./Ultimate.py --spec ../../sv-benchmarks/c/properties/no-overflow.prp --file ../../sv-benchmarks/c/ldv-linux-3.12-rc1/linux-3.12-rc1.tar.xz-144_2a-drivers--media--usb--gspca--gspca_main.ko-entry_point.cil.out.i --full-output --architecture 64bit -------------------------------------------------------------------------------- Checking for overflows Using default analysis Version 8393723b Calling Ultimate with: /usr/lib/jvm/java-1.11.0-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a612a7d4-9e11-44ba-88e8-b3c824144627/bin/uautomizer-TMbwUNV5ro/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a612a7d4-9e11-44ba-88e8-b3c824144627/bin/uautomizer-TMbwUNV5ro/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a612a7d4-9e11-44ba-88e8-b3c824144627/bin/uautomizer-TMbwUNV5ro/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a612a7d4-9e11-44ba-88e8-b3c824144627/bin/uautomizer-TMbwUNV5ro/config/AutomizerReach.xml -i ../../sv-benchmarks/c/ldv-linux-3.12-rc1/linux-3.12-rc1.tar.xz-144_2a-drivers--media--usb--gspca--gspca_main.ko-entry_point.cil.out.i -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a612a7d4-9e11-44ba-88e8-b3c824144627/bin/uautomizer-TMbwUNV5ro/config/svcomp-Overflow-64bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a612a7d4-9e11-44ba-88e8-b3c824144627/bin/uautomizer-TMbwUNV5ro --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! overflow) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash 161acb090810893f5857465330b1e9af98cd436d8b1ab4337fc3709fda2d3260 --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-8393723 [2022-11-18 20:09:09,317 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-11-18 20:09:09,320 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-11-18 20:09:09,360 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-11-18 20:09:09,360 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-11-18 20:09:09,362 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-11-18 20:09:09,364 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-11-18 20:09:09,366 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-11-18 20:09:09,370 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-11-18 20:09:09,372 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-11-18 20:09:09,373 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-11-18 20:09:09,375 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-11-18 20:09:09,377 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-11-18 20:09:09,381 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-11-18 20:09:09,382 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-11-18 20:09:09,384 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-11-18 20:09:09,386 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-11-18 20:09:09,391 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-11-18 20:09:09,393 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-11-18 20:09:09,396 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-11-18 20:09:09,401 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-11-18 20:09:09,403 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-11-18 20:09:09,404 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-11-18 20:09:09,406 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-11-18 20:09:09,410 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-11-18 20:09:09,416 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-11-18 20:09:09,416 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-11-18 20:09:09,417 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-11-18 20:09:09,419 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-11-18 20:09:09,420 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-11-18 20:09:09,420 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-11-18 20:09:09,421 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-11-18 20:09:09,423 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-11-18 20:09:09,424 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-11-18 20:09:09,426 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-11-18 20:09:09,427 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-11-18 20:09:09,428 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-11-18 20:09:09,428 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-11-18 20:09:09,428 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-11-18 20:09:09,429 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-11-18 20:09:09,430 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-11-18 20:09:09,431 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a612a7d4-9e11-44ba-88e8-b3c824144627/bin/uautomizer-TMbwUNV5ro/config/svcomp-Overflow-64bit-Automizer_Default.epf [2022-11-18 20:09:09,463 INFO L113 SettingsManager]: Loading preferences was successful [2022-11-18 20:09:09,463 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-11-18 20:09:09,463 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-11-18 20:09:09,463 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-11-18 20:09:09,464 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-11-18 20:09:09,464 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-11-18 20:09:09,465 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-11-18 20:09:09,465 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-11-18 20:09:09,465 INFO L138 SettingsManager]: * Use SBE=true [2022-11-18 20:09:09,466 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-11-18 20:09:09,466 INFO L138 SettingsManager]: * Check unreachability of error function in SV-COMP mode=false [2022-11-18 20:09:09,466 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-11-18 20:09:09,466 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-11-18 20:09:09,466 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-11-18 20:09:09,467 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-11-18 20:09:09,467 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-11-18 20:09:09,467 INFO L138 SettingsManager]: * Check absence of signed integer overflows=true [2022-11-18 20:09:09,467 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-11-18 20:09:09,467 INFO L138 SettingsManager]: * Use constant arrays=true [2022-11-18 20:09:09,467 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-11-18 20:09:09,468 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-11-18 20:09:09,468 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-11-18 20:09:09,468 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-11-18 20:09:09,468 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-18 20:09:09,469 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-11-18 20:09:09,469 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-11-18 20:09:09,469 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-11-18 20:09:09,469 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-11-18 20:09:09,469 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-11-18 20:09:09,470 INFO L138 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2022-11-18 20:09:09,470 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-11-18 20:09:09,470 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-11-18 20:09:09,470 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a612a7d4-9e11-44ba-88e8-b3c824144627/bin/uautomizer-TMbwUNV5ro/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a612a7d4-9e11-44ba-88e8-b3c824144627/bin/uautomizer-TMbwUNV5ro Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! overflow) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 161acb090810893f5857465330b1e9af98cd436d8b1ab4337fc3709fda2d3260 [2022-11-18 20:09:09,770 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-11-18 20:09:09,792 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-11-18 20:09:09,795 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-11-18 20:09:09,796 INFO L271 PluginConnector]: Initializing CDTParser... [2022-11-18 20:09:09,799 INFO L275 PluginConnector]: CDTParser initialized [2022-11-18 20:09:09,800 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a612a7d4-9e11-44ba-88e8-b3c824144627/bin/uautomizer-TMbwUNV5ro/../../sv-benchmarks/c/ldv-linux-3.12-rc1/linux-3.12-rc1.tar.xz-144_2a-drivers--media--usb--gspca--gspca_main.ko-entry_point.cil.out.i [2022-11-18 20:09:09,875 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a612a7d4-9e11-44ba-88e8-b3c824144627/bin/uautomizer-TMbwUNV5ro/data/51e2f3c8a/568ed983327f44aea5281bd50daed2db/FLAG010077948 [2022-11-18 20:09:10,834 INFO L306 CDTParser]: Found 1 translation units. [2022-11-18 20:09:10,834 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a612a7d4-9e11-44ba-88e8-b3c824144627/sv-benchmarks/c/ldv-linux-3.12-rc1/linux-3.12-rc1.tar.xz-144_2a-drivers--media--usb--gspca--gspca_main.ko-entry_point.cil.out.i [2022-11-18 20:09:10,879 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a612a7d4-9e11-44ba-88e8-b3c824144627/bin/uautomizer-TMbwUNV5ro/data/51e2f3c8a/568ed983327f44aea5281bd50daed2db/FLAG010077948 [2022-11-18 20:09:11,301 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a612a7d4-9e11-44ba-88e8-b3c824144627/bin/uautomizer-TMbwUNV5ro/data/51e2f3c8a/568ed983327f44aea5281bd50daed2db [2022-11-18 20:09:11,304 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-11-18 20:09:11,307 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-11-18 20:09:11,312 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-11-18 20:09:11,312 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-11-18 20:09:11,316 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-11-18 20:09:11,317 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 18.11 08:09:11" (1/1) ... [2022-11-18 20:09:11,318 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@50c19e98 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 08:09:11, skipping insertion in model container [2022-11-18 20:09:11,318 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 18.11 08:09:11" (1/1) ... [2022-11-18 20:09:11,325 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-11-18 20:09:11,467 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-11-18 20:09:12,023 WARN L1258 CHandler]: Detected problem Invalid redeclaration of the name match at C: (*match)(struct device * , struct v4l2_async_subdev * ) [4482] [2022-11-18 20:09:12,621 WARN L234 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a612a7d4-9e11-44ba-88e8-b3c824144627/sv-benchmarks/c/ldv-linux-3.12-rc1/linux-3.12-rc1.tar.xz-144_2a-drivers--media--usb--gspca--gspca_main.ko-entry_point.cil.out.i[155153,155166] [2022-11-18 20:09:13,528 WARN L611 FunctionHandler]: implicit declaration of function ldv_xmalloc [2022-11-18 20:09:13,556 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-18 20:09:13,629 INFO L203 MainTranslator]: Completed pre-run [2022-11-18 20:09:13,711 WARN L1258 CHandler]: Detected problem Invalid redeclaration of the name match at C: (*match)(struct device * , struct v4l2_async_subdev * ) [4482] [2022-11-18 20:09:13,730 WARN L234 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a612a7d4-9e11-44ba-88e8-b3c824144627/sv-benchmarks/c/ldv-linux-3.12-rc1/linux-3.12-rc1.tar.xz-144_2a-drivers--media--usb--gspca--gspca_main.ko-entry_point.cil.out.i[155153,155166] [2022-11-18 20:09:14,246 WARN L611 FunctionHandler]: implicit declaration of function ldv_xmalloc [2022-11-18 20:09:14,257 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-18 20:09:14,344 INFO L208 MainTranslator]: Completed translation [2022-11-18 20:09:14,344 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 08:09:14 WrapperNode [2022-11-18 20:09:14,345 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-11-18 20:09:14,346 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-11-18 20:09:14,346 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-11-18 20:09:14,346 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-11-18 20:09:14,354 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 08:09:14" (1/1) ... [2022-11-18 20:09:14,473 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 08:09:14" (1/1) ... [2022-11-18 20:09:14,632 INFO L138 Inliner]: procedures = 242, calls = 2944, calls flagged for inlining = 95, calls inlined = 71, statements flattened = 4100 [2022-11-18 20:09:14,633 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-11-18 20:09:14,634 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-11-18 20:09:14,634 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-11-18 20:09:14,634 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-11-18 20:09:14,644 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 08:09:14" (1/1) ... [2022-11-18 20:09:14,645 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 08:09:14" (1/1) ... [2022-11-18 20:09:14,726 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 08:09:14" (1/1) ... [2022-11-18 20:09:14,726 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 08:09:14" (1/1) ... [2022-11-18 20:09:14,840 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 08:09:14" (1/1) ... [2022-11-18 20:09:14,876 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 08:09:14" (1/1) ... [2022-11-18 20:09:14,913 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 08:09:14" (1/1) ... [2022-11-18 20:09:14,929 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 08:09:14" (1/1) ... [2022-11-18 20:09:14,959 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-11-18 20:09:14,960 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-11-18 20:09:14,960 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-11-18 20:09:14,960 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-11-18 20:09:14,961 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 08:09:14" (1/1) ... [2022-11-18 20:09:14,968 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-18 20:09:14,979 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a612a7d4-9e11-44ba-88e8-b3c824144627/bin/uautomizer-TMbwUNV5ro/z3 [2022-11-18 20:09:14,993 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a612a7d4-9e11-44ba-88e8-b3c824144627/bin/uautomizer-TMbwUNV5ro/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-11-18 20:09:15,018 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a612a7d4-9e11-44ba-88e8-b3c824144627/bin/uautomizer-TMbwUNV5ro/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-11-18 20:09:15,038 INFO L130 BoogieDeclarations]: Found specification of procedure atomic_set [2022-11-18 20:09:15,038 INFO L138 BoogieDeclarations]: Found implementation of procedure atomic_set [2022-11-18 20:09:15,039 INFO L130 BoogieDeclarations]: Found specification of procedure wxh_to_mode [2022-11-18 20:09:15,040 INFO L138 BoogieDeclarations]: Found implementation of procedure wxh_to_mode [2022-11-18 20:09:15,040 INFO L130 BoogieDeclarations]: Found specification of procedure PDEBUG_MODE [2022-11-18 20:09:15,040 INFO L138 BoogieDeclarations]: Found implementation of procedure PDEBUG_MODE [2022-11-18 20:09:15,040 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$ [2022-11-18 20:09:15,040 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$ [2022-11-18 20:09:15,040 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop [2022-11-18 20:09:15,040 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop [2022-11-18 20:09:15,040 INFO L130 BoogieDeclarations]: Found specification of procedure usb_set_interface [2022-11-18 20:09:15,041 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_set_interface [2022-11-18 20:09:15,041 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_submit_urb [2022-11-18 20:09:15,042 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_submit_urb [2022-11-18 20:09:15,042 INFO L130 BoogieDeclarations]: Found specification of procedure frame_free [2022-11-18 20:09:15,042 INFO L138 BoogieDeclarations]: Found implementation of procedure frame_free [2022-11-18 20:09:15,042 INFO L130 BoogieDeclarations]: Found specification of procedure alt_xfer [2022-11-18 20:09:15,042 INFO L138 BoogieDeclarations]: Found implementation of procedure alt_xfer [2022-11-18 20:09:15,042 INFO L130 BoogieDeclarations]: Found specification of procedure vidioc_streamon [2022-11-18 20:09:15,042 INFO L138 BoogieDeclarations]: Found implementation of procedure vidioc_streamon [2022-11-18 20:09:15,042 INFO L130 BoogieDeclarations]: Found specification of procedure get_current [2022-11-18 20:09:15,043 INFO L138 BoogieDeclarations]: Found implementation of procedure get_current [2022-11-18 20:09:15,043 INFO L130 BoogieDeclarations]: Found specification of procedure dev_mmap [2022-11-18 20:09:15,043 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_mmap [2022-11-18 20:09:15,043 INFO L130 BoogieDeclarations]: Found specification of procedure usb_make_path [2022-11-18 20:09:15,043 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_make_path [2022-11-18 20:09:15,043 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_malloc [2022-11-18 20:09:15,043 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_malloc [2022-11-18 20:09:15,043 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_alloc_urb [2022-11-18 20:09:15,044 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_alloc_urb [2022-11-18 20:09:15,044 INFO L130 BoogieDeclarations]: Found specification of procedure vidioc_streamoff [2022-11-18 20:09:15,044 INFO L138 BoogieDeclarations]: Found implementation of procedure vidioc_streamoff [2022-11-18 20:09:15,044 INFO L130 BoogieDeclarations]: Found specification of procedure gspca_init_transfer [2022-11-18 20:09:15,044 INFO L138 BoogieDeclarations]: Found implementation of procedure gspca_init_transfer [2022-11-18 20:09:15,045 INFO L130 BoogieDeclarations]: Found specification of procedure dev_poll [2022-11-18 20:09:15,045 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_poll [2022-11-18 20:09:15,045 INFO L130 BoogieDeclarations]: Found specification of procedure mutex_lock_interruptible_nested [2022-11-18 20:09:15,045 INFO L138 BoogieDeclarations]: Found implementation of procedure mutex_lock_interruptible_nested [2022-11-18 20:09:15,045 INFO L130 BoogieDeclarations]: Found specification of procedure vidioc_reqbufs [2022-11-18 20:09:15,045 INFO L138 BoogieDeclarations]: Found implementation of procedure vidioc_reqbufs [2022-11-18 20:09:15,046 INFO L130 BoogieDeclarations]: Found specification of procedure frame_ready_nolock [2022-11-18 20:09:15,046 INFO L138 BoogieDeclarations]: Found implementation of procedure frame_ready_nolock [2022-11-18 20:09:15,046 INFO L130 BoogieDeclarations]: Found specification of procedure mutex_unlock [2022-11-18 20:09:15,046 INFO L138 BoogieDeclarations]: Found implementation of procedure mutex_unlock [2022-11-18 20:09:15,046 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_error [2022-11-18 20:09:15,046 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_error [2022-11-18 20:09:15,046 INFO L130 BoogieDeclarations]: Found specification of procedure frame_ready [2022-11-18 20:09:15,047 INFO L138 BoogieDeclarations]: Found implementation of procedure frame_ready [2022-11-18 20:09:15,047 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_dir_in [2022-11-18 20:09:15,047 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_dir_in [2022-11-18 20:09:15,047 INFO L130 BoogieDeclarations]: Found specification of procedure atomic_read [2022-11-18 20:09:15,048 INFO L138 BoogieDeclarations]: Found implementation of procedure atomic_read [2022-11-18 20:09:15,049 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memset [2022-11-18 20:09:15,049 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memset [2022-11-18 20:09:15,049 INFO L130 BoogieDeclarations]: Found specification of procedure assume_abort_if_not [2022-11-18 20:09:15,049 INFO L138 BoogieDeclarations]: Found implementation of procedure assume_abort_if_not [2022-11-18 20:09:15,049 INFO L130 BoogieDeclarations]: Found specification of procedure gspca_set_alt0 [2022-11-18 20:09:15,049 INFO L138 BoogieDeclarations]: Found implementation of procedure gspca_set_alt0 [2022-11-18 20:09:15,050 INFO L130 BoogieDeclarations]: Found specification of procedure bulk_irq [2022-11-18 20:09:15,050 INFO L138 BoogieDeclarations]: Found implementation of procedure bulk_irq [2022-11-18 20:09:15,050 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop___0 [2022-11-18 20:09:15,051 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop___0 [2022-11-18 20:09:15,051 INFO L130 BoogieDeclarations]: Found specification of procedure video_drvdata [2022-11-18 20:09:15,051 INFO L138 BoogieDeclarations]: Found implementation of procedure video_drvdata [2022-11-18 20:09:15,051 INFO L130 BoogieDeclarations]: Found specification of procedure ktime_get [2022-11-18 20:09:15,051 INFO L138 BoogieDeclarations]: Found implementation of procedure ktime_get [2022-11-18 20:09:15,051 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2022-11-18 20:09:15,052 INFO L130 BoogieDeclarations]: Found specification of procedure usb_free_coherent [2022-11-18 20:09:15,052 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_free_coherent [2022-11-18 20:09:15,053 INFO L130 BoogieDeclarations]: Found specification of procedure module_put [2022-11-18 20:09:15,053 INFO L138 BoogieDeclarations]: Found implementation of procedure module_put [2022-11-18 20:09:15,053 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2022-11-18 20:09:15,053 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_submit_urb_12 [2022-11-18 20:09:15,053 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_submit_urb_12 [2022-11-18 20:09:15,053 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_xmalloc [2022-11-18 20:09:15,053 INFO L130 BoogieDeclarations]: Found specification of procedure v4l2_ctrl_handler_free [2022-11-18 20:09:15,053 INFO L138 BoogieDeclarations]: Found implementation of procedure v4l2_ctrl_handler_free [2022-11-18 20:09:15,054 INFO L130 BoogieDeclarations]: Found specification of procedure alloc_and_submit_int_urb [2022-11-18 20:09:15,054 INFO L138 BoogieDeclarations]: Found implementation of procedure alloc_and_submit_int_urb [2022-11-18 20:09:15,054 INFO L130 BoogieDeclarations]: Found specification of procedure strlcpy [2022-11-18 20:09:15,054 INFO L138 BoogieDeclarations]: Found implementation of procedure strlcpy [2022-11-18 20:09:15,054 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~$Pointer$~X~$Pointer$~X~int~TO~int [2022-11-18 20:09:15,054 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~$Pointer$~X~$Pointer$~X~int~TO~int [2022-11-18 20:09:15,055 INFO L130 BoogieDeclarations]: Found specification of procedure usb_ifnum_to_if [2022-11-18 20:09:15,055 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_ifnum_to_if [2022-11-18 20:09:15,055 INFO L130 BoogieDeclarations]: Found specification of procedure int_irq [2022-11-18 20:09:15,055 INFO L138 BoogieDeclarations]: Found implementation of procedure int_irq [2022-11-18 20:09:15,055 INFO L130 BoogieDeclarations]: Found specification of procedure v4l2_ctrl_handler_setup [2022-11-18 20:09:15,055 INFO L138 BoogieDeclarations]: Found implementation of procedure v4l2_ctrl_handler_setup [2022-11-18 20:09:15,056 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2022-11-18 20:09:15,056 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2022-11-18 20:09:15,056 INFO L130 BoogieDeclarations]: Found specification of procedure fill_frame [2022-11-18 20:09:15,057 INFO L138 BoogieDeclarations]: Found implementation of procedure fill_frame [2022-11-18 20:09:15,057 INFO L130 BoogieDeclarations]: Found specification of procedure read_alloc [2022-11-18 20:09:15,057 INFO L138 BoogieDeclarations]: Found implementation of procedure read_alloc [2022-11-18 20:09:15,057 INFO L130 BoogieDeclarations]: Found specification of procedure gspca_stream_off [2022-11-18 20:09:15,057 INFO L138 BoogieDeclarations]: Found implementation of procedure gspca_stream_off [2022-11-18 20:09:15,057 INFO L130 BoogieDeclarations]: Found specification of procedure mutex_lock_nested [2022-11-18 20:09:15,058 INFO L138 BoogieDeclarations]: Found implementation of procedure mutex_lock_nested [2022-11-18 20:09:15,058 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int [2022-11-18 20:09:15,058 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_zalloc [2022-11-18 20:09:15,058 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_zalloc [2022-11-18 20:09:15,058 INFO L130 BoogieDeclarations]: Found specification of procedure isoc_irq [2022-11-18 20:09:15,058 INFO L138 BoogieDeclarations]: Found implementation of procedure isoc_irq [2022-11-18 20:09:15,058 INFO L130 BoogieDeclarations]: Found specification of procedure vidioc_dqbuf [2022-11-18 20:09:15,059 INFO L138 BoogieDeclarations]: Found implementation of procedure vidioc_dqbuf [2022-11-18 20:09:15,059 INFO L130 BoogieDeclarations]: Found specification of procedure gspca_input_create_urb [2022-11-18 20:09:15,059 INFO L138 BoogieDeclarations]: Found implementation of procedure gspca_input_create_urb [2022-11-18 20:09:15,059 INFO L130 BoogieDeclarations]: Found specification of procedure ns_to_timeval [2022-11-18 20:09:15,059 INFO L138 BoogieDeclarations]: Found implementation of procedure ns_to_timeval [2022-11-18 20:09:15,059 INFO L130 BoogieDeclarations]: Found specification of procedure video_ioctl2 [2022-11-18 20:09:15,060 INFO L138 BoogieDeclarations]: Found implementation of procedure video_ioctl2 [2022-11-18 20:09:15,061 INFO L130 BoogieDeclarations]: Found specification of procedure video_device_release_empty [2022-11-18 20:09:15,063 INFO L138 BoogieDeclarations]: Found implementation of procedure video_device_release_empty [2022-11-18 20:09:15,063 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int [2022-11-18 20:09:15,063 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_submit_urb_2 [2022-11-18 20:09:15,063 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_submit_urb_2 [2022-11-18 20:09:15,065 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_submit_urb_8 [2022-11-18 20:09:15,066 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_submit_urb_8 [2022-11-18 20:09:15,067 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_submit_urb_5 [2022-11-18 20:09:15,067 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_submit_urb_5 [2022-11-18 20:09:15,067 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_submit_urb_9 [2022-11-18 20:09:15,072 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_submit_urb_9 [2022-11-18 20:09:15,072 INFO L130 BoogieDeclarations]: Found specification of procedure gspca_input_destroy_urb [2022-11-18 20:09:15,073 INFO L138 BoogieDeclarations]: Found implementation of procedure gspca_input_destroy_urb [2022-11-18 20:09:15,073 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2022-11-18 20:09:15,073 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy [2022-11-18 20:09:15,073 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy [2022-11-18 20:09:15,073 INFO L130 BoogieDeclarations]: Found specification of procedure __create_pipe [2022-11-18 20:09:15,073 INFO L138 BoogieDeclarations]: Found implementation of procedure __create_pipe [2022-11-18 20:09:15,073 INFO L130 BoogieDeclarations]: Found specification of procedure usb_kill_urb [2022-11-18 20:09:15,073 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_kill_urb [2022-11-18 20:09:15,073 INFO L130 BoogieDeclarations]: Found specification of procedure dev_close [2022-11-18 20:09:15,074 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_close [2022-11-18 20:09:15,074 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~$Pointer$~X~$Pointer$~X~int~TO~VOID [2022-11-18 20:09:15,074 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~$Pointer$~X~$Pointer$~X~int~TO~VOID [2022-11-18 20:09:15,074 INFO L130 BoogieDeclarations]: Found specification of procedure kfree [2022-11-18 20:09:15,074 INFO L138 BoogieDeclarations]: Found implementation of procedure kfree [2022-11-18 20:09:15,074 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2022-11-18 20:09:15,074 INFO L130 BoogieDeclarations]: Found specification of procedure copy_to_user [2022-11-18 20:09:15,074 INFO L138 BoogieDeclarations]: Found implementation of procedure copy_to_user [2022-11-18 20:09:15,074 INFO L130 BoogieDeclarations]: Found specification of procedure v4l2_ctrl_subscribe_event [2022-11-18 20:09:15,074 INFO L138 BoogieDeclarations]: Found implementation of procedure v4l2_ctrl_subscribe_event [2022-11-18 20:09:15,075 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2022-11-18 20:09:15,075 INFO L130 BoogieDeclarations]: Found specification of procedure destroy_urbs [2022-11-18 20:09:15,075 INFO L138 BoogieDeclarations]: Found implementation of procedure destroy_urbs [2022-11-18 20:09:15,075 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-11-18 20:09:15,075 INFO L130 BoogieDeclarations]: Found specification of procedure vidioc_s_input [2022-11-18 20:09:15,075 INFO L138 BoogieDeclarations]: Found implementation of procedure vidioc_s_input [2022-11-18 20:09:15,075 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_undef_int [2022-11-18 20:09:15,075 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_undef_int [2022-11-18 20:09:15,075 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2022-11-18 20:09:15,076 INFO L130 BoogieDeclarations]: Found specification of procedure __bad_percpu_size [2022-11-18 20:09:15,076 INFO L130 BoogieDeclarations]: Found specification of procedure try_fmt_vid_cap [2022-11-18 20:09:15,076 INFO L138 BoogieDeclarations]: Found implementation of procedure try_fmt_vid_cap [2022-11-18 20:09:15,076 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~$Pointer$~TO~VOID [2022-11-18 20:09:15,076 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~$Pointer$~TO~VOID [2022-11-18 20:09:15,076 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~$Pointer$~TO~int [2022-11-18 20:09:15,076 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~$Pointer$~TO~int [2022-11-18 20:09:15,076 INFO L130 BoogieDeclarations]: Found specification of procedure usb_alloc_coherent [2022-11-18 20:09:15,076 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_alloc_coherent [2022-11-18 20:09:15,076 INFO L130 BoogieDeclarations]: Found specification of procedure dev_open [2022-11-18 20:09:15,077 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_open [2022-11-18 20:09:15,077 INFO L130 BoogieDeclarations]: Found specification of procedure gspca_vm_close [2022-11-18 20:09:15,077 INFO