java -Xmx8000000000 -jar /storage/repos/ultimate/releaseScripts/default/UTaipan-linux/plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UTaipan-linux/data -tc ../../../trunk/examples/toolchains/AutomizerCInline.xml -s ../../../trunk/examples/settings/default/taipan/svcomp-Reach-64bit-Taipan_Default.epf -i ../../../trunk/examples/svcomp/eca-rers2012/Problem12_label08_false-unreach-call.c -------------------------------------------------------------------------------- This is Ultimate 0.1.23-0fd1304 [2018-10-23 22:11:20,239 INFO L170 SettingsManager]: Resetting all preferences to default values... [2018-10-23 22:11:20,241 INFO L174 SettingsManager]: Resetting UltimateCore preferences to default values [2018-10-23 22:11:20,257 INFO L177 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2018-10-23 22:11:20,257 INFO L174 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2018-10-23 22:11:20,259 INFO L174 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2018-10-23 22:11:20,260 INFO L174 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2018-10-23 22:11:20,262 INFO L174 SettingsManager]: Resetting LassoRanker preferences to default values [2018-10-23 22:11:20,266 INFO L174 SettingsManager]: Resetting Reaching Definitions preferences to default values [2018-10-23 22:11:20,267 INFO L174 SettingsManager]: Resetting SyntaxChecker preferences to default values [2018-10-23 22:11:20,269 INFO L177 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2018-10-23 22:11:20,270 INFO L174 SettingsManager]: Resetting LTL2Aut preferences to default values [2018-10-23 22:11:20,271 INFO L174 SettingsManager]: Resetting PEA to Boogie preferences to default values [2018-10-23 22:11:20,272 INFO L174 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2018-10-23 22:11:20,280 INFO L174 SettingsManager]: Resetting ChcToBoogie preferences to default values [2018-10-23 22:11:20,281 INFO L174 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2018-10-23 22:11:20,282 INFO L174 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2018-10-23 22:11:20,285 INFO L174 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2018-10-23 22:11:20,289 INFO L174 SettingsManager]: Resetting CodeCheck preferences to default values [2018-10-23 22:11:20,293 INFO L174 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2018-10-23 22:11:20,294 INFO L174 SettingsManager]: Resetting RCFGBuilder preferences to default values [2018-10-23 22:11:20,295 INFO L174 SettingsManager]: Resetting TraceAbstraction preferences to default values [2018-10-23 22:11:20,297 INFO L177 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2018-10-23 22:11:20,297 INFO L177 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2018-10-23 22:11:20,298 INFO L174 SettingsManager]: Resetting TreeAutomizer preferences to default values [2018-10-23 22:11:20,298 INFO L174 SettingsManager]: Resetting IcfgTransformer preferences to default values [2018-10-23 22:11:20,300 INFO L174 SettingsManager]: Resetting Boogie Printer preferences to default values [2018-10-23 22:11:20,301 INFO L174 SettingsManager]: Resetting ReqPrinter preferences to default values [2018-10-23 22:11:20,303 INFO L174 SettingsManager]: Resetting Witness Printer preferences to default values [2018-10-23 22:11:20,305 INFO L177 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2018-10-23 22:11:20,305 INFO L174 SettingsManager]: Resetting CDTParser preferences to default values [2018-10-23 22:11:20,306 INFO L177 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2018-10-23 22:11:20,306 INFO L177 SettingsManager]: ReqParser provides no preferences, ignoring... [2018-10-23 22:11:20,306 INFO L174 SettingsManager]: Resetting SmtParser preferences to default values [2018-10-23 22:11:20,308 INFO L174 SettingsManager]: Resetting Witness Parser preferences to default values [2018-10-23 22:11:20,309 INFO L181 SettingsManager]: Finished resetting all preferences to default values... [2018-10-23 22:11:20,309 INFO L98 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UTaipan-linux/../../../trunk/examples/settings/default/taipan/svcomp-Reach-64bit-Taipan_Default.epf [2018-10-23 22:11:20,340 INFO L110 SettingsManager]: Loading preferences was successful [2018-10-23 22:11:20,341 INFO L112 SettingsManager]: Preferences different from defaults after loading the file: [2018-10-23 22:11:20,342 INFO L131 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2018-10-23 22:11:20,342 INFO L133 SettingsManager]: * User list type=DISABLED [2018-10-23 22:11:20,342 INFO L133 SettingsManager]: * calls to implemented procedures=false [2018-10-23 22:11:20,342 INFO L131 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2018-10-23 22:11:20,343 INFO L133 SettingsManager]: * Abstract domain for RCFG-of-the-future=PoormanAbstractDomain [2018-10-23 22:11:20,343 INFO L133 SettingsManager]: * Abstract domain=CompoundDomain [2018-10-23 22:11:20,343 INFO L133 SettingsManager]: * Log string format=TERM [2018-10-23 22:11:20,343 INFO L133 SettingsManager]: * Check feasibility of abstract posts with an SMT solver=true [2018-10-23 22:11:20,343 INFO L133 SettingsManager]: * Use the RCFG-of-the-future interface=true [2018-10-23 22:11:20,343 INFO L133 SettingsManager]: * Interval Domain=false [2018-10-23 22:11:20,344 INFO L131 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2018-10-23 22:11:20,344 INFO L133 SettingsManager]: * Overapproximate operations on floating types=true [2018-10-23 22:11:20,344 INFO L133 SettingsManager]: * Check division by zero=IGNORE [2018-10-23 22:11:20,345 INFO L133 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2018-10-23 22:11:20,345 INFO L133 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2018-10-23 22:11:20,345 INFO L133 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2018-10-23 22:11:20,345 INFO L133 SettingsManager]: * Check if freed pointer was valid=false [2018-10-23 22:11:20,345 INFO L133 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2018-10-23 22:11:20,346 INFO L131 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2018-10-23 22:11:20,347 INFO L133 SettingsManager]: * Size of a code block=SequenceOfStatements [2018-10-23 22:11:20,347 INFO L133 SettingsManager]: * To the following directory=./dump/ [2018-10-23 22:11:20,347 INFO L133 SettingsManager]: * SMT solver=External_DefaultMode [2018-10-23 22:11:20,347 INFO L133 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2018-10-23 22:11:20,348 INFO L131 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2018-10-23 22:11:20,348 INFO L133 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2018-10-23 22:11:20,348 INFO L133 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2018-10-23 22:11:20,348 INFO L133 SettingsManager]: * Trace refinement strategy=TAIPAN [2018-10-23 22:11:20,348 INFO L133 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2018-10-23 22:11:20,348 INFO L133 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2018-10-23 22:11:20,349 INFO L133 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2018-10-23 22:11:20,349 INFO L133 SettingsManager]: * To the following directory=dump/ [2018-10-23 22:11:20,349 INFO L133 SettingsManager]: * Abstract interpretation Mode=USE_PREDICATES [2018-10-23 22:11:20,404 INFO L81 nceAwareModelManager]: Repository-Root is: /tmp [2018-10-23 22:11:20,418 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2018-10-23 22:11:20,425 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2018-10-23 22:11:20,426 INFO L271 PluginConnector]: Initializing CDTParser... [2018-10-23 22:11:20,427 INFO L276 PluginConnector]: CDTParser initialized [2018-10-23 22:11:20,427 INFO L418 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UTaipan-linux/../../../trunk/examples/svcomp/eca-rers2012/Problem12_label08_false-unreach-call.c [2018-10-23 22:11:20,492 INFO L218 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UTaipan-linux/data/055a14cef/ce39c8b331354ba3bc8f57edc1685c09/FLAG8469f8769 [2018-10-23 22:11:21,208 INFO L298 CDTParser]: Found 1 translation units. [2018-10-23 22:11:21,209 INFO L158 CDTParser]: Scanning /storage/repos/ultimate/trunk/examples/svcomp/eca-rers2012/Problem12_label08_false-unreach-call.c [2018-10-23 22:11:21,243 INFO L346 