./Ultimate.py --spec ../../sv-benchmarks/c/properties/no-overflow.prp --file ../../sv-benchmarks/c/ldv-linux-3.12-rc1/linux-3.12-rc1.tar.xz-144_2a-drivers--media--usb--gspca--gspca_main.ko-entry_point.cil.out.i --full-output --architecture 64bit -------------------------------------------------------------------------------- Checking for overflows Using default analysis Version 38b53e6a Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3f2e6758-78a2-4da1-8efb-5651a54164f0/bin/uautomizer-ZsLfNo2U6R/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3f2e6758-78a2-4da1-8efb-5651a54164f0/bin/uautomizer-ZsLfNo2U6R/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3f2e6758-78a2-4da1-8efb-5651a54164f0/bin/uautomizer-ZsLfNo2U6R/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3f2e6758-78a2-4da1-8efb-5651a54164f0/bin/uautomizer-ZsLfNo2U6R/config/AutomizerReach.xml -i ../../sv-benchmarks/c/ldv-linux-3.12-rc1/linux-3.12-rc1.tar.xz-144_2a-drivers--media--usb--gspca--gspca_main.ko-entry_point.cil.out.i -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3f2e6758-78a2-4da1-8efb-5651a54164f0/bin/uautomizer-ZsLfNo2U6R/config/svcomp-Overflow-64bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3f2e6758-78a2-4da1-8efb-5651a54164f0/bin/uautomizer-ZsLfNo2U6R --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! overflow) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash 161acb090810893f5857465330b1e9af98cd436d8b1ab4337fc3709fda2d3260 --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-38b53e6 [2022-11-25 17:16:43,677 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-11-25 17:16:43,680 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-11-25 17:16:43,727 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-11-25 17:16:43,728 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-11-25 17:16:43,732 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-11-25 17:16:43,735 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-11-25 17:16:43,738 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-11-25 17:16:43,741 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-11-25 17:16:43,747 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-11-25 17:16:43,749 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-11-25 17:16:43,751 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-11-25 17:16:43,752 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-11-25 17:16:43,755 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-11-25 17:16:43,757 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-11-25 17:16:43,759 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-11-25 17:16:43,761 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-11-25 17:16:43,763 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-11-25 17:16:43,765 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-11-25 17:16:43,773 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-11-25 17:16:43,776 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-11-25 17:16:43,778 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-11-25 17:16:43,780 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-11-25 17:16:43,782 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-11-25 17:16:43,794 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-11-25 17:16:43,794 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-11-25 17:16:43,795 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-11-25 17:16:43,797 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-11-25 17:16:43,798 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-11-25 17:16:43,799 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-11-25 17:16:43,799 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-11-25 17:16:43,801 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-11-25 17:16:43,803 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-11-25 17:16:43,804 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-11-25 17:16:43,807 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-11-25 17:16:43,807 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-11-25 17:16:43,808 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-11-25 17:16:43,809 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-11-25 17:16:43,809 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-11-25 17:16:43,811 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-11-25 17:16:43,812 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-11-25 17:16:43,813 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3f2e6758-78a2-4da1-8efb-5651a54164f0/bin/uautomizer-ZsLfNo2U6R/config/svcomp-Overflow-64bit-Automizer_Default.epf [2022-11-25 17:16:43,857 INFO L113 SettingsManager]: Loading preferences was successful [2022-11-25 17:16:43,857 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-11-25 17:16:43,858 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-11-25 17:16:43,858 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-11-25 17:16:43,859 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-11-25 17:16:43,860 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-11-25 17:16:43,861 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-11-25 17:16:43,861 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-11-25 17:16:43,861 INFO L138 SettingsManager]: * Use SBE=true [2022-11-25 17:16:43,861 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-11-25 17:16:43,863 INFO L138 SettingsManager]: * Check unreachability of error function in SV-COMP mode=false [2022-11-25 17:16:43,863 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-11-25 17:16:43,863 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-11-25 17:16:43,864 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-11-25 17:16:43,864 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-11-25 17:16:43,864 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-11-25 17:16:43,864 INFO L138 SettingsManager]: * Check absence of signed integer overflows=true [2022-11-25 17:16:43,865 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-11-25 17:16:43,865 INFO L138 SettingsManager]: * Use constant arrays=true [2022-11-25 17:16:43,865 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-11-25 17:16:43,866 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-11-25 17:16:43,866 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-11-25 17:16:43,866 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-11-25 17:16:43,866 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-25 17:16:43,867 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-11-25 17:16:43,867 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-11-25 17:16:43,867 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-11-25 17:16:43,868 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-11-25 17:16:43,868 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-11-25 17:16:43,868 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-11-25 17:16:43,868 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-11-25 17:16:43,869 INFO L138 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2022-11-25 17:16:43,869 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2022-11-25 17:16:43,869 INFO L138 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3f2e6758-78a2-4da1-8efb-5651a54164f0/bin/uautomizer-ZsLfNo2U6R/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3f2e6758-78a2-4da1-8efb-5651a54164f0/bin/uautomizer-ZsLfNo2U6R Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! overflow) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 161acb090810893f5857465330b1e9af98cd436d8b1ab4337fc3709fda2d3260 [2022-11-25 17:16:44,197 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-11-25 17:16:44,221 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-11-25 17:16:44,224 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-11-25 17:16:44,225 INFO L271 PluginConnector]: Initializing CDTParser... [2022-11-25 17:16:44,226 INFO L275 PluginConnector]: CDTParser initialized [2022-11-25 17:16:44,227 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3f2e6758-78a2-4da1-8efb-5651a54164f0/bin/uautomizer-ZsLfNo2U6R/../../sv-benchmarks/c/ldv-linux-3.12-rc1/linux-3.12-rc1.tar.xz-144_2a-drivers--media--usb--gspca--gspca_main.ko-entry_point.cil.out.i [2022-11-25 17:16:47,323 INFO L500 CDTParser]: Created temporary CDT project at NULL [2022-11-25 17:16:48,000 INFO L351 CDTParser]: Found 1 translation units. [2022-11-25 17:16:48,001 INFO L172 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3f2e6758-78a2-4da1-8efb-5651a54164f0/sv-benchmarks/c/ldv-linux-3.12-rc1/linux-3.12-rc1.tar.xz-144_2a-drivers--media--usb--gspca--gspca_main.ko-entry_point.cil.out.i [2022-11-25 17:16:48,044 INFO L394 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3f2e6758-78a2-4da1-8efb-5651a54164f0/bin/uautomizer-ZsLfNo2U6R/data/8e40c8ac7/5e9e699efb5c44f1ab8c6a02df3e16ef/FLAGb9071768f [2022-11-25 17:16:48,060 INFO L402 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3f2e6758-78a2-4da1-8efb-5651a54164f0/bin/uautomizer-ZsLfNo2U6R/data/8e40c8ac7/5e9e699efb5c44f1ab8c6a02df3e16ef [2022-11-25 17:16:48,063 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-11-25 17:16:48,065 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-11-25 17:16:48,067 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-11-25 17:16:48,067 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-11-25 17:16:48,072 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-11-25 17:16:48,073 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 25.11 05:16:48" (1/1) ... [2022-11-25 17:16:48,074 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@55888c6 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 05:16:48, skipping insertion in model container [2022-11-25 17:16:48,074 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 25.11 05:16:48" (1/1) ... [2022-11-25 17:16:48,083 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-11-25 17:16:48,212 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-11-25 17:16:48,716 WARN L1266 CHandler]: Detected problem Invalid redeclaration of the name match at C: (*match)(struct device * , struct v4l2_async_subdev * ) [4482] [2022-11-25 17:16:48,828 WARN L623 FunctionHandler]: Unknown extern function __bad_percpu_size [2022-11-25 17:16:48,918 WARN L623 FunctionHandler]: Unknown extern function might_fault [2022-11-25 17:16:48,918 WARN L623 FunctionHandler]: Unknown extern function _copy_to_user [2022-11-25 17:16:49,114 WARN L623 FunctionHandler]: Unknown extern function ldv_malloc [2022-11-25 17:16:49,180 WARN L237 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3f2e6758-78a2-4da1-8efb-5651a54164f0/sv-benchmarks/c/ldv-linux-3.12-rc1/linux-3.12-rc1.tar.xz-144_2a-drivers--media--usb--gspca--gspca_main.ko-entry_point.cil.out.i[155153,155166] [2022-11-25 17:16:49,270 WARN L623 FunctionHandler]: Unknown extern function __video_register_device [2022-11-25 17:16:49,292 WARN L623 FunctionHandler]: Unknown extern function dev_get_drvdata [2022-11-25 17:16:49,330 WARN L623 FunctionHandler]: Unknown extern function dev_set_drvdata [2022-11-25 17:16:49,339 WARN L623 FunctionHandler]: Unknown extern function video_devdata [2022-11-25 17:16:49,408 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:49,411 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:49,465 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:49,466 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:49,468 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:49,481 WARN L623 FunctionHandler]: Unknown extern function strlcat [2022-11-25 17:16:49,484 WARN L623 FunctionHandler]: Unknown extern function input_register_device [2022-11-25 17:16:49,489 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:49,490 WARN L623 FunctionHandler]: Unknown extern function input_free_device [2022-11-25 17:16:49,499 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:49,503 WARN L623 FunctionHandler]: Unknown extern function usb_alloc_coherent [2022-11-25 17:16:49,515 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:49,516 WARN L623 FunctionHandler]: Unknown extern function usb_free_coherent [2022-11-25 17:16:49,522 WARN L623 FunctionHandler]: Unknown extern function usb_ifnum_to_if [2022-11-25 17:16:49,529 WARN L623 FunctionHandler]: Unknown extern function usb_kill_urb [2022-11-25 17:16:49,530 WARN L623 FunctionHandler]: Unknown extern function usb_free_coherent [2022-11-25 17:16:49,536 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:49,538 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:49,539 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:49,541 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:49,547 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:49,553 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:49,555 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:49,556 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:49,558 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:49,560 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:49,563 WARN L623 FunctionHandler]: Unknown extern function ktime_get [2022-11-25 17:16:49,564 WARN L623 FunctionHandler]: Unknown extern function ns_to_timeval [2022-11-25 17:16:49,567 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:49,571 WARN L623 FunctionHandler]: Unknown extern function __wake_up [2022-11-25 17:16:49,572 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:49,579 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:49,580 WARN L623 FunctionHandler]: Unknown extern function vmalloc_32 [2022-11-25 17:16:49,582 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:49,591 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:49,592 WARN L623 FunctionHandler]: Unknown extern function vfree [2022-11-25 17:16:49,598 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:49,599 WARN L623 FunctionHandler]: Unknown extern function usb_kill_urb [2022-11-25 17:16:49,600 WARN L623 FunctionHandler]: Unknown extern function usb_free_coherent [2022-11-25 17:16:49,605 WARN L623 FunctionHandler]: Unknown extern function usb_set_interface [2022-11-25 17:16:49,606 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:49,613 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:49,629 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:49,636 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:49,639 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:49,642 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:49,650 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:49,652 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:49,654 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:49,655 WARN L623 FunctionHandler]: Unknown extern function usb_alloc_coherent [2022-11-25 17:16:49,656 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:49,666 WARN L623 FunctionHandler]: Unknown extern function usb_ifnum_to_if [2022-11-25 17:16:49,670 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:49,672 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:49,675 WARN L623 FunctionHandler]: Unknown extern function usb_set_interface [2022-11-25 17:16:49,676 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:49,677 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:49,678 WARN L623 FunctionHandler]: Unknown extern function usb_clear_halt [2022-11-25 17:16:49,680 WARN L623 FunctionHandler]: Unknown extern function v4l2_ctrl_handler_setup [2022-11-25 17:16:49,682 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:49,683 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:49,684 WARN L623 FunctionHandler]: Unknown extern function msleep [2022-11-25 17:16:49,685 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:49,693 WARN L623 FunctionHandler]: Unknown extern function v4l2_ctrl_handler_setup [2022-11-25 17:16:49,754 WARN L623 FunctionHandler]: Unknown extern function mutex_lock_interruptible_nested [2022-11-25 17:16:49,757 WARN L623 FunctionHandler]: Unknown extern function mutex_unlock [2022-11-25 17:16:49,777 WARN L623 FunctionHandler]: Unknown extern function v4l2_ctrl_handler_free [2022-11-25 17:16:49,778 WARN L623 FunctionHandler]: Unknown extern function v4l2_device_unregister [2022-11-25 17:16:49,778 WARN L623 FunctionHandler]: Unknown extern function kfree [2022-11-25 17:16:49,779 WARN L623 FunctionHandler]: Unknown extern function kfree [2022-11-25 17:16:49,784 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:49,785 WARN L623 FunctionHandler]: Unknown extern function try_module_get [2022-11-25 17:16:49,786 WARN L623 FunctionHandler]: Unknown extern function v4l2_fh_open [2022-11-25 17:16:49,786 WARN L623 FunctionHandler]: Unknown extern function module_put [2022-11-25 17:16:49,792 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:49,793 WARN L623 FunctionHandler]: Unknown extern function mutex_lock_interruptible_nested [2022-11-25 17:16:49,793 WARN L623 FunctionHandler]: Unknown extern function mutex_lock_interruptible_nested [2022-11-25 17:16:49,794 WARN L623 FunctionHandler]: Unknown extern function mutex_unlock [2022-11-25 17:16:49,795 WARN L623 FunctionHandler]: Unknown extern function module_put [2022-11-25 17:16:49,796 WARN L623 FunctionHandler]: Unknown extern function mutex_unlock [2022-11-25 17:16:49,796 WARN L623 FunctionHandler]: Unknown extern function mutex_unlock [2022-11-25 17:16:49,796 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:49,797 WARN L623 FunctionHandler]: Unknown extern function v4l2_fh_release [2022-11-25 17:16:49,802 WARN L623 FunctionHandler]: Unknown extern function strlcpy [2022-11-25 17:16:49,804 WARN L623 FunctionHandler]: Unknown extern function strlcpy [2022-11-25 17:16:49,811 WARN L623 FunctionHandler]: Unknown extern function strlcpy [2022-11-25 17:16:49,826 WARN L623 FunctionHandler]: Unknown extern function mutex_lock_interruptible_nested [2022-11-25 17:16:49,830 WARN L623 FunctionHandler]: Unknown extern function mutex_unlock [2022-11-25 17:16:49,831 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:49,843 WARN L623 FunctionHandler]: Unknown extern function mutex_lock_interruptible_nested [2022-11-25 17:16:49,845 WARN L623 FunctionHandler]: Unknown extern function mutex_unlock [2022-11-25 17:16:49,851 WARN L623 FunctionHandler]: Unknown extern function mutex_lock_interruptible_nested [2022-11-25 17:16:49,852 WARN L623 FunctionHandler]: Unknown extern function __wake_up [2022-11-25 17:16:49,854 WARN L623 FunctionHandler]: Unknown extern function mutex_unlock [2022-11-25 17:16:49,882 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:49,883 WARN L623 FunctionHandler]: Unknown extern function mutex_lock_interruptible_nested [2022-11-25 17:16:49,884 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:49,886 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:49,887 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:49,888 WARN L623 FunctionHandler]: Unknown extern function vmalloc_to_page [2022-11-25 17:16:49,889 WARN L623 FunctionHandler]: Unknown extern function vm_insert_page [2022-11-25 17:16:49,890 WARN L623 FunctionHandler]: Unknown extern function mutex_unlock [2022-11-25 17:16:49,901 WARN L623 FunctionHandler]: Unknown extern function mutex_lock_interruptible_nested [2022-11-25 17:16:49,902 WARN L623 FunctionHandler]: Unknown extern function mutex_unlock [2022-11-25 17:16:49,907 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:49,908 WARN L623 FunctionHandler]: Unknown extern function mutex_lock_interruptible_nested [2022-11-25 17:16:49,909 WARN L623 FunctionHandler]: Unknown extern function mutex_unlock [2022-11-25 17:16:49,910 WARN L623 FunctionHandler]: Unknown extern function msecs_to_jiffies [2022-11-25 17:16:49,912 WARN L623 FunctionHandler]: Unknown extern function prepare_to_wait [2022-11-25 17:16:49,913 WARN L623 FunctionHandler]: Unknown extern function schedule_timeout [2022-11-25 17:16:49,915 WARN L623 FunctionHandler]: Unknown extern function finish_wait [2022-11-25 17:16:49,916 WARN L623 FunctionHandler]: Unknown extern function mutex_lock_interruptible_nested [2022-11-25 17:16:49,918 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:49,919 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:49,920 WARN L623 FunctionHandler]: Unknown extern function mutex_unlock [2022-11-25 17:16:49,921 WARN L623 FunctionHandler]: Unknown extern function mutex_lock_nested [2022-11-25 17:16:49,922 WARN L623 FunctionHandler]: Unknown extern function mutex_unlock [2022-11-25 17:16:49,927 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:49,928 WARN L623 FunctionHandler]: Unknown extern function mutex_lock_interruptible_nested [2022-11-25 