/usr/bin/java -Xmx8000000000 -Xss4m -jar ./plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata ./data -s ../../../trunk/examples/settings/automizer/concurrent/svcomp-Reach-32bit-Automizer_Default-noMmResRef-POR-NewStatesSleep-NoLbe.epf -tc ../../../trunk/examples/toolchains/AutomizerBplInline.xml -i ../../../trunk/examples/concurrent/bpl/weaver-benchmarks/generated/unroll-cond-4.wvr.bpl -------------------------------------------------------------------------------- This is Ultimate 0.2.2-wip.dk.mcr-reduction-44898dd [2022-02-09 08:40:10,629 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-02-09 08:40:10,631 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-02-09 08:40:10,673 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-02-09 08:40:10,673 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-02-09 08:40:10,674 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-02-09 08:40:10,675 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-02-09 08:40:10,711 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-02-09 08:40:10,712 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-02-09 08:40:10,717 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-02-09 08:40:10,717 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-02-09 08:40:10,718 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-02-09 08:40:10,718 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-02-09 08:40:10,718 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-02-09 08:40:10,719 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-02-09 08:40:10,719 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-02-09 08:40:10,720 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-02-09 08:40:10,720 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-02-09 08:40:10,721 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-02-09 08:40:10,722 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-02-09 08:40:10,723 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-02-09 08:40:10,726 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-02-09 08:40:10,728 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-02-09 08:40:10,729 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-02-09 08:40:10,735 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-02-09 08:40:10,735 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-02-09 08:40:10,736 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-02-09 08:40:10,737 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-02-09 08:40:10,737 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-02-09 08:40:10,738 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-02-09 08:40:10,738 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-02-09 08:40:10,738 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-02-09 08:40:10,740 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-02-09 08:40:10,740 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-02-09 08:40:10,741 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-02-09 08:40:10,741 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-02-09 08:40:10,742 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-02-09 08:40:10,742 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-02-09 08:40:10,742 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-02-09 08:40:10,742 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-02-09 08:40:10,743 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-02-09 08:40:10,745 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/settings/automizer/concurrent/svcomp-Reach-32bit-Automizer_Default-noMmResRef-POR-NewStatesSleep-NoLbe.epf [2022-02-09 08:40:10,771 INFO L113 SettingsManager]: Loading preferences was successful [2022-02-09 08:40:10,772 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-02-09 08:40:10,772 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-02-09 08:40:10,772 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-02-09 08:40:10,772 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-02-09 08:40:10,772 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-02-09 08:40:10,773 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-02-09 08:40:10,773 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-02-09 08:40:10,773 INFO L138 SettingsManager]: * Use SBE=true [2022-02-09 08:40:10,773 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-02-09 08:40:10,774 INFO L138 SettingsManager]: * sizeof long=4 [2022-02-09 08:40:10,774 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-02-09 08:40:10,774 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-02-09 08:40:10,774 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-02-09 08:40:10,774 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-02-09 08:40:10,774 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-02-09 08:40:10,774 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-02-09 08:40:10,774 INFO L138 SettingsManager]: * sizeof long double=12 [2022-02-09 08:40:10,774 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-02-09 08:40:10,774 INFO L138 SettingsManager]: * Use constant arrays=true [2022-02-09 08:40:10,774 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-02-09 08:40:10,774 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-02-09 08:40:10,775 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-02-09 08:40:10,775 INFO L138 SettingsManager]: * To the following directory=./dump/ [2022-02-09 08:40:10,776 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-02-09 08:40:10,776 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-02-09 08:40:10,776 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-02-09 08:40:10,776 INFO L138 SettingsManager]: * Construct finite automaton lazily=true [2022-02-09 08:40:10,776 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-02-09 08:40:10,776 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-02-09 08:40:10,776 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-02-09 08:40:10,776 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-02-09 08:40:10,776 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2022-02-09 08:40:10,777 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PARTIAL_ORDER_FA [2022-02-09 08:40:10,777 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-02-09 08:40:10,777 INFO L138 SettingsManager]: * Partial Order Reduction in concurrent analysis=SLEEP_NEW_STATES [2022-02-09 08:40:10,777 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release [2022-02-09 08:40:10,992 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-02-09 08:40:11,009 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-02-09 08:40:11,010 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-02-09 08:40:11,011 INFO L271 PluginConnector]: Initializing Boogie PL CUP Parser... [2022-02-09 08:40:11,013 INFO L275 PluginConnector]: Boogie PL CUP Parser initialized [2022-02-09 08:40:11,014 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/concurrent/bpl/weaver-benchmarks/generated/unroll-cond-4.wvr.bpl [2022-02-09 08:40:11,014 INFO L110 BoogieParser]: Parsing: '/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/concurrent/bpl/weaver-benchmarks/generated/unroll-cond-4.wvr.bpl' [2022-02-09 08:40:11,033 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-02-09 08:40:11,034 INFO L131 ToolchainWalker]: Walking toolchain with 4 elements. [2022-02-09 08:40:11,035 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-02-09 08:40:11,036 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-02-09 08:40:11,036 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-02-09 08:40:11,045 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "unroll-cond-4.wvr.bpl de.uni_freiburg.informatik.ultimate.boogie.parser AST 09.02 08:40:11" (1/1) ... [2022-02-09 08:40:11,050 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "unroll-cond-4.wvr.bpl de.uni_freiburg.informatik.ultimate.boogie.parser AST 09.02 08:40:11" (1/1) ... [2022-02-09 08:40:11,055 INFO L137 Inliner]: procedures = 3, calls = 2, calls flagged for inlining = 0, calls inlined = 0, statements flattened = 0 [2022-02-09 08:40:11,056 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-02-09 08:40:11,058 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-02-09 08:40:11,058 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-02-09 08:40:11,058 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-02-09 08:40:11,064 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "unroll-cond-4.wvr.bpl de.uni_freiburg.informatik.ultimate.boogie.parser AST 09.02 08:40:11" (1/1) ... [2022-02-09 08:40:11,065 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "unroll-cond-4.wvr.bpl de.uni_freiburg.informatik.ultimate.boogie.parser AST 09.02 08:40:11" (1/1) ... [2022-02-09 08:40:11,074 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "unroll-cond-4.wvr.bpl de.uni_freiburg.informatik.ultimate.boogie.parser AST 09.02 08:40:11" (1/1) ... [2022-02-09 08:40:11,076 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "unroll-cond-4.wvr.bpl de.uni_freiburg.informatik.ultimate.boogie.parser AST 09.02 08:40:11" (1/1) ... [2022-02-09 08:40:11,078 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "unroll-cond-4.wvr.bpl de.uni_freiburg.informatik.ultimate.boogie.parser AST 09.02 08:40:11" (1/1) ... [2022-02-09 08:40:11,080 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "unroll-cond-4.wvr.bpl de.uni_freiburg.informatik.ultimate.boogie.parser AST 09.02 08:40:11" (1/1) ... [2022-02-09 08:40:11,080 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "unroll-cond-4.wvr.bpl de.uni_freiburg.informatik.ultimate.boogie.parser AST 09.02 08:40:11" (1/1) ... [2022-02-09 08:40:11,081 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-02-09 08:40:11,082 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-02-09 