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UTaipan-linux/data/055a14cef/ce39c8b331354ba3bc8f57edc1685c09/FLAG8469f8769 [2018-10-23 22:11:21,262 INFO L354 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UTaipan-linux/data/055a14cef/ce39c8b331354ba3bc8f57edc1685c09 [2018-10-23 22:11:21,273 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2018-10-23 22:11:21,275 INFO L131 ToolchainWalker]: Walking toolchain with 5 elements. [2018-10-23 22:11:21,276 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2018-10-23 22:11:21,276 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2018-10-23 22:11:21,280 INFO L276 PluginConnector]: CACSL2BoogieTranslator initialized [2018-10-23 22:11:21,281 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.10 10:11:21" (1/1) ... [2018-10-23 22:11:21,285 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@3e9da467 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.10 10:11:21, skipping insertion in model container [2018-10-23 22:11:21,285 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.10 10:11:21" (1/1) ... [2018-10-23 22:11:21,297 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2018-10-23 22:11:21,457 INFO L174 MainTranslator]: Built tables and reachable declarations [2018-10-23 22:11:22,709 INFO L202 PostProcessor]: Analyzing one entry point: main [2018-10-23 22:11:22,714 INFO L189 MainTranslator]: Completed pre-run [2018-10-23 22:11:23,325 INFO L202 PostProcessor]: Analyzing one entry point: main [2018-10-23 22:11:23,359 INFO L193 MainTranslator]: Completed translation [2018-10-23 22:11:23,360 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.10 10:11:23 WrapperNode [2018-10-23 22:11:23,360 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2018-10-23 22:11:23,361 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2018-10-23 22:11:23,361 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2018-10-23 22:11:23,361 INFO L276 PluginConnector]: Boogie Procedure Inliner initialized [2018-10-23 22:11:23,371 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.10 10:11:23" (1/1) ... [2018-10-23 22:11:23,442 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.10 10:11:23" (1/1) ... [2018-10-23 22:11:23,834 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2018-10-23 22:11:23,835 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2018-10-23 22:11:23,835 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2018-10-23 22:11:23,835 INFO L276 PluginConnector]: Boogie Preprocessor initialized [2018-10-23 22:11:23,846 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.10 10:11:23" (1/1) ... [2018-10-23 22:11:23,846 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.10 10:11:23" (1/1) ... [2018-10-23 22:11:23,873 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.10 10:11:23" (1/1) ... [2018-10-23 22:11:23,873 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.10 10:11:23" (1/1) ... [2018-10-23 22:11:23,967 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.10 10:11:23" (1/1) ... [2018-10-23 22:11:24,002 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.10 10:11:23" (1/1) ... [2018-10-23 22:11:24,044 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.10 10:11:23" (1/1) ... [2018-10-23 22:11:24,099 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2018-10-23 22:11:24,100 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2018-10-23 22:11:24,100 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2018-10-23 22:11:24,100 INFO L276 PluginConnector]: RCFGBuilder initialized [2018-10-23 22:11:24,101 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.10 10:11:23" (1/1) ... No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UTaipan-linux/z3 Starting monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2018-10-23 22:11:24,174 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.init [2018-10-23 22:11:24,174 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.init [2018-10-23 22:11:24,174 INFO L130 BoogieDeclarations]: Found specification of procedure calculate_output4 [2018-10-23 22:11:24,174 INFO L138 BoogieDeclarations]: Found implementation of procedure