.base_39|, |v_#memory_$Pointer$.offset_36|, |main_#t~malloc7.base|, |v_#memory_$Pointer$.base_37|, |v_#memory_$Pointer$.offset_38|, |v_#valid_29|, |v_#memory_int_45|, |v_#memory_int_46|, |v_#memory_int_48|, |v_#memory_int_47|]. (let ((.cse0 (select (select |v_#memory_$Pointer$.base_39| main_~list~0.base) main_~list~0.offset))) (let ((.cse2 (select |v_#memory_$Pointer$.base_37| .cse0)) (.cse4 (select |v_#memory_$Pointer$.offset_36| .cse0))) (let ((.cse1 (select |v_#memory_$Pointer$.base_39| .cse0)) (.cse5 (select |v_#memory_int_45| main_~end~0.base)) (.cse6 (let ((.cse10 (store |v_#memory_$Pointer$.offset_36| .cse0 (store .cse4 0 0)))) (store .cse10 |main_#t~malloc7.base| (store (select .cse10 |main_#t~malloc7.base|) 4 0)))) (.cse3 (select |v_#memory_$Pointer$.offset_38| .cse0)) (.cse8 (let ((.cse9 (store |v_#memory_$Pointer$.base_37| .cse0 (store .cse2 0 |main_#t~malloc7.base|)))) (store .cse9 |main_#t~malloc7.base| (store (select .cse9 |main_#t~malloc7.base|) 4 .cse0)))) (.cse7 (+ main_~end~0.offset 8))) (and (= |v_#memory_$Pointer$.base_37| (store |v_#memory_$Pointer$.base_39| .cse0 (store .cse1 8 (select .cse2 8)))) (= 0 main_~null~0.offset) (= 0 main_~list~0.offset) (= |v_#memory_$Pointer$.offset_36| (store |v_#memory_$Pointer$.offset_38| .cse0 (store .cse3 8 (select .cse4 8)))) (= (select .cse3 4) main_~list~0.offset) (= main_~list~0.base (select .cse1 4)) (= 0 (select (select |v_#memory_$Pointer$.offset_38| main_~list~0.base) main_~list~0.offset)) (<= (select |v_#valid_29| |main_#t~malloc7.base|) 0) (= (store |v_#memory_int_46| main_~end~0.base (store (select |v_#memory_int_46| main_~end~0.base) main_~end~0.offset (select .cse5 main_~end~0.offset))) |v_#memory_int_45|) (= main_~end~0.offset (select (select .cse6 .cse0) 0)) (= (store |v_#memory_int_48| .cse0 (store (store (select |v_#memory_int_48| .cse0) 8 ~unnamed1~0~RED) 0 (select (select |v_#memory_int_47| .cse0) 0))) |v_#memory_int_47|) (= (select .cse1 0) main_~null~0.base) (= |#memory_int| (store |v_#memory_int_45| main_~end~0.base (store .cse5 .cse7 ~unnamed1~0~BLACK))) (= (store .cse6 main_~end~0.base (store (store (select .cse6 main_~end~0.base) main_~end~0.offset main_~null~0.offset) .cse7 (select (select |#memory_$Pointer$.offset| main_~end~0.base) .cse7))) |#memory_$Pointer$.offset|) (= 1 (select |v_#valid_29| .cse0)) (not (= main_~list~0.base .cse0)) (= (select .cse3 0) main_~null~0.offset) (= (select (select .cse8 .cse0) 0) main_~end~0.base) (= |#memory_$Pointer$.base| (store .cse8 main_~end~0.base (store (store (select .cse8 main_~end~0.base) main_~end~0.offset main_~null~0.base) .cse7 (select (select |#memory_$Pointer$.base| main_~end~0.base) .cse7)))) (= (store |v_#memory_int_47| |main_#t~malloc7.base| (store (select |v_#memory_int_47| |main_#t~malloc7.base|) 4 (select (select |v_#memory_int_46| |main_#t~malloc7.base|) 4))) |v_#memory_int_46|) (= 1 (select |v_#valid_29| main_~list~0.base)))))) [2020-07-17 22:32:42,337 WARN L408 uantifierElimination]: ElimStorePlain result: ∃ []. (let ((.cse0 (select |#memory_$Pointer$.base| main_~end~0.base))) (let ((.cse3 (select .cse0 4))) (let ((.cse1 (select |#memory_$Pointer$.offset| main_~end~0.base)) (.cse2 (select |#memory_$Pointer$.base| .cse3)) (.cse4 (select |#memory_$Pointer$.offset| .cse3))) (and (= (select .cse0 main_~end~0.offset) main_~null~0.base) (= 0 (select .cse1 4)) (= 0 main_~null~0.offset) (= 0 main_~list~0.offset) (= (select .cse1 main_~end~0.offset) main_~null~0.offset) (= (select .cse2 4) main_~list~0.base) (= 0 main_~end~0.offset) (= ~unnamed1~0~RED (select (select |#memory_int| .cse3) 8)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) .cse3) (= 0 (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= (select .cse2 0) main_~end~0.base) (not (= main_~list~0.base main_~end~0.base)) (= 0 (select .cse4 0)) (= main_~list~0.offset (select .cse4 4)) (= ~unnamed1~0~BLACK (select (select |#memory_int| main_~end~0.base) (+ main_~end~0.offset 8))))))) [2020-07-17 22:32:43,232 INFO L350 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2020-07-17 22:32:43,232 INFO L384 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 5 select indices, 5 select index equivalence classes, 1 disjoint index pairs (out of 10 index pairs), introduced 7 new quantified variables, introduced 9 case distinctions, treesize of input 128 treesize of output 90 [2020-07-17 22:32:43,241 INFO L501 QuantifierPusher]: Distributing 2 conjuncts over 6 disjuncts [2020-07-17 22:32:43,247 INFO L501 QuantifierPusher]: Distributing 2 conjuncts over 6 disjuncts [2020-07-17 22:32:43,251 INFO L501 QuantifierPusher]: Distributing 2 conjuncts over 5 disjuncts [2020-07-17 22:32:43,259 INFO L501 QuantifierPusher]: Distributing 2 conjuncts over 5 disjuncts [2020-07-17 22:32:43,263 INFO L501 QuantifierPusher]: Distributing 2 conjuncts over 4 disjuncts [2020-07-17 22:32:43,273 INFO L501 QuantifierPusher]: Distributing 2 conjuncts over 6 disjuncts [2020-07-17 22:32:43,278 INFO L501 QuantifierPusher]: Distributing 2 conjuncts over 6 disjuncts [2020-07-17 22:32:43,283 INFO L501 QuantifierPusher]: Distributing 2 conjuncts over 5 disjuncts [2020-07-17 22:32:43,291 INFO L501 QuantifierPusher]: Distributing 2 conjuncts over 5 disjuncts [2020-07-17 22:32:43,298 INFO L501 QuantifierPusher]: Distributing 2 conjuncts over 4 disjuncts [2020-07-17 22:32:43,302 INFO L544 ElimStorePlain]: Start of recursive call 2: 1 dim-0 vars, End of recursive call: 1 dim-0 vars, and 1 xjuncts. [2020-07-17 22:32:43,370 INFO L624 ElimStorePlain]: treesize reduction 28, result has 70.8 percent of original size [2020-07-17 22:32:43,387 INFO L190 IndexEqualityManager]: detected not equals via solver [2020-07-17 22:32:43,388 INFO L384 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 5 select indices, 5 select index equivalence classes, 4 disjoint index pairs (out of 10 index pairs), introduced 5 new quantified variables, introduced 0 case distinctions, treesize of input 43 treesize of output 19 [2020-07-17 22:32:43,392 INFO L544 ElimStorePlain]: Start of recursive call 3: End of recursive call: and 1 xjuncts. [2020-07-17 22:32:43,402 INFO L624 ElimStorePlain]: treesize reduction 0, result has 100.0 percent of original size [2020-07-17 22:32:43,405 INFO L544 ElimStorePlain]: Start of recursive call 1: 1 dim-0 vars, 2 dim-2 vars, End of recursive call: 1 dim-0 vars, and 1 xjuncts. [2020-07-17 22:32:43,405 INFO L244 ElimStorePlain]: Needed 3 recursive calls to eliminate 3 variables, input treesize:152, output treesize:21 [2020-07-17 22:32:43,409 WARN L406 uantifierElimination]: Trying to double check SDD result, but SMT solver's response was UNKNOWN. [2020-07-17 22:32:43,409 WARN L407 uantifierElimination]: Input elimination task: ∃ [|#memory_$Pointer$.base|, v_subst_4, |#memory_$Pointer$.offset|]. (let ((.cse1 (select |#memory_$Pointer$.base| v_subst_4))) (let ((.cse7 (select .cse1 4))) (let ((.cse3 (select |#memory_$Pointer$.base| .cse7))) (let ((.cse5 (select .cse3 4))) (let ((.cse0 (select |#memory_$Pointer$.offset| .cse7)) (.cse2 (select |#memory_$Pointer$.offset| v_subst_4)) (.cse4 (select (select |#memory_$Pointer$.offset| .cse5) 0)) (.cse6 (select (select |#memory_$Pointer$.base| .cse5) 0))) (and (= ~unnamed1~0~BLACK (select (select |#memory_int| v_subst_4) 8)) (= 0 (select .cse0 0)) (= 0 (select .cse0 4)) (= (select .cse1 0) main_~null~0.base) (= 0 main_~null~0.offset) (= (select .cse2 0) main_~null~0.offset) (= (select .cse3 0) v_subst_4) (= 0 .cse4) (not (= .cse5 v_subst_4)) (= 0 (select .cse2 4)) (= .cse6 main_~end~0.base) (= main_~end~0.offset .cse4) (= .cse7 .cse6) (= ~unnamed1~0~RED (select (select |#memory_int| .cse7) 8)))))))) [2020-07-17 22:32:43,409 WARN L408 uantifierElimination]: ElimStorePlain result: ∃ [v_subst_4]. (and (= ~unnamed1~0~BLACK (select (select |#memory_int| v_subst_4) 8)) (= 0 main_~null~0.offset) (= ~unnamed1~0~RED (select (select |#memory_int| main_~end~0.base) 8)) (= 0 main_~end~0.offset)) [2020-07-17 22:32:43,487 INFO L350 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2020-07-17 22:32:43,488 INFO L384 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 22 treesize of output 18 [2020-07-17 22:32:43,489 INFO L544 ElimStorePlain]: Start of recursive call 2: End of recursive call: and 1 xjuncts. [2020-07-17 22:32:43,500 INFO L624 ElimStorePlain]: treesize reduction 4, result has 66.7 percent of original size [2020-07-17 22:32:43,502 INFO L544 ElimStorePlain]: Start of recursive call 1: 2 dim-0 vars, 1 dim-2 vars, End of recursive call: and 1 xjuncts. [2020-07-17 22:32:43,502 INFO L244 ElimStorePlain]: Needed 2 recursive calls to eliminate 3 variables, input treesize:22, output treesize:3 [2020-07-17 22:32:43,505 WARN L406 uantifierElimination]: Trying to double check SDD result, but SMT solver's response was UNKNOWN. [2020-07-17 22:32:43,505 WARN L407 uantifierElimination]: Input elimination task: ∃ [|#memory_int|, main_~end~0.base, v_subst_4]. (let ((.cse0 (select (select |#memory_int| main_~end~0.base) 8))) (and (= ~unnamed1~0~BLACK (select (select |#memory_int| v_subst_4) 8)) (= |main_#t~mem13| .cse0) (= ~unnamed1~0~RED .cse0))) [2020-07-17 22:32:43,505 WARN L408 uantifierElimination]: ElimStorePlain result: ∃ []. (= |main_#t~mem13| ~unnamed1~0~RED) [2020-07-17 22:32:43,536 INFO L263 TraceCheckUtils]: 0: Hoare triple {3452#true} call ULTIMATE.init(); {3452#true} is VALID [2020-07-17 22:32:43,536 INFO L280 TraceCheckUtils]: 1: Hoare triple {3452#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier; {3452#true} is VALID [2020-07-17 22:32:43,536 INFO L280 TraceCheckUtils]: 2: Hoare triple {3452#true} assume true; {3452#true} is VALID [2020-07-17 22:32:43,536 INFO L275 TraceCheckUtils]: 3: Hoare quadruple {3452#true} {3452#true} #189#return; {3452#true} is VALID [2020-07-17 22:32:43,536 INFO L263 TraceCheckUtils]: 4: Hoare triple {3452#true} call #t~ret21 := main(); {3452#true} is VALID [2020-07-17 22:32:43,539 INFO L280 TraceCheckUtils]: 5: Hoare triple {3452#true} call #t~malloc0.base, #t~malloc0.offset := #Ultimate.allocOnHeap(12);~null~0.base, ~null~0.offset := #t~malloc0.base, #t~malloc0.offset;call write~$Pointer$(0, 0, ~null~0.base, ~null~0.offset, 4);call write~$Pointer$(0, 0, ~null~0.base, 4 + ~null~0.offset, 4);call write~int(~unnamed1~0~BLACK, ~null~0.base, 8 + ~null~0.offset, 4);call #t~malloc1.base, #t~malloc1.offset := #Ultimate.allocOnHeap(12);~list~0.base, ~list~0.offset := #t~malloc1.base, #t~malloc1.offset;call write~$Pointer$(~null~0.base, ~null~0.offset, ~list~0.base, ~list~0.offset, 4);call write~$Pointer$(~null~0.base, ~null~0.offset, ~list~0.base, 4 + ~list~0.offset, 4);call write~int(~unnamed1~0~BLACK, ~list~0.base, 8 + ~list~0.offset, 4);~end~0.base, ~end~0.offset := ~list~0.base, ~list~0.offset; {3487#(and (= main_~list~0.offset main_~end~0.offset) (= 0 main_~null~0.offset) (= 0 main_~list~0.offset) (= 1 (select |#valid| main_~list~0.base)) (= main_~list~0.base main_~end~0.base))} is VALID [2020-07-17 22:32:43,539 INFO L280 TraceCheckUtils]: 6: Hoare triple {3487#(and (= main_~list~0.offset main_~end~0.offset) (= 0 main_~null~0.offset) (= 0 main_~list~0.offset) (= 1 (select |#valid| main_~list~0.base)) (= main_~list~0.base main_~end~0.base))} assume -2147483648 <= #t~nondet2 && #t~nondet2 <= 2147483647; {3487#(and (= main_~list~0.offset main_~end~0.offset) (= 0 main_~null~0.offset) (= 0 main_~list~0.offset) (= 1 (select |#valid| main_~list~0.base)) (= main_~list~0.base main_~end~0.base))} is VALID [2020-07-17 22:32:43,543 INFO L280 TraceCheckUtils]: 7: Hoare triple {3487#(and (= main_~list~0.offset main_~end~0.offset) (= 0 main_~null~0.offset) (= 0 main_~list~0.offset) (= 1 (select |#valid| main_~list~0.base)) (= main_~list~0.base main_~end~0.base))} assume !!(0 != #t~nondet2);havoc #t~nondet2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.allocOnHeap(12);call write~$Pointer$(#t~malloc3.base, #t~malloc3.offset, ~end~0.base, ~end~0.offset, 4);call #t~mem4.base, #t~mem4.offset := read~$Pointer$(~end~0.base, ~end~0.offset, 4);call write~$Pointer$(~end~0.base, ~end~0.offset, #t~mem4.base, 4 + #t~mem4.offset, 4);havoc #t~mem4.base, #t~mem4.offset;call #t~mem5.base, #t~mem5.offset := read~$Pointer$(~end~0.base, ~end~0.offset, 4);~end~0.base, ~end~0.offset := #t~mem5.base, #t~mem5.offset;havoc #t~mem5.base, #t~mem5.offset;call write~$Pointer$(~null~0.base, ~null~0.offset, ~end~0.base, ~end~0.offset, 4);assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647; {3494#(and (= (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset) main_~null~0.base) (= 0 main_~null~0.offset) (= 0 (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= 0 main_~list~0.offset) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset) main_~null~0.offset) (= 1 (select |#valid| main_~list~0.base)) (= 0 main_~end~0.offset) (= main_~list~0.offset (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) 4)) (not (= main_~list~0.base (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) 4) main_~list~0.base) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) main_~end~0.base) (= 1 (select |#valid| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset))))} is VALID [2020-07-17 22:32:43,548 INFO L280 TraceCheckUtils]: 8: Hoare triple {3494#(and (= (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset) main_~null~0.base) (= 0 main_~null~0.offset) (= 0 (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= 0 main_~list~0.offset) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset) main_~null~0.offset) (= 1 (select |#valid| main_~list~0.base)) (= 0 main_~end~0.offset) (= main_~list~0.offset (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) 4)) (not (= main_~list~0.base (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset))) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset)) 4) main_~list~0.base) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) main_~end~0.base) (= 1 (select |#valid| (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset))))} assume !(0 != #t~nondet6);havoc #t~nondet6;call write~int(~unnamed1~0~RED, ~end~0.base, 8 + ~end~0.offset, 4);call #t~malloc7.base, #t~malloc7.offset := #Ultimate.allocOnHeap(12);call write~$Pointer$(#t~malloc7.base, #t~malloc7.offset, ~end~0.base, ~end~0.offset, 4);call #t~mem8.base, #t~mem8.offset := read~$Pointer$(~end~0.base, ~end~0.offset, 4);call write~$Pointer$(~end~0.base, ~end~0.offset, #t~mem8.base, 4 + #t~mem8.offset, 4);havoc #t~mem8.base, #t~mem8.offset;call #t~mem9.base, #t~mem9.offset := read~$Pointer$(~end~0.base, ~end~0.offset, 4);~end~0.base, ~end~0.offset := #t~mem9.base, #t~mem9.offset;havoc #t~mem9.base, #t~mem9.offset;call write~$Pointer$(~null~0.base, ~null~0.offset, ~end~0.base, ~end~0.offset, 4);call write~int(~unnamed1~0~BLACK, ~end~0.base, 8 + ~end~0.offset, 4); {3498#(and (= (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset) main_~null~0.base) (= 0 (select (select |#memory_$Pointer$.offset| main_~end~0.base) 4)) (= 0 main_~null~0.offset) (= 0 main_~list~0.offset) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset) main_~null~0.offset) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 4) main_~list~0.base) (= 0 main_~end~0.offset) (= ~unnamed1~0~RED (select (select |#memory_int| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 8)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 0) main_~end~0.base) (not (= main_~list~0.base main_~end~0.base)) (= 0 (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= 0 (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 0)) (= main_~list~0.offset (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 4)) (= ~unnamed1~0~BLACK (select (select |#memory_int| main_~end~0.base) (+ main_~end~0.offset 8))))} is VALID [2020-07-17 22:32:43,549 INFO L280 TraceCheckUtils]: 9: Hoare triple {3498#(and (= (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset) main_~null~0.base) (= 0 (select (select |#memory_$Pointer$.offset| main_~end~0.base) 4)) (= 0 main_~null~0.offset) (= 0 main_~list~0.offset) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset) main_~null~0.offset) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 4) main_~list~0.base) (= 0 main_~end~0.offset) (= ~unnamed1~0~RED (select (select |#memory_int| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 8)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 0) main_~end~0.base) (not (= main_~list~0.base main_~end~0.base)) (= 0 (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= 0 (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 0)) (= main_~list~0.offset (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 4)) (= ~unnamed1~0~BLACK (select (select |#memory_int| main_~end~0.base) (+ main_~end~0.offset 8))))} call #t~mem10 := read~int(~end~0.base, 8 + ~end~0.offset, 4); {3498#(and (= (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset) main_~null~0.base) (= 0 (select (select |#memory_$Pointer$.offset| main_~end~0.base) 4)) (= 0 main_~null~0.offset) (= 0 main_~list~0.offset) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset) main_~null~0.offset) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 4) main_~list~0.base) (= 0 main_~end~0.offset) (= ~unnamed1~0~RED (select (select |#memory_int| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 8)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 0) main_~end~0.base) (not (= main_~list~0.base main_~end~0.base)) (= 0 (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= 0 (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 0)) (= main_~list~0.offset (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 4)) (= ~unnamed1~0~BLACK (select (select |#memory_int| main_~end~0.base) (+ main_~end~0.offset 8))))} is VALID [2020-07-17 22:32:43,550 INFO L280 TraceCheckUtils]: 10: Hoare triple {3498#(and (= (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset) main_~null~0.base) (= 0 (select (select |#memory_$Pointer$.offset| main_~end~0.base) 4)) (= 0 main_~null~0.offset) (= 0 main_~list~0.offset) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset) main_~null~0.offset) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 4) main_~list~0.base) (= 0 main_~end~0.offset) (= ~unnamed1~0~RED (select (select |#memory_int| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 8)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 0) main_~end~0.base) (not (= main_~list~0.base main_~end~0.base)) (= 0 (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= 0 (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 0)) (= main_~list~0.offset (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 4)) (= ~unnamed1~0~BLACK (select (select |#memory_int| main_~end~0.base) (+ main_~end~0.offset 8))))} assume !!