17:16:49,929 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:49,930 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:49,931 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:49,933 WARN L623 FunctionHandler]: Unknown extern function mutex_unlock [2022-11-25 17:16:49,939 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:49,939 WARN L623 FunctionHandler]: Unknown extern function mutex_lock_interruptible_nested [2022-11-25 17:16:49,941 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:49,943 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:49,944 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:49,944 WARN L623 FunctionHandler]: Unknown extern function mutex_unlock [2022-11-25 17:16:49,950 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:49,950 WARN L623 FunctionHandler]: Unknown extern function v4l2_ctrl_poll [2022-11-25 17:16:49,952 WARN L623 FunctionHandler]: Unknown extern function mutex_lock_interruptible_nested [2022-11-25 17:16:49,953 WARN L623 FunctionHandler]: Unknown extern function mutex_unlock [2022-11-25 17:16:49,959 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:49,964 WARN L623 FunctionHandler]: Unknown extern function ktime_get [2022-11-25 17:16:49,965 WARN L623 FunctionHandler]: Unknown extern function ns_to_timeval [2022-11-25 17:16:49,966 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:49,968 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:49,969 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:49,984 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:49,986 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:49,992 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:50,000 WARN L623 FunctionHandler]: Unknown extern function v4l2_device_register [2022-11-25 17:16:50,025 WARN L623 FunctionHandler]: Unknown extern function __mutex_init [2022-11-25 17:16:50,026 WARN L623 FunctionHandler]: Unknown extern function __mutex_init [2022-11-25 17:16:50,027 WARN L623 FunctionHandler]: Unknown extern function __init_waitqueue_head [2022-11-25 17:16:50,033 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:50,035 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:50,036 WARN L623 FunctionHandler]: Unknown extern function input_unregister_device [2022-11-25 17:16:50,037 WARN L623 FunctionHandler]: Unknown extern function v4l2_ctrl_handler_free [2022-11-25 17:16:50,050 WARN L623 FunctionHandler]: Unknown extern function kfree [2022-11-25 17:16:50,050 WARN L623 FunctionHandler]: Unknown extern function kfree [2022-11-25 17:16:50,054 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:50,057 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:50,057 WARN L623 FunctionHandler]: Unknown extern function mutex_lock_nested [2022-11-25 17:16:50,058 WARN L623 FunctionHandler]: Unknown extern function input_unregister_device [2022-11-25 17:16:50,065 WARN L623 FunctionHandler]: Unknown extern function __wake_up [2022-11-25 17:16:50,065 WARN L623 FunctionHandler]: Unknown extern function v4l2_device_disconnect [2022-11-25 17:16:50,065 WARN L623 FunctionHandler]: Unknown extern function video_unregister_device [2022-11-25 17:16:50,066 WARN L623 FunctionHandler]: Unknown extern function mutex_unlock [2022-11-25 17:16:50,068 WARN L623 FunctionHandler]: Unknown extern function v4l2_device_put [2022-11-25 17:16:50,070 WARN L623 FunctionHandler]: Unknown extern function mutex_lock_nested [2022-11-25 17:16:50,072 WARN L623 FunctionHandler]: Unknown extern function mutex_unlock [2022-11-25 17:16:50,075 WARN L623 FunctionHandler]: Unknown extern function mutex_lock_nested [2022-11-25 17:16:50,077 WARN L623 FunctionHandler]: Unknown extern function mutex_unlock [2022-11-25 17:16:50,082 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:50,120 WARN L623 FunctionHandler]: Unknown extern function ldv_initialize [2022-11-25 17:16:50,125 WARN L623 FunctionHandler]: Unknown extern function video_device_release_empty [2022-11-25 17:16:50,126 WARN L623 FunctionHandler]: Unknown extern function ldv_probe_1 [2022-11-25 17:16:50,134 WARN L623 FunctionHandler]: Unknown extern function video_ioctl2 [2022-11-25 17:16:50,136 WARN L623 FunctionHandler]: Unknown extern function video_ioctl2 [2022-11-25 17:16:50,137 WARN L623 FunctionHandler]: Unknown extern function v4l2_event_unsubscribe [2022-11-25 17:16:50,145 WARN L623 FunctionHandler]: Unknown extern function v4l2_ctrl_subscribe_event [2022-11-25 17:16:50,171 WARN L623 FunctionHandler]: Unknown extern function v4l2_ctrl_g_ctrl [2022-11-25 17:16:50,172 WARN L623 FunctionHandler]: Unknown extern function v4l2_ctrl_g_ctrl [2022-11-25 17:16:50,172 WARN L623 FunctionHandler]: Unknown extern function v4l2_ctrl_g_ctrl [2022-11-25 17:16:50,173 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:50,177 WARN L623 FunctionHandler]: Unknown extern function v4l2_ctrl_s_ctrl [2022-11-25 17:16:50,178 WARN L623 FunctionHandler]: Unknown extern function v4l2_ctrl_s_ctrl [2022-11-25 17:16:50,178 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:50,180 WARN L623 FunctionHandler]: Unknown extern function v4l2_ctrl_g_ctrl [2022-11-25 17:16:50,180 WARN L623 FunctionHandler]: Unknown extern function v4l2_ctrl_g_ctrl [2022-11-25 17:16:50,181 WARN L623 FunctionHandler]: Unknown extern function v4l2_ctrl_g_ctrl [2022-11-25 17:16:50,182 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:50,184 WARN L623 FunctionHandler]: Unknown extern function v4l2_ctrl_s_ctrl [2022-11-25 17:16:50,185 WARN L623 FunctionHandler]: Unknown extern function v4l2_ctrl_s_ctrl [2022-11-25 17:16:50,185 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:50,197 WARN L623 FunctionHandler]: Unknown extern function ldv_malloc [2022-11-25 17:16:50,206 WARN L623 FunctionHandler]: Unknown extern function ldv_malloc [2022-11-25 17:16:50,251 WARN L623 FunctionHandler]: Unknown extern function ldv_malloc [2022-11-25 17:16:50,252 WARN L611 FunctionHandler]: implicit declaration of function ldv_xmalloc [2022-11-25 17:16:50,264 WARN L623 FunctionHandler]: Unknown extern function ldv_malloc [2022-11-25 17:16:50,265 WARN L623 FunctionHandler]: Unknown extern function ldv_malloc [2022-11-25 17:16:50,270 WARN L623 FunctionHandler]: Unknown extern function ldv_malloc [2022-11-25 17:16:50,271 WARN L623 FunctionHandler]: Unknown extern function ldv_malloc [2022-11-25 17:16:50,272 WARN L623 FunctionHandler]: Unknown extern function ldv_malloc [2022-11-25 17:16:50,277 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-25 17:16:50,322 INFO L203 MainTranslator]: Completed pre-run [2022-11-25 17:16:50,521 WARN L1266 CHandler]: Detected problem Invalid redeclaration of the name match at C: (*match)(struct device * , struct v4l2_async_subdev * ) [4482] [2022-11-25 17:16:50,540 WARN L623 FunctionHandler]: Unknown extern function __bad_percpu_size [2022-11-25 17:16:50,542 WARN L623 FunctionHandler]: Unknown extern function might_fault [2022-11-25 17:16:50,542 WARN L623 FunctionHandler]: Unknown extern function _copy_to_user [2022-11-25 17:16:50,548 WARN L623 FunctionHandler]: Unknown extern function ldv_malloc [2022-11-25 17:16:50,552 WARN L237 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3f2e6758-78a2-4da1-8efb-5651a54164f0/sv-benchmarks/c/ldv-linux-3.12-rc1/linux-3.12-rc1.tar.xz-144_2a-drivers--media--usb--gspca--gspca_main.ko-entry_point.cil.out.i[155153,155166] [2022-11-25 17:16:50,562 WARN L623 FunctionHandler]: Unknown extern function __video_register_device [2022-11-25 17:16:50,565 WARN L623 FunctionHandler]: Unknown extern function dev_get_drvdata [2022-11-25 17:16:50,566 WARN L623 FunctionHandler]: Unknown extern function dev_set_drvdata [2022-11-25 17:16:50,567 WARN L623 FunctionHandler]: Unknown extern function video_devdata [2022-11-25 17:16:50,570 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:50,572 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:50,589 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:50,590 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:50,591 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:50,596 WARN L623 FunctionHandler]: Unknown extern function strlcat [2022-11-25 17:16:50,599 WARN L623 FunctionHandler]: Unknown extern function input_register_device [2022-11-25 17:16:50,601 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:50,603 WARN L623 FunctionHandler]: Unknown extern function input_free_device [2022-11-25 17:16:50,611 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:50,614 WARN L623 FunctionHandler]: Unknown extern function usb_alloc_coherent [2022-11-25 17:16:50,616 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:50,617 WARN L623 FunctionHandler]: Unknown extern function usb_free_coherent [2022-11-25 17:16:50,619 WARN L623 FunctionHandler]: Unknown extern function usb_ifnum_to_if [2022-11-25 17:16:50,622 WARN L623 FunctionHandler]: Unknown extern function usb_kill_urb [2022-11-25 17:16:50,622 WARN L623 FunctionHandler]: Unknown extern function usb_free_coherent [2022-11-25 17:16:50,623 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:50,633 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:50,634 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:50,635 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:50,636 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:50,638 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:50,640 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:50,641 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:50,651 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:50,653 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:50,655 WARN L623 FunctionHandler]: Unknown extern function ktime_get [2022-11-25 17:16:50,656 WARN L623 FunctionHandler]: Unknown extern function ns_to_timeval [2022-11-25 17:16:50,657 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:50,660 WARN L623 FunctionHandler]: Unknown extern function __wake_up [2022-11-25 17:16:50,661 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:50,665 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:50,667 WARN L623 FunctionHandler]: Unknown extern function vmalloc_32 [2022-11-25 17:16:50,668 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:50,671 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:50,672 WARN L623 FunctionHandler]: Unknown extern function vfree [2022-11-25 17:16:50,673 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:50,675 WARN L623 FunctionHandler]: Unknown extern function usb_kill_urb [2022-11-25 17:16:50,675 WARN L623 FunctionHandler]: Unknown extern function usb_free_coherent [2022-11-25 17:16:50,678 WARN L623 FunctionHandler]: Unknown extern function usb_set_interface [2022-11-25 17:16:50,678 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:50,697 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:50,720 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:50,725 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:50,727 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:50,730 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:50,737 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:50,739 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:50,740 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:50,741 WARN L623 FunctionHandler]: Unknown extern function usb_alloc_coherent [2022-11-25 17:16:50,741 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:50,751 WARN L623 FunctionHandler]: Unknown extern function usb_ifnum_to_if [2022-11-25 17:16:50,761 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:50,763 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:50,764 WARN L623 FunctionHandler]: Unknown extern function usb_set_interface [2022-11-25 17:16:50,765 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:50,765 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:50,766 WARN L623 FunctionHandler]: Unknown extern function usb_clear_halt [2022-11-25 17:16:50,775 WARN L623 FunctionHandler]: Unknown extern function v4l2_ctrl_handler_setup [2022-11-25 17:16:50,778 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:50,782 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:50,783 WARN L623 FunctionHandler]: Unknown extern function msleep [2022-11-25 17:16:50,792 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:50,795 WARN L623 FunctionHandler]: Unknown extern function v4l2_ctrl_handler_setup [2022-11-25 17:16:50,839 WARN L623 FunctionHandler]: Unknown extern function mutex_lock_interruptible_nested [2022-11-25 17:16:50,847 WARN L623 FunctionHandler]: Unknown extern function mutex_unlock [2022-11-25 17:16:50,858 WARN L623 FunctionHandler]: Unknown extern function v4l2_ctrl_handler_free [2022-11-25 17:16:50,859 WARN L623 FunctionHandler]: Unknown extern function v4l2_device_unregister [2022-11-25 17:16:50,859 WARN L623 FunctionHandler]: Unknown extern function kfree [2022-11-25 17:16:50,861 WARN L623 FunctionHandler]: Unknown extern function kfree [2022-11-25 17:16:50,862 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:50,863 WARN L623 FunctionHandler]: Unknown extern function try_module_get [2022-11-25 17:16:50,864 WARN L623 FunctionHandler]: Unknown extern function v4l2_fh_open [2022-11-25 17:16:50,864 WARN L623 FunctionHandler]: Unknown extern function module_put [2022-11-25 17:16:50,865 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:50,866 WARN L623 FunctionHandler]: Unknown extern function mutex_lock_interruptible_nested [2022-11-25 17:16:50,866 WARN L623 FunctionHandler]: Unknown extern function mutex_lock_interruptible_nested [2022-11-25 17:16:50,867 WARN L623 FunctionHandler]: Unknown extern function mutex_unlock [2022-11-25 17:16:50,867 WARN L623 FunctionHandler]: Unknown extern function module_put [2022-11-25 17:16:50,868 WARN L623 FunctionHandler]: Unknown extern function mutex_unlock [2022-11-25 17:16:50,868 WARN L623 FunctionHandler]: Unknown extern function mutex_unlock [2022-11-25 17:16:50,868 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:50,869 WARN L623 FunctionHandler]: Unknown extern function v4l2_fh_release [2022-11-25 17:16:50,870 WARN L623 FunctionHandler]: Unknown extern function strlcpy [2022-11-25 17:16:50,871 WARN L623 FunctionHandler]: Unknown extern function strlcpy [2022-11-25 17:16:50,874 WARN L623 FunctionHandler]: Unknown extern function strlcpy [2022-11-25 17:16:50,876 WARN L623 FunctionHandler]: Unknown extern function mutex_lock_interruptible_nested [2022-11-25 17:16:50,882 WARN L623 FunctionHandler]: Unknown extern function mutex_unlock [2022-11-25 17:16:50,884 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:50,887 WARN L623 FunctionHandler]: Unknown extern function mutex_lock_interruptible_nested [2022-11-25 17:16:50,889 WARN L623 FunctionHandler]: Unknown extern function mutex_unlock [2022-11-25 17:16:50,892 WARN L623 FunctionHandler]: Unknown extern function mutex_lock_interruptible_nested [2022-11-25 17:16:50,894 WARN L623 FunctionHandler]: Unknown extern function __wake_up [2022-11-25 17:16:50,896 WARN L623 FunctionHandler]: Unknown extern function mutex_unlock [2022-11-25 17:16:50,930 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:50,930 WARN L623 FunctionHandler]: Unknown extern function mutex_lock_interruptible_nested [2022-11-25 17:16:50,931 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:50,933 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:50,933 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:50,934 WARN L623 FunctionHandler]: Unknown extern function vmalloc_to_page [2022-11-25 17:16:50,934 WARN L623 FunctionHandler]: Unknown extern function vm_insert_page [2022-11-25 17:16:50,936 WARN L623 FunctionHandler]: Unknown extern function mutex_unlock [2022-11-25 17:16:50,938 WARN L623 FunctionHandler]: Unknown extern function mutex_lock_interruptible_nested [2022-11-25 17:16:50,938 WARN L623 FunctionHandler]: Unknown extern function mutex_unlock [2022-11-25 17:16:50,939 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:50,940 WARN L623 FunctionHandler]: Unknown extern function mutex_lock_interruptible_nested [2022-11-25 17:16:50,941 WARN L623 FunctionHandler]: Unknown extern function mutex_unlock [2022-11-25 17:16:50,941 WARN L623 FunctionHandler]: Unknown extern function msecs_to_jiffies [2022-11-25 17:16:50,942 WARN L623 FunctionHandler]: Unknown extern function prepare_to_wait [2022-11-25 17:16:50,943 WARN L623 FunctionHandler]: Unknown extern function schedule_timeout [2022-11-25 17:16:50,945 WARN L623 FunctionHandler]: Unknown extern function finish_wait [2022-11-25 17:16:50,945 WARN L623 FunctionHandler]: Unknown extern function mutex_lock_interruptible_nested [2022-11-25 17:16:50,947 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:50,948 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:50,948 WARN L623 FunctionHandler]: Unknown extern function mutex_unlock [2022-11-25 17:16:50,949 WARN L623 FunctionHandler]: Unknown extern function mutex_lock_nested [2022-11-25 17:16:50,974 WARN L623 FunctionHandler]: Unknown extern function mutex_unlock [2022-11-25 17:16:50,975 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:50,975 WARN L623 FunctionHandler]: Unknown extern function mutex_lock_interruptible_nested [2022-11-25 17:16:50,976 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:50,976 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:50,977 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:50,978 WARN L623 FunctionHandler]: Unknown extern function mutex_unlock [2022-11-25 17:16:50,979 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:50,979 WARN L623 FunctionHandler]: Unknown extern function mutex_lock_interruptible_nested [2022-11-25 17:16:50,980 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:50,981 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:50,982 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:50,982 WARN L623 FunctionHandler]: Unknown extern function mutex_unlock [2022-11-25 17:16:50,984 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:50,984 WARN L623 FunctionHandler]: Unknown extern function v4l2_ctrl_poll [2022-11-25 17:16:50,985 WARN L623 FunctionHandler]: Unknown extern function mutex_lock_interruptible_nested [2022-11-25 17:16:50,986 WARN L623 FunctionHandler]: Unknown extern function mutex_unlock [2022-11-25 17:16:50,988 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:50,989 WARN L623 FunctionHandler]: Unknown extern function ktime_get [2022-11-25 17:16:50,989 WARN L623 FunctionHandler]: Unknown extern function ns_to_timeval [2022-11-25 17:16:50,990 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:50,991 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:50,992 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:50,999 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:51,000 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:51,001 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:51,008 WARN L623 FunctionHandler]: Unknown extern function v4l2_device_register [2022-11-25 17:16:51,037 WARN L623 FunctionHandler]: Unknown extern function __mutex_init [2022-11-25 17:16:51,038 WARN L623 FunctionHandler]: Unknown extern function __mutex_init [2022-11-25 17:16:51,038 WARN L623 FunctionHandler]: Unknown extern function __init_waitqueue_head [2022-11-25 17:16:51,057 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:51,058 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:51,058 WARN L623 FunctionHandler]: Unknown extern function input_unregister_device [2022-11-25 17:16:51,060 WARN L623 FunctionHandler]: Unknown extern function v4l2_ctrl_handler_free [2022-11-25 17:16:51,061 WARN L623 FunctionHandler]: Unknown extern function kfree [2022-11-25 17:16:51,061 WARN L623 FunctionHandler]: Unknown extern function kfree [2022-11-25 17:16:51,086 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:51,088 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:51,088 WARN L623 FunctionHandler]: Unknown extern function mutex_lock_nested [2022-11-25 17:16:51,092 WARN L623 FunctionHandler]: Unknown extern function input_unregister_device [2022-11-25 17:16:51,099 WARN L623 FunctionHandler]: Unknown extern function __wake_up [2022-11-25 17:16:51,099 WARN L623 FunctionHandler]: Unknown extern function v4l2_device_disconnect [2022-11-25 17:16:51,099 WARN L623 FunctionHandler]: Unknown extern function video_unregister_device [2022-11-25 17:16:51,100 WARN L623 FunctionHandler]: Unknown extern function mutex_unlock [2022-11-25 17:16:51,100 WARN L623 FunctionHandler]: Unknown extern function v4l2_device_put [2022-11-25 17:16:51,101 WARN L623 FunctionHandler]: Unknown extern function mutex_lock_nested [2022-11-25 17:16:51,113 