calculate_output4 [2018-10-23 22:11:24,175 INFO L130 BoogieDeclarations]: Found specification of procedure calculate_output3 [2018-10-23 22:11:24,175 INFO L138 BoogieDeclarations]: Found implementation of procedure calculate_output3 [2018-10-23 22:11:24,175 INFO L130 BoogieDeclarations]: Found specification of procedure calculate_output2 [2018-10-23 22:11:24,175 INFO L138 BoogieDeclarations]: Found implementation of procedure calculate_output2 [2018-10-23 22:11:24,175 INFO L130 BoogieDeclarations]: Found specification of procedure calculate_output [2018-10-23 22:11:24,175 INFO L138 BoogieDeclarations]: Found implementation of procedure calculate_output [2018-10-23 22:11:24,176 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2018-10-23 22:11:24,176 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2018-10-23 22:11:24,176 INFO L130 BoogieDeclarations]: Found specification of procedure main [2018-10-23 22:11:24,177 INFO L138 BoogieDeclarations]: Found implementation of procedure main [2018-10-23 22:11:35,670 INFO L341 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2018-10-23 22:11:35,671 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.10 10:11:35 BoogieIcfgContainer [2018-10-23 22:11:35,671 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2018-10-23 22:11:35,672 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2018-10-23 22:11:35,672 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2018-10-23 22:11:35,676 INFO L276 PluginConnector]: TraceAbstraction initialized [2018-10-23 22:11:35,676 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 23.10 10:11:21" (1/3) ... [2018-10-23 22:11:35,677 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@c9d7fec and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 23.10 10:11:35, skipping insertion in model container [2018-10-23 22:11:35,677 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.10 10:11:23" (2/3) ... [2018-10-23 22:11:35,677 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@c9d7fec and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 23.10 10:11:35, skipping insertion in model container [2018-10-23 22:11:35,677 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.10 10:11:35" (3/3) ... [2018-10-23 22:11:35,679 INFO L112 eAbstractionObserver]: Analyzing ICFG Problem12_label08_false-unreach-call.c [2018-10-23 22:11:35,689 INFO L136 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2018-10-23 22:11:35,697 INFO L148 ceAbstractionStarter]: Appying trace abstraction to program that has 1 error locations. [2018-10-23 22:11:35,715 INFO L257 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2018-10-23 22:11:35,759 INFO L382 AbstractCegarLoop]: Interprodecural is true [2018-10-23 22:11:35,760 INFO L383 AbstractCegarLoop]: Hoare is true [2018-10-23 22:11:35,760 INFO L384 AbstractCegarLoop]: Compute interpolants for FPandBP [2018-10-23 22:11:35,760 INFO L385 AbstractCegarLoop]: Backedges is STRAIGHT_LINE [2018-10-23 22:11:35,760 INFO L386 AbstractCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2018-10-23 22:11:35,760 INFO L387 AbstractCegarLoop]: Difference is false [2018-10-23 22:11:35,760 INFO L388 AbstractCegarLoop]: Minimize is MINIMIZE_SEVPA [2018-10-23 22:11:35,761 INFO L393 AbstractCegarLoop]: ======== Iteration 0==of CEGAR loop == AllErrorsAtOnce======== [2018-10-23 22:11:35,797 INFO L276 IsEmpty]: Start isEmpty. Operand 840 states. [2018-10-23 22:11:35,805 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 37 [2018-10-23 22:11:35,805 INFO L367 BasicCegarLoop]: Found error trace [2018-10-23 22:11:35,806 INFO L375 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-10-23 22:11:35,808 INFO L424 AbstractCegarLoop]: === Iteration 1 === [calculate_outputErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-10-23 22:11:35,814 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-10-23 22:11:35,814 INFO L82 PathProgramCache]: Analyzing trace with hash 2052861436, now seen corresponding path program 1 times [2018-10-23 22:11:35,817 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-10-23 22:11:35,872 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-10-23 