(~unnamed1~0~BLACK == #t~mem10);havoc #t~mem10; {3498#(and (= (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset) main_~null~0.base) (= 0 (select (select |#memory_$Pointer$.offset| main_~end~0.base) 4)) (= 0 main_~null~0.offset) (= 0 main_~list~0.offset) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset) main_~null~0.offset) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 4) main_~list~0.base) (= 0 main_~end~0.offset) (= ~unnamed1~0~RED (select (select |#memory_int| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 8)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 0) main_~end~0.base) (not (= main_~list~0.base main_~end~0.base)) (= 0 (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= 0 (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 0)) (= main_~list~0.offset (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 4)) (= ~unnamed1~0~BLACK (select (select |#memory_int| main_~end~0.base) (+ main_~end~0.offset 8))))} is VALID [2020-07-17 22:32:43,552 INFO L280 TraceCheckUtils]: 11: Hoare triple {3498#(and (= (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset) main_~null~0.base) (= 0 (select (select |#memory_$Pointer$.offset| main_~end~0.base) 4)) (= 0 main_~null~0.offset) (= 0 main_~list~0.offset) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset) main_~null~0.offset) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 4) main_~list~0.base) (= 0 main_~end~0.offset) (= ~unnamed1~0~RED (select (select |#memory_int| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 8)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 0) main_~end~0.base) (not (= main_~list~0.base main_~end~0.base)) (= 0 (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= 0 (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 0)) (= main_~list~0.offset (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 4)) (= ~unnamed1~0~BLACK (select (select |#memory_int| main_~end~0.base) (+ main_~end~0.offset 8))))} goto; {3498#(and (= (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset) main_~null~0.base) (= 0 (select (select |#memory_$Pointer$.offset| main_~end~0.base) 4)) (= 0 main_~null~0.offset) (= 0 main_~list~0.offset) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset) main_~null~0.offset) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 4) main_~list~0.base) (= 0 main_~end~0.offset) (= ~unnamed1~0~RED (select (select |#memory_int| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 8)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 0) main_~end~0.base) (not (= main_~list~0.base main_~end~0.base)) (= 0 (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= 0 (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 0)) (= main_~list~0.offset (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 4)) (= ~unnamed1~0~BLACK (select (select |#memory_int| main_~end~0.base) (+ main_~end~0.offset 8))))} is VALID [2020-07-17 22:32:43,554 INFO L280 TraceCheckUtils]: 12: Hoare triple {3498#(and (= (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset) main_~null~0.base) (= 0 (select (select |#memory_$Pointer$.offset| main_~end~0.base) 4)) (= 0 main_~null~0.offset) (= 0 main_~list~0.offset) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset) main_~null~0.offset) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 4) main_~list~0.base) (= 0 main_~end~0.offset) (= ~unnamed1~0~RED (select (select |#memory_int| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 8)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 0) main_~end~0.base) (not (= main_~list~0.base main_~end~0.base)) (= 0 (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= 0 (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 0)) (= main_~list~0.offset (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 4)) (= ~unnamed1~0~BLACK (select (select |#memory_int| main_~end~0.base) (+ main_~end~0.offset 8))))} call #t~mem11.base, #t~mem11.offset := read~$Pointer$(~end~0.base, ~end~0.offset, 4); {3511#(and (= 0 main_~null~0.offset) (= 0 (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= 0 main_~list~0.offset) (exists ((main_~end~0.base Int)) (and (= 0 (select (select |#memory_$Pointer$.offset| main_~end~0.base) 4)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) 0) main_~null~0.offset) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 4) main_~list~0.base) (= ~unnamed1~0~BLACK (select (select |#memory_int| main_~end~0.base) 8)) (= ~unnamed1~0~RED (select (select |#memory_int| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 8)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) 0) |main_#t~mem11.offset|) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 0) main_~end~0.base) (not (= main_~list~0.base main_~end~0.base)) (= 0 (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 0)) (= main_~list~0.offset (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 4)) (= (select (select |#memory_$Pointer$.base| main_~end~0.base) 0) main_~null~0.base) (= |main_#t~mem11.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) 0)))))} is VALID [2020-07-17 22:32:43,556 INFO L280 TraceCheckUtils]: 13: Hoare triple {3511#(and (= 0 main_~null~0.offset) (= 0 (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= 0 main_~list~0.offset) (exists ((main_~end~0.base Int)) (and (= 0 (select (select |#memory_$Pointer$.offset| main_~end~0.base) 4)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) 0) main_~null~0.offset) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 4) main_~list~0.base) (= ~unnamed1~0~BLACK (select (select |#memory_int| main_~end~0.base) 8)) (= ~unnamed1~0~RED (select (select |#memory_int| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 8)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) 0) |main_#t~mem11.offset|) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 0) main_~end~0.base) (not (= main_~list~0.base main_~end~0.base)) (= 0 (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 0)) (= main_~list~0.offset (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 4)) (= (select (select |#memory_$Pointer$.base| main_~end~0.base) 0) main_~null~0.base) (= |main_#t~mem11.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) 0)))))} assume !!(~null~0.base == #t~mem11.base && ~null~0.offset == #t~mem11.offset);havoc #t~mem11.base, #t~mem11.offset; {3515#(and (= 0 main_~null~0.offset) (= 0 (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= 0 main_~list~0.offset) (exists ((main_~end~0.base Int)) (and (= 0 (select (select |#memory_$Pointer$.offset| main_~end~0.base) 4)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) 0) main_~null~0.offset) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 0) main_~end~0.base) (not (= main_~list~0.base main_~end~0.base)) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 4) main_~list~0.base) (= 0 (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 0)) (= ~unnamed1~0~BLACK (select (select |#memory_int| main_~end~0.base) 8)) (= main_~list~0.offset (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 4)) (= (select (select |#memory_$Pointer$.base| main_~end~0.base) 0) main_~null~0.base) (= ~unnamed1~0~RED (select (select |#memory_int| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 8)))))} is VALID [2020-07-17 22:32:43,558 INFO L280 TraceCheckUtils]: 14: Hoare triple {3515#(and (= 0 main_~null~0.offset) (= 0 (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= 0 main_~list~0.offset) (exists ((main_~end~0.base Int)) (and (= 0 (select (select |#memory_$Pointer$.offset| main_~end~0.base) 4)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) 0) main_~null~0.offset) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 0) main_~end~0.base) (not (= main_~list~0.base main_~end~0.base)) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 4) main_~list~0.base) (= 0 (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 0)) (= ~unnamed1~0~BLACK (select (select |#memory_int| main_~end~0.base) 8)) (= main_~list~0.offset (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 4)) (= (select (select |#memory_$Pointer$.base| main_~end~0.base) 0) main_~null~0.base) (= ~unnamed1~0~RED (select (select |#memory_int| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 8)))))} goto; {3515#(and (= 0 main_~null~0.offset) (= 0 (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= 0 main_~list~0.offset) (exists ((main_~end~0.base Int)) (and (= 0 (select (select |#memory_$Pointer$.offset| main_~end~0.base) 4)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) 0) main_~null~0.offset) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 0) main_~end~0.base) (not (= main_~list~0.base main_~end~0.base)) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 4) main_~list~0.base) (= 0 (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 0)) (= ~unnamed1~0~BLACK (select (select |#memory_int| main_~end~0.base) 8)) (= main_~list~0.offset (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 4)) (= (select (select |#memory_$Pointer$.base| main_~end~0.base) 0) main_~null~0.base) (= ~unnamed1~0~RED (select (select |#memory_int| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 8)))))} is VALID [2020-07-17 22:32:43,559 INFO L280 TraceCheckUtils]: 15: Hoare triple {3515#(and (= 0 main_~null~0.offset) (= 0 (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= 0 main_~list~0.offset) (exists ((main_~end~0.base Int)) (and (= 0 (select (select |#memory_$Pointer$.offset| main_~end~0.base) 4)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) 0) main_~null~0.offset) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 0) main_~end~0.base) (not (= main_~list~0.base main_~end~0.base)) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 4) main_~list~0.base) (= 0 (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 0)) (= ~unnamed1~0~BLACK (select (select |#memory_int| main_~end~0.base) 8)) (= main_~list~0.offset (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 4)) (= (select (select |#memory_$Pointer$.base| main_~end~0.base) 0) main_~null~0.base) (= ~unnamed1~0~RED (select (select |#memory_int| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 8)))))} assume !!