WARN L623 FunctionHandler]: Unknown extern function mutex_unlock [2022-11-25 17:16:51,114 WARN L623 FunctionHandler]: Unknown extern function mutex_lock_nested [2022-11-25 17:16:51,120 WARN L623 FunctionHandler]: Unknown extern function mutex_unlock [2022-11-25 17:16:51,121 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:51,127 WARN L623 FunctionHandler]: Unknown extern function ldv_initialize [2022-11-25 17:16:51,128 WARN L623 FunctionHandler]: Unknown extern function video_device_release_empty [2022-11-25 17:16:51,129 WARN L623 FunctionHandler]: Unknown extern function ldv_probe_1 [2022-11-25 17:16:51,131 WARN L623 FunctionHandler]: Unknown extern function video_ioctl2 [2022-11-25 17:16:51,132 WARN L623 FunctionHandler]: Unknown extern function video_ioctl2 [2022-11-25 17:16:51,133 WARN L623 FunctionHandler]: Unknown extern function v4l2_event_unsubscribe [2022-11-25 17:16:51,136 WARN L623 FunctionHandler]: Unknown extern function v4l2_ctrl_subscribe_event [2022-11-25 17:16:51,141 WARN L623 FunctionHandler]: Unknown extern function v4l2_ctrl_g_ctrl [2022-11-25 17:16:51,141 WARN L623 FunctionHandler]: Unknown extern function v4l2_ctrl_g_ctrl [2022-11-25 17:16:51,142 WARN L623 FunctionHandler]: Unknown extern function v4l2_ctrl_g_ctrl [2022-11-25 17:16:51,143 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:51,145 WARN L623 FunctionHandler]: Unknown extern function v4l2_ctrl_s_ctrl [2022-11-25 17:16:51,145 WARN L623 FunctionHandler]: Unknown extern function v4l2_ctrl_s_ctrl [2022-11-25 17:16:51,146 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:51,147 WARN L623 FunctionHandler]: Unknown extern function v4l2_ctrl_g_ctrl [2022-11-25 17:16:51,147 WARN L623 FunctionHandler]: Unknown extern function v4l2_ctrl_g_ctrl [2022-11-25 17:16:51,148 WARN L623 FunctionHandler]: Unknown extern function v4l2_ctrl_g_ctrl [2022-11-25 17:16:51,149 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:51,151 WARN L623 FunctionHandler]: Unknown extern function v4l2_ctrl_s_ctrl [2022-11-25 17:16:51,152 WARN L623 FunctionHandler]: Unknown extern function v4l2_ctrl_s_ctrl [2022-11-25 17:16:51,152 WARN L623 FunctionHandler]: Unknown extern function printk [2022-11-25 17:16:51,154 WARN L623 FunctionHandler]: Unknown extern function ldv_malloc [2022-11-25 17:16:51,156 WARN L623 FunctionHandler]: Unknown extern function ldv_malloc [2022-11-25 17:16:51,160 WARN L623 FunctionHandler]: Unknown extern function ldv_malloc [2022-11-25 17:16:51,161 WARN L611 FunctionHandler]: implicit declaration of function ldv_xmalloc [2022-11-25 17:16:51,163 WARN L623 FunctionHandler]: Unknown extern function ldv_malloc [2022-11-25 17:16:51,164 WARN L623 FunctionHandler]: Unknown extern function ldv_malloc [2022-11-25 17:16:51,165 WARN L623 FunctionHandler]: Unknown extern function ldv_malloc [2022-11-25 17:16:51,166 WARN L623 FunctionHandler]: Unknown extern function ldv_malloc [2022-11-25 17:16:51,167 WARN L623 FunctionHandler]: Unknown extern function ldv_malloc [2022-11-25 17:16:51,168 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-25 17:16:51,238 INFO L208 MainTranslator]: Completed translation [2022-11-25 17:16:51,239 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 05:16:51 WrapperNode [2022-11-25 17:16:51,239 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-11-25 17:16:51,240 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-11-25 17:16:51,240 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-11-25 17:16:51,240 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-11-25 17:16:51,249 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 05:16:51" (1/1) ... [2022-11-25 17:16:51,328 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 05:16:51" (1/1) ... [2022-11-25 17:16:51,597 INFO L138 Inliner]: procedures = 242, calls = 2944, calls flagged for inlining = 95, calls inlined = 71, statements flattened = 4117 [2022-11-25 17:16:51,598 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-11-25 17:16:51,599 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-11-25 17:16:51,599 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-11-25 17:16:51,599 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-11-25 17:16:51,610 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 05:16:51" (1/1) ... [2022-11-25 17:16:51,610 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 05:16:51" (1/1) ... [2022-11-25 17:16:51,671 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 05:16:51" (1/1) ... [2022-11-25 17:16:51,671 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 05:16:51" (1/1) ... [2022-11-25 17:16:51,816 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 05:16:51" (1/1) ... [2022-11-25 17:16:51,837 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 05:16:51" (1/1) ... [2022-11-25 17:16:51,860 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 05:16:51" (1/1) ... [2022-11-25 17:16:51,879 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 05:16:51" (1/1) ... [2022-11-25 17:16:51,927 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-11-25 17:16:51,931 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-11-25 17:16:51,931 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-11-25 17:16:51,931 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-11-25 17:16:51,933 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 05:16:51" (1/1) ... [2022-11-25 17:16:51,940 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-25 17:16:51,953 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3f2e6758-78a2-4da1-8efb-5651a54164f0/bin/uautomizer-ZsLfNo2U6R/z3 [2022-11-25 17:16:51,972 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3f2e6758-78a2-4da1-8efb-5651a54164f0/bin/uautomizer-ZsLfNo2U6R/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-11-25 17:16:52,002 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3f2e6758-78a2-4da1-8efb-5651a54164f0/bin/uautomizer-ZsLfNo2U6R/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-11-25 17:16:52,031 INFO L130 BoogieDeclarations]: Found specification of procedure atomic_set [2022-11-25 17:16:52,031 INFO L138 BoogieDeclarations]: Found implementation of procedure atomic_set [2022-11-25 17:16:52,031 INFO L130 BoogieDeclarations]: Found specification of procedure wxh_to_mode [2022-11-25 17:16:52,031 INFO L138 BoogieDeclarations]: Found implementation of procedure wxh_to_mode [2022-11-25 17:16:52,032 INFO L130 BoogieDeclarations]: Found specification of procedure PDEBUG_MODE [2022-11-25 17:16:52,032 INFO L138 BoogieDeclarations]: Found implementation of procedure PDEBUG_MODE [2022-11-25 17:16:52,032 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$ [2022-11-25 17:16:52,032 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$ [2022-11-25 17:16:52,032 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop [2022-11-25 17:16:52,032 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop [2022-11-25 17:16:52,033 INFO L130 BoogieDeclarations]: Found specification of procedure usb_set_interface [2022-11-25 17:16:52,033 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_set_interface [2022-11-25 17:16:52,033 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_submit_urb [2022-11-25 17:16:52,033 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_submit_urb [2022-11-25 17:16:52,033 INFO L130 BoogieDeclarations]: Found specification of procedure frame_free [2022-11-25 17:16:52,033 INFO L138 BoogieDeclarations]: Found implementation of procedure frame_free [2022-11-25 17:16:52,033 INFO L130 BoogieDeclarations]: Found specification of procedure alt_xfer [2022-11-25 17:16:52,034 INFO L138 BoogieDeclarations]: Found implementation of procedure alt_xfer [2022-11-25 17:16:52,034 INFO L130 BoogieDeclarations]: Found specification of procedure vidioc_streamon [2022-11-25 17:16:52,034 INFO L138 BoogieDeclarations]: Found implementation of procedure vidioc_streamon [2022-11-25 17:16:52,034 INFO L130 BoogieDeclarations]: Found specification of procedure get_current [2022-11-25 17:16:52,034 INFO L138 BoogieDeclarations]: Found implementation of procedure get_current [2022-11-25 17:16:52,034 INFO L130 BoogieDeclarations]: Found specification of procedure dev_mmap [2022-11-25 17:16:52,035 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_mmap [2022-11-25 17:16:52,035 INFO L130 BoogieDeclarations]: Found specification of procedure usb_make_path [2022-11-25 17:16:52,035 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_make_path [2022-11-25 17:16:52,035 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_malloc [2022-11-25 17:16:52,035 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_malloc [2022-11-25 17:16:52,035 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_alloc_urb [2022-11-25 17:16:52,036 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_alloc_urb [2022-11-25 17:16:52,036 INFO L130 BoogieDeclarations]: Found specification of procedure vidioc_streamoff [2022-11-25 17:16:52,036 INFO L138 BoogieDeclarations]: Found implementation of procedure vidioc_streamoff [2022-11-25 17:16:52,036 INFO L130 BoogieDeclarations]: Found specification of procedure gspca_init_transfer [2022-11-25 17:16:52,036 INFO L138 BoogieDeclarations]: Found implementation of procedure gspca_init_transfer [2022-11-25 17:16:52,036 INFO L130 BoogieDeclarations]: Found specification of procedure dev_poll [2022-11-25 17:16:52,037 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_poll [2022-11-25 17:16:52,037 INFO L130 BoogieDeclarations]: Found specification of procedure mutex_lock_interruptible_nested [2022-11-25 17:16:52,037 INFO L138 BoogieDeclarations]: Found implementation of procedure mutex_lock_interruptible_nested [2022-11-25 17:16:52,037 INFO L130 BoogieDeclarations]: Found specification of procedure vidioc_reqbufs [2022-11-25 17:16:52,037 INFO L138 BoogieDeclarations]: Found implementation of procedure vidioc_reqbufs [2022-11-25 17:16:52,037 INFO L130 BoogieDeclarations]: Found specification of procedure frame_ready_nolock [2022-11-25 17:16:52,037 INFO L138 BoogieDeclarations]: Found implementation of procedure frame_ready_nolock [2022-11-25 17:16:52,038 INFO L130 BoogieDeclarations]: Found specification of procedure mutex_unlock [2022-11-25 17:16:52,038 INFO L138 BoogieDeclarations]: Found implementation of procedure mutex_unlock [2022-11-25 17:16:52,038 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_error [2022-11-25 17:16:52,038 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_error [2022-11-25 17:16:52,038 INFO L130 BoogieDeclarations]: Found specification of procedure frame_ready [2022-11-25 17:16:52,038 INFO L138 BoogieDeclarations]: Found implementation of procedure frame_ready [2022-11-25 17:16:52,039 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_dir_in [2022-11-25 17:16:52,039 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_dir_in [2022-11-25 17:16:52,039 INFO L130 BoogieDeclarations]: Found specification of procedure atomic_read [2022-11-25 17:16:52,039 INFO L138 BoogieDeclarations]: Found implementation of procedure atomic_read [2022-11-25 17:16:52,039 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memset [2022-11-25 17:16:52,039 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memset [2022-11-25 17:16:52,040 INFO L130 BoogieDeclarations]: Found specification of procedure assume_abort_if_not [2022-11-25 17:16:52,040 INFO L138 BoogieDeclarations]: Found implementation of procedure assume_abort_if_not [2022-11-25 17:16:52,040 INFO L130 BoogieDeclarations]: Found specification of procedure gspca_set_alt0 [2022-11-25 17:16:52,040 INFO L138 BoogieDeclarations]: Found implementation of procedure gspca_set_alt0 [2022-11-25 17:16:52,040 INFO L130 BoogieDeclarations]: Found specification of procedure bulk_irq [2022-11-25 17:16:52,041 INFO L138 BoogieDeclarations]: Found implementation of procedure bulk_irq [2022-11-25 17:16:52,041 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop___0 [2022-11-25 17:16:52,041 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop___0 [2022-11-25 17:16:52,041 INFO L130 BoogieDeclarations]: Found specification of procedure video_drvdata [2022-11-25 17:16:52,041 INFO L138 BoogieDeclarations]: Found implementation of procedure video_drvdata [2022-11-25 17:16:52,042 INFO L130 BoogieDeclarations]: Found specification of procedure ktime_get [2022-11-25 17:16:52,042 INFO L138 BoogieDeclarations]: Found implementation of procedure ktime_get [2022-11-25 17:16:52,042 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2022-11-25 17:16:52,042 INFO L130 BoogieDeclarations]: Found specification of procedure usb_free_coherent [2022-11-25 17:16:52,042 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_free_coherent [2022-11-25 17:16:52,042 INFO L130 BoogieDeclarations]: Found specification of procedure module_put [2022-11-25 17:16:52,043 INFO L138 BoogieDeclarations]: Found implementation of procedure module_put [2022-11-25 17:16:52,043 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2022-11-25 17:16:52,043 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_submit_urb_12 [2022-11-25 17:16:52,043 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_submit_urb_12 [2022-11-25 17:16:52,043 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_xmalloc [2022-11-25 17:16:52,043 INFO L130 BoogieDeclarations]: Found specification of procedure v4l2_ctrl_handler_free [2022-11-25 17:16:52,043 INFO L138 BoogieDeclarations]: Found implementation of procedure v4l2_ctrl_handler_free [2022-11-25 17:16:52,044 INFO L130 BoogieDeclarations]: Found specification of procedure alloc_and_submit_int_urb [2022-11-25 17:16:52,044 INFO L138 BoogieDeclarations]: Found implementation of procedure alloc_and_submit_int_urb [2022-11-25 17:16:52,044 INFO L130 BoogieDeclarations]: Found specification of procedure strlcpy [2022-11-25 17:16:52,044 INFO L138 BoogieDeclarations]: Found implementation of procedure strlcpy [2022-11-25 17:16:52,044 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~$Pointer$~X~$Pointer$~X~int~TO~int [2022-11-25 17:16:52,044 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~$Pointer$~X~$Pointer$~X~int~TO~int [2022-11-25 17:16:52,044 INFO L130 BoogieDeclarations]: Found specification of procedure usb_ifnum_to_if [2022-11-25 17:16:52,045 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_ifnum_to_if [2022-11-25 17:16:52,045 INFO L130 BoogieDeclarations]: Found specification of procedure int_irq [2022-11-25 17:16:52,045 INFO L138 BoogieDeclarations]: Found implementation of procedure int_irq [2022-11-25 17:16:52,045 INFO L130 BoogieDeclarations]: Found specification of procedure v4l2_ctrl_handler_setup [2022-11-25 17:16:52,045 INFO L138 BoogieDeclarations]: Found implementation of procedure v4l2_ctrl_handler_setup [2022-11-25 17:16:52,045 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2022-11-25 17:16:52,046 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2022-11-25 17:16:52,046 INFO L130 BoogieDeclarations]: Found specification of procedure fill_frame [2022-11-25 17:16:52,046 INFO L138 BoogieDeclarations]: Found implementation of procedure fill_frame [2022-11-25 17:16:52,046 INFO L130 BoogieDeclarations]: Found specification of procedure read_alloc [2022-11-25 17:16:52,046 INFO L138 BoogieDeclarations]: Found implementation of procedure read_alloc [2022-11-25 17:16:52,046 INFO L130 BoogieDeclarations]: Found specification of procedure gspca_stream_off [2022-11-25 17:16:52,046 INFO L138 BoogieDeclarations]: Found implementation of procedure gspca_stream_off [2022-11-25 17:16:52,047 INFO L130 BoogieDeclarations]: Found specification of procedure mutex_lock_nested [2022-11-25 17:16:52,047 INFO L138 BoogieDeclarations]: Found implementation of procedure mutex_lock_nested [2022-11-25 17:16:52,047 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int [2022-11-25 17:16:52,047 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_zalloc [2022-11-25 17:16:52,047 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_zalloc [2022-11-25 17:16:52,047 INFO L130 BoogieDeclarations]: Found specification of procedure isoc_irq [2022-11-25 17:16:52,048 INFO L138 BoogieDeclarations]: Found implementation of procedure isoc_irq [2022-11-25 17:16:52,048 INFO L130 BoogieDeclarations]: Found specification of procedure vidioc_dqbuf [2022-11-25 17:16:52,048 INFO L138 BoogieDeclarations]: Found implementation of procedure vidioc_dqbuf [2022-11-25 17:16:52,048 INFO L130 BoogieDeclarations]: Found specification of procedure gspca_input_create_urb [2022-11-25 17:16:52,048 INFO L138 BoogieDeclarations]: Found implementation of procedure gspca_input_create_urb [2022-11-25 17:16:52,048 INFO L130 BoogieDeclarations]: Found specification of procedure ns_to_timeval [2022-11-25 17:16:52,048 INFO L138 BoogieDeclarations]: Found implementation of procedure ns_to_timeval [2022-11-25 17:16:52,049 INFO L130 BoogieDeclarations]: Found specification of procedure video_ioctl2 [2022-11-25 17:16:52,049 INFO L138 BoogieDeclarations]: Found implementation of procedure video_ioctl2 [2022-11-25 17:16:52,049 INFO L130 BoogieDeclarations]: Found specification of procedure video_device_release_empty [2022-11-25 17:16:52,049 INFO L138 BoogieDeclarations]: Found implementation of procedure video_device_release_empty [2022-11-25 17:16:52,049 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int [2022-11-25 17:16:52,049 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_submit_urb_2 [2022-11-25 17:16:52,050 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_submit_urb_2 [2022-11-25 17:16:52,050 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_submit_urb_8 [2022-11-25 17:16:52,050 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_submit_urb_8 [2022-11-25 17:16:52,050 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_submit_urb_5 [2022-11-25 17:16:52,051 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_submit_urb_5 [2022-11-25 17:16:52,051 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_submit_urb_9 [2022-11-25 17:16:52,051 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_submit_urb_9 [2022-11-25 17:16:52,052 INFO L130 BoogieDeclarations]: Found specification of procedure gspca_input_destroy_urb [2022-11-25 17:16:52,052 INFO L138 BoogieDeclarations]: Found implementation of procedure gspca_input_destroy_urb [2022-11-25 17:16:52,052 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2022-11-25 17:16:52,052 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy [2022-11-25 17:16:52,052 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy [2022-11-25 17:16:52,052 INFO L130 BoogieDeclarations]: Found specification of procedure __create_pipe [2022-11-25 17:16:52,052 INFO L138 BoogieDeclarations]: Found implementation of procedure __create_pipe [2022-11-25 17:16:52,053 INFO L130 BoogieDeclarations]: Found specification of procedure usb_kill_urb [2022-11-25 17:16:52,053 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_kill_urb [2022-11-25 17:16:52,053 INFO L130 BoogieDeclarations]: Found specification of procedure dev_close [2022-11-25 17:16:52,053 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_close [2022-11-25 17:16:52,053 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~$Pointer$~X~$Pointer$~X~int~TO~VOID [2022-11-25 17:16:52,053 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~$Pointer$~X~$Pointer$~X~int~TO~VOID [2022-11-25 17:16:52,054 INFO L130 BoogieDeclarations]: Found specification of procedure kfree [2022-11-25 17:16:52,054 INFO L138 BoogieDeclarations]: Found implementation of procedure kfree [2022-11-25 17:16:52,054 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2022-11-25 17:16:52,054 INFO L130 BoogieDeclarations]: Found specification of procedure copy_to_user [2022-11-25 17:16:52,054 INFO L138 BoogieDeclarations]: Found implementation of procedure copy_to_user [2022-11-25 17:16:52,054 INFO L130 BoogieDeclarations]: Found specification of procedure v4l2_ctrl_subscribe_event [2022-11-25 17:16:52,055 INFO L138 BoogieDeclarations]: Found implementation of procedure v4l2_ctrl_subscribe_event [2022-11-25 17:16:52,055 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2022-11-25 17:16:52,055 INFO L130 BoogieDeclarations]: Found specification of procedure destroy_urbs [2022-11-25 17:16:52,055 INFO L138 BoogieDeclarations]: Found implementation of procedure destroy_urbs [2022-11-25 17:16:52,055 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-11-25 17:16:52,055 INFO L130 BoogieDeclarations]: Found specification of procedure vidioc_s_input [2022-11-25 17:16:52,055 INFO L138 BoogieDeclarations]: Found implementation of procedure vidioc_s_input [2022-11-25 17:16:52,056 