./Ultimate.py --spec ../../sv-benchmarks/c/properties/termination.prp --file ../../sv-benchmarks/c/uthash-2.0.2/uthash_JEN_test10-2.i --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for termination Using default analysis Version f8e1c903 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c5c949f6-d446-4ede-bd5f-e8bce6f973b6/bin/uautomizer-IVEQpCNsaX/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c5c949f6-d446-4ede-bd5f-e8bce6f973b6/bin/uautomizer-IVEQpCNsaX/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c5c949f6-d446-4ede-bd5f-e8bce6f973b6/bin/uautomizer-IVEQpCNsaX/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c5c949f6-d446-4ede-bd5f-e8bce6f973b6/bin/uautomizer-IVEQpCNsaX/config/AutomizerTermination.xml -i ../../sv-benchmarks/c/uthash-2.0.2/uthash_JEN_test10-2.i -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c5c949f6-d446-4ede-bd5f-e8bce6f973b6/bin/uautomizer-IVEQpCNsaX/config/svcomp-Termination-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c5c949f6-d446-4ede-bd5f-e8bce6f973b6/bin/uautomizer-IVEQpCNsaX --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(F end) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 3db5e6ee1090a5741e563a010c3676d5357df7fec89fabe5a888b2d307357a0e --- Real Ultimate output --- This is Ultimate 0.2.1-dev-f8e1c90 [2021-11-09 09:37:15,557 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-11-09 09:37:15,559 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-11-09 09:37:15,607 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-11-09 09:37:15,607 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-11-09 09:37:15,611 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-11-09 09:37:15,613 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-11-09 09:37:15,617 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-11-09 09:37:15,620 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-11-09 09:37:15,625 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-11-09 09:37:15,626 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-11-09 09:37:15,628 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-11-09 09:37:15,629 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-11-09 09:37:15,631 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-11-09 09:37:15,633 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-11-09 09:37:15,641 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-11-09 09:37:15,643 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-11-09 09:37:15,644 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-11-09 09:37:15,646 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-11-09 09:37:15,654 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-11-09 09:37:15,655 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-11-09 09:37:15,657 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-11-09 09:37:15,660 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-11-09 09:37:15,661 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-11-09 09:37:15,670 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-11-09 09:37:15,670 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-11-09 09:37:15,671 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-11-09 09:37:15,673 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-11-09 09:37:15,673 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-11-09 09:37:15,675 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-11-09 09:37:15,675 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-11-09 09:37:15,676 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-11-09 09:37:15,678 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-11-09 09:37:15,679 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-11-09 09:37:15,681 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-11-09 09:37:15,681 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-11-09 09:37:15,682 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-11-09 09:37:15,682 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-11-09 09:37:15,683 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-11-09 09:37:15,684 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-11-09 09:37:15,684 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-11-09 09:37:15,685 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c5c949f6-d446-4ede-bd5f-e8bce6f973b6/bin/uautomizer-IVEQpCNsaX/config/svcomp-Termination-32bit-Automizer_Default.epf [2021-11-09 09:37:15,729 INFO L113 SettingsManager]: Loading preferences was successful [2021-11-09 09:37:15,729 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-11-09 09:37:15,730 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-11-09 09:37:15,730 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-11-09 09:37:15,732 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-11-09 09:37:15,732 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-11-09 09:37:15,732 INFO L138 SettingsManager]: * Use SBE=true [2021-11-09 09:37:15,733 INFO L136 SettingsManager]: Preferences of BuchiAutomizer differ from their defaults: [2021-11-09 09:37:15,733 INFO L138 SettingsManager]: * NCSB implementation=INTSET_LAZY3 [2021-11-09 09:37:15,733 INFO L138 SettingsManager]: * Use old map elimination=false [2021-11-09 09:37:15,734 INFO L138 SettingsManager]: * Use external solver (rank synthesis)=false [2021-11-09 09:37:15,734 INFO L138 SettingsManager]: * Use only trivial implications for array writes=true [2021-11-09 09:37:15,735 INFO L138 SettingsManager]: * Rank analysis=LINEAR_WITH_GUESSES [2021-11-09 09:37:15,735 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-11-09 09:37:15,735 INFO L138 SettingsManager]: * sizeof long=4 [2021-11-09 09:37:15,735 INFO L138 SettingsManager]: * Check unreachability of error function in SV-COMP mode=false [2021-11-09 09:37:15,735 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-11-09 09:37:15,735 INFO L138 SettingsManager]: * sizeof POINTER=4 [2021-11-09 09:37:15,736 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-11-09 09:37:15,736 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=ASSUME [2021-11-09 09:37:15,736 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=ASSUME [2021-11-09 09:37:15,736 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=ASSUME [2021-11-09 09:37:15,736 INFO L138 SettingsManager]: * sizeof long double=12 [2021-11-09 09:37:15,737 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-11-09 09:37:15,737 INFO L138 SettingsManager]: * Assume nondeterminstic values are in range=false [2021-11-09 09:37:15,737 INFO L138 SettingsManager]: * Use constant arrays=true [2021-11-09 09:37:15,738 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=ASSUME [2021-11-09 09:37:15,739 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-11-09 09:37:15,739 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-11-09 09:37:15,739 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-11-09 09:37:15,739 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2021-11-09 09:37:15,740 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-11-09 09:37:15,741 INFO L136 SettingsManager]: Preferences of IcfgTransformer differ from their defaults: [2021-11-09 09:37:15,741 INFO L138 SettingsManager]: * TransformationType=MODULO_NEIGHBOR WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c5c949f6-d446-4ede-bd5f-e8bce6f973b6/bin/uautomizer-IVEQpCNsaX/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c5c949f6-d446-4ede-bd5f-e8bce6f973b6/bin/uautomizer-IVEQpCNsaX Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(F end) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 3db5e6ee1090a5741e563a010c3676d5357df7fec89fabe5a888b2d307357a0e [2021-11-09 09:37:16,006 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-11-09 09:37:16,027 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-11-09 09:37:16,029 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-11-09 09:37:16,030 INFO L271 PluginConnector]: Initializing CDTParser... [2021-11-09 09:37:16,031 INFO L275 PluginConnector]: CDTParser initialized [2021-11-09 09:37:16,032 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c5c949f6-d446-4ede-bd5f-e8bce6f973b6/bin/uautomizer-IVEQpCNsaX/../../sv-benchmarks/c/uthash-2.0.2/uthash_JEN_test10-2.i [2021-11-09 09:37:16,106 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c5c949f6-d446-4ede-bd5f-e8bce6f973b6/bin/uautomizer-IVEQpCNsaX/data/0ba8ad1ce/c13bba853aae475dae5d476787cd49e3/FLAGcb896df97 [2021-11-09 09:37:16,784 INFO L306 CDTParser]: Found 1 translation units. [2021-11-09 09:37:16,785 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c5c949f6-d446-4ede-bd5f-e8bce6f973b6/sv-benchmarks/c/uthash-2.0.2/uthash_JEN_test10-2.i [2021-11-09 09:37:16,809 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c5c949f6-d446-4ede-bd5f-e8bce6f973b6/bin/uautomizer-IVEQpCNsaX/data/0ba8ad1ce/c13bba853aae475dae5d476787cd49e3/FLAGcb896df97 [2021-11-09 09:37:16,966 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c5c949f6-d446-4ede-bd5f-e8bce6f973b6/bin/uautomizer-IVEQpCNsaX/data/0ba8ad1ce/c13bba853aae475dae5d476787cd49e3 [2021-11-09 09:37:16,969 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-11-09 09:37:16,970 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-11-09 09:37:16,972 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-11-09 09:37:16,972 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-11-09 09:37:16,981 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-11-09 09:37:16,982 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 09.11 09:37:16" (1/1) ... [2021-11-09 09:37:16,984 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@76c56a29 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.11 09:37:16, skipping insertion in model container [2021-11-09 09:37:16,984 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 09.11 09:37:16" (1/1) ... [2021-11-09 09:37:16,994 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-11-09 09:37:17,108 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-11-09 09:37:17,590 WARN L228 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c5c949f6-d446-4ede-bd5f-e8bce6f973b6/sv-benchmarks/c/uthash-2.0.2/uthash_JEN_test10-2.i[33022,33035] [2021-11-09 09:37:17,796 INFO L206 PostProcessor]: Analyzing one entry point: main [2021-11-09 09:37:17,805 INFO L203 MainTranslator]: Completed pre-run [2021-11-09 09:37:17,845 WARN L228 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c5c949f6-d446-4ede-bd5f-e8bce6f973b6/sv-benchmarks/c/uthash-2.0.2/uthash_JEN_test10-2.i[33022,33035] [2021-11-09 09:37:18,034 INFO L206 PostProcessor]: Analyzing one entry point: main [2021-11-09 09:37:18,076 INFO L208 MainTranslator]: Completed translation [2021-11-09 09:37:18,077 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.11 09:37:18 WrapperNode [2021-11-09 09:37:18,077 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-11-09 09:37:18,078 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-11-09 09:37:18,078 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-11-09 09:37:18,079 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-11-09 09:37:18,086 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.11 09:37:18" (1/1) ... [2021-11-09 09:37:18,170 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.11 09:37:18" (1/1) ... [2021-11-09 09:37:18,313 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-11-09 09:37:18,313 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-11-09 09:37:18,314 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-11-09 09:37:18,314 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-11-09 09:37:18,322 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.11 09:37:18" (1/1) ... [2021-11-09 09:37:18,322 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.11 09:37:18" (1/1) ... [2021-11-09 09:37:18,338 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.11 09:37:18" (1/1) ... [2021-11-09 09:37:18,338 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.11 09:37:18" (1/1) ... [2021-11-09 09:37:18,428 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.11 09:37:18" (1/1) ... [2021-11-09 09:37:18,453 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.11 09:37:18" (1/1) ... [2021-11-09 09:37:18,460 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.11 09:37:18" (1/1) ... [2021-11-09 09:37:18,479 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-11-09 09:37:18,480 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-11-09 09:37:18,480 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-11-09 09:37:18,480 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-11-09 09:37:18,481 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.11 09:37:18" (1/1) ... [2021-11-09 09:37:18,494 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-11-09 09:37:18,506 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c5c949f6-d446-4ede-bd5f-e8bce6f973b6/bin/uautomizer-IVEQpCNsaX/z3 [2021-11-09 09:37:18,535 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c5c949f6-d446-4ede-bd5f-e8bce6f973b6/bin/uautomizer-IVEQpCNsaX/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-11-09 09:37:18,571 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c5c949f6-d446-4ede-bd5f-e8bce6f973b6/bin/uautomizer-IVEQpCNsaX/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (1)] Waiting until timeout for monitored process [2021-11-09 09:37:18,592 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2021-11-09 09:37:18,592 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2021-11-09 09:37:18,592 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memset [2021-11-09 09:37:18,593 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memset [2021-11-09 09:37:18,593 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2021-11-09 09:37:18,593 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2021-11-09 09:37:18,593 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2021-11-09 09:37:18,594 INFO L130 BoogieDeclarations]: Found specification of procedure memcmp [2021-11-09 09:37:18,594 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2021-11-09 09:37:18,595 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2021-11-09 09:37:18,597 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-11-09 09:37:18,597 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-11-09 09:37:18,597 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-11-09 09:37:18,988 WARN L805 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2021-11-09 09:37:21,246 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-11-09 09:37:21,246 INFO L299 CfgBuilder]: Removed 204 assume(true) statements. [2021-11-09 09:37:21,250 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 09.11 09:37:21 BoogieIcfgContainer [2021-11-09 09:37:21,250 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-11-09 09:37:21,251 INFO L113 PluginConnector]: ------------------------BuchiAutomizer---------------------------- [2021-11-09 09:37:21,251 INFO L271 PluginConnector]: Initializing BuchiAutomizer... [2021-11-09 09:37:21,254 INFO L275 PluginConnector]: BuchiAutomizer initialized [2021-11-09 09:37:21,255 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2021-11-09 09:37:21,255 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "CDTParser AST 09.11 09:37:16" (1/3) ... [2021-11-09 09:37:21,257 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@6a5d0334 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 09.11 09:37:21, skipping insertion in model container [2021-11-09 09:37:21,257 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2021-11-09 09:37:21,257 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.11 09:37:18" (2/3) ... [2021-11-09 09:37:21,257 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@6a5d0334 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 09.11 09:37:21, skipping insertion in model container [2021-11-09 09:37:21,258 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2021-11-09 09:37:21,258 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 09.11 09:37:21" (3/3) ... [2021-11-09 09:37:21,262 INFO L389 chiAutomizerObserver]: Analyzing ICFG uthash_JEN_test10-2.i [2021-11-09 09:37:21,317 INFO L359 BuchiCegarLoop]: Interprodecural is true [2021-11-09 09:37:21,318 INFO L360 BuchiCegarLoop]: Hoare is false [2021-11-09 09:37:21,318 INFO L361 BuchiCegarLoop]: Compute interpolants for ForwardPredicates [2021-11-09 09:37:21,318 INFO L362 BuchiCegarLoop]: Backedges is STRAIGHT_LINE [2021-11-09 09:37:21,318 INFO L363 BuchiCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2021-11-09 09:37:21,318 INFO L364 BuchiCegarLoop]: Difference is false [2021-11-09 09:37:21,318 INFO L365 BuchiCegarLoop]: Minimize is MINIMIZE_SEVPA [2021-11-09 09:37:21,319 INFO L368 BuchiCegarLoop]: ======== Iteration 0==of CEGAR loop == BuchiCegarLoop======== [2021-11-09 09:37:21,350 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 472 states, 464 states have (on average 1.7262931034482758) internal successors, (801), 464 states have internal predecessors, (801), 6 states have call successors, (6), 1 states have call predecessors, (6), 1 states have return successors, (6), 6 states have call predecessors, (6), 6 states have call successors, (6) [2021-11-09 09:37:21,406 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 415 [2021-11-09 09:37:21,406 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-11-09 09:37:21,406 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-11-09 09:37:21,414 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1] [2021-11-09 09:37:21,414 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1] [2021-11-09 09:37:21,414 INFO L425 BuchiCegarLoop]: ======== Iteration 1============ [2021-11-09 09:37:21,417 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 472 states, 464 states have (on average 1.7262931034482758) internal successors, (801), 464 states have internal predecessors, (801), 6 states have call successors, (6), 1 states have call predecessors, (6), 1 states have return successors, (6), 6 states