22:11:35,872 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-10-23 22:11:35,872 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-10-23 22:11:35,872 INFO L288 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-10-23 22:11:35,959 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-10-23 22:11:36,268 WARN L179 SmtUtils]: Spent 141.00 ms on a formula simplification. DAG size of input: 11 DAG size of output: 4 [2018-10-23 22:11:36,381 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-10-23 22:11:36,387 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-10-23 22:11:36,387 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-10-23 22:11:36,387 INFO L258 anRefinementStrategy]: Using the first perfect interpolant sequence [2018-10-23 22:11:36,395 INFO L460 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-10-23 22:11:36,411 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-10-23 22:11:36,412 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-10-23 22:11:36,416 INFO L87 Difference]: Start difference. First operand 840 states. Second operand 3 states. [2018-10-23 22:11:44,592 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-10-23 22:11:44,593 INFO L93 Difference]: Finished difference Result 2446 states and 4700 transitions. [2018-10-23 22:11:44,594 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-10-23 22:11:44,596 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 36 [2018-10-23 22:11:44,596 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-10-23 22:11:44,635 INFO L225 Difference]: With dead ends: 2446 [2018-10-23 22:11:44,635 INFO L226 Difference]: Without dead ends: 1604 [2018-10-23 22:11:44,646 INFO L605 BasicCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-10-23 22:11:44,672 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1604 states. [2018-10-23 22:11:44,815 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1604 to 1604. [2018-10-23 22:11:44,817 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 1604 states. [2018-10-23 22:11:44,829 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1604 states to 1604 states and 2969 transitions. [2018-10-23 22:11:44,832 INFO L78 Accepts]: Start accepts. Automaton has 1604 states and 2969 transitions. Word has length 36 [2018-10-23 22:11:44,832 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-10-23 22:11:44,832 INFO L481 AbstractCegarLoop]: Abstraction has 1604 states and 2969 transitions. [2018-10-23 22:11:44,832 INFO L482 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-10-23 22:11:44,834 INFO L276 IsEmpty]: Start isEmpty. Operand 1604 states and 2969 transitions. [2018-10-23 22:11:44,840 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 111 [2018-10-23 22:11:44,840 INFO L367 BasicCegarLoop]: Found error trace [2018-10-23 22:11:44,841 INFO L375 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-10-23 22:11:44,842 INFO L424 AbstractCegarLoop]: === Iteration 2 === [calculate_outputErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-10-23 22:11:44,842 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-10-23 22:11:44,842 INFO L82 PathProgramCache]: Analyzing trace with hash 817752002, now seen corresponding path program 1 times [2018-10-23 22:11:44,842 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-10-23 22:11:44,844 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-10-23 22:11:44,844 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-10-23 22:11:44,844 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-10-23 22:11:44,844 INFO L288 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-10-23 22:11:44,916 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-10-23 22:11:45,265 INFO L134 CoverageAnalysis]: Checked inductivity of 29 backedges. 