08:40:11,082 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-02-09 08:40:11,082 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-02-09 08:40:11,084 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "unroll-cond-4.wvr.bpl de.uni_freiburg.informatik.ultimate.boogie.parser AST 09.02 08:40:11" (1/1) ... [2022-02-09 08:40:11,089 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-02-09 08:40:11,099 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-02-09 08:40:11,110 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-02-09 08:40:11,131 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-02-09 08:40:11,151 INFO L124 BoogieDeclarations]: Specification and implementation of procedure thread1 given in one single declaration [2022-02-09 08:40:11,151 INFO L130 BoogieDeclarations]: Found specification of procedure thread1 [2022-02-09 08:40:11,152 INFO L138 BoogieDeclarations]: Found implementation of procedure thread1 [2022-02-09 08:40:11,152 INFO L124 BoogieDeclarations]: Specification and implementation of procedure thread2 given in one single declaration [2022-02-09 08:40:11,152 INFO L130 BoogieDeclarations]: Found specification of procedure thread2 [2022-02-09 08:40:11,152 INFO L138 BoogieDeclarations]: Found implementation of procedure thread2 [2022-02-09 08:40:11,152 INFO L124 BoogieDeclarations]: Specification and implementation of procedure ULTIMATE.start given in one single declaration [2022-02-09 08:40:11,152 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-02-09 08:40:11,153 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-02-09 08:40:11,153 WARN L208 CfgBuilder]: User set CodeBlockSize to SequenceOfStatements but program contains fork statements. Overwriting the user preferences and setting CodeBlockSize to SingleStatement [2022-02-09 08:40:11,193 INFO L234 CfgBuilder]: Building ICFG [2022-02-09 08:40:11,194 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2022-02-09 08:40:11,291 INFO L275 CfgBuilder]: Performing block encoding [2022-02-09 08:40:11,355 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-02-09 08:40:11,355 INFO L299 CfgBuilder]: Removed 2 assume(true) statements. [2022-02-09 08:40:11,356 WARN L329 CfgBuilder]: Unexpected successor node of atomic block begin: thread1EXIT is neither atomic block end nor error location. [2022-02-09 08:40:11,358 INFO L202 PluginConnector]: Adding new model unroll-cond-4.wvr.bpl de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 09.02 08:40:11 BoogieIcfgContainer [2022-02-09 08:40:11,358 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-02-09 08:40:11,375 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-02-09 08:40:11,376 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-02-09 08:40:11,383 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-02-09 08:40:11,384 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "unroll-cond-4.wvr.bpl de.uni_freiburg.informatik.ultimate.boogie.parser AST 09.02 08:40:11" (1/2) ... [2022-02-09 08:40:11,384 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@60f47a84 and model type unroll-cond-4.wvr.bpl de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 09.02 08:40:11, skipping insertion in model container [2022-02-09 08:40:11,384 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "unroll-cond-4.wvr.bpl de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 09.02 08:40:11" (2/2) ... [2022-02-09 08:40:11,386 INFO L111 eAbstractionObserver]: Analyzing ICFG unroll-cond-4.wvr.bpl [2022-02-09 08:40:11,389 WARN L150 ceAbstractionStarter]: Switching off computation of Hoare annotation because input is a concurrent program [2022-02-09 08:40:11,389 INFO L205 ceAbstractionStarter]: Automizer settings: Hoare:false NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-02-09 08:40:11,389 INFO L164 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-02-09 08:40:11,389 INFO L534 ceAbstractionStarter]: Constructing petrified ICFG for 1 thread instances. [2022-02-09 08:40:11,411 INFO L148 ThreadInstanceAdder]: Constructed 2 joinOtherThreadTransitions. [2022-02-09 08:40:11,448 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true -t:1000 [2022-02-09 08:40:11,448 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-02-09 08:40:11,449 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true -t:1000 (exit command is (exit), workingDir is null) [2022-02-09 08:40:11,450 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true -t:1000 (2)] Waiting until timeout for monitored process [2022-02-09 08:40:11,493 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-02-09 08:40:11,509 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PARTIAL_ORDER_FA, mLazyFiniteAutomaton=true, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2022-02-09 08:40:11,510 INFO L340 AbstractCegarLoop]: Starting to check reachability of 3 error locations. [2022-02-09 08:40:11,559 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONASSERT === [ULTIMATE.startErr0ASSERT_VIOLATIONASSERT, ULTIMATE.startErr0INUSE_VIOLATION, ULTIMATE.startErr1INUSE_VIOLATION] === [2022-02-09 08:40:11,562 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-09 08:40:11,563 INFO L85 PathProgramCache]: Analyzing trace with hash 1471789369, now seen corresponding path program 1 times [2022-02-09 08:40:11,572 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-09 08:40:11,572 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1935860107] [2022-02-09 08:40:11,572 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-09 08:40:11,572 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-09 08:40:11,667 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-09 08:40:11,794 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-02-09 08:40:11,794 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-09 08:40:11,794 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1935860107] [2022-02-09 08:40:11,795 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1935860107] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-09 08:40:11,795 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-09 08:40:11,795 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-02-09 08:40:11,796 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2004774758] [2022-02-09 08:40:11,797 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-09 08:40:11,799 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-02-09 08:40:11,800 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-09 08:40:11,848 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-02-09 08:40:11,849 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-02-09 08:40:11,853 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-02-09 08:40:11,856 INFO L470 AbstractCegarLoop]: Abstraction has currently 0 states, but on-demand construction may add more states [2022-02-09 08:40:11,857 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 2.0) internal successors, (10), 4 states have internal predecessors, (10), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-09 08:40:11,857 INFO L154 InterpolantAutomaton]: Switched to On-DemandConstruction mode: deterministic interpolant automaton has 2 states. [2022-02-09 08:40:11,921 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-02-09 08:40:11,921 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-02-09 08:40:11,921 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONASSERT === [ULTIMATE.startErr0ASSERT_VIOLATIONASSERT, ULTIMATE.startErr0INUSE_VIOLATION, ULTIMATE.startErr1INUSE_VIOLATION] === [2022-02-09 08:40:11,924 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-09 08:40:11,924 INFO L85 PathProgramCache]: Analyzing trace with hash -1713251614, now seen corresponding path program 1 times [2022-02-09 08:40:11,924 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-09 08:40:11,924 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [13395222] [2022-02-09 08:40:11,924 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-09 08:40:11,924 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-09 08:40:11,937 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-09 08:40:12,220 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-02-09 08:40:12,220 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-09 08:40:12,220 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [13395222] [2022-02-09 08:40:12,221 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [13395222] provided 0 perfect and 1 imperfect interpolant sequences [2022-02-09 08:40:12,221 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [404518245] [2022-02-09 08:40:12,221 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-09 08:40:12,221 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-02-09 08:40:12,221 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-02-09 08:40:12,231 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-02-09 08:40:12,232 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-02-09 08:40:12,272 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-09 08:40:12,273 INFO L263 TraceCheckSpWp]: Trace formula consists of 36 conjuncts, 16 conjunts are in the unsatisfiable core [2022-02-09 08:40:12,275 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-02-09 08:40:15,115 INFO L387 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-02-09 08:40:15,123 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-02-09 08:40:15,124 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-02-09 08:40:15,674 INFO L353 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-02-09 08:40:15,675 INFO L387 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 6 new quantified variables, introduced 6 case distinctions, treesize of input 70 treesize of output 107 [2022-02-09 08:40:16,284 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-02-09 