L138 BoogieDeclarations]: Found implementation of procedure gspca_vm_close [2022-11-18 20:09:15,077 INFO L130 BoogieDeclarations]: Found specification of procedure __wake_up [2022-11-18 20:09:15,077 INFO L138 BoogieDeclarations]: Found implementation of procedure __wake_up [2022-11-18 20:09:15,077 INFO L130 BoogieDeclarations]: Found specification of procedure vidioc_qbuf [2022-11-18 20:09:15,077 INFO L138 BoogieDeclarations]: Found implementation of procedure vidioc_qbuf [2022-11-18 20:09:15,077 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~$Pointer$~X~$Pointer$~TO~int [2022-11-18 20:09:15,077 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~$Pointer$~X~$Pointer$~TO~int [2022-11-18 20:09:15,078 INFO L130 BoogieDeclarations]: Found specification of procedure v4l2_event_unsubscribe [2022-11-18 20:09:15,078 INFO L138 BoogieDeclarations]: Found implementation of procedure v4l2_event_unsubscribe [2022-11-18 20:09:15,078 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_free_urb [2022-11-18 20:09:15,078 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_free_urb [2022-11-18 20:09:15,078 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-11-18 20:09:15,078 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~$Pointer$~X~$Pointer$~TO~VOID [2022-11-18 20:09:15,078 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~$Pointer$~X~$Pointer$~TO~VOID [2022-11-18 20:09:15,078 INFO L130 BoogieDeclarations]: Found specification of procedure gspca_vm_open [2022-11-18 20:09:15,078 INFO L138 BoogieDeclarations]: Found implementation of procedure gspca_vm_open [2022-11-18 20:09:15,079 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-11-18 20:09:15,079 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-11-18 20:09:15,818 INFO L235 CfgBuilder]: Building ICFG [2022-11-18 20:09:15,821 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-11-18 20:09:16,033 INFO L769 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_stopFINAL: assume true; [2022-11-18 20:09:17,594 INFO L769 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_stop___0FINAL: assume true; [2022-11-18 20:09:20,168 INFO L276 CfgBuilder]: Performing block encoding [2022-11-18 20:09:20,205 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-11-18 20:09:20,205 INFO L300 CfgBuilder]: Removed 0 assume(true) statements. [2022-11-18 20:09:20,209 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 18.11 08:09:20 BoogieIcfgContainer [2022-11-18 20:09:20,215 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-11-18 20:09:20,217 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-11-18 20:09:20,218 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-11-18 20:09:20,232 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-11-18 20:09:20,233 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 18.11 08:09:11" (1/3) ... [2022-11-18 20:09:20,233 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@19fc339d and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 18.11 08:09:20, skipping insertion in model container [2022-11-18 20:09:20,234 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 08:09:14" (2/3) ... [2022-11-18 20:09:20,234 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@19fc339d and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 18.11 08:09:20, skipping insertion in model container [2022-11-18 20:09:20,234 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 18.11 08:09:20" (3/3) ... [2022-11-18 20:09:20,235 INFO L112 eAbstractionObserver]: Analyzing ICFG linux-3.12-rc1.tar.xz-144_2a-drivers--media--usb--gspca--gspca_main.ko-entry_point.cil.out.i [2022-11-18 20:09:20,255 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-11-18 20:09:20,255 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 98 error locations. [2022-11-18 20:09:20,363 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-11-18 20:09:20,369 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@5854d44e, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-11-18 20:09:20,370 INFO L358 AbstractCegarLoop]: Starting to check reachability of 98 error locations. [2022-11-18 20:09:20,379 INFO L276 IsEmpty]: Start isEmpty. Operand has 1600 states, 1134 states have (on average 1.462962962962963) internal successors, (1659), 1259 states have internal predecessors, (1659), 287 states have call successors, (287), 82 states have call predecessors, (287), 80 states have return successors, (280), 274 states have call predecessors, (280), 280 states have call successors, (280) [2022-11-18 20:09:20,401 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 264 [2022-11-18 20:09:20,402 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 20:09:20,403 INFO L195 NwaCegarLoop]: trace histogram [40, 40, 40, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 20:09:20,403 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting gspca_vm_closeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW === [wxh_to_modeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW, wxh_to_modeErr1ASSERT_VIOLATIONINTEGER_OVERFLOW, frame_freeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (and 95 more)] === [2022-11-18 20:09:20,408 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 20:09:20,409 INFO L85 PathProgramCache]: Analyzing trace with hash 1356287557, now seen corresponding path program 1 times [2022-11-18 20:09:20,418 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 20:09:20,419 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1784880208] [2022-11-18 20:09:20,419 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 20:09:20,420 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 20:09:20,976 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:21,510 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-18 20:09:21,515 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:21,529 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-18 20:09:21,541 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:21,557 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-11-18 20:09:21,564 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:21,576 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-11-18 20:09:21,578 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:21,601 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 26 [2022-11-18 20:09:21,603 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:21,615 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 32 [2022-11-18 20:09:21,618 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:21,634 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 38 [2022-11-18 20:09:21,636 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:21,652 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2022-11-18 20:09:21,655 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:21,673 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2022-11-18 20:09:21,676 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:21,699 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 56 [2022-11-18 20:09:21,701 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:21,717 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 62 [2022-11-18 20:09:21,720 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:21,739 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 68 [2022-11-18 20:09:21,745 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:21,756 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 74 [2022-11-18 20:09:21,759 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:21,770 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 80 [2022-11-18 20:09:21,772 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:21,783 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 86 [2022-11-18 20:09:21,785 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:21,796 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 92 [2022-11-18 20:09:21,799 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:21,811 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 98 [2022-11-18 20:09:21,813 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:21,824 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 104 [2022-11-18 20:09:21,826 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:21,836 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 110 [2022-11-18 20:09:21,839 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:21,849 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 116 [2022-11-18 20:09:21,852 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:21,863 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 122 [2022-11-18 20:09:21,866 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:21,877 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 128 [2022-11-18 20:09:21,879 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:21,890 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 134 [2022-11-18 20:09:21,892 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:21,904 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 140 [2022-11-18 20:09:21,908 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:21,919 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 146 [2022-11-18 20:09:21,921 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:21,937 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 152 [2022-11-18 20:09:21,939 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:21,949 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 158 [2022-11-18 20:09:21,953 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:21,964 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 164 [2022-11-18 20:09:21,967 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:21,983 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 170 [2022-11-18 20:09:21,985 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:21,996 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 176 [2022-11-18 20:09:21,999 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:22,009 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 182 [2022-11-18 20:09:22,012 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:22,022 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 188 [2022-11-18 20:09:22,026 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:22,038 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 194 [2022-11-18 20:09:22,040 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:22,059 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 200 [2022-11-18 20:09:22,071 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:22,081 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 206 [2022-11-18 20:09:22,083 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:22,093 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 212 [2022-11-18 20:09:22,095 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:22,105 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 218 [2022-11-18 20:09:22,107 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:22,116 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 224 [2022-11-18 20:09:22,119 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:22,128 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 230 [2022-11-18 20:09:22,131 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:22,139 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 236 [2022-11-18 20:09:22,144 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:22,163 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 243 [2022-11-18 20:09:22,166 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:22,234 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 249 [2022-11-18 20:09:22,239 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:22,261 INFO L134 CoverageAnalysis]: Checked inductivity of 3124 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3124 trivial. 0 not checked. [2022-11-18 20:09:22,262 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 20:09:22,262 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1784880208] [2022-11-18 20:09:22,263 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1784880208] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 20:09:22,263 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-18 20:09:22,264 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-18 20:09:22,265 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [88030227] [2022-11-18 20:09:22,267 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 20:09:22,274 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-18 20:09:22,275 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 20:09:22,319 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-18 20:09:22,321 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-18 20:09:22,327 INFO L87 Difference]: Start difference. First operand has 1600 states, 1134 states have (on average 1.462962962962963) internal successors, (1659), 1259 states have internal predecessors, (1659), 287 states have call successors, (287), 82 states have call predecessors, (287), 80 states have return successors, (280), 274 states have call predecessors, (280), 280 states have call successors, (280) Second operand has 5 states, 5 states have (on average 11.6) internal successors, (58), 3 states have internal predecessors, (58), 2 states have call successors, (43), 3 states have call predecessors, (43), 1 states have return successors, (42), 1 states have call predecessors, (42), 1 states have call successors, (42) [2022-11-18 20:09:32,765 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 20:09:32,765 INFO L93 Difference]: Finished difference Result 5734 states and 8583 transitions. [2022-11-18 20:09:32,767 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-18 20:09:32,768 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 11.6) internal successors, (58), 3 states have internal predecessors, (58), 2 states have call successors, (43), 3 states have call predecessors, (43), 1 states have return successors, (42), 1 states have call predecessors, (42), 1 states have call successors, (42) Word has length 263 [2022-11-18 20:09:32,770 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 20:09:32,817 INFO L225 Difference]: With dead ends: 5734 [2022-11-18 20:09:32,817 INFO L226 Difference]: Without dead ends: 4086 [2022-11-18 20:09:32,834 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 92 GetRequests, 86 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2022-11-18 20:09:32,837 INFO L413 NwaCegarLoop]: 2159 mSDtfsCounter, 5425 mSDsluCounter, 3678 mSDsCounter, 0 mSdLazyCounter, 3052 mSolverCounterSat, 1919 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 8.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 5676 SdHoareTripleChecker+Valid, 5837 SdHoareTripleChecker+Invalid, 4971 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 1919 IncrementalHoareTripleChecker+Valid, 3052 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 9.6s IncrementalHoareTripleChecker+Time [2022-11-18 20:09:32,838 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [5676 Valid, 5837 Invalid, 4971 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [1919 Valid, 3052 Invalid, 0 Unknown, 0 Unchecked, 9.6s Time] [2022-11-18 20:09:32,863 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 4086 states. [2022-11-18 20:09:33,139 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 4086 to 2936. [2022-11-18 20:09:33,146 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2936 states, 2181 states have (on average 1.4552957359009628) internal successors, (3174), 2303 states have internal predecessors, (3174), 505 states have call successors, (505), 158 states have call predecessors, (505), 158 states have return successors, (505), 492 states have call predecessors, (505), 505 states have call successors, (505) [2022-11-18 20:09:33,168 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2936 states to 2936 states and 4184 transitions. [2022-11-18 20:09:33,171 INFO L78 Accepts]: Start accepts. Automaton has 2936 states and 4184 transitions. Word has length 263 [2022-11-18 20:09:33,172 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 20:09:33,172 INFO L495 AbstractCegarLoop]: Abstraction has 2936 states and 4184 transitions. [2022-11-18 20:09:33,173 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 11.6) internal successors, (58), 3 states have internal predecessors, (58), 2 states have call successors, (43), 3 states have call predecessors, (43), 1 states have return successors, (42), 1 states have call predecessors, (42), 1 states have call successors, (42) [2022-11-18 20:09:33,173 INFO L276 IsEmpty]: Start isEmpty. Operand 2936 states and 4184 transitions. [2022-11-18 20:09:33,177 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 265 [2022-11-18 20:09:33,178 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 20:09:33,178 INFO L195 NwaCegarLoop]: trace histogram [40, 40, 40, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 20:09:33,179 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-11-18 20:09:33,179 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting ULTIMATE.startErr4ASSERT_VIOLATIONINTEGER_OVERFLOW === [wxh_to_modeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW, wxh_to_modeErr1ASSERT_VIOLATIONINTEGER_OVERFLOW, frame_freeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (and 95 more)] === [2022-11-18 20:09:33,179 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 20:09:33,182 INFO L85 PathProgramCache]: Analyzing trace with hash -478933673, now seen corresponding path program 1 times [2022-11-18 20:09:33,183 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 20:09:33,183 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [13633488] [2022-11-18 20:09:33,183 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 20:09:33,183 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 20:09:33,351 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:33,627 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-18 20:09:33,629 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:33,639 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-18 20:09:33,643 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:33,652 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-11-18 20:09:33,654 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:33,663 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-11-18 20:09:33,665 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:33,675 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 26 [2022-11-18 20:09:33,677 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:33,686 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 32 [2022-11-18 20:09:33,688 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:33,698 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 38 [2022-11-18 20:09:33,702 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:33,710 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2022-11-18 20:09:33,713 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:33,724 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2022-11-18 20:09:33,727 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:33,736 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 56 [2022-11-18 20:09:33,738 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:33,747 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 62 [2022-11-18 20:09:33,749 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:33,759 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 68 [2022-11-18 20:09:33,763 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:33,779 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 74 [2022-11-18 20:09:33,781 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:33,798 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 80 [2022-11-18 20:09:33,800 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:33,812 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 86 [2022-11-18 20:09:33,814 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:33,823 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 92 [2022-11-18 20:09:33,825 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:33,833 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 98 [2022-11-18 20:09:33,835 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:33,843 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 104 [2022-11-18 20:09:33,845 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:33,853 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 110 [2022-11-18 20:09:33,855 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:33,863 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 116 [2022-11-18 20:09:33,865 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:33,873 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 122 [2022-11-18 20:09:33,875 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:33,884 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 128 [2022-11-18 20:09:33,886 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:33,894 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 134 [2022-11-18 20:09:33,897 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:33,905 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 140 [2022-11-18 20:09:33,907 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:33,916 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 146 [2022-11-18 20:09:33,920 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:33,929 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 152 [2022-11-18 20:09:33,931 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:33,939 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 158 [2022-11-18 20:09:33,942 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:33,950 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 164 [2022-11-18 20:09:33,952 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:33,961 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 170 [2022-11-18 20:09:33,963 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:33,971 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 176 [2022-11-18 20:09:33,974 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:33,982 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 182 [2022-11-18 20:09:33,984 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:33,992 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 188 [2022-11-18 20:09:33,994 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:34,003 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 194 [2022-11-18 20:09:34,005 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:34,013 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 200 [2022-11-18 20:09:34,015 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:34,023 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 206 [2022-11-18 20:09:34,026 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:34,033 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 212 [2022-11-18 20:09:34,036 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:34,044 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 218 [2022-11-18 20:09:34,046 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:34,054 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 224 [2022-11-18 20:09:34,056 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:34,064 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 230 [2022-11-18 20:09:34,066 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:34,074 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 236 [2022-11-18 20:09:34,077 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:34,093 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 243 [2022-11-18 20:09:34,096 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:34,104 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 249 [2022-11-18 20:09:34,106 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:34,116 INFO L134 CoverageAnalysis]: Checked inductivity of 3124 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3124 trivial. 0 not checked. [2022-11-18 20:09:34,116 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 20:09:34,117 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [13633488] [2022-11-18 20:09:34,117 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [13633488] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 20:09:34,117 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-18 20:09:34,117 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-18 20:09:34,118 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1425586971] [2022-11-18 20:09:34,118 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 20:09:34,119 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-18 20:09:34,119 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 20:09:34,120 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-18 20:09:34,120 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-18 20:09:34,120 INFO L87 Difference]: Start difference. First operand 2936 states and 4184 transitions. Second operand has 5 states, 5 states have (on average 12.0) internal successors, (60), 3 states have internal predecessors, (60), 1 states have call successors, (42), 2 states have call predecessors, (42), 1 states have return successors, (42), 1 states have call predecessors, (42), 1 states have call successors, (42) [2022-11-18 20:09:44,309 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 20:09:44,310 INFO L93 Difference]: Finished difference Result 10693 states and 15717 transitions. [2022-11-18 20:09:44,310 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-18 20:09:44,311 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 12.0) internal successors, (60), 3 states have internal predecessors, (60), 1 states have call successors, (42), 2 states have call predecessors, (42), 1 states have return successors, (42), 1 states have call predecessors, (42), 1 states have call successors, (42) Word has length 264 [2022-11-18 20:09:44,312 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 20:09:44,364 INFO L225 Difference]: With dead ends: 10693 [2022-11-18 20:09:44,365 INFO L226 Difference]: Without dead ends: 7844 [2022-11-18 20:09:44,378 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 92 GetRequests, 86 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2022-11-18 20:09:44,379 INFO L413 NwaCegarLoop]: 2115 mSDtfsCounter, 5349 mSDsluCounter, 3723 mSDsCounter, 0 mSdLazyCounter, 3069 mSolverCounterSat, 1853 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 8.