29 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-10-23 22:11:45,265 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-10-23 22:11:45,265 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-10-23 22:11:45,266 INFO L258 anRefinementStrategy]: Using the first perfect interpolant sequence [2018-10-23 22:11:45,268 INFO L460 AbstractCegarLoop]: Interpolant automaton has 5 states [2018-10-23 22:11:45,268 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-10-23 22:11:45,268 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-10-23 22:11:45,269 INFO L87 Difference]: Start difference. First operand 1604 states and 2969 transitions. Second operand 5 states. [2018-10-23 22:11:59,198 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-10-23 22:11:59,198 INFO L93 Difference]: Finished difference Result 4038 states and 7427 transitions. [2018-10-23 22:11:59,205 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2018-10-23 22:11:59,205 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 110 [2018-10-23 22:11:59,206 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-10-23 22:11:59,220 INFO L225 Difference]: With dead ends: 4038 [2018-10-23 22:11:59,220 INFO L226 Difference]: Without dead ends: 2440 [2018-10-23 22:11:59,226 INFO L605 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=19, Invalid=37, Unknown=0, NotChecked=0, Total=56 [2018-10-23 22:11:59,229 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2440 states. [2018-10-23 22:11:59,280 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2440 to 2413. [2018-10-23 22:11:59,280 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 2413 states. [2018-10-23 22:11:59,289 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2413 states to 2413 states and 4141 transitions. [2018-10-23 22:11:59,289 INFO L78 Accepts]: Start accepts. Automaton has 2413 states and 4141 transitions. Word has length 110 [2018-10-23 22:11:59,290 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-10-23 22:11:59,290 INFO L481 AbstractCegarLoop]: Abstraction has 2413 states and 4141 transitions. [2018-10-23 22:11:59,290 INFO L482 AbstractCegarLoop]: Interpolant automaton has 5 states. [2018-10-23 22:11:59,290 INFO L276 IsEmpty]: Start isEmpty. Operand 2413 states and 4141 transitions. [2018-10-23 22:11:59,294 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 113 [2018-10-23 22:11:59,294 INFO L367 BasicCegarLoop]: Found error trace [2018-10-23 22:11:59,295 INFO L375 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-10-23 22:11:59,295 INFO L424 AbstractCegarLoop]: === Iteration 3 === [calculate_outputErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-10-23 22:11:59,295 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-10-23 22:11:59,296 INFO L82 PathProgramCache]: Analyzing trace with hash -354889122, now seen corresponding path program 1 times [2018-10-23 22:11:59,296 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-10-23 22:11:59,297 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-10-23 22:11:59,297 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-10-23 22:11:59,297 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-10-23 22:11:59,297 INFO L288 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-10-23 22:11:59,322 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-10-23 22:11:59,541 INFO L134 CoverageAnalysis]: Checked inductivity of 29 backedges. 0 proven. 25 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2018-10-23 22:11:59,541 INFO L300 seRefinementStrategy]: The current sequences of interpolants are not accepted, trying to find more. [2018-10-23 22:11:59,541 INFO L194 anRefinementStrategy]: Switched to InterpolantGenerator mode ABSTRACT_INTERPRETATION [2018-10-23 22:11:59,542 INFO L200 CegarAbsIntRunner]: Running AI on error trace of length 113 with the following transitions: [2018-10-23 22:11:59,544 INFO L202 CegarAbsIntRunner]: [0], [1], [1868], [1875], [1883], [1891], [1899], [1907], [1915], [1923], [1931], [1939], [1947], [1955], [1963], [1971], [1979], [1987], [1995], [2003], [2011], [2019], [2027], [2035], [2043], [2051], [2055], [2057], [2060], [2068], [2076], [2084], [2092], [2100], [2108], [2116], [2124], [2132], [2140], [2148], [2156], [2164], [2172], [2180], [2188], [2196], [2204], [2212], [2220], [2228], [2236], [2244], [2252], [2260], [2268], [2276], [2284], [2292], [2300], [2308], [2316], [2324], [2332], [2340], [2348], [2356], [2361], [2365], [2369], [2373], [2377], [2381], [2384], [3240], [3244], [3248], [3254], [3258], [3260], [3271], [3272], [3273], [3275], [3276] [2018-10-23 