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_undef_int [2022-11-25 17:16:52,056 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_undef_int [2022-11-25 17:16:52,056 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2022-11-25 17:16:52,056 INFO L130 BoogieDeclarations]: Found specification of procedure __bad_percpu_size [2022-11-25 17:16:52,056 INFO L130 BoogieDeclarations]: Found specification of procedure try_fmt_vid_cap [2022-11-25 17:16:52,056 INFO L138 BoogieDeclarations]: Found implementation of procedure try_fmt_vid_cap [2022-11-25 17:16:52,057 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~$Pointer$~TO~VOID [2022-11-25 17:16:52,057 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~$Pointer$~TO~VOID [2022-11-25 17:16:52,057 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~$Pointer$~TO~int [2022-11-25 17:16:52,057 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~$Pointer$~TO~int [2022-11-25 17:16:52,057 INFO L130 BoogieDeclarations]: Found specification of procedure usb_alloc_coherent [2022-11-25 17:16:52,057 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_alloc_coherent [2022-11-25 17:16:52,058 INFO L130 BoogieDeclarations]: Found specification of procedure dev_open [2022-11-25 17:16:52,058 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_open [2022-11-25 17:16:52,058 INFO L130 BoogieDeclarations]: Found specification of procedure gspca_vm_close [2022-11-25 17:16:52,058 INFO L138 BoogieDeclarations]: Found implementation of procedure gspca_vm_close [2022-11-25 17:16:52,058 INFO L130 BoogieDeclarations]: Found specification of procedure __wake_up [2022-11-25 17:16:52,059 INFO L138 BoogieDeclarations]: Found implementation of procedure __wake_up [2022-11-25 17:16:52,059 INFO L130 BoogieDeclarations]: Found specification of procedure vidioc_qbuf [2022-11-25 17:16:52,059 INFO L138 BoogieDeclarations]: Found implementation of procedure vidioc_qbuf [2022-11-25 17:16:52,059 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~$Pointer$~X~$Pointer$~TO~int [2022-11-25 17:16:52,059 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~$Pointer$~X~$Pointer$~TO~int [2022-11-25 17:16:52,059 INFO L130 BoogieDeclarations]: Found specification of procedure v4l2_event_unsubscribe [2022-11-25 17:16:52,060 INFO L138 BoogieDeclarations]: Found implementation of procedure v4l2_event_unsubscribe [2022-11-25 17:16:52,060 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_free_urb [2022-11-25 17:16:52,060 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_free_urb [2022-11-25 17:16:52,060 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-11-25 17:16:52,060 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~$Pointer$~X~$Pointer$~TO~VOID [2022-11-25 17:16:52,060 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~$Pointer$~X~$Pointer$~TO~VOID [2022-11-25 17:16:52,060 INFO L130 BoogieDeclarations]: Found specification of procedure gspca_vm_open [2022-11-25 17:16:52,061 INFO L138 BoogieDeclarations]: Found implementation of procedure gspca_vm_open [2022-11-25 17:16:52,061 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-11-25 17:16:52,061 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-11-25 17:16:52,925 INFO L235 CfgBuilder]: Building ICFG [2022-11-25 17:16:52,929 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-11-25 17:16:53,138 INFO L769 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_stopFINAL: assume true; [2022-11-25 17:16:55,092 INFO L769 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_stop___0FINAL: assume true; [2022-11-25 17:16:57,562 INFO L276 CfgBuilder]: Performing block encoding [2022-11-25 17:16:57,578 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-11-25 17:16:57,578 INFO L300 CfgBuilder]: Removed 1 assume(true) statements. [2022-11-25 17:16:57,582 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 25.11 05:16:57 BoogieIcfgContainer [2022-11-25 17:16:57,589 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-11-25 17:16:57,591 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-11-25 17:16:57,591 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-11-25 17:16:57,596 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-11-25 17:16:57,596 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 25.11 05:16:48" (1/3) ... [2022-11-25 17:16:57,597 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@2616e08c and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 25.11 05:16:57, skipping insertion in model container [2022-11-25 17:16:57,598 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 05:16:51" (2/3) ... [2022-11-25 17:16:57,599 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@2616e08c and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 25.11 05:16:57, skipping insertion in model container [2022-11-25 17:16:57,600 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 25.11 05:16:57" (3/3) ... [2022-11-25 17:16:57,601 INFO L112 eAbstractionObserver]: Analyzing ICFG linux-3.12-rc1.tar.xz-144_2a-drivers--media--usb--gspca--gspca_main.ko-entry_point.cil.out.i [2022-11-25 17:16:57,621 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-11-25 17:16:57,621 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 100 error locations. [2022-11-25 17:16:57,713 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-11-25 17:16:57,720 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@58b6e737, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-11-25 17:16:57,720 INFO L358 AbstractCegarLoop]: Starting to check reachability of 100 error locations. [2022-11-25 17:16:57,730 INFO L276 IsEmpty]: Start isEmpty. Operand has 1611 states, 1143 states have (on average 1.462817147856518) internal successors, (1672), 1270 states have internal predecessors, (1672), 287 states have call successors, (287), 82 states have call predecessors, (287), 80 states have return successors, (280), 274 states have call predecessors, (280), 280 states have call successors, (280) [2022-11-25 17:16:57,750 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 264 [2022-11-25 17:16:57,751 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 17:16:57,752 INFO L195 NwaCegarLoop]: trace histogram [40, 40, 40, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 17:16:57,753 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting gspca_vm_closeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW === [wxh_to_modeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW, wxh_to_modeErr1ASSERT_VIOLATIONINTEGER_OVERFLOW, frame_freeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (and 97 more)] === [2022-11-25 17:16:57,758 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 17:16:57,759 INFO L85 PathProgramCache]: Analyzing trace with hash 983063298, now seen corresponding path program 1 times [2022-11-25 17:16:57,770 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-25 17:16:57,771 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2008752271] [2022-11-25 17:16:57,771 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 17:16:57,772 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 17:16:58,372 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:16:58,808 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-25 17:16:58,813 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:16:58,827 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-25 17:16:58,840 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:16:58,854 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-11-25 17:16:58,860 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:16:58,891 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-11-25 17:16:58,894 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:16:58,905 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 26 [2022-11-25 17:16:58,920 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:16:58,935 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 32 [2022-11-25 17:16:58,938 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:16:58,950 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 38 [2022-11-25 17:16:58,952 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:16:58,963 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2022-11-25 17:16:58,965 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:16:58,976 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2022-11-25 17:16:58,978 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:16:58,989 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 56 [2022-11-25 17:16:58,992 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:16:59,004 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 62 [2022-11-25 17:16:59,006 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:16:59,018 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 68 [2022-11-25 17:16:59,021 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:16:59,032 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 74 [2022-11-25 17:16:59,035 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:16:59,046 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 80 [2022-11-25 17:16:59,049 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:16:59,061 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 86 [2022-11-25 17:16:59,063 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:16:59,076 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 92 [2022-11-25 17:16:59,079 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:16:59,090 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 98 [2022-11-25 17:16:59,093 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:16:59,105 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 104 [2022-11-25 17:16:59,107 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:16:59,119 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 110 [2022-11-25 17:16:59,121 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:16:59,143 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 116 [2022-11-25 17:16:59,146 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:16:59,158 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 122 [2022-11-25 17:16:59,161 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:16:59,172 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 128 [2022-11-25 17:16:59,175 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:16:59,186 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 134 [2022-11-25 17:16:59,188 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:16:59,199 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 140 [2022-11-25 17:16:59,202 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:16:59,214 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 146 [2022-11-25 17:16:59,216 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:16:59,227 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 152 [2022-11-25 17:16:59,231 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:16:59,243 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 158 [2022-11-25 17:16:59,245 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:16:59,256 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 164 [2022-11-25 17:16:59,259 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:16:59,270 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 170 [2022-11-25 17:16:59,273 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:16:59,285 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 176 [2022-11-25 17:16:59,288 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:16:59,298 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 182 [2022-11-25 17:16:59,301 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:16:59,313 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 188 [2022-11-25 17:16:59,316 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:16:59,327 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 194 [2022-11-25 17:16:59,330 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:16:59,396 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 200 [2022-11-25 17:16:59,398 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:16:59,409 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 206 [2022-11-25 17:16:59,411 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:16:59,421 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 212 [2022-11-25 17:16:59,423 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:16:59,434 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 218 [2022-11-25 17:16:59,436 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:16:59,446 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 224 [2022-11-25 17:16:59,448 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:16:59,459 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 230 [2022-11-25 17:16:59,461 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:16:59,471 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 236 [2022-11-25 17:16:59,473 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:16:59,494 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 243 [2022-11-25 17:16:59,497 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:16:59,510 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 249 [2022-11-25 17:16:59,512 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:16:59,532 INFO L134 CoverageAnalysis]: Checked inductivity of 3124 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3124 trivial. 0 not checked. [2022-11-25 17:16:59,532 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-25 17:16:59,533 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2008752271] [2022-11-25 17:16:59,533 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2008752271] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 17:16:59,534 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 17:16:59,534 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-25 17:16:59,536 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [752071645] [2022-11-25 17:16:59,537 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 17:16:59,544 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-25 17:16:59,545 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-25 17:16:59,594 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-25 17:16:59,595 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-25 17:16:59,601 INFO L87 Difference]: Start difference. First operand has 1611 states, 1143 states have (on average 1.462817147856518) internal successors, (1672), 1270 states have internal predecessors, (1672), 287 states have call successors, (287), 82 states have call predecessors, (287), 80 states have return successors, (280), 274 states have call predecessors, (280), 280 states have call successors, (280) Second operand has 5 states, 5 states have (on average 11.6) internal successors, (58), 3 states have internal predecessors, (58), 2 states have call successors, (43), 3 states have call predecessors, (43), 1 states have return successors, (42), 1 states have call predecessors, (42), 1 states have call successors, (42) [2022-11-25 17:17:10,654 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 17:17:10,655 INFO L93 Difference]: Finished difference Result 5791 states and 8648 transitions. [2022-11-25 17:17:10,658 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-25 17:17:10,659 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 11.6) internal successors, (58), 3 states have internal predecessors, (58), 2 states have call successors, (43), 3 states have call predecessors, (43), 1 states have return successors, (42), 1 states have call predecessors, (42), 1 states have call successors, (42) Word has length 263 [2022-11-25 17:17:10,661 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 17:17:10,718 INFO L225 Difference]: With dead ends: 5791 [2022-11-25 17:17:10,718 INFO L226 Difference]: Without dead ends: 4132 [2022-11-25 17:17:10,745 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 92 GetRequests, 86 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2022-11-25 17:17:10,750 INFO L413 NwaCegarLoop]: 2172 mSDtfsCounter, 5422 mSDsluCounter, 3782 mSDsCounter, 0 mSdLazyCounter, 3105 mSolverCounterSat, 1894 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 8.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 5664 SdHoareTripleChecker+Valid, 5954 SdHoareTripleChecker+Invalid, 4999 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 1894 IncrementalHoareTripleChecker+Valid, 3105 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 10.2s IncrementalHoareTripleChecker+Time [2022-11-25 17:17:10,751 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [5664 Valid, 5954 Invalid, 4999 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [1894 Valid, 3105 Invalid, 0 Unknown, 0 Unchecked, 10.2s Time] [2022-11-25 17:17:10,779 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 4132 states. [2022-11-25 17:17:11,036 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 4132 to 2956. [2022-11-25 17:17:11,044 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2956 states, 2199 states have (on average 1.455206912232833) internal successors, (3200), 2323 states have internal predecessors, (3200), 505 states have call successors, (505), 158 states have call predecessors, (505), 158 states have return successors, (505), 492 states have call predecessors, (505), 505 states have call successors, (505) [2022-11-25 17:17:11,068 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2956 states to 2956 states and 4210 transitions. [2022-11-25 17:17:11,071 INFO L78 Accepts]: Start accepts. Automaton has 2956 states and 4210 transitions. Word has length 263 [2022-11-25 17:17:11,076 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 17:17:11,076 INFO L495 AbstractCegarLoop]: Abstraction has 2956 states and 4210 transitions. [2022-11-25 17:17:11,077 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 11.6) internal successors, (58), 3 states have internal predecessors, (58), 2 states have call successors, (43), 3 states have call predecessors, (43), 1 states have return successors, (42), 1 states have call predecessors, (42), 1 states have call successors, (42) [2022-11-25 17:17:11,077 INFO L276 IsEmpty]: Start isEmpty. Operand 2956 states and 4210 transitions. [2022-11-25 17:17:11,093 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 265 [2022-11-25 17:17:11,095 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 17:17:11,095 INFO L195 NwaCegarLoop]: trace histogram [40, 40, 40, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 17:17:11,096 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-11-25 17:17:11,096 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting ULTIMATE.startErr4ASSERT_VIOLATIONINTEGER_OVERFLOW === [wxh_to_modeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW, wxh_to_modeErr1ASSERT_VIOLATIONINTEGER_OVERFLOW, frame_freeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (and 97 more)] === [2022-11-25 17:17:11,097 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 17:17:11,097 INFO L85 PathProgramCache]: Analyzing trace with hash 835837455, now seen corresponding path program 1 times [2022-11-25 17:17:11,097 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-25 17:17:11,102 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1663180631] [2022-11-25 17:17:11,102 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 17:17:11,103 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 17:17:11,255 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:11,540 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-25 17:17:11,542 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:11,554 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-25 17:17:11,556 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:11,568 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-11-25 17:17:11,570 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:11,582 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-11-25 17:17:11,585 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:11,597 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 26 [2022-11-25 17:17:11,600 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:11,612 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 32 [2022-11-25 17:17:11,614 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:11,626 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 38 [2022-11-25 17:17:11,628 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:11,639 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2022-11-25 17:17:11,644 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:11,664 