(~null~0.base != ~end~0.base || ~null~0.offset != ~end~0.offset); {3515#(and (= 0 main_~null~0.offset) (= 0 (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= 0 main_~list~0.offset) (exists ((main_~end~0.base Int)) (and (= 0 (select (select |#memory_$Pointer$.offset| main_~end~0.base) 4)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) 0) main_~null~0.offset) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 0) main_~end~0.base) (not (= main_~list~0.base main_~end~0.base)) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 4) main_~list~0.base) (= 0 (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 0)) (= ~unnamed1~0~BLACK (select (select |#memory_int| main_~end~0.base) 8)) (= main_~list~0.offset (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 4)) (= (select (select |#memory_$Pointer$.base| main_~end~0.base) 0) main_~null~0.base) (= ~unnamed1~0~RED (select (select |#memory_int| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 8)))))} is VALID [2020-07-17 22:32:43,560 INFO L280 TraceCheckUtils]: 16: Hoare triple {3515#(and (= 0 main_~null~0.offset) (= 0 (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= 0 main_~list~0.offset) (exists ((main_~end~0.base Int)) (and (= 0 (select (select |#memory_$Pointer$.offset| main_~end~0.base) 4)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) 0) main_~null~0.offset) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 0) main_~end~0.base) (not (= main_~list~0.base main_~end~0.base)) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 4) main_~list~0.base) (= 0 (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 0)) (= ~unnamed1~0~BLACK (select (select |#memory_int| main_~end~0.base) 8)) (= main_~list~0.offset (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 4)) (= (select (select |#memory_$Pointer$.base| main_~end~0.base) 0) main_~null~0.base) (= ~unnamed1~0~RED (select (select |#memory_int| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 8)))))} goto; {3515#(and (= 0 main_~null~0.offset) (= 0 (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= 0 main_~list~0.offset) (exists ((main_~end~0.base Int)) (and (= 0 (select (select |#memory_$Pointer$.offset| main_~end~0.base) 4)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) 0) main_~null~0.offset) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 0) main_~end~0.base) (not (= main_~list~0.base main_~end~0.base)) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 4) main_~list~0.base) (= 0 (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 0)) (= ~unnamed1~0~BLACK (select (select |#memory_int| main_~end~0.base) 8)) (= main_~list~0.offset (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 4)) (= (select (select |#memory_$Pointer$.base| main_~end~0.base) 0) main_~null~0.base) (= ~unnamed1~0~RED (select (select |#memory_int| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 8)))))} is VALID [2020-07-17 22:32:43,562 INFO L280 TraceCheckUtils]: 17: Hoare triple {3515#(and (= 0 main_~null~0.offset) (= 0 (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= 0 main_~list~0.offset) (exists ((main_~end~0.base Int)) (and (= 0 (select (select |#memory_$Pointer$.offset| main_~end~0.base) 4)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) 0) main_~null~0.offset) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 0) main_~end~0.base) (not (= main_~list~0.base main_~end~0.base)) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 4) main_~list~0.base) (= 0 (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 0)) (= ~unnamed1~0~BLACK (select (select |#memory_int| main_~end~0.base) 8)) (= main_~list~0.offset (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 4)) (= (select (select |#memory_$Pointer$.base| main_~end~0.base) 0) main_~null~0.base) (= ~unnamed1~0~RED (select (select |#memory_int| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 8)))))} assume -2147483648 <= #t~nondet2 && #t~nondet2 <= 2147483647; {3515#(and (= 0 main_~null~0.offset) (= 0 (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= 0 main_~list~0.offset) (exists ((main_~end~0.base Int)) (and (= 0 (select (select |#memory_$Pointer$.offset| main_~end~0.base) 4)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) 0) main_~null~0.offset) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 0) main_~end~0.base) (not (= main_~list~0.base main_~end~0.base)) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 4) main_~list~0.base) (= 0 (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 0)) (= ~unnamed1~0~BLACK (select (select |#memory_int| main_~end~0.base) 8)) (= main_~list~0.offset (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 4)) (= (select (select |#memory_$Pointer$.base| main_~end~0.base) 0) main_~null~0.base) (= ~unnamed1~0~RED (select (select |#memory_int| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 8)))))} is VALID [2020-07-17 22:32:43,563 INFO L280 TraceCheckUtils]: 18: Hoare triple {3515#(and (= 0 main_~null~0.offset) (= 0 (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= 0 main_~list~0.offset) (exists ((main_~end~0.base Int)) (and (= 0 (select (select |#memory_$Pointer$.offset| main_~end~0.base) 4)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) 0) main_~null~0.offset) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 0) main_~end~0.base) (not (= main_~list~0.base main_~end~0.base)) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 4) main_~list~0.base) (= 0 (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 0)) (= ~unnamed1~0~BLACK (select (select |#memory_int| main_~end~0.base) 8)) (= main_~list~0.offset (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 4)) (= (select (select |#memory_$Pointer$.base| main_~end~0.base) 0) main_~null~0.base) (= ~unnamed1~0~RED (select (select |#memory_int| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 8)))))} assume !(0 != #t~nondet2);havoc #t~nondet2; {3515#(and (= 0 main_~null~0.offset) (= 0 (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= 0 main_~list~0.offset) (exists ((main_~end~0.base Int)) (and (= 0 (select (select |#memory_$Pointer$.offset| main_~end~0.base) 4)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) 0) main_~null~0.offset) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 0) main_~end~0.base) (not (= main_~list~0.base main_~end~0.base)) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 4) main_~list~0.base) (= 0 (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 0)) (= ~unnamed1~0~BLACK (select (select |#memory_int| main_~end~0.base) 8)) (= main_~list~0.offset (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 4)) (= (select (select |#memory_$Pointer$.base| main_~end~0.base) 0) main_~null~0.base) (= ~unnamed1~0~RED (select (select |#memory_int| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 8)))))} is VALID [2020-07-17 22:32:43,565 INFO L280 TraceCheckUtils]: 19: Hoare triple {3515#(and (= 0 main_~null~0.offset) (= 0 (select (select |#memory_$Pointer$.offset| main_~list~0.base) main_~list~0.offset)) (= 0 main_~list~0.offset) (exists ((main_~end~0.base Int)) (and (= 0 (select (select |#memory_$Pointer$.offset| main_~end~0.base) 4)) (= (select (select |#memory_$Pointer$.base| main_~list~0.base) main_~list~0.offset) (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) (= (select (select |#memory_$Pointer$.offset| main_~end~0.base) 0) main_~null~0.offset) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 0) main_~end~0.base) (not (= main_~list~0.base main_~end~0.base)) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 4) main_~list~0.base) (= 0 (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 0)) (= ~unnamed1~0~BLACK (select (select |#memory_int| main_~end~0.base) 8)) (= main_~list~0.offset (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 4)) (= (select (select |#memory_$Pointer$.base| main_~end~0.base) 0) main_~null~0.base) (= ~unnamed1~0~RED (select (select |#memory_int| (select (select |#memory_$Pointer$.base| main_~end~0.base) 4)) 8)))))} ~end~0.base, ~end~0.offset := ~null~0.base, ~null~0.offset;~end~0.base, ~end~0.offset := ~list~0.base, ~list~0.offset; {3534#(and (exists ((v_subst_4 Int)) (and (= ~unnamed1~0~BLACK (select (select |#memory_int| v_subst_4) 8)) (= 0 (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| v_subst_4) 4)) 0)) (not (= main_~end~0.base v_subst_4)) (= (select (select |#memory_$Pointer$.base| v_subst_4) 0) main_~null~0.base) (= (select (select |#memory_$Pointer$.offset| v_subst_4) 0) main_~null~0.offset) (= main_~end~0.offset (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| v_subst_4) 4)) 4)) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| v_subst_4) 4)) 0) v_subst_4) (= 0 (select (select |#memory_$Pointer$.offset| v_subst_4) 4)) (= (select (select |#memory_$Pointer$.base| v_subst_4) 4) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| v_subst_4) 4)) 4) main_~end~0.base) (= ~unnamed1~0~RED (select (select |#memory_int| (select (select |#memory_$Pointer$.base| v_subst_4) 4)) 8)))) (= 0 main_~null~0.offset) (= 0 (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (= 0 main_~end~0.offset))} is VALID [2020-07-17 22:32:43,566 INFO L280 TraceCheckUtils]: 20: Hoare triple {3534#(and (exists ((v_subst_4 Int)) (and (= ~unnamed1~0~BLACK (select (select |#memory_int| v_subst_4) 8)) (= 0 (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| v_subst_4) 4)) 0)) (not (= main_~end~0.base v_subst_4)) (= (select (select |#memory_$Pointer$.base| v_subst_4) 0) main_~null~0.base) (= (select (select |#memory_$Pointer$.offset| v_subst_4) 0) main_~null~0.offset) (= main_~end~0.offset (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| v_subst_4) 4)) 4)) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| v_subst_4) 4)) 0) v_subst_4) (= 0 (select (select |#memory_$Pointer$.offset| v_subst_4) 4)) (= (select (select |#memory_$Pointer$.base| v_subst_4) 4) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| v_subst_4) 4)) 4) main_~end~0.base) (= ~unnamed1~0~RED (select (select |#memory_int| (select (select |#memory_$Pointer$.base| v_subst_4) 4)) 8)))) (= 0 main_~null~0.offset) (= 0 (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (= 0 main_~end~0.offset))} assume !!