have call predecessors, (6), 6 states have call successors, (6) [2021-11-09 09:37:21,445 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 415 [2021-11-09 09:37:21,451 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-11-09 09:37:21,452 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-11-09 09:37:21,453 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1] [2021-11-09 09:37:21,454 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1] [2021-11-09 09:37:21,461 INFO L791 eck$LassoCheckResult]: Stem: 462#ULTIMATE.startENTRYtrue #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string2.base, #t~string2.offset := #Ultimate.allocOnStack(2);call write~init~int(48, #t~string2.base, #t~string2.offset, 1);call write~init~int(0, #t~string2.base, 1 + #t~string2.offset, 1);call #t~string3.base, #t~string3.offset := #Ultimate.allocOnStack(22);~count_int_int~0 := 0; 399#L-1true havoc main_#res;havoc main_#t~malloc10.base, main_#t~malloc10.offset, main_#t~mem11, main_#t~mem12, main_#t~mem13, main_#t~mem14, main_#t~mem16, main_#t~mem15, main_#t~mem17, main_#t~mem18, main_#t~mem20, main_#t~mem19, main_#t~mem21, main_#t~mem22, main_#t~mem24, main_#t~mem23, main_#t~mem25, main_#t~mem26, main_#t~switch27, main_#t~mem28, main_#t~mem29, main_#t~mem30, main_#t~mem31, main_#t~mem32, main_#t~mem33, main_#t~mem34, main_#t~mem35, main_#t~mem36, main_#t~mem37, main_#t~mem38, main_~_hj_i~0, main_~_hj_j~0, main_~_hj_k~0, main_~_hj_key~0.base, main_~_hj_key~0.offset, main_#t~malloc39.base, main_#t~malloc39.offset, main_#t~mem40.base, main_#t~mem40.offset, main_#t~mem41.base, main_#t~mem41.offset, main_#t~memset~res42.base, main_#t~memset~res42.offset, main_#t~mem43.base, main_#t~mem43.offset, main_#t~mem44.base, main_#t~mem44.offset, main_#t~mem45.base, main_#t~mem45.offset, main_#t~mem46.base, main_#t~mem46.offset, main_#t~mem47.base, main_#t~mem47.offset, main_#t~malloc48.base, main_#t~malloc48.offset, main_#t~mem49.base, main_#t~mem49.offset, main_#t~mem50.base, main_#t~mem50.offset, main_#t~mem51.base, main_#t~mem51.offset, main_#t~mem52.base, main_#t~mem52.offset, main_#t~mem53.base, main_#t~mem53.offset, main_#t~mem54.base, main_#t~mem54.offset, main_#t~memset~res55.base, main_#t~memset~res55.offset, main_#t~mem56.base, main_#t~mem56.offset, main_#t~mem57.base, main_#t~mem57.offset, main_#t~mem58.base, main_#t~mem58.offset, main_#t~mem59.base, main_#t~mem59.offset, main_#t~mem60, main_#t~mem61.base, main_#t~mem61.offset, main_#t~mem62.base, main_#t~mem62.offset, main_#t~mem63.base, main_#t~mem63.offset, main_#t~mem64.base, main_#t~mem64.offset, main_#t~mem65, main_#t~post66, main_#t~mem67.base, main_#t~mem67.offset, main_#t~mem68, main_#t~mem69.base, main_#t~mem69.offset, main_#t~mem70.base, main_#t~mem70.offset, main_#t~mem71, main_#t~post72, main_#t~mem73.base, main_#t~mem73.offset, main_#t~mem74.base, main_#t~mem74.offset, main_#t~mem75.base, main_#t~mem75.offset, main_#t~mem77, main_#t~mem76, main_#t~mem78.base, main_#t~mem78.offset, main_#t~mem79, main_#t~short80, main_#t~mem81.base, main_#t~mem81.offset, main_#t~mem82, main_#t~malloc83.base, main_#t~malloc83.offset, main_#t~mem84.base, main_#t~mem84.offset, main_#t~mem85.base, main_#t~mem85.offset, main_#t~mem86.base, main_#t~mem86.offset, main_#t~mem87, main_#t~memset~res88.base, main_#t~memset~res88.offset, main_#t~mem89.base, main_#t~mem89.offset, main_#t~mem90.base, main_#t~mem90.offset, main_#t~mem93, main_#t~mem91.base, main_#t~mem91.offset, main_#t~mem92, main_#t~mem94.base, main_#t~mem94.offset, main_#t~mem97, main_#t~mem95.base, main_#t~mem95.offset, main_#t~mem96, main_#t~ite98, main_#t~mem99.base, main_#t~mem99.offset, main_#t~mem103.base, main_#t~mem103.offset, main_#t~mem104.base, main_#t~mem104.offset, main_#t~mem105.base, main_#t~mem105.offset, main_#t~mem106.base, main_#t~mem106.offset, main_#t~mem109, main_#t~mem107.base, main_#t~mem107.offset, main_#t~mem108, main_#t~mem110.base, main_#t~mem110.offset, main_#t~mem111, main_#t~pre112, main_#t~mem113.base, main_#t~mem113.offset, main_#t~mem114, main_#t~mem115.base, main_#t~mem115.offset, main_#t~mem116, main_#t~post117, main_#t~mem121, main_#t~mem119, main_#t~mem118.base, main_#t~mem118.offset, main_#t~mem120, main_#t~mem122, main_#t~post123, main_#t~mem124.base, main_#t~mem124.offset, main_#t~mem125.base, main_#t~mem125.offset, main_#t~mem126.base, main_#t~mem126.offset, main_#t~post100, main_#t~mem101.base, main_#t~mem101.offset, main_#t~mem102, main_#t~mem127.base, main_#t~mem127.offset, main_#t~mem128.base, main_#t~mem128.offset, main_#t~mem129.base, main_#t~mem129.offset, main_#t~mem130, main_#t~mem131.base, main_#t~mem131.offset, main_#t~mem132, main_#t~post133, main_#t~mem134.base, main_#t~mem134.offset, main_#t~mem135.base, main_#t~mem135.offset, main_#t~mem136.base, main_#t~mem136.offset, main_#t~mem137.base, main_#t~mem137.offset, main_#t~mem140, main_#t~mem138.base, main_#t~mem138.offset, main_#t~mem139, main_#t~ite143, main_#t~mem141.base, main_#t~mem141.offset, main_#t~mem142, main_#t~mem144.base, main_#t~mem144.offset, main_#t~mem145, main_#t~mem146.base, main_#t~mem146.offset, main_~_he_bkt~0, main_~_he_bkt_i~0, main_~_he_thh~0.base, main_~_he_thh~0.offset, main_~_he_hh_nxt~0.base, main_~_he_hh_nxt~0.offset, main_~#_he_new_buckets~0.base, main_~#_he_new_buckets~0.offset, main_~_he_newbkt~0.base, main_~_he_newbkt~0.offset, main_~_ha_head~0.base, main_~_ha_head~0.offset, main_~_ha_bkt~0, main_~_ha_hashv~0, main_#t~mem148, main_#t~mem147, main_#t~mem149, main_#t~mem150, main_#t~mem152, main_#t~mem151, main_#t~mem153, main_#t~mem154, main_#t~mem156, main_#t~mem155, main_#t~mem157, main_#t~mem158, main_#t~switch159, main_#t~mem160, main_#t~mem161, main_#t~mem162, main_#t~mem163, main_#t~mem164, main_#t~mem165, main_#t~mem166, main_#t~mem167, main_#t~mem168, main_#t~mem169, main_#t~mem170, main_~_hj_i~1, main_~_hj_j~1, main_~_hj_k~1, main_~_hj_key~1.base, main_~_hj_key~1.offset, main_#t~malloc171.base, main_#t~malloc171.offset, main_#t~mem172.base, main_#t~mem172.offset, main_#t~mem173.base, main_#t~mem173.offset, main_#t~memset~res174.base, main_#t~memset~res174.offset, main_#t~mem175.base, main_#t~mem175.offset, main_#t~mem176.base, main_#t~mem176.offset, main_#t~mem177.base, main_#t~mem177.offset, main_#t~mem178.base, main_#t~mem178.offset, main_#t~mem179.base, main_#t~mem179.offset, main_#t~malloc180.base, main_#t~malloc180.offset, main_#t~mem181.base, main_#t~mem181.offset, main_#t~mem182.base, main_#t~mem182.offset, main_#t~mem183.base, main_#t~mem183.offset, main_#t~mem184.base, main_#t~mem184.offset, main_#t~mem185.base, main_#t~mem185.offset, main_#t~mem186.base, main_#t~mem186.offset, main_#t~memset~res187.base, main_#t~memset~res187.offset, main_#t~mem188.base, main_#t~mem188.offset, main_#t~mem189.base, main_#t~mem189.offset, main_#t~mem190.base, main_#t~mem190.offset, main_#t~mem191.base, main_#t~mem191.offset, main_#t~mem192, main_#t~mem193.base, main_#t~mem193.offset, main_#t~mem194.base, main_#t~mem194.offset, main_#t~mem195.base, main_#t~mem195.offset, main_#t~mem196.base, main_#t~mem196.offset, main_#t~mem197, main_#t~post198, main_#t~mem199.base, main_#t~mem199.offset, main_#t~mem200, main_#t~mem201.base, main_#t~mem201.offset, main_#t~mem202.base, main_#t~mem202.offset, main_#t~mem203, main_#t~post204, main_#t~mem205.base, main_#t~mem205.offset, main_#t~mem206.base, main_#t~mem206.offset, main_#t~mem207.base, main_#t~mem207.offset, main_#t~mem209, main_#t~mem208, main_#t~mem210.base, main_#t~mem210.offset, main_#t~mem211, main_#t~short212, main_#t~mem213.base, main_#t~mem213.offset, main_#t~mem214, main_#t~malloc215.base, main_#t~malloc215.offset, main_#t~mem216.base, main_#t~mem216.offset, main_#t~mem217.base, main_#t~mem217.offset, main_#t~mem218.base, main_#t~mem218.offset, main_#t~mem219, main_#t~memset~res220.base, main_#t~memset~res220.offset, main_#t~mem221.base, main_#t~mem221.offset, main_#t~mem222.base, main_#t~mem222.offset, main_#t~mem225, main_#t~mem223.base, main_#t~mem223.offset, main_#t~mem224, main_#t~mem226.base, main_#t~mem226.offset, main_#t~mem229, main_#t~mem227.base, main_#t~mem227.offset, main_#t~mem228, main_#t~ite230, main_#t~mem231.base, main_#t~mem231.offset, main_#t~mem235.base, main_#t~mem235.offset, main_#t~mem236.base, main_#t~mem236.offset, main_#t~mem237.base, main_#t~mem237.offset, main_#t~mem238.base, main_#t~mem238.offset, main_#t~mem241, main_#t~mem239.base, main_#t~mem239.offset, main_#t~mem240, main_#t~mem242.base, main_#t~mem242.offset, main_#t~mem243, main_#t~pre244, main_#t~mem245.base, main_#t~mem245.offset, main_#t~mem246, main_#t~mem247.base, main_#t~mem247.offset, main_#t~mem248, main_#t~post249, main_#t~mem253, main_#t~mem251, main_#t~mem250.base, main_#t~mem250.offset, main_#t~mem252, main_#t~mem254, main_#t~post255, main_#t~mem256.base, main_#t~mem256.offset, main_#t~mem257.base, main_#t~mem257.offset, main_#t~mem258.base, main_#t~mem258.offset, main_#t~post232, main_#t~mem233.base, main_#t~mem233.offset, main_#t~mem234, main_#t~mem259.base, main_#t~mem259.offset, main_#t~mem260.base, main_#t~mem260.offset, main_#t~mem261.base, main_#t~mem261.offset, main_#t~mem262, main_#t~mem263.base, main_#t~mem263.offset, main_#t~mem264, main_#t~post265, main_#t~mem266.base, main_#t~mem266.offset, main_#t~mem267.base, main_#t~mem267.offset, main_#t~mem268.base, main_#t~mem268.offset, main_#t~mem269.base, main_#t~mem269.offset, main_#t~mem272, main_#t~mem270.base, main_#t~mem270.offset, main_#t~mem271, main_#t~ite275, main_#t~mem273.base, main_#t~mem273.offset, main_#t~mem274, main_#t~mem276.base, main_#t~mem276.offset, main_#t~mem277, main_#t~mem278.base, main_#t~mem278.offset, main_~_he_bkt~1, main_~_he_bkt_i~1, main_~_he_thh~1.base, main_~_he_thh~1.offset, main_~_he_hh_nxt~1.base, main_~_he_hh_nxt~1.offset, main_~#_he_new_buckets~1.base, main_~#_he_new_buckets~1.offset, main_~_he_newbkt~1.base, main_~_he_newbkt~1.offset, main_~_ha_head~1.base, main_~_ha_head~1.offset, main_~_ha_bkt~1, main_~_ha_hashv~1, main_#t~mem7, main_#t~post8, main_#t~mem9, main_#t~mem280, main_#t~mem279, main_#t~mem281, main_#t~mem282, main_#t~mem284, main_#t~mem283, main_#t~mem285, main_#t~mem286, main_#t~mem288, main_#t~mem287, main_#t~mem289, main_#t~mem290, main_#t~switch291, main_#t~mem292, main_#t~mem293, main_#t~mem294, main_#t~mem295, main_#t~mem296, main_#t~mem297, main_#t~mem298, main_#t~mem299, main_#t~mem300, main_#t~mem301, main_#t~mem302, main_~_hj_i~2, main_~_hj_j~2, main_~_hj_k~2, main_~_hj_key~2.base, main_~_hj_key~2.offset, main_#t~mem303.base, main_#t~mem303.offset, main_#t~mem304, main_#t~mem305.base, main_#t~mem305.offset, main_#t~mem306.base, main_#t~mem306.offset, main_#t~mem307.base, main_#t~mem307.offset, main_#t~mem308.base, main_#t~mem308.offset, main_#t~mem309.base, main_#t~mem309.offset, main_#t~mem310.base, main_#t~mem310.offset, main_#t~mem311.base, main_#t~mem311.offset, main_#t~mem312, main_#t~mem313, main_#t~mem314, main_#t~short315, main_#t~mem316.base, main_#t~mem316.offset, main_#t~ret317, main_#t~mem318.base, main_#t~mem318.offset, main_#t~mem319.base, main_#t~mem319.offset, main_#t~mem320.base, main_#t~mem320.offset, main_#t~mem321, main_~_hf_bkt~0, main_~_hf_hashv~0, main_#t~mem322, main_#t~mem324, main_#t~mem323, main_#t~mem325, main_#t~mem326, main_#t~mem328, main_#t~mem327, main_#t~mem329, main_#t~mem330, main_#t~mem332, main_#t~mem331, main_#t~mem333, main_#t~mem334, main_#t~switch335, main_#t~mem336, main_#t~mem337, main_#t~mem338, main_#t~mem339, main_#t~mem340, main_#t~mem341, main_#t~mem342, main_#t~mem343, main_#t~mem344, main_#t~mem345, main_#t~mem346, main_~_hj_i~3, main_~_hj_j~3, main_~_hj_k~3, main_~_hj_key~3.base, main_~_hj_key~3.offset, main_#t~mem347.base, main_#t~mem347.offset, main_#t~mem348, main_#t~mem349.base, main_#t~mem349.offset, main_#t~mem350.base, main_#t~mem350.offset, main_#t~mem351.base, main_#t~mem351.offset, main_#t~mem352.base, main_#t~mem352.offset, main_#t~mem353.base, main_#t~mem353.offset, main_#t~mem354.base, main_#t~mem354.offset, main_#t~mem355.base, main_#t~mem355.offset, main_#t~mem356, main_#t~mem357, main_#t~mem358, main_#t~short359, main_#t~mem360.base, main_#t~mem360.offset, main_#t~ret361, main_#t~mem362.base, main_#t~mem362.offset, main_#t~mem363.base, main_#t~mem363.offset, main_#t~mem364.base, main_#t~mem364.offset, main_#t~mem365, main_~_hf_bkt~1, main_~_hf_hashv~1, main_#t~mem366, main_#t~mem368, main_#t~mem367, main_#t~mem369, main_#t~mem370, main_#t~mem372, main_#t~mem371, main_#t~mem373, main_#t~mem374, main_#t~mem376, main_#t~mem375, main_#t~mem377, main_#t~mem378, main_#t~switch379, main_#t~mem380, main_#t~mem381, main_#t~mem382, main_#t~mem383, main_#t~mem384, main_#t~mem385, main_#t~mem386, main_#t~mem387, main_#t~mem388, main_#t~mem389, main_#t~mem390, main_~_hj_i~4, main_~_hj_j~4, main_~_hj_k~4, main_~_hj_key~4.base, main_~_hj_key~4.offset, main_#t~mem391.base, main_#t~mem391.offset, main_#t~mem392, main_#t~mem393.base, main_#t~mem393.offset, main_#t~mem394.base, main_#t~mem394.offset, main_#t~mem395.base, main_#t~mem395.offset, main_#t~mem396.base, main_#t~mem396.offset, main_#t~mem397.base, main_#t~mem397.offset, main_#t~mem398.base, main_#t~mem398.offset, main_#t~mem399.base, main_#t~mem399.offset, main_#t~mem400, main_#t~mem401, main_#t~mem402, main_#t~short403, main_#t~mem404.base, main_#t~mem404.offset, main_#t~ret405, main_#t~mem406.base, main_#t~mem406.offset, main_#t~mem407.base, main_#t~mem407.offset, main_#t~mem408.base, main_#t~mem408.offset, main_#t~mem409, main_~_hf_bkt~2, main_~_hf_hashv~2, main_#t~mem410, main_#t~mem412, main_#t~mem411, main_#t~mem413, main_#t~mem414, main_#t~mem416, main_#t~mem415, main_#t~mem417, main_#t~mem418, main_#t~mem420, main_#t~mem419, main_#t~mem421, main_#t~mem422, main_#t~switch423, main_#t~mem424, main_#t~mem425, main_#t~mem426, main_#t~mem427, main_#t~mem428, main_#t~mem429, main_#t~mem430, main_#t~mem431, main_#t~mem432, main_#t~mem433, main_#t~mem434, main_~_hj_i~5, main_~_hj_j~5, main_~_hj_k~5, main_~_hj_key~5.base, main_~_hj_key~5.offset, main_#t~mem435.base, main_#t~mem435.offset, main_#t~mem436, main_#t~mem437.base, main_#t~mem437.offset, main_#t~mem438.base, main_#t~mem438.offset, main_#t~mem439.base, main_#t~mem439.offset, main_#t~mem440.base, main_#t~mem440.offset, main_#t~mem441.base, main_#t~mem441.offset, main_#t~mem442.base, main_#t~mem442.offset, main_#t~mem443.base, main_#t~mem443.offset, main_#t~mem444, main_#t~mem445, main_#t~mem446, main_#t~short447, main_#t~mem448.base, main_#t~mem448.offset, main_#t~ret449, main_#t~mem450.base, main_#t~mem450.offset, main_#t~mem451.base, main_#t~mem451.offset, main_#t~mem452.base, main_#t~mem452.offset, main_#t~mem453, main_~_hf_bkt~3, main_~_hf_hashv~3, main_#t~mem454, main_#t~ite456.base, main_#t~ite456.offset, main_#t~mem455.base, main_#t~mem455.offset, main_#t~mem459.base, main_#t~mem459.offset, main_#t~mem460.base, main_#t~mem460.offset, main_#t~short461, main_#t~mem462.base, main_#t~mem462.offset, main_#t~mem463.base, main_#t~mem463.offset, main_#t~mem464.base, main_#t~mem464.offset, main_#t~mem465.base, main_#t~mem465.offset, main_#t~mem466.base, main_#t~mem466.offset, main_#t~mem467.base, main_#t~mem467.offset, main_#t~mem468.base, main_#t~mem468.offset, main_#t~mem469.base, main_#t~mem469.offset, main_#t~mem470, main_#t~mem471.base, main_#t~mem471.offset, main_#t~mem472.base, main_#t~mem472.offset, main_#t~mem473.base, main_#t~mem473.offset, main_#t~mem474, main_#t~mem475.base, main_#t~mem475.offset, main_#t~mem476.base, main_#t~mem476.offset, main_#t~mem477.base, main_#t~mem477.offset, main_#t~mem478.base, main_#t~mem478.offset, main_#t~mem479.base, main_#t~mem479.offset, main_#t~mem480, main_#t~mem481.base, main_#t~mem481.offset, main_#t~mem484, main_#t~mem482.base, main_#t~mem482.offset, main_#t~mem483, main_#t~mem485.base, main_#t~mem485.offset, main_#t~mem486.base, main_#t~mem486.offset, main_#t~mem487, main_#t~post488, main_#t~mem489.base, main_#t~mem489.offset, main_#t~mem490.base, main_#t~mem490.offset, main_#t~mem491.base, main_#t~mem491.offset, main_#t~mem492.base, main_#t~mem492.offset, main_#t~mem493.base, main_#t~mem493.offset, main_#t~mem494.base, main_#t~mem494.offset, main_#t~mem495.base, main_#t~mem495.offset, main_#t~mem496.base, main_#t~mem496.offset, main_~_hd_head~0.base, main_~_hd_head~0.offset, main_#t~mem497.base, main_#t~mem497.offset, main_#t~mem498, main_#t~post499, main_~_hd_bkt~0, main_~_hd_hh_del~0.base, main_~_hd_hh_del~0.offset, main_#t~ite458.base, main_#t~ite458.offset, main_#t~mem457.base, main_#t~mem457.offset, main_~#i~0.base, main_~#i~0.offset, main_~user~0.base, main_~user~0.offset, main_~tmp~0.base, main_~tmp~0.offset, main_~users~0.base, main_~users~0.offset, main_~altusers~0.base, main_~altusers~0.offset, main_~temp~0.base, main_~temp~0.offset;call main_~#i~0.base, main_~#i~0.offset := #Ultimate.allocOnStack(4);havoc main_~user~0.base, main_~user~0.offset;havoc main_~tmp~0.base, main_~tmp~0.offset;main_~users~0.base, main_~users~0.offset := 0, 0;main_~altusers~0.base, main_~altusers~0.offset := 0, 0;call write~int(0, main_~#i~0.base, main_~#i~0.offset, 4); 253#L733-4true [2021-11-09 09:37:21,462 INFO L793 eck$LassoCheckResult]: Loop: 253#L733-4true call main_#t~mem9 := read~int(main_~#i~0.base, main_~#i~0.offset, 4); 3#L733-1true assume !!(main_#t~mem9 < 1000);havoc main_#t~mem9;call main_#t~malloc10.base, main_#t~malloc10.offset := #Ultimate.allocOnHeap(72);main_~user~0.base, main_~user~0.offset := main_#t~malloc10.base, main_#t~malloc10.offset;havoc main_#t~malloc10.base, main_#t~malloc10.offset; 467#L735true assume main_~user~0.base == 0 && main_~user~0.offset == 0;assume false; 99#L735-2true call main_#t~mem11 := read~int(main_~#i~0.base, main_~#i~0.offset, 4);call write~int(main_#t~mem11, main_~user~0.base, main_~user~0.offset, 4);havoc main_#t~mem11;call main_#t~mem12 := read~int(main_~#i~0.base, main_~#i~0.offset, 4);call main_#t~mem13 := read~int(main_~#i~0.base, main_~#i~0.offset, 4);call write~int(main_#t~mem12 * main_#t~mem13, main_~user~0.base, 4 + main_~user~0.offset, 4);havoc main_#t~mem12;havoc main_#t~mem13;call main_#t~mem14 := read~int(main_~#i~0.base, main_~#i~0.offset, 4); 405#L740true assume !