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2022-11-25 17:17:11,668 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:11,681 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 56 [2022-11-25 17:17:11,683 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:11,695 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 62 [2022-11-25 17:17:11,697 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:11,709 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 68 [2022-11-25 17:17:11,714 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:11,726 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 74 [2022-11-25 17:17:11,728 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:11,749 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 80 [2022-11-25 17:17:11,753 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:11,768 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 86 [2022-11-25 17:17:11,772 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:11,784 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 92 [2022-11-25 17:17:11,787 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:11,801 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 98 [2022-11-25 17:17:11,803 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:11,816 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 104 [2022-11-25 17:17:11,820 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:11,832 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 110 [2022-11-25 17:17:11,834 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:11,846 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 116 [2022-11-25 17:17:11,849 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:11,861 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 122 [2022-11-25 17:17:11,863 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:11,875 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 128 [2022-11-25 17:17:11,878 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:11,890 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 134 [2022-11-25 17:17:11,892 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:11,904 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 140 [2022-11-25 17:17:11,910 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:11,921 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 146 [2022-11-25 17:17:11,923 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:11,936 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 152 [2022-11-25 17:17:11,938 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:11,950 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 158 [2022-11-25 17:17:11,952 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:11,963 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 164 [2022-11-25 17:17:11,966 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:12,027 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 170 [2022-11-25 17:17:12,033 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:12,046 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 176 [2022-11-25 17:17:12,047 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:12,059 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 182 [2022-11-25 17:17:12,061 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:12,073 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 188 [2022-11-25 17:17:12,075 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:12,085 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 194 [2022-11-25 17:17:12,087 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:12,103 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 200 [2022-11-25 17:17:12,105 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:12,116 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 206 [2022-11-25 17:17:12,119 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:12,131 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 212 [2022-11-25 17:17:12,133 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:12,143 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 218 [2022-11-25 17:17:12,145 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:12,155 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 224 [2022-11-25 17:17:12,157 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:12,167 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 230 [2022-11-25 17:17:12,169 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:12,180 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 236 [2022-11-25 17:17:12,182 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:12,205 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 243 [2022-11-25 17:17:12,207 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:12,218 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 249 [2022-11-25 17:17:12,221 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:12,235 INFO L134 CoverageAnalysis]: Checked inductivity of 3124 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3124 trivial. 0 not checked. [2022-11-25 17:17:12,235 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-25 17:17:12,236 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1663180631] [2022-11-25 17:17:12,237 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1663180631] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 17:17:12,237 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 17:17:12,237 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-25 17:17:12,238 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1129476219] [2022-11-25 17:17:12,238 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 17:17:12,241 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-25 17:17:12,242 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-25 17:17:12,242 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-25 17:17:12,243 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-25 17:17:12,243 INFO L87 Difference]: Start difference. First operand 2956 states and 4210 transitions. Second operand has 5 states, 5 states have (on average 12.0) internal successors, (60), 3 states have internal predecessors, (60), 1 states have call successors, (42), 2 states have call predecessors, (42), 1 states have return successors, (42), 1 states have call predecessors, (42), 1 states have call successors, (42) [2022-11-25 17:17:23,371 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 17:17:23,371 INFO L93 Difference]: Finished difference Result 10801 states and 15847 transitions. [2022-11-25 17:17:23,371 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-25 17:17:23,372 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 12.0) internal successors, (60), 3 states have internal predecessors, (60), 1 states have call successors, (42), 2 states have call predecessors, (42), 1 states have return successors, (42), 1 states have call predecessors, (42), 1 states have call successors, (42) Word has length 264 [2022-11-25 17:17:23,373 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 17:17:23,426 INFO L225 Difference]: With dead ends: 10801 [2022-11-25 17:17:23,426 INFO L226 Difference]: Without dead ends: 7932 [2022-11-25 17:17:23,442 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 92 GetRequests, 86 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2022-11-25 17:17:23,444 INFO L413 NwaCegarLoop]: 2136 mSDtfsCounter, 5404 mSDsluCounter, 3728 mSDsCounter, 0 mSdLazyCounter, 3079 mSolverCounterSat, 1843 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 9.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 5653 SdHoareTripleChecker+Valid, 5864 SdHoareTripleChecker+Invalid, 4922 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 1843 IncrementalHoareTripleChecker+Valid, 3079 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 10.4s IncrementalHoareTripleChecker+Time [2022-11-25 17:17:23,444 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [5653 Valid, 5864 Invalid, 4922 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [1843 Valid, 3079 Invalid, 0 Unknown, 0 Unchecked, 10.4s Time] [2022-11-25 17:17:23,455 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 7932 states. [2022-11-25 17:17:23,868 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 7932 to 5700. [2022-11-25 17:17:23,883 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5700 states, 4325 states have (on average 1.458728323699422) internal successors, (6309), 4481 states have internal predecessors, (6309), 965 states have call successors, (965), 316 states have call predecessors, (965), 316 states have return successors, (965), 938 states have call predecessors, (965), 965 states have call successors, (965) [2022-11-25 17:17:23,920 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5700 states to 5700 states and 8239 transitions. [2022-11-25 17:17:23,922 INFO L78 Accepts]: Start accepts. Automaton has 5700 states and 8239 transitions. Word has length 264 [2022-11-25 17:17:23,924 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 17:17:23,925 INFO L495 AbstractCegarLoop]: Abstraction has 5700 states and 8239 transitions. [2022-11-25 17:17:23,925 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 12.0) internal successors, (60), 3 states have internal predecessors, (60), 1 states have call successors, (42), 2 states have call predecessors, (42), 1 states have return successors, (42), 1 states have call predecessors, (42), 1 states have call successors, (42) [2022-11-25 17:17:23,925 INFO L276 IsEmpty]: Start isEmpty. Operand 5700 states and 8239 transitions. [2022-11-25 17:17:23,936 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 292 [2022-11-25 17:17:23,936 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 17:17:23,937 INFO L195 NwaCegarLoop]: trace histogram [40, 40, 40, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 17:17:23,937 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-11-25 17:17:23,938 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting ULTIMATE.startErr18ASSERT_VIOLATIONINTEGER_OVERFLOW === [wxh_to_modeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW, wxh_to_modeErr1ASSERT_VIOLATIONINTEGER_OVERFLOW, frame_freeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (and 97 more)] === [2022-11-25 17:17:23,938 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 17:17:23,938 INFO L85 PathProgramCache]: Analyzing trace with hash -771067225, now seen corresponding path program 1 times [2022-11-25 17:17:23,939 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-25 17:17:23,939 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1211323911] [2022-11-25 17:17:23,939 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 17:17:23,940 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 17:17:24,116 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:24,456 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-25 17:17:24,458 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:24,468 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-25 17:17:24,470 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:24,480 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-11-25 17:17:24,481 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:24,492 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-11-25 17:17:24,494 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:24,504 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 26 [2022-11-25 17:17:24,506 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:24,516 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 32 [2022-11-25 17:17:24,518 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:24,530 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 38 [2022-11-25 17:17:24,532 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:24,542 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2022-11-25 17:17:24,544 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:24,554 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2022-11-25 17:17:24,555 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:24,565 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 56 [2022-11-25 17:17:24,567 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:24,576 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 62 [2022-11-25 17:17:24,578 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:24,588 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 68 [2022-11-25 17:17:24,590 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:24,599 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 74 [2022-11-25 17:17:24,600 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:24,609 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 80 [2022-11-25 17:17:24,611 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:24,620 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 86 [2022-11-25 17:17:24,623 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:24,632 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 92 [2022-11-25 17:17:24,634 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:24,644 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 98 [2022-11-25 17:17:24,646 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:24,655 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 104 [2022-11-25 17:17:24,658 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:24,671 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 110 [2022-11-25 17:17:24,673 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:24,682 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 116 [2022-11-25 17:17:24,687 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:24,696 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 122 [2022-11-25 17:17:24,698 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:24,706 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 128 [2022-11-25 17:17:24,708 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:24,716 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 134 [2022-11-25 17:17:24,719 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:24,731 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 140 [2022-11-25 17:17:24,733 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:24,742 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 146 [2022-11-25 17:17:24,744 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:24,753 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 152 [2022-11-25 17:17:24,756 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:24,765 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 158 [2022-11-25 17:17:24,767 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:24,777 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 164 [2022-11-25 17:17:24,779 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:24,788 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 170 [2022-11-25 17:17:24,790 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:24,800 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 176 [2022-11-25 17:17:24,803 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:24,812 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 182 [2022-11-25 17:17:24,814 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:24,824 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 188 [2022-11-25 17:17:24,826 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:24,835 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 194 [2022-11-25 17:17:24,838 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:24,847 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 200 [2022-11-25 17:17:24,850 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:24,859 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 206 [2022-11-25 17:17:24,862 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:24,872 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 212 [2022-11-25 17:17:24,874 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:24,884 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 218 [2022-11-25 17:17:24,887 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:24,896 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 224 [2022-11-25 17:17:24,899 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:24,909 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 230 [2022-11-25 17:17:24,911 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:24,920 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 236 [2022-11-25 17:17:24,923 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:24,941 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 243 [2022-11-25 17:17:24,948 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:24,959 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 249 [2022-11-25 17:17:24,962 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:24,981 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 270 [2022-11-25 17:17:24,986 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:25,001 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-25 17:17:25,003 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:25,012 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-25 17:17:25,013 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:25,024 INFO L134 CoverageAnalysis]: Checked inductivity of 3128 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3128 trivial. 0 not checked. [2022-11-25 17:17:25,027 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-25 17:17:25,030 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1211323911] [2022-11-25 17:17:25,031 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1211323911] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 17:17:25,031 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 17:17:25,031 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-25 17:17:25,031 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1330712150] [2022-11-25 17:17:25,032 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 17:17:25,032 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-25 17:17:25,033 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-25 17:17:25,035 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-25 17:17:25,036 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2022-11-25 17:17:25,036 INFO L87 Difference]: Start difference. First operand 5700 states and 8239 transitions. Second operand has 6 states, 6 states have (on average 13.0) internal successors, (78), 3 states have internal predecessors, (78), 2 states have call successors, (45), 3 states have call predecessors, (45), 1 states have return successors, (45), 2 states have call predecessors, (45), 2 states have call successors, (45) [2022-11-25 17:17:35,203 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 17:17:35,203 INFO L93 Difference]: Finished difference Result 21292 states and 31661 transitions. [2022-11-25 17:17:35,204 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-11-25 17:17:35,205 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 13.0) internal successors, (78), 3 states have internal predecessors, (78), 2 states have call successors, (45), 3 states have call predecessors, (45), 1 states have return successors, (45), 2 states have call predecessors, (45), 2 states have call successors, (45) Word has length 291 [2022-11-25 17:17:35,205 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 17:17:35,343 INFO L225 Difference]: With dead ends: 21292 [2022-11-25 17:17:35,343 INFO L226 Difference]: Without dead ends: 15679 [2022-11-25 17:17:35,373 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 101 GetRequests, 93 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2022-11-25 17:17:35,380 INFO L413 NwaCegarLoop]: 2244 mSDtfsCounter, 6431 mSDsluCounter, 4046 mSDsCounter, 0 mSdLazyCounter, 3427 mSolverCounterSat, 2594 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 8.