22:11:59,617 INFO L148 AbstractInterpreter]: Using domain PoormanAbstractDomain with backing domain CompoundDomain [CongruenceDomain, OctagonDomain] [2018-10-23 22:11:59,617 INFO L101 FixpointEngine]: Starting fixpoint engine with domain PoormanAbstractDomain (maxUnwinding=3, maxParallelStates=2) [2018-10-23 22:12:04,350 INFO L266 AbstractInterpreter]: Error location(s) were unreachable [2018-10-23 22:12:04,352 INFO L272 AbstractInterpreter]: Visited 83 different actions 159 times. Merged at 4 different actions 4 times. Never widened. Found 1 fixpoints after 1 different actions. Largest state had 26 variables. [2018-10-23 22:12:04,407 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-10-23 22:12:04,407 INFO L398 sIntCurrentIteration]: Generating AbsInt predicates [2018-10-23 22:12:06,513 INFO L232 lantSequenceWeakener]: Weakened 23 states. On average, predicates are now at 80.07% of their original sizes. [2018-10-23 22:12:06,513 INFO L411 sIntCurrentIteration]: Unifying AI predicates [2018-10-23 22:12:18,571 INFO L422 sIntCurrentIteration]: Finished generation of AbsInt predicates [2018-10-23 22:12:18,572 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 1 imperfect interpolant sequences. [2018-10-23 22:12:18,572 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [16] imperfect sequences [5] total 19 [2018-10-23 22:12:18,572 INFO L258 anRefinementStrategy]: Using the first perfect interpolant sequence [2018-10-23 22:12:18,573 INFO L460 AbstractCegarLoop]: Interpolant automaton has 16 states [2018-10-23 22:12:18,573 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 16 interpolants. [2018-10-23 22:12:18,574 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=67, Invalid=173, Unknown=0, NotChecked=0, Total=240 [2018-10-23 22:12:18,574 INFO L87 Difference]: Start difference. First operand 2413 states and 4141 transitions. Second operand 16 states. [2018-10-23 22:12:49,466 WARN L79 EvaluatorLogger]: Possible loss of precision. Operator ARITHMOD has no precise implementation. Received shutdown request... [2018-10-23 22:15:15,775 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 16 states. [2018-10-23 22:15:15,775 WARN L550 AbstractCegarLoop]: Verification canceled [2018-10-23 22:15:15,780 WARN L205 ceAbstractionStarter]: Timeout [2018-10-23 22:15:15,781 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 23.10 10:15:15 BoogieIcfgContainer [2018-10-23 22:15:15,781 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2018-10-23 22:15:15,782 INFO L168 Benchmark]: Toolchain (without parser) took 234508.06 ms. Allocated memory was 1.5 GB in the beginning and 4.2 GB in the end (delta: 2.7 GB). Free memory was 1.4 GB in the beginning and 2.1 GB in the end (delta: -684.3 MB). Peak memory consumption was 2.0 GB. Max. memory is 7.1 GB. [2018-10-23 22:15:15,783 INFO L168 Benchmark]: CDTParser took 0.16 ms. Allocated memory is still 1.5 GB. Free memory is still 1.4 GB. There was no memory consumed. Max. memory is 7.1 GB. [2018-10-23 22:15:15,784 INFO L168 Benchmark]: CACSL2BoogieTranslator took 2084.38 ms. Allocated memory is still 1.5 GB. Free memory was 1.4 GB in the beginning and 1.2 GB in the end (delta: 200.8 MB). Peak memory consumption was 200.8 MB. Max. memory is 7.1 GB. [2018-10-23 22:15:15,785 INFO L168 Benchmark]: Boogie Procedure Inliner took 473.75 ms. Allocated memory was 1.5 GB in the beginning and 2.3 GB in the end (delta: 788.0 MB). Free memory was 1.2 GB in the beginning and 2.2 GB in the end (delta: -1.0 GB). Peak memory consumption was 68.9 MB. Max. memory is 7.1 GB. [2018-10-23 22:15:15,786 INFO L168 Benchmark]: Boogie Preprocessor took 264.78 ms. Allocated memory is still 2.3 GB. Free memory was 2.2 GB in the beginning and 2.2 GB in the end (delta: 36.0 MB). Peak memory consumption was 36.0 MB. Max. memory is 7.1 GB. [2018-10-23 22:15:15,787 INFO L168 Benchmark]: RCFGBuilder took 11571.00 ms. Allocated memory was 2.3 GB in the beginning and 2.5 GB in the end (delta: 175.1 MB). Free memory was 2.2 GB in the