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 5594 SdHoareTripleChecker+Valid, 5838 SdHoareTripleChecker+Invalid, 4922 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 1853 IncrementalHoareTripleChecker+Valid, 3069 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 9.5s IncrementalHoareTripleChecker+Time [2022-11-18 20:09:44,380 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [5594 Valid, 5838 Invalid, 4922 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [1853 Valid, 3069 Invalid, 0 Unknown, 0 Unchecked, 9.5s Time] [2022-11-18 20:09:44,391 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 7844 states. [2022-11-18 20:09:44,750 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 7844 to 5662. [2022-11-18 20:09:44,762 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5662 states, 4289 states have (on average 1.4588482163674517) internal successors, (6257), 4443 states have internal predecessors, (6257), 965 states have call successors, (965), 316 states have call predecessors, (965), 316 states have return successors, (965), 938 states have call predecessors, (965), 965 states have call successors, (965) [2022-11-18 20:09:44,789 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5662 states to 5662 states and 8187 transitions. [2022-11-18 20:09:44,790 INFO L78 Accepts]: Start accepts. Automaton has 5662 states and 8187 transitions. Word has length 264 [2022-11-18 20:09:44,792 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 20:09:44,792 INFO L495 AbstractCegarLoop]: Abstraction has 5662 states and 8187 transitions. [2022-11-18 20:09:44,793 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 12.0) internal successors, (60), 3 states have internal predecessors, (60), 1 states have call successors, (42), 2 states have call predecessors, (42), 1 states have return successors, (42), 1 states have call predecessors, (42), 1 states have call successors, (42) [2022-11-18 20:09:44,793 INFO L276 IsEmpty]: Start isEmpty. Operand 5662 states and 8187 transitions. [2022-11-18 20:09:44,803 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 292 [2022-11-18 20:09:44,803 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 20:09:44,804 INFO L195 NwaCegarLoop]: trace histogram [40, 40, 40, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 20:09:44,804 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-11-18 20:09:44,805 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting ULTIMATE.startErr18ASSERT_VIOLATIONINTEGER_OVERFLOW === [wxh_to_modeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW, wxh_to_modeErr1ASSERT_VIOLATIONINTEGER_OVERFLOW, frame_freeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (and 95 more)] === [2022-11-18 20:09:44,805 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 20:09:44,805 INFO L85 PathProgramCache]: Analyzing trace with hash 92027844, now seen corresponding path program 1 times [2022-11-18 20:09:44,806 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 20:09:44,806 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [506665727] [2022-11-18 20:09:44,806 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 20:09:44,806 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 20:09:44,931 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:45,201 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-18 20:09:45,203 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:45,211 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-18 20:09:45,212 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:45,220 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-11-18 20:09:45,222 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:45,231 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-11-18 20:09:45,233 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:45,240 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 26 [2022-11-18 20:09:45,242 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:45,249 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 32 [2022-11-18 20:09:45,251 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:45,259 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 38 [2022-11-18 20:09:45,260 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:45,268 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2022-11-18 20:09:45,270 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:45,277 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2022-11-18 20:09:45,279 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:45,286 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 56 [2022-11-18 20:09:45,288 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:45,296 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 62 [2022-11-18 20:09:45,298 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:45,305 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 68 [2022-11-18 20:09:45,307 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:45,315 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 74 [2022-11-18 20:09:45,317 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:45,324 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 80 [2022-11-18 20:09:45,326 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:45,334 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 86 [2022-11-18 20:09:45,336 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:45,343 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 92 [2022-11-18 20:09:45,345 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:45,353 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 98 [2022-11-18 20:09:45,354 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:45,362 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 104 [2022-11-18 20:09:45,364 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:45,375 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 110 [2022-11-18 20:09:45,377 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:45,385 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 116 [2022-11-18 20:09:45,387 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:45,397 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 122 [2022-11-18 20:09:45,399 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:45,406 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 128 [2022-11-18 20:09:45,408 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:45,416 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 134 [2022-11-18 20:09:45,419 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:45,430 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 140 [2022-11-18 20:09:45,432 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:45,439 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 146 [2022-11-18 20:09:45,441 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:45,449 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 152 [2022-11-18 20:09:45,451 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:45,459 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 158 [2022-11-18 20:09:45,460 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:45,469 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 164 [2022-11-18 20:09:45,471 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:45,479 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 170 [2022-11-18 20:09:45,481 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:45,489 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 176 [2022-11-18 20:09:45,491 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:45,498 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 182 [2022-11-18 20:09:45,500 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:45,508 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 188 [2022-11-18 20:09:45,510 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:45,520 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 194 [2022-11-18 20:09:45,522 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:45,530 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 200 [2022-11-18 20:09:45,532 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:45,543 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 206 [2022-11-18 20:09:45,545 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:45,559 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 212 [2022-11-18 20:09:45,562 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:45,569 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 218 [2022-11-18 20:09:45,574 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:45,582 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 224 [2022-11-18 20:09:45,584 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:45,599 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 230 [2022-11-18 20:09:45,602 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:45,610 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 236 [2022-11-18 20:09:45,612 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:45,629 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 243 [2022-11-18 20:09:45,632 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:45,641 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 249 [2022-11-18 20:09:45,643 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:45,659 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 270 [2022-11-18 20:09:45,666 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:45,677 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-18 20:09:45,678 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:45,686 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-18 20:09:45,687 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:45,695 INFO L134 CoverageAnalysis]: Checked inductivity of 3128 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3128 trivial. 0 not checked. [2022-11-18 20:09:45,695 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 20:09:45,698 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [506665727] [2022-11-18 20:09:45,699 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [506665727] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 20:09:45,699 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-18 20:09:45,699 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-18 20:09:45,699 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1753830759] [2022-11-18 20:09:45,700 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 20:09:45,701 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-18 20:09:45,701 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 20:09:45,701 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-18 20:09:45,702 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2022-11-18 20:09:45,703 INFO L87 Difference]: Start difference. First operand 5662 states and 8187 transitions. Second operand has 6 states, 6 states have (on average 13.0) internal successors, (78), 3 states have internal predecessors, (78), 2 states have call successors, (45), 3 states have call predecessors, (45), 1 states have return successors, (45), 2 states have call predecessors, (45), 2 states have call successors, (45) [2022-11-18 20:09:56,895 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 20:09:56,896 INFO L93 Difference]: Finished difference Result 21094 states and 31425 transitions. [2022-11-18 20:09:56,896 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-11-18 20:09:56,896 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 13.0) internal successors, (78), 3 states have internal predecessors, (78), 2 states have call successors, (45), 3 states have call predecessors, (45), 1 states have return successors, (45), 2 states have call predecessors, (45), 2 states have call successors, (45) Word has length 291 [2022-11-18 20:09:56,897 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 20:09:57,013 INFO L225 Difference]: With dead ends: 21094 [2022-11-18 20:09:57,013 INFO L226 Difference]: Without dead ends: 15519 [2022-11-18 20:09:57,044 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 101 GetRequests, 93 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2022-11-18 20:09:57,050 INFO L413 NwaCegarLoop]: 2231 mSDtfsCounter, 6392 mSDsluCounter, 4090 mSDsCounter, 0 mSdLazyCounter, 3404 mSolverCounterSat, 2619 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 9.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 6629 SdHoareTripleChecker+Valid, 6321 SdHoareTripleChecker+Invalid, 6023 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 2619 IncrementalHoareTripleChecker+Valid, 3404 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 10.3s IncrementalHoareTripleChecker+Time [2022-11-18 20:09:57,051 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [6629 Valid, 6321 Invalid, 6023 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [2619 Valid, 3404 Invalid, 0 Unknown, 0 Unchecked, 10.3s Time] [2022-11-18 20:09:57,070 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 15519 states. [2022-11-18 20:09:57,716 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 15519 to 10027. [2022-11-18 20:09:57,746 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10027 states, 7670 states have (on average 1.4564537157757498) internal successors, (11171), 7884 states have internal predecessors, (11171), 1664 states have call successors, (1664), 601 states have call predecessors, (1664), 601 states have return successors, (1664), 1613 states have call predecessors, (1664), 1664 states have call successors, (1664) [2022-11-18 20:09:57,796 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10027 states to 10027 states and 14499 transitions. [2022-11-18 20:09:57,799 INFO L78 Accepts]: Start accepts. Automaton has 10027 states and 14499 transitions. Word has length 291 [2022-11-18 20:09:57,799 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 20:09:57,800 INFO L495 AbstractCegarLoop]: Abstraction has 10027 states and 14499 transitions. [2022-11-18 20:09:57,801 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 13.0) internal successors, (78), 3 states have internal predecessors, (78), 2 states have call successors, (45), 3 states have call predecessors, (45), 1 states have return successors, (45), 2 states have call predecessors, (45), 2 states have call successors, (45) [2022-11-18 20:09:57,801 INFO L276 IsEmpty]: Start isEmpty. Operand 10027 states and 14499 transitions. [2022-11-18 20:09:57,807 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 298 [2022-11-18 20:09:57,807 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 20:09:57,807 INFO L195 NwaCegarLoop]: trace histogram [40, 40, 40, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 20:09:57,808 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-11-18 20:09:57,808 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting ULTIMATE.startErr6ASSERT_VIOLATIONINTEGER_OVERFLOW === [wxh_to_modeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW, wxh_to_modeErr1ASSERT_VIOLATIONINTEGER_OVERFLOW, frame_freeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (and 95 more)] === [2022-11-18 20:09:57,808 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 20:09:57,808 INFO L85 PathProgramCache]: Analyzing trace with hash -387829691, now seen corresponding path program 1 times [2022-11-18 20:09:57,809 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 20:09:57,809 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2027424178] [2022-11-18 20:09:57,809 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 20:09:57,809 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 20:09:57,929 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:58,123 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-18 20:09:58,125 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:58,132 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-18 20:09:58,134 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:58,141 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-11-18 20:09:58,143 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:58,150 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-11-18 20:09:58,151 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:58,158 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 26 [2022-11-18 20:09:58,160 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:58,167 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 32 [2022-11-18 20:09:58,169 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:58,180 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 38 [2022-11-18 20:09:58,181 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:58,189 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2022-11-18 20:09:58,190 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:58,197 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2022-11-18 20:09:58,199 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:58,207 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 56 [2022-11-18 20:09:58,209 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:58,216 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 62 [2022-11-18 20:09:58,217 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:58,225 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 68 [2022-11-18 20:09:58,226 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:58,234 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 74 [2022-11-18 20:09:58,236 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:58,243 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 80 [2022-11-18 20:09:58,245 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:58,252 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 86 [2022-11-18 20:09:58,254 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:58,261 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 92 [2022-11-18 20:09:58,263 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:58,270 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 98 [2022-11-18 20:09:58,272 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:58,282 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 104 [2022-11-18 20:09:58,284 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:58,291 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 110 [2022-11-18 20:09:58,293 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:58,300 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 116 [2022-11-18 20:09:58,302 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:58,310 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 122 [2022-11-18 20:09:58,314 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:58,321 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 128 [2022-11-18 20:09:58,323 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:58,330 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 134 [2022-11-18 20:09:58,332 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:58,339 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 140 [2022-11-18 20:09:58,341 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:58,348 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 146 [2022-11-18 20:09:58,350 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:58,357 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 152 [2022-11-18 20:09:58,359 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:58,366 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 158 [2022-11-18 20:09:58,368 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:58,375 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 164 [2022-11-18 20:09:58,379 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:58,386 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 170 [2022-11-18 20:09:58,388 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:58,395 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 176 [2022-11-18 20:09:58,397 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:58,404 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 182 [2022-11-18 20:09:58,406 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:58,413 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 188 [2022-11-18 20:09:58,417 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:58,424 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 194 [2022-11-18 20:09:58,426 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:58,434 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 200 [2022-11-18 20:09:58,436 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:58,444 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 206 [2022-11-18 20:09:58,446 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:58,453 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 212 [2022-11-18 20:09:58,456 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:58,463 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 218 [2022-11-18 20:09:58,465 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:58,473 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 224 [2022-11-18 20:09:58,475 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:58,482 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 230 [2022-11-18 20:09:58,484 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:58,491 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 236 [2022-11-18 20:09:58,493 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:58,509 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 243 [2022-11-18 20:09:58,511 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:58,519 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 249 [2022-11-18 20:09:58,521 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:58,557 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 264 [2022-11-18 20:09:58,567 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:58,589 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-18 20:09:58,591 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:58,602 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-18 20:09:58,603 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:58,611 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-18 20:09:58,612 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:58,619 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-11-18 20:09:58,631 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:09:58,639 INFO L134 CoverageAnalysis]: Checked inductivity of 3128 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3128 trivial. 0 not checked. [2022-11-18 20:09:58,640 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 20:09:58,642 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2027424178] [2022-11-18 20:09:58,643 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2027424178] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 20:09:58,643 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-18 20:09:58,643 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-11-18 20:09:58,643 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1959990969] [2022-11-18 20:09:58,644 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 20:09:58,644 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-11-18 20:09:58,644 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 20:09:58,645 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-11-18 20:09:58,645 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2022-11-18 20:09:58,645 INFO L87 Difference]: Start difference. First operand 10027 states and 14499 transitions. Second operand has 7 states, 7 states have (on average 11.428571428571429) internal successors, (80), 3 states have internal predecessors, (80), 2 states have call successors, (47), 5 states have call predecessors, (47), 1 states have return successors, (47), 2 states have call predecessors, (47), 2 states have call successors, (47) [2022-11-18 20:10:17,226 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 20:10:17,226 INFO L93 Difference]: Finished difference Result 34237 states and 51215 transitions. [2022-11-18 20:10:17,227 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2022-11-18 20:10:17,227 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 11.428571428571429) internal successors, (80), 3 states have internal predecessors, (80), 2 states have call successors, (47), 5 states have call predecessors, (47), 1 states have return successors, (47), 2 states have call predecessors, (47), 2 states have call successors, (47) Word has length 297 [2022-11-18 20:10:17,228 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 20:10:17,345 INFO L225 Difference]: With dead ends: 34237 [2022-11-18 20:10:17,346 INFO L226 Difference]: Without dead ends: 24304 [2022-11-18 20:10:17,387 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 105 GetRequests, 95 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 13 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=49, Invalid=83, Unknown=0, NotChecked=0, Total=132 [2022-11-18 20:10:17,388 INFO L413 NwaCegarLoop]: 2917 mSDtfsCounter, 4159 mSDsluCounter, 7727 mSDsCounter, 0 mSdLazyCounter, 6593 mSolverCounterSat, 1329 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 15.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 4486 SdHoareTripleChecker+Valid, 10644 SdHoareTripleChecker+Invalid, 7922 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 1329 IncrementalHoareTripleChecker+Valid, 6593 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 17.2s IncrementalHoareTripleChecker+Time [2022-11-18 20:10:17,388 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [4486 Valid, 10644 Invalid, 7922 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [1329 Valid, 6593 Invalid, 0 Unknown, 0 Unchecked, 17.2s Time] [2022-11-18 20:10:17,413 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 24304 states. [2022-11-18 20:10:18,626 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 24304 to 15319. [2022-11-18 20:10:18,651 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15319 states, 11794 states have (on average 1.4581990842801424) internal successors, (17198), 12072 states have internal predecessors, (17198), 2520 states have call successors, (2520), 913 states have call predecessors, (2520), 913 states have return successors, (2520), 2441 states have call predecessors, (2520), 2520 states have call successors, (2520) [2022-11-18 20:10:18,710 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15319 states to 15319 states and 22238 transitions. [2022-11-18 20:10:18,714 INFO L78 Accepts]: Start accepts. Automaton has 15319 states and 22238 transitions. Word has length 297 [2022-11-18 20:10:18,718 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 20:10:18,718 INFO L495 AbstractCegarLoop]: Abstraction has 15319 states and 22238 transitions. [2022-11-18 20:10:18,718 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 11.428571428571429) internal successors, (80), 3 states have internal predecessors, (80), 2 states have call successors, (47), 5 states have call predecessors, (47), 1 states have return successors, (47), 2 states have call predecessors, (47), 2 states have call successors, (47) [2022-11-18 20:10:18,719 INFO L276 IsEmpty]: Start isEmpty. Operand 15319 states and 22238 transitions. [2022-11-18 20:10:18,723 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 326 [2022-11-18 20:10:18,724 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 20:10:18,724 INFO L195 NwaCegarLoop]: trace histogram [48, 48, 48, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 20:10:18,724 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-11-18 20:10:18,725 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting gspca_vm_closeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW === [wxh_to_modeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW, wxh_to_modeErr1ASSERT_VIOLATIONINTEGER_OVERFLOW, frame_freeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (and 95 more)] === [2022-11-18 20:10:18,725 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 20:10:18,725 INFO L85 PathProgramCache]: Analyzing trace with hash 1337021934, now seen corresponding path program 1 times [2022-11-18 20:10:18,725 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 20:10:18,726 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1436009695] [2022-11-18 20:10:18,726 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 20:10:18,726 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 20:10:18,828 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:19,258 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-18 20:10:19,261 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:19,277 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-18 20:10:19,278 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:19,288 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-11-18 20:10:19,289 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:19,299 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-11-18 20:10:19,300 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:19,309 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 26 [2022-11-18 20:10:19,311 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:19,320 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 32 [2022-11-18 20:10:19,322 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:19,331 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 38 [2022-11-18 20:10:19,333 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:19,342 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2022-11-18 20:10:19,344 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:19,353 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2022-11-18 20:10:19,355 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:19,364 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 56 [2022-11-18 20:10:19,366 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:19,376 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 62 [2022-11-18 20:10:19,377 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:19,390 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 68 [2022-11-18 20:10:19,392 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:19,401 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 74 [2022-11-18 20:10:19,403 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:19,412 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 80 [2022-11-18 20:10:19,414 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:19,423 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 86 [2022-11-18 20:10:19,425 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:19,435 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 92 [2022-11-18 20:10:19,436 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:19,446 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 98 [2022-11-18 20:10:19,448 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:19,457 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 104 [2022-11-18 20:10:19,459 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:19,468 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 110 [2022-11-18 20:10:19,470 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:19,480 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 116 [2022-11-18 20:10:19,482 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:19,491 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 122 [2022-11-18 20:10:19,493 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:19,502 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 128 [2022-11-18 20:10:19,505 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:19,515 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 134 [2022-11-18 20:10:19,518 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:19,527 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 140 [2022-11-18 20:10:19,529 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:19,538 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 146 [2022-11-18 20:10:19,540 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:19,549 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 152 [2022-11-18 20:10:19,551 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:19,561 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 158 [2022-11-18 20:10:19,565 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:19,579 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 164 [2022-11-18 20:10:19,581 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:19,590 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 170 [2022-11-18 20:10:19,592 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:19,602 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 176 [2022-11-18 20:10:19,604 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:19,614 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 182 [2022-11-18 20:10:19,616 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:19,625 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 188 [2022-11-18 20:10:19,628 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:19,637 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 194 [2022-11-18 20:10:19,639 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:19,649 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 200 [2022-11-18 20:10:19,651 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:19,661 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 206 [2022-11-18 20:10:19,664 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:19,674 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 212 [2022-11-18 20:10:19,676 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:19,685 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 218 [2022-11-18 20:10:19,688 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:19,699 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 224 [2022-11-18 20:10:19,701 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:19,711 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 230 [2022-11-18 20:10:19,713 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:19,723 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 236 [2022-11-18 20:10:19,726 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:19,746 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 243 [2022-11-18 20:10:19,748 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:19,758 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 249 [2022-11-18 20:10:19,761 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:19,771 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 265 [2022-11-18 20:10:19,773 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:19,780 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 271 [2022-11-18 20:10:19,782 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:19,789 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 277 [2022-11-18 20:10:19,792 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:19,799 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 283 [2022-11-18 20:10:19,801 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:19,808 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 289 [2022-11-18 20:10:19,810 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:19,818 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 295 [2022-11-18 20:10:19,820 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:19,827 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 302 [2022-11-18 20:10:19,829 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:19,837 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 309 [2022-11-18 20:10:19,840 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:19,854 INFO L134 CoverageAnalysis]: Checked inductivity of 4518 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 4516 trivial. 