(main_#t~mem14 < 10);havoc main_#t~mem14; 59#L743-123true assume !true; 61#L733-3true call main_#t~mem7 := read~int(main_~#i~0.base, main_~#i~0.offset, 4);main_#t~post8 := main_#t~mem7;call write~int(1 + main_#t~post8, main_~#i~0.base, main_~#i~0.offset, 4);havoc main_#t~mem7;havoc main_#t~post8; 253#L733-4true [2021-11-09 09:37:21,468 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-09 09:37:21,468 INFO L85 PathProgramCache]: Analyzing trace with hash 1251, now seen corresponding path program 1 times [2021-11-09 09:37:21,478 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-09 09:37:21,478 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1143517214] [2021-11-09 09:37:21,479 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-09 09:37:21,480 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-09 09:37:21,639 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-11-09 09:37:21,640 INFO L355 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-11-09 09:37:21,691 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-11-09 09:37:21,750 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-11-09 09:37:21,753 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-09 09:37:21,753 INFO L85 PathProgramCache]: Analyzing trace with hash -1529483753, now seen corresponding path program 1 times [2021-11-09 09:37:21,753 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-09 09:37:21,754 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [7897967] [2021-11-09 09:37:21,755 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-09 09:37:21,755 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-09 09:37:21,779 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-09 09:37:21,840 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-09 09:37:21,840 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-09 09:37:21,841 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [7897967] [2021-11-09 09:37:21,842 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [7897967] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-09 09:37:21,842 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-09 09:37:21,842 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-11-09 09:37:21,843 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [566288835] [2021-11-09 09:37:21,848 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-11-09 09:37:21,850 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-09 09:37:21,873 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2021-11-09 09:37:21,873 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-11-09 09:37:21,876 INFO L87 Difference]: Start difference. First operand has 472 states, 464 states have (on average 1.7262931034482758) internal successors, (801), 464 states have internal predecessors, (801), 6 states have call successors, (6), 1 states have call predecessors, (6), 1 states have return successors, (6), 6 states have call predecessors, (6), 6 states have call successors, (6) Second operand has 2 states, 2 states have (on average 3.5) internal successors, (7), 2 states have internal predecessors, (7), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-09 09:37:21,925 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-09 09:37:21,926 INFO L93 Difference]: Finished difference Result 472 states and 630 transitions. [2021-11-09 09:37:21,926 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2021-11-09 09:37:21,927 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 472 states and 630 transitions. [2021-11-09 09:37:21,944 INFO L131 ngComponentsAnalysis]: Automaton has 11 accepting balls. 247 [2021-11-09 09:37:21,961 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 472 states to 468 states and 626 transitions. [2021-11-09 09:37:21,962 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 468 [2021-11-09 09:37:21,965 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 468 [2021-11-09 09:37:21,965 INFO L73 IsDeterministic]: Start isDeterministic. Operand 468 states and 626 transitions. [2021-11-09 09:37:21,975 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-11-09 09:37:21,975 INFO L681 BuchiCegarLoop]: Abstraction has 468 states and 626 transitions. [2021-11-09 09:37:21,993 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 468 states and 626 transitions. [2021-11-09 09:37:22,058 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 468 to 468. [2021-11-09 09:37:22,060 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 468 states, 461 states have (on average 1.331887201735358) internal successors, (614), 460 states have internal predecessors, (614), 6 states have call successors, (6), 1 states have call predecessors, (6), 1 states have return successors, (6), 6 states have call predecessors, (6), 6 states have call successors, (6) [2021-11-09 09:37:22,063 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 468 states to 468 states and 626 transitions. [2021-11-09 09:37:22,064 INFO L704 BuchiCegarLoop]: Abstraction has 468 states and 626 transitions. [2021-11-09 09:37:22,064 INFO L587 BuchiCegarLoop]: Abstraction has 468 states and 626 transitions. [2021-11-09 09:37:22,065 INFO L425 BuchiCegarLoop]: ======== Iteration 2============ [2021-11-09 09:37:22,065 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 468 states and 626 transitions. [2021-11-09 09:37:22,068 INFO L131 ngComponentsAnalysis]: Automaton has 11 accepting balls. 247 [2021-11-09 09:37:22,068 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-11-09 09:37:22,068 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-11-09 09:37:22,069 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1] [2021-11-09 09:37:22,069 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-09 09:37:22,070 INFO L791 eck$LassoCheckResult]: Stem: 1419#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string2.base, #t~string2.offset := #Ultimate.allocOnStack(2);call write~init~int(48, #t~string2.base, #t~string2.offset, 1);call write~init~int(0, #t~string2.base, 1 + #t~string2.offset, 1);call #t~string3.base, #t~string3.offset := #Ultimate.allocOnStack(22);~count_int_int~0 := 0; 1408#L-1 havoc main_#res;havoc main_#t~malloc10.base, main_#t~malloc10.offset, main_#t~mem11, main_#t~mem12, main_#t~mem13, main_#t~mem14, main_#t~mem16, main_#t~mem15, main_#t~mem17, main_#t~mem18, main_#t~mem20, main_#t~mem19, main_#t~mem21, main_#t~mem22, main_#t~mem24, main_#t~mem23, main_#t~mem25, main_#t~mem26, main_#t~switch27, main_#t~mem28, main_#t~mem29, main_#t~mem30, main_#t~mem31, main_#t~mem32, main_#t~mem33, main_#t~mem34, main_#t~mem35, main_#t~mem36, main_#t~mem37, main_#t~mem38, main_~_hj_i~0, main_~_hj_j~0, main_~_hj_k~0, main_~_hj_key~0.base, main_~_hj_key~0.offset, main_#t~malloc39.base, main_#t~malloc39.offset, main_#t~mem40.base, main_#t~mem40.offset, main_#t~mem41.base, main_#t~mem41.offset, main_#t~memset~res42.base, main_#t~memset~res42.offset, main_#t~mem43.base, main_#t~mem43.offset, main_#t~mem44.base, main_#t~mem44.offset, main_#t~mem45.base, main_#t~mem45.offset, main_#t~mem46.base, main_#t~mem46.offset, main_#t~mem47.base, main_#t~mem47.offset, main_#t~malloc48.base, main_#t~malloc48.offset, main_#t~mem49.base, main_#t~mem49.offset, main_#t~mem50.base, main_#t~mem50.offset, main_#t~mem51.base, main_#t~mem51.offset, main_#t~mem52.base, main_#t~mem52.offset, main_#t~mem53.base, main_#t~mem53.offset, main_#t~mem54.base, main_#t~mem54.offset, main_#t~memset~res55.base, main_#t~memset~res55.offset, main_#t~mem56.base, main_#t~mem56.offset, main_#t~mem57.base, main_#t~mem57.offset, main_#t~mem58.base, main_#t~mem58.offset, main_#t~mem59.base, main_#t~mem59.offset, main_#t~mem60, main_#t~mem61.base, main_#t~mem61.offset, main_#t~mem62.base, main_#t~mem62.offset, main_#t~mem63.base, main_#t~mem63.offset, main_#t~mem64.base, main_#t~mem64.offset, main_#t~mem65, main_#t~post66, main_#t~mem67.base, main_#t~mem67.offset, main_#t~mem68, main_#t~mem69.base, main_#t~mem69.offset, main_#t~mem70.base, main_#t~mem70.offset, main_#t~mem71, main_#t~post72, main_#t~mem73.base, main_#t~mem73.offset, main_#t~mem74.base, main_#t~mem74.offset, main_#t~mem75.base, main_#t~mem75.offset, main_#t~mem77, main_#t~mem76, main_#t~mem78.base, main_#t~mem78.offset, main_#t~mem79, main_#t~short80, main_#t~mem81.base, main_#t~mem81.offset, main_#t~mem82, main_#t~malloc83.base, main_#t~malloc83.offset, main_#t~mem84.base, main_#t~mem84.offset, main_#t~mem85.base, main_#t~mem85.offset, main_#t~mem86.base, main_#t~mem86.offset, main_#t~mem87, main_#t~memset~res88.base, main_#t~memset~res88.offset, main_#t~mem89.base, main_#t~mem89.offset, main_#t~mem90.base, main_#t~mem90.offset, main_#t~mem93, main_#t~mem91.base, main_#t~mem91.offset, main_#t~mem92, main_#t~mem94.base, main_#t~mem94.offset, main_#t~mem97, main_#t~mem95.base, main_#t~mem95.offset, main_#t~mem96, main_#t~ite98, main_#t~mem99.base, main_#t~mem99.offset, main_#t~mem103.base, main_#t~mem103.offset, main_#t~mem104.base, main_#t~mem104.offset, main_#t~mem105.base, main_#t~mem105.offset, main_#t~mem106.base, main_#t~mem106.offset, main_#t~mem109, main_#t~mem107.base, main_#t~mem107.offset, main_#t~mem108, main_#t~mem110.base, main_#t~mem110.offset, main_#t~mem111, main_#t~pre112, main_#t~mem113.base, main_#t~mem113.offset, main_#t~mem114, main_#t~mem115.base, main_#t~mem115.offset, main_#t~mem116, main_#t~post117, main_#t~mem121, main_#t~mem119, main_#t~mem118.base, main_#t~mem118.offset, main_#t~mem120, main_#t~mem122, main_#t~post123, main_#t~mem124.base, main_#t~mem124.offset, main_#t~mem125.base, main_#t~mem125.offset, main_#t~mem126.base, main_#t~mem126.offset, main_#t~post100, main_#t~mem101.base, main_#t~mem101.offset, main_#t~mem102, main_#t~mem127.base, main_#t~mem127.offset, main_#t~mem128.base, main_#t~mem128.offset, main_#t~mem129.base, main_#t~mem129.offset, main_#t~mem130, main_#t~mem131.base, main_#t~mem131.offset, main_#t~mem132, main_#t~post133, main_#t~mem134.base, main_#t~mem134.offset, main_#t~mem135.base, main_#t~mem135.offset, main_#t~mem136.base, main_#t~mem136.offset, main_#t~mem137.base, main_#t~mem137.offset, main_#t~mem140, main_#t~mem138.base, main_#t~mem138.offset, main_#t~mem139, main_#t~ite143, main_#t~mem141.base, main_#t~mem141.offset, main_#t~mem142, main_#t~mem144.base, main_#t~mem144.offset, main_#t~mem145, main_#t~mem146.base, main_#t~mem146.offset, main_~_he_bkt~0, main_~_he_bkt_i~0, main_~_he_thh~0.base, main_~_he_thh~0.offset, main_~_he_hh_nxt~0.base, main_~_he_hh_nxt~0.offset, main_~#_he_new_buckets~0.base, main_~#_he_new_buckets~0.offset, main_~_he_newbkt~0.base, main_~_he_newbkt~0.offset, main_~_ha_head~0.base, main_~_ha_head~0.offset, main_~_ha_bkt~0, main_~_ha_hashv~0, main_#t~mem148, main_#t~mem147, main_#t~mem149, main_#t~mem150, main_#t~mem152, main_#t~mem151, main_#t~mem153, main_#t~mem154, main_#t~mem156, main_#t~mem155, main_#t~mem157, main_#t~mem158, main_#t~switch159, main_#t~mem160, main_#t~mem161, main_#t~mem162, main_#t~mem163, main_#t~mem164, main_#t~mem165, main_#t~mem166, main_#t~mem167, main_#t~mem168, main_#t~mem169, main_#t~mem170, main_~_hj_i~1, main_~_hj_j~1, main_~_hj_k~1, main_~_hj_key~1.base, main_~_hj_key~1.offset, main_#t~malloc171.base, main_#t~malloc171.offset, main_#t~mem172.base, main_#t~mem172.offset, main_#t~mem173.base, main_#t~mem173.offset, main_#t~memset~res174.base, main_#t~memset~res174.offset, main_#t~mem175.base, main_#t~mem175.offset, main_#t~mem176.base, main_#t~mem176.offset, main_#t~mem177.base, main_#t~mem177.offset, main_#t~mem178.base, main_#t~mem178.offset, main_#t~mem179.base, main_#t~mem179.offset, main_#t~malloc180.base, main_#t~malloc180.offset, main_#t~mem181.base, main_#t~mem181.offset, main_#t~mem182.base, main_#t~mem182.offset, main_#t~mem183.base, main_#t~mem183.offset, main_#t~mem184.base, main_#t~mem184.offset, main_#t~mem185.base, main_#t~mem185.offset, main_#t~mem186.base, main_#t~mem186.offset, main_#t~memset~res187.base, main_#t~memset~res187.offset, main_#t~mem188.base, main_#t~mem188.offset, main_#t~mem189.base, main_#t~mem189.offset, main_#t~mem190.base, main_#t~mem190.offset, main_#t~mem191.base, main_#t~mem191.offset, main_#t~mem192, main_#t~mem193.base, main_#t~mem193.offset, main_#t~mem194.base, main_#t~mem194.offset, main_#t~mem195.base, main_#t~mem195.offset, main_#t~mem196.base, main_#t~mem196.offset, main_#t~mem197, main_#t~post198, main_#t~mem199.base, main_#t~mem199.offset, main_#t~mem200, main_#t~mem201.base, main_#t~mem201.offset, main_#t~mem202.base, main_#t~mem202.offset, main_#t~mem203, main_#t~post204, main_#t~mem205.base, main_#t~mem205.offset, main_#t~mem206.base, main_#t~mem206.offset, main_#t~mem207.base, main_#t~mem207.offset, main_#t~mem209, main_#t~mem208, main_#t~mem210.base, main_#t~mem210.offset, main_#t~mem211, main_#t~short212, main_#t~mem213.base, main_#t~mem213.offset, main_#t~mem214, main_#t~malloc215.base, main_#t~malloc215.offset, main_#t~mem216.base, main_#t~mem216.offset, main_#t~mem217.base, main_#t~mem217.offset, main_#t~mem218.base, main_#t~mem218.offset, main_#t~mem219, main_#t~memset~res220.base, main_#t~memset~res220.offset, main_#t~mem221.base, main_#t~mem221.offset, main_#t~mem222.base, main_#t~mem222.offset, main_#t~mem225, main_#t~mem223.base, main_#t~mem223.offset, main_#t~mem224, main_#t~mem226.base, main_#t~mem226.offset, main_#t~mem229, main_#t~mem227.base, main_#t~mem227.offset, main_#t~mem228, main_#t~ite230, main_#t~mem231.base, main_#t~mem231.offset, main_#t~mem235.base, main_#t~mem235.offset, main_#t~mem236.base, main_#t~mem236.offset, main_#t~mem237.base, main_#t~mem237.offset, main_#t~mem238.base, main_#t~mem238.offset, main_#t~mem241, main_#t~mem239.base, main_#t~mem239.offset, main_#t~mem240, main_#t~mem242.base, main_#t~mem242.offset, main_#t~mem243, main_#t~pre244, main_#t~mem245.base, main_#t~mem245.offset, main_#t~mem246, main_#t~mem247.base, main_#t~mem247.offset, main_#t~mem248, main_#t~post249, main_#t~mem253, main_#t~mem251, main_#t~mem250.base, main_#t~mem250.offset, main_#t~mem252, main_#t~mem254, main_#t~post255, main_#t~mem256.base, main_#t~mem256.offset, main_#t~mem257.base, main_#t~mem257.offset, main_#t~mem258.base, main_#t~mem258.offset, main_#t~post232, main_#t~mem233.base, main_#t~mem233.offset, main_#t~mem234, main_#t~mem259.base, main_#t~mem259.offset, main_#t~mem260.base, main_#t~mem260.offset, main_#t~mem261.base, main_#t~mem261.offset, main_#t~mem262, main_#t~mem263.base, main_#t~mem263.offset, main_#t~mem264, main_#t~post265, main_#t~mem266.base, main_#t~mem266.offset, main_#t~mem267.base, main_#t~mem267.offset, main_#t~mem268.base, main_#t~mem268.offset, main_#t~mem269.base, main_#t~mem269.offset, main_#t~mem272, main_#t~mem270.base, main_#t~mem270.offset, main_#t~mem271, main_#t~ite275, main_#t~mem273.base, main_#t~mem273.offset, main_#t~mem274, main_#t~mem276.base, main_#t~mem276.offset, main_#t~mem277, main_#t~mem278.base, main_#t~mem278.offset, main_~_he_bkt~1, main_~_he_bkt_i~1, main_~_he_thh~1.base, main_~_he_thh~1.offset, main_~_he_hh_nxt~1.base, main_~_he_hh_nxt~1.offset, main_~#_he_new_buckets~1.base, main_~#_he_new_buckets~1.offset, main_~_he_newbkt~1.base, main_~_he_newbkt~1.offset, main_~_ha_head~1.base, main_~_ha_head~1.offset, main_~_ha_bkt~1, main_~_ha_hashv~1, main_#t~mem7, main_#t~post8, main_#t~mem9, main_#t~mem280, main_#t~mem279, main_#t~mem281, main_#t~mem282, main_#t~mem284, main_#t~mem283, main_#t~mem285, main_#t~mem286, main_#t~mem288, main_#t~mem287, main_#t~mem289, main_#t~mem290, main_#t~switch291, main_#t~mem292, main_#t~mem293, main_#t~mem294, main_#t~mem295, main_#t~mem296, main_#t~mem297, main_#t~mem298, main_#t~mem299, main_#t~mem300, main_#t~mem301, main_#t~mem302, main_~_hj_i~2, main_~_hj_j~2, main_~_hj_k~2, main_~_hj_key~2.base, main_~_hj_key~2.offset, main_#t~mem303.base, main_#t~mem303.offset, main_#t~mem304, main_#t~mem305.base, main_#t~mem305.offset, main_#t~mem306.base, main_#t~mem306.offset, main_#t~mem307.base, main_#t~mem307.offset, main_#t~mem308.base, main_#t~mem308.offset, main_#t~mem309.base, main_#t~mem309.offset, main_#t~mem310.base, main_#t~mem310.offset, main_#t~mem311.base, main_#t~mem311.offset, main_#t~mem312, main_#t~mem313, main_#t~mem314, main_#t~short315, main_#t~mem316.base, main_#t~mem316.offset, main_#t~ret317, main_#t~mem318.base, main_#t~mem318.offset, main_#t~mem319.base, main_#t~mem319.offset, main_#t~mem320.base, main_#t~mem320.offset, main_#t~mem321, main_~_hf_bkt~0, main_~_hf_hashv~0, main_#t~mem322, main_#t~mem324, main_#t~mem323, main_#t~mem325, main_#t~mem326, main_#t~mem328, main_#t~mem327, main_#t~mem329, main_#t~mem330, main_#t~mem332, main_#t~mem331, main_#t~mem333, main_#t~mem334, main_#t~switch335, main_#t~mem336, main_#t~mem337, main_#t~mem338, main_#t~mem339, main_#t~mem340, main_#t~mem341, main_#t~mem342, main_#t~mem343, main_#t~mem344, main_#t~mem345, main_#t~mem346, main_~_hj_i~3, main_~_hj_j~3, main_~_hj_k~3, main_~_hj_key~3.base, main_~_hj_key~3.offset, main_#t~mem347.base, main_#t~mem347.offset, main_#t~mem348, main_#t~mem349.base, main_#t~mem349.offset, main_#t~mem350.base, main_#t~mem350.offset, main_#t~mem351.base, main_#t~mem351.offset, main_#t~mem352.base, main_#t~mem352.offset, main_#t~mem353.base, main_#t~mem353.offset, main_#t~mem354.base, main_#t~mem354.offset, main_#t~mem355.base, main_#t~mem355.offset, main_#t~mem356, main_#t~mem357, main_#t~mem358, main_#t~short359, main_#t~mem360.base, main_#t~mem360.offset, main_#t~ret361, main_#t~mem362.base, main_#t~mem362.offset, main_#t~mem363.base, main_#t~mem363.offset, main_#t~mem364.base, main_#t~mem364.offset, main_#t~mem365, main_~_hf_bkt~1, main_~_hf_hashv~1, main_#t~mem366, main_#t~mem368, main_#t~mem367, main_#t~mem369, main_#t~mem370, main_#t~mem372, main_#t~mem371, main_#t~mem373, main_#t~mem374, main_#t~mem376, main_#t~mem375, main_#t~mem377, main_#t~mem378, main_