beginning and 2.4 GB in the end (delta: -180.1 MB). Peak memory consumption was 666.6 MB. Max. memory is 7.1 GB. [2018-10-23 22:15:15,788 INFO L168 Benchmark]: TraceAbstraction took 220108.90 ms. Allocated memory was 2.5 GB in the beginning and 4.2 GB in the end (delta: 1.7 GB). Free memory was 2.4 GB in the beginning and 2.1 GB in the end (delta: 288.3 MB). Peak memory consumption was 2.0 GB. Max. memory is 7.1 GB. [2018-10-23 22:15:15,796 INFO L336 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.16 ms. Allocated memory is still 1.5 GB. Free memory is still 1.4 GB. There was no memory consumed. Max. memory is 7.1 GB. * CACSL2BoogieTranslator took 2084.38 ms. Allocated memory is still 1.5 GB. Free memory was 1.4 GB in the beginning and 1.2 GB in the end (delta: 200.8 MB). Peak memory consumption was 200.8 MB. Max. memory is 7.1 GB. * Boogie Procedure Inliner took 473.75 ms. Allocated memory was 1.5 GB in the beginning and 2.3 GB in the end (delta: 788.0 MB). Free memory was 1.2 GB in the beginning and 2.2 GB in the end (delta: -1.0 GB). Peak memory consumption was 68.9 MB. Max. memory is 7.1 GB. * Boogie Preprocessor took 264.78 ms. Allocated memory is still 2.3 GB. Free memory was 2.2 GB in the beginning and 2.2 GB in the end (delta: 36.0 MB). Peak memory consumption was 36.0 MB. Max. memory is 7.1 GB. * RCFGBuilder took 11571.00 ms. Allocated memory was 2.3 GB in the beginning and 2.5 GB in the end (delta: 175.1 MB). Free memory was 2.2 GB in the beginning and 2.4 GB in the end (delta: -180.1 MB). Peak memory consumption was 666.6 MB. Max. memory is 7.1 GB. * TraceAbstraction took 220108.90 ms. Allocated memory was 2.5 GB in the beginning and 4.2 GB in the end (delta: 1.7 GB). Free memory was 2.4 GB in the beginning and 2.1 GB in the end (delta: 288.3 MB). Peak memory consumption was 2.0 GB. Max. memory is 7.1 GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - TimeoutResultAtElement [Line: 99]: Timeout (TraceAbstraction) Unable to prove that call of __VERIFIER_error() unreachable (line 99). Cancelled while BasicCegarLoop was constructing difference of abstraction (2413states) and FLOYD_HOARE automaton (currently 16 states, 16 states before enhancement),while ReachableStatesComputation was computing reachable states (1490 states constructedinput type IntersectNwa). - StatisticsResult: Ultimate Automizer benchmark data CFG has 7 procedures, 840 locations, 1 error locations. TIMEOUT Result, 220.0s OverallTime, 3 OverallIterations, 2 TraceHistogramMax, 199.4s AutomataDifference, 0.0s DeadEndRemovalTime, 0.0s HoareAnnotationTime, HoareTripleCheckerStatistics: 448 SDtfs, 6107 SDslu, 287 SDs, 0 SdLazy, 8438 SolverSat, 2371 SolverUnsat, 1 SolverUnknown, 0 SolverNotchecked, 107.2s Time, PredicateUnifierStatistics: 2 DeclaredPredicates, 131 GetRequests, 98 SyntacticMatches, 6 SemanticMatches, 27 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 88 ImplicationChecksByTransitivity, 15.1s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=2413occurred in iteration=2, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 4.8s AbstIntTime, 1 AbstIntIterations, 1 AbstIntStrong, 0.9919750519750521 AbsIntWeakeningRatio, 0.1891891891891892 AbsIntAvgWeakeningVarsNumRemoved, 382.63963963963965 AbsIntAvgWeakenedConjuncts, 0.0s DumpTime, AutomataMinimizationStatistics: 0.2s AutomataMinimizationTime, 2 MinimizatonAttempts, 27 StatesRemovedByMinimization, 1 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TraceCheckStatistics: 0.0s SsaConstructionTime, 0.1s SatisfiabilityAnalysisTime, 0.9s InterpolantComputationTime, 258 NumberOfCodeBlocks, 258 NumberOfCodeBlocksAsserted, 3 NumberOfCheckSat, 255 ConstructedInterpolants, 0 QuantifiedInterpolants, 74078 SizeOfPredicates, 0 NumberOfNonLiveVariables, 0 ConjunctsInSsa, 0 ConjunctsInUnsatCore, 3 InterpolantComputations, 2 PerfectInterpolantSequences, 33/58 InterpolantCoveringCapability, InvariantSynthesisStatistics: No data available, InterpolantConsolidationStatistics: No data available, ReuseStatistics: No data available RESULT: Ultimate could not prove your program: Timeout Completed graceful shutdown