(~null~0.base != ~end~0.base || ~null~0.offset != ~end~0.offset); {3534#(and (exists ((v_subst_4 Int)) (and (= ~unnamed1~0~BLACK (select (select |#memory_int| v_subst_4) 8)) (= 0 (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| v_subst_4) 4)) 0)) (not (= main_~end~0.base v_subst_4)) (= (select (select |#memory_$Pointer$.base| v_subst_4) 0) main_~null~0.base) (= (select (select |#memory_$Pointer$.offset| v_subst_4) 0) main_~null~0.offset) (= main_~end~0.offset (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| v_subst_4) 4)) 4)) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| v_subst_4) 4)) 0) v_subst_4) (= 0 (select (select |#memory_$Pointer$.offset| v_subst_4) 4)) (= (select (select |#memory_$Pointer$.base| v_subst_4) 4) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| v_subst_4) 4)) 4) main_~end~0.base) (= ~unnamed1~0~RED (select (select |#memory_int| (select (select |#memory_$Pointer$.base| v_subst_4) 4)) 8)))) (= 0 main_~null~0.offset) (= 0 (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (= 0 main_~end~0.offset))} is VALID [2020-07-17 22:32:43,567 INFO L280 TraceCheckUtils]: 21: Hoare triple {3534#(and (exists ((v_subst_4 Int)) (and (= ~unnamed1~0~BLACK (select (select |#memory_int| v_subst_4) 8)) (= 0 (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| v_subst_4) 4)) 0)) (not (= main_~end~0.base v_subst_4)) (= (select (select |#memory_$Pointer$.base| v_subst_4) 0) main_~null~0.base) (= (select (select |#memory_$Pointer$.offset| v_subst_4) 0) main_~null~0.offset) (= main_~end~0.offset (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| v_subst_4) 4)) 4)) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| v_subst_4) 4)) 0) v_subst_4) (= 0 (select (select |#memory_$Pointer$.offset| v_subst_4) 4)) (= (select (select |#memory_$Pointer$.base| v_subst_4) 4) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| v_subst_4) 4)) 4) main_~end~0.base) (= ~unnamed1~0~RED (select (select |#memory_int| (select (select |#memory_$Pointer$.base| v_subst_4) 4)) 8)))) (= 0 main_~null~0.offset) (= 0 (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (= 0 main_~end~0.offset))} goto; {3534#(and (exists ((v_subst_4 Int)) (and (= ~unnamed1~0~BLACK (select (select |#memory_int| v_subst_4) 8)) (= 0 (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| v_subst_4) 4)) 0)) (not (= main_~end~0.base v_subst_4)) (= (select (select |#memory_$Pointer$.base| v_subst_4) 0) main_~null~0.base) (= (select (select |#memory_$Pointer$.offset| v_subst_4) 0) main_~null~0.offset) (= main_~end~0.offset (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| v_subst_4) 4)) 4)) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| v_subst_4) 4)) 0) v_subst_4) (= 0 (select (select |#memory_$Pointer$.offset| v_subst_4) 4)) (= (select (select |#memory_$Pointer$.base| v_subst_4) 4) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| v_subst_4) 4)) 4) main_~end~0.base) (= ~unnamed1~0~RED (select (select |#memory_int| (select (select |#memory_$Pointer$.base| v_subst_4) 4)) 8)))) (= 0 main_~null~0.offset) (= 0 (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (= 0 main_~end~0.offset))} is VALID [2020-07-17 22:32:43,568 INFO L280 TraceCheckUtils]: 22: Hoare triple {3534#(and (exists ((v_subst_4 Int)) (and (= ~unnamed1~0~BLACK (select (select |#memory_int| v_subst_4) 8)) (= 0 (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| v_subst_4) 4)) 0)) (not (= main_~end~0.base v_subst_4)) (= (select (select |#memory_$Pointer$.base| v_subst_4) 0) main_~null~0.base) (= (select (select |#memory_$Pointer$.offset| v_subst_4) 0) main_~null~0.offset) (= main_~end~0.offset (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| v_subst_4) 4)) 4)) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| v_subst_4) 4)) 0) v_subst_4) (= 0 (select (select |#memory_$Pointer$.offset| v_subst_4) 4)) (= (select (select |#memory_$Pointer$.base| v_subst_4) 4) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| v_subst_4) 4)) 4) main_~end~0.base) (= ~unnamed1~0~RED (select (select |#memory_int| (select (select |#memory_$Pointer$.base| v_subst_4) 4)) 8)))) (= 0 main_~null~0.offset) (= 0 (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (= 0 main_~end~0.offset))} call #t~mem12 := read~int(~end~0.base, 8 + ~end~0.offset, 4); {3534#(and (exists ((v_subst_4 Int)) (and (= ~unnamed1~0~BLACK (select (select |#memory_int| v_subst_4) 8)) (= 0 (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| v_subst_4) 4)) 0)) (not (= main_~end~0.base v_subst_4)) (= (select (select |#memory_$Pointer$.base| v_subst_4) 0) main_~null~0.base) (= (select (select |#memory_$Pointer$.offset| v_subst_4) 0) main_~null~0.offset) (= main_~end~0.offset (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| v_subst_4) 4)) 4)) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| v_subst_4) 4)) 0) v_subst_4) (= 0 (select (select |#memory_$Pointer$.offset| v_subst_4) 4)) (= (select (select |#memory_$Pointer$.base| v_subst_4) 4) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| v_subst_4) 4)) 4) main_~end~0.base) (= ~unnamed1~0~RED (select (select |#memory_int| (select (select |#memory_$Pointer$.base| v_subst_4) 4)) 8)))) (= 0 main_~null~0.offset) (= 0 (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (= 0 main_~end~0.offset))} is VALID [2020-07-17 22:32:43,570 INFO L280 TraceCheckUtils]: 23: Hoare triple {3534#(and (exists ((v_subst_4 Int)) (and (= ~unnamed1~0~BLACK (select (select |#memory_int| v_subst_4) 8)) (= 0 (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| v_subst_4) 4)) 0)) (not (= main_~end~0.base v_subst_4)) (= (select (select |#memory_$Pointer$.base| v_subst_4) 0) main_~null~0.base) (= (select (select |#memory_$Pointer$.offset| v_subst_4) 0) main_~null~0.offset) (= main_~end~0.offset (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| v_subst_4) 4)) 4)) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| v_subst_4) 4)) 0) v_subst_4) (= 0 (select (select |#memory_$Pointer$.offset| v_subst_4) 4)) (= (select (select |#memory_$Pointer$.base| v_subst_4) 4) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| v_subst_4) 4)) 4) main_~end~0.base) (= ~unnamed1~0~RED (select (select |#memory_int| (select (select |#memory_$Pointer$.base| v_subst_4) 4)) 8)))) (= 0 main_~null~0.offset) (= 0 (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (= 0 main_~end~0.offset))} assume !!(~unnamed1~0~BLACK == #t~mem12);havoc #t~mem12; {3534#(and (exists ((v_subst_4 Int)) (and (= ~unnamed1~0~BLACK (select (select |#memory_int| v_subst_4) 8)) (= 0 (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| v_subst_4) 4)) 0)) (not (= main_~end~0.base v_subst_4)) (= (select (select |#memory_$Pointer$.base| v_subst_4) 0) main_~null~0.base) (= (select (select |#memory_$Pointer$.offset| v_subst_4) 0) main_~null~0.offset) (= main_~end~0.offset (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| v_subst_4) 4)) 4)) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| v_subst_4) 4)) 0) v_subst_4) (= 0 (select (select |#memory_$Pointer$.offset| v_subst_4) 4)) (= (select (select |#memory_$Pointer$.base| v_subst_4) 4) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| v_subst_4) 4)) 4) main_~end~0.base) (= ~unnamed1~0~RED (select (select |#memory_int| (select (select |#memory_$Pointer$.base| v_subst_4) 4)) 8)))) (= 0 main_~null~0.offset) (= 0 (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (= 0 main_~end~0.offset))} is VALID [2020-07-17 22:32:43,572 INFO L280 TraceCheckUtils]: 24: Hoare triple {3534#(and (exists ((v_subst_4 Int)) (and (= ~unnamed1~0~BLACK (select (select |#memory_int| v_subst_4) 8)) (= 0 (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| v_subst_4) 4)) 0)) (not (= main_~end~0.base v_subst_4)) (= (select (select |#memory_$Pointer$.base| v_subst_4) 0) main_~null~0.base) (= (select (select |#memory_$Pointer$.offset| v_subst_4) 0) main_~null~0.offset) (= main_~end~0.offset (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| v_subst_4) 4)) 4)) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| v_subst_4) 4)) 0) v_subst_4) (= 0 (select (select |#memory_$Pointer$.offset| v_subst_4) 4)) (= (select (select |#memory_$Pointer$.base| v_subst_4) 4) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| v_subst_4) 4)) 4) main_~end~0.base) (= ~unnamed1~0~RED (select (select |#memory_int| (select (select |#memory_$Pointer$.base| v_subst_4) 4)) 8)))) (= 0 main_~null~0.offset) (= 0 (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (= 0 main_~end~0.offset))} goto; {3534#(and (exists ((v_subst_4 Int)) (and (= ~unnamed1~0~BLACK (select (select |#memory_int| v_subst_4) 8)) (= 0 (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| v_subst_4) 4)) 0)) (not (= main_~end~0.base v_subst_4)) (= (select (select |#memory_$Pointer$.base| v_subst_4) 0) main_~null~0.base) (= (select (select |#memory_$Pointer$.offset| v_subst_4) 0) main_~null~0.offset) (= main_~end~0.offset (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| v_subst_4) 4)) 4)) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| v_subst_4) 4)) 0) v_subst_4) (= 0 (select (select |#memory_$Pointer$.offset| v_subst_4) 4)) (= (select (select |#memory_$Pointer$.base| v_subst_4) 4) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| v_subst_4) 4)) 4) main_~end~0.base) (= ~unnamed1~0~RED (select (select |#memory_int| (select (select |#memory_$Pointer$.base| v_subst_4) 4)) 8)))) (= 0 main_~null~0.offset) (= 0 (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (= 0 main_~end~0.offset))} is VALID [2020-07-17 22:32:43,573 INFO L280 TraceCheckUtils]: 25: Hoare triple {3534#(and (exists ((v_subst_4 Int)) (and (= ~unnamed1~0~BLACK (select (select |#memory_int| v_subst_4) 8)) (= 0 (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| v_subst_4) 4)) 0)) (not (= main_~end~0.base v_subst_4)) (= (select (select |#memory_$Pointer$.base| v_subst_4) 0) main_~null~0.base) (= (select (select |#memory_$Pointer$.offset| v_subst_4) 0) main_~null~0.offset) (= main_~end~0.offset (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| v_subst_4) 4)) 4)) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| v_subst_4) 4)) 0) v_subst_4) (= 0 (select (select |#memory_$Pointer$.offset| v_subst_4) 4)) (= (select (select |#memory_$Pointer$.base| v_subst_4) 4) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| v_subst_4) 4)) 4) main_~end~0.base) (= ~unnamed1~0~RED (select (select |#memory_int| (select (select |#memory_$Pointer$.base| v_subst_4) 4)) 8)))) (= 0 main_~null~0.offset) (= 0 (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (= 0 main_~end~0.offset))} assume !!