#t~switch379, main_#t~mem380, main_#t~mem381, main_#t~mem382, main_#t~mem383, main_#t~mem384, main_#t~mem385, main_#t~mem386, main_#t~mem387, main_#t~mem388, main_#t~mem389, main_#t~mem390, main_~_hj_i~4, main_~_hj_j~4, main_~_hj_k~4, main_~_hj_key~4.base, main_~_hj_key~4.offset, main_#t~mem391.base, main_#t~mem391.offset, main_#t~mem392, main_#t~mem393.base, main_#t~mem393.offset, main_#t~mem394.base, main_#t~mem394.offset, main_#t~mem395.base, main_#t~mem395.offset, main_#t~mem396.base, main_#t~mem396.offset, main_#t~mem397.base, main_#t~mem397.offset, main_#t~mem398.base, main_#t~mem398.offset, main_#t~mem399.base, main_#t~mem399.offset, main_#t~mem400, main_#t~mem401, main_#t~mem402, main_#t~short403, main_#t~mem404.base, main_#t~mem404.offset, main_#t~ret405, main_#t~mem406.base, main_#t~mem406.offset, main_#t~mem407.base, main_#t~mem407.offset, main_#t~mem408.base, main_#t~mem408.offset, main_#t~mem409, main_~_hf_bkt~2, main_~_hf_hashv~2, main_#t~mem410, main_#t~mem412, main_#t~mem411, main_#t~mem413, main_#t~mem414, main_#t~mem416, main_#t~mem415, main_#t~mem417, main_#t~mem418, main_#t~mem420, main_#t~mem419, main_#t~mem421, main_#t~mem422, main_#t~switch423, main_#t~mem424, main_#t~mem425, main_#t~mem426, main_#t~mem427, main_#t~mem428, main_#t~mem429, main_#t~mem430, main_#t~mem431, main_#t~mem432, main_#t~mem433, main_#t~mem434, main_~_hj_i~5, main_~_hj_j~5, main_~_hj_k~5, main_~_hj_key~5.base, main_~_hj_key~5.offset, main_#t~mem435.base, main_#t~mem435.offset, main_#t~mem436, main_#t~mem437.base, main_#t~mem437.offset, main_#t~mem438.base, main_#t~mem438.offset, main_#t~mem439.base, main_#t~mem439.offset, main_#t~mem440.base, main_#t~mem440.offset, main_#t~mem441.base, main_#t~mem441.offset, main_#t~mem442.base, main_#t~mem442.offset, main_#t~mem443.base, main_#t~mem443.offset, main_#t~mem444, main_#t~mem445, main_#t~mem446, main_#t~short447, main_#t~mem448.base, main_#t~mem448.offset, main_#t~ret449, main_#t~mem450.base, main_#t~mem450.offset, main_#t~mem451.base, main_#t~mem451.offset, main_#t~mem452.base, main_#t~mem452.offset, main_#t~mem453, main_~_hf_bkt~3, main_~_hf_hashv~3, main_#t~mem454, main_#t~ite456.base, main_#t~ite456.offset, main_#t~mem455.base, main_#t~mem455.offset, main_#t~mem459.base, main_#t~mem459.offset, main_#t~mem460.base, main_#t~mem460.offset, main_#t~short461, main_#t~mem462.base, main_#t~mem462.offset, main_#t~mem463.base, main_#t~mem463.offset, main_#t~mem464.base, main_#t~mem464.offset, main_#t~mem465.base, main_#t~mem465.offset, main_#t~mem466.base, main_#t~mem466.offset, main_#t~mem467.base, main_#t~mem467.offset, main_#t~mem468.base, main_#t~mem468.offset, main_#t~mem469.base, main_#t~mem469.offset, main_#t~mem470, main_#t~mem471.base, main_#t~mem471.offset, main_#t~mem472.base, main_#t~mem472.offset, main_#t~mem473.base, main_#t~mem473.offset, main_#t~mem474, main_#t~mem475.base, main_#t~mem475.offset, main_#t~mem476.base, main_#t~mem476.offset, main_#t~mem477.base, main_#t~mem477.offset, main_#t~mem478.base, main_#t~mem478.offset, main_#t~mem479.base, main_#t~mem479.offset, main_#t~mem480, main_#t~mem481.base, main_#t~mem481.offset, main_#t~mem484, main_#t~mem482.base, main_#t~mem482.offset, main_#t~mem483, main_#t~mem485.base, main_#t~mem485.offset, main_#t~mem486.base, main_#t~mem486.offset, main_#t~mem487, main_#t~post488, main_#t~mem489.base, main_#t~mem489.offset, main_#t~mem490.base, main_#t~mem490.offset, main_#t~mem491.base, main_#t~mem491.offset, main_#t~mem492.base, main_#t~mem492.offset, main_#t~mem493.base, main_#t~mem493.offset, main_#t~mem494.base, main_#t~mem494.offset, main_#t~mem495.base, main_#t~mem495.offset, main_#t~mem496.base, main_#t~mem496.offset, main_~_hd_head~0.base, main_~_hd_head~0.offset, main_#t~mem497.base, main_#t~mem497.offset, main_#t~mem498, main_#t~post499, main_~_hd_bkt~0, main_~_hd_hh_del~0.base, main_~_hd_hh_del~0.offset, main_#t~ite458.base, main_#t~ite458.offset, main_#t~mem457.base, main_#t~mem457.offset, main_~#i~0.base, main_~#i~0.offset, main_~user~0.base, main_~user~0.offset, main_~tmp~0.base, main_~tmp~0.offset, main_~users~0.base, main_~users~0.offset, main_~altusers~0.base, main_~altusers~0.offset, main_~temp~0.base, main_~temp~0.offset;call main_~#i~0.base, main_~#i~0.offset := #Ultimate.allocOnStack(4);havoc main_~user~0.base, main_~user~0.offset;havoc main_~tmp~0.base, main_~tmp~0.offset;main_~users~0.base, main_~users~0.offset := 0, 0;main_~altusers~0.base, main_~altusers~0.offset := 0, 0;call write~int(0, main_~#i~0.base, main_~#i~0.offset, 4); 1077#L733-4 [2021-11-09 09:37:22,071 INFO L793 eck$LassoCheckResult]: Loop: 1077#L733-4 call main_#t~mem9 := read~int(main_~#i~0.base, main_~#i~0.offset, 4); 952#L733-1 assume !!(main_#t~mem9 < 1000);havoc main_#t~mem9;call main_#t~malloc10.base, main_#t~malloc10.offset := #Ultimate.allocOnHeap(72);main_~user~0.base, main_~user~0.offset := main_#t~malloc10.base, main_#t~malloc10.offset;havoc main_#t~malloc10.base, main_#t~malloc10.offset; 954#L735 assume !(main_~user~0.base == 0 && main_~user~0.offset == 0); 1146#L735-2 call main_#t~mem11 := read~int(main_~#i~0.base, main_~#i~0.offset, 4);call write~int(main_#t~mem11, main_~user~0.base, main_~user~0.offset, 4);havoc main_#t~mem11;call main_#t~mem12 := read~int(main_~#i~0.base, main_~#i~0.offset, 4);call main_#t~mem13 := read~int(main_~#i~0.base, main_~#i~0.offset, 4);call write~int(main_#t~mem12 * main_#t~mem13, main_~user~0.base, 4 + main_~user~0.offset, 4);havoc main_#t~mem12;havoc main_#t~mem13;call main_#t~mem14 := read~int(main_~#i~0.base, main_~#i~0.offset, 4); 1147#L740 assume !(main_#t~mem14 < 10);havoc main_#t~mem14; 1073#L743-123 havoc main_~_ha_hashv~1; 1074#L743-48 goto; 1002#L743-46 havoc main_~_hj_i~1;havoc main_~_hj_j~1;havoc main_~_hj_k~1;main_~_hj_key~1.base, main_~_hj_key~1.offset := main_~user~0.base, main_~user~0.offset;main_~_ha_hashv~1 := 4276993775;main_~_hj_j~1 := 2654435769;main_~_hj_i~1 := main_~_hj_j~1;main_~_hj_k~1 := 4; 1003#L743-7 assume !(main_~_hj_k~1 % 4294967296 >= 12); 1086#L743-8 main_~_ha_hashv~1 := 4 + main_~_ha_hashv~1;main_#t~switch159 := 11 == main_~_hj_k~1; 1087#L743-9 assume main_#t~switch159;call main_#t~mem160 := read~int(main_~_hj_key~1.base, 10 + main_~_hj_key~1.offset, 1);main_~_ha_hashv~1 := main_~_ha_hashv~1 + 16777216 * (main_#t~mem160 % 256);havoc main_#t~mem160; 1394#L743-11 main_#t~switch159 := main_#t~switch159 || 10 == main_~_hj_k~1; 1205#L743-12 assume !main_#t~switch159; 1206#L743-14 main_#t~switch159 := main_#t~switch159 || 9 == main_~_hj_k~1; 1260#L743-15 assume main_#t~switch159;call main_#t~mem162 := read~int(main_~_hj_key~1.base, 8 + main_~_hj_key~1.offset, 1);main_~_ha_hashv~1 := main_~_ha_hashv~1 + 256 * (main_#t~mem162 % 256);havoc main_#t~mem162; 1303#L743-17 main_#t~switch159 := main_#t~switch159 || 8 == main_~_hj_k~1; 1304#L743-18 assume main_#t~switch159;call main_#t~mem163 := read~int(main_~_hj_key~1.base, 7 + main_~_hj_key~1.offset, 1);main_~_hj_j~1 := main_~_hj_j~1 + 16777216 * (main_#t~mem163 % 256);havoc main_#t~mem163; 1267#L743-20 main_#t~switch159 := main_#t~switch159 || 7 == main_~_hj_k~1; 1268#L743-21 assume main_#t~switch159;call main_#t~mem164 := read~int(main_~_hj_key~1.base, 6 + main_~_hj_key~1.offset, 1);main_~_hj_j~1 := main_~_hj_j~1 + 65536 * (main_#t~mem164 % 256);havoc main_#t~mem164; 1211#L743-23 main_#t~switch159 := main_#t~switch159 || 6 == main_~_hj_k~1; 1212#L743-24 assume main_#t~switch159;call main_#t~mem165 := read~int(main_~_hj_key~1.base, 5 + main_~_hj_key~1.offset, 1);main_~_hj_j~1 := main_~_hj_j~1 + 256 * (main_#t~mem165 % 256);havoc main_#t~mem165; 1345#L743-26 main_#t~switch159 := main_#t~switch159 || 5 == main_~_hj_k~1; 1207#L743-27 assume main_#t~switch159;call main_#t~mem166 := read~int(main_~_hj_key~1.base, 4 + main_~_hj_key~1.offset, 1);main_~_hj_j~1 := main_~_hj_j~1 + main_#t~mem166 % 256;havoc main_#t~mem166; 1208#L743-29 main_#t~switch159 := main_#t~switch159 || 4 == main_~_hj_k~1; 982#L743-30 assume main_#t~switch159;call main_#t~mem167 := read~int(main_~_hj_key~1.base, 3 + main_~_hj_key~1.offset, 1);main_~_hj_i~1 := main_~_hj_i~1 + 16777216 * (main_#t~mem167 % 256);havoc main_#t~mem167; 983#L743-32 main_#t~switch159 := main_#t~switch159 || 3 == main_~_hj_k~1; 1167#L743-33 assume !main_#t~switch159; 1377#L743-35 main_#t~switch159 := main_#t~switch159 || 2 == main_~_hj_k~1; 1287#L743-36 assume main_#t~switch159;call main_#t~mem169 := read~int(main_~_hj_key~1.base, 1 + main_~_hj_key~1.offset, 1);main_~_hj_i~1 := main_~_hj_i~1 + 256 * (main_#t~mem169 % 256);havoc main_#t~mem169; 1288#L743-38 main_#t~switch159 := main_#t~switch159 || 1 == main_~_hj_k~1; 1195#L743-39 assume main_#t~switch159;call main_#t~mem170 := read~int(main_~_hj_key~1.base, main_~_hj_key~1.offset, 1);main_~_hj_i~1 := main_~_hj_i~1 + main_#t~mem170 % 256;havoc main_#t~mem170; 1196#L743-41 havoc main_#t~switch159; 1321#L743-44 main_~_hj_i~1 := main_~_hj_i~1 - main_~_hj_j~1;main_~_hj_i~1 := main_~_hj_i~1 - main_~_ha_hashv~1;main_~_hj_i~1 := ~bitwiseXor(main_~_hj_i~1, main_~_ha_hashv~1 / 8192);main_~_hj_j~1 := main_~_hj_j~1 - main_~_ha_hashv~1;main_~_hj_j~1 := main_~_hj_j~1 - main_~_hj_i~1;main_~_hj_j~1 := ~bitwiseXor(main_~_hj_j~1, 256 * main_~_hj_i~1);main_~_ha_hashv~1 := main_~_ha_hashv~1 - main_~_hj_i~1;main_~_ha_hashv~1 := main_~_ha_hashv~1 - main_~_hj_j~1;main_~_ha_hashv~1 := ~bitwiseXor(main_~_ha_hashv~1, main_~_hj_j~1 / 8192);main_~_hj_i~1 := main_~_hj_i~1 - main_~_hj_j~1;main_~_hj_i~1 := main_~_hj_i~1 - main_~_ha_hashv~1;main_~_hj_i~1 := ~bitwiseXor(main_~_hj_i~1, main_~_ha_hashv~1 / 4096);main_~_hj_j~1 := main_~_hj_j~1 - main_~_ha_hashv~1;main_~_hj_j~1 := main_~_hj_j~1 - main_~_hj_i~1;main_~_hj_j~1 := ~bitwiseXor(main_~_hj_j~1, 65536 * main_~_hj_i~1);main_~_ha_hashv~1 := main_~_ha_hashv~1 - main_~_hj_i~1;main_~_ha_hashv~1 := main_~_ha_hashv~1 - main_~_hj_j~1;main_~_ha_hashv~1 := ~bitwiseXor(main_~_ha_hashv~1, main_~_hj_j~1 / 32);main_~_hj_i~1 := main_~_hj_i~1 - main_~_hj_j~1;main_~_hj_i~1 := main_~_hj_i~1 - main_~_ha_hashv~1;main_~_hj_i~1 := ~bitwiseXor(main_~_hj_i~1, main_~_ha_hashv~1 / 8);main_~_hj_j~1 := main_~_hj_j~1 - main_~_ha_hashv~1;main_~_hj_j~1 := main_~_hj_j~1 - main_~_hj_i~1;main_~_hj_j~1 := ~bitwiseXor(main_~_hj_j~1, 1024 * main_~_hj_i~1);main_~_ha_hashv~1 := main_~_ha_hashv~1 - main_~_hj_i~1;main_~_ha_hashv~1 := main_~_ha_hashv~1 - main_~_hj_j~1;main_~_ha_hashv~1 := ~bitwiseXor(main_~_ha_hashv~1, main_~_hj_j~1 / 32768); 1322#L743-43 goto; 1347#L743-45 goto; 1044#L743-47 goto; 1035#L743-121 call write~int(main_~_ha_hashv~1, main_~user~0.base, 68 + main_~user~0.offset, 4);call write~$Pointer$(main_~user~0.base, main_~user~0.offset, main_~user~0.base, 60 + main_~user~0.offset, 4);call write~int(4, main_~user~0.base, 64 + main_~user~0.offset, 4); 1036#L743-50 assume !(main_~altusers~0.base == 0 && main_~altusers~0.offset == 0);call main_#t~mem188.base, main_#t~mem188.offset := read~$Pointer$(main_~altusers~0.base, 40 + main_~altusers~0.offset, 4);call write~$Pointer$(main_#t~mem188.base, main_#t~mem188.offset, main_~user~0.base, 40 + main_~user~0.offset, 4);havoc main_#t~mem188.base, main_#t~mem188.offset; 1271#L743-66 call write~$Pointer$(0, 0, main_~user~0.base, 48 + main_~user~0.offset, 4);call main_#t~mem189.base, main_#t~mem189.offset := read~$Pointer$(main_~altusers~0.base, 40 + main_~altusers~0.offset, 4);call main_#t~mem190.base, main_#t~mem190.offset := read~$Pointer$(main_#t~mem189.base, 16 + main_#t~mem189.offset, 4);call main_#t~mem191.base, main_#t~mem191.offset := read~$Pointer$(main_~altusers~0.base, 40 + main_~altusers~0.offset, 4);call main_#t~mem192 := read~int(main_#t~mem191.base, 20 + main_#t~mem191.offset, 4);call write~$Pointer$(main_#t~mem190.base, main_#t~mem190.offset - main_#t~mem192, main_~user~0.base, 44 + main_~user~0.offset, 4);havoc main_#t~mem189.base, main_#t~mem189.offset;havoc main_#t~mem190.base, main_#t~mem190.offset;havoc main_#t~mem191.base, main_#t~mem191.offset;havoc main_#t~mem192;call main_#t~mem193.base, main_#t~mem193.offset := read~$Pointer$(main_~altusers~0.base, 40 + main_~altusers~0.offset, 4);call main_#t~mem194.base, main_#t~mem194.offset := read~$Pointer$(main_#t~mem193.base, 16 + main_#t~mem193.offset, 4);call write~$Pointer$(main_~user~0.base, main_~user~0.offset, main_#t~mem194.base, 8 + main_#t~mem194.offset, 4);havoc main_#t~mem193.base, main_#t~mem193.offset;havoc main_#t~mem194.base, main_#t~mem194.offset;call main_#t~mem195.base, main_#t~mem195.offset := read~$Pointer$(main_~altusers~0.base, 40 + main_~altusers~0.offset, 4);call write~$Pointer$(main_~user~0.base, 40 + main_~user~0.offset, main_#t~mem195.base, 16 + main_#t~mem195.offset, 4);havoc main_#t~mem195.base, main_#t~mem195.offset; 1272#L743-65 goto; 1069#L743-119 havoc main_~_ha_bkt~1;call main_#t~mem196.base, main_#t~mem196.offset := read~$Pointer$(main_~altusers~0.base, 40 + main_~altusers~0.offset, 4);call main_#t~mem197 := read~int(main_#t~mem196.base, 12 + main_#t~mem196.offset, 4);main_#t~post198 := main_#t~mem197;call write~int(1 + main_#t~post198, main_#t~mem196.base, 12 + main_#t~mem196.offset, 4);havoc main_#t~mem196.base, main_#t~mem196.offset;havoc main_#t~mem197;havoc main_#t~post198; 1070#L743-70 call main_#t~mem199.base, main_#t~mem199.offset := read~$Pointer$(main_~altusers~0.base, 40 + main_~altusers~0.offset, 4);call main_#t~mem200 := read~int(main_#t~mem199.base, 4 + main_#t~mem199.offset, 4);main_~_ha_bkt~1 := ~bitwiseAnd(main_~_ha_hashv~1, main_#t~mem200 - 1);havoc main_#t~mem199.base, main_#t~mem199.offset;havoc main_#t~mem200; 1031#L743-69 goto; 1032#L743-117 call main_#t~mem201.base, main_#t~mem201.offset := read~$Pointer$(main_~altusers~0.base, 40 + main_~altusers~0.offset, 4);call main_#t~mem202.base, main_#t~mem202.offset := read~$Pointer$(main_#t~mem201.base, main_#t~mem201.offset, 4);main_~_ha_head~1.base, main_~_ha_head~1.offset := main_#t~mem202.base, main_#t~mem202.offset + 12 * (if main_~_ha_bkt~1 % 4294967296 % 4294967296 <= 2147483647 then main_~_ha_bkt~1 % 4294967296 % 4294967296 else main_~_ha_bkt~1 % 4294967296 % 4294967296 - 4294967296);havoc main_#t~mem201.base, main_#t~mem201.offset;havoc main_#t~mem202.base, main_#t~mem202.offset;call main_#t~mem203 := read~int(main_~_ha_head~1.base, 4 + main_~_ha_head~1.offset, 4);main_#t~post204 := main_#t~mem203;call write~int(1 + main_#t~post204, main_~_ha_head~1.base, 4 + main_~_ha_head~1.offset, 4);havoc main_#t~mem203;havoc main_#t~post204;call main_#t~mem205.base, main_#t~mem205.offset := read~$Pointer$(main_~_ha_head~1.base, main_~_ha_head~1.offset, 4);call write~$Pointer$(main_#t~mem205.base, main_#t~mem205.offset, main_~user~0.base, 56 + main_~user~0.offset, 4);havoc main_#t~mem205.base, main_#t~mem205.offset;call write~$Pointer$(0, 0, main_~user~0.base, 52 + main_~user~0.offset, 4);call main_#t~mem206.base, main_#t~mem206.offset := read~$Pointer$(main_~_ha_head~1.base, main_~_ha_head~1.offset, 4); 1192#L743-72 assume !(main_#t~mem206.base != 0 || main_#t~mem206.offset != 0);havoc main_#t~mem206.base, main_#t~mem206.offset; 1178#L743-74 call write~$Pointer$(main_~user~0.base, 40 + main_~user~0.offset, main_~_ha_head~1.base, main_~_ha_head~1.offset, 4);call main_#t~mem209 := read~int(main_~_ha_head~1.base, 4 + main_~_ha_head~1.offset, 4);call main_#t~mem208 := read~int(main_~_ha_head~1.base, 8 + main_~_ha_head~1.offset, 4);main_#t~short212 := main_#t~mem209 % 4294967296 >= 10 * (1 + main_#t~mem208) % 4294967296; 1097#L743-75 assume main_#t~short212;call main_#t~mem210.base, main_#t~mem210.offset := read~$Pointer$(main_~user~0.base, 40 + main_~user~0.offset, 4);call main_#t~mem211 := read~int(main_#t~mem210.base, 36 + main_#t~mem210.offset, 4);main_#t~short212 := 0 == main_#t~mem211 % 4294967296; 1098#L743-77 assume !main_#t~short212;havoc main_#t~mem209;havoc main_#t~mem208;havoc main_#t~mem210.base, main_#t~mem210.offset;havoc main_#t~mem211;havoc main_#t~short212; 1092#L743-116 goto; 1093#L743-118 goto; 1203#L743-120 goto; 1393#L743-122 goto; 1076#L733-3 call main_#t~mem7 := read~int(main_~#i~0.base, main_~#i~0.offset, 4);main_#t~post8 := main_#t~mem7;call write~int(1 + main_#t~post8, main_~#i~0.base, main_~#i~0.offset, 4);havoc main_#t~mem7;havoc main_#t~post8; 1077#L733-4 [2021-11-09 09:37:22,072 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-09 09:37:22,072 INFO L85 PathProgramCache]: Analyzing trace with hash 1251, now seen corresponding path program 2 times [2021-11-09 09:37:22,073 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-09 09:37:22,073 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2084095195] [2021-11-09 09:37:22,073 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-09 09:37:22,073 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-09 09:37:22,095 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-11-09 09:37:22,095 INFO L355 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-11-09 09:37:22,113 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-11-09 09:37:22,128 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-11-09 09:37:22,128 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-09 09:37:22,128 INFO L85 PathProgramCache]: Analyzing trace with hash 2000398624, now seen corresponding path program 1 times [2021-11-09 09:37:22,129 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-09 09:37:22,129 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [723658525] [2021-11-09 09:37:22,129 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-09 09:37:22,129 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-09 09:37:22,160 ERROR L247 FreeRefinementEngine]: Caught known exception: Unsupported non-linear arithmetic [2021-11-09 09:37:22,160 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleZ3 [299678773] [2021-11-09 09:37:22,160 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-09 09:37:22,161 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-09 09:37:22,161 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c5c949f6-d446-4ede-bd5f-e8bce6f973b6/bin/uautomizer-IVEQpCNsaX/z3 [2021-11-09 09:37:22,171 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c5c949f6-d446-4ede-bd5f-e8bce6f973b6/bin/uautomizer-IVEQpCNsaX/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-11-09 09:37:22,192 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c5c949f6-d446-4ede-bd5f-e8bce6f973b6/bin/uautomizer-IVEQpCNsaX/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2021-11-09 09:37:22,433 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-09 09:37:22,437 INFO L263 TraceCheckSpWp]: Trace formula consists of 297 conjuncts, 3 conjunts are in the unsatisfiable core [2021-11-09 09:37:22,442 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-09 09:37:22,616 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-09 09:37:22,616 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-09 09:37:22,617 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [723658525] [2021-11-09 09:37:22,617 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: Unknown [2021-11-09 09:37:22,618 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [299678773] [2021-11-09 09:37:22,618 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [299678773] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-09 09:37:22,619 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-09 09:37:22,619 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-11-09 09:37:22,619 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [912470699] [2021-11-09 09:37:22,620 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-11-09 09:37:22,620 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-09 09:37:22,621 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-09 09:37:22,621 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-09 09:37:22,621 INFO L87 Difference]: Start difference. First operand 468 states and 626 transitions. cyclomatic complexity: 169 Second operand has 3 states, 3 states have (on average 17.666666666666668) internal successors, (53), 3 states have internal predecessors, (53), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-09 09:37:22,730 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-09 09:37:22,730 INFO L93 Difference]: Finished difference Result 489 states and 647 transitions. [2021-11-09 09:37:22,731 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-09 09:37:22,732 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 489 states and 647 transitions. [2021-11-09 09:37:22,736 INFO L131 ngComponentsAnalysis]: Automaton has 11 accepting balls. 