08:40:16,285 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleZ3 [404518245] provided 0 perfect and 2 imperfect interpolant sequences [2022-02-09 08:40:16,285 INFO L191 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-02-09 08:40:16,285 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [5, 5, 5] total 10 [2022-02-09 08:40:16,286 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1151649990] [2022-02-09 08:40:16,286 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-02-09 08:40:16,286 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 11 states [2022-02-09 08:40:16,287 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-09 08:40:16,288 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 11 interpolants. [2022-02-09 08:40:16,289 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=33, Invalid=77, Unknown=0, NotChecked=0, Total=110 [2022-02-09 08:40:16,289 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-02-09 08:40:16,289 INFO L470 AbstractCegarLoop]: Abstraction has currently 0 states, but on-demand construction may add more states [2022-02-09 08:40:16,289 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 11 states, 11 states have (on average 1.8181818181818181) internal successors, (20), 10 states have internal predecessors, (20), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-09 08:40:16,289 INFO L154 InterpolantAutomaton]: Switched to On-DemandConstruction mode: deterministic interpolant automaton has 4 states. [2022-02-09 08:40:16,289 INFO L154 InterpolantAutomaton]: Switched to On-DemandConstruction mode: deterministic interpolant automaton has 2 states. [2022-02-09 08:40:16,457 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-02-09 08:40:16,458 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-02-09 08:40:16,474 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Ended with exit code 0 [2022-02-09 08:40:16,658 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable1 [2022-02-09 08:40:16,659 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONASSERT === [ULTIMATE.startErr0ASSERT_VIOLATIONASSERT, ULTIMATE.startErr0INUSE_VIOLATION, ULTIMATE.startErr1INUSE_VIOLATION] === [2022-02-09 08:40:16,659 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-09 08:40:16,659 INFO L85 PathProgramCache]: Analyzing trace with hash -1665274279, now seen corresponding path program 2 times [2022-02-09 08:40:16,659 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-09 08:40:16,659 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [808531275] [2022-02-09 08:40:16,660 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-09 08:40:16,660 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-09 08:40:16,668 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-09 08:40:16,828 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 3 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-02-09 08:40:16,828 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-09 08:40:16,828 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [808531275] [2022-02-09 08:40:16,828 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [808531275] provided 0 perfect and 1 imperfect interpolant sequences [2022-02-09 08:40:16,829 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [336279797] [2022-02-09 08:40:16,829 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2022-02-09 08:40:16,829 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-02-09 08:40:16,829 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-02-09 08:40:16,830 INFO L229 MonitoredProcess]: Starting monitored process 4 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-02-09 08:40:16,851 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2022-02-09 08:40:16,866 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2022-02-09 08:40:16,866 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-02-09 08:40:16,867 INFO L263 TraceCheckSpWp]: Trace formula consists of 41 conjuncts, 20 conjunts are in the unsatisfiable core [2022-02-09 08:40:16,868 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-02-09 08:40:21,150 INFO L353 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-02-09 08:40:21,150 INFO L387 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 3 new quantified variables, introduced 1 case distinctions, treesize of input 15 treesize of output 18 [2022-02-09 08:40:21,161 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 3 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-02-09 08:40:21,162 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-02-09 08:40:21,782 INFO L353 Elim1Store]: treesize reduction 10, result has 87.7 percent of original size [2022-02-09 08:40:21,783 INFO L387 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 5 select indices, 5 select index equivalence classes, 0 disjoint index pairs (out of 10 index pairs), introduced 8 new quantified variables, introduced 10 case distinctions, treesize of input 13 treesize of output 86 [2022-02-09 08:40:22,107 INFO L353 Elim1Store]: treesize reduction 10, result has 79.6 percent of original size [2022-02-09 08:40:22,108 INFO L387 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 6 new quantified variables, introduced 6 case distinctions, treesize of input 11 treesize of output 50 [2022-02-09 08:40:22,197 INFO L353 Elim1Store]: treesize reduction 5, result has 80.0 percent of original size [2022-02-09 08:40:22,197 INFO L387 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 4 new quantified variables, introduced 3 case distinctions, treesize of input 9 treesize of output 27 [2022-02-09 08:40:22,226 INFO L353 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-02-09 08:40:22,227 INFO L387 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 3 new quantified variables, introduced 1 case distinctions, treesize of input 7 treesize of output 16 [2022-02-09 08:40:22,246 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 3 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-02-09 08:40:22,252 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleZ3 [336279797] provided 0 perfect and 2 imperfect interpolant sequences [2022-02-09 08:40:22,252 INFO L191 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-02-09 08:40:22,252 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [6, 6, 6] total 13 [2022-02-09 08:40:22,253 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [953127601] [2022-02-09 08:40:22,253 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-02-09 08:40:22,253 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 14 states [2022-02-09 08:40:22,254 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-09 08:40:22,254 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 14 interpolants. [2022-02-09 08:40:22,256 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=43, Invalid=139, Unknown=0, NotChecked=0, Total=182 [2022-02-09 08:40:22,257 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-02-09 08:40:22,257 INFO L470 AbstractCegarLoop]: Abstraction has currently 0 states, but on-demand construction may add more states [2022-02-09 08:40:22,257 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 14 states, 14 states have (on average 1.6428571428571428) internal successors, (23), 13 states have internal predecessors, (23), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-09 08:40:22,257 INFO L154 InterpolantAutomaton]: Switched to On-DemandConstruction mode: deterministic interpolant automaton has 4 states. [2022-02-09 08:40:22,257 INFO L154 InterpolantAutomaton]: Switched to On-DemandConstruction mode: deterministic interpolant automaton has 8 states. [2022-02-09 08:40:22,258 INFO L154 InterpolantAutomaton]: Switched to On-DemandConstruction mode: deterministic interpolant automaton has 2 states. [2022-02-09 08:40:22,626 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-02-09 08:40:22,626 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-02-09 08:40:22,627 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2022-02-09 08:40:22,645 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2022-02-09 08:40:22,845 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2,4 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-02-09 08:40:22,846 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONASSERT === [ULTIMATE.startErr0ASSERT_VIOLATIONASSERT, ULTIMATE.startErr0INUSE_VIOLATION, ULTIMATE.startErr1INUSE_VIOLATION] === [2022-02-09 08:40:22,846 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-09 08:40:22,846 INFO L85 PathProgramCache]: Analyzing trace with hash -396697507, now seen corresponding path program 1 times [2022-02-09 08:40:22,846 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-09 08:40:22,846 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [161079580] [2022-02-09 08:40:22,846 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-09 08:40:22,847 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-09 08:40:22,867 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-09 08:40:22,896 INFO L134 CoverageAnalysis]: Checked inductivity of 7 backedges. 1 proven. 6 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-02-09 08:40:22,896 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-09 08:40:22,897 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [161079580] [2022-02-09 08:40:22,897 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [161079580] provided 0 perfect and 1 imperfect interpolant sequences [2022-02-09 08:40:22,897 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1220201713] [2022-02-09 08:40:22,897 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-09 08:40:22,897 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-02-09 08:40:22,897 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-02-09 08:40:22,898 INFO L229 MonitoredProcess]: Starting monitored process 5 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-02-09 08:40:22,899 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2022-02-09 08:40:22,918 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-09 08:40:22,918 INFO L263 TraceCheckSpWp]: Trace formula consists of 51 conjuncts, 6 conjunts are in the unsatisfiable core [2022-02-09 08:40:22,919 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-02-09 08:40:22,948 INFO L134 CoverageAnalysis]: Checked inductivity of 7 backedges. 