(~null~0.base != ~end~0.base || ~null~0.offset != ~end~0.offset);call #t~mem13 := read~int(~end~0.base, 8 + ~end~0.offset, 4); {3534#(and (exists ((v_subst_4 Int)) (and (= ~unnamed1~0~BLACK (select (select |#memory_int| v_subst_4) 8)) (= 0 (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| v_subst_4) 4)) 0)) (not (= main_~end~0.base v_subst_4)) (= (select (select |#memory_$Pointer$.base| v_subst_4) 0) main_~null~0.base) (= (select (select |#memory_$Pointer$.offset| v_subst_4) 0) main_~null~0.offset) (= main_~end~0.offset (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| v_subst_4) 4)) 4)) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| v_subst_4) 4)) 0) v_subst_4) (= 0 (select (select |#memory_$Pointer$.offset| v_subst_4) 4)) (= (select (select |#memory_$Pointer$.base| v_subst_4) 4) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| v_subst_4) 4)) 4) main_~end~0.base) (= ~unnamed1~0~RED (select (select |#memory_int| (select (select |#memory_$Pointer$.base| v_subst_4) 4)) 8)))) (= 0 main_~null~0.offset) (= 0 (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (= 0 main_~end~0.offset))} is VALID [2020-07-17 22:32:43,574 INFO L280 TraceCheckUtils]: 26: Hoare triple {3534#(and (exists ((v_subst_4 Int)) (and (= ~unnamed1~0~BLACK (select (select |#memory_int| v_subst_4) 8)) (= 0 (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| v_subst_4) 4)) 0)) (not (= main_~end~0.base v_subst_4)) (= (select (select |#memory_$Pointer$.base| v_subst_4) 0) main_~null~0.base) (= (select (select |#memory_$Pointer$.offset| v_subst_4) 0) main_~null~0.offset) (= main_~end~0.offset (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| v_subst_4) 4)) 4)) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| v_subst_4) 4)) 0) v_subst_4) (= 0 (select (select |#memory_$Pointer$.offset| v_subst_4) 4)) (= (select (select |#memory_$Pointer$.base| v_subst_4) 4) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| v_subst_4) 4)) 4) main_~end~0.base) (= ~unnamed1~0~RED (select (select |#memory_int| (select (select |#memory_$Pointer$.base| v_subst_4) 4)) 8)))) (= 0 main_~null~0.offset) (= 0 (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (= 0 main_~end~0.offset))} assume !(~unnamed1~0~RED == #t~mem13);havoc #t~mem13; {3534#(and (exists ((v_subst_4 Int)) (and (= ~unnamed1~0~BLACK (select (select |#memory_int| v_subst_4) 8)) (= 0 (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| v_subst_4) 4)) 0)) (not (= main_~end~0.base v_subst_4)) (= (select (select |#memory_$Pointer$.base| v_subst_4) 0) main_~null~0.base) (= (select (select |#memory_$Pointer$.offset| v_subst_4) 0) main_~null~0.offset) (= main_~end~0.offset (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| v_subst_4) 4)) 4)) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| v_subst_4) 4)) 0) v_subst_4) (= 0 (select (select |#memory_$Pointer$.offset| v_subst_4) 4)) (= (select (select |#memory_$Pointer$.base| v_subst_4) 4) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| v_subst_4) 4)) 4) main_~end~0.base) (= ~unnamed1~0~RED (select (select |#memory_int| (select (select |#memory_$Pointer$.base| v_subst_4) 4)) 8)))) (= 0 main_~null~0.offset) (= 0 (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (= 0 main_~end~0.offset))} is VALID [2020-07-17 22:32:43,577 INFO L280 TraceCheckUtils]: 27: Hoare triple {3534#(and (exists ((v_subst_4 Int)) (and (= ~unnamed1~0~BLACK (select (select |#memory_int| v_subst_4) 8)) (= 0 (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| v_subst_4) 4)) 0)) (not (= main_~end~0.base v_subst_4)) (= (select (select |#memory_$Pointer$.base| v_subst_4) 0) main_~null~0.base) (= (select (select |#memory_$Pointer$.offset| v_subst_4) 0) main_~null~0.offset) (= main_~end~0.offset (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| v_subst_4) 4)) 4)) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| v_subst_4) 4)) 0) v_subst_4) (= 0 (select (select |#memory_$Pointer$.offset| v_subst_4) 4)) (= (select (select |#memory_$Pointer$.base| v_subst_4) 4) (select (select |#memory_$Pointer$.base| main_~end~0.base) main_~end~0.offset)) (= (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| v_subst_4) 4)) 4) main_~end~0.base) (= ~unnamed1~0~RED (select (select |#memory_int| (select (select |#memory_$Pointer$.base| v_subst_4) 4)) 8)))) (= 0 main_~null~0.offset) (= 0 (select (select |#memory_$Pointer$.offset| main_~end~0.base) main_~end~0.offset)) (= 0 main_~end~0.offset))} call #t~mem16.base, #t~mem16.offset := read~$Pointer$(~end~0.base, ~end~0.offset, 4);~end~0.base, ~end~0.offset := #t~mem16.base, #t~mem16.offset;havoc #t~mem16.base, #t~mem16.offset; {3559#(and (= 0 main_~null~0.offset) (= ~unnamed1~0~RED (select (select |#memory_int| main_~end~0.base) 8)) (exists ((v_subst_4 Int)) (= ~unnamed1~0~BLACK (select (select |#memory_int| v_subst_4) 8))) (= 0 main_~end~0.offset))} is VALID [2020-07-17 22:32:43,578 INFO L280 TraceCheckUtils]: 28: Hoare triple {3559#(and (= 0 main_~null~0.offset) (= ~unnamed1~0~RED (select (select |#memory_int| main_~end~0.base) 8)) (exists ((v_subst_4 Int)) (= ~unnamed1~0~BLACK (select (select |#memory_int| v_subst_4) 8))) (= 0 main_~end~0.offset))} assume !!(~null~0.base != ~end~0.base || ~null~0.offset != ~end~0.offset);call #t~mem13 := read~int(~end~0.base, 8 + ~end~0.offset, 4); {3563#(= |main_#t~mem13| ~unnamed1~0~RED)} is VALID [2020-07-17 22:32:43,579 INFO L280 TraceCheckUtils]: 29: Hoare triple {3563#(= |main_#t~mem13| ~unnamed1~0~RED)} assume !(~unnamed1~0~RED == #t~mem13);havoc #t~mem13; {3453#false} is VALID [2020-07-17 22:32:43,579 INFO L280 TraceCheckUtils]: 30: Hoare triple {3453#false} call #t~mem16.base, #t~mem16.offset := read~$Pointer$(~end~0.base, ~end~0.offset, 4);~end~0.base, ~end~0.offset := #t~mem16.base, #t~mem16.offset;havoc #t~mem16.base, #t~mem16.offset; {3453#false} is VALID [2020-07-17 22:32:43,579 INFO L280 TraceCheckUtils]: 31: Hoare triple {3453#false} assume !!(~null~0.base != ~end~0.base || ~null~0.offset != ~end~0.offset);call #t~mem13 := read~int(~end~0.base, 8 + ~end~0.offset, 4); {3453#false} is VALID [2020-07-17 22:32:43,580 INFO L280 TraceCheckUtils]: 32: Hoare triple {3453#false} assume ~unnamed1~0~RED == #t~mem13;havoc #t~mem13;call #t~mem14.base, #t~mem14.offset := read~$Pointer$(~end~0.base, ~end~0.offset, 4);~end~0.base, ~end~0.offset := #t~mem14.base, #t~mem14.offset;havoc #t~mem14.base, #t~mem14.offset; {3453#false} is VALID [2020-07-17 22:32:43,580 INFO L280 TraceCheckUtils]: 33: Hoare triple {3453#false} assume !(~null~0.base != ~end~0.base || ~null~0.offset != ~end~0.offset); {3453#false} is VALID [2020-07-17 22:32:43,580 INFO L280 TraceCheckUtils]: 34: Hoare triple {3453#false} assume !false; {3453#false} is VALID [2020-07-17 22:32:43,593 INFO L134 CoverageAnalysis]: Checked inductivity of 9 backedges. 5 proven. 4 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-17 22:32:43,593 INFO L220 FreeRefinementEngine]: Constructing automaton from 0 perfect and 2 imperfect interpolant sequences. [2020-07-17 22:32:43,593 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [14, 10] total 22 [2020-07-17 22:32:43,594 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [600770286] [2020-07-17 22:32:43,594 INFO L78 Accepts]: Start accepts. Automaton has 22 states. Word has length 35 [2020-07-17 22:32:43,595 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-17 22:32:43,595 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 22 states. [2020-07-17 22:32:43,725 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 65 edges. 65 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-17 22:32:43,725 INFO L459 AbstractCegarLoop]: Interpolant automaton has 22 states [2020-07-17 22:32:43,725 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-17 22:32:43,725 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 22 interpolants. [2020-07-17 22:32:43,725 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=54, Invalid=408, Unknown=0, NotChecked=0, Total=462 [2020-07-17 22:32:43,725 INFO L87 Difference]: Start difference. First operand 82 states and 90 transitions. Second operand 22 states. [2020-07-17 22:32:48,788 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-17 22:32:48,789 INFO L93 Difference]: Finished difference Result 138 states and 150 transitions. [2020-07-17 22:32:48,789 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 19 states. [2020-07-17 22:32:48,789 INFO L78 Accepts]: Start accepts. Automaton has 22 states. Word has length 35 [2020-07-17 22:32:48,789 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-17 22:32:48,789 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 22 states. [2020-07-17 22:32:48,791 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 19 states to 19 states and 122 transitions. [2020-07-17 22:32:48,791 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 22 states. [2020-07-17 22:32:48,793 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 19 states to 19 states and 122 transitions. [2020-07-17 22:32:48,793 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 19 states and 122 transitions. [2020-07-17 22:32:49,078 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 122 edges. 