268 [2021-11-09 09:37:22,743 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 489 states to 489 states and 647 transitions. [2021-11-09 09:37:22,744 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 489 [2021-11-09 09:37:22,744 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 489 [2021-11-09 09:37:22,744 INFO L73 IsDeterministic]: Start isDeterministic. Operand 489 states and 647 transitions. [2021-11-09 09:37:22,745 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-11-09 09:37:22,746 INFO L681 BuchiCegarLoop]: Abstraction has 489 states and 647 transitions. [2021-11-09 09:37:22,747 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 489 states and 647 transitions. [2021-11-09 09:37:22,771 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 489 to 488. [2021-11-09 09:37:22,773 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 488 states, 481 states have (on average 1.318087318087318) internal successors, (634), 480 states have internal predecessors, (634), 6 states have call successors, (6), 1 states have call predecessors, (6), 1 states have return successors, (6), 6 states have call predecessors, (6), 6 states have call successors, (6) [2021-11-09 09:37:22,776 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 488 states to 488 states and 646 transitions. [2021-11-09 09:37:22,776 INFO L704 BuchiCegarLoop]: Abstraction has 488 states and 646 transitions. [2021-11-09 09:37:22,776 INFO L587 BuchiCegarLoop]: Abstraction has 488 states and 646 transitions. [2021-11-09 09:37:22,776 INFO L425 BuchiCegarLoop]: ======== Iteration 3============ [2021-11-09 09:37:22,776 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 488 states and 646 transitions. [2021-11-09 09:37:22,779 INFO L131 ngComponentsAnalysis]: Automaton has 11 accepting balls. 267 [2021-11-09 09:37:22,779 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-11-09 09:37:22,780 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-11-09 09:37:22,783 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1] [2021-11-09 09:37:22,783 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-09 09:37:22,783 INFO L791 eck$LassoCheckResult]: Stem: 2548#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string2.base, #t~string2.offset := #Ultimate.allocOnStack(2);call write~init~int(48, #t~string2.base, #t~string2.offset, 1);call write~init~int(0, #t~string2.base, 1 + #t~string2.offset, 1);call #t~string3.base, #t~string3.offset := #Ultimate.allocOnStack(22);~count_int_int~0 := 0; 2536#L-1 havoc main_#res;havoc main_#t~malloc10.base, main_#t~malloc10.offset, main_#t~mem11, main_#t~mem12, main_#t~mem13, main_#t~mem14, main_#t~mem16, main_#t~mem15, main_#t~mem17, main_#t~mem18, main_#t~mem20, main_#t~mem19, main_#t~mem21, main_#t~mem22, main_#t~mem24, main_#t~mem23, main_#t~mem25, main_#t~mem26, main_#t~switch27, main_#t~mem28, main_#t~mem29, main_#t~mem30, main_#t~mem31, main_#t~mem32, main_#t~mem33, main_#t~mem34, main_#t~mem35, main_#t~mem36, main_#t~mem37, main_#t~mem38, main_~_hj_i~0, main_~_hj_j~0, main_~_hj_k~0, main_~_hj_key~0.base, main_~_hj_key~0.offset, main_#t~malloc39.base, main_#t~malloc39.offset, main_#t~mem40.base, main_#t~mem40.offset, main_#t~mem41.base, main_#t~mem41.offset, main_#t~memset~res42.base, main_#t~memset~res42.offset, main_#t~mem43.base, main_#t~mem43.offset, main_#t~mem44.base, main_#t~mem44.offset, main_#t~mem45.base, main_#t~mem45.offset, main_#t~mem46.base, main_#t~mem46.offset, main_#t~mem47.base, main_#t~mem47.offset, main_#t~malloc48.base, main_#t~malloc48.offset, main_#t~mem49.base, main_#t~mem49.offset, main_#t~mem50.base, main_#t~mem50.offset, main_#t~mem51.base, main_#t~mem51.offset, main_#t~mem52.base, main_#t~mem52.offset, main_#t~mem53.base, main_#t~mem53.offset, main_#t~mem54.base, main_#t~mem54.offset, main_#t~memset~res55.base, main_#t~memset~res55.offset, main_#t~mem56.base, main_#t~mem56.offset, main_#t~mem57.base, main_#t~mem57.offset, main_#t~mem58.base, main_#t~mem58.offset, main_#t~mem59.base, main_#t~mem59.offset, main_#t~mem60, main_#t~mem61.base, main_#t~mem61.offset, main_#t~mem62.base, main_#t~mem62.offset, main_#t~mem63.base, main_#t~mem63.offset, main_#t~mem64.base, main_#t~mem64.offset, main_#t~mem65, main_#t~post66, main_#t~mem67.base, main_#t~mem67.offset, main_#t~mem68, main_#t~mem69.base, main_#t~mem69.offset, main_#t~mem70.base, main_#t~mem70.offset, main_#t~mem71, main_#t~post72, main_#t~mem73.base, main_#t~mem73.offset, main_#t~mem74.base, main_#t~mem74.offset, main_#t~mem75.base, main_#t~mem75.offset, main_#t~mem77, main_#t~mem76, main_#t~mem78.base, main_#t~mem78.offset, main_#t~mem79, main_#t~short80, main_#t~mem81.base, main_#t~mem81.offset, main_#t~mem82, main_#t~malloc83.base, main_#t~malloc83.offset, main_#t~mem84.base, main_#t~mem84.offset, main_#t~mem85.base, main_#t~mem85.offset, main_#t~mem86.base, main_#t~mem86.offset, main_#t~mem87, main_#t~memset~res88.base, main_#t~memset~res88.offset, main_#t~mem89.base, main_#t~mem89.offset, main_#t~mem90.base, main_#t~mem90.offset, main_#t~mem93, main_#t~mem91.base, main_#t~mem91.offset, main_#t~mem92, main_#t~mem94.base, main_#t~mem94.offset, main_#t~mem97, main_#t~mem95.base, main_#t~mem95.offset, main_#t~mem96, main_#t~ite98, main_#t~mem99.base, main_#t~mem99.offset, main_#t~mem103.base, main_#t~mem103.offset, main_#t~mem104.base, main_#t~mem104.offset, main_#t~mem105.base, main_#t~mem105.offset, main_#t~mem106.base, main_#t~mem106.offset, main_#t~mem109, main_#t~mem107.base, main_#t~mem107.offset, main_#t~mem108, main_#t~mem110.base, main_#t~mem110.offset, main_#t~mem111, main_#t~pre112, main_#t~mem113.base, main_#t~mem113.offset, main_#t~mem114, main_#t~mem115.base, main_#t~mem115.offset, main_#t~mem116, main_#t~post117, main_#t~mem121, main_#t~mem119, main_#t~mem118.base, main_#t~mem118.offset, main_#t~mem120, main_#t~mem122, main_#t~post123, main_#t~mem124.base, main_#t~mem124.offset, main_#t~mem125.base, main_#t~mem125.offset, main_#t~mem126.base, main_#t~mem126.offset, main_#t~post100, main_#t~mem101.base, main_#t~mem101.offset, main_#t~mem102, main_#t~mem127.base, main_#t~mem127.offset, main_#t~mem128.base, main_#t~mem128.offset, main_#t~mem129.base, main_#t~mem129.offset, main_#t~mem130, main_#t~mem131.base, main_#t~mem131.offset, main_#t~mem132, main_#t~post133, main_#t~mem134.base, main_#t~mem134.offset, main_#t~mem135.base, main_#t~mem135.offset, main_#t~mem136.base, main_#t~mem136.offset, main_#t~mem137.base, main_#t~mem137.offset, main_#t~mem140, main_#t~mem138.base, main_#t~mem138.offset, main_#t~mem139, main_#t~ite143, main_#t~mem141.base, main_#t~mem141.offset, main_#t~mem142, main_#t~mem144.base, main_#t~mem144.offset, main_#t~mem145, main_#t~mem146.base, main_#t~mem146.offset, main_~_he_bkt~0, main_~_he_bkt_i~0, main_~_he_thh~0.base, main_~_he_thh~0.offset, main_~_he_hh_nxt~0.base, main_~_he_hh_nxt~0.offset, main_~#_he_new_buckets~0.base, main_~#_he_new_buckets~0.offset, main_~_he_newbkt~0.base, main_~_he_newbkt~0.offset, main_~_ha_head~0.base, main_~_ha_head~0.offset, main_~_ha_bkt~0, main_~_ha_hashv~0, main_#t~mem148, main_#t~mem147, main_#t~mem149, main_#t~mem150, main_#t~mem152, main_#t~mem151, main_#t~mem153, main_#t~mem154, main_#t~mem156, main_#t~mem155, main_#t~mem157, main_#t~mem158, main_#t~switch159, main_#t~mem160, main_#t~mem161, main_#t~mem162, main_#t~mem163, main_#t~mem164, main_#t~mem165, main_#t~mem166, main_#t~mem167, main_#t~mem168, main_#t~mem169, main_#t~mem170, main_~_hj_i~1, main_~_hj_j~1, main_~_hj_k~1, main_~_hj_key~1.base, main_~_hj_key~1.offset, main_#t~malloc171.base, main_#t~malloc171.offset, main_#t~mem172.base, main_#t~mem172.offset, main_#t~mem173.base, main_#t~mem173.offset, main_#t~memset~res174.base, main_#t~memset~res174.offset, main_#t~mem175.base, main_#t~mem175.offset, main_#t~mem176.base, main_#t~mem176.offset, main_#t~mem177.base, main_#t~mem177.offset, main_#t~mem178.base, main_#t~mem178.offset, main_#t~mem179.base, main_#t~mem179.offset, main_#t~malloc180.base, main_#t~malloc180.offset, main_#t~mem181.base, main_#t~mem181.offset, main_#t~mem182.base, main_#t~mem182.offset, main_#t~mem183.base, main_#t~mem183.offset, main_#t~mem184.base, main_#t~mem184.offset, main_#t~mem185.base, main_#t~mem185.offset, main_#t~mem186.base, main_#t~mem186.offset, main_#t~memset~res187.base, main_#t~memset~res187.offset, main_#t~mem188.base, main_#t~mem188.offset, main_#t~mem189.base, main_#t~mem189.offset, main_#t~mem190.base, main_#t~mem190.offset, main_#t~mem191.base, main_#t~mem191.offset, main_#t~mem192, main_#t~mem193.base, main_#t~mem193.offset, main_#t~mem194.base, main_#t~mem194.offset, main_#t~mem195.base, main_#t~mem195.offset, main_#t~mem196.base, main_#t~mem196.offset, main_#t~mem197, main_#t~post198, main_#t~mem199.base, main_#t~mem199.offset, main_#t~mem200, main_#t~mem201.base, main_#t~mem201.offset, main_#t~mem202.base, main_#t~mem202.offset, main_#t~mem203, main_#t~post204, main_#t~mem205.base, main_#t~mem205.offset, main_#t~mem206.base, main_#t~mem206.offset, main_#t~mem207.base, main_#t~mem207.offset, main_#t~mem209, main_#t~mem208, main_#t~mem210.base, main_#t~mem210.offset, main_#t~mem211, main_#t~short212, main_#t~mem213.base, main_#t~mem213.offset, main_#t~mem214, main_#t~malloc215.base, main_#t~malloc215.offset, main_#t~mem216.base, main_#t~mem216.offset, main_#t~mem217.base, main_#t~mem217.offset, main_#t~mem218.base, main_#t~mem218.offset, main_#t~mem219, main_#t~memset~res220.base, main_#t~memset~res220.offset, main_#t~mem221.base, main_#t~mem221.offset, main_#t~mem222.base, main_#t~mem222.offset, main_#t~mem225, main_#t~mem223.base, main_#t~mem223.offset, main_#t~mem224, main_#t~mem226.base, main_#t~mem226.offset, main_#t~mem229, main_#t~mem227.base, main_#t~mem227.offset, main_#t~mem228, main_#t~ite230, main_#t~mem231.base, main_#t~mem231.offset, main_#t~mem235.base, main_#t~mem235.offset, main_#t~mem236.base, main_#t~mem236.offset, main_#t~mem237.base, main_#t~mem237.offset, main_#t~mem238.base, main_#t~mem238.offset, main_#t~mem241, main_#t~mem239.base, main_#t~mem239.offset, main_#t~mem240, main_#t~mem242.base, main_#t~mem242.offset, main_#t~mem243, main_#t~pre244, main_#t~mem245.base, main_#t~mem245.offset, main_#t~mem246, main_#t~mem247.base, main_#t~mem247.offset, main_#t~mem248, main_#t~post249, main_#t~mem253, main_#t~mem251, main_#t~mem250.base, main_#t~mem250.offset, main_#t~mem252, main_#t~mem254, main_#t~post255, main_#t~mem256.base, main_#t~mem256.offset, main_#t~mem257.base, main_#t~mem257.offset, main_#t~mem258.base, main_#t~mem258.offset, main_#t~post232, main_#t~mem233.base, main_#t~mem233.offset, main_#t~mem234, main_#t~mem259.base, main_#t~mem259.offset, main_#t~mem260.base, main_#t~mem260.offset, main_#t~mem261.base, main_#t~mem261.offset, main_#t~mem262, main_#t~mem263.base, main_#t~mem263.offset, main_#t~mem264, main_#t~post265, main_#t~mem266.base, main_#t~mem266.offset, main_#t~mem267.base, main_#t~mem267.offset, main_#t~mem268.base, main_#t~mem268.offset, main_#t~mem269.base, main_#t~mem269.offset, main_#t~mem272, main_#t~mem270.base, main_#t~mem270.offset, main_#t~mem271, main_#t~ite275, main_#t~mem273.base, main_#t~mem273.offset, main_#t~mem274, main_#t~mem276.base, main_#t~mem276.offset, main_#t~mem277, main_#t~mem278.base, main_#t~mem278.offset, main_~_he_bkt~1, main_~_he_bkt_i~1, main_~_he_thh~1.base, main_~_he_thh~1.offset, main_~_he_hh_nxt~1.base, main_~_he_hh_nxt~1.offset, main_~#_he_new_buckets~1.base, main_~#_he_new_buckets~1.offset, main_~_he_newbkt~1.base, main_~_he_newbkt~1.offset, main_~_ha_head~1.base, main_~_ha_head~1.offset, main_~_ha_bkt~1, main_~_ha_hashv~1, main_#t~mem7, main_#t~post8, main_#t~mem9, main_#t~mem280, main_#t~mem279, main_#t~mem281, main_#t~mem282, main_#t~mem284, main_#t~mem283, main_#t~mem285, main_#t~mem286, main_#t~mem288, main_#t~mem287, main_#t~mem289, main_#t~mem290, main_#t~switch291, main_#t~mem292, main_#t~mem293, main_#t~mem294, main_#t~mem295, main_#t~mem296, main_#t~mem297, main_#t~mem298, main_#t~mem299, main_#t~mem300, main_#t~mem301, main_#t~mem302, main_~_hj_i~2, main_~_hj_j~2, main_~_hj_k~2, main_~_hj_key~2.base, main_~_hj_key~2.offset, main_#t~mem303.base, main_#t~mem303.offset, main_#t~mem304, main_#t~mem305.base, main_#t~mem305.offset, main_#t~mem306.base, main_#t~mem306.offset, main_#t~mem307.base, main_#t~mem307.offset, main_#t~mem308.base, main_#t~mem308.offset, main_#t~mem309.base, main_#t~mem309.offset, main_#t~mem310.base, main_#t~mem310.offset, main_#t~mem311.base, main_#t~mem311.offset, main_#t~mem312, main_#t~mem313, main_#t~mem314, main_#t~short315, main_#t~mem316.base, main_#t~mem316.offset, main_#t~ret317, main_#t~mem318.base, main_#t~mem318.offset, main_#t~mem319.base, main_#t~mem319.offset, main_#t~mem320.base, main_#t~mem320.offset, main_#t~mem321, main_~_hf_bkt~0, main_~_hf_hashv~0, main_#t~mem322, main_#t~mem324, main_#t~mem323, main_#t~mem325, main_#t~mem326, main_#t~mem328, main_#t~mem327, main_#t~mem329, main_#t~mem330, main_#t~mem332, main_#t~mem331, main_#t~mem333, main_#t~mem334, main_#t~switch335, main_#t~mem336, main_#t~mem337, main_#t~mem338, main_#t~mem339, main_#t~mem340, main_#t~mem341, main_#t~mem342, main_#t~mem343, main_#t~mem344, main_#t~mem345, main_#t~mem346, main_~_hj_i~3, main_~_hj_j~3, main_~_hj_k~3, main_~_hj_key~3.base, main_~_hj_key~3.offset, main_#t~mem347.base, main_#t~mem347.offset, main_#t~mem348, main_#t~mem349.base, main_#t~mem349.offset, main_#t~mem350.base, main_#t~mem350.offset, main_#t~mem351.base, main_#t~mem351.offset, main_#t~mem352.base, main_#t~mem352.offset, main_#t~mem353.base, main_#t~mem353.offset, main_#t~mem354.base, main_#t~mem354.offset, main_#t~mem355.base, main_#t~mem355.offset, main_#t~mem356, main_#t~mem357, main_#t~mem358, main_#t~short359, main_#t~mem360.base, main_#t~mem360.offset, main_#t~ret361, main_#t~mem362.base, main_#t~mem362.offset, main_#t~mem363.base, main_#t~mem363.offset, main_#t~mem364.base, main_#t~mem364.offset, main_#t~mem365, main_~_hf_bkt~1, main_~_hf_hashv~1, main_#t~mem366, main_#t~mem368, main_#t~mem367, main_#t~mem369, main_#t~mem370, main_#t~mem372, main_#t~mem371, main_#t~mem373, main_#t~mem374, main_#t~mem376, main_#t~mem375, main_#t~mem377, main_#t~mem378, main_#t~switch379, main_#t~mem380, main_#t~mem381, main_#t~mem382, main_#t~mem383, main_#t~mem384, main_#t~mem385, main_#t~mem386, main_#t~mem387, main_#t~mem388, main_#t~mem389, main_#t~mem390, main_~_hj_i~4, main_~_hj_j~4, main_~_hj_k~4, main_~_hj_key~4.base, main_~_hj_key~4.offset, main_#t~mem391.base, main_#t~mem391.offset, main_#t~mem392, main_#t~mem393.base, main_#t~mem393.offset, main_#t~mem394.base, main_#t~mem394.offset, main_#t~mem395.base, main_#t~mem395.offset, main_#t~mem396.base, main_#t~mem396.offset, main_#t~mem397.base, main_#t~mem397.offset, main_#t~mem398.base, main_#t~mem398.offset, main_#t~mem399.base, main_#t~mem399.offset, main_#t~mem400, main_#t~mem401, main_#t~mem402, main_#t~short403, main_#t~mem404.base, main_#t~mem404.offset, main_#t~ret405, main_#t~mem406.base, main_#t~mem406.offset, main_#t~mem407.base, main_#t~mem407.offset, main_#t~mem408.base, main_#t~mem408.offset, main_#t~mem409, main_~_hf_bkt~2, main_~_hf_hashv~2, main_#t~mem410, main_#t~mem412, main_#t~mem411, main_#t~mem413, main_#t~mem414, main_#t~mem416, main_#t~mem415, main_#t~mem417, main_#t~mem418, main_#t~mem420, main_#t~mem419, main_#t~mem421, main_#t~mem422, main_#t~switch423, main_#t~mem424, main_#t~mem425, main_#t~mem426, main_#t~mem427, main_#t~mem428, main_#t~mem429, main_#t~mem430, main_#t~mem431