symbolic execution of loop