0 not checked. [2022-11-18 20:10:19,855 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 20:10:19,855 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1436009695] [2022-11-18 20:10:19,855 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1436009695] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 20:10:19,855 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-18 20:10:19,855 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-18 20:10:19,856 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [884621308] [2022-11-18 20:10:19,856 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 20:10:19,856 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-18 20:10:19,857 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 20:10:19,857 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-18 20:10:19,857 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-18 20:10:19,857 INFO L87 Difference]: Start difference. First operand 15319 states and 22238 transitions. Second operand has 5 states, 5 states have (on average 16.0) internal successors, (80), 3 states have internal predecessors, (80), 3 states have call successors, (51), 3 states have call predecessors, (51), 1 states have return successors, (50), 2 states have call predecessors, (50), 2 states have call successors, (50) [2022-11-18 20:10:29,904 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 20:10:29,905 INFO L93 Difference]: Finished difference Result 47440 states and 70379 transitions. [2022-11-18 20:10:29,905 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-18 20:10:29,905 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 16.0) internal successors, (80), 3 states have internal predecessors, (80), 3 states have call successors, (51), 3 states have call predecessors, (51), 1 states have return successors, (50), 2 states have call predecessors, (50), 2 states have call successors, (50) Word has length 325 [2022-11-18 20:10:29,906 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 20:10:30,051 INFO L225 Difference]: With dead ends: 47440 [2022-11-18 20:10:30,051 INFO L226 Difference]: Without dead ends: 32223 [2022-11-18 20:10:30,112 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 108 GetRequests, 102 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2022-11-18 20:10:30,115 INFO L413 NwaCegarLoop]: 2195 mSDtfsCounter, 5156 mSDsluCounter, 3864 mSDsCounter, 0 mSdLazyCounter, 3175 mSolverCounterSat, 1802 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 7.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 5361 SdHoareTripleChecker+Valid, 6059 SdHoareTripleChecker+Invalid, 4977 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 1802 IncrementalHoareTripleChecker+Valid, 3175 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 8.5s IncrementalHoareTripleChecker+Time [2022-11-18 20:10:30,116 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [5361 Valid, 6059 Invalid, 4977 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [1802 Valid, 3175 Invalid, 0 Unknown, 0 Unchecked, 8.5s Time] [2022-11-18 20:10:30,149 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 32223 states. [2022-11-18 20:10:31,912 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 32223 to 22868. [2022-11-18 20:10:31,945 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 22868 states, 17660 states have (on average 1.4579841449603623) internal successors, (25748), 18032 states have internal predecessors, (25748), 3750 states have call successors, (3750), 1366 states have call predecessors, (3750), 1366 states have return successors, (3750), 3631 states have call predecessors, (3750), 3750 states have call successors, (3750) [2022-11-18 20:10:32,030 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 22868 states to 22868 states and 33248 transitions. [2022-11-18 20:10:32,035 INFO L78 Accepts]: Start accepts. Automaton has 22868 states and 33248 transitions. Word has length 325 [2022-11-18 20:10:32,035 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 20:10:32,036 INFO L495 AbstractCegarLoop]: Abstraction has 22868 states and 33248 transitions. [2022-11-18 20:10:32,036 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 16.0) internal successors, (80), 3 states have internal predecessors, (80), 3 states have call successors, (51), 3 states have call predecessors, (51), 1 states have return successors, (50), 2 states have call predecessors, (50), 2 states have call successors, (50) [2022-11-18 20:10:32,036 INFO L276 IsEmpty]: Start isEmpty. Operand 22868 states and 33248 transitions. [2022-11-18 20:10:32,041 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 327 [2022-11-18 20:10:32,042 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 20:10:32,042 INFO L195 NwaCegarLoop]: trace histogram [48, 48, 48, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 20:10:32,042 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-11-18 20:10:32,042 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting gspca_vm_openErr0ASSERT_VIOLATIONINTEGER_OVERFLOW === [wxh_to_modeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW, wxh_to_modeErr1ASSERT_VIOLATIONINTEGER_OVERFLOW, frame_freeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (and 95 more)] === [2022-11-18 20:10:32,043 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 20:10:32,043 INFO L85 PathProgramCache]: Analyzing trace with hash -1253250134, now seen corresponding path program 1 times [2022-11-18 20:10:32,043 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 20:10:32,043 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [212151629] [2022-11-18 20:10:32,044 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 20:10:32,044 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 20:10:32,189 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:32,921 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-18 20:10:32,922 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:32,929 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-18 20:10:32,931 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:32,938 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-11-18 20:10:32,939 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:32,946 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-11-18 20:10:32,948 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:32,954 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 26 [2022-11-18 20:10:32,956 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:32,965 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 32 [2022-11-18 20:10:32,966 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:32,973 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 38 [2022-11-18 20:10:32,974 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:32,981 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2022-11-18 20:10:32,983 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:32,991 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2022-11-18 20:10:32,992 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:32,999 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 56 [2022-11-18 20:10:33,001 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:33,008 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 62 [2022-11-18 20:10:33,009 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:33,017 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 68 [2022-11-18 20:10:33,019 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:33,026 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 74 [2022-11-18 20:10:33,027 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:33,039 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 80 [2022-11-18 20:10:33,041 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:33,049 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 86 [2022-11-18 20:10:33,051 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:33,059 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 92 [2022-11-18 20:10:33,061 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:33,069 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 98 [2022-11-18 20:10:33,071 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:33,082 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 104 [2022-11-18 20:10:33,084 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:33,099 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 110 [2022-11-18 20:10:33,101 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:33,108 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 116 [2022-11-18 20:10:33,110 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:33,117 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 122 [2022-11-18 20:10:33,119 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:33,126 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 128 [2022-11-18 20:10:33,129 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:33,136 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 134 [2022-11-18 20:10:33,138 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:33,145 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 140 [2022-11-18 20:10:33,150 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:33,162 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 146 [2022-11-18 20:10:33,164 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:33,172 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 152 [2022-11-18 20:10:33,173 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:33,181 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 158 [2022-11-18 20:10:33,183 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:33,190 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 164 [2022-11-18 20:10:33,191 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:33,198 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 170 [2022-11-18 20:10:33,200 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:33,207 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 176 [2022-11-18 20:10:33,209 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:33,216 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 182 [2022-11-18 20:10:33,218 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:33,225 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 188 [2022-11-18 20:10:33,227 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:33,234 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 194 [2022-11-18 20:10:33,236 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:33,243 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 200 [2022-11-18 20:10:33,244 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:33,251 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 206 [2022-11-18 20:10:33,253 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:33,260 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 212 [2022-11-18 20:10:33,262 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:33,269 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 218 [2022-11-18 20:10:33,271 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:33,278 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 224 [2022-11-18 20:10:33,280 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:33,287 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 230 [2022-11-18 20:10:33,290 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:33,298 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 236 [2022-11-18 20:10:33,300 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:33,315 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 243 [2022-11-18 20:10:33,326 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:33,409 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 249 [2022-11-18 20:10:33,411 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:33,421 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 265 [2022-11-18 20:10:33,423 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:33,433 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 271 [2022-11-18 20:10:33,435 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:33,444 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 277 [2022-11-18 20:10:33,446 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:33,454 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 283 [2022-11-18 20:10:33,457 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:33,474 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 289 [2022-11-18 20:10:33,477 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:33,485 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 295 [2022-11-18 20:10:33,487 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:33,495 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 302 [2022-11-18 20:10:33,497 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:33,505 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 309 [2022-11-18 20:10:33,508 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:33,519 INFO L134 CoverageAnalysis]: Checked inductivity of 4518 backedges. 0 proven. 3 refuted. 0 times theorem prover too weak. 4515 trivial. 0 not checked. [2022-11-18 20:10:33,519 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 20:10:33,519 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [212151629] [2022-11-18 20:10:33,519 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [212151629] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-18 20:10:33,520 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [550269725] [2022-11-18 20:10:33,520 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 20:10:33,520 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-18 20:10:33,520 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a612a7d4-9e11-44ba-88e8-b3c824144627/bin/uautomizer-TMbwUNV5ro/z3 [2022-11-18 20:10:33,526 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a612a7d4-9e11-44ba-88e8-b3c824144627/bin/uautomizer-TMbwUNV5ro/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-18 20:10:33,565 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a612a7d4-9e11-44ba-88e8-b3c824144627/bin/uautomizer-TMbwUNV5ro/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-11-18 20:10:34,650 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:34,669 INFO L263 TraceCheckSpWp]: Trace formula consists of 3643 conjuncts, 7 conjunts are in the unsatisfiable core [2022-11-18 20:10:34,702 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-18 20:10:34,846 INFO L134 CoverageAnalysis]: Checked inductivity of 4518 backedges. 1283 proven. 0 refuted. 0 times theorem prover too weak. 3235 trivial. 0 not checked. [2022-11-18 20:10:34,846 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-18 20:10:34,846 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [550269725] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 20:10:34,846 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-18 20:10:34,847 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [6] total 7 [2022-11-18 20:10:34,847 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1576497216] [2022-11-18 20:10:34,847 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 20:10:34,848 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-18 20:10:34,848 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 20:10:34,848 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-18 20:10:34,848 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=12, Invalid=30, Unknown=0, NotChecked=0, Total=42 [2022-11-18 20:10:34,849 INFO L87 Difference]: Start difference. First operand 22868 states and 33248 transitions. Second operand has 4 states, 4 states have (on average 21.5) internal successors, (86), 4 states have internal predecessors, (86), 2 states have call successors, (51), 2 states have call predecessors, (51), 3 states have return successors, (50), 2 states have call predecessors, (50), 2 states have call successors, (50) [2022-11-18 20:10:36,532 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 20:10:36,533 INFO L93 Difference]: Finished difference Result 45698 states and 66593 transitions. [2022-11-18 20:10:36,533 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-11-18 20:10:36,533 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 21.5) internal successors, (86), 4 states have internal predecessors, (86), 2 states have call successors, (51), 2 states have call predecessors, (51), 3 states have return successors, (50), 2 states have call predecessors, (50), 2 states have call successors, (50) Word has length 326 [2022-11-18 20:10:36,534 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 20:10:36,636 INFO L225 Difference]: With dead ends: 45698 [2022-11-18 20:10:36,637 INFO L226 Difference]: Without dead ends: 22887 [2022-11-18 20:10:36,698 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 429 GetRequests, 422 SyntacticMatches, 1 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=17, Invalid=39, Unknown=0, NotChecked=0, Total=56 [2022-11-18 20:10:36,699 INFO L413 NwaCegarLoop]: 2168 mSDtfsCounter, 2 mSDsluCounter, 4330 mSDsCounter, 0 mSdLazyCounter, 11 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2 SdHoareTripleChecker+Valid, 6498 SdHoareTripleChecker+Invalid, 15 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 11 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-18 20:10:36,699 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [2 Valid, 6498 Invalid, 15 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 11 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-18 20:10:36,724 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 22887 states. [2022-11-18 20:10:38,214 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 22887 to 22887. [2022-11-18 20:10:38,236 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 22887 states, 17679 states have (on average 1.4574919395893433) internal successors, (25767), 18051 states have internal predecessors, (25767), 3750 states have call successors, (3750), 1366 states have call predecessors, (3750), 1366 states have return successors, (3750), 3631 states have call predecessors, (3750), 3750 states have call successors, (3750) [2022-11-18 20:10:38,347 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 22887 states to 22887 states and 33267 transitions. [2022-11-18 20:10:38,353 INFO L78 Accepts]: Start accepts. Automaton has 22887 states and 33267 transitions. Word has length 326 [2022-11-18 20:10:38,356 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 20:10:38,356 INFO L495 AbstractCegarLoop]: Abstraction has 22887 states and 33267 transitions. [2022-11-18 20:10:38,357 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 21.5) internal successors, (86), 4 states have internal predecessors, (86), 2 states have call successors, (51), 2 states have call predecessors, (51), 3 states have return successors, (50), 2 states have call predecessors, (50), 2 states have call successors, (50) [2022-11-18 20:10:38,357 INFO L276 IsEmpty]: Start isEmpty. Operand 22887 states and 33267 transitions. [2022-11-18 20:10:38,366 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 329 [2022-11-18 20:10:38,366 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 20:10:38,367 INFO L195 NwaCegarLoop]: trace histogram [48, 48, 48, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 20:10:38,385 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a612a7d4-9e11-44ba-88e8-b3c824144627/bin/uautomizer-TMbwUNV5ro/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-11-18 20:10:38,580 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a612a7d4-9e11-44ba-88e8-b3c824144627/bin/uautomizer-TMbwUNV5ro/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-18 20:10:38,581 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting gspca_vm_openErr0ASSERT_VIOLATIONINTEGER_OVERFLOW === [wxh_to_modeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW, wxh_to_modeErr1ASSERT_VIOLATIONINTEGER_OVERFLOW, frame_freeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (and 95 more)] === [2022-11-18 20:10:38,581 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 20:10:38,581 INFO L85 PathProgramCache]: Analyzing trace with hash -2029641694, now seen corresponding path program 1 times [2022-11-18 20:10:38,582 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 20:10:38,582 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1238042641] [2022-11-18 20:10:38,582 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 20:10:38,582 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 20:10:38,769 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:39,534 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-18 20:10:39,536 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:39,543 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-18 20:10:39,544 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:39,552 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-11-18 20:10:39,554 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:39,561 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-11-18 20:10:39,563 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:39,571 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 26 [2022-11-18 20:10:39,572 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:39,579 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 32 [2022-11-18 20:10:39,581 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:39,589 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 38 [2022-11-18 20:10:39,591 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:39,598 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2022-11-18 20:10:39,600 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:39,607 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2022-11-18 20:10:39,609 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:39,616 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 56 [2022-11-18 20:10:39,617 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:39,625 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 62 [2022-11-18 20:10:39,627 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:39,634 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 68 [2022-11-18 20:10:39,636 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:39,643 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 74 [2022-11-18 20:10:39,646 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:39,654 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 80 [2022-11-18 20:10:39,655 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:39,662 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 86 [2022-11-18 20:10:39,666 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:39,673 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 92 [2022-11-18 20:10:39,675 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:39,681 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 98 [2022-11-18 20:10:39,685 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:39,692 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 104 [2022-11-18 20:10:39,694 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:39,701 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 110 [2022-11-18 20:10:39,704 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:39,711 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 116 [2022-11-18 20:10:39,713 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:39,720 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 122 [2022-11-18 20:10:39,722 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:39,729 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 128 [2022-11-18 20:10:39,731 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:39,738 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 134 [2022-11-18 20:10:39,740 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:39,747 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 140 [2022-11-18 20:10:39,749 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:39,756 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 146 [2022-11-18 20:10:39,759 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:39,767 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 152 [2022-11-18 20:10:39,769 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:39,776 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 158 [2022-11-18 20:10:39,778 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:39,785 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 164 [2022-11-18 20:10:39,787 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:39,794 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 170 [2022-11-18 20:10:39,796 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:39,804 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 176 [2022-11-18 20:10:39,806 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:39,813 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 182 [2022-11-18 20:10:39,816 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:39,823 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 188 [2022-11-18 20:10:39,825 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:39,833 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 194 [2022-11-18 20:10:39,835 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:39,842 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 200 [2022-11-18 20:10:39,844 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:39,852 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 206 [2022-11-18 20:10:39,854 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:39,862 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 212 [2022-11-18 20:10:39,864 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:39,872 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 218 [2022-11-18 20:10:39,874 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:39,882 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 224 [2022-11-18 20:10:39,884 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:39,891 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 230 [2022-11-18 20:10:39,894 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:39,901 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 236 [2022-11-18 20:10:39,903 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:39,920 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 243 [2022-11-18 20:10:39,933 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:40,127 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 250 [2022-11-18 20:10:40,131 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:40,142 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 267 [2022-11-18 20:10:40,145 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:40,154 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 273 [2022-11-18 20:10:40,156 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:40,357 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 279 [2022-11-18 20:10:40,360 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:40,371 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 285 [2022-11-18 20:10:40,373 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:40,382 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 291 [2022-11-18 20:10:40,384 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:40,392 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 297 [2022-11-18 20:10:40,394 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:40,403 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 304 [2022-11-18 20:10:40,407 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:40,416 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 311 [2022-11-18 20:10:40,418 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:40,429 INFO L134 CoverageAnalysis]: Checked inductivity of 4523 backedges. 0 proven. 7 refuted. 0 times theorem prover too weak. 4516 trivial. 0 not checked. [2022-11-18 20:10:40,429 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 20:10:40,429 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1238042641] [2022-11-18 20:10:40,430 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1238042641] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-18 20:10:40,430 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1734938891] [2022-11-18 20:10:40,430 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 20:10:40,430 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-18 20:10:40,430 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a612a7d4-9e11-44ba-88e8-b3c824144627/bin/uautomizer-TMbwUNV5ro/z3 [2022-11-18 20:10:40,431 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a612a7d4-9e11-44ba-88e8-b3c824144627/bin/uautomizer-TMbwUNV5ro/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-18 20:10:40,445 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a612a7d4-9e11-44ba-88e8-b3c824144627/bin/uautomizer-TMbwUNV5ro/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-11-18 20:10:41,605 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:10:41,622 INFO L263 TraceCheckSpWp]: Trace formula consists of 3673 conjuncts, 9 conjunts are in the unsatisfiable core [2022-11-18 20:10:41,638 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-18 20:10:41,723 INFO L134 CoverageAnalysis]: Checked inductivity of 4523 backedges. 