, main_#t~mem432, main_#t~mem433, main_#t~mem434, main_~_hj_i~5, main_~_hj_j~5, main_~_hj_k~5, main_~_hj_key~5.base, main_~_hj_key~5.offset, main_#t~mem435.base, main_#t~mem435.offset, main_#t~mem436, main_#t~mem437.base, main_#t~mem437.offset, main_#t~mem438.base, main_#t~mem438.offset, main_#t~mem439.base, main_#t~mem439.offset, main_#t~mem440.base, main_#t~mem440.offset, main_#t~mem441.base, main_#t~mem441.offset, main_#t~mem442.base, main_#t~mem442.offset, main_#t~mem443.base, main_#t~mem443.offset, main_#t~mem444, main_#t~mem445, main_#t~mem446, main_#t~short447, main_#t~mem448.base, main_#t~mem448.offset, main_#t~ret449, main_#t~mem450.base, main_#t~mem450.offset, main_#t~mem451.base, main_#t~mem451.offset, main_#t~mem452.base, main_#t~mem452.offset, main_#t~mem453, main_~_hf_bkt~3, main_~_hf_hashv~3, main_#t~mem454, main_#t~ite456.base, main_#t~ite456.offset, main_#t~mem455.base, main_#t~mem455.offset, main_#t~mem459.base, main_#t~mem459.offset, main_#t~mem460.base, main_#t~mem460.offset, main_#t~short461, main_#t~mem462.base, main_#t~mem462.offset, main_#t~mem463.base, main_#t~mem463.offset, main_#t~mem464.base, main_#t~mem464.offset, main_#t~mem465.base, main_#t~mem465.offset, main_#t~mem466.base, main_#t~mem466.offset, main_#t~mem467.base, main_#t~mem467.offset, main_#t~mem468.base, main_#t~mem468.offset, main_#t~mem469.base, main_#t~mem469.offset, main_#t~mem470, main_#t~mem471.base, main_#t~mem471.offset, main_#t~mem472.base, main_#t~mem472.offset, main_#t~mem473.base, main_#t~mem473.offset, main_#t~mem474, main_#t~mem475.base, main_#t~mem475.offset, main_#t~mem476.base, main_#t~mem476.offset, main_#t~mem477.base, main_#t~mem477.offset, main_#t~mem478.base, main_#t~mem478.offset, main_#t~mem479.base, main_#t~mem479.offset, main_#t~mem480, main_#t~mem481.base, main_#t~mem481.offset, main_#t~mem484, main_#t~mem482.base, main_#t~mem482.offset, main_#t~mem483, main_#t~mem485.base, main_#t~mem485.offset, main_#t~mem486.base, main_#t~mem486.offset, main_#t~mem487, main_#t~post488, main_#t~mem489.base, main_#t~mem489.offset, main_#t~mem490.base, main_#t~mem490.offset, main_#t~mem491.base, main_#t~mem491.offset, main_#t~mem492.base, main_#t~mem492.offset, main_#t~mem493.base, main_#t~mem493.offset, main_#t~mem494.base, main_#t~mem494.offset, main_#t~mem495.base, main_#t~mem495.offset, main_#t~mem496.base, main_#t~mem496.offset, main_~_hd_head~0.base, main_~_hd_head~0.offset, main_#t~mem497.base, main_#t~mem497.offset, main_#t~mem498, main_#t~post499, main_~_hd_bkt~0, main_~_hd_hh_del~0.base, main_~_hd_hh_del~0.offset, main_#t~ite458.base, main_#t~ite458.offset, main_#t~mem457.base, main_#t~mem457.offset, main_~#i~0.base, main_~#i~0.offset, main_~user~0.base, main_~user~0.offset, main_~tmp~0.base, main_~tmp~0.offset, main_~users~0.base, main_~users~0.offset, main_~altusers~0.base, main_~altusers~0.offset, main_~temp~0.base, main_~temp~0.offset;call main_~#i~0.base, main_~#i~0.offset := #Ultimate.allocOnStack(4);havoc main_~user~0.base, main_~user~0.offset;havoc main_~tmp~0.base, main_~tmp~0.offset;main_~users~0.base, main_~users~0.offset := 0, 0;main_~altusers~0.base, main_~altusers~0.offset := 0, 0;call write~int(0, main_~#i~0.base, main_~#i~0.offset, 4); 2196#L733-4 [2021-11-09 09:37:22,783 INFO L793 eck$LassoCheckResult]: Loop: 2196#L733-4 call main_#t~mem9 := read~int(main_~#i~0.base, main_~#i~0.offset, 4); 2071#L733-1 assume !!(main_#t~mem9 < 1000);havoc main_#t~mem9;call main_#t~malloc10.base, main_#t~malloc10.offset := #Ultimate.allocOnHeap(72);main_~user~0.base, main_~user~0.offset := main_#t~malloc10.base, main_#t~malloc10.offset;havoc main_#t~malloc10.base, main_#t~malloc10.offset; 2073#L735 assume !(main_~user~0.base == 0 && main_~user~0.offset == 0); 2265#L735-2 call main_#t~mem11 := read~int(main_~#i~0.base, main_~#i~0.offset, 4);call write~int(main_#t~mem11, main_~user~0.base, main_~user~0.offset, 4);havoc main_#t~mem11;call main_#t~mem12 := read~int(main_~#i~0.base, main_~#i~0.offset, 4);call main_#t~mem13 := read~int(main_~#i~0.base, main_~#i~0.offset, 4);call write~int(main_#t~mem12 * main_#t~mem13, main_~user~0.base, 4 + main_~user~0.offset, 4);havoc main_#t~mem12;havoc main_#t~mem13;call main_#t~mem14 := read~int(main_~#i~0.base, main_~#i~0.offset, 4); 2266#L740 assume !(main_#t~mem14 < 10);havoc main_#t~mem14; 2192#L743-123 havoc main_~_ha_hashv~1; 2193#L743-48 goto; 2121#L743-46 havoc main_~_hj_i~1;havoc main_~_hj_j~1;havoc main_~_hj_k~1;main_~_hj_key~1.base, main_~_hj_key~1.offset := main_~user~0.base, main_~user~0.offset;main_~_ha_hashv~1 := 4276993775;main_~_hj_j~1 := 2654435769;main_~_hj_i~1 := main_~_hj_j~1;main_~_hj_k~1 := 4; 2122#L743-7 assume !(main_~_hj_k~1 % 4294967296 >= 12); 2205#L743-8 main_~_ha_hashv~1 := 4 + main_~_ha_hashv~1;main_#t~switch159 := 11 == main_~_hj_k~1; 2206#L743-9 assume main_#t~switch159;call main_#t~mem160 := read~int(main_~_hj_key~1.base, 10 + main_~_hj_key~1.offset, 1);main_~_ha_hashv~1 := main_~_ha_hashv~1 + 16777216 * (main_#t~mem160 % 256);havoc main_#t~mem160; 2520#L743-11 main_#t~switch159 := main_#t~switch159 || 10 == main_~_hj_k~1; 2324#L743-12 assume main_#t~switch159;call main_#t~mem161 := read~int(main_~_hj_key~1.base, 9 + main_~_hj_key~1.offset, 1);main_~_ha_hashv~1 := main_~_ha_hashv~1 + 65536 * (main_#t~mem161 % 256);havoc main_#t~mem161; 2325#L743-14 main_#t~switch159 := main_#t~switch159 || 9 == main_~_hj_k~1; 2487#L743-15 assume main_#t~switch159;call main_#t~mem162 := read~int(main_~_hj_key~1.base, 8 + main_~_hj_key~1.offset, 1);main_~_ha_hashv~1 := main_~_ha_hashv~1 + 256 * (main_#t~mem162 % 256);havoc main_#t~mem162; 2423#L743-17 main_#t~switch159 := main_#t~switch159 || 8 == main_~_hj_k~1; 2424#L743-18 assume main_#t~switch159;call main_#t~mem163 := read~int(main_~_hj_key~1.base, 7 + main_~_hj_key~1.offset, 1);main_~_hj_j~1 := main_~_hj_j~1 + 16777216 * (main_#t~mem163 % 256);havoc main_#t~mem163; 2511#L743-20 main_#t~switch159 := main_#t~switch159 || 7 == main_~_hj_k~1; 2529#L743-21 assume main_#t~switch159;call main_#t~mem164 := read~int(main_~_hj_key~1.base, 6 + main_~_hj_key~1.offset, 1);main_~_hj_j~1 := main_~_hj_j~1 + 65536 * (main_#t~mem164 % 256);havoc main_#t~mem164; 2330#L743-23 main_#t~switch159 := main_#t~switch159 || 6 == main_~_hj_k~1; 2331#L743-24 assume main_#t~switch159;call main_#t~mem165 := read~int(main_~_hj_key~1.base, 5 + main_~_hj_key~1.offset, 1);main_~_hj_j~1 := main_~_hj_j~1 + 256 * (main_#t~mem165 % 256);havoc main_#t~mem165; 2467#L743-26 main_#t~switch159 := main_#t~switch159 || 5 == main_~_hj_k~1; 2326#L743-27 assume main_#t~switch159;call main_#t~mem166 := read~int(main_~_hj_key~1.base, 4 + main_~_hj_key~1.offset, 1);main_~_hj_j~1 := main_~_hj_j~1 + main_#t~mem166 % 256;havoc main_#t~mem166; 2327#L743-29 main_#t~switch159 := main_#t~switch159 || 4 == main_~_hj_k~1; 2101#L743-30 assume main_#t~switch159;call main_#t~mem167 := read~int(main_~_hj_key~1.base, 3 + main_~_hj_key~1.offset, 1);main_~_hj_i~1 := main_~_hj_i~1 + 16777216 * (main_#t~mem167 % 256);havoc main_#t~mem167; 2102#L743-32 main_#t~switch159 := main_#t~switch159 || 3 == main_~_hj_k~1; 2286#L743-33 assume main_#t~switch159;call main_#t~mem168 := read~int(main_~_hj_key~1.base, 2 + main_~_hj_key~1.offset, 1);main_~_hj_i~1 := main_~_hj_i~1 + 65536 * (main_#t~mem168 % 256);havoc main_#t~mem168; 2501#L743-35 main_#t~switch159 := main_#t~switch159 || 2 == main_~_hj_k~1; 2407#L743-36 assume main_#t~switch159;call main_#t~mem169 := read~int(main_~_hj_key~1.base, 1 + main_~_hj_key~1.offset, 1);main_~_hj_i~1 := main_~_hj_i~1 + 256 * (main_#t~mem169 % 256);havoc main_#t~mem169; 2408#L743-38 main_#t~switch159 := main_#t~switch159 || 1 == main_~_hj_k~1; 2316#L743-39 assume main_#t~switch159;call main_#t~mem170 := read~int(main_~_hj_key~1.base, main_~_hj_key~1.offset, 1);main_~_hj_i~1 := main_~_hj_i~1 + main_#t~mem170 % 256;havoc main_#t~mem170; 2317#L743-41 havoc main_#t~switch159; 2441#L743-44 main_~_hj_i~1 := main_~_hj_i~1 - main_~_hj_j~1;main_~_hj_i~1 := main_~_hj_i~1 - main_~_ha_hashv~1;main_~_hj_i~1 := ~bitwiseXor(main_~_hj_i~1, main_~_ha_hashv~1 / 8192);main_~_hj_j~1 := main_~_hj_j~1 - main_~_ha_hashv~1;main_~_hj_j~1 := main_~_hj_j~1 - main_~_hj_i~1;main_~_hj_j~1 := ~bitwiseXor(main_~_hj_j~1, 256 * main_~_hj_i~1);main_~_ha_hashv~1 := main_~_ha_hashv~1 - main_~_hj_i~1;main_~_ha_hashv~1 := main_~_ha_hashv~1 - main_~_hj_j~1;main_~_ha_hashv~1 := ~bitwiseXor(main_~_ha_hashv~1, main_~_hj_j~1 / 8192);main_~_hj_i~1 := main_~_hj_i~1 - main_~_hj_j~1;main_~_hj_i~1 := main_~_hj_i~1 - main_~_ha_hashv~1;main_~_hj_i~1 := ~bitwiseXor(main_~_hj_i~1, main_~_ha_hashv~1 / 4096);main_~_hj_j~1 := main_~_hj_j~1 - main_~_ha_hashv~1;main_~_hj_j~1 := main_~_hj_j~1 - main_~_hj_i~1;main_~_hj_j~1 := ~bitwiseXor(main_~_hj_j~1, 65536 * main_~_hj_i~1);main_~_ha_hashv~1 := main_~_ha_hashv~1 - main_~_hj_i~1;main_~_ha_hashv~1 := main_~_ha_hashv~1 - main_~_hj_j~1;main_~_ha_hashv~1 := ~bitwiseXor(main_~_ha_hashv~1, main_~_hj_j~1 / 32);main_~_hj_i~1 := main_~_hj_i~1 - main_~_hj_j~1;main_~_hj_i~1 := main_~_hj_i~1 - main_~_ha_hashv~1;main_~_hj_i~1 := ~bitwiseXor(main_~_hj_i~1, main_~_ha_hashv~1 / 8);main_~_hj_j~1 := main_~_hj_j~1 - main_~_ha_hashv~1;main_~_hj_j~1 := main_~_hj_j~1 - main_~_hj_i~1;main_~_hj_j~1 := ~bitwiseXor(main_~_hj_j~1, 1024 * main_~_hj_i~1);main_~_ha_hashv~1 := main_~_ha_hashv~1 - main_~_hj_i~1;main_~_ha_hashv~1 := main_~_ha_hashv~1 - main_~_hj_j~1;main_~_ha_hashv~1 := ~bitwiseXor(main_~_ha_hashv~1, main_~_hj_j~1 / 32768); 2442#L743-43 goto; 2469#L743-45 goto; 2163#L743-47 goto; 2154#L743-121 call write~int(main_~_ha_hashv~1, main_~user~0.base, 68 + main_~user~0.offset, 4);call write~$Pointer$(main_~user~0.base, main_~user~0.offset, main_~user~0.base, 60 + main_~user~0.offset, 4);call write~int(4, main_~user~0.base, 64 + main_~user~0.offset, 4); 2155#L743-50 assume !(main_~altusers~0.base == 0 && main_~altusers~0.offset == 0);call main_#t~mem188.base, main_#t~mem188.offset := read~$Pointer$(main_~altusers~0.base, 40 + main_~altusers~0.offset, 4);call write~$Pointer$(main_#t~mem188.base, main_#t~mem188.offset, main_~user~0.base, 40 + main_~user~0.offset, 4);havoc main_#t~mem188.base, main_#t~mem188.offset; 2391#L743-66 call write~$Pointer$(0, 0, main_~user~0.base, 48 + main_~user~0.offset, 4);call main_#t~mem189.base, main_#t~mem189.offset := read~$Pointer$(main_~altusers~0.base, 40 + main_~altusers~0.offset, 4);call main_#t~mem190.base, main_#t~mem190.offset := read~$Pointer$(main_#t~mem189.base, 16 + main_#t~mem189.offset, 4);call main_#t~mem191.base, main_#t~mem191.offset := read~$Pointer$(main_~altusers~0.base, 40 + main_~altusers~0.offset, 4);call main_#t~mem192 := read~int(main_#t~mem191.base, 20 + main_#t~mem191.offset, 4);call write~$Pointer$(main_#t~mem190.base, main_#t~mem190.offset - main_#t~mem192, main_~user~0.base, 44 + main_~user~0.offset, 4);havoc main_#t~mem189.base, main_#t~mem189.offset;havoc main_#t~mem190.base, main_#t~mem190.offset;havoc main_#t~mem191.base, main_#t~mem191.offset;havoc main_#t~mem192;call main_#t~mem193.base, main_#t~mem193.offset := read~$Pointer$(main_~altusers~0.base, 40 + main_~altusers~0.offset, 4);call main_#t~mem194.base, main_#t~mem194.offset := read~$Pointer$(main_#t~mem193.base, 16 + main_#t~mem193.offset, 4);call write~$Pointer$(main_~user~0.base, main_~user~0.offset, main_#t~mem194.base, 8 + main_#t~mem194.offset, 4);havoc main_#t~mem193.base, main_#t~mem193.offset;havoc main_#t~mem194.base, main_#t~mem194.offset;call main_#t~mem195.base, main_#t~mem195.offset := read~$Pointer$(main_~altusers~0.base, 40 + main_~altusers~0.offset, 4);call write~$Pointer$(main_~user~0.base, 40 + main_~user~0.offset, main_#t~mem195.base, 16 + main_#t~mem195.offset, 4);havoc main_#t~mem195.base, main_#t~mem195.offset; 2392#L743-65 goto; 2188#L743-119 havoc main_~_ha_bkt~1;call main_#t~mem196.base, main_#t~mem196.offset := read~$Pointer$(main_~altusers~0.base, 40 + main_~altusers~0.offset, 4);call main_#t~mem197 := read~int(main_#t~mem196.base, 12 + main_#t~mem196.offset, 4);main_#t~post198 := main_#t~mem197;call write~int(1 + main_#t~post198, main_#t~mem196.base, 12 + main_#t~mem196.offset, 4);havoc main_#t~mem196.base, main_#t~mem196.offset;havoc main_#t~mem197;havoc main_#t~post198; 2189#L743-70 call main_#t~mem199.base, main_#t~mem199.offset := read~$Pointer$(main_~altusers~0.base, 40 + main_~altusers~0.offset, 4);call main_#t~mem200 := read~int(main_#t~mem199.base, 4 + main_#t~mem199.offset, 4);main_~_ha_bkt~1 := ~bitwiseAnd(main_~_ha_hashv~1, main_#t~mem200 - 1);havoc main_#t~mem199.base, main_#t~mem199.offset;havoc main_#t~mem200; 2150#L743-69 goto; 2151#L743-117 call main_#t~mem201.base, main_#t~mem201.offset := read~$Pointer$(main_~altusers~0.base, 40 + main_~altusers~0.offset, 4);call main_#t~mem202.base, main_#t~mem202.offset := read~$Pointer$(main_#t~mem201.base, main_#t~mem201.offset, 4);main_~_ha_head~1.base, main_~_ha_head~1.offset := main_#t~mem202.base, main_#t~mem202.offset + 12 * (if main_~_ha_bkt~1 % 4294967296 % 4294967296 <= 2147483647 then main_~_ha_bkt~1 % 4294967296 % 4294967296 else main_~_ha_bkt~1 % 4294967296 % 4294967296 - 4294967296);havoc main_#t~mem201.base, main_#t~mem201.offset;havoc main_#t~mem202.base, main_#t~mem202.offset;call main_#t~mem203 := read~int(main_~_ha_head~1.base, 4 + main_~_ha_head~1.offset, 4);main_#t~post204 := main_#t~mem203;call write~int(1 + main_#t~post204, main_~_ha_head~1.base, 4 + main_~_ha_head~1.offset, 4);havoc main_#t~mem203;havoc main_#t~post204;call main_#t~mem205.base, main_#t~mem205.offset := read~$Pointer$(main_~_ha_head~1.base, main_~_ha_head~1.offset, 4);call write~$Pointer$(main_#t~mem205.base, main_#t~mem205.offset, main_~user~0.base, 56 + main_~user~0.offset, 4);havoc main_#t~mem205.base, main_#t~mem205.offset;call write~$Pointer$(0, 0, main_~user~0.base, 52 + main_~user~0.offset, 4);call main_#t~mem206.base, main_#t~mem206.offset := read~$Pointer$(main_~_ha_head~1.base, main_~_ha_head~1.offset, 4); 2311#L743-72 assume !(main_#t~mem206.base != 0 || main_#t~mem206.offset != 0);havoc main_#t~mem206.base, main_#t~mem206.offset; 2297#L743-74 call write~$Pointer$(main_~user~0.base, 40 + main_~user~0.offset, main_~_ha_head~1.base, main_~_ha_head~1.offset, 4);call main_#t~mem209 := read~int(main_~_ha_head~1.base, 4 + main_~_ha_head~1.offset, 4);call main_#t~mem208 := read~int(main_~_ha_head~1.base, 8 + main_~_ha_head~1.offset, 4);main_#t~short212 := main_#t~mem209 % 4294967296 >= 10 * (1 + main_#t~mem208) % 4294967296; 2216#L743-75 assume main_#t~short212;call main_#t~mem210.base, main_#t~mem210.offset := read~$Pointer$(main_~user~0.base, 40 + main_~user~0.offset, 4);call main_#t~mem211 := read~int(main_#t~mem210.base, 36 + main_#t~mem210.offset, 4);main_#t~short212 := 0 == main_#t~mem211 % 4294967296; 2217#L743-77 assume !main_#t~short212;havoc main_#t~mem209;havoc main_#t~mem208;havoc main_#t~mem210.base, main_#t~mem210.offset;havoc main_#t~mem211;havoc main_#t~short212; 2211#L743-116 goto; 2212#L743-118 goto; 2322#L743-120 goto; 2519#L743-122 goto; 2195#L733-3 call main_#t~mem7 := read~int(main_~#i~0.base, main_~#i~0.offset, 4);main_#t~post8 := main_#t~mem7;call write~int(1 + main_#t~post8, main_~#i~0.base, main_~#i~0.offset, 4);havoc main_#t~mem7;havoc main_#t~post8; 2196#L733-4 [2021-11-09 09:37:22,784 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-09 09:37:22,784 INFO L85 PathProgramCache]: Analyzing trace with hash 1251, now seen corresponding path program 3 times [2021-11-09 09:37:22,784 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-09 09:37:22,784 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [227642793] [2021-11-09 09:37:22,785 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-09 09:37:22,786 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-09 09:37:22,828 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-11-09 09:37:22,828 INFO L355 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-11-09 09:37:22,857 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-11-09 09:37:22,875 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-11-09 09:37:22,875 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-09 09:37:22,876 INFO L85 PathProgramCache]: Analyzing trace with hash -346476132, now seen corresponding path program 1 times [2021-11-09 09:37:22,876 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-09 09:37:22,877 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2087081391] [2021-11-09 09:37:22,877 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-09 09:37:22,877 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-09 09:37:22,909 ERROR L247 FreeRefinementEngine]: Caught known exception: Unsupported non-linear arithmetic [2021-11-09 09:37:22,909 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleZ3 [1794221646] [2021-11-09 09:37:22,909 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-09 09:37:22,909 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-09 09:37:22,910 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c5c949f6-d446-4ede-bd5f-e8bce6f973b6/bin/uautomizer-IVEQpCNsaX/z3 [2021-11-09 09:37:22,913 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c5c949f6-d446-4ede-bd5f-e8bce6f973b6/bin/uautomizer-IVEQpCNsaX/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-11-09 09:37:22,941 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c5c949f6-d446-4ede-bd5f-e8bce6f973b6/bin/uautomizer-IVEQpCNsaX/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2021-11-09 09:37:23,162 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-09 09:37:23,165 INFO L263 TraceCheckSpWp]: Trace formula consists of 309 conjuncts, 3 conjunts are in the unsatisfiable core [2021-11-09 09:37:23,167 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-09 09:37:23,303 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-09 09:37:23,303 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-09 09:37:23,303 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2087081391] [2021-11-09 09:37:23,303 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: Unknown [2021-11-09 09:37:23,304 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1794221646] [2021-11-09 09:37:23,304 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1794221646] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-09 09:37:23,304 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-09 09:37:23,305 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-11-09 09:37:23,305 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [567156033] [2021-11-09 09:37:23,305 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-11-09 09:37:23,305 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-09 09:37:23,306 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-11-09 09:37:23,307 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-11-09 09:37:23,307 INFO L87 Difference]: Start difference. First operand 488 states and 646 transitions. cyclomatic complexity: 169 Second operand has 4 states, 4 states have (on average 13.25) internal successors, (53), 4 states have internal predecessors, (53), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-09 09:37:23,411 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-09 09:37:23,412 INFO L93 Difference]: Finished difference Result 855 states and 1137 transitions. [2021-11-09 09:37:23,412 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2021-11-09 09:37:23,412 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 855 states and 1137 transitions. [2021-11-09 09:37:23,420 INFO L131 ngComponentsAnalysis]: Automaton has 22 accepting balls. 