122 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-17 22:32:49,081 INFO L225 Difference]: With dead ends: 138 [2020-07-17 22:32:49,081 INFO L226 Difference]: Without dead ends: 126 [2020-07-17 22:32:49,082 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 61 GetRequests, 29 SyntacticMatches, 0 SemanticMatches, 32 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 173 ImplicationChecksByTransitivity, 1.8s TimeCoverageRelationStatistics Valid=145, Invalid=977, Unknown=0, NotChecked=0, Total=1122 [2020-07-17 22:32:49,082 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 126 states. [2020-07-17 22:32:49,249 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 126 to 103. [2020-07-17 22:32:49,249 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-17 22:32:49,250 INFO L82 GeneralOperation]: Start isEquivalent. First operand 126 states. Second operand 103 states. [2020-07-17 22:32:49,250 INFO L74 IsIncluded]: Start isIncluded. First operand 126 states. Second operand 103 states. [2020-07-17 22:32:49,250 INFO L87 Difference]: Start difference. First operand 126 states. Second operand 103 states. [2020-07-17 22:32:49,255 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-17 22:32:49,255 INFO L93 Difference]: Finished difference Result 126 states and 136 transitions. [2020-07-17 22:32:49,255 INFO L276 IsEmpty]: Start isEmpty. Operand 126 states and 136 transitions. [2020-07-17 22:32:49,256 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-17 22:32:49,256 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-17 22:32:49,256 INFO L74 IsIncluded]: Start isIncluded. First operand 103 states. Second operand 126 states. [2020-07-17 22:32:49,256 INFO L87 Difference]: Start difference. First operand 103 states. Second operand 126 states. [2020-07-17 22:32:49,259 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-17 22:32:49,259 INFO L93 Difference]: Finished difference Result 126 states and 136 transitions. [2020-07-17 22:32:49,259 INFO L276 IsEmpty]: Start isEmpty. Operand 126 states and 136 transitions. [2020-07-17 22:32:49,260 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-17 22:32:49,260 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-17 22:32:49,260 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-17 22:32:49,260 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-17 22:32:49,260 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 103 states. [2020-07-17 22:32:49,262 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 103 states to 103 states and 112 transitions. [2020-07-17 22:32:49,263 INFO L78 Accepts]: Start accepts. Automaton has 103 states and 112 transitions. Word has length 35 [2020-07-17 22:32:49,263 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-17 22:32:49,266 INFO L479 AbstractCegarLoop]: Abstraction has 103 states and 112 transitions. [2020-07-17 22:32:49,266 INFO L480 AbstractCegarLoop]: Interpolant automaton has 22 states. [2020-07-17 22:32:49,266 INFO L276 IsEmpty]: Start isEmpty. Operand 103 states and 112 transitions. [2020-07-17 22:32:49,270 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 36 [2020-07-17 22:32:49,271 INFO L414 BasicCegarLoop]: Found error trace [2020-07-17 22:32:49,272 INFO L422 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-17 22:32:49,485 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 6 z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable11 [2020-07-17 22:32:49,486 INFO L427 AbstractCegarLoop]: === Iteration 13 === [mainErr4ASSERT_VIOLATIONERROR_FUNCTION, mainErr0ASSERT_VIOLATIONERROR_FUNCTION, mainErr2ASSERT_VIOLATIONERROR_FUNCTION, mainErr6ASSERT_VIOLATIONERROR_FUNCTION, mainErr5ASSERT_VIOLATIONERROR_FUNCTION, mainErr3ASSERT_VIOLATIONERROR_FUNCTION, mainErr1ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-17 22:32:49,486 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-17 22:32:49,486 INFO L82 PathProgramCache]: Analyzing trace with hash -969799515, now seen corresponding path program 1 times [2020-07-17 22:32:49,486 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-17 22:32:49,486 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [914134660] [2020-07-17 22:32:49,487 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-17 22:32:49,534 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2020-07-17 22:32:49,573 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2020-07-17 22:32:49,614 INFO L174 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2020-07-17 22:32:49,614 INFO L520 BasicCegarLoop]: Counterexample might be feasible [2020-07-17 22:32:49,614 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable12 [2020-07-17 22:32:49,683 WARN L170 areAnnotationChecker]: ULTIMATE.initENTRY has no Hoare annotation [2020-07-17 22:32:49,683 WARN L170 areAnnotationChecker]: ULTIMATE.startENTRY has no Hoare annotation [2020-07-17 22:32:49,683 WARN L170 areAnnotationChecker]: ULTIMATE.startENTRY has no Hoare annotation [2020-07-17 22:32:49,683 WARN L170 areAnnotationChecker]: mainENTRY has no Hoare annotation [2020-07-17 22:32:49,684 WARN L170 areAnnotationChecker]: ULTIMATE.initFINAL has no Hoare annotation [2020-07-17 22:32:49,684 WARN L170 areAnnotationChecker]: L-1 has no Hoare annotation [2020-07-17 22:32:49,684 WARN L170 areAnnotationChecker]: L-1 has no Hoare annotation [2020-07-17 22:32:49,684 WARN L170 areAnnotationChecker]: L1023-4 has no Hoare annotation [2020-07-17 22:32:49,684 WARN L170 areAnnotationChecker]: L1023-4 has no Hoare annotation [2020-07-17 22:32:49,684 WARN L170 areAnnotationChecker]: ULTIMATE.initEXIT has no Hoare annotation [2020-07-17 22:32:49,684 WARN L170 areAnnotationChecker]: ULTIMATE.startFINAL has no Hoare annotation [2020-07-17 22:32:49,685 WARN L170 areAnnotationChecker]: L1000-3 has no Hoare annotation [2020-07-17 22:32:49,685 WARN L170 areAnnotationChecker]: L1000-1 has no Hoare annotation [2020-07-17 22:32:49,685 WARN L170 areAnnotationChecker]: L1000-1 has no Hoare annotation [2020-07-17 22:32:49,685 WARN L170 areAnnotationChecker]: L1030-4 has no Hoare annotation [2020-07-17 22:32:49,685 WARN L170 areAnnotationChecker]: L1030-4 has no Hoare annotation [2020-07-17 22:32:49,685 WARN L170 areAnnotationChecker]: L1030-4 has no Hoare annotation [2020-07-17 22:32:49,685 WARN L170 areAnnotationChecker]: L1008 has no Hoare annotation [2020-07-17 22:32:49,685 WARN L170 areAnnotationChecker]: L1008 has no Hoare annotation [2020-07-17 22:32:49,686 WARN L170 areAnnotationChecker]: L1031-4 has no Hoare annotation [2020-07-17 22:32:49,686 WARN L170 areAnnotationChecker]: L1031-4 has no Hoare annotation [2020-07-17 22:32:49,686 WARN L170 areAnnotationChecker]: L1030-1 has no Hoare annotation [2020-07-17 22:32:49,686 WARN L170 areAnnotationChecker]: L1030-1 has no Hoare annotation [2020-07-17 22:32:49,686 WARN L170 areAnnotationChecker]: L1030-3 has no Hoare annotation [2020-07-17 22:32:49,686 WARN L170 areAnnotationChecker]: L1030-3 has no Hoare annotation [2020-07-17 22:32:49,686 WARN L170 areAnnotationChecker]: L1021-4 has no Hoare annotation [2020-07-17 22:32:49,686 WARN L170 areAnnotationChecker]: L1021-4 has no Hoare annotation [2020-07-17 22:32:49,687 WARN L170 areAnnotationChecker]: L1031 has no Hoare annotation [2020-07-17 22:32:49,687 WARN L170 areAnnotationChecker]: L1031 has no Hoare annotation [2020-07-17 22:32:49,687 WARN L170 areAnnotationChecker]: L1032-1 has no Hoare annotation [2020-07-17 22:32:49,687 WARN L170 areAnnotationChecker]: L1032-1 has no Hoare annotation [2020-07-17 22:32:49,687 WARN L170 areAnnotationChecker]: L1032-1 has no Hoare annotation [2020-07-17 22:32:49,687 WARN L170 areAnnotationChecker]: L1021 has no Hoare annotation [2020-07-17 22:32:49,687 WARN L170 areAnnotationChecker]: L1021 has no Hoare annotation [2020-07-17 22:32:49,687 WARN L170 areAnnotationChecker]: L1022-4 has no Hoare annotation [2020-07-17 22:32:49,687 WARN L170 areAnnotationChecker]: L1022-4 has no Hoare annotation [2020-07-17 22:32:49,687 WARN L170 areAnnotationChecker]: L1031-1 has no Hoare annotation [2020-07-17 22:32:49,688 WARN L170 areAnnotationChecker]: L1031-1 has no Hoare annotation [2020-07-17 22:32:49,688 WARN L170 areAnnotationChecker]: L1031-3 has no Hoare annotation [2020-07-17 22:32:49,688 WARN L170 areAnnotationChecker]: L1031-3 has no Hoare annotation [2020-07-17 22:32:49,688 WARN L170 areAnnotationChecker]: L1047-2 has no Hoare annotation [2020-07-17 22:32:49,688 WARN L170 areAnnotationChecker]: L1047-2 has no Hoare annotation [2020-07-17 22:32:49,688 WARN L170 areAnnotationChecker]: L1047-2 has no Hoare annotation [2020-07-17 22:32:49,688 WARN L170 areAnnotationChecker]: L1034 has no Hoare annotation [2020-07-17 22:32:49,688 WARN L170 areAnnotationChecker]: L1034 has no Hoare annotation [2020-07-17 22:32:49,688 WARN L170 areAnnotationChecker]: L1021-1 has no Hoare annotation [2020-07-17 22:32:49,689 WARN L170 areAnnotationChecker]: L1021-1 has no Hoare annotation [2020-07-17 22:32:49,689 WARN L170 areAnnotationChecker]: L1021-3 has no Hoare annotation [2020-07-17 22:32:49,689 WARN L170 areAnnotationChecker]: L1021-3 has no Hoare annotation [2020-07-17 22:32:49,689 WARN L170 areAnnotationChecker]: L1022 has no Hoare annotation [2020-07-17 22:32:49,689 WARN L170 areAnnotationChecker]: L1022 has no Hoare annotation [2020-07-17 22:32:49,689 WARN L170 areAnnotationChecker]: L1023-3 has no Hoare annotation [2020-07-17 22:32:49,689 WARN L170 areAnnotationChecker]: L1023-3 has no Hoare annotation [2020-07-17 22:32:49,689 WARN L170 areAnnotationChecker]: L1023-3 has no Hoare annotation [2020-07-17 22:32:49,689 WARN L170 areAnnotationChecker]: L1045-1 has no Hoare annotation [2020-07-17 22:32:49,689 WARN L170 areAnnotationChecker]: L1047 has no Hoare annotation [2020-07-17 22:32:49,690 WARN L170 areAnnotationChecker]: L1047 has no Hoare annotation [2020-07-17 22:32:49,690 WARN L170 areAnnotationChecker]: L1037-4 has no Hoare annotation [2020-07-17 22:32:49,690 WARN L170 areAnnotationChecker]: L1037-4 has no Hoare annotation [2020-07-17 22:32:49,690 WARN L170 areAnnotationChecker]: L1037-4 has no Hoare annotation [2020-07-17 22:32:49,690 WARN L170 areAnnotationChecker]: L1034-1 has no Hoare annotation [2020-07-17 22:32:49,690 WARN L170 areAnnotationChecker]: L1022-1 has no Hoare annotation [2020-07-17 22:32:49,690 WARN L170 areAnnotationChecker]: L1022-1 has no Hoare annotation [2020-07-17 22:32:49,690 WARN L170 areAnnotationChecker]: L1022-3 has no Hoare annotation [2020-07-17 22:32:49,690 WARN L170 areAnnotationChecker]: L1022-3 has no Hoare annotation [2020-07-17 22:32:49,690 WARN L170 areAnnotationChecker]: L1023 has no Hoare annotation [2020-07-17 22:32:49,691 WARN L170 areAnnotationChecker]: L1023 has no Hoare annotation [2020-07-17 22:32:49,691 WARN L170 areAnnotationChecker]: L1023-2 has no Hoare annotation [2020-07-17 22:32:49,691 WARN L170 areAnnotationChecker]: L1023-2 has no Hoare annotation [2020-07-17 22:32:49,691 WARN L170 areAnnotationChecker]: mainFINAL has no Hoare annotation [2020-07-17 22:32:49,691 WARN L170 areAnnotationChecker]: L1038-4 has no Hoare annotation [2020-07-17 22:32:49,691 WARN L170 areAnnotationChecker]: L1038-4 has no Hoare annotation [2020-07-17 22:32:49,691 WARN L170 areAnnotationChecker]: L1037-1 has no Hoare annotation [2020-07-17 22:32:49,691 WARN L170 areAnnotationChecker]: L1037-1 has no Hoare annotation [2020-07-17 22:32:49,691 WARN L170 areAnnotationChecker]: L1037-3 has no Hoare annotation [2020-07-17 22:32:49,692 WARN L170 areAnnotationChecker]: L1037-3 has no Hoare annotation [2020-07-17 22:32:49,692 WARN L170 areAnnotationChecker]: mainEXIT has no Hoare annotation [2020-07-17 22:32:49,692 WARN L170 areAnnotationChecker]: L1038 has no Hoare annotation [2020-07-17 22:32:49,692 WARN L170 areAnnotationChecker]: L1038 has no Hoare annotation [2020-07-17 22:32:49,692 WARN L170 areAnnotationChecker]: L1038-1 has no Hoare annotation [2020-07-17 22:32:49,692 WARN L170 areAnnotationChecker]: L1038-1 has no Hoare annotation [2020-07-17 22:32:49,692 WARN L170 areAnnotationChecker]: L1038-3 has no Hoare annotation [2020-07-17 22:32:49,692 WARN L170 areAnnotationChecker]: L1038-3 has no Hoare annotation [2020-07-17 22:32:49,692 INFO L163 areAnnotationChecker]: CFG has 0 edges. 