1 proven. 6 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-02-09 08:40:22,948 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-02-09 08:40:22,983 INFO L134 CoverageAnalysis]: Checked inductivity of 7 backedges. 1 proven. 6 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-02-09 08:40:22,983 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1220201713] provided 0 perfect and 2 imperfect interpolant sequences [2022-02-09 08:40:22,983 INFO L191 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-02-09 08:40:22,983 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [6, 6, 6] total 7 [2022-02-09 08:40:22,984 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1166387779] [2022-02-09 08:40:22,984 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-02-09 08:40:22,984 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-02-09 08:40:22,984 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-09 08:40:22,984 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-02-09 08:40:22,984 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=23, Invalid=33, Unknown=0, NotChecked=0, Total=56 [2022-02-09 08:40:22,984 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-02-09 08:40:22,984 INFO L470 AbstractCegarLoop]: Abstraction has currently 0 states, but on-demand construction may add more states [2022-02-09 08:40:22,985 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 2.25) internal successors, (18), 7 states have internal predecessors, (18), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-09 08:40:22,985 INFO L154 InterpolantAutomaton]: Switched to On-DemandConstruction mode: deterministic interpolant automaton has 4 states. [2022-02-09 08:40:22,985 INFO L154 InterpolantAutomaton]: Switched to On-DemandConstruction mode: deterministic interpolant automaton has 8 states. [2022-02-09 08:40:22,985 INFO L154 InterpolantAutomaton]: Switched to On-DemandConstruction mode: deterministic interpolant automaton has 11 states. [2022-02-09 08:40:22,985 INFO L154 InterpolantAutomaton]: Switched to On-DemandConstruction mode: deterministic interpolant automaton has 2 states. [2022-02-09 08:40:23,065 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-02-09 08:40:23,065 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-02-09 08:40:23,065 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2022-02-09 08:40:23,067 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-02-09 08:40:23,084 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Ended with exit code 0 [2022-02-09 08:40:23,279 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3,5 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-02-09 08:40:23,281 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONASSERT === [ULTIMATE.startErr0ASSERT_VIOLATIONASSERT, ULTIMATE.startErr0INUSE_VIOLATION, ULTIMATE.startErr1INUSE_VIOLATION] === [2022-02-09 08:40:23,282 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-09 08:40:23,282 INFO L85 PathProgramCache]: Analyzing trace with hash -1316398215, now seen corresponding path program 3 times [2022-02-09 08:40:23,282 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-09 08:40:23,282 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [689525678] [2022-02-09 08:40:23,282 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-09 08:40:23,282 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-09 08:40:23,287 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-09 08:40:23,323 INFO L134 CoverageAnalysis]: Checked inductivity of 10 backedges. 3 proven. 7 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-02-09 08:40:23,323 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-09 08:40:23,324 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [689525678] [2022-02-09 08:40:23,324 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [689525678] provided 0 perfect and 1 imperfect interpolant sequences [2022-02-09 08:40:23,324 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1645863171] [2022-02-09 08:40:23,324 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-02-09 08:40:23,324 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-02-09 08:40:23,324 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-02-09 08:40:23,325 INFO L229 MonitoredProcess]: Starting monitored process 6 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-02-09 08:40:23,326 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Waiting until timeout for monitored process [2022-02-09 08:40:23,348 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 3 check-sat command(s) [2022-02-09 08:40:23,348 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-02-09 08:40:23,349 INFO L263 TraceCheckSpWp]: Trace formula consists of 51 conjuncts, 6 conjunts are in the unsatisfiable core [2022-02-09 08:40:23,349 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-02-09 08:40:23,373 INFO L134 CoverageAnalysis]: Checked inductivity of 10 backedges. 6 proven. 4 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-02-09 08:40:23,374 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-02-09 08:40:23,399 INFO L134 CoverageAnalysis]: Checked inductivity of 10 backedges. 6 proven. 4 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-02-09 08:40:23,399 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1645863171] provided 0 perfect and 2 imperfect interpolant sequences [2022-02-09 08:40:23,399 INFO L191 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-02-09 08:40:23,399 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [6, 6, 6] total 7 [2022-02-09 08:40:23,399 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [87327461] [2022-02-09 08:40:23,400 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-02-09 08:40:23,400 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-02-09 08:40:23,400 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-09 08:40:23,400 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-02-09 08:40:23,400 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=20, Invalid=36, Unknown=0, NotChecked=0, Total=56 [2022-02-09 08:40:23,400 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-02-09 08:40:23,400 INFO L470 AbstractCegarLoop]: Abstraction has currently 0 states, but on-demand construction may add more states [2022-02-09 08:40:23,400 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 2.25) internal successors, (18), 7 states have internal predecessors, (18), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-09 08:40:23,401 INFO L154 InterpolantAutomaton]: Switched to On-DemandConstruction mode: deterministic interpolant automaton has 4 states. [2022-02-09 08:40:23,401 INFO L154 InterpolantAutomaton]: Switched to On-DemandConstruction mode: deterministic interpolant automaton has 8 states. [2022-02-09 08:40:23,401 INFO L154 InterpolantAutomaton]: Switched to On-DemandConstruction mode: deterministic interpolant automaton has 11 states. [2022-02-09 08:40:23,401 INFO L154 InterpolantAutomaton]: Switched to On-DemandConstruction mode: deterministic interpolant automaton has 13 states. [2022-02-09 08:40:23,401 INFO L154 InterpolantAutomaton]: Switched to On-DemandConstruction mode: deterministic interpolant automaton has 2 states. [2022-02-09 08:40:23,462 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-02-09 08:40:23,462 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-02-09 08:40:23,463 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2022-02-09 08:40:23,463 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-02-09 08:40:23,463 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-02-09 08:40:23,479 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Ended with exit code 0 [2022-02-09 08:40:23,675 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4,6 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-02-09 08:40:23,675 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONASSERT === [ULTIMATE.startErr0ASSERT_VIOLATIONASSERT, ULTIMATE.startErr0INUSE_VIOLATION, ULTIMATE.startErr1INUSE_VIOLATION] === [2022-02-09 08:40:23,676 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-09 08:40:23,676 INFO L85 PathProgramCache]: Analyzing trace with hash -1328020090, now seen corresponding path program 2 times [2022-02-09 08:40:23,676 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-09 08:40:23,676 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1159754666] [2022-02-09 08:40:23,676 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-09 08:40:23,676 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-09 08:40:23,683 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-09 08:40:23,769 INFO L134 CoverageAnalysis]: Checked inductivity of 11 backedges. 0 proven. 