344 [2021-11-09 09:37:23,429 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 855 states to 855 states and 1137 transitions. [2021-11-09 09:37:23,429 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 855 [2021-11-09 09:37:23,459 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 855 [2021-11-09 09:37:23,459 INFO L73 IsDeterministic]: Start isDeterministic. Operand 855 states and 1137 transitions. [2021-11-09 09:37:23,460 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-11-09 09:37:23,461 INFO L681 BuchiCegarLoop]: Abstraction has 855 states and 1137 transitions. [2021-11-09 09:37:23,462 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 855 states and 1137 transitions. [2021-11-09 09:37:23,471 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 855 to 474. [2021-11-09 09:37:23,472 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 474 states, 467 states have (on average 1.3126338329764453) internal successors, (613), 466 states have internal predecessors, (613), 6 states have call successors, (6), 1 states have call predecessors, (6), 1 states have return successors, (6), 6 states have call predecessors, (6), 6 states have call successors, (6) [2021-11-09 09:37:23,475 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 474 states to 474 states and 625 transitions. [2021-11-09 09:37:23,475 INFO L704 BuchiCegarLoop]: Abstraction has 474 states and 625 transitions. [2021-11-09 09:37:23,475 INFO L587 BuchiCegarLoop]: Abstraction has 474 states and 625 transitions. [2021-11-09 09:37:23,475 INFO L425 BuchiCegarLoop]: ======== Iteration 4============ [2021-11-09 09:37:23,475 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 474 states and 625 transitions. [2021-11-09 09:37:23,478 INFO L131 ngComponentsAnalysis]: Automaton has 11 accepting balls. 253 [2021-11-09 09:37:23,478 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-11-09 09:37:23,478 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-11-09 09:37:23,479 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1] [2021-11-09 09:37:23,479 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-09 09:37:23,479 INFO L791 eck$LassoCheckResult]: Stem: 4049#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string2.base, #t~string2.offset := #Ultimate.allocOnStack(2);call write~init~int(48, #t~string2.base, #t~string2.offset, 1);call write~init~int(0, #t~string2.base, 1 + #t~string2.offset, 1);call #t~string3.base, #t~string3.offset := #Ultimate.allocOnStack(22);~count_int_int~0 := 0; 4038#L-1 havoc main_#res;havoc main_#t~malloc10.base, main_#t~malloc10.offset, main_#t~mem11, main_#t~mem12, main_#t~mem13, main_#t~mem14, main_#t~mem16, main_#t~mem15, main_#t~mem17, main_#t~mem18, main_#t~mem20, main_#t~mem19, main_#t~mem21, main_#t~mem22, main_#t~mem24, main_#t~mem23, main_#t~mem25, main_#t~mem26, main_#t~switch27, main_#t~mem28, main_#t~mem29, main_#t~mem30, main_#t~mem31, main_#t~mem32, main_#t~mem33, main_#t~mem34, main_#t~mem35, main_#t~mem36, main_#t~mem37, main_#t~mem38, main_~_hj_i~0, main_~_hj_j~0, main_~_hj_k~0, main_~_hj_key~0.base, main_~_hj_key~0.offset, main_#t~malloc39.base, main_#t~malloc39.offset, main_#t~mem40.base, main_#t~mem40.offset, main_#t~mem41.base, main_#t~mem41.offset, main_#t~memset~res42.base, main_#t~memset~res42.offset, main_#t~mem43.base, main_#t~mem43.offset, main_#t~mem44.base, main_#t~mem44.offset, main_#t~mem45.base, main_#t~mem45.offset, main_#t~mem46.base, main_#t~mem46.offset, main_#t~mem47.base, main_#t~mem47.offset, main_#t~malloc48.base, main_#t~malloc48.offset, main_#t~mem49.base, main_#t~mem49.offset, main_#t~mem50.base, main_#t~mem50.offset, main_#t~mem51.base, main_#t~mem51.offset, main_#t~mem52.base, main_#t~mem52.offset, main_#t~mem53.base, main_#t~mem53.offset, main_#t~mem54.base, main_#t~mem54.offset, main_#t~memset~res55.base, main_#t~memset~res55.offset, main_#t~mem56.base, main_#t~mem56.offset, main_#t~mem57.base, main_#t~mem57.offset, main_#t~mem58.base, main_#t~mem58.offset, main_#t~mem59.base, main_#t~mem59.offset, main_#t~mem60, main_#t~mem61.base, main_#t~mem61.offset, main_#t~mem62.base, main_#t~mem62.offset, main_#t~mem63.base, main_#t~mem63.offset, main_#t~mem64.base, main_#t~mem64.offset, main_#t~mem65, main_#t~post66, main_#t~mem67.base, main_#t~mem67.offset, main_#t~mem68, main_#t~mem69.base, main_#t~mem69.offset, main_#t~mem70.base, main_#t~mem70.offset, main_#t~mem71, main_#t~post72, main_#t~mem73.base, main_#t~mem73.offset, main_#t~mem74.base, main_#t~mem74.offset, main_#t~mem75.base, main_#t~mem75.offset, main_#t~mem77, main_#t~mem76, main_#t~mem78.base, main_#t~mem78.offset, main_#t~mem79, main_#t~short80, main_#t~mem81.base, main_#t~mem81.offset, main_#t~mem82, main_#t~malloc83.base, main_#t~malloc83.offset, main_#t~mem84.base, main_#t~mem84.offset, main_#t~mem85.base, main_#t~mem85.offset, main_#t~mem86.base, main_#t~mem86.offset, main_#t~mem87, main_#t~memset~res88.base, main_#t~memset~res88.offset, main_#t~mem89.base, main_#t~mem89.offset, main_#t~mem90.base, main_#t~mem90.offset, main_#t~mem93, main_#t~mem91.base, main_#t~mem91.offset, main_#t~mem92, main_#t~mem94.base, main_#t~mem94.offset, main_#t~mem97, main_#t~mem95.base, main_#t~mem95.offset, main_#t~mem96, main_#t~ite98, main_#t~mem99.base, main_#t~mem99.offset, main_#t~mem103.base, main_#t~mem103.offset, main_#t~mem104.base, main_#t~mem104.offset, main_#t~mem105.base, main_#t~mem105.offset, main_#t~mem106.base, main_#t~mem106.offset, main_#t~mem109, main_#t~mem107.base, main_#t~mem107.offset, main_#t~mem108, main_#t~mem110.base, main_#t~mem110.offset, main_#t~mem111, main_#t~pre112, main_#t~mem113.base, main_#t~mem113.offset, main_#t~mem114, main_#t~mem115.base, main_#t~mem115.offset, main_#t~mem116, main_#t~post117, main_#t~mem121, main_#t~mem119, main_#t~mem118.base, main_#t~mem118.offset, main_#t~mem120, main_#t~mem122, main_#t~post123, main_#t~mem124.base, main_#t~mem124.offset, main_#t~mem125.base, main_#t~mem125.offset, main_#t~mem126.base, main_#t~mem126.offset, main_#t~post100, main_#t~mem101.base, main_#t~mem101.offset, main_#t~mem102, main_#t~mem127.base, main_#t~mem127.offset, main_#t~mem128.base, main_#t~mem128.offset, main_#t~mem129.base, main_#t~mem129.offset, main_#t~mem130, main_#t~mem131.base, main_#t~mem131.offset, main_#t~mem132, main_#t~post133, main_#t~mem134.base, main_#t~mem134.offset, main_#t~mem135.base, main_#t~mem135.offset, main_#t~mem136.base, main_#t~mem136.offset, main_#t~mem137.base, main_#t~mem137.offset, main_#t~mem140, main_#t~mem138.base, main_#t~mem138.offset, main_#t~mem139, main_#t~ite143, main_#t~mem141.base, main_#t~mem141.offset, main_#t~mem142, main_#t~mem144.base, main_#t~mem144.offset, main_#t~mem145, main_#t~mem146.base, main_#t~mem146.offset, main_~_he_bkt~0, main_~_he_bkt_i~0, main_~_he_thh~0.base, main_~_he_thh~0.offset, main_~_he_hh_nxt~0.base, main_~_he_hh_nxt~0.offset, main_~#_he_new_buckets~0.base, main_~#_he_new_buckets~0.offset, main_~_he_newbkt~0.base, main_~_he_newbkt~0.offset, main_~_ha_head~0.base, main_~_ha_head~0.offset, main_~_ha_bkt~0, main_~_ha_hashv~0, main_#t~mem148, main_#t~mem147, main_#t~mem149, main_#t~mem150, main_#t~mem152, main_#t~mem151, main_#t~mem153, main_#t~mem154, main_#t~mem156, main_#t~mem155, main_#t~mem157, main_#t~mem158, main_#t~switch159, main_#t~mem160, main_#t~mem161, main_#t~mem162, main_#t~mem163, main_#t~mem164, main_#t~mem165, main_#t~mem166, main_#t~mem167, main_#t~mem168, main_#t~mem169, main_#t~mem170, main_~_hj_i~1, main_~_hj_j~1, main_~_hj_k~1, main_~_hj_key~1.base, main_~_hj_key~1.offset, main_#t~malloc171.base, main_#t~malloc171.offset, main_#t~mem172.base, main_#t~mem172.offset, main_#t~mem173.base, main_#t~mem173.offset, main_#t~memset~res174.base, main_#t~memset~res174.offset, main_#t~mem175.base, main_#t~mem175.offset, main_#t~mem176.base, main_#t~mem176.offset, main_#t~mem177.base, main_#t~mem177.offset, main_#t~mem178.base, main_#t~mem178.offset, main_#t~mem179.base, main_#t~mem179.offset, main_#t~malloc180.base, main_#t~malloc180.offset, main_#t~mem181.base, main_#t~mem181.offset, main_#t~mem182.base, main_#t~mem182.offset, main_#t~mem183.base, main_#t~mem183.offset, main_#t~mem184.base, main_#t~mem184.offset, main_#t~mem185.base, main_#t~mem185.offset, main_#t~mem186.base, main_#t~mem186.offset, main_#t~memset~res187.base, main_#t~memset~res187.offset, main_#t~mem188.base, main_#t~mem188.offset, main_#t~mem189.base, main_#t~mem189.offset, main_#t~mem190.base, main_#t~mem190.offset, main_#t~mem191.base, main_#t~mem191.offset, main_#t~mem192, main_#t~mem193.base, main_#t~mem193.offset, main_#t~mem194.base, main_#t~mem194.offset, main_#t~mem195.base, main_#t~mem195.offset, main_#t~mem196.base, main_#t~mem196.offset, main_#t~mem197, main_#t~post198, main_#t~mem199.base, main_#t~mem199.offset, main_#t~mem200, main_#t~mem201.base, main_#t~mem201.offset, main_#t~mem202.base, main_#t~mem202.offset, main_#t~mem203, main_#t~post204, main_#t~mem205.base, main_#t~mem205.offset, main_#t~mem206.base, main_#t~mem206.offset, main_#t~mem207.base, main_#t~mem207.offset, main_#t~mem209, main_#t~mem208, main_#t~mem210.base, main_#t~mem210.offset, main_#t~mem211, main_#t~short212, main_#t~mem213.base, main_#t~mem213.offset, main_#t~mem214, main_#t~malloc215.base, main_#t~malloc215.offset, main_#t~mem216.base, main_#t~mem216.offset, main_#t~mem217.base, main_#t~mem217.offset, main_#t~mem218.base, main_#t~mem218.offset, main_#t~mem219, main_#t~memset~res220.base, main_#t~memset~res220.offset, main_#t~mem221.base, main_#t~mem221.offset, main_#t~mem222.base, main_#t~mem222.offset, main_#t~mem225, main_#t~mem223.base, main_#t~mem223.offset, main_#t~mem224, main_#t~mem226.base, main_#t~mem226.offset, main_#t~mem229, main_#t~mem227.base, main_#t~mem227.offset, main_#t~mem228, main_#t~ite230, main_#t~mem231.base, main_#t~mem231.offset, main_#t~mem235.base, main_#t~mem235.offset, main_#t~mem236.base, main_#t~mem236.offset, main_#t~mem237.base, main_#t~mem237.offset, main_#t~mem238.base, main_#t~mem238.offset, main_#t~mem241, main_#t~mem239.base, main_#t~mem239.offset, main_#t~mem240, main_#t~mem242.base, main_#t~mem242.offset, main_#t~mem243, main_#t~pre244, main_#t~mem245.base, main_#t~mem245.offset, main_#t~mem246, main_#t~mem247.base, main_#t~mem247.offset, main_#t~mem248, main_#t~post249, main_#t~mem253, main_#t~mem251, main_#t~mem250.base, main_#t~mem250.offset, main_#t~mem252, main_#t~mem254, main_#t~post255, main_#t~mem256.base, main_#t~mem256.offset, main_#t~mem257.base, main_#t~mem257.offset, main_#t~mem258.base, main_#t~mem258.offset, main_#t~post232, main_#t~mem233.base, main_#t~mem233.offset, main_#t~mem234, main_#t~mem259.base, main_#t~mem259.offset, main_#t~mem260.base, main_#t~mem260.offset, main_#t~mem261.base, main_#t~mem261.offset, main_#t~mem262, main_#t~mem263.base, main_#t~mem263.offset, main_#t~mem264, main_#t~post265, main_#t~mem266.base, main_#t~mem266.offset, main_#t~mem267.base, main_#t~mem267.offset, main_#t~mem268.base, main_#t~mem268.offset, main_#t~mem269.base, main_#t~mem269.offset, main_#t~mem272, main_#t~mem270.base, main_#t~mem270.offset, main_#t~mem271, main_#t~ite275, main_#t~mem273.base, main_#t~mem273.offset, main_#t~mem274, main_#t~mem276.base, main_#t~mem276.offset, main_#t~mem277, main_#t~mem278.base, main_#t~mem278.offset, main_~_he_bkt~1, main_~_he_bkt_i~1, main_~_he_thh~1.base, main_~_he_thh~1.offset, main_~_he_hh_nxt~1.base, main_~_he_hh_nxt~1.offset, main_~#_he_new_buckets~1.base, main_~#_he_new_buckets~1.offset, main_~_he_newbkt~1.base, main_~_he_newbkt~1.offset, main_~_ha_head~1.base, main_~_ha_head~1.offset, main_~_ha_bkt~1, main_~_ha_hashv~1, main_#t~mem7, main_#t~post8, main_#t~mem9, main_#t~mem280, main_#t~mem279, main_#t~mem281, main_#t~mem282, main_#t~mem284, main_#t~mem283, main_#t~mem285, main_#t~mem286, main_#t~mem288, main_#t~mem287, main_#t~mem289, main_#t~mem290, main_#t~switch291, main_#t~mem292, main_#t~mem293, main_#t~mem294, main_#t~mem295, main_#t~mem296, main_#t~mem297, main_#t~mem298, main_#t~mem299, main_#t~mem300, main_#t~mem301, main_#t~mem302, main_~_hj_i~2, main_~_hj_j~2, main_~_hj_k~2, main_~_hj_key~2.base, main_~_hj_key~2.offset, main_#t~mem303.base, main_#t~mem303.offset, main_#t~mem304, main_#t~mem305.base, main_#t~mem305.offset, main_#t~mem306.base, main_#t~mem306.offset, main_#t~mem307.base, main_#t~mem307.offset, main_#t~mem308.base, main_#t~mem308.offset, main_#t~mem309.base, main_#t~mem309.offset, main_#t~mem310.base, main_#t~mem310.offset, main_#t~mem311.base, main_#t~mem311.offset, main_#t~mem312, main_#t~mem313, main_#t~mem314, main_#t~short315, main_#t~mem316.base, main_#t~mem316.offset, main_#t~ret317, main_#t~mem318.base, main_#t~mem318.offset, main_#t~mem319.base, main_#t~mem319.offset, main_#t~mem320.base, main_#t~mem320.offset, main_#t~mem321, main_~_hf_bkt~0, main_~_hf_hashv~0, main_#t~mem322, main_#t~mem324, main_#t~mem323, main_#t~mem325, main_#t~mem326, main_#t~mem328, main_#t~mem327, main_#t~mem329, main_#t~mem330, main_#t~mem332, main_#t~mem331, main_#t~mem333, main_#t~mem334, main_#t~switch335, main_#t~mem336, main_#t~mem337, main_#t~mem338, main_#t~mem339, main_#t~mem340, main_#t~mem341, main_#t~mem342, main_#t~mem343, main_#t~mem344, main_#t~mem345, main_#t~mem346, main_~_hj_i~3, main_~_hj_j~3, main_~_hj_k~3, main_~_hj_key~3.base, main_~_hj_key~3.offset, main_#t~mem347.base, main_#t~mem347.offset, main_#t~mem348, main_#t~mem349.base, main_#t~mem349.offset, main_#t~mem350.base, main_#t~mem350.offset, main_#t~mem351.base, main_#t~mem351.offset, main_#t~mem352.base, main_#t~mem352.offset, main_#t~mem353.base, main_#t~mem353.offset, main_#t~mem354.base, main_#t~mem354.offset, main_#t~mem355.base, main_#t~mem355.offset, main_#t~mem356, main_#t~mem357, main_#t~mem358, main_#t~short359, main_#t~mem360.base, main_#t~mem360.offset, main_#t~ret361, main_#t~mem362.base, main_#t~mem362.offset, main_#t~mem363.base, main_#t~mem363.offset, main_#t~mem364.base, main_#t~mem364.offset, main_#t~mem365, main_~_hf_bkt~1, main_~_hf_hashv~1, main_#t~mem366, main_#t~mem368, main_#t~mem367, main_#t~mem369, main_#t~mem370, main_#t~mem372, main_#t~mem371, main_#t~mem373, main_#t~mem374, main_#t~mem376, main_#t~mem375, main_#t~mem377, main_#t~mem378, main_#t~switch379, main_#t~mem380, main_#t~mem381, main_#t~mem382, main_#t~mem383, main_#t~mem384, main_#t~mem385, main_#t~mem386, main_#t~mem387, main_#t~mem388, main_#t~mem389, main_#t~mem390, main_~_hj_i~4, main_~_hj_j~4, main_~_hj_k~4, main_~_hj_key~4.base, main_~_hj_key~4.offset, main_#t~mem391.base, main_#t~mem391.offset, main_#t~mem392, main_#t~mem393.base, main_#t~mem393.offset, main_#t~mem394.base, main_#t~mem394.offset, main_#t~mem395.base, main_#t~mem395.offset, main_#t~mem396.base, main_#t~mem396.offset, main_#t~mem397.base, main_#t~mem397.offset, main_#t~mem398.base, main_#t~mem398.offset, main_#t~mem399.base, main_#t~mem399.offset, main_#t~mem400, main_#t~mem401, main_#t~mem402, main_#t~short403, main_#t~mem404.base, main_#t~mem404.offset, main_#t~ret405, main_#t~mem406.base, main_#t~mem406.offset, main_#t~mem407.base, main_#t~mem407.offset, main_#t~mem408.base, main_#t~mem408.offset, main_#t~mem409, main_~_hf_bkt~2, main_~_hf_hashv~2, main_#t~mem410, main_#t~mem412, main_#t~mem411, main_#t~mem413, main_#t~mem414, main_#t~mem416, main_#t~mem415, main_#t~mem417, main_#t~mem418, main_#t~mem420, main_#t~mem419, main_#t~mem421, main_#t~mem422, main_#t~switch423, main_#t~mem424, main_#t~mem425, main_#t~mem426, main_#t~mem427, main_#t~mem428, main_#t~mem429, main_#t~mem430, main_#t~mem431, main_#t~mem432, main_#t~mem433, main_#t~mem434, main_~_hj_i~5, main_~_hj_j~5, main_~_hj_k~5, main_~_hj_key~5.base, main_~_hj_key~5.offset, main_#t~mem435.base, main_#t~mem435.offset, main_#t~mem436, main_#t~mem437.base, main_#t~mem437.offset, main_#t~mem438.base, main_#t~mem438.offset, main_#t~mem439.base, main_#t~mem439.offset, main_#t~mem440.base, main_#t~mem440.offset, main_#t~mem441.base, main_#t~mem441.offset, main_#t~mem442.base, main_#t~mem442.offset, main_#t~mem443.base, main_#t~mem443.offset, main_#t~mem444, main_#t~mem445, main_#t~mem446, main_#t~short447, main_#t~mem448.base, main_#t~mem448.offset, main_#t~ret449, main_#t~mem450.base, main_#t~mem450.offset, main_#t~mem451.base, main_#t~mem451.offset, main_#t~mem452.base, main_#t~mem452.offset, main_#t~mem453, main_~_hf_bkt~3, main_~_hf_hashv~3, main_#t~mem454, main_#t~ite456.base, main_#t~ite456.offset, main_#t~mem455.base, main_#t~mem455.offset, main_#t~mem459.base, main_#t~mem459.offset, main_#t~mem460.base, main_#t~mem460.offset, main_#t~short461, main_#t~mem462.base, main_#t~mem462.offset, main_#t~mem463.base, main_#t~mem463.offset, main_#t~mem464.base, main_#t~mem464.offset, main_#t~mem465.base, main_#t~mem465.offset, main_#t~mem466.base, main_#t~mem466.offset, main_#t~mem467.base, main_#t~mem467.offset, main_#t~mem468.base, main_#t~mem468.offset, main_#t~mem469.base, main_#t~mem469.offset, main_#t~mem470, main_#t~mem471.base, main_#t~mem471.offset, main_#t~mem472.base, main_#t~mem472.offset, main_#t~mem473.base, main_#t~mem473.offset, main_#t~mem474, main_#t~mem475.base, main_#t~mem475.offset, main_#t~mem476.base, main_#t~mem476.offset, main_#t~mem477.base, main_#t~mem477.offset, main_#t~mem478.base, main_#t~mem478.offset, main_#t~mem479.base, main_#t~mem479.offset, main_#t~mem480, main_#t~mem481.base, main_#t~mem481.offset, main_#t~mem484, main_#t~mem482.base, main_#t~mem482.offset, main_#t~mem483, main_#t~mem485.base, main_#t~mem485.offset, main_#t~mem486.base, main_#t~mem486.offset, main_#t~mem487, main_#t~post488, main_#t~mem489.base, main_#t~mem489.offset, main_#t~mem490.base, main_#t~mem490.offset, main_#t~mem491.base, main_#t~mem491.offset, main_#t~mem492.base, main_#t~mem492.offset, main_#t~mem493.base, main_#t~mem493.offset, main_#t~mem494.base, main_#t~mem494.offset, main_#t~mem495.base, main_#t~mem495.offset, main_#t~mem496.base, main_#t~mem496.offset, main_~_hd_head~0.base, main_~_hd_head~0.offset, main_#t~mem497.base, main_#t~mem497.offset, main_#t~mem498, main_#t~post499, main_~_hd_bkt~0, main_~_hd_hh_del~0.base, main_~_hd_hh_del~0.offset, main_#t~ite458.base, main_#t~ite458.offset, main_#t~mem457.base, main_#t~mem457.offset, main_~#i~0.base, main_~#i~0.offset, main_~user~0.base, main_~user~0.offset, main_~tmp~0.base, main_~tmp~0.offset, main_~users~0.base, main_~users~0.offset, main_~altusers~0.base, main_~altusers~0.offset, main_~temp~0.base, main_~temp~0.offset;call main_~#i~0.base, main_~#i~0.offset := #Ultimate.allocOnStack(4);havoc main_~user~0.base, main_~user~0.offset;havoc main_~tmp~0.base, main_~tmp~0.offset;main_~users~0.base, main_~users~0.offset := 0, 0;main_~altusers~0.base, main_~altusers~0.offset := 0, 0;call write~int(0, main_~#i~0.base, main_~#i~0.offset, 4); 3705#L733-4 [2021-11-09 09:37:23,480 INFO L793 eck$LassoCheckResult]: Loop: 3705#L733-4 call main_#t~mem9 := read~int(main_~#i~0.base, main_~#i~0.offset, 4); 3579#L733-1 assume !!