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 6664 SdHoareTripleChecker+Valid, 6290 SdHoareTripleChecker+Invalid, 6021 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 2594 IncrementalHoareTripleChecker+Valid, 3427 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 9.3s IncrementalHoareTripleChecker+Time [2022-11-25 17:17:35,382 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [6664 Valid, 6290 Invalid, 6021 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [2594 Valid, 3427 Invalid, 0 Unknown, 0 Unchecked, 9.3s Time] [2022-11-25 17:17:35,401 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 15679 states. [2022-11-25 17:17:36,150 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 15679 to 10093. [2022-11-25 17:17:36,184 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10093 states, 7734 states have (on average 1.4557796741660203) internal successors, (11259), 7950 states have internal predecessors, (11259), 1664 states have call successors, (1664), 601 states have call predecessors, (1664), 601 states have return successors, (1664), 1613 states have call predecessors, (1664), 1664 states have call successors, (1664) [2022-11-25 17:17:36,240 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10093 states to 10093 states and 14587 transitions. [2022-11-25 17:17:36,243 INFO L78 Accepts]: Start accepts. Automaton has 10093 states and 14587 transitions. Word has length 291 [2022-11-25 17:17:36,244 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 17:17:36,244 INFO L495 AbstractCegarLoop]: Abstraction has 10093 states and 14587 transitions. [2022-11-25 17:17:36,246 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 13.0) internal successors, (78), 3 states have internal predecessors, (78), 2 states have call successors, (45), 3 states have call predecessors, (45), 1 states have return successors, (45), 2 states have call predecessors, (45), 2 states have call successors, (45) [2022-11-25 17:17:36,246 INFO L276 IsEmpty]: Start isEmpty. Operand 10093 states and 14587 transitions. [2022-11-25 17:17:36,252 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 300 [2022-11-25 17:17:36,253 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 17:17:36,253 INFO L195 NwaCegarLoop]: trace histogram [40, 40, 40, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 17:17:36,254 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-11-25 17:17:36,254 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting ULTIMATE.startErr12ASSERT_VIOLATIONINTEGER_OVERFLOW === [wxh_to_modeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW, wxh_to_modeErr1ASSERT_VIOLATIONINTEGER_OVERFLOW, frame_freeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (and 97 more)] === [2022-11-25 17:17:36,255 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 17:17:36,255 INFO L85 PathProgramCache]: Analyzing trace with hash -1603250407, now seen corresponding path program 1 times [2022-11-25 17:17:36,255 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-25 17:17:36,256 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [49661171] [2022-11-25 17:17:36,256 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 17:17:36,256 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 17:17:36,386 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:36,622 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-25 17:17:36,624 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:36,633 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-25 17:17:36,634 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:36,643 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-11-25 17:17:36,645 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:36,653 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-11-25 17:17:36,655 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:36,664 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 26 [2022-11-25 17:17:36,666 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:36,675 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 32 [2022-11-25 17:17:36,676 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:36,686 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 38 [2022-11-25 17:17:36,688 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:36,697 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2022-11-25 17:17:36,699 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:36,709 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2022-11-25 17:17:36,710 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:36,719 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 56 [2022-11-25 17:17:36,721 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:36,729 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 62 [2022-11-25 17:17:36,731 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:36,740 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 68 [2022-11-25 17:17:36,741 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:36,750 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 74 [2022-11-25 17:17:36,752 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:36,762 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 80 [2022-11-25 17:17:36,764 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:36,773 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 86 [2022-11-25 17:17:36,775 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:36,783 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 92 [2022-11-25 17:17:36,785 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:36,796 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 98 [2022-11-25 17:17:36,798 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:36,807 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 104 [2022-11-25 17:17:36,809 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:36,818 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 110 [2022-11-25 17:17:36,820 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:36,830 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 116 [2022-11-25 17:17:36,835 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:36,843 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 122 [2022-11-25 17:17:36,845 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:36,854 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 128 [2022-11-25 17:17:36,856 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:36,865 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 134 [2022-11-25 17:17:36,867 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:36,876 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 140 [2022-11-25 17:17:36,878 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:36,888 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 146 [2022-11-25 17:17:36,890 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:36,900 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 152 [2022-11-25 17:17:36,902 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:36,912 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 158 [2022-11-25 17:17:36,914 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:36,923 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 164 [2022-11-25 17:17:36,927 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:36,937 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 170 [2022-11-25 17:17:36,939 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:36,948 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 176 [2022-11-25 17:17:36,951 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:36,960 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 182 [2022-11-25 17:17:36,964 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:36,974 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 188 [2022-11-25 17:17:36,977 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:36,986 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 194 [2022-11-25 17:17:36,990 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:37,000 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 200 [2022-11-25 17:17:37,002 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:37,012 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 206 [2022-11-25 17:17:37,014 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:37,023 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 212 [2022-11-25 17:17:37,026 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:37,035 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 218 [2022-11-25 17:17:37,037 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:37,046 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 224 [2022-11-25 17:17:37,049 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:37,061 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 230 [2022-11-25 17:17:37,063 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:37,072 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 236 [2022-11-25 17:17:37,075 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:37,095 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 243 [2022-11-25 17:17:37,097 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:37,238 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 249 [2022-11-25 17:17:37,240 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:37,260 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 267 [2022-11-25 17:17:37,272 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:37,308 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-25 17:17:37,311 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:37,328 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-25 17:17:37,330 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:37,340 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-25 17:17:37,342 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:37,355 INFO L134 CoverageAnalysis]: Checked inductivity of 3128 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3128 trivial. 0 not checked. [2022-11-25 17:17:37,355 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-25 17:17:37,355 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [49661171] [2022-11-25 17:17:37,356 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [49661171] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 17:17:37,356 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 17:17:37,356 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-11-25 17:17:37,356 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [235011250] [2022-11-25 17:17:37,357 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 17:17:37,357 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-11-25 17:17:37,358 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-25 17:17:37,359 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-11-25 17:17:37,359 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=12, Invalid=30, Unknown=0, NotChecked=0, Total=42 [2022-11-25 17:17:37,359 INFO L87 Difference]: Start difference. First operand 10093 states and 14587 transitions. Second operand has 7 states, 7 states have (on average 12.0) internal successors, (84), 4 states have internal predecessors, (84), 2 states have call successors, (46), 3 states have call predecessors, (46), 2 states have return successors, (46), 2 states have call predecessors, (46), 2 states have call successors, (46) [2022-11-25 17:17:52,626 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 17:17:52,627 INFO L93 Difference]: Finished difference Result 33867 states and 51247 transitions. [2022-11-25 17:17:52,630 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-11-25 17:17:52,631 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 12.0) internal successors, (84), 4 states have internal predecessors, (84), 2 states have call successors, (46), 3 states have call predecessors, (46), 2 states have return successors, (46), 2 states have call predecessors, (46), 2 states have call successors, (46) Word has length 299 [2022-11-25 17:17:52,632 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 17:17:52,762 INFO L225 Difference]: With dead ends: 33867 [2022-11-25 17:17:52,762 INFO L226 Difference]: Without dead ends: 23868 [2022-11-25 17:17:52,823 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 109 GetRequests, 96 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 21 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=67, Invalid=143, Unknown=0, NotChecked=0, Total=210 [2022-11-25 17:17:52,824 INFO L413 NwaCegarLoop]: 3534 mSDtfsCounter, 4697 mSDsluCounter, 8819 mSDsCounter, 0 mSdLazyCounter, 5879 mSolverCounterSat, 2050 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 12.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 4975 SdHoareTripleChecker+Valid, 12353 SdHoareTripleChecker+Invalid, 7929 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 2050 IncrementalHoareTripleChecker+Valid, 5879 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 13.9s IncrementalHoareTripleChecker+Time [2022-11-25 17:17:52,825 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [4975 Valid, 12353 Invalid, 7929 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [2050 Valid, 5879 Invalid, 0 Unknown, 0 Unchecked, 13.9s Time] [2022-11-25 17:17:52,852 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 23868 states. [2022-11-25 17:17:53,904 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 23868 to 15433. [2022-11-25 17:17:53,928 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15433 states, 11906 states have (on average 1.457248446161599) internal successors, (17350), 12186 states have internal predecessors, (17350), 2520 states have call successors, (2520), 913 states have call predecessors, (2520), 913 states have return successors, (2520), 2441 states have call predecessors, (2520), 2520 states have call successors, (2520) [2022-11-25 17:17:53,992 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15433 states to 15433 states and 22390 transitions. [2022-11-25 17:17:53,996 INFO L78 Accepts]: Start accepts. Automaton has 15433 states and 22390 transitions. Word has length 299 [2022-11-25 17:17:54,001 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 17:17:54,001 INFO L495 AbstractCegarLoop]: Abstraction has 15433 states and 22390 transitions. [2022-11-25 17:17:54,001 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 12.0) internal successors, (84), 4 states have internal predecessors, (84), 2 states have call successors, (46), 3 states have call predecessors, (46), 2 states have return successors, (46), 2 states have call predecessors, (46), 2 states have call successors, (46) [2022-11-25 17:17:54,002 INFO L276 IsEmpty]: Start isEmpty. Operand 15433 states and 22390 transitions. [2022-11-25 17:17:54,008 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 326 [2022-11-25 17:17:54,009 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 17:17:54,009 INFO L195 NwaCegarLoop]: trace histogram [48, 48, 48, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 17:17:54,009 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-11-25 17:17:54,010 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting gspca_vm_closeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW === [wxh_to_modeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW, wxh_to_modeErr1ASSERT_VIOLATIONINTEGER_OVERFLOW, frame_freeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (and 97 more)] === [2022-11-25 17:17:54,010 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 17:17:54,010 INFO L85 PathProgramCache]: Analyzing trace with hash 859278787, now seen corresponding path program 1 times [2022-11-25 17:17:54,010 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-25 17:17:54,011 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1253930692] [2022-11-25 17:17:54,011 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 17:17:54,011 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 17:17:54,146 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:54,467 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-25 17:17:54,470 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:54,478 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-25 17:17:54,480 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:54,488 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-11-25 17:17:54,489 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:54,498 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-11-25 17:17:54,500 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:54,508 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 26 [2022-11-25 17:17:54,510 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:54,518 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 32 [2022-11-25 17:17:54,520 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:54,529 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 38 [2022-11-25 17:17:54,530 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:54,540 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2022-11-25 17:17:54,542 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:54,551 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2022-11-25 17:17:54,553 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:54,561 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 56 [2022-11-25 17:17:54,563 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:54,572 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 62 [2022-11-25 17:17:54,574 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:54,582 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 68 [2022-11-25 17:17:54,584 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:54,596 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 74 [2022-11-25 17:17:54,598 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:54,607 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 80 [2022-11-25 17:17:54,609 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:54,617 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 86 [2022-11-25 17:17:54,619 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:54,633 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 92 [2022-11-25 17:17:54,635 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:54,644 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 98 [2022-11-25 17:17:54,646 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:54,655 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 104 [2022-11-25 17:17:54,659 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:54,668 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 110 [2022-11-25 17:17:54,671 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:54,680 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 116 [2022-11-25 17:17:54,682 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:54,691 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 122 [2022-11-25 17:17:54,693 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:54,703 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 128 [2022-11-25 17:17:54,705 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:54,714 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 134 [2022-11-25 17:17:54,716 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:54,725 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 140 [2022-11-25 17:17:54,727 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:54,735 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 146 [2022-11-25 17:17:54,738 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:54,746 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 152 [2022-11-25 17:17:54,748 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:54,757 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 158 [2022-11-25 17:17:54,759 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:54,768 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 164 [2022-11-25 17:17:54,770 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:54,779 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 170 [2022-11-25 17:17:54,782 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:54,796 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 176 [2022-11-25 17:17:54,798 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:54,806 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 182 [2022-11-25 17:17:54,809 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:54,817 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 188 [2022-11-25 17:17:54,819 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:54,827 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 194 [2022-11-25 17:17:54,829 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:54,837 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 200 [2022-11-25 17:17:54,839 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:54,849 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 206 [2022-11-25 17:17:54,851 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:54,859 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 212 [2022-11-25 17:17:54,862 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:54,870 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 218 [2022-11-25 17:17:54,872 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:54,880 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 224 [2022-11-25 17:17:54,883 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:54,891 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 230 [2022-11-25 17:17:55,082 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:55,093 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 236 [2022-11-25 17:17:55,100 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:55,120 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 243 [2022-11-25 17:17:55,122 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:55,133 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 249 [2022-11-25 17:17:55,136 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:55,149 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 265 [2022-11-25 17:17:55,151 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:55,163 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 271 [2022-11-25 17:17:55,165 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:55,176 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 277 [2022-11-25 17:17:55,178 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:55,190 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 283 [2022-11-25 17:17:55,192 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:55,204 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 289 [2022-11-25 17:17:55,206 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:55,217 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 295 [2022-11-25 17:17:55,219 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:55,230 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 302 [2022-11-25 17:17:55,233 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:55,243 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 309 [2022-11-25 17:17:55,247 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:17:55,268 INFO L134 CoverageAnalysis]: Checked inductivity of 4518 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 4516 trivial. 