11 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-02-09 08:40:23,769 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-09 08:40:23,770 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1159754666] [2022-02-09 08:40:23,771 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1159754666] provided 0 perfect and 1 imperfect interpolant sequences [2022-02-09 08:40:23,771 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [988120034] [2022-02-09 08:40:23,771 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2022-02-09 08:40:23,771 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-02-09 08:40:23,771 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-02-09 08:40:23,772 INFO L229 MonitoredProcess]: Starting monitored process 7 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-02-09 08:40:23,773 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Waiting until timeout for monitored process [2022-02-09 08:40:23,792 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2022-02-09 08:40:23,793 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-02-09 08:40:23,793 INFO L263 TraceCheckSpWp]: Trace formula consists of 56 conjuncts, 26 conjunts are in the unsatisfiable core [2022-02-09 08:40:23,794 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-02-09 08:40:24,296 INFO L353 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-02-09 08:40:24,297 INFO L387 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 7 select indices, 7 select index equivalence classes, 0 disjoint index pairs (out of 21 index pairs), introduced 13 new quantified variables, introduced 21 case distinctions, treesize of input 106 treesize of output 240 [2022-02-09 08:40:24,799 INFO L134 CoverageAnalysis]: Checked inductivity of 11 backedges. 0 proven. 11 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-02-09 08:40:24,799 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-02-09 08:40:25,540 INFO L353 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-02-09 08:40:25,541 INFO L387 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 9 select indices, 9 select index equivalence classes, 0 disjoint index pairs (out of 36 index pairs), introduced 16 new quantified variables, introduced 36 case distinctions, treesize of input 47 treesize of output 330 [2022-02-09 08:40:35,925 INFO L134 CoverageAnalysis]: Checked inductivity of 11 backedges. 0 proven. 11 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-02-09 08:40:35,926 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleZ3 [988120034] provided 0 perfect and 2 imperfect interpolant sequences [2022-02-09 08:40:35,926 INFO L191 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-02-09 08:40:35,926 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [9, 9, 9] total 23 [2022-02-09 08:40:35,926 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1119625340] [2022-02-09 08:40:35,926 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-02-09 08:40:35,926 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 24 states [2022-02-09 08:40:35,926 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-09 08:40:35,927 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 24 interpolants. [2022-02-09 08:40:35,927 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=70, Invalid=482, Unknown=0, NotChecked=0, Total=552 [2022-02-09 08:40:35,927 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-02-09 08:40:35,927 INFO L470 AbstractCegarLoop]: Abstraction has currently 0 states, but on-demand construction may add more states [2022-02-09 08:40:35,927 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 24 states, 24 states have (on average 1.4583333333333333) internal successors, (35), 23 states have internal predecessors, (35), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-09 08:40:35,927 INFO L154 InterpolantAutomaton]: Switched to On-DemandConstruction mode: deterministic interpolant automaton has 4 states. [2022-02-09 08:40:35,927 INFO L154 InterpolantAutomaton]: Switched to On-DemandConstruction mode: deterministic interpolant automaton has 8 states. [2022-02-09 08:40:35,927 INFO L154 InterpolantAutomaton]: Switched to On-DemandConstruction mode: deterministic interpolant automaton has 11 states. [2022-02-09 08:40:35,927 INFO L154 InterpolantAutomaton]: Switched to On-DemandConstruction mode: deterministic interpolant automaton has 13 states. [2022-02-09 08:40:35,927 INFO L154 InterpolantAutomaton]: Switched to On-DemandConstruction mode: deterministic interpolant automaton has 8 states. [2022-02-09 08:40:35,927 INFO L154 InterpolantAutomaton]: Switched to On-DemandConstruction mode: deterministic interpolant automaton has 2 states. [2022-02-09 08:40:36,186 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-02-09 08:40:36,186 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-02-09 08:40:36,186 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2022-02-09 08:40:36,186 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-02-09 08:40:36,186 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-02-09 08:40:36,187 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2022-02-09 08:40:36,205 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Forceful destruction successful, exit code 0 [2022-02-09 08:40:36,387 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5,7 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-02-09 08:40:36,388 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONASSERT === [ULTIMATE.startErr0ASSERT_VIOLATIONASSERT, ULTIMATE.startErr0INUSE_VIOLATION, ULTIMATE.startErr1INUSE_VIOLATION] === [2022-02-09 08:40:36,388 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-09 08:40:36,388 INFO L85 PathProgramCache]: Analyzing trace with hash -134249091, now seen corresponding path program 3 times [2022-02-09 08:40:36,388 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-09 08:40:36,388 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1311805032] [2022-02-09 08:40:36,388 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-09 08:40:36,388 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-09 08:40:36,400 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-09 08:40:36,525 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 0 proven. 16 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-02-09 08:40:36,526 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-09 08:40:36,526 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1311805032] [2022-02-09 08:40:36,526 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1311805032] provided 0 perfect and 1 imperfect interpolant sequences [2022-02-09 08:40:36,526 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [15306899] [2022-02-09 08:40:36,526 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-02-09 08:40:36,526 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-02-09 08:40:36,526 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-02-09 08:40:36,527 INFO L229 MonitoredProcess]: Starting monitored process 8 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-02-09 08:40:36,528 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (8)] Waiting until timeout for monitored process [2022-02-09 08:40:36,555 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 4 check-sat command(s) [2022-02-09 08:40:36,555 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-02-09 08:40:36,558 WARN L261 TraceCheckSpWp]: Trace formula consists of 61 conjuncts, 36 conjunts are in the unsatisfiable core [2022-02-09 08:40:36,560 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-02-09 08:40:36,826 INFO L353 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-02-09 08:40:36,826 INFO L387 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 5 select indices, 5 select index equivalence classes, 0 disjoint index pairs (out of 10 index pairs), introduced 9 new quantified variables, introduced 10 case distinctions, treesize of input 27 treesize of output 99 [2022-02-09 08:40:37,001 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 0 proven. 16 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-02-09 08:40:37,001 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-02-09 08:40:38,060 INFO L353 Elim1Store]: treesize reduction 25, result has 93.1 percent of original size [2022-02-09 08:40:38,061 INFO L387 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 10 select indices, 10 select index equivalence classes, 0 disjoint index pairs (out of 45 index pairs), introduced 18 new quantified variables, introduced 45 case distinctions, treesize of input 23 treesize of output 371 [2022-02-09 08:41:11,690 INFO L353 Elim1Store]: treesize reduction 25, result has 94.3 percent of original size [2022-02-09 08:41:11,691 INFO L387 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 11 select indices, 11 select index equivalence classes, 0 disjoint index pairs (out of 55 index pairs), introduced 20 new quantified variables, introduced 55 case distinctions, treesize of input 25 treesize of output 455 [2022-02-09 08:42:10,215 INFO L353 Elim1Store]: treesize reduction 20, result has 93.1 percent of original size [2022-02-09 08:42:10,215 INFO L387 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 9 select indices, 9 select index equivalence classes, 0 disjoint index pairs (out of 36 index pairs), introduced 16 new quantified variables, introduced 36 case distinctions, treesize of input 21 treesize of output 300 [2022-02-09 08:42:13,295 INFO L353 Elim1Store]: treesize reduction 25, result has 95.3 percent of original size [2022-02-09 08:42:13,296 INFO L387 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 12 select indices, 12 select index equivalence classes, 0 disjoint index pairs (out of 66 index pairs), introduced 22 new quantified variables, introduced 66 case distinctions, treesize of input 27 treesize of output 547 [2022-02-09 08:44:12,923 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 0 proven. 16 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-02-09 08:44:12,923 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleZ3 [15306899] provided 0 perfect and 2 imperfect interpolant sequences [2022-02-09 08:44:12,923 INFO L191 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-02-09 08:44:12,924 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [10, 10, 10] total 25 [2022-02-09 08:44:12,924 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [336927493] [2022-02-09 08:44:12,924 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-02-09 08:44:12,925 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 26 states [2022-02-09 08:44:12,925 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-09 08:44:12,925 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 26 interpolants. [2022-02-09 08:44:12,925 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=96, Invalid=554, Unknown=0, NotChecked=0, Total=650 [2022-02-09 08:44:12,925 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-02-09 08:44:12,925 INFO L470 AbstractCegarLoop]: Abstraction has currently 0 states, but on-demand construction may add more states [2022-02-09 08:44:12,926 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 26 states, 26 states have (on average 1.3461538461538463) internal successors, (35), 25 states have internal predecessors, (35), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-09 08:44:12,926 INFO L154 InterpolantAutomaton]: Switched to On-DemandConstruction mode: deterministic interpolant automaton has 4 states. [2022-02-09 08:44:12,926 INFO L154 InterpolantAutomaton]: Switched to On-DemandConstruction mode: deterministic interpolant automaton has 8 states. [2022-02-09 08:44:12,926 INFO L154 InterpolantAutomaton]: Switched to On-DemandConstruction mode: deterministic interpolant automaton has 11 states. [2022-02-09 08:44:12,926 INFO L154 InterpolantAutomaton]: Switched to On-DemandConstruction mode: deterministic interpolant automaton has 13 states. [2022-02-09 08:44:12,926 INFO L154 InterpolantAutomaton]: Switched to On-DemandConstruction mode: deterministic interpolant automaton has 8 states. [2022-02-09 08:44:12,926 INFO L154 InterpolantAutomaton]: Switched to On-DemandConstruction mode: deterministic interpolant automaton has 11 states. [2022-02-09 08:44:12,926 INFO L154 InterpolantAutomaton]: Switched to On-DemandConstruction mode: deterministic interpolant automaton has 2 states. [2022-02-09 08:44:13,635 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-02-09 08:44:13,636 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-02-09 08:44:13,636 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2022-02-09 08:44:13,636 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-02-09 08:44:13,636 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-02-09 08:44:13,636 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2022-02-09 08:44:13,636 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 20 states. [2022-02-09 08:44:13,655 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (8)] Forceful destruction successful, exit code 0 [2022-02-09 08:44:13,836 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6,8 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-02-09 08:44:13,837 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONASSERT === [ULTIMATE.startErr0ASSERT_VIOLATIONASSERT, ULTIMATE.startErr0INUSE_VIOLATION, ULTIMATE.startErr1INUSE_VIOLATION] === [2022-02-09 08:44:13,837 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-09 08:44:13,837 INFO L85 PathProgramCache]: Analyzing trace with hash 1416526393, now seen corresponding path program 4 times [2022-02-09 08:44:13,837 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-09 08:44:13,837 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [37965936] [2022-02-09 08:44:13,838 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-09 08:44:13,838 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-09 08:44:13,844 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-09 08:44:13,905 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 3 proven. 21 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-02-09 08:44:13,905 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-09 08:44:13,905 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [37965936] [2022-02-09 08:44:13,905 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [37965936] provided 0 perfect and 1 imperfect interpolant sequences [2022-02-09 08:44:13,905 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [785754014] [2022-02-09 08:44:13,905 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-02-09 08:44:13,905 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-02-09 08:44:13,905 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-02-09 08:44:13,906 INFO L229 MonitoredProcess]: Starting monitored process 9 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-02-09 08:44:13,907 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (9)] Waiting until timeout for monitored process [2022-02-09 08:44:13,935 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-02-09 08:44:13,936 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-02-09 08:44:13,936 INFO L263 TraceCheckSpWp]: Trace formula consists of 71 conjuncts, 10 conjunts are in the unsatisfiable core [2022-02-09 08:44:13,937 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-02-09 08:44:13,965 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 3 proven. 21 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-02-09 08:44:13,965 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-02-09 08:44:14,012 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 3 proven. 21 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-02-09 08:44:14,013 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleZ3 [785754014] provided 0 perfect and 2 imperfect interpolant sequences [2022-02-09 08:44:14,013 INFO L191 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-02-09 08:44:14,013 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [10, 10, 10] total 14 [2022-02-09 08:44:14,013 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [806835596] [2022-02-09 08:44:14,013 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-02-09 08:44:14,013 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 15 states [2022-02-09 08:44:14,013 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-09 08:44:14,014 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 15 interpolants. [2022-02-09 08:44:14,014 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=69, Invalid=141, Unknown=0, NotChecked=0, Total=210 [2022-02-09 08:44:14,014 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-02-09 08:44:14,014 INFO L470 AbstractCegarLoop]: Abstraction has currently 0 states, but on-demand construction may add more states [2022-02-09 08:44:14,014 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 15 states, 15 states have (on average 1.9333333333333333) internal successors, (29), 14 states have internal predecessors, (29), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-09 08:44:14,014 INFO L154 InterpolantAutomaton]: Switched to On-DemandConstruction mode: deterministic interpolant automaton has 4 states. [2022-02-09 08:44:14,014 INFO L154 InterpolantAutomaton]: Switched to On-DemandConstruction mode: deterministic interpolant automaton has 8 states. [2022-02-09 08:44:14,014 INFO L154 InterpolantAutomaton]: Switched to On-DemandConstruction mode: deterministic interpolant automaton has 11 states. [2022-02-09 08:44:14,014 INFO L154 InterpolantAutomaton]: Switched to On-DemandConstruction mode: deterministic interpolant automaton has 13 states. [2022-02-09 08:44:14,014 INFO L154 InterpolantAutomaton]: Switched to On-DemandConstruction mode: deterministic interpolant automaton has 8 states. [2022-02-09 08:44:14,014 INFO L154 InterpolantAutomaton]: Switched to On-DemandConstruction mode: deterministic interpolant automaton has 11 states. [2022-02-09 08:44:14,014 INFO L154 InterpolantAutomaton]: Switched to On-DemandConstruction mode: deterministic interpolant automaton has 20 states. [2022-02-09 08:44:14,014 INFO L154 InterpolantAutomaton]: Switched to On-DemandConstruction mode: deterministic interpolant automaton has 2 states. [2022-02-09 08:44:14,233 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-02-09 08:44:14,234 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-02-09 08:44:14,234 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2022-02-09 08:44:14,234 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-02-09 08:44:14,234 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-02-09 08:44:14,234 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2022-02-09 08:44:14,234 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 21 states. [2022-02-09 08:44:14,234 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 26 states. [2022-02-09 08:44:14,251 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (9)] Forceful destruction successful, exit code 0 [2022-02-09 08:44:14,434 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 9 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable7 [2022-02-09 08:44:14,435 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONASSERT === [ULTIMATE.startErr0ASSERT_VIOLATIONASSERT, ULTIMATE.startErr0INUSE_VIOLATION, ULTIMATE.startErr1INUSE_VIOLATION] === [2022-02-09 08:44:14,435 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-09 08:44:14,435 INFO L85 PathProgramCache]: Analyzing trace with hash -21771450, now seen corresponding path program 5 times [2022-02-09 08:44:14,435 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-09 08:44:14,436 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [88768374] [2022-02-09 08:44:14,436 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-09 08:44:14,436 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-09 08:44:14,446 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-09 08:44:14,504 INFO L134 CoverageAnalysis]: Checked inductivity of 37 backedges. 21 proven. 16 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-02-09 08:44:14,504 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-09 08:44:14,504 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [88768374] [2022-02-09 08:44:14,504 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [88768374] provided 0 perfect and 1 imperfect interpolant sequences [2022-02-09 08:44:14,504 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2101053280] [2022-02-09 08:44:14,504 INFO L93 rtionOrderModulation]: Changing assertion order to INSIDE_LOOP_FIRST1 [2022-02-09 08:44:14,504 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-02-09 08:44:14,504 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-02-09 08:44:14,505 INFO L229 MonitoredProcess]: Starting monitored process 10 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-02-09 08:44:14,506 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (10)] Waiting until timeout for monitored process [2022-02-09 08:44:14,530 INFO L228 tOrderPrioritization]: Assert order INSIDE_LOOP_FIRST1 issued 5 check-sat command(s) [2022-02-09 08:44:14,531 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-02-09 08:44:14,531 INFO L263 TraceCheckSpWp]: Trace formula consists of 76 conjuncts, 11 conjunts are in the unsatisfiable core [2022-02-09 08:44:14,532 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-02-09 08:44:14,565 INFO L134 CoverageAnalysis]: Checked inductivity of 37 backedges. 28 proven. 9 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-02-09 08:44:14,565 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-02-09 08:44:14,598 INFO L134 CoverageAnalysis]: Checked inductivity of 37 backedges. 28 proven. 9 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-02-09 08:44:14,599 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2101053280] provided 0 perfect and 2 imperfect interpolant sequences [2022-02-09 08:44:14,599 INFO L191 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-02-09 08:44:14,599 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 11, 11] total 12 [2022-02-09 08:44:14,599 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1920159844] [2022-02-09 08:44:14,599 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-02-09 08:44:14,599 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 13 states [2022-02-09 08:44:14,599 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-09 08:44:14,600 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 13 interpolants. [2022-02-09 08:44:14,600 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=53, Invalid=103, Unknown=0, NotChecked=0, Total=156 [2022-02-09 08:44:14,600 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-02-09 08:44:14,600 INFO L470 AbstractCegarLoop]: Abstraction has currently 0 states, but on-demand construction may add more states [2022-02-09 08:44:14,600 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 13 states, 13 states have (on average 1.7692307692307692) internal successors, (23), 12 states have internal predecessors, (23), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-09 08:44:14,600 INFO L154 InterpolantAutomaton]: Switched to On-DemandConstruction mode: deterministic interpolant automaton has 4 states. [2022-02-09 08:44:14,600 INFO L154 InterpolantAutomaton]: Switched to On-DemandConstruction mode: deterministic interpolant automaton has 8 states. [2022-02-09 08:44:14,600 INFO L154 InterpolantAutomaton]: Switched to On-DemandConstruction mode: deterministic interpolant automaton has 11 states. [2022-02-09 08:44:14,600 INFO L154 InterpolantAutomaton]: Switched to On-DemandConstruction mode: deterministic interpolant automaton has 13 states. [2022-02-09 08:44:14,600 INFO L154 InterpolantAutomaton]: Switched to On-DemandConstruction mode: deterministic interpolant automaton has 8 states. [2022-02-09 08:44:14,600 INFO L154 InterpolantAutomaton]: Switched to On-DemandConstruction mode: deterministic interpolant automaton has 11 states. [2022-02-09 08:44:14,600 INFO L154 InterpolantAutomaton]: Switched to On-DemandConstruction mode: deterministic interpolant automaton has 21 states. [2022-02-09 08:44:14,600 INFO L154 InterpolantAutomaton]: Switched to On-DemandConstruction mode: deterministic interpolant automaton has 26 states. [2022-02-09 08:44:14,600 INFO L154 InterpolantAutomaton]: Switched to On-DemandConstruction mode: deterministic interpolant automaton has 2 states. [2022-02-09 08:44:14,714 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-02-09 08:44:14,714 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-02-09 08:44:14,714 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2022-02-09 08:44:14,714 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-02-09 08:44:14,714 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-02-09 08:44:14,714 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2022-02-09 08:44:14,714 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 21 states. [2022-02-09 08:44:14,714 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 26 states. [2022-02-09 08:44:14,714 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-02-09 08:44:14,731 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (10)] Ended with exit code 0 [2022-02-09 08:44:14,915 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8,10 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-02-09 08:44:14,915 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONASSERT === [ULTIMATE.startErr0ASSERT_VIOLATIONASSERT, ULTIMATE.startErr0INUSE_VIOLATION, ULTIMATE.startErr1INUSE_VIOLATION] === [2022-02-09 08:44:14,916 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-09 08:44:14,916 INFO L85 PathProgramCache]: Analyzing trace with hash 150703961, now seen corresponding path program 6 times [2022-02-09 08:44:14,916 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-09 08:44:14,916 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [808902725] [2022-02-09 08:44:14,916 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-09 08:44:14,916 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-09 08:44:14,941 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-09 08:44:15,081 INFO L134 CoverageAnalysis]: Checked inductivity of 39 backedges. 0 proven. 39 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-02-09 08:44:15,081 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-09 08:44:15,081 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [808902725] [2022-02-09 08:44:15,082 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [808902725] provided 0 perfect and 1 imperfect interpolant sequences [2022-02-09 08:44:15,082 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [681709303] [2022-02-09 08:44:15,082 INFO L93 rtionOrderModulation]: Changing assertion order to MIX_INSIDE_OUTSIDE [2022-02-09 08:44:15,082 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-02-09 08:44:15,082 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-02-09 08:44:15,083 INFO L229 MonitoredProcess]: Starting monitored process 11 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-02-09 08:44:15,083 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (11)] Waiting until timeout for monitored process [2022-02-09 08:44:15,113 INFO L228 tOrderPrioritization]: Assert order MIX_INSIDE_OUTSIDE issued 5 check-sat command(s) [2022-02-09 08:44:15,113 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-02-09 08:44:15,114 WARN L261 TraceCheckSpWp]: Trace formula consists of 81 conjuncts, 41 conjunts are in the unsatisfiable core [2022-02-09 08:44:15,115 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-02-09 08:44:17,864 INFO L353 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-02-09 08:44:17,865 INFO L387 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 11 select indices, 11 select index equivalence classes, 0 disjoint index pairs (out of 55 index pairs), introduced 21 new quantified variables, introduced 55 case distinctions, treesize of input 146 treesize of output 524 [2022-02-09 08:44:39,973 INFO L134 CoverageAnalysis]: Checked inductivity of 39 backedges. 0 proven. 39 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-02-09 08:44:39,974 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-02-09 08:44:41,715 INFO L353 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-02-09 08:44:41,716 INFO L387 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 17 select indices, 17 select index equivalence classes, 0 disjoint index pairs (out of 136 index pairs), introduced 32 new quantified variables, introduced 136 case distinctions, treesize of input 79 treesize of output 1162 Received shutdown request... [2022-02-09 08:54:06,701 WARN L340 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true -t:1000 (2)] Timeout while monitored process is still running, waiting 1000 ms for graceful end [2022-02-09 08:54:06,714 WARN L244 SmtUtils]: Removed 2 from assertion stack [2022-02-09 08:54:06,716 INFO L764 garLoopResultBuilder]: Registering result TIMEOUT for location ULTIMATE.startErr0ASSERT_VIOLATIONASSERT (2 of 3 remaining) [2022-02-09 08:54:06,734 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (11)] Forceful destruction successful, exit code 0 [2022-02-09 08:54:06,739 WARN L340 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (11)] Timeout while monitored process is still running, waiting 1000 ms for graceful end [2022-02-09 08:54:06,740 WARN L340 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Timeout while monitored process is still running, waiting 1000 ms for graceful end [2022-02-09 08:54:06,917 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 11 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2022-02-09 08:54:06,917 WARN L594 AbstractCegarLoop]: Verification canceled: while PartialOrderCegarLoop was analyzing trace of length 21 with TraceHistMax 8,while TraceCheckSpWp was constructing backward predicates,while SimplifyDDAWithTimeout was simplifying term of DAG size 4 for 