(main_#t~mem9 < 1000);havoc main_#t~mem9;call main_#t~malloc10.base, main_#t~malloc10.offset := #Ultimate.allocOnHeap(72);main_~user~0.base, main_~user~0.offset := main_#t~malloc10.base, main_#t~malloc10.offset;havoc main_#t~malloc10.base, main_#t~malloc10.offset; 3581#L735 assume !(main_~user~0.base == 0 && main_~user~0.offset == 0); 3774#L735-2 call main_#t~mem11 := read~int(main_~#i~0.base, main_~#i~0.offset, 4);call write~int(main_#t~mem11, main_~user~0.base, main_~user~0.offset, 4);havoc main_#t~mem11;call main_#t~mem12 := read~int(main_~#i~0.base, main_~#i~0.offset, 4);call main_#t~mem13 := read~int(main_~#i~0.base, main_~#i~0.offset, 4);call write~int(main_#t~mem12 * main_#t~mem13, main_~user~0.base, 4 + main_~user~0.offset, 4);havoc main_#t~mem12;havoc main_#t~mem13;call main_#t~mem14 := read~int(main_~#i~0.base, main_~#i~0.offset, 4); 3775#L740 assume !(main_#t~mem14 < 10);havoc main_#t~mem14; 3701#L743-123 havoc main_~_ha_hashv~1; 3702#L743-48 goto; 3630#L743-46 havoc main_~_hj_i~1;havoc main_~_hj_j~1;havoc main_~_hj_k~1;main_~_hj_key~1.base, main_~_hj_key~1.offset := main_~user~0.base, main_~user~0.offset;main_~_ha_hashv~1 := 4276993775;main_~_hj_j~1 := 2654435769;main_~_hj_i~1 := main_~_hj_j~1;main_~_hj_k~1 := 4; 3631#L743-7 assume !(main_~_hj_k~1 % 4294967296 >= 12); 3714#L743-8 main_~_ha_hashv~1 := 4 + main_~_ha_hashv~1;main_#t~switch159 := 11 == main_~_hj_k~1; 3715#L743-9 assume !main_#t~switch159; 4024#L743-11 main_#t~switch159 := main_#t~switch159 || 10 == main_~_hj_k~1; 3833#L743-12 assume !main_#t~switch159; 3834#L743-14 main_#t~switch159 := main_#t~switch159 || 9 == main_~_hj_k~1; 3888#L743-15 assume !main_#t~switch159; 3931#L743-17 main_#t~switch159 := main_#t~switch159 || 8 == main_~_hj_k~1; 3932#L743-18 assume !main_#t~switch159; 3895#L743-20 main_#t~switch159 := main_#t~switch159 || 7 == main_~_hj_k~1; 3896#L743-21 assume !main_#t~switch159; 3839#L743-23 main_#t~switch159 := main_#t~switch159 || 6 == main_~_hj_k~1; 3840#L743-24 assume !main_#t~switch159; 3975#L743-26 main_#t~switch159 := main_#t~switch159 || 5 == main_~_hj_k~1; 3835#L743-27 assume !main_#t~switch159; 3836#L743-29 main_#t~switch159 := main_#t~switch159 || 4 == main_~_hj_k~1; 3609#L743-30 assume main_#t~switch159;call main_#t~mem167 := read~int(main_~_hj_key~1.base, 3 + main_~_hj_key~1.offset, 1);main_~_hj_i~1 := main_~_hj_i~1 + 16777216 * (main_#t~mem167 % 256);havoc main_#t~mem167; 3610#L743-32 main_#t~switch159 := main_#t~switch159 || 3 == main_~_hj_k~1; 3795#L743-33 assume main_#t~switch159;call main_#t~mem168 := read~int(main_~_hj_key~1.base, 2 + main_~_hj_key~1.offset, 1);main_~_hj_i~1 := main_~_hj_i~1 + 65536 * (main_#t~mem168 % 256);havoc main_#t~mem168; 4007#L743-35 main_#t~switch159 := main_#t~switch159 || 2 == main_~_hj_k~1; 3915#L743-36 assume main_#t~switch159;call main_#t~mem169 := read~int(main_~_hj_key~1.base, 1 + main_~_hj_key~1.offset, 1);main_~_hj_i~1 := main_~_hj_i~1 + 256 * (main_#t~mem169 % 256);havoc main_#t~mem169; 3916#L743-38 main_#t~switch159 := main_#t~switch159 || 1 == main_~_hj_k~1; 3823#L743-39 assume main_#t~switch159;call main_#t~mem170 := read~int(main_~_hj_key~1.base, main_~_hj_key~1.offset, 1);main_~_hj_i~1 := main_~_hj_i~1 + main_#t~mem170 % 256;havoc main_#t~mem170; 3824#L743-41 havoc main_#t~switch159; 3949#L743-44 main_~_hj_i~1 := main_~_hj_i~1 - main_~_hj_j~1;main_~_hj_i~1 := main_~_hj_i~1 - main_~_ha_hashv~1;main_~_hj_i~1 := ~bitwiseXor(main_~_hj_i~1, main_~_ha_hashv~1 / 8192);main_~_hj_j~1 := main_~_hj_j~1 - main_~_ha_hashv~1;main_~_hj_j~1 := main_~_hj_j~1 - main_~_hj_i~1;main_~_hj_j~1 := ~bitwiseXor(main_~_hj_j~1, 256 * main_~_hj_i~1);main_~_ha_hashv~1 := main_~_ha_hashv~1 - main_~_hj_i~1;main_~_ha_hashv~1 := main_~_ha_hashv~1 - main_~_hj_j~1;main_~_ha_hashv~1 := ~bitwiseXor(main_~_ha_hashv~1, main_~_hj_j~1 / 8192);main_~_hj_i~1 := main_~_hj_i~1 - main_~_hj_j~1;main_~_hj_i~1 := main_~_hj_i~1 - main_~_ha_hashv~1;main_~_hj_i~1 := ~bitwiseXor(main_~_hj_i~1, main_~_ha_hashv~1 / 4096);main_~_hj_j~1 := main_~_hj_j~1 - main_~_ha_hashv~1;main_~_hj_j~1 := main_~_hj_j~1 - main_~_hj_i~1;main_~_hj_j~1 := ~bitwiseXor(main_~_hj_j~1, 65536 * main_~_hj_i~1);main_~_ha_hashv~1 := main_~_ha_hashv~1 - main_~_hj_i~1;main_~_ha_hashv~1 := main_~_ha_hashv~1 - main_~_hj_j~1;main_~_ha_hashv~1 := ~bitwiseXor(main_~_ha_hashv~1, main_~_hj_j~1 / 32);main_~_hj_i~1 := main_~_hj_i~1 - main_~_hj_j~1;main_~_hj_i~1 := main_~_hj_i~1 - main_~_ha_hashv~1;main_~_hj_i~1 := ~bitwiseXor(main_~_hj_i~1, main_~_ha_hashv~1 / 8);main_~_hj_j~1 := main_~_hj_j~1 - main_~_ha_hashv~1;main_~_hj_j~1 := main_~_hj_j~1 - main_~_hj_i~1;main_~_hj_j~1 := ~bitwiseXor(main_~_hj_j~1, 1024 * main_~_hj_i~1);main_~_ha_hashv~1 := main_~_ha_hashv~1 - main_~_hj_i~1;main_~_ha_hashv~1 := main_~_ha_hashv~1 - main_~_hj_j~1;main_~_ha_hashv~1 := ~bitwiseXor(main_~_ha_hashv~1, main_~_hj_j~1 / 32768); 3950#L743-43 goto; 3977#L743-45 goto; 3672#L743-47 goto; 3663#L743-121 call write~int(main_~_ha_hashv~1, main_~user~0.base, 68 + main_~user~0.offset, 4);call write~$Pointer$(main_~user~0.base, main_~user~0.offset, main_~user~0.base, 60 + main_~user~0.offset, 4);call write~int(4, main_~user~0.base, 64 + main_~user~0.offset, 4); 3664#L743-50 assume !(main_~altusers~0.base == 0 && main_~altusers~0.offset == 0);call main_#t~mem188.base, main_#t~mem188.offset := read~$Pointer$(main_~altusers~0.base, 40 + main_~altusers~0.offset, 4);call write~$Pointer$(main_#t~mem188.base, main_#t~mem188.offset, main_~user~0.base, 40 + main_~user~0.offset, 4);havoc main_#t~mem188.base, main_#t~mem188.offset; 3899#L743-66 call write~$Pointer$(0, 0, main_~user~0.base, 48 + main_~user~0.offset, 4);call main_#t~mem189.base, main_#t~mem189.offset := read~$Pointer$(main_~altusers~0.base, 40 + main_~altusers~0.offset, 4);call main_#t~mem190.base, main_#t~mem190.offset := read~$Pointer$(main_#t~mem189.base, 16 + main_#t~mem189.offset, 4);call main_#t~mem191.base, main_#t~mem191.offset := read~$Pointer$(main_~altusers~0.base, 40 + main_~altusers~0.offset, 4);call main_#t~mem192 := read~int(main_#t~mem191.base, 20 + main_#t~mem191.offset, 4);call write~$Pointer$(main_#t~mem190.base, main_#t~mem190.offset - main_#t~mem192, main_~user~0.base, 44 + main_~user~0.offset, 4);havoc main_#t~mem189.base, main_#t~mem189.offset;havoc main_#t~mem190.base, main_#t~mem190.offset;havoc main_#t~mem191.base, main_#t~mem191.offset;havoc main_#t~mem192;call main_#t~mem193.base, main_#t~mem193.offset := read~$Pointer$(main_~altusers~0.base, 40 + main_~altusers~0.offset, 4);call main_#t~mem194.base, main_#t~mem194.offset := read~$Pointer$(main_#t~mem193.base, 16 + main_#t~mem193.offset, 4);call write~$Pointer$(main_~user~0.base, main_~user~0.offset, main_#t~mem194.base, 8 + main_#t~mem194.offset, 4);havoc main_#t~mem193.base, main_#t~mem193.offset;havoc main_#t~mem194.base, main_#t~mem194.offset;call main_#t~mem195.base, main_#t~mem195.offset := read~$Pointer$(main_~altusers~0.base, 40 + main_~altusers~0.offset, 4);call write~$Pointer$(main_~user~0.base, 40 + main_~user~0.offset, main_#t~mem195.base, 16 + main_#t~mem195.offset, 4);havoc main_#t~mem195.base, main_#t~mem195.offset; 3900#L743-65 goto; 3697#L743-119 havoc main_~_ha_bkt~1;call main_#t~mem196.base, main_#t~mem196.offset := read~$Pointer$(main_~altusers~0.base, 40 + main_~altusers~0.offset, 4);call main_#t~mem197 := read~int(main_#t~mem196.base, 12 + main_#t~mem196.offset, 4);main_#t~post198 := main_#t~mem197;call write~int(1 + main_#t~post198, main_#t~mem196.base, 12 + main_#t~mem196.offset, 4);havoc main_#t~mem196.base, main_#t~mem196.offset;havoc main_#t~mem197;havoc main_#t~post198; 3698#L743-70 call main_#t~mem199.base, main_#t~mem199.offset := read~$Pointer$(main_~altusers~0.base, 40 + main_~altusers~0.offset, 4);call main_#t~mem200 := read~int(main_#t~mem199.base, 4 + main_#t~mem199.offset, 4);main_~_ha_bkt~1 := ~bitwiseAnd(main_~_ha_hashv~1, main_#t~mem200 - 1);havoc main_#t~mem199.base, main_#t~mem199.offset;havoc main_#t~mem200; 3659#L743-69 goto; 3660#L743-117 call main_#t~mem201.base, main_#t~mem201.offset := read~$Pointer$(main_~altusers~0.base, 40 + main_~altusers~0.offset, 4);call main_#t~mem202.base, main_#t~mem202.offset := read~$Pointer$(main_#t~mem201.base, main_#t~mem201.offset, 4);main_~_ha_head~1.base, main_~_ha_head~1.offset := main_#t~mem202.base, main_#t~mem202.offset + 12 * (if main_~_ha_bkt~1 % 4294967296 % 4294967296 <= 2147483647 then main_~_ha_bkt~1 % 4294967296 % 4294967296 else main_~_ha_bkt~1 % 4294967296 % 4294967296 - 4294967296);havoc main_#t~mem201.base, main_#t~mem201.offset;havoc main_#t~mem202.base, main_#t~mem202.offset;call main_#t~mem203 := read~int(main_~_ha_head~1.base, 4 + main_~_ha_head~1.offset, 4);main_#t~post204 := main_#t~mem203;call write~int(1 + main_#t~post204, main_~_ha_head~1.base, 4 + main_~_ha_head~1.offset, 4);havoc main_#t~mem203;havoc main_#t~post204;call main_#t~mem205.base, main_#t~mem205.offset := read~$Pointer$(main_~_ha_head~1.base, main_~_ha_head~1.offset, 4);call write~$Pointer$(main_#t~mem205.base, main_#t~mem205.offset, main_~user~0.base, 56 + main_~user~0.offset, 4);havoc main_#t~mem205.base, main_#t~mem205.offset;call write~$Pointer$(0, 0, main_~user~0.base, 52 + main_~user~0.offset, 4);call main_#t~mem206.base, main_#t~mem206.offset := read~$Pointer$(main_~_ha_head~1.base, main_~_ha_head~1.offset, 4); 3820#L743-72 assume !(main_#t~mem206.base != 0 || main_#t~mem206.offset != 0);havoc main_#t~mem206.base, main_#t~mem206.offset; 3806#L743-74 call write~$Pointer$(main_~user~0.base, 40 + main_~user~0.offset, main_~_ha_head~1.base, main_~_ha_head~1.offset, 4);call main_#t~mem209 := read~int(main_~_ha_head~1.base, 4 + main_~_ha_head~1.offset, 4);call main_#t~mem208 := read~int(main_~_ha_head~1.base, 8 + main_~_ha_head~1.offset, 4);main_#t~short212 := main_#t~mem209 % 4294967296 >= 10 * (1 + main_#t~mem208) % 4294967296; 3725#L743-75 assume main_#t~short212;call main_#t~mem210.base, main_#t~mem210.offset := read~$Pointer$(main_~user~0.base, 40 + main_~user~0.offset, 4);call main_#t~mem211 := read~int(main_#t~mem210.base, 36 + main_#t~mem210.offset, 4);main_#t~short212 := 0 == main_#t~mem211 % 4294967296; 3726#L743-77 assume !main_#t~short212;havoc main_#t~mem209;havoc main_#t~mem208;havoc main_#t~mem210.base, main_#t~mem210.offset;havoc main_#t~mem211;havoc main_#t~short212; 3720#L743-116 goto; 3721#L743-118 goto; 3831#L743-120 goto; 4023#L743-122 goto; 3704#L733-3 call main_#t~mem7 := read~int(main_~#i~0.base, main_~#i~0.offset, 4);main_#t~post8 := main_#t~mem7;call write~int(1 + main_#t~post8, main_~#i~0.base, main_~#i~0.offset, 4);havoc main_#t~mem7;havoc main_#t~post8; 3705#L733-4 [2021-11-09 09:37:23,480 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-09 09:37:23,480 INFO L85 PathProgramCache]: Analyzing trace with hash 1251, now seen corresponding path program 4 times [2021-11-09 09:37:23,481 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-09 09:37:23,481 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1929386451] [2021-11-09 09:37:23,481 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-09 09:37:23,481 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-09 09:37:23,497 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-11-09 09:37:23,497 INFO L355 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-11-09 09:37:23,509 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-11-09 09:37:23,520 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-11-09 09:37:23,521 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-09 09:37:23,521 INFO L85 PathProgramCache]: Analyzing trace with hash 2074116778, now seen corresponding path program 1 times [2021-11-09 09:37:23,521 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-09 09:37:23,522 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [512194688] [2021-11-09 09:37:23,522 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-09 09:37:23,522 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-09 09:37:23,531 ERROR L247 FreeRefinementEngine]: Caught known exception: Unsupported non-linear arithmetic [2021-11-09 09:37:23,532 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleZ3 [322001126] [2021-11-09 09:37:23,532 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-09 09:37:23,532 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-09 09:37:23,532 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c5c949f6-d446-4ede-bd5f-e8bce6f973b6/bin/uautomizer-IVEQpCNsaX/z3 [2021-11-09 09:37:23,534 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c5c949f6-d446-4ede-bd5f-e8bce6f973b6/bin/uautomizer-IVEQpCNsaX/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-11-09 09:37:23,556 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c5c949f6-d446-4ede-bd5f-e8bce6f973b6/bin/uautomizer-IVEQpCNsaX/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2021-11-09 09:37:37,712 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-11-09 09:37:37,712 INFO L355 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-11-09 09:39:35,161 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-11-09 09:39:35,954 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-11-09 09:39:35,955 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-09 09:39:35,955 INFO L85 PathProgramCache]: Analyzing trace with hash -169818360, now seen corresponding path program 1 times [2021-11-09 09:39:35,955 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-09 09:39:35,956 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1354089244] [2021-11-09 09:39:35,956 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-09 09:39:35,956 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-09 09:39:35,972 ERROR L247 FreeRefinementEngine]: Caught known exception: Unsupported non-linear arithmetic [2021-11-09 09:39:35,973 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleZ3 [2056499106] [2021-11-09 09:39:35,973 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-09 09:39:35,973 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-09 09:39:35,973 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c5c949f6-d446-4ede-bd5f-e8bce6f973b6/bin/uautomizer-IVEQpCNsaX/z3 [2021-11-09 09:39:35,980 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c5c949f6-d446-4ede-bd5f-e8bce6f973b6/bin/uautomizer-IVEQpCNsaX/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-11-09 09:39:36,018 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c5c949f6-d446-4ede-bd5f-e8bce6f973b6/bin/uautomizer-IVEQpCNsaX/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2021-11-09 09:39:36,289 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-09 09:39:36,292 INFO L263 TraceCheckSpWp]: Trace formula consists of 315 conjuncts, 5 conjunts are in the unsatisfiable core [2021-11-09 09:39:36,301 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-09 09:39:36,595 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-09 09:39:36,595 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-09 09:39:36,595 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1354089244] [2021-11-09 09:39:36,595 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: Unknown [2021-11-09 09:39:36,595 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2056499106] [2021-11-09 09:39:36,596 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2056499106] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-09 09:39:36,596 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-09 09:39:36,596 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-11-09 09:39:36,596 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1079598073]