1287 proven. 1 refuted. 0 times theorem prover too weak. 3235 trivial. 0 not checked. [2022-11-18 20:10:41,724 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-18 20:10:42,037 INFO L134 CoverageAnalysis]: Checked inductivity of 4523 backedges. 0 proven. 7 refuted. 0 times theorem prover too weak. 4516 trivial. 0 not checked. [2022-11-18 20:10:42,037 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1734938891] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-18 20:10:42,038 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-18 20:10:42,038 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [7, 5, 5] total 12 [2022-11-18 20:10:42,038 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2103606779] [2022-11-18 20:10:42,038 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-18 20:10:42,039 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 12 states [2022-11-18 20:10:42,040 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 20:10:42,040 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2022-11-18 20:10:42,040 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=35, Invalid=97, Unknown=0, NotChecked=0, Total=132 [2022-11-18 20:10:42,041 INFO L87 Difference]: Start difference. First operand 22887 states and 33267 transitions. Second operand has 12 states, 12 states have (on average 8.5) internal successors, (102), 10 states have internal predecessors, (102), 2 states have call successors, (110), 4 states have call predecessors, (110), 5 states have return successors, (61), 2 states have call predecessors, (61), 2 states have call successors, (61) [2022-11-18 20:10:52,201 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 20:10:52,201 INFO L93 Difference]: Finished difference Result 54916 states and 81542 transitions. [2022-11-18 20:10:52,202 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-11-18 20:10:52,202 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 8.5) internal successors, (102), 10 states have internal predecessors, (102), 2 states have call successors, (110), 4 states have call predecessors, (110), 5 states have return successors, (61), 2 states have call predecessors, (61), 2 states have call successors, (61) Word has length 328 [2022-11-18 20:10:52,203 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 20:10:52,374 INFO L225 Difference]: With dead ends: 54916 [2022-11-18 20:10:52,374 INFO L226 Difference]: Without dead ends: 32084 [2022-11-18 20:10:52,593 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 767 GetRequests, 748 SyntacticMatches, 1 SemanticMatches, 18 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 19 ImplicationChecksByTransitivity, 0.5s TimeCoverageRelationStatistics Valid=107, Invalid=273, Unknown=0, NotChecked=0, Total=380 [2022-11-18 20:10:52,598 INFO L413 NwaCegarLoop]: 1966 mSDtfsCounter, 1551 mSDsluCounter, 5541 mSDsCounter, 0 mSdLazyCounter, 3248 mSolverCounterSat, 797 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 7.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1597 SdHoareTripleChecker+Valid, 7507 SdHoareTripleChecker+Invalid, 4045 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 797 IncrementalHoareTripleChecker+Valid, 3248 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 7.8s IncrementalHoareTripleChecker+Time [2022-11-18 20:10:52,598 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1597 Valid, 7507 Invalid, 4045 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [797 Valid, 3248 Invalid, 0 Unknown, 0 Unchecked, 7.8s Time] [2022-11-18 20:10:52,622 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 32084 states. [2022-11-18 20:10:54,440 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 32084 to 22908. [2022-11-18 20:10:54,455 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 22908 states, 17700 states have (on average 1.4569491525423728) internal successors, (25788), 18072 states have internal predecessors, (25788), 3750 states have call successors, (3750), 1366 states have call predecessors, (3750), 1366 states have return successors, (3750), 3631 states have call predecessors, (3750), 3750 states have call successors, (3750) [2022-11-18 20:10:54,546 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 22908 states to 22908 states and 33288 transitions. [2022-11-18 20:10:54,552 INFO L78 Accepts]: Start accepts. Automaton has 22908 states and 33288 transitions. Word has length 328 [2022-11-18 20:10:54,553 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 20:10:54,553 INFO L495 AbstractCegarLoop]: Abstraction has 22908 states and 33288 transitions. [2022-11-18 20:10:54,554 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 12 states, 12 states have (on average 8.5) internal successors, (102), 10 states have internal predecessors, (102), 2 states have call successors, (110), 4 states have call predecessors, (110), 5 states have return successors, (61), 2 states have call predecessors, (61), 2 states have call successors, (61) [2022-11-18 20:10:54,554 INFO L276 IsEmpty]: Start isEmpty. Operand 22908 states and 33288 transitions. [2022-11-18 20:10:54,560 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 335 [2022-11-18 20:10:54,560 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 20:10:54,560 INFO L195 NwaCegarLoop]: trace histogram [48, 48, 48, 8, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 20:10:54,577 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a612a7d4-9e11-44ba-88e8-b3c824144627/bin/uautomizer-TMbwUNV5ro/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-11-18 20:10:54,772 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6,3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a612a7d4-9e11-44ba-88e8-b3c824144627/bin/uautomizer-TMbwUNV5ro/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-18 20:10:54,773 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting gspca_vm_openErr0ASSERT_VIOLATIONINTEGER_OVERFLOW === [wxh_to_modeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW, wxh_to_modeErr1ASSERT_VIOLATIONINTEGER_OVERFLOW, frame_freeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (and 95 more)] === [2022-11-18 20:10:54,773 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 20:10:54,774 INFO L85 PathProgramCache]: Analyzing trace with hash 1154794026, now seen corresponding path program 2 times [2022-11-18 20:10:54,774 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 20:10:54,774 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [149752964] [2022-11-18 20:10:54,774 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 20:10:54,774 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 20:10:55,741 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-11-18 20:10:55,742 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-11-18 20:10:56,513 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-11-18 20:10:57,008 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2022-11-18 20:10:57,009 INFO L359 BasicCegarLoop]: Counterexample is feasible [2022-11-18 20:10:57,010 INFO L805 garLoopResultBuilder]: Registering result UNSAFE for location gspca_vm_openErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (97 of 98 remaining) [2022-11-18 20:10:57,012 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location wxh_to_modeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (96 of 98 remaining) [2022-11-18 20:10:57,013 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location wxh_to_modeErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (95 of 98 remaining) [2022-11-18 20:10:57,013 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location frame_freeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (94 of 98 remaining) [2022-11-18 20:10:57,013 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location frame_freeErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (93 of 98 remaining) [2022-11-18 20:10:57,013 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location alt_xferErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (92 of 98 remaining) [2022-11-18 20:10:57,013 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location alt_xferErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (91 of 98 remaining) [2022-11-18 20:10:57,014 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location dev_mmapErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (90 of 98 remaining) [2022-11-18 20:10:57,014 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location dev_mmapErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (89 of 98 remaining) [2022-11-18 20:10:57,014 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location __create_pipeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (88 of 98 remaining) [2022-11-18 20:10:57,014 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location __create_pipeErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (87 of 98 remaining) [2022-11-18 20:10:57,015 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location vidioc_streamoffErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (86 of 98 remaining) [2022-11-18 20:10:57,016 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location vidioc_streamoffErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (85 of 98 remaining) [2022-11-18 20:10:57,016 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location gspca_init_transferErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (84 of 98 remaining) [2022-11-18 20:10:57,016 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location gspca_init_transferErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (83 of 98 remaining) [2022-11-18 20:10:57,016 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location gspca_init_transferErr2ASSERT_VIOLATIONINTEGER_OVERFLOW (82 of 98 remaining) [2022-11-18 20:10:57,017 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location gspca_init_transferErr3ASSERT_VIOLATIONINTEGER_OVERFLOW (81 of 98 remaining) [2022-11-18 20:10:57,017 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location gspca_init_transferErr4ASSERT_VIOLATIONINTEGER_OVERFLOW (80 of 98 remaining) [2022-11-18 20:10:57,017 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location gspca_init_transferErr5ASSERT_VIOLATIONINTEGER_OVERFLOW (79 of 98 remaining) [2022-11-18 20:10:57,017 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location gspca_init_transferErr6ASSERT_VIOLATIONINTEGER_OVERFLOW (78 of 98 remaining) [2022-11-18 20:10:57,018 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location gspca_init_transferErr7ASSERT_VIOLATIONINTEGER_OVERFLOW (77 of 98 remaining) [2022-11-18 20:10:57,018 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location gspca_init_transferErr8ASSERT_VIOLATIONINTEGER_OVERFLOW (76 of 98 remaining) [2022-11-18 20:10:57,018 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location gspca_init_transferErr9ASSERT_VIOLATIONINTEGER_OVERFLOW (75 of 98 remaining) [2022-11-18 20:10:57,018 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location gspca_init_transferErr10ASSERT_VIOLATIONINTEGER_OVERFLOW (74 of 98 remaining) [2022-11-18 20:10:57,018 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location gspca_init_transferErr11ASSERT_VIOLATIONINTEGER_OVERFLOW (73 of 98 remaining) [2022-11-18 20:10:57,019 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location gspca_init_transferErr12ASSERT_VIOLATIONINTEGER_OVERFLOW (72 of 98 remaining) [2022-11-18 20:10:57,019 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location gspca_init_transferErr13ASSERT_VIOLATIONINTEGER_OVERFLOW (71 of 98 remaining) [2022-11-18 20:10:57,020 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location gspca_init_transferErr14ASSERT_VIOLATIONINTEGER_OVERFLOW (70 of 98 remaining) [2022-11-18 20:10:57,020 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location gspca_init_transferErr15ASSERT_VIOLATIONINTEGER_OVERFLOW (69 of 98 remaining) [2022-11-18 20:10:57,020 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location gspca_init_transferErr16ASSERT_VIOLATIONINTEGER_OVERFLOW (68 of 98 remaining) [2022-11-18 20:10:57,020 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location gspca_init_transferErr17ASSERT_VIOLATIONINTEGER_OVERFLOW (67 of 98 remaining) [2022-11-18 20:10:57,021 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location gspca_init_transferErr18ASSERT_VIOLATIONINTEGER_OVERFLOW (66 of 98 remaining) [2022-11-18 20:10:57,021 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location gspca_init_transferErr19ASSERT_VIOLATIONINTEGER_OVERFLOW (65 of 98 remaining) [2022-11-18 20:10:57,021 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location gspca_init_transferErr20ASSERT_VIOLATIONINTEGER_OVERFLOW (64 of 98 remaining) [2022-11-18 20:10:57,021 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location gspca_init_transferErr21ASSERT_VIOLATIONINTEGER_OVERFLOW (63 of 98 remaining) [2022-11-18 20:10:57,021 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location gspca_init_transferErr22ASSERT_VIOLATIONINTEGER_OVERFLOW (62 of 98 remaining) [2022-11-18 20:10:57,022 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location gspca_init_transferErr23ASSERT_VIOLATIONINTEGER_OVERFLOW (61 of 98 remaining) [2022-11-18 20:10:57,022 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location gspca_init_transferErr24ASSERT_VIOLATIONINTEGER_OVERFLOW (60 of 98 remaining) [2022-11-18 20:10:57,022 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location gspca_init_transferErr25ASSERT_VIOLATIONINTEGER_OVERFLOW (59 of 98 remaining) [2022-11-18 20:10:57,022 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location gspca_init_transferErr26ASSERT_VIOLATIONINTEGER_OVERFLOW (58 of 98 remaining) [2022-11-18 20:10:57,022 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location gspca_init_transferErr27ASSERT_VIOLATIONINTEGER_OVERFLOW (57 of 98 remaining) [2022-11-18 20:10:57,023 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location gspca_init_transferErr28ASSERT_VIOLATIONINTEGER_OVERFLOW (56 of 98 remaining) [2022-11-18 20:10:57,023 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location gspca_init_transferErr29ASSERT_VIOLATIONINTEGER_OVERFLOW (55 of 98 remaining) [2022-11-18 20:10:57,023 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location gspca_init_transferErr30ASSERT_VIOLATIONINTEGER_OVERFLOW (54 of 98 remaining) [2022-11-18 20:10:57,024 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location gspca_init_transferErr31ASSERT_VIOLATIONINTEGER_OVERFLOW (53 of 98 remaining) [2022-11-18 20:10:57,024 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location gspca_init_transferErr32ASSERT_VIOLATIONINTEGER_OVERFLOW (52 of 98 remaining) [2022-11-18 20:10:57,024 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location gspca_init_transferErr33ASSERT_VIOLATIONINTEGER_OVERFLOW (51 of 98 remaining) [2022-11-18 20:10:57,024 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location gspca_init_transferErr34ASSERT_VIOLATIONINTEGER_OVERFLOW (50 of 98 remaining) [2022-11-18 20:10:57,025 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location gspca_init_transferErr35ASSERT_VIOLATIONINTEGER_OVERFLOW (49 of 98 remaining) [2022-11-18 20:10:57,025 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location gspca_init_transferErr36ASSERT_VIOLATIONINTEGER_OVERFLOW (48 of 98 remaining) [2022-11-18 20:10:57,025 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location gspca_init_transferErr37ASSERT_VIOLATIONINTEGER_OVERFLOW (47 of 98 remaining) [2022-11-18 20:10:57,025 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location gspca_init_transferErr38ASSERT_VIOLATIONINTEGER_OVERFLOW (46 of 98 remaining) [2022-11-18 20:10:57,025 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location gspca_init_transferErr39ASSERT_VIOLATIONINTEGER_OVERFLOW (45 of 98 remaining) [2022-11-18 20:10:57,026 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location vidioc_reqbufsErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (44 of 98 remaining) [2022-11-18 20:10:57,026 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location vidioc_reqbufsErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (43 of 98 remaining) [2022-11-18 20:10:57,026 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location vidioc_reqbufsErr2ASSERT_VIOLATIONINTEGER_OVERFLOW (42 of 98 remaining) [2022-11-18 20:10:57,026 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location vidioc_reqbufsErr3ASSERT_VIOLATIONINTEGER_OVERFLOW (41 of 98 remaining) [2022-11-18 20:10:57,027 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location try_fmt_vid_capErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (40 of 98 remaining) [2022-11-18 20:10:57,027 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location try_fmt_vid_capErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (39 of 98 remaining) [2022-11-18 20:10:57,027 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location try_fmt_vid_capErr2ASSERT_VIOLATIONINTEGER_OVERFLOW (38 of 98 remaining) [2022-11-18 20:10:57,027 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location try_fmt_vid_capErr3ASSERT_VIOLATIONINTEGER_OVERFLOW (37 of 98 remaining) [2022-11-18 20:10:57,027 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location gspca_vm_closeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (36 of 98 remaining) [2022-11-18 20:10:57,028 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location gspca_vm_closeErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (35 of 98 remaining) [2022-11-18 20:10:57,028 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location alloc_and_submit_int_urbErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (34 of 98 remaining) [2022-11-18 20:10:57,028 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location alloc_and_submit_int_urbErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (33 of 98 remaining) [2022-11-18 20:10:57,028 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location vidioc_qbufErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (32 of 98 remaining) [2022-11-18 20:10:57,028 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location vidioc_qbufErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (31 of 98 remaining) [2022-11-18 20:10:57,029 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location fill_frameErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (30 of 98 remaining) [2022-11-18 20:10:57,029 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location fill_frameErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (29 of 98 remaining) [2022-11-18 20:10:57,029 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location read_allocErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (28 of 98 remaining) [2022-11-18 20:10:57,029 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location read_allocErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (27 of 98 remaining) [2022-11-18 20:10:57,029 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location gspca_vm_openErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (26 of 98 remaining) [2022-11-18 20:10:57,030 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (25 of 98 remaining) [2022-11-18 20:10:57,030 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (24 of 98 remaining) [2022-11-18 20:10:57,030 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr2ASSERT_VIOLATIONINTEGER_OVERFLOW (23 of 98 remaining) [2022-11-18 20:10:57,030 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr3ASSERT_VIOLATIONINTEGER_OVERFLOW (22 of 98 remaining) [2022-11-18 20:10:57,030 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr4ASSERT_VIOLATIONINTEGER_OVERFLOW (21 of 98 remaining) [2022-11-18 20:10:57,031 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr5ASSERT_VIOLATIONINTEGER_OVERFLOW (20 of 98 remaining) [2022-11-18 20:10:57,031 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr6ASSERT_VIOLATIONINTEGER_OVERFLOW (19 of 98 remaining) [2022-11-18 20:10:57,031 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr7ASSERT_VIOLATIONINTEGER_OVERFLOW (18 of 98 remaining) [2022-11-18 20:10:57,031 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr8ASSERT_VIOLATIONINTEGER_OVERFLOW (17 of 98 remaining) [2022-11-18 20:10:57,031 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr9ASSERT_VIOLATIONINTEGER_OVERFLOW (16 of 98 remaining) [2022-11-18 20:10:57,032 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr10ASSERT_VIOLATIONINTEGER_OVERFLOW (15 of 98 remaining) [2022-11-18 20:10:57,032 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr11ASSERT_VIOLATIONINTEGER_OVERFLOW (14 of 98 remaining) [2022-11-18 20:10:57,032 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr12ASSERT_VIOLATIONINTEGER_OVERFLOW (13 of 98 remaining) [2022-11-18 20:10:57,032 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr13ASSERT_VIOLATIONINTEGER_OVERFLOW (12 of 98 remaining) [2022-11-18 20:10:57,033 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr14ASSERT_VIOLATIONINTEGER_OVERFLOW (11 of 98 remaining) [2022-11-18 20:10:57,034 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr15ASSERT_VIOLATIONINTEGER_OVERFLOW (10 of 98 remaining) [2022-11-18 20:10:57,034 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr16ASSERT_VIOLATIONINTEGER_OVERFLOW (9 of 98 remaining) [2022-11-18 20:10:57,034 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr17ASSERT_VIOLATIONINTEGER_OVERFLOW (8 of 98 remaining) [2022-11-18 20:10:57,034 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr18ASSERT_VIOLATIONINTEGER_OVERFLOW (7 of 98 remaining) [2022-11-18 20:10:57,034 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr19ASSERT_VIOLATIONINTEGER_OVERFLOW (6 of 98 remaining) [2022-11-18 20:10:57,035 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr20ASSERT_VIOLATIONINTEGER_OVERFLOW (5 of 98 remaining) [2022-11-18 20:10:57,035 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr21ASSERT_VIOLATIONINTEGER_OVERFLOW (4 of 98 remaining) [2022-11-18 20:10:57,035 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location vidioc_dqbufErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (3 of 98 remaining) [2022-11-18 20:10:57,035 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location vidioc_dqbufErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (2 of 98 remaining) [2022-11-18 20:10:57,035 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location gspca_input_create_urbErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (1 of 98 remaining) [2022-11-18 20:10:57,036 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location gspca_input_create_urbErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (0 of 98 remaining) [2022-11-18 20:10:57,036 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-11-18 20:10:57,040 INFO L444 BasicCegarLoop]: Path program histogram: [2, 1, 1, 1, 1, 1, 1] [2022-11-18 20:10:57,047 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2022-11-18 20:10:57,187 WARN L421 cessorBacktranslator]: Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) [2022-11-18 20:10:57,192 WARN L421 cessorBacktranslator]: Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) [2022-11-18 20:10:57,870 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 18.11 08:10:57 BoogieIcfgContainer [2022-11-18 20:10:57,870 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-11-18 20:10:57,871 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-11-18 20:10:57,871 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-11-18 20:10:57,871 INFO L275 PluginConnector]: Witness Printer initialized [2022-11-18 20:10:57,872 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 18.11 08:09:20" (3/4) ... [2022-11-18 20:10:57,874 INFO L131 WitnessPrinter]: Generating witness for reachability counterexample [2022-11-18 20:10:57,992 WARN L421 cessorBacktranslator]: Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) [2022-11-18 20:10:57,996 WARN L421 cessorBacktranslator]: Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) [2022-11-18 20:10:58,667 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a612a7d4-9e11-44ba-88e8-b3c824144627/bin/uautomizer-TMbwUNV5ro/witness.graphml [2022-11-18 20:10:58,667 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-11-18 20:10:58,668 INFO L158 Benchmark]: Toolchain (without parser) took 107360.93ms. Allocated memory was 113.2MB in the beginning and 3.8GB in the end (delta: 3.7GB). Free memory was 73.2MB in the beginning and 2.9GB in the end (delta: -2.8GB). Peak memory consumption was 877.1MB. Max. memory is 16.1GB. [2022-11-18 20:10:58,668 INFO L158 Benchmark]: CDTParser took 0.30ms. Allocated memory is still 113.2MB. Free memory is still 68.9MB. There was no memory consumed. Max. memory is 16.1GB. [2022-11-18 20:10:58,669 INFO L158 Benchmark]: CACSL2BoogieTranslator took 3032.86ms. Allocated memory was 113.2MB in the beginning and 205.5MB in the end (delta: 92.3MB). Free memory was 73.2MB in the beginning and 105.7MB in the end (delta: -32.5MB). Peak memory consumption was 75.5MB. Max. memory is 16.1GB. [2022-11-18 20:10:58,669 INFO L158 Benchmark]: Boogie Procedure Inliner took 286.99ms. Allocated memory is still 205.5MB. Free memory was 105.7MB in the beginning and 79.4MB in the end (delta: 26.2MB). Peak memory consumption was 27.3MB. Max. memory is 16.1GB. [2022-11-18 20:10:58,670 INFO L158 Benchmark]: Boogie Preprocessor took 325.84ms. Allocated memory is still 205.5MB. Free memory was 79.4MB in the beginning and 106.8MB in the end (delta: -27.3MB). Peak memory consumption was 16.7MB. Max. memory is 16.1GB. [2022-11-18 20:10:58,670 INFO L158 Benchmark]: RCFGBuilder took 5255.28ms. Allocated memory was 205.5MB in the beginning and 369.1MB in the end (delta: 163.6MB). Free memory was 106.8MB in the beginning and 212.3MB in the end (delta: -105.6MB). Peak memory consumption was 132.5MB. Max. memory is 16.1GB. [2022-11-18 20:10:58,671 INFO L158 Benchmark]: TraceAbstraction took 97652.73ms. Allocated memory was 369.1MB in the beginning and 3.8GB in the end (delta: 3.4GB). Free memory was 211.3MB in the beginning and 3.1GB in the end (delta: -2.9GB). Peak memory consumption was 864.2MB. Max. memory is 16.1GB. [2022-11-18 20:10:58,672 INFO L158 Benchmark]: Witness Printer took 796.83ms. Allocated memory is still 3.8GB. Free memory was 3.1GB in the beginning and 2.9GB in the end (delta: 216.0MB). Peak memory consumption was 216.0MB. Max. memory is 16.1GB. [2022-11-18 20:10:58,676 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.30ms. Allocated memory is still 113.2MB. Free memory is still 68.9MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 3032.86ms. Allocated memory was 113.2MB in the beginning and 205.5MB in the end (delta: 92.3MB). Free memory was 73.2MB in the beginning and 105.7MB in the end (delta: -32.5MB). Peak memory consumption was 75.5MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 286.99ms. Allocated memory is still 205.5MB. Free memory was 105.7MB in the beginning and 79.4MB in the end (delta: 26.2MB). Peak memory consumption was 27.3MB. Max. memory is 16.1GB. * Boogie Preprocessor took 325.84ms. Allocated memory is still 205.5MB. Free memory was 79.4MB in the beginning and 106.8MB in the end (delta: -27.3MB). Peak memory consumption was 16.7MB. Max. memory is 16.1GB. * RCFGBuilder took 5255.28ms. Allocated memory was 205.5MB in the beginning and 369.1MB in the end (delta: 163.6MB). Free memory was 106.8MB in the beginning and 212.3MB in the end (delta: -105.6MB). Peak memory consumption was 132.5MB. Max. memory is 16.1GB. * TraceAbstraction took 97652.73ms. Allocated memory was 369.1MB in the beginning and 3.8GB in the end (delta: 3.4GB). Free memory was 211.3MB in the beginning and 3.1GB in the end (delta: -2.9GB). Peak memory consumption was 864.2MB. Max. memory is 16.1GB. * Witness Printer took 796.83ms. Allocated memory is still 3.8GB. Free memory was 3.1GB in the beginning and 2.9GB in the end (delta: 216.0MB). Peak memory consumption was 216.0MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.boogie.preprocessor: - GenericResult: Unfinished Backtranslation Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) - GenericResult: Unfinished Backtranslation Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) - GenericResult: Unfinished Backtranslation Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) - GenericResult: Unfinished Backtranslation Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResult: Unfinished Backtranslation The program execution was not completely translated back. - GenericResult: Unfinished Backtranslation The program execution was not completely translated back. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - CounterExampleResult [Line: 5489]: integer overflow possible integer overflow possible We found a FailurePath: [L7831-L7904] static struct video_device const gspca_template = {{{0, 0}, 0, 0U, 0, 0U, 0U, 0UL, 0U, (unsigned short)0, (unsigned short)0, (unsigned short)0, (unsigned short)0, 0, 0, 0, 0, 0, 0, {.alsa = {0U, 0U, 0U}}}, (struct v4l2_file_operations const *)(& dev_fops), {0, 0, {0, {0, 0}, 0, 0, 0, 0, {{0}}, {{{0L}, {0, 0}, 0, {0, {0, 0}, 0, 0, 0UL}}, {{0, 0}, 0UL, 0, 0, 0UL, 0, 0, 0, {(char)0, (char)0, (char)0, (char)0, (char)0, (char)0, (char)0, (char)0, (char)0, (char)0, (char)0, (char)0, (char)0, (char)0, (char)0, (char)0}, {0, {0, 0}, 0, 0, 0UL}}, 0, 0}, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0}, 0, 0, {{0}, {{{{{0U}}, 0U, 0U, 0, {0, {0, 0}, 0, 0, 0UL}}}}, {0, 0}, 0, 0, 0, {0, {0, 0}, 0, 0, 0UL}}, 0, 0, 0, {{0}, (unsigned char)0, (unsigned char)0, (_Bool)0, (_Bool)0, (_Bool)0, (_Bool)0, {{{{{0U}}, 0U, 0U, 0, {0, {0, 0}, 0, 0, 0UL}}}}, {0, 0}, {0U, {{{{{{0U}}, 0U, 0U, 0, {0, {0, 0}, 0, 0, 0UL}}}}, {0, 0}}}, 0, (_Bool)0, (_Bool)0, {{0, 0}, 0UL, 0, 0, 0UL, 0, 0, 0, {(char)0, (char)0, (char)0, (char)0, (char)0, (char)0, (char)0, (char)0, (char)0, (char)0, (char)0, (char)0, (char)0, (char)0, (char)0, (char)0}, {0, {0, 0}, 0, 0, 0UL}}, 0UL, {{0L}, {0, 0}, 0, {0, {0, 0}, 0, 0, 0UL}}, {{{{{{0U}}, 0U, 0U, 0, {0, {0, 0}, 0, 0, 0UL}}}}, {0, 0}}, {0}, {0}, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0, 0, 0, 0, 0UL, 0UL, 0UL, 0UL, 0, 0}, 0, 0, 0, 0ULL, 0, {0, 0}, 0, {0, 0}, 0, {0}, 0U, 0U, {{{{{0U}}, 0U, 0U, 0, {0, {0, 0}, 0, 0, 0UL}}}}, {0, 0}, {0, {0, 0}, {{0}}}, 0, 0, 0, 0, (_Bool)0, (_Bool)0}, 0, 0, 0, 0, 0, 0, {'g', 's', 'p', 'c', 'a', ' ', 'm', 'a', 'i', 'n', ' ', 'd', 'r', 'i', 'v', 'e', 'r', '\000'}, 0, 0, 0, (unsigned short)0, 0UL, 0, {{{{{0U}}, 0U, 0U, 0, {0, {0, 0}, 0, 0, 0UL}}}}, {0, 0}, 0, 0ULL, & video_device_release_empty, & dev_ioctl_ops, {0UL, 0UL, 0UL}, {0UL, 0UL, 0UL}, 0}; [L7820-L7830] static struct v4l2_ioctl_ops const dev_ioctl_ops = {& vidioc_querycap, 0, 0, & vidioc_enum_fmt_vid_cap, 0, 0, 0, 0, & vidioc_g_fmt_vid_cap, 0, 0, 0, 0, 0, 0, 0, 0, 0, & vidioc_s_fmt_vid_cap, 0, 0, 0, 0, 0, 0, 0, 0, 0, & vidioc_try_fmt_vid_cap, 0, 0, 0, 0, 0, 0, 0, 0, 0, & vidioc_reqbufs, & vidioc_querybuf, & vidioc_qbuf, 0, & vidioc_dqbuf, 0, 0, 0, 0, 0, & vidioc_streamon, & vidioc_streamoff, 0, 0, 0, & vidioc_enum_input, & vidioc_g_input, & vidioc_s_input, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, & vidioc_g_jpegcomp, & vidioc_s_jpegcomp, 0, 0, 0, 0, 0, & vidioc_g_parm, & vidioc_s_parm, 0, 0, 0, 0, 0, 0, 0, 0, & vidioc_g_register, & vidioc_s_register, & vidioc_g_chip_info, & vidioc_enum_framesizes, & vidioc_enum_frameintervals, 0, 0, 0, 0, 0, & v4l2_ctrl_subscribe_event, & v4l2_event_unsubscribe, 0}; [L5333] int ldv_state_variable_4 ; [L9099] int SERIAL_STATE = 0; [L5323] int LDV_IN_INTERRUPT = 1; [L9102] struct usb_device *usb_dev = 0; [L9103] int dev_counter = 0; [L9107] void (*completeFnBulk)(struct urb * ) ; [L5329] int ref_cnt ; [L9101] struct urb *usb_urb = 0; [L5438] int gspca_debug ; [L7817-L7819] static struct v4l2_file_operations dev_fops = {& __this_module, & dev_read, 0, & dev_poll, 0, & video_ioctl2, 0, 0, & dev_mmap, & dev_open, & dev_close}; [L9100] void *usb_intfdata = 0; [L5325] struct vm_area_struct *gspca_vm_ops_group0 ; [L9106] void (*completeFnInt)(struct urb * ) ; [L5334] struct v4l2_format *dev_ioctl_ops_group0 ; [L8183] int ldv_retval_0 ; [L5324] struct v4l2_event_subscription *dev_ioctl_ops_group1 ; [L8185] int ldv_retval_1 ; [L5330] struct v4l2_streamparm *dev_ioctl_ops_group2 ; [L5331] struct file *dev_ioctl_ops_group3 ; [L5320] struct v4l2_buffer *dev_ioctl_ops_group4 ; [L5321] struct v4l2_fh *dev_ioctl_ops_group5 ; [L9098] int INTERF_STATE = 0; [L9104] int completeFnIntCounter = 0; [L5328] int ldv_state_variable_2 ; [L5327] int ldv_state_variable_3 ; [L9105] int completeFnBulkCounter = 0; [L5326] int ldv_state_variable_0 ; [L5332] int ldv_state_variable_1 ; [L5322] struct file *dev_fops_group0 ; [L5507-L5508] static struct vm_operations_struct const gspca_vm_ops = {& gspca_vm_open, & gspca_vm_close, 0, 0, 0, 0, 0, 0, 0}; VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8232] struct video_device *ldvarg0 ; [L8233] void *tmp ; [L8234] unsigned long ldvarg1 ; [L8235] unsigned long tmp___0 ; [L8236] struct vm_area_struct *ldvarg7 ; [L8237] void *tmp___1 ; [L8238] loff_t *ldvarg4 ; [L8239] void *tmp___2 ; [L8240] struct poll_table_struct *ldvarg3 ; [L8241] void *tmp___3 ; [L8242] size_t ldvarg5 ; [L8243] size_t tmp___4 ; [L8244] unsigned int ldvarg2 ; [L8245] unsigned int tmp___5 ; [L8246] char *ldvarg6 ; [L8247] void *tmp___6 ; [L8248] struct v4l2_jpegcompression *ldvarg18 ; [L8249] void *tmp___7 ; [L8250] void *ldvarg11 ; [L8251] void *tmp___8 ; [L8252] void *ldvarg32 ; [L8253] void *tmp___9 ; [L8254] void *ldvarg23 ; [L8255] void *tmp___10 ; [L8256] void *ldvarg43 ; [L8257] void *tmp___11 ; [L8258] void *ldvarg42 ; [L8259] void *tmp___12 ; [L8260] unsigned int ldvarg12 ; [L8261] unsigned int tmp___13 ; [L8262] struct v4l2_fmtdesc *ldvarg37 ; [L8263] void *tmp___14 ; [L8264] void *ldvarg29 ; [L8265] void *tmp___15 ; [L8266] struct v4l2_requestbuffers *ldvarg44 ; [L8267] void *tmp___16 ; [L8268] struct v4l2_frmivalenum *ldvarg24 ; [L8269] void *tmp___17 ; [L8270] void *ldvarg35 ; [L8271] void *tmp___18 ; [L8272] void *ldvarg38 ; [L8273] void *tmp___19 ; [L8274] void *ldvarg33 ; [L8275] void *tmp___20 ; [L8276] void *ldvarg16 ; [L8277] void *tmp___21 ; [L8278] void *ldvarg14 ; [L8279] void *tmp___22 ; [L8280] struct v4l2_dbg_chip_info *ldvarg34 ; [L8281] void *tmp___23 ; [L8282] struct v4l2_frmsizeenum *ldvarg28 ; [L8283] void *tmp___24 ; [L8284] enum v4l2_buf_type ldvarg39 ; [L8285] struct v4l2_jpegcompression *ldvarg20 ; [L8286] void *tmp___25 ; [L8287] unsigned int *ldvarg31 ; [L8288] void *tmp___26 ; [L8289] void *ldvarg41 ; [L8290] void *tmp___27 ; [L8291] enum v4l2_buf_type ldvarg8 ; [L8292] void *ldvarg13 ; [L8293] void *tmp___28 ; [L8294] struct v4l2_dbg_register *ldvarg10 ; [L8295] void *tmp___29 ; [L8296] void *ldvarg36 ; [L8297] void *tmp___30 ; [L8298] void *ldvarg40 ; [L8299] void *tmp___31 ; [L8300] void *ldvarg9 ; [L8301] void *tmp___32 ; [L8302] void *ldvarg45 ; [L8303] void *tmp___33 ; [L8304] struct v4l2_capability *ldvarg26 ; [L8305] void *tmp___34 ; [L8306] void *ldvarg27 ; [L8307] void *tmp___35 ; [L8308] struct v4l2_input *ldvarg15 ; [L8309] void *tmp___36 ; [L8310] void *ldvarg30 ; [L8311] void *tmp___37 ; [L8312] void *ldvarg21 ; [L8313] void *tmp___38 ; [L8314] void *ldvarg17 ; [L8315] void *tmp___39 ; [L8316] void *ldvarg25 ; [L8317] void *tmp___40 ; [L8318] struct v4l2_dbg_register *ldvarg22 ; [L8319] void *tmp___41 ; [L8320] void *ldvarg19 ; [L8321] void *tmp___42 ; [L8322] int tmp___43 ; [L8323] int tmp___44 ; [L8324] int tmp___45 ; [L8325] int tmp___46 ; [L8326] int tmp___47 ; [L8327] int tmp___48 ; VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg39={94:0}, ldvarg8={95:0}, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8329] CALL, EXPR ldv_zalloc(1800UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=1800, \result={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=1800, tmp___0=-2, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8329] RET, EXPR ldv_zalloc(1800UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(1800UL)={0:0}, ldvarg39={94:0}, ldvarg8={95:0}, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8329] tmp = ldv_zalloc(1800UL) [L8330] ldvarg0 = (struct video_device *)tmp [L8331] tmp___0 = __VERIFIER_nondet_ulong() [L8332] ldvarg1 = tmp___0 VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg39={94:0}, ldvarg8={95:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8333] CALL, EXPR ldv_zalloc(184UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=184, \result={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=184, tmp___0=-3, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8333] RET, EXPR ldv_zalloc(184UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(184UL)={0:0}, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg39={94:0}, ldvarg8={95:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8333] tmp___1 = ldv_zalloc(184UL) [L8334] ldvarg7 = (struct vm_area_struct *)tmp___1 VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg39={94:0}, ldvarg7={0:0}, ldvarg8={95:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8335] CALL, EXPR ldv_zalloc(8UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=8, \result={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=8, tmp___0=-4, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8335] RET, EXPR ldv_zalloc(8UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(8UL)={0:0}, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg39={94:0}, ldvarg7={0:0}, ldvarg8={95:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8335] tmp___2 = ldv_zalloc(8UL) [L8336] ldvarg4 = (loff_t *)tmp___2 VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___2={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8337] CALL, EXPR ldv_zalloc(16UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=16, \result={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=16, tmp___0=-5, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8337] RET, EXPR ldv_zalloc(16UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(16UL)={0:0}, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___2={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8337] tmp___3 = ldv_zalloc(16UL) [L8338] ldvarg3 = (struct poll_table_struct *)tmp___3 [L8339] tmp___4 = __VERIFIER_nondet_size_t() [L8340] ldvarg5 = tmp___4 [L8341] tmp___5 = __VERIFIER_nondet_uint() [L8342] ldvarg2 = tmp___5 VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg2=2147483653, ldvarg3={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg5=18446744073709551610, ldvarg7={0:0}, ldvarg8={95:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___2={0:0}, tmp___3={0:0}, tmp___4=18446744073709551610, tmp___5=2147483653, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8343] CALL, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=1, \result={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=1, tmp___0=-7, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8343] RET, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(1UL)={0:0}, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg2=2147483653, ldvarg3={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg5=18446744073709551610, ldvarg7={0:0}, ldvarg8={95:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___2={0:0}, tmp___3={0:0}, tmp___4=18446744073709551610, tmp___5=2147483653, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8343] tmp___6 = ldv_zalloc(1UL) [L8344] ldvarg6 = (char *)tmp___6 VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg2=2147483653, ldvarg3={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg5=18446744073709551610, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___2={0:0}, tmp___3={0:0}, tmp___4=18446744073709551610, tmp___5=2147483653, tmp___6={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8345] CALL, EXPR ldv_zalloc(140UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=140, \result={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=140, tmp___0=-8, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8345] RET, EXPR ldv_zalloc(140UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(140UL)={0:0}, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg2=2147483653, ldvarg3={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg5=18446744073709551610, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___2={0:0}, tmp___3={0:0}, tmp___4=18446744073709551610, tmp___5=2147483653, tmp___6={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8345] tmp___7 = ldv_zalloc(140UL) [L8346] ldvarg18 = (struct v4l2_jpegcompression *)tmp___7 VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg18={0:0}, ldvarg2=2147483653, ldvarg3={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg5=18446744073709551610, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___2={0:0}, tmp___3={0:0}, tmp___4=18446744073709551610, tmp___5=2147483653, tmp___6={0:0}, tmp___7={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8347] CALL, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=1, \result={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=1, tmp___0=-9, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8347] RET, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(1UL)={0:0}, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg18={0:0}, ldvarg2=2147483653, ldvarg3={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg5=18446744073709551610, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___2={0:0}, tmp___3={0:0}, tmp___4=18446744073709551610, tmp___5=2147483653, tmp___6={0:0}, tmp___7={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8347] tmp___8 = ldv_zalloc(1UL) [L8348] ldvarg11 = tmp___8 VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg11={0:0}, ldvarg18={0:0}, ldvarg2=2147483653, ldvarg3={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg5=18446744073709551610, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___2={0:0}, tmp___3={0:0}, tmp___4=18446744073709551610, tmp___5=2147483653, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8349] CALL, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=1, \result={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=1, tmp___0=-10, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8349] RET, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(1UL)={0:0}, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg11={0:0}, ldvarg18={0:0}, ldvarg2=2147483653, ldvarg3={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg5=18446744073709551610, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___2={0:0}, tmp___3={0:0}, tmp___4=18446744073709551610, tmp___5=2147483653, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8349] tmp___9 = ldv_zalloc(1UL) [L8350] ldvarg32 = tmp___9 VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg11={0:0}, ldvarg18={0:0}, ldvarg2=2147483653, ldvarg3={0:0}, ldvarg32={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg5=18446744073709551610, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___2={0:0}, tmp___3={0:0}, tmp___4=18446744073709551610, tmp___5=2147483653, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8351] CALL, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=1, \result={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=1, tmp___0=-11, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8351] RET, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(1UL)={0:0}, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg11={0:0}, ldvarg18={0:0}, ldvarg2=2147483653, ldvarg3={0:0}, ldvarg32={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg5=18446744073709551610, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___2={0:0}, tmp___3={0:0}, tmp___4=18446744073709551610, tmp___5=2147483653, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8351] tmp___10 = ldv_zalloc(1UL) [L8352] ldvarg23 = tmp___10 VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg11={0:0}, ldvarg18={0:0}, ldvarg2=2147483653, ldvarg23={0:0}, ldvarg3={0:0}, ldvarg32={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg5=18446744073709551610, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___10={0:0}, tmp___2={0:0}, tmp___3={0:0}, tmp___4=18446744073709551610, tmp___5=2147483653, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8353] CALL, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=1, \result={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=1, tmp___0=-12, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8353] RET, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(1UL)={0:0}, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg11={0:0}, ldvarg18={0:0}, ldvarg2=2147483653, ldvarg23={0:0}, ldvarg3={0:0}, ldvarg32={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg5=18446744073709551610, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___10={0:0}, tmp___2={0:0}, tmp___3={0:0}, tmp___4=18446744073709551610, tmp___5=2147483653, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8353] tmp___11 = ldv_zalloc(1UL) [L8354] ldvarg43 = tmp___11 VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg11={0:0}, ldvarg18={0:0}, ldvarg2=2147483653, ldvarg23={0:0}, ldvarg3={0:0}, ldvarg32={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg43={0:0}, ldvarg5=18446744073709551610, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___2={0:0}, tmp___3={0:0}, tmp___4=18446744073709551610, tmp___5=2147483653, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8355] CALL, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=1, \result={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=1, tmp___0=-13, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8355] RET, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(1UL)={0:0}, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg11={0:0}, ldvarg18={0:0}, ldvarg2=2147483653, ldvarg23={0:0}, ldvarg3={0:0}, ldvarg32={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg43={0:0}, ldvarg5=18446744073709551610, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___2={0:0}, tmp___3={0:0}, tmp___4=18446744073709551610, tmp___5=2147483653, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8355] tmp___12 = ldv_zalloc(1UL) [L8356] ldvarg42 = tmp___12 [L8357] tmp___13 = __VERIFIER_nondet_uint() [L8358] ldvarg12 = tmp___13 VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg11={0:0}, ldvarg12=2147483650, ldvarg18={0:0}, ldvarg2=2147483653, ldvarg23={0:0}, ldvarg3={0:0}, ldvarg32={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg5=18446744073709551610, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=2147483650, tmp___2={0:0}, tmp___3={0:0}, tmp___4=18446744073709551610, tmp___5=2147483653, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8359] CALL, EXPR ldv_zalloc(64UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=64, \result={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=64, tmp___0=-14, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8359] RET, EXPR ldv_zalloc(64UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(64UL)={0:0}, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg11={0:0}, ldvarg12=2147483650, ldvarg18={0:0}, ldvarg2=2147483653, ldvarg23={0:0}, ldvarg3={0:0}, ldvarg32={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg5=18446744073709551610, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=2147483650, tmp___2={0:0}, tmp___3={0:0}, tmp___4=18446744073709551610, tmp___5=2147483653, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8359] tmp___14 = ldv_zalloc(64UL) [L8360] ldvarg37 = (struct v4l2_fmtdesc *)tmp___14 VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg11={0:0}, ldvarg12=2147483650, ldvarg18={0:0}, ldvarg2=2147483653, ldvarg23={0:0}, ldvarg3={0:0}, ldvarg32={0:0}, ldvarg37={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg5=18446744073709551610, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=2147483650, tmp___14={0:0}, tmp___2={0:0}, tmp___3={0:0}, tmp___4=18446744073709551610, tmp___5=2147483653, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8361] CALL, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=1, \result={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=1, tmp___0=-15, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8361] RET, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(1UL)={0:0}, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg11={0:0}, ldvarg12=2147483650, ldvarg18={0:0}, ldvarg2=2147483653, ldvarg23={0:0}, ldvarg3={0:0}, ldvarg32={0:0}, ldvarg37={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg5=18446744073709551610, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=2147483650, tmp___14={0:0}, tmp___2={0:0}, tmp___3={0:0}, tmp___4=18446744073709551610, tmp___5=2147483653, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8361] tmp___15 = ldv_zalloc(1UL) [L8362] ldvarg29 = tmp___15 VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg11={0:0}, ldvarg12=2147483650, ldvarg18={0:0}, ldvarg2=2147483653, ldvarg23={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg32={0:0}, ldvarg37={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg5=18446744073709551610, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=2147483650, tmp___14={0:0}, tmp___15={0:0}, tmp___2={0:0}, tmp___3={0:0}, tmp___4=18446744073709551610, tmp___5=2147483653, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8363] CALL, EXPR ldv_zalloc(20UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=20, \result={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=20, tmp___0=-16, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8363] RET, EXPR ldv_zalloc(20UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(20UL)={0:0}, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg11={0:0}, ldvarg12=2147483650, ldvarg18={0:0}, ldvarg2=2147483653, ldvarg23={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg32={0:0}, ldvarg37={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg5=18446744073709551610, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=2147483650, tmp___14={0:0}, tmp___15={0:0}, tmp___2={0:0}, tmp___3={0:0}, tmp___4=18446744073709551610, tmp___5=2147483653, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8363] tmp___16 = ldv_zalloc(20UL) [L8364] ldvarg44 = (struct v4l2_requestbuffers *)tmp___16 VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg11={0:0}, ldvarg12=2147483650, ldvarg18={0:0}, ldvarg2=2147483653, ldvarg23={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg32={0:0}, ldvarg37={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg5=18446744073709551610, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=2147483650, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___2={0:0}, tmp___3={0:0}, tmp___4=18446744073709551610, tmp___5=2147483653, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8365] CALL, EXPR ldv_zalloc(52UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=52, \result={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=52, tmp___0=-17, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8365] RET, EXPR ldv_zalloc(52UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(52UL)={0:0}, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg11={0:0}, ldvarg12=2147483650, ldvarg18={0:0}, ldvarg2=2147483653, ldvarg23={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg32={0:0}, ldvarg37={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg5=18446744073709551610, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=2147483650, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___2={0:0}, tmp___3={0:0}, tmp___4=18446744073709551610, tmp___5=2147483653, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8365] tmp___17 = ldv_zalloc(52UL) [L8366] ldvarg24 = (struct v4l2_frmivalenum *)tmp___17 VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg11={0:0}, ldvarg12=2147483650, ldvarg18={0:0}, ldvarg2=2147483653, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg32={0:0}, ldvarg37={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg5=18446744073709551610, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=2147483650, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___2={0:0}, tmp___3={0:0}, tmp___4=18446744073709551610, tmp___5=2147483653, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8367] CALL, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=1, \result={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=1, tmp___0=-18, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8367] RET, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(1UL)={0:0}, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg11={0:0}, ldvarg12=2147483650, ldvarg18={0:0}, ldvarg2=2147483653, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg32={0:0}, ldvarg37={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg5=18446744073709551610, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=2147483650, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___2={0:0}, tmp___3={0:0}, tmp___4=18446744073709551610, tmp___5=2147483653, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8367] tmp___18 = ldv_zalloc(1UL) [L8368] ldvarg35 = tmp___18 VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg11={0:0}, ldvarg12=2147483650, ldvarg18={0:0}, ldvarg2=2147483653, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg32={0:0}, ldvarg35={0:0}, ldvarg37={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg5=18446744073709551610, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=2147483650, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___2={0:0}, tmp___3={0:0}, tmp___4=18446744073709551610, tmp___5=2147483653, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8369] CALL, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=1, \result={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=1, tmp___0=-19, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8369] RET, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(1UL)={0:0}, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg11={0:0}, ldvarg12=2147483650, ldvarg18={0:0}, ldvarg2=2147483653, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg32={0:0}, ldvarg35={0:0}, ldvarg37={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg5=18446744073709551610, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=2147483650, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___2={0:0}, tmp___3={0:0}, tmp___4=18446744073709551610, tmp___5=2147483653, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8369] tmp___19 = ldv_zalloc(1UL) [L8370] ldvarg38 = tmp___19 VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg11={0:0}, ldvarg12=2147483650, ldvarg18={0:0}, ldvarg2=2147483653, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg32={0:0}, ldvarg35={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg5=18446744073709551610, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=2147483650, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___3={0:0}, tmp___4=18446744073709551610, tmp___5=2147483653, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8371] CALL, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=1, \result={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=1, tmp___0=-20, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8371] RET, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(1UL)={0:0}, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg11={0:0}, ldvarg12=2147483650, ldvarg18={0:0}, ldvarg2=2147483653, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg32={0:0}, ldvarg35={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg5=18446744073709551610, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=2147483650, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___3={0:0}, tmp___4=18446744073709551610, tmp___5=2147483653, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8371] tmp___20 = ldv_zalloc(1UL) [L8372] ldvarg33 = tmp___20 VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg11={0:0}, ldvarg12=2147483650, ldvarg18={0:0}, ldvarg2=2147483653, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg35={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg5=18446744073709551610, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=2147483650, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___3={0:0}, tmp___4=18446744073709551610, tmp___5=2147483653, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8373] CALL, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=1, \result={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=1, tmp___0=-21, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8373] RET, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(1UL)={0:0}, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg11={0:0}, ldvarg12=2147483650, ldvarg18={0:0}, ldvarg2=2147483653, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg35={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg5=18446744073709551610, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=2147483650, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___3={0:0}, tmp___4=18446744073709551610, tmp___5=2147483653, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8373] tmp___21 = ldv_zalloc(1UL) [L8374] ldvarg16 = tmp___21 VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg11={0:0}, ldvarg12=2147483650, ldvarg16={0:0}, ldvarg18={0:0}, ldvarg2=2147483653, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg35={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg5=18446744073709551610, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=2147483650, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___3={0:0}, tmp___4=18446744073709551610, tmp___5=2147483653, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8375] CALL, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=1, \result={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=1, tmp___0=-22, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8375] RET, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(1UL)={0:0}, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg11={0:0}, ldvarg12=2147483650, ldvarg16={0:0}, ldvarg18={0:0}, ldvarg2=2147483653, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg35={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg5=18446744073709551610, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=2147483650, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___3={0:0}, tmp___4=18446744073709551610, tmp___5=2147483653, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8375] tmp___22 = ldv_zalloc(1UL) [L8376] ldvarg14 = tmp___22 VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg11={0:0}, ldvarg12=2147483650, ldvarg14={0:0}, ldvarg16={0:0}, ldvarg18={0:0}, ldvarg2=2147483653, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg35={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg5=18446744073709551610, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=2147483650, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___3={0:0}, tmp___4=18446744073709551610, tmp___5=2147483653, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8377] CALL, EXPR ldv_zalloc(200UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=200, \result={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=200, tmp___0=-23, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8377] RET, EXPR ldv_zalloc(200UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(200UL)={0:0}, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg11={0:0}, ldvarg12=2147483650, ldvarg14={0:0}, ldvarg16={0:0}, ldvarg18={0:0}, ldvarg2=2147483653, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg35={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg5=18446744073709551610, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=2147483650, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___3={0:0}, tmp___4=18446744073709551610, tmp___5=2147483653, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8377] tmp___23 = ldv_zalloc(200UL) [L8378] ldvarg34 = (struct v4l2_dbg_chip_info *)tmp___23 VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg11={0:0}, ldvarg12=2147483650, ldvarg14={0:0}, ldvarg16={0:0}, ldvarg18={0:0}, ldvarg2=2147483653, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg5=18446744073709551610, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=2147483650, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___3={0:0}, tmp___4=18446744073709551610, tmp___5=2147483653, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8379] CALL, EXPR