0 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. 0 times interpolants missing. [2020-07-17 22:32:49,698 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 17.07 10:32:49 BoogieIcfgContainer [2020-07-17 22:32:49,698 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2020-07-17 22:32:49,701 INFO L168 Benchmark]: Toolchain (without parser) took 60340.53 ms. Allocated memory was 138.9 MB in the beginning and 450.4 MB in the end (delta: 311.4 MB). Free memory was 101.1 MB in the beginning and 347.6 MB in the end (delta: -246.5 MB). Peak memory consumption was 65.0 MB. Max. memory is 7.1 GB. [2020-07-17 22:32:49,701 INFO L168 Benchmark]: CDTParser took 0.55 ms. Allocated memory is still 138.9 MB. Free memory is still 120.4 MB. There was no memory consumed. Max. memory is 7.1 GB. [2020-07-17 22:32:49,702 INFO L168 Benchmark]: CACSL2BoogieTranslator took 749.77 ms. Allocated memory was 138.9 MB in the beginning and 201.9 MB in the end (delta: 62.9 MB). Free memory was 100.7 MB in the beginning and 167.2 MB in the end (delta: -66.5 MB). Peak memory consumption was 26.7 MB. Max. memory is 7.1 GB. [2020-07-17 22:32:49,703 INFO L168 Benchmark]: Boogie Preprocessor took 85.08 ms. Allocated memory is still 201.9 MB. Free memory was 167.2 MB in the beginning and 163.4 MB in the end (delta: 3.8 MB). Peak memory consumption was 3.8 MB. Max. memory is 7.1 GB. [2020-07-17 22:32:49,703 INFO L168 Benchmark]: RCFGBuilder took 844.02 ms. Allocated memory is still 201.9 MB. Free memory was 163.4 MB in the beginning and 92.9 MB in the end (delta: 70.5 MB). Peak memory consumption was 70.5 MB. Max. memory is 7.1 GB. [2020-07-17 22:32:49,703 INFO L168 Benchmark]: TraceAbstraction took 58654.34 ms. Allocated memory was 201.9 MB in the beginning and 450.4 MB in the end (delta: 248.5 MB). Free memory was 92.9 MB in the beginning and 347.6 MB in the end (delta: -254.7 MB). There was no memory consumed. Max. memory is 7.1 GB. [2020-07-17 22:32:49,706 INFO L336 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - AssertionsEnabledResult: Assertions are enabled Assertions are enabled - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.55 ms. Allocated memory is still 138.9 MB. Free memory is still 120.4 MB. There was no memory consumed. Max. memory is 7.1 GB. * CACSL2BoogieTranslator took 749.77 ms. Allocated memory was 138.9 MB in the beginning and 201.9 MB in the end (delta: 62.9 MB). Free memory was 100.7 MB in the beginning and 167.2 MB in the end (delta: -66.5 MB). Peak memory consumption was 26.7 MB. Max. memory is 7.1 GB. * Boogie Preprocessor took 85.08 ms. Allocated memory is still 201.9 MB. Free memory was 167.2 MB in the beginning and 163.4 MB in the end (delta: 3.8 MB). Peak memory consumption was 3.8 MB. Max. memory is 7.1 GB. * RCFGBuilder took 844.02 ms. Allocated memory is still 201.9 MB. Free memory was 163.4 MB in the beginning and 92.9 MB in the end (delta: 70.5 MB). Peak memory consumption was 70.5 MB. Max. memory is 7.1 GB. * TraceAbstraction took 58654.34 ms. Allocated memory was 201.9 MB in the beginning and 450.4 MB in the end (delta: 248.5 MB). Free memory was 92.9 MB in the beginning and 347.6 MB in the end (delta: -254.7 MB). There was no memory consumed. Max. memory is 7.1 GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - CounterExampleResult [Line: 1038]: a call of __VERIFIER_error() is reachable a call of __VERIFIER_error() is reachable We found a FailurePath: [L987] struct TSLL* null = malloc(sizeof(struct TSLL)); [L988] null->next = ((void*)0) [L989] null->prev = ((void*)0) [L990] null->colour = BLACK [L992] struct TSLL* list = malloc(sizeof(struct TSLL)); [L993] list->next = null [L994] list->prev = null [L995] list->colour = BLACK [L997] struct TSLL* end = list; VAL [end={-1:0}, list={-1:0}, malloc(sizeof(struct TSLL))={-1:0}, malloc(sizeof(struct TSLL))={-2:0}, null={-2:0}] [L1000] COND TRUE __VERIFIER_nondet_int() [L1003] end->next = malloc(sizeof(struct TSLL)) [L1004] EXPR end->next [L1004] end->next->prev = end [L1005] EXPR end->next [L1005] end = end->next [L1006] end->next = null [L1008] COND FALSE !(__VERIFIER_nondet_int()) [L1014] end->colour = RED [L1015] end->next = malloc(sizeof(struct TSLL)) [L1016] EXPR end->next [L1016] end->next->prev = end [L1017] EXPR end->next [L1017] end = end->next [L1018] end->next = null [L1019] end->colour = BLACK VAL [end={-4:0}, list={-1:0}, malloc(sizeof(struct TSLL))={-4:0}, malloc(sizeof(struct TSLL))={-3:0}, malloc(sizeof(struct TSLL))={-1:0}, malloc(sizeof(struct TSLL))={-2:0}, null={-2:0}] [L1021] EXPR end->colour VAL [end={-4:0}, end->colour=1, list={-1:0}, malloc(sizeof(struct TSLL))={-4:0}, malloc(sizeof(struct TSLL))={-3:0}, malloc(sizeof(struct TSLL))={-1:0}, malloc(sizeof(struct TSLL))={-2:0}, null={-2:0}] [L1021] COND FALSE !(!(BLACK == end->colour)) [L1022] EXPR end->next VAL [end={-4:0}, end->next={-2:0}, list={-1:0}, malloc(sizeof(struct TSLL))={-4:0}, malloc(sizeof(struct TSLL))={-3:0}, malloc(sizeof(struct TSLL))={-1:0}, malloc(sizeof(struct TSLL))={-2:0}, null={-2:0}] [L1022] COND FALSE !(!(null == end->next)) [L1023] COND FALSE !(!(null != end)) VAL [end={-4:0}, list={-1:0}, malloc(sizeof(struct TSLL))={-4:0}, malloc(sizeof(struct TSLL))={-3:0}, malloc(sizeof(struct TSLL))={-1:0}, malloc(sizeof(struct TSLL))={-2:0}, null={-2:0}] [L1000] COND FALSE !(__VERIFIER_nondet_int()) [L1026] end = null [L1027] end = list VAL [end={-1:0}, list={-1:0}, malloc(sizeof(struct TSLL))={-4:0}, malloc(sizeof(struct TSLL))={-3:0}, malloc(sizeof(struct TSLL))={-1:0}, malloc(sizeof(struct TSLL))={-2:0}, null={-2:0}] [L1030] COND FALSE !(!(null != end)) VAL [end={-1:0}, list={-1:0}, malloc(sizeof(struct TSLL))={-4:0}, malloc(sizeof(struct TSLL))={-3:0}, malloc(sizeof(struct TSLL))={-1:0}, malloc(sizeof(struct TSLL))={-2:0}, null={-2:0}] [L1031] EXPR end->colour VAL [end={-1:0}, end->colour=1, list={-1:0}, malloc(sizeof(struct TSLL))={-4:0}, malloc(sizeof(struct TSLL))={-3:0}, malloc(sizeof(struct TSLL))={-1:0}, malloc(sizeof(struct TSLL))={-2:0}, null={-2:0}] [L1031] COND FALSE !(!(BLACK == end->colour)) [L1032] COND TRUE null != end [L1034] EXPR end->colour VAL [end={-1:0}, end->colour=1, list={-1:0}, malloc(sizeof(struct TSLL))={-4:0}, malloc(sizeof(struct TSLL))={-3:0}, malloc(sizeof(struct TSLL))={-1:0}, malloc(sizeof(struct TSLL))={-2:0}, null={-2:0}] [L1034] COND FALSE !(RED == end->colour) [L1041] EXPR end->next [L1041] end = end->next [L1032] COND TRUE null != end [L1034] EXPR end->colour VAL [end={-3:0}, end->colour=0, list={-1:0}, malloc(sizeof(struct TSLL))={-4:0}, malloc(sizeof(struct TSLL))={-3:0}, malloc(sizeof(struct TSLL))={-1:0}, malloc(sizeof(struct TSLL))={-2:0}, null={-2:0}] [L1034] COND TRUE RED == end->colour [L1036] EXPR end->next [L1036] end = end->next [L1037] COND FALSE !(!(null != end)) VAL [end={-4:0}, list={-1:0}, malloc(sizeof(struct TSLL))={-4:0}, malloc(sizeof(struct TSLL))={-3:0}, malloc(sizeof(struct TSLL))={-1:0}, malloc(sizeof(struct TSLL))={-2:0}, null={-2:0}] [L1038] EXPR end->colour VAL [end={-4:0}, end->colour=1, list={-1:0}, malloc(sizeof(struct TSLL))={-4:0}, malloc(sizeof(struct TSLL))={-3:0}, malloc(sizeof(struct TSLL))={-1:0}, malloc(sizeof(struct TSLL))={-2:0}, null={-2:0}] [L1038] COND TRUE !(BLACK != end->colour) [L1038] __VERIFIER_error() VAL [end={-4:0}, list={-1:0}, malloc(sizeof(struct TSLL))={-4:0}, malloc(sizeof(struct TSLL))={-3:0}, malloc(sizeof(struct TSLL))={-1:0}, malloc(sizeof(struct TSLL))={-2:0}, null={-2:0}] - StatisticsResult: Ultimate Automizer benchmark data CFG has 3 procedures, 52 locations, 7 error locations. Started 1 CEGAR loops. VerificationResult: UNSAFE, OverallTime: 58.4s, OverallIterations: 13, TraceHistogramMax: 3, AutomataDifference: 30.8s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 400 SDtfs, 664 SDslu, 1622 SDs, 0 SdLazy, 2081 SolverSat, 166 SolverUnsat, 3 SolverUnknown, 0 SolverNotchecked, 12.5s Time, PredicateUnifierStatistics: 0 DeclaredPredicates, 286 GetRequests, 146 SyntacticMatches, 3 SemanticMatches, 137 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 417 ImplicationChecksByTransitivity, 5.5s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=103occurred in iteration=12, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.7s AutomataMinimizationTime, 12 MinimizatonAttempts, 138 StatesRemovedByMinimization, 7 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: 0.0s SsaConstructionTime, 0.6s SatisfiabilityAnalysisTime, 23.6s InterpolantComputationTime, 422 NumberOfCodeBlocks, 422 NumberOfCodeBlocksAsserted, 19 NumberOfCheckSat, 370 ConstructedInterpolants, 44 QuantifiedInterpolants, 283845 SizeOfPredicates, 79 NumberOfNonLiveVariables, 727 ConjunctsInSsa, 214 ConjunctsInUnsatCore, 17 InterpolantComputations, 7 PerfectInterpolantSequences, 7/42 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate proved your program to be incorrect! Received shutdown request...