0 not checked. [2022-11-25 17:17:55,268 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-25 17:17:55,268 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1253930692] [2022-11-25 17:17:55,269 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1253930692] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 17:17:55,269 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 17:17:55,269 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-25 17:17:55,269 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1983410558] [2022-11-25 17:17:55,270 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 17:17:55,270 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-25 17:17:55,271 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-25 17:17:55,272 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-25 17:17:55,272 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-25 17:17:55,272 INFO L87 Difference]: Start difference. First operand 15433 states and 22390 transitions. Second operand has 5 states, 5 states have (on average 16.0) internal successors, (80), 3 states have internal predecessors, (80), 3 states have call successors, (51), 3 states have call predecessors, (51), 1 states have return successors, (50), 2 states have call predecessors, (50), 2 states have call successors, (50) [2022-11-25 17:18:05,594 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 17:18:05,594 INFO L93 Difference]: Finished difference Result 47942 states and 70987 transitions. [2022-11-25 17:18:05,595 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-25 17:18:05,595 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 16.0) internal successors, (80), 3 states have internal predecessors, (80), 3 states have call successors, (51), 3 states have call predecessors, (51), 1 states have return successors, (50), 2 states have call predecessors, (50), 2 states have call successors, (50) Word has length 325 [2022-11-25 17:18:05,596 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 17:18:05,761 INFO L225 Difference]: With dead ends: 47942 [2022-11-25 17:18:05,762 INFO L226 Difference]: Without dead ends: 32611 [2022-11-25 17:18:05,810 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 108 GetRequests, 102 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2022-11-25 17:18:05,811 INFO L413 NwaCegarLoop]: 2182 mSDtfsCounter, 5347 mSDsluCounter, 3843 mSDsCounter, 0 mSdLazyCounter, 3062 mSolverCounterSat, 1823 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 7.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 5555 SdHoareTripleChecker+Valid, 6025 SdHoareTripleChecker+Invalid, 4885 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 1823 IncrementalHoareTripleChecker+Valid, 3062 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 8.7s IncrementalHoareTripleChecker+Time [2022-11-25 17:18:05,811 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [5555 Valid, 6025 Invalid, 4885 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [1823 Valid, 3062 Invalid, 0 Unknown, 0 Unchecked, 8.7s Time] [2022-11-25 17:18:05,845 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 32611 states. [2022-11-25 17:18:07,245 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 32611 to 23038. [2022-11-25 17:18:07,287 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 23038 states, 17828 states have (on average 1.457033879291003) internal successors, (25976), 18202 states have internal predecessors, (25976), 3750 states have call successors, (3750), 1366 states have call predecessors, (3750), 1366 states have return successors, (3750), 3631 states have call predecessors, (3750), 3750 states have call successors, (3750) [2022-11-25 17:18:07,384 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 23038 states to 23038 states and 33476 transitions. [2022-11-25 17:18:07,389 INFO L78 Accepts]: Start accepts. Automaton has 23038 states and 33476 transitions. Word has length 325 [2022-11-25 17:18:07,390 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 17:18:07,390 INFO L495 AbstractCegarLoop]: Abstraction has 23038 states and 33476 transitions. [2022-11-25 17:18:07,390 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 16.0) internal successors, (80), 3 states have internal predecessors, (80), 3 states have call successors, (51), 3 states have call predecessors, (51), 1 states have return successors, (50), 2 states have call predecessors, (50), 2 states have call successors, (50) [2022-11-25 17:18:07,391 INFO L276 IsEmpty]: Start isEmpty. Operand 23038 states and 33476 transitions. [2022-11-25 17:18:07,397 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 327 [2022-11-25 17:18:07,398 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 17:18:07,398 INFO L195 NwaCegarLoop]: trace histogram [48, 48, 48, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 17:18:07,398 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-11-25 17:18:07,399 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting gspca_vm_openErr0ASSERT_VIOLATIONINTEGER_OVERFLOW === [wxh_to_modeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW, wxh_to_modeErr1ASSERT_VIOLATIONINTEGER_OVERFLOW, frame_freeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (and 97 more)] === [2022-11-25 17:18:07,399 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 17:18:07,399 INFO L85 PathProgramCache]: Analyzing trace with hash 1116408528, now seen corresponding path program 1 times [2022-11-25 17:18:07,400 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-25 17:18:07,400 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1520589898] [2022-11-25 17:18:07,400 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 17:18:07,400 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 17:18:07,576 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:18:08,709 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-25 17:18:08,711 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:18:08,721 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-25 17:18:08,722 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:18:08,732 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-11-25 17:18:08,734 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:18:08,743 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-11-25 17:18:08,745 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:18:08,754 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 26 [2022-11-25 17:18:08,756 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:18:08,765 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 32 [2022-11-25 17:18:08,767 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:18:08,776 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 38 [2022-11-25 17:18:08,778 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:18:08,787 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2022-11-25 17:18:08,788 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:18:08,797 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2022-11-25 17:18:08,799 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:18:08,808 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 56 [2022-11-25 17:18:08,810 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:18:08,819 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 62 [2022-11-25 17:18:08,821 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:18:08,830 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 68 [2022-11-25 17:18:08,832 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:18:08,841 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 74 [2022-11-25 17:18:08,843 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:18:08,852 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 80 [2022-11-25 17:18:08,854 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:18:08,864 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 86 [2022-11-25 17:18:08,866 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:18:08,875 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 92 [2022-11-25 17:18:08,877 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:18:08,886 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 98 [2022-11-25 17:18:08,888 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:18:08,897 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 104 [2022-11-25 17:18:08,899 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:18:08,908 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 110 [2022-11-25 17:18:08,910 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:18:08,919 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 116 [2022-11-25 17:18:08,921 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:18:08,932 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 122 [2022-11-25 17:18:08,935 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:18:08,946 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 128 [2022-11-25 17:18:08,948 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:18:08,960 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 134 [2022-11-25 17:18:08,962 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:18:08,974 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 140 [2022-11-25 17:18:08,976 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:18:08,987 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 146 [2022-11-25 17:18:08,994 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:18:09,005 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 152 [2022-11-25 17:18:09,008 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:18:09,019 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 158 [2022-11-25 17:18:09,022 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:18:09,034 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 164 [2022-11-25 17:18:09,036 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:18:09,048 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 170 [2022-11-25 17:18:09,050 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:18:09,062 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 176 [2022-11-25 17:18:09,064 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:18:09,075 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 182 [2022-11-25 17:18:09,080 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:18:09,091 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 188 [2022-11-25 17:18:09,094 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:18:09,106 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 194 [2022-11-25 17:18:09,108 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:18:09,119 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 200 [2022-11-25 17:18:09,124 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:18:09,135 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 206 [2022-11-25 17:18:09,137 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:18:09,148 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 212 [2022-11-25 17:18:09,150 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:18:09,160 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 218 [2022-11-25 17:18:09,163 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:18:09,175 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 224 [2022-11-25 17:18:09,180 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:18:09,190 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 230 [2022-11-25 17:18:09,193 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:18:09,203 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 236 [2022-11-25 17:18:09,206 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:18:09,226 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 243 [2022-11-25 17:18:09,236 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:18:09,340 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 249 [2022-11-25 17:18:09,345 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:18:09,369 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 265 [2022-11-25 17:18:09,372 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:18:09,385 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 271 [2022-11-25 17:18:09,388 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:18:09,401 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 277 [2022-11-25 17:18:09,404 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:18:09,417 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 283 [2022-11-25 17:18:09,420 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:18:09,432 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 289 [2022-11-25 17:18:09,436 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:18:09,449 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 295 [2022-11-25 17:18:09,453 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:18:09,465 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 302 [2022-11-25 17:18:09,468 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:18:09,481 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 309 [2022-11-25 17:18:09,484 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:18:09,499 INFO L134 CoverageAnalysis]: Checked inductivity of 4518 backedges. 0 proven. 3 refuted. 0 times theorem prover too weak. 4515 trivial. 0 not checked. [2022-11-25 17:18:09,500 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-25 17:18:09,500 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1520589898] [2022-11-25 17:18:09,500 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1520589898] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 17:18:09,500 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [118999522] [2022-11-25 17:18:09,501 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 17:18:09,501 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 17:18:09,502 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3f2e6758-78a2-4da1-8efb-5651a54164f0/bin/uautomizer-ZsLfNo2U6R/z3 [2022-11-25 17:18:09,506 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3f2e6758-78a2-4da1-8efb-5651a54164f0/bin/uautomizer-ZsLfNo2U6R/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 17:18:09,513 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3f2e6758-78a2-4da1-8efb-5651a54164f0/bin/uautomizer-ZsLfNo2U6R/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-11-25 17:18:10,820 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:18:10,840 INFO L263 TraceCheckSpWp]: Trace formula consists of 3635 conjuncts, 7 conjunts are in the unsatisfiable core [2022-11-25 17:18:10,866 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 17:18:11,047 INFO L134 CoverageAnalysis]: Checked inductivity of 4518 backedges. 1284 proven. 0 refuted. 0 times theorem prover too weak. 3234 trivial. 0 not checked. [2022-11-25 17:18:11,047 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-25 17:18:11,047 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [118999522] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 17:18:11,048 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-25 17:18:11,048 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [6] total 7 [2022-11-25 17:18:11,048 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2102252682] [2022-11-25 17:18:11,048 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 17:18:11,049 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-25 17:18:11,049 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-25 17:18:11,050 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-25 17:18:11,050 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=12, Invalid=30, Unknown=0, NotChecked=0, Total=42 [2022-11-25 17:18:11,051 INFO L87 Difference]: Start difference. First operand 23038 states and 33476 transitions. Second operand has 4 states, 4 states have (on average 21.5) internal successors, (86), 4 states have internal predecessors, (86), 2 states have call successors, (51), 2 states have call predecessors, (51), 3 states have return successors, (50), 2 states have call predecessors, (50), 2 states have call successors, (50) [2022-11-25 17:18:12,650 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 17:18:12,650 INFO L93 Difference]: Finished difference Result 46038 states and 67049 transitions. [2022-11-25 17:18:12,651 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-11-25 17:18:12,651 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 21.5) internal successors, (86), 4 states have internal predecessors, (86), 2 states have call successors, (51), 2 states have call predecessors, (51), 3 states have return successors, (50), 2 states have call predecessors, (50), 2 states have call successors, (50) Word has length 326 [2022-11-25 17:18:12,652 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 17:18:12,792 INFO L225 Difference]: With dead ends: 46038 [2022-11-25 17:18:12,792 INFO L226 Difference]: Without dead ends: 23057 [2022-11-25 17:18:12,878 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 429 GetRequests, 422 SyntacticMatches, 1 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=17, Invalid=39, Unknown=0, NotChecked=0, Total=56 [2022-11-25 17:18:12,879 INFO L413 NwaCegarLoop]: 2181 mSDtfsCounter, 2 mSDsluCounter, 4356 mSDsCounter, 0 mSdLazyCounter, 11 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2 SdHoareTripleChecker+Valid, 6537 SdHoareTripleChecker+Invalid, 15 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 11 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-25 17:18:12,880 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [2 Valid, 6537 Invalid, 15 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 11 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-25 17:18:12,912 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 23057 states. [2022-11-25 17:18:14,324 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 23057 to 23057. [2022-11-25 17:18:14,352 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 23057 states, 17847 states have (on average 1.4565473188771223) internal successors, (25995), 18221 states have internal predecessors, (25995), 3750 states have call successors, (3750), 1366 states have call predecessors, (3750), 1366 states have return successors, (3750), 3631 states have call predecessors, (3750), 3750 states have call successors, (3750) [2022-11-25 17:18:14,455 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 23057 states to 23057 states and 33495 transitions. [2022-11-25 17:18:14,461 INFO L78 Accepts]: Start accepts. Automaton has 23057 states and 33495 transitions. Word has length 326 [2022-11-25 17:18:14,462 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 17:18:14,462 INFO L495 AbstractCegarLoop]: Abstraction has 23057 states and 33495 transitions. [2022-11-25 17:18:14,463 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 21.5) internal successors, (86), 4 states have internal predecessors, (86), 