ldv_zalloc(44UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=44, \result={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=44, tmp___0=-24, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8379] RET, EXPR ldv_zalloc(44UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(44UL)={0:0}, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg11={0:0}, ldvarg12=2147483650, ldvarg14={0:0}, ldvarg16={0:0}, ldvarg18={0:0}, ldvarg2=2147483653, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg5=18446744073709551610, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=2147483650, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___3={0:0}, tmp___4=18446744073709551610, tmp___5=2147483653, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8379] tmp___24 = ldv_zalloc(44UL) [L8380] ldvarg28 = (struct v4l2_frmsizeenum *)tmp___24 VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg11={0:0}, ldvarg12=2147483650, ldvarg14={0:0}, ldvarg16={0:0}, ldvarg18={0:0}, ldvarg2=2147483653, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg5=18446744073709551610, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=2147483650, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___3={0:0}, tmp___4=18446744073709551610, tmp___5=2147483653, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8381] CALL, EXPR ldv_zalloc(140UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=140, \result={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=140, tmp___0=-25, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8381] RET, EXPR ldv_zalloc(140UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(140UL)={0:0}, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg11={0:0}, ldvarg12=2147483650, ldvarg14={0:0}, ldvarg16={0:0}, ldvarg18={0:0}, ldvarg2=2147483653, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg5=18446744073709551610, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=2147483650, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___3={0:0}, tmp___4=18446744073709551610, tmp___5=2147483653, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8381] tmp___25 = ldv_zalloc(140UL) [L8382] ldvarg20 = (struct v4l2_jpegcompression *)tmp___25 VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg11={0:0}, ldvarg12=2147483650, ldvarg14={0:0}, ldvarg16={0:0}, ldvarg18={0:0}, ldvarg2=2147483653, ldvarg20={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg5=18446744073709551610, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=2147483650, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___3={0:0}, tmp___4=18446744073709551610, tmp___5=2147483653, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8383] CALL, EXPR ldv_zalloc(4UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=4, \result={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=4, tmp___0=-26, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8383] RET, EXPR ldv_zalloc(4UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(4UL)={0:0}, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg11={0:0}, ldvarg12=2147483650, ldvarg14={0:0}, ldvarg16={0:0}, ldvarg18={0:0}, ldvarg2=2147483653, ldvarg20={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg5=18446744073709551610, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=2147483650, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___3={0:0}, tmp___4=18446744073709551610, tmp___5=2147483653, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8383] tmp___26 = ldv_zalloc(4UL) [L8384] ldvarg31 = (unsigned int *)tmp___26 VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg11={0:0}, ldvarg12=2147483650, ldvarg14={0:0}, ldvarg16={0:0}, ldvarg18={0:0}, ldvarg2=2147483653, ldvarg20={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg5=18446744073709551610, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=2147483650, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___3={0:0}, tmp___4=18446744073709551610, tmp___5=2147483653, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8385] CALL, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=1, \result={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=1, tmp___0=-27, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8385] RET, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(1UL)={0:0}, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg11={0:0}, ldvarg12=2147483650, ldvarg14={0:0}, ldvarg16={0:0}, ldvarg18={0:0}, ldvarg2=2147483653, ldvarg20={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg5=18446744073709551610, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=2147483650, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___3={0:0}, tmp___4=18446744073709551610, tmp___5=2147483653, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8385] tmp___27 = ldv_zalloc(1UL) [L8386] ldvarg41 = tmp___27 VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg11={0:0}, ldvarg12=2147483650, ldvarg14={0:0}, ldvarg16={0:0}, ldvarg18={0:0}, ldvarg2=2147483653, ldvarg20={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg5=18446744073709551610, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=2147483650, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___3={0:0}, tmp___4=18446744073709551610, tmp___5=2147483653, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8387] CALL, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=1, \result={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=1, tmp___0=-28, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8387] RET, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(1UL)={0:0}, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg11={0:0}, ldvarg12=2147483650, ldvarg14={0:0}, ldvarg16={0:0}, ldvarg18={0:0}, ldvarg2=2147483653, ldvarg20={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg5=18446744073709551610, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=2147483650, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___3={0:0}, tmp___4=18446744073709551610, tmp___5=2147483653, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8387] tmp___28 = ldv_zalloc(1UL) [L8388] ldvarg13 = tmp___28 VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg11={0:0}, ldvarg12=2147483650, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg16={0:0}, ldvarg18={0:0}, ldvarg2=2147483653, ldvarg20={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg5=18446744073709551610, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=2147483650, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___3={0:0}, tmp___4=18446744073709551610, tmp___5=2147483653, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8389] CALL, EXPR ldv_zalloc(56UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=56, \result={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=56, tmp___0=-29, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8389] RET, EXPR ldv_zalloc(56UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(56UL)={0:0}, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg11={0:0}, ldvarg12=2147483650, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg16={0:0}, ldvarg18={0:0}, ldvarg2=2147483653, ldvarg20={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg5=18446744073709551610, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=2147483650, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___3={0:0}, tmp___4=18446744073709551610, tmp___5=2147483653, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8389] tmp___29 = ldv_zalloc(56UL) [L8390] ldvarg10 = (struct v4l2_dbg_register *)tmp___29 VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg10={0:0}, ldvarg11={0:0}, ldvarg12=2147483650, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg16={0:0}, ldvarg18={0:0}, ldvarg2=2147483653, ldvarg20={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg5=18446744073709551610, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=2147483650, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___29={0:0}, tmp___3={0:0}, tmp___4=18446744073709551610, tmp___5=2147483653, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8391] CALL, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=1, \result={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=1, tmp___0=-30, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8391] RET, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(1UL)={0:0}, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg10={0:0}, ldvarg11={0:0}, ldvarg12=2147483650, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg16={0:0}, ldvarg18={0:0}, ldvarg2=2147483653, ldvarg20={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg5=18446744073709551610, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=2147483650, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___29={0:0}, tmp___3={0:0}, tmp___4=18446744073709551610, tmp___5=2147483653, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8391] tmp___30 = ldv_zalloc(1UL) [L8392] ldvarg36 = tmp___30 VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg10={0:0}, ldvarg11={0:0}, ldvarg12=2147483650, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg16={0:0}, ldvarg18={0:0}, ldvarg2=2147483653, ldvarg20={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg36={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg5=18446744073709551610, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=2147483650, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___29={0:0}, tmp___3={0:0}, tmp___30={0:0}, tmp___4=18446744073709551610, tmp___5=2147483653, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8393] CALL, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=1, \result={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=1, tmp___0=-31, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8393] RET, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(1UL)={0:0}, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg10={0:0}, ldvarg11={0:0}, ldvarg12=2147483650, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg16={0:0}, ldvarg18={0:0}, ldvarg2=2147483653, ldvarg20={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg36={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg5=18446744073709551610, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=2147483650, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___29={0:0}, tmp___3={0:0}, tmp___30={0:0}, tmp___4=18446744073709551610, tmp___5=2147483653, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8393] tmp___31 = ldv_zalloc(1UL) [L8394] ldvarg40 = tmp___31 VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg10={0:0}, ldvarg11={0:0}, ldvarg12=2147483650, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg16={0:0}, ldvarg18={0:0}, ldvarg2=2147483653, ldvarg20={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg36={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg40={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg5=18446744073709551610, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=2147483650, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___29={0:0}, tmp___3={0:0}, tmp___30={0:0}, tmp___31={0:0}, tmp___4=18446744073709551610, tmp___5=2147483653, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8395] CALL, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=1, \result={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=1, tmp___0=-32, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8395] RET, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(1UL)={0:0}, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg10={0:0}, ldvarg11={0:0}, ldvarg12=2147483650, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg16={0:0}, ldvarg18={0:0}, ldvarg2=2147483653, ldvarg20={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg36={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg40={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg5=18446744073709551610, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=2147483650, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___29={0:0}, tmp___3={0:0}, tmp___30={0:0}, tmp___31={0:0}, tmp___4=18446744073709551610, tmp___5=2147483653, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8395] tmp___32 = ldv_zalloc(1UL) [L8396] ldvarg9 = tmp___32 VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg10={0:0}, ldvarg11={0:0}, ldvarg12=2147483650, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg16={0:0}, ldvarg18={0:0}, ldvarg2=2147483653, ldvarg20={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg36={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg40={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg5=18446744073709551610, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ldvarg9={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=2147483650, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___29={0:0}, tmp___3={0:0}, tmp___30={0:0}, tmp___31={0:0}, tmp___32={0:0}, tmp___4=18446744073709551610, tmp___5=2147483653, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8397] CALL, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=1, \result={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=1, tmp___0=-33, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8397] RET, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(1UL)={0:0}, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg10={0:0}, ldvarg11={0:0}, ldvarg12=2147483650, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg16={0:0}, ldvarg18={0:0}, ldvarg2=2147483653, ldvarg20={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg36={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg40={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg5=18446744073709551610, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ldvarg9={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=2147483650, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___29={0:0}, tmp___3={0:0}, tmp___30={0:0}, tmp___31={0:0}, tmp___32={0:0}, tmp___4=18446744073709551610, tmp___5=2147483653, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8397] tmp___33 = ldv_zalloc(1UL) [L8398] ldvarg45 = tmp___33 VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg10={0:0}, ldvarg11={0:0}, ldvarg12=2147483650, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg16={0:0}, ldvarg18={0:0}, ldvarg2=2147483653, ldvarg20={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg36={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg40={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg45={0:0}, ldvarg5=18446744073709551610, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ldvarg9={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=2147483650, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___29={0:0}, tmp___3={0:0}, tmp___30={0:0}, tmp___31={0:0}, tmp___32={0:0}, tmp___33={0:0}, tmp___4=18446744073709551610, tmp___5=2147483653, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8399] CALL, EXPR ldv_zalloc(104UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=104, \result={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=104, tmp___0=-34, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8399] RET, EXPR ldv_zalloc(104UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(104UL)={0:0}, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg10={0:0}, ldvarg11={0:0}, ldvarg12=2147483650, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg16={0:0}, ldvarg18={0:0}, ldvarg2=2147483653, ldvarg20={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg36={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg40={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg45={0:0}, ldvarg5=18446744073709551610, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ldvarg9={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=2147483650, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___29={0:0}, tmp___3={0:0}, tmp___30={0:0}, tmp___31={0:0}, tmp___32={0:0}, tmp___33={0:0}, tmp___4=18446744073709551610, tmp___5=2147483653, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8399] tmp___34 = ldv_zalloc(104UL) [L8400] ldvarg26 = (struct v4l2_capability *)tmp___34 VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg10={0:0}, ldvarg11={0:0}, ldvarg12=2147483650, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg16={0:0}, ldvarg18={0:0}, ldvarg2=2147483653, ldvarg20={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg26={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg36={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg40={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg45={0:0}, ldvarg5=18446744073709551610, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ldvarg9={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=2147483650, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___29={0:0}, tmp___3={0:0}, tmp___30={0:0}, tmp___31={0:0}, tmp___32={0:0}, tmp___33={0:0}, tmp___34={0:0}, tmp___4=18446744073709551610, tmp___5=2147483653, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8401] CALL, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=1, \result={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=1, tmp___0=-35, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8401] RET, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(1UL)={0:0}, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg10={0:0}, ldvarg11={0:0}, ldvarg12=2147483650, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg16={0:0}, ldvarg18={0:0}, ldvarg2=2147483653, ldvarg20={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg26={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg36={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg40={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg45={0:0}, ldvarg5=18446744073709551610, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ldvarg9={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=2147483650, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___29={0:0}, tmp___3={0:0}, tmp___30={0:0}, tmp___31={0:0}, tmp___32={0:0}, tmp___33={0:0}, tmp___34={0:0}, tmp___4=18446744073709551610, tmp___5=2147483653, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8401] tmp___35 = ldv_zalloc(1UL) [L8402] ldvarg27 = tmp___35 VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg10={0:0}, ldvarg11={0:0}, ldvarg12=2147483650, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg16={0:0}, ldvarg18={0:0}, ldvarg2=2147483653, ldvarg20={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg26={0:0}, ldvarg27={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg36={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg40={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg45={0:0}, ldvarg5=18446744073709551610, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ldvarg9={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=2147483650, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___29={0:0}, tmp___3={0:0}, tmp___30={0:0}, tmp___31={0:0}, tmp___32={0:0}, tmp___33={0:0}, tmp___34={0:0}, tmp___35={0:0}, tmp___4=18446744073709551610, tmp___5=2147483653, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8403] CALL, EXPR ldv_zalloc(80UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=80, \result={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=80, tmp___0=-36, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8403] RET, EXPR ldv_zalloc(80UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(80UL)={0:0}, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg10={0:0}, ldvarg11={0:0}, ldvarg12=2147483650, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg16={0:0}, ldvarg18={0:0}, ldvarg2=2147483653, ldvarg20={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg26={0:0}, ldvarg27={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg36={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg40={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg45={0:0}, ldvarg5=18446744073709551610, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ldvarg9={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=2147483650, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___29={0:0}, tmp___3={0:0}, tmp___30={0:0}, tmp___31={0:0}, tmp___32={0:0}, tmp___33={0:0}, tmp___34={0:0}, tmp___35={0:0}, tmp___4=18446744073709551610, tmp___5=2147483653, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8403] tmp___36 = ldv_zalloc(80UL) [L8404] ldvarg15 = (struct v4l2_input *)tmp___36 VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg10={0:0}, ldvarg11={0:0}, ldvarg12=2147483650, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg15={0:0}, ldvarg16={0:0}, ldvarg18={0:0}, ldvarg2=2147483653, ldvarg20={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg26={0:0}, ldvarg27={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg36={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg40={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg45={0:0}, ldvarg5=18446744073709551610, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ldvarg9={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=2147483650, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___29={0:0}, tmp___3={0:0}, tmp___30={0:0}, tmp___31={0:0}, tmp___32={0:0}, tmp___33={0:0}, tmp___34={0:0}, tmp___35={0:0}, tmp___36={0:0}, tmp___4=18446744073709551610, tmp___5=2147483653, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8405] CALL, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=1, \result={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=1, tmp___0=-37, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8405] RET, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(1UL)={0:0}, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg10={0:0}, ldvarg11={0:0}, ldvarg12=2147483650, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg15={0:0}, ldvarg16={0:0}, ldvarg18={0:0}, ldvarg2=2147483653, ldvarg20={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg26={0:0}, ldvarg27={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg36={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg40={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg45={0:0}, ldvarg5=18446744073709551610, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ldvarg9={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=2147483650, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___29={0:0}, tmp___3={0:0}, tmp___30={0:0}, tmp___31={0:0}, tmp___32={0:0}, tmp___33={0:0}, tmp___34={0:0}, tmp___35={0:0}, tmp___36={0:0}, tmp___4=18446744073709551610, tmp___5=2147483653, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8405] tmp___37 = ldv_zalloc(1UL) [L8406] ldvarg30 = tmp___37 VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg10={0:0}, ldvarg11={0:0}, ldvarg12=2147483650, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg15={0:0}, ldvarg16={0:0}, ldvarg18={0:0}, ldvarg2=2147483653, ldvarg20={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg26={0:0}, ldvarg27={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg30={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg36={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg40={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg45={0:0}, ldvarg5=18446744073709551610, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ldvarg9={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=2147483650, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___29={0:0}, tmp___3={0:0}, tmp___30={0:0}, tmp___31={0:0}, tmp___32={0:0}, tmp___33={0:0}, tmp___34={0:0}, tmp___35={0:0}, tmp___36={0:0}, tmp___37={0:0}, tmp___4=18446744073709551610, tmp___5=2147483653, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8407] CALL, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=1, \result={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=1, tmp___0=-38, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8407] RET, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(1UL)={0:0}, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg10={0:0}, ldvarg11={0:0}, ldvarg12=2147483650, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg15={0:0}, ldvarg16={0:0}, ldvarg18={0:0}, ldvarg2=2147483653, ldvarg20={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg26={0:0}, ldvarg27={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg30={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg36={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg40={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg45={0:0}, ldvarg5=18446744073709551610, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ldvarg9={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=2147483650, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___29={0:0}, tmp___3={0:0}, tmp___30={0:0}, tmp___31={0:0}, tmp___32={0:0}, tmp___33={0:0}, tmp___34={0:0}, tmp___35={0:0}, tmp___36={0:0}, tmp___37={0:0}, tmp___4=18446744073709551610, tmp___5=2147483653, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8407] tmp___38 = ldv_zalloc(1UL) [L8408] ldvarg21 = tmp___38 VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg10={0:0}, ldvarg11={0:0}, ldvarg12=2147483650, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg15={0:0}, ldvarg16={0:0}, ldvarg18={0:0}, ldvarg2=2147483653, ldvarg20={0:0}, ldvarg21={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg26={0:0}, ldvarg27={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg30={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg36={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg40={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg45={0:0}, ldvarg5=18446744073709551610, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ldvarg9={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=2147483650, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___29={0:0}, tmp___3={0:0}, tmp___30={0:0}, tmp___31={0:0}, tmp___32={0:0}, tmp___33={0:0}, tmp___34={0:0}, tmp___35={0:0}, tmp___36={0:0}, tmp___37={0:0}, tmp___38={0:0}, tmp___4=18446744073709551610, tmp___5=2147483653, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8409] CALL, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=1, \result={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=1, tmp___0=-39, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8409] RET, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(1UL)={0:0}, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg10={0:0}, ldvarg11={0:0}, ldvarg12=2147483650, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg15={0:0}, ldvarg16={0:0}, ldvarg18={0:0}, ldvarg2=2147483653, ldvarg20={0:0}, ldvarg21={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg26={0:0}, ldvarg27={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg30={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg36={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg40={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg45={0:0}, ldvarg5=18446744073709551610, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ldvarg9={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=2147483650, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___29={0:0}, tmp___3={0:0}, tmp___30={0:0}, tmp___31={0:0}, tmp___32={0:0}, tmp___33={0:0}, tmp___34={0:0}, tmp___35={0:0}, tmp___36={0:0}, tmp___37={0:0}, tmp___38={0:0}, tmp___4=18446744073709551610, tmp___5=2147483653, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8409] tmp___39 = ldv_zalloc(1UL) [L8410] ldvarg17 = tmp___39 VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg10={0:0}, ldvarg11={0:0}, ldvarg12=2147483650, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg15={0:0}, ldvarg16={0:0}, ldvarg17={0:0}, ldvarg18={0:0}, ldvarg2=2147483653, ldvarg20={0:0}, ldvarg21={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg26={0:0}, ldvarg27={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg30={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg36={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg40={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg45={0:0}, ldvarg5=18446744073709551610, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ldvarg9={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=2147483650, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___29={0:0}, tmp___3={0:0}, tmp___30={0:0}, tmp___31={0:0}, tmp___32={0:0}, tmp___33={0:0}, tmp___34={0:0}, tmp___35={0:0}, tmp___36={0:0}, tmp___37={0:0}, tmp___38={0:0}, tmp___39={0:0}, tmp___4=18446744073709551610, tmp___5=2147483653, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8411] CALL, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=1, \result={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=1, tmp___0=-40, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8411] RET, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(1UL)={0:0}, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg10={0:0}, ldvarg11={0:0}, ldvarg12=2147483650, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg15={0:0}, ldvarg16={0:0}, ldvarg17={0:0}, ldvarg18={0:0}, ldvarg2=2147483653, ldvarg20={0:0}, ldvarg21={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg26={0:0}, ldvarg27={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg30={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg36={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg40={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg45={0:0}, ldvarg5=18446744073709551610, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ldvarg9={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=2147483650, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___29={0:0}, tmp___3={0:0}, tmp___30={0:0}, tmp___31={0:0}, tmp___32={0:0}, tmp___33={0:0}, tmp___34={0:0}, tmp___35={0:0}, tmp___36={0:0}, tmp___37={0:0}, tmp___38={0:0}, tmp___39={0:0}, tmp___4=18446744073709551610, tmp___5=2147483653, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8411] tmp___40 = ldv_zalloc(1UL) [L8412] ldvarg25 = tmp___40 VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg10={0:0}, ldvarg11={0:0}, ldvarg12=2147483650, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg15={0:0}, ldvarg16={0:0}, ldvarg17={0:0}, ldvarg18={0:0}, ldvarg2=2147483653, ldvarg20={0:0}, ldvarg21={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg25={0:0}, ldvarg26={0:0}, ldvarg27={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg30={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg36={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg40={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg45={0:0}, ldvarg5=18446744073709551610, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ldvarg9={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=2147483650, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___29={0:0}, tmp___3={0:0}, tmp___30={0:0}, tmp___31={0:0}, tmp___32={0:0}, tmp___33={0:0}, tmp___34={0:0}, tmp___35={0:0}, tmp___36={0:0}, tmp___37={0:0}, tmp___38={0:0}, tmp___39={0:0}, tmp___4=18446744073709551610, tmp___40={0:0}, tmp___5=2147483653, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8413] CALL, EXPR ldv_zalloc(56UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=56, \result={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=56, tmp___0=-41, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8413] RET, EXPR ldv_zalloc(56UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(56UL)={0:0}, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg10={0:0}, ldvarg11={0:0}, ldvarg12=2147483650, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg15={0:0}, ldvarg16={0:0}, ldvarg17={0:0}, ldvarg18={0:0}, ldvarg2=2147483653, ldvarg20={0:0}, ldvarg21={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg25={0:0}, ldvarg26={0:0}, ldvarg27={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg30={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg36={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg40={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg45={0:0}, ldvarg5=18446744073709551610, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ldvarg9={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=2147483650, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___29={0:0}, tmp___3={0:0}, tmp___30={0:0}, tmp___31={0:0}, tmp___32={0:0}, tmp___33={0:0}, tmp___34={0:0}, tmp___35={0:0}, tmp___36={0:0}, tmp___37={0:0}, tmp___38={0:0}, tmp___39={0:0}, tmp___4=18446744073709551610, tmp___40={0:0}, tmp___5=2147483653, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8413] tmp___41 = ldv_zalloc(56UL) [L8414] ldvarg22 = (struct v4l2_dbg_register *)tmp___41 VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg10={0:0}, ldvarg11={0:0}, ldvarg12=2147483650, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg15={0:0}, ldvarg16={0:0}, ldvarg17={0:0}, ldvarg18={0:0}, ldvarg2=2147483653, ldvarg20={0:0}, ldvarg21={0:0}, ldvarg22={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg25={0:0}, ldvarg26={0:0}, ldvarg27={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg30={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg36={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg40={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg45={0:0}, ldvarg5=18446744073709551610, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ldvarg9={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=2147483650, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___29={0:0}, tmp___3={0:0}, tmp___30={0:0}, tmp___31={0:0}, tmp___32={0:0}, tmp___33={0:0}, tmp___34={0:0}, tmp___35={0:0}, tmp___36={0:0}, tmp___37={0:0}, tmp___38={0:0}, tmp___39={0:0}, tmp___4=18446744073709551610, tmp___40={0:0}, tmp___41={0:0}, tmp___5=2147483653, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8415] CALL, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=1, \result={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=1, tmp___0=-42, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8415] RET, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(1UL)={0:0}, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg10={0:0}, ldvarg11={0:0}, ldvarg12=2147483650, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg15={0:0}, ldvarg16={0:0}, ldvarg17={0:0}, ldvarg18={0:0}, ldvarg2=2147483653, ldvarg20={0:0}, ldvarg21={0:0}, ldvarg22={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg25={0:0}, ldvarg26={0:0}, ldvarg27={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg30={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg36={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg40={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg45={0:0}, ldvarg5=18446744073709551610, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ldvarg9={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=2147483650, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___29={0:0}, tmp___3={0:0}, tmp___30={0:0}, tmp___31={0:0}, tmp___32={0:0}, tmp___33={0:0}, tmp___34={0:0}, tmp___35={0:0}, tmp___36={0:0}, tmp___37={0:0}, tmp___38={0:0}, tmp___39={0:0}, tmp___4=18446744073709551610, tmp___40={0:0}, tmp___41={0:0}, tmp___5=2147483653, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8415] tmp___42 = ldv_zalloc(1UL) [L8416] ldvarg19 = tmp___42 [L8417] FCALL ldv_initialize() [L8418] FCALL memset((void *)(& ldvarg39), 0, 4UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg10={0:0}, ldvarg11={0:0}, ldvarg12=2147483650, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg15={0:0}, ldvarg16={0:0}, ldvarg17={0:0}, ldvarg18={0:0}, ldvarg19={0:0}, ldvarg2=2147483653, ldvarg20={0:0}, ldvarg21={0:0}, ldvarg22={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg25={0:0}, ldvarg26={0:0}, ldvarg27={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg30={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg36={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg40={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg45={0:0}, ldvarg5=18446744073709551610, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ldvarg9={0:0}, memset((void *)(& ldvarg39), 0, 4UL)={94:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=2147483650, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___29={0:0}, tmp___3={0:0}, tmp___30={0:0}, tmp___31={0:0}, tmp___32={0:0}, tmp___33={0:0}, tmp___34={0:0}, tmp___35={0:0}, tmp___36={0:0}, tmp___37={0:0}, tmp___38={0:0}, tmp___39={0:0}, tmp___4=18446744073709551610, tmp___40={0:0}, tmp___41={0:0}, tmp___42={0:0}, tmp___5=2147483653, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8419] FCALL memset((void *)(& ldvarg8), 0, 4UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg10={0:0}, ldvarg11={0:0}, ldvarg12=2147483650, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg15={0:0}, ldvarg16={0:0}, ldvarg17={0:0}, ldvarg18={0:0}, ldvarg19={0:0}, ldvarg2=2147483653, ldvarg20={0:0}, ldvarg21={0:0}, ldvarg22={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg25={0:0}, ldvarg26={0:0}, ldvarg27={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg30={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg36={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg40={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg45={0:0}, ldvarg5=18446744073709551610, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ldvarg9={0:0}, memset((void *)(& ldvarg8), 0, 4UL)={95:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=2147483650, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___29={0:0}, tmp___3={0:0}, tmp___30={0:0}, tmp___31={0:0}, tmp___32={0:0}, tmp___33={0:0}, tmp___34={0:0}, tmp___35={0:0}, tmp___36={0:0}, tmp___37={0:0}, tmp___38={0:0}, tmp___39={0:0}, tmp___4=18446744073709551610, tmp___40={0:0}, tmp___41={0:0}, tmp___42={0:0}, tmp___5=2147483653, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8420] ldv_state_variable_4 = 0 [L8421] ldv_state_variable_1 = 0 [L8422] ref_cnt = 0 [L8423] ldv_state_variable_0 = 1 [L8424] ldv_state_variable_3 = 0 [L8425] ldv_state_variable_2 = 0 VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg10={0:0}, ldvarg11={0:0}, ldvarg12=2147483650, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg15={0:0}, ldvarg16={0:0}, ldvarg17={0:0}, ldvarg18={0:0}, ldvarg19={0:0}, ldvarg2=2147483653, ldvarg20={0:0}, ldvarg21={0:0}, ldvarg22={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg25={0:0}, ldvarg26={0:0}, ldvarg27={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg30={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg36={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg40={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg45={0:0}, ldvarg5=18446744073709551610, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ldvarg9={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=2147483650, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___29={0:0}, tmp___3={0:0}, tmp___30={0:0}, tmp___31={0:0}, tmp___32={0:0}, tmp___33={0:0}, tmp___34={0:0}, tmp___35={0:0}, tmp___36={0:0}, tmp___37={0:0}, tmp___38={0:0}, tmp___39={0:0}, tmp___4=18446744073709551610, tmp___40={0:0}, tmp___41={0:0}, tmp___42={0:0}, tmp___5=2147483653, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8427] tmp___43 = __VERIFIER_nondet_int() [L8429] case 0: [L8455] case 1: [L8482] case 2: VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg10={0:0}, ldvarg11={0:0}, ldvarg12=2147483650, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg15={0:0}, ldvarg16={0:0}, ldvarg17={0:0}, ldvarg18={0:0}, ldvarg19={0:0}, ldvarg2=2147483653, ldvarg20={0:0}, ldvarg21={0:0}, ldvarg22={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg25={0:0}, ldvarg26={0:0}, ldvarg27={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg30={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg36={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg40={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg45={0:0}, ldvarg5=18446744073709551610, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ldvarg9={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=2147483650, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___29={0:0}, tmp___3={0:0}, tmp___30={0:0}, tmp___31={0:0}, tmp___32={0:0}, tmp___33={0:0}, tmp___34={0:0}, tmp___35={0:0}, tmp___36={0:0}, tmp___37={0:0}, tmp___38={0:0}, tmp___39={0:0}, tmp___4=18446744073709551610, tmp___40={0:0}, tmp___41={0:0}, tmp___42={0:0}, tmp___43=2, tmp___5=2147483653, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8483] COND TRUE ldv_state_variable_0 != 0 [L8484] tmp___46 = __VERIFIER_nondet_int() [L8486] case 0: [L8494] case 1: VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg10={0:0}, ldvarg11={0:0}, ldvarg12=2147483650, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg15={0:0}, ldvarg16={0:0}, ldvarg17={0:0}, ldvarg18={0:0}, ldvarg19={0:0}, ldvarg2=2147483653, ldvarg20={0:0}, ldvarg21={0:0}, ldvarg22={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg25={0:0}, ldvarg26={0:0}, ldvarg27={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg30={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg36={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg40={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg45={0:0}, ldvarg5=18446744073709551610, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ldvarg9={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=2147483650, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___29={0:0}, tmp___3={0:0}, tmp___30={0:0}, tmp___31={0:0}, tmp___32={0:0}, tmp___33={0:0}, tmp___34={0:0}, tmp___35={0:0}, tmp___36={0:0}, tmp___37={0:0}, tmp___38={0:0}, tmp___39={0:0}, tmp___4=18446744073709551610, tmp___40={0:0}, tmp___41={0:0}, tmp___42={0:0}, tmp___43=2, tmp___46=1, tmp___5=2147483653, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8495] COND TRUE ldv_state_variable_0 == 1 [L8496] CALL, EXPR gspca_init() [L8174] return (0); VAL [={0:0}, ={0:0}, \result=0, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8496] RET, EXPR gspca_init() [L8496] ldv_retval_0 = gspca_init() [L8497] COND TRUE ldv_retval_0 == 0 [L8498] ldv_state_variable_0 = 3 [L8499] ldv_state_variable_2 = 1 [L8500] CALL ldv_initialize_v4l2_ioctl_ops_2() [L8208] void *tmp ; [L8209] void *tmp___0 ; [L8210] void *tmp___1 ; [L8211] void *tmp___2 ; [L8212] void *tmp___3 ; [L8213] void *tmp___4 ; VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8215] CALL, EXPR ldv_zalloc(360UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=360, \result={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=360, tmp___0=-43, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8215] RET, EXPR ldv_zalloc(360UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(360UL)={0:0}, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8215] tmp = ldv_zalloc(360UL) [L8216] dev_ioctl_ops_group3 = (struct file *)tmp VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8217] CALL, EXPR ldv_zalloc(208UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=208, \result={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=208, tmp___0=-44, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8217] RET, EXPR ldv_zalloc(208UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(208UL)={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8217] tmp___0 = ldv_zalloc(208UL) [L8218] dev_ioctl_ops_group0 = (struct v4l2_format *)tmp___0 VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8219] CALL, EXPR ldv_zalloc(32UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=32, \result={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=32, tmp___0=-45, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8219] RET, EXPR ldv_zalloc(32UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(32UL)={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8219] tmp___1 = ldv_zalloc(32UL) [L8220] dev_ioctl_ops_group1 = (struct v4l2_event_subscription *)tmp___1 VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0={0:0}, tmp___1={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8221] CALL, EXPR ldv_zalloc(168UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=168, \result={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=168, tmp___0=-46, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8221] RET, EXPR ldv_zalloc(168UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(168UL)={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0={0:0}, tmp___1={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8221] tmp___2 = ldv_zalloc(168UL) [L8222] dev_ioctl_ops_group5 = (struct v4l2_fh *)tmp___2 VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8223] CALL, EXPR ldv_zalloc(88UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=88, \result={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=88, tmp___0=-47, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8223] RET, EXPR ldv_zalloc(88UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(88UL)={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8223] tmp___3 = ldv_zalloc(88UL) [L8224] dev_ioctl_ops_group4 = (struct v4l2_buffer *)tmp___3 VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8225] CALL, EXPR ldv_zalloc(204UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=204, \result={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=204, tmp___0=-48, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8225] RET, EXPR ldv_zalloc(204UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(204UL)={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8225] tmp___4 = ldv_zalloc(204UL) [L8226] dev_ioctl_ops_group2 = (struct v4l2_streamparm *)tmp___4 VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8500] RET ldv_initialize_v4l2_ioctl_ops_2() [L8501] ldv_state_variable_3 = 1 [L8502] CALL ldv_initialize_v4l2_file_operations_3() [L8190] void *tmp ; VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8192] CALL, EXPR ldv_zalloc(360UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=360, \result={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=360, tmp___0=-49, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8192] RET, EXPR ldv_zalloc(360UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, ldv_zalloc(360UL)={0:0}, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8192] tmp = ldv_zalloc(360UL) [L8193] dev_fops_group0 = (struct file *)tmp VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8502] RET ldv_initialize_v4l2_file_operations_3() [L8503] ldv_state_variable_1 = 1 [L8504] ldv_state_variable_4 = 1 [L8505] CALL ldv_initialize_vm_operations_struct_4() [L8199] void *tmp ; VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8201] CALL, EXPR ldv_zalloc(184UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=184, \result={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ref_cnt=0, SERIAL_STATE=0, size=184, tmp___0=-50, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8201] RET, EXPR ldv_zalloc(184UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_zalloc(184UL)={0:0}, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8201] tmp = ldv_zalloc(184UL) [L8202] gspca_vm_ops_group0 = (struct vm_area_struct *)tmp VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8505] RET ldv_initialize_vm_operations_struct_4() [L8508] COND FALSE !(ldv_retval_0 != 0) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg10={0:0}, ldvarg11={0:0}, ldvarg12=2147483650, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg15={0:0}, ldvarg16={0:0}, ldvarg17={0:0}, ldvarg18={0:0}, ldvarg19={0:0}, ldvarg2=2147483653, ldvarg20={0:0}, ldvarg21={0:0}, ldvarg22={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg25={0:0}, ldvarg26={0:0}, ldvarg27={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg30={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg36={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg40={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg45={0:0}, ldvarg5=18446744073709551610, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ldvarg9={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=2147483650, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___29={0:0}, tmp___3={0:0}, tmp___30={0:0}, tmp___31={0:0}, tmp___32={0:0}, tmp___33={0:0}, tmp___34={0:0}, tmp___35={0:0}, tmp___36={0:0}, tmp___37={0:0}, tmp___38={0:0}, tmp___39={0:0}, tmp___4=18446744073709551610, tmp___40={0:0}, tmp___41={0:0}, tmp___42={0:0}, tmp___43=2, tmp___46=1, tmp___5=2147483653, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8427] tmp___43 = __VERIFIER_nondet_int() [L8429] case 0: VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg10={0:0}, ldvarg11={0:0}, ldvarg12=2147483650, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg15={0:0}, ldvarg16={0:0}, ldvarg17={0:0}, ldvarg18={0:0}, ldvarg19={0:0}, ldvarg2=2147483653, ldvarg20={0:0}, ldvarg21={0:0}, ldvarg22={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg25={0:0}, ldvarg26={0:0}, ldvarg27={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg30={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg36={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg40={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg45={0:0}, ldvarg5=18446744073709551610, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ldvarg9={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=2147483650, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___29={0:0}, tmp___3={0:0}, tmp___30={0:0}, tmp___31={0:0}, tmp___32={0:0}, tmp___33={0:0}, tmp___34={0:0}, tmp___35={0:0}, tmp___36={0:0}, tmp___37={0:0}, tmp___38={0:0}, tmp___39={0:0}, tmp___4=18446744073709551610, tmp___40={0:0}, tmp___41={0:0}, tmp___42={0:0}, tmp___43=0, tmp___46=1, tmp___5=2147483653, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8430] COND TRUE ldv_state_variable_4 != 0 [L8431] tmp___44 = __VERIFIER_nondet_int() [L8433] case 0: [L8440] case 1: VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg10={0:0}, ldvarg11={0:0}, ldvarg12=2147483650, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg15={0:0}, ldvarg16={0:0}, ldvarg17={0:0}, ldvarg18={0:0}, ldvarg19={0:0}, ldvarg2=2147483653, ldvarg20={0:0}, ldvarg21={0:0}, ldvarg22={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg25={0:0}, ldvarg26={0:0}, ldvarg27={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg30={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg36={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg40={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg45={0:0}, ldvarg5=18446744073709551610, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ldvarg9={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=2147483650, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___29={0:0}, tmp___3={0:0}, tmp___30={0:0}, tmp___31={0:0}, tmp___32={0:0}, tmp___33={0:0}, tmp___34={0:0}, tmp___35={0:0}, tmp___36={0:0}, tmp___37={0:0}, tmp___38={0:0}, tmp___39={0:0}, tmp___4=18446744073709551610, tmp___40={0:0}, tmp___41={0:0}, tmp___42={0:0}, tmp___43=0, tmp___44=1, tmp___46=1, tmp___5=2147483653, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8441] COND TRUE ldv_state_variable_4 == 1 VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg10={0:0}, ldvarg11={0:0}, ldvarg12=2147483650, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg15={0:0}, ldvarg16={0:0}, ldvarg17={0:0}, ldvarg18={0:0}, ldvarg19={0:0}, ldvarg2=2147483653, ldvarg20={0:0}, ldvarg21={0:0}, ldvarg22={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg25={0:0}, ldvarg26={0:0}, ldvarg27={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg30={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg36={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg40={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg45={0:0}, ldvarg5=18446744073709551610, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ldvarg9={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=2147483650, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___29={0:0}, tmp___3={0:0}, tmp___30={0:0}, tmp___31={0:0}, tmp___32={0:0}, tmp___33={0:0}, tmp___34={0:0}, tmp___35={0:0}, tmp___36={0:0}, tmp___37={0:0}, tmp___38={0:0}, tmp___39={0:0}, tmp___4=18446744073709551610, tmp___40={0:0}, tmp___41={0:0}, tmp___42={0:0}, tmp___43=0, tmp___44=1, tmp___46=1, tmp___5=2147483653, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8442] CALL gspca_vm_open(gspca_vm_ops_group0) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vma={0:0}] [L5486] struct gspca_frame *frame ; [L5488] EXPR vma->vm_private_data [L5488] frame = (struct gspca_frame *)vma->vm_private_data [L5489] EXPR frame->vma_use_count VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, frame={2147483648:-59}, frame->vma_use_count=2147483647, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vma={0:0}, vma={0:0}] [L5489] frame->vma_use_count + 1 VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483656}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={90:0}, dev_fops_group0={0:0}, dev_ioctl_ops={89:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, frame={2147483648:-59}, frame->vma_use_count=2147483647, gspca_debug=0, gspca_template={88:0}, gspca_vm_ops={91:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vma={0:0}, vma={0:0}] - UnprovableResult [Line: 6508]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6508]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 5977]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 5977]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6084]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6084]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7299]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7299]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 5199]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 5199]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7167]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7167]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6356]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6356]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6159]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6159]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6159]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6159]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6160]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6160]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6165]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6165]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6177]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6177]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6193]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6193]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6202]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6202]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6215]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6215]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6374]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6374]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6240]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6240]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6240]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6240]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6249]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6249]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6297]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6297]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6297]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6297]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6304]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6304]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6305]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6305]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6317]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6317]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6439]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6439]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6473]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6473]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7021]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7021]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 5950]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 5950]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6526]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6526]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6534]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6534]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 5499]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 5499]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 9162]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 9162]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7592]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7592]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 5745]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 5745]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7650]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7650]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 5489]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8444]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8444]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8463]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8463]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8471]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8471]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8543]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8543]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7759]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7759]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7775]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7775]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8571]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8571]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6617]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6617]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6625]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6625]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6633]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6633]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6780]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6780]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7494]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7494]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 5667]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 5667]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - StatisticsResult: Ultimate Automizer benchmark data CFG has 83 procedures, 1602 locations, 98 error locations. Started 1 CEGAR loops. OverallTime: 96.7s, OverallIterations: 8, TraceHistogramMax: 48, PathProgramHistogramMax: 2, EmptinessCheckTime: 0.1s, AutomataDifference: 73.6s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 29345 SdHoareTripleChecker+Valid, 62.9s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 28034 mSDsluCounter, 48704 SdHoareTripleChecker+Invalid, 56.8s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 32953 mSDsCounter, 10323 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 22552 IncrementalHoareTripleChecker+Invalid, 32875 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 10323 mSolverCounterUnsat, 15751 mSDtfsCounter, 22552 mSolverCounterSat, 0.5s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 1694 GetRequests, 1632 SyntacticMatches, 2 SemanticMatches, 60 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 46 ImplicationChecksByTransitivity, 1.0s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=22908occurred in iteration=7, InterpolantAutomatonStates: 58, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 8.3s AutomataMinimizationTime, 7 MinimizatonAttempts, 36340 StatesRemovedByMinimization, 6 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: 0.5s SsaConstructionTime, 2.7s SatisfiabilityAnalysisTime, 8.1s InterpolantComputationTime, 3082 NumberOfCodeBlocks, 3082 NumberOfCodeBlocksAsserted, 10 NumberOfCheckSat, 3066 ConstructedInterpolants, 0 QuantifiedInterpolants, 6196 SizeOfPredicates, 2 NumberOfNonLiveVariables, 7316 ConjunctsInSsa, 16 ConjunctsInUnsatCore, 10 InterpolantComputations, 6 PerfectInterpolantSequences, 39609/39627 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate proved your program to be incorrect! [2022-11-18 20:10:58,807 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a612a7d4-9e11-44ba-88e8-b3c824144627/bin/uautomizer-TMbwUNV5ro/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Writing human readable error path to file UltimateCounterExample.errorpath Result: FALSE(OVERFLOW)