16ms.. [2022-02-09 08:54:06,919 INFO L764 garLoopResultBuilder]: Registering result TIMEOUT for location ULTIMATE.startErr0INUSE_VIOLATION (1 of 3 remaining) [2022-02-09 08:54:06,919 INFO L764 garLoopResultBuilder]: Registering result TIMEOUT for location ULTIMATE.startErr1INUSE_VIOLATION (0 of 3 remaining) [2022-02-09 08:54:06,923 INFO L732 BasicCegarLoop]: Path program histogram: [6, 3, 1] [2022-02-09 08:54:06,924 INFO L230 ceAbstractionStarter]: Analysis of concurrent program completed with 1 thread instances [2022-02-09 08:54:06,924 INFO L180 ceAbstractionStarter]: Computing trace abstraction results [2022-02-09 08:54:06,925 INFO L202 PluginConnector]: Adding new model unroll-cond-4.wvr.bpl de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 09.02 08:54:06 BasicIcfg [2022-02-09 08:54:06,925 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-02-09 08:54:06,926 INFO L158 Benchmark]: Toolchain (without parser) took 835891.52ms. Allocated memory was 164.6MB in the beginning and 923.8MB in the end (delta: 759.2MB). Free memory was 121.9MB in the beginning and 616.1MB in the end (delta: -494.1MB). Peak memory consumption was 556.6MB. Max. memory is 8.0GB. [2022-02-09 08:54:06,926 INFO L158 Benchmark]: Boogie PL CUP Parser took 0.10ms. Allocated memory is still 164.6MB. Free memory is still 123.1MB. There was no memory consumed. Max. memory is 8.0GB. [2022-02-09 08:54:06,926 INFO L158 Benchmark]: Boogie Procedure Inliner took 21.08ms. Allocated memory is still 164.6MB. Free memory was 121.9MB in the beginning and 120.3MB in the end (delta: 1.6MB). Peak memory consumption was 2.1MB. Max. memory is 8.0GB. [2022-02-09 08:54:06,926 INFO L158 Benchmark]: Boogie Preprocessor took 23.53ms. Allocated memory is still 164.6MB. Free memory was 120.3MB in the beginning and 119.4MB in the end (delta: 877.3kB). Peak memory consumption was 1.0MB. Max. memory is 8.0GB. [2022-02-09 08:54:06,926 INFO L158 Benchmark]: RCFGBuilder took 276.23ms. Allocated memory is still 164.6MB. Free memory was 119.3MB in the beginning and 107.8MB in the end (delta: 11.5MB). Peak memory consumption was 11.5MB. Max. memory is 8.0GB. [2022-02-09 08:54:06,926 INFO L158 Benchmark]: TraceAbstraction took 835549.88ms. Allocated memory was 164.6MB in the beginning and 923.8MB in the end (delta: 759.2MB). Free memory was 107.4MB in the beginning and 616.1MB in the end (delta: -508.7MB). Peak memory consumption was 542.0MB. Max. memory is 8.0GB. [2022-02-09 08:54:06,927 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * Boogie PL CUP Parser took 0.10ms. Allocated memory is still 164.6MB. Free memory is still 123.1MB. There was no memory consumed. Max. memory is 8.0GB. * Boogie Procedure Inliner took 21.08ms. Allocated memory is still 164.6MB. Free memory was 121.9MB in the beginning and 120.3MB in the end (delta: 1.6MB). Peak memory consumption was 2.1MB. Max. memory is 8.0GB. * Boogie Preprocessor took 23.53ms. Allocated memory is still 164.6MB. Free memory was 120.3MB in the beginning and 119.4MB in the end (delta: 877.3kB). Peak memory consumption was 1.0MB. Max. memory is 8.0GB. * RCFGBuilder took 276.23ms. Allocated memory is still 164.6MB. Free memory was 119.3MB in the beginning and 107.8MB in the end (delta: 11.5MB). Peak memory consumption was 11.5MB. Max. memory is 8.0GB. * TraceAbstraction took 835549.88ms. Allocated memory was 164.6MB in the beginning and 923.8MB in the end (delta: 759.2MB). Free memory was 107.4MB in the beginning and 616.1MB in the end (delta: -508.7MB). Peak memory consumption was 542.0MB. Max. memory is 8.0GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: Independence relation benchmarks ThreadSeparatingIndependenceRelation.Independence Queries: [ total: 442, positive: 300, positive conditional: 300, positive unconditional: 0, negative: 142, negative conditional: 142, negative unconditional: 0, unknown: 0, unknown conditional: 0, unknown unconditional: 0] , ThreadSeparatingIndependenceRelation.Statistics on underlying relation: ConditionTransformingIndependenceRelation.Independence Queries: [ total: 300, positive: 300, positive conditional: 300, positive unconditional: 0, negative: 0, negative conditional: 0, negative unconditional: 0, unknown: 0, unknown conditional: 0, unknown unconditional: 0] , ConditionTransformingIndependenceRelation.Statistics on underlying relation: DisjunctiveConditionalIndependenceRelation.Independence Queries: [ total: 300, positive: 300, positive conditional: 300, positive unconditional: 0, negative: 0, negative conditional: 0, negative unconditional: 0, unknown: 0, unknown conditional: 0, unknown unconditional: 0] , DisjunctiveConditionalIndependenceRelation.Statistics on underlying relation: ConditionTransformingIndependenceRelation.Independence Queries: [ total: 300, positive: 300, positive conditional: 258, positive unconditional: 42, negative: 0, negative conditional: 0, negative unconditional: 0, unknown: 0, unknown conditional: 0, unknown unconditional: 0] , ConditionTransformingIndependenceRelation.Statistics on underlying relation: SemanticConditionEliminator.Independence Queries: [ total: 300, positive: 300, positive conditional: 246, positive unconditional: 54, negative: 0, negative conditional: 0, negative unconditional: 0, unknown: 0, unknown conditional: 0, unknown unconditional: 0] , SemanticConditionEliminator.Statistics on underlying relation: CachedIndependenceRelation.Independence Queries: [ total: 300, positive: 300, positive conditional: 246, positive unconditional: 54, negative: 0, negative conditional: 0, negative unconditional: 0, unknown: 0, unknown conditional: 0, unknown unconditional: 0] , CachedIndependenceRelation.Statistics on underlying relation: UnionIndependenceRelation.Independence Queries: [ total: 9, positive: 9, positive conditional: 0, positive unconditional: 9, negative: 0, negative conditional: 0, negative unconditional: 0, unknown: 0, unknown conditional: 0, unknown unconditional: 0] , UnionIndependenceRelation.Statistics on underlying relations: [ SyntacticIndependenceRelation.Independence Queries: [ total: 9, positive: 9, positive conditional: 0, positive unconditional: 9, negative: 0, negative conditional: 0, negative unconditional: 0, unknown: 0, unknown conditional: 0, unknown unconditional: 0] , SemanticIndependenceRelation.Independence Queries: [ total: 0, positive: 0, positive conditional: 0, positive unconditional: 0, negative: 0, negative conditional: 0, negative unconditional: 0, unknown: 0, unknown conditional: 0, unknown unconditional: 0] , SemanticIndependenceRelation.Query Time [ms]: [ total: 0, positive: 0, positive conditional: 0, positive unconditional: 0, negative: 0, negative conditional: 0, negative unconditional: 0, unknown: 0, unknown conditional: 0, unknown unconditional: 0] ], Cache Queries: [ total: 300, positive: 291, positive conditional: 246, positive unconditional: 45, negative: 0, negative conditional: 0, negative unconditional: 0, unknown: 9, unknown conditional: 0, unknown unconditional: 9] , Statistics on independence cache: Total cache size (in pairs): 9, Positive cache size: 9, Positive conditional cache size: 0, Positive unconditional cache size: 9, Negative cache size: 0, Negative conditional cache size: 0, Negative unconditional cache size: 0, Eliminated conditions: 12, Maximal queried relation: 0, Independence queries for same thread: 142 - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - TimeoutResultAtElement [Line: 65]: Timeout (TraceAbstraction) Unable to prove that assertion always holds Cancelled while PartialOrderCegarLoop was analyzing trace of length 21 with TraceHistMax 8,while TraceCheckSpWp was constructing backward predicates,while SimplifyDDAWithTimeout was simplifying term of DAG size 4 for 16ms.. - TimeoutResultAtElement [Line: 60]: Timeout (TraceAbstraction) Unable to prove that petrification did provide enough thread instances (tool internal message, not intended for end users) Cancelled while PartialOrderCegarLoop was analyzing trace of length 21 with TraceHistMax 8,while TraceCheckSpWp was constructing backward predicates,while SimplifyDDAWithTimeout was simplifying term of DAG size 4 for 16ms.. - TimeoutResultAtElement [Line: 60]: Timeout (TraceAbstraction) Unable to prove that petrification did provide enough thread instances (tool internal message, not intended for end users) Cancelled while PartialOrderCegarLoop was analyzing trace of length 21 with TraceHistMax 8,while TraceCheckSpWp was constructing backward predicates,while SimplifyDDAWithTimeout was simplifying term of DAG size 4 for 16ms.. - StatisticsResult: Ultimate Automizer benchmark data with 1 thread instances CFG has 5 procedures, 22 locations, 3 error locations. Started 1 CEGAR loops. OverallTime: 835.5s, OverallIterations: 10, TraceHistogramMax: 0, PathProgramHistogramMax: 6, EmptinessCheckTime: 0.0s, AutomataDifference: 0.0s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 2.1s, HoareTripleCheckerStatistics: , PredicateUnifierStatistics: No data available, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=0occurred in iteration=0, InterpolantAutomatonStates: 115, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: No data available, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: 0.0s SsaConstructionTime, 0.2s SatisfiabilityAnalysisTime, 239.1s InterpolantComputationTime, 248 NumberOfCodeBlocks, 248 NumberOfCodeBlocksAsserted, 28 NumberOfCheckSat, 342 ConstructedInterpolants, 0 QuantifiedInterpolants, 3281 SizeOfPredicates, 26 NumberOfNonLiveVariables, 443 ConjunctsInSsa, 131 ConjunctsInUnsatCore, 25 InterpolantComputations, 1 PerfectInterpolantSequences, 104/327 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate could not prove your program: Timeout Completed graceful shutdown