2 states have call successors, (51), 2 states have call predecessors, (51), 3 states have return successors, (50), 2 states have call predecessors, (50), 2 states have call successors, (50) [2022-11-25 17:18:14,463 INFO L276 IsEmpty]: Start isEmpty. Operand 23057 states and 33495 transitions. [2022-11-25 17:18:14,469 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 329 [2022-11-25 17:18:14,469 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 17:18:14,470 INFO L195 NwaCegarLoop]: trace histogram [48, 48, 48, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 17:18:14,489 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3f2e6758-78a2-4da1-8efb-5651a54164f0/bin/uautomizer-ZsLfNo2U6R/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-11-25 17:18:14,682 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3f2e6758-78a2-4da1-8efb-5651a54164f0/bin/uautomizer-ZsLfNo2U6R/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable5 [2022-11-25 17:18:14,683 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting gspca_vm_openErr0ASSERT_VIOLATIONINTEGER_OVERFLOW === [wxh_to_modeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW, wxh_to_modeErr1ASSERT_VIOLATIONINTEGER_OVERFLOW, frame_freeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (and 97 more)] === [2022-11-25 17:18:14,683 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 17:18:14,683 INFO L85 PathProgramCache]: Analyzing trace with hash 1723912208, now seen corresponding path program 1 times [2022-11-25 17:18:14,684 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-25 17:18:14,684 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1204685081] [2022-11-25 17:18:14,684 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 17:18:14,684 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 17:18:15,061 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:18:16,006 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-25 17:18:16,011 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:18:16,023 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-25 17:18:16,025 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:18:16,037 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-11-25 17:18:16,039 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:18:16,051 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-11-25 17:18:16,053 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:18:16,064 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 26 [2022-11-25 17:18:16,066 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:18:16,078 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 32 [2022-11-25 17:18:16,079 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:18:16,091 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 38 [2022-11-25 17:18:16,093 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:18:16,106 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2022-11-25 17:18:16,108 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:18:16,120 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2022-11-25 17:18:16,123 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:18:16,135 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 56 [2022-11-25 17:18:16,141 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:18:16,153 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 62 [2022-11-25 17:18:16,156 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:18:16,168 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 68 [2022-11-25 17:18:16,170 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:18:16,182 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 74 [2022-11-25 17:18:16,185 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:18:16,197 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 80 [2022-11-25 17:18:16,199 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:18:16,211 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 86 [2022-11-25 17:18:16,216 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:18:16,228 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 92 [2022-11-25 17:18:16,231 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:18:16,243 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 98 [2022-11-25 17:18:16,246 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:18:16,258 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 104 [2022-11-25 17:18:16,261 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:18:16,273 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 110 [2022-11-25 17:18:16,275 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:18:16,287 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 116 [2022-11-25 17:18:16,289 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:18:16,300 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 122 [2022-11-25 17:18:16,303 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:18:16,313 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 128 [2022-11-25 17:18:16,316 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:18:16,326 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 134 [2022-11-25 17:18:16,328 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:18:16,339 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 140 [2022-11-25 17:18:16,342 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:18:16,353 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 146 [2022-11-25 17:18:16,356 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:18:16,368 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 152 [2022-11-25 17:18:16,371 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:18:16,382 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 158 [2022-11-25 17:18:16,384 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:18:16,396 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 164 [2022-11-25 17:18:16,398 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:18:16,409 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 170 [2022-11-25 17:18:16,412 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:18:16,423 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 176 [2022-11-25 17:18:16,426 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:18:16,440 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 182 [2022-11-25 17:18:16,443 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:18:16,457 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 188 [2022-11-25 17:18:16,460 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:18:16,472 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 194 [2022-11-25 17:18:16,477 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:18:16,489 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 200 [2022-11-25 17:18:16,492 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:18:16,504 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 206 [2022-11-25 17:18:16,507 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:18:16,519 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 212 [2022-11-25 17:18:16,522 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:18:16,533 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 218 [2022-11-25 17:18:16,536 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:18:16,548 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 224 [2022-11-25 17:18:16,550 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:18:16,562 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 230 [2022-11-25 17:18:16,565 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:18:16,576 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 236 [2022-11-25 17:18:16,579 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:18:16,600 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 243 [2022-11-25 17:18:16,617 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:18:16,847 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 250 [2022-11-25 17:18:16,852 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:18:16,869 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 267 [2022-11-25 17:18:16,872 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:18:16,886 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 273 [2022-11-25 17:18:16,889 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:18:16,904 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 279 [2022-11-25 17:18:16,908 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:18:16,921 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 285 [2022-11-25 17:18:16,925 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:18:16,938 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 291 [2022-11-25 17:18:16,941 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:18:16,954 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 297 [2022-11-25 17:18:16,958 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:18:16,974 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 304 [2022-11-25 17:18:16,978 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:18:16,994 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 311 [2022-11-25 17:18:16,997 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:18:17,014 INFO L134 CoverageAnalysis]: Checked inductivity of 4523 backedges. 0 proven. 7 refuted. 0 times theorem prover too weak. 4516 trivial. 0 not checked. [2022-11-25 17:18:17,014 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-25 17:18:17,015 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1204685081] [2022-11-25 17:18:17,015 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1204685081] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 17:18:17,015 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [520508126] [2022-11-25 17:18:17,016 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 17:18:17,016 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 17:18:17,016 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3f2e6758-78a2-4da1-8efb-5651a54164f0/bin/uautomizer-ZsLfNo2U6R/z3 [2022-11-25 17:18:17,018 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3f2e6758-78a2-4da1-8efb-5651a54164f0/bin/uautomizer-ZsLfNo2U6R/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 17:18:17,052 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3f2e6758-78a2-4da1-8efb-5651a54164f0/bin/uautomizer-ZsLfNo2U6R/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-11-25 17:18:18,367 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:18:18,387 INFO L263 TraceCheckSpWp]: Trace formula consists of 3665 conjuncts, 11 conjunts are in the unsatisfiable core [2022-11-25 17:18:18,407 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 17:18:18,527 INFO L134 CoverageAnalysis]: Checked inductivity of 4523 backedges. 1287 proven. 1 refuted. 0 times theorem prover too weak. 3235 trivial. 0 not checked. [2022-11-25 17:18:18,527 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 17:18:18,895 INFO L134 CoverageAnalysis]: Checked inductivity of 4523 backedges. 0 proven. 7 refuted. 0 times theorem prover too weak. 4516 trivial. 0 not checked. [2022-11-25 17:18:18,896 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [520508126] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 17:18:18,896 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 17:18:18,896 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [7, 5, 5] total 12 [2022-11-25 17:18:18,897 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [208621564] [2022-11-25 17:18:18,897 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 17:18:18,898 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 12 states [2022-11-25 17:18:18,899 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-25 17:18:18,900 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2022-11-25 17:18:18,900 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=35, Invalid=97, Unknown=0, NotChecked=0, Total=132 [2022-11-25 17:18:18,901 INFO L87 Difference]: Start difference. First operand 23057 states and 33495 transitions. Second operand has 12 states, 12 states have (on average 8.5) internal successors, (102), 10 states have internal predecessors, (102), 2 states have call successors, (110), 4 states have call predecessors, (110), 5 states have return successors, (61), 2 states have call predecessors, (61), 2 states have call successors, (61) [2022-11-25 17:18:29,997 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 17:18:29,997 INFO L93 Difference]: Finished difference Result 55472 states and 82226 transitions. [2022-11-25 17:18:29,997 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-11-25 17:18:29,998 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 8.5) internal successors, (102), 10 states have internal predecessors, (102), 2 states have call successors, (110), 4 states have call predecessors, (110), 5 states have return successors, (61), 2 states have call predecessors, (61), 2 states have call successors, (61) Word has length 328 [2022-11-25 17:18:29,998 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 17:18:30,188 INFO L225 Difference]: With dead ends: 55472 [2022-11-25 17:18:30,188 INFO L226 Difference]: Without dead ends: 32470 [2022-11-25 17:18:30,269 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 767 GetRequests, 748 SyntacticMatches, 1 SemanticMatches, 18 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 19 ImplicationChecksByTransitivity, 0.5s TimeCoverageRelationStatistics Valid=107, Invalid=273, Unknown=0, NotChecked=0, Total=380 [2022-11-25 17:18:30,270 INFO L413 NwaCegarLoop]: 1989 mSDtfsCounter, 1536 mSDsluCounter, 7427 mSDsCounter, 0 mSdLazyCounter, 4022 mSolverCounterSat, 791 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 8.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1582 SdHoareTripleChecker+Valid, 9416 SdHoareTripleChecker+Invalid, 4813 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 791 IncrementalHoareTripleChecker+Valid, 4022 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 9.1s IncrementalHoareTripleChecker+Time [2022-11-25 17:18:30,271 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1582 Valid, 9416 Invalid, 4813 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [791 Valid, 4022 Invalid, 0 Unknown, 0 Unchecked, 9.1s Time] [2022-11-25 17:18:30,311 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 32470 states. [2022-11-25 17:18:32,182 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 32470 to 23078. [2022-11-25 17:18:32,198 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 23078 states, 17868 states have (on average 1.4560107454667561) internal successors, (26016), 18242 states have internal predecessors, (26016), 3750 states have call successors, (3750), 1366 states have call predecessors, (3750), 1366 states have return successors, (3750), 3631 states have call predecessors, (3750), 3750 states have call successors, (3750) [2022-11-25 17:18:32,301 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 23078 states to 23078 states and 33516 transitions. [2022-11-25 17:18:32,308 INFO L78 Accepts]: Start accepts. Automaton has 23078 states and 33516 transitions. Word has length 328 [2022-11-25 17:18:32,309 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 17:18:32,309 INFO L495 AbstractCegarLoop]: Abstraction has 23078 states and 33516 transitions. [2022-11-25 17:18:32,310 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 12 states, 12 states have (on average 8.5) internal successors, (102), 10 states have internal predecessors, (102), 2 states have call successors, (110), 4 states have call predecessors, (110), 5 states have return successors, (61), 2 states have call predecessors, (61), 2 states have call successors, (61) [2022-11-25 17:18:32,310 INFO L276 IsEmpty]: Start isEmpty. Operand 23078 states and 33516 transitions. [2022-11-25 17:18:32,316 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 335 [2022-11-25 17:18:32,316 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 17:18:32,317 INFO L195 NwaCegarLoop]: trace histogram [48, 48, 48, 8, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 17:18:32,335 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3f2e6758-78a2-4da1-8efb-5651a54164f0/bin/uautomizer-ZsLfNo2U6R/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-11-25 17:18:32,530 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6,3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3f2e6758-78a2-4da1-8efb-5651a54164f0/bin/uautomizer-ZsLfNo2U6R/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 17:18:32,531 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting gspca_vm_openErr0ASSERT_VIOLATIONINTEGER_OVERFLOW === [wxh_to_modeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW, wxh_to_modeErr1ASSERT_VIOLATIONINTEGER_OVERFLOW, frame_freeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (and 97 more)] === [2022-11-25 17:18:32,532 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 17:18:32,532 INFO L85 PathProgramCache]: Analyzing trace with hash -1412674352, now seen corresponding path program 2 times [2022-11-25 17:18:32,532 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-25 17:18:32,533 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1121411131] [2022-11-25 17:18:32,533 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 17:18:32,533 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 17:18:32,956 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-11-25 17:18:32,956 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-11-25 17:18:33,257 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-11-25 17:18:33,786 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2022-11-25 17:18:33,786 INFO L360 BasicCegarLoop]: Counterexample is feasible [2022-11-25 17:18:33,788 INFO L805 garLoopResultBuilder]: Registering result UNSAFE for location gspca_vm_openErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (99 of 100 remaining) [2022-11-25 17:18:33,790 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location wxh_to_modeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (98 of 100 remaining) [2022-11-25 17:18:33,791 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location wxh_to_modeErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (97 of 100 remaining) [2022-11-25 17:18:33,791 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location frame_freeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (96 of 100 remaining) [2022-11-25 17:18:33,791 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location frame_freeErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (95 of 100 remaining) [2022-11-25 17:18:33,792 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location alt_xferErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (94 of 100 remaining) [2022-11-25 17:18:33,792 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location alt_xferErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (93 of 100 remaining) [2022-11-25 17:18:33,792 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location dev_mmapErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (92 of 100 remaining) [2022-11-25 17:18:33,793 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location dev_mmapErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (91 of 100 remaining) [2022-11-25 17:18:33,794 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location __create_pipeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (90 of 100 remaining) [2022-11-25 17:18:33,794 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location __create_pipeErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (89 of 100 remaining) [2022-11-25 17:18:33,794 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location __create_pipeErr2ASSERT_VIOLATIONINTEGER_OVERFLOW (88 of 100 remaining) [2022-11-25 17:18:33,795 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location vidioc_streamoffErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (87 of 100 remaining) [2022-11-25 17:18:33,795 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location vidioc_streamoffErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (86 of 100 remaining) [2022-11-25 17:18:33,795 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location gspca_init_transferErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (85 of 100 remaining) [2022-11-25 17:18:33,795 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location gspca_init_transferErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (84 of 100 remaining) [2022-11-25 17:18:33,796 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location gspca_init_transferErr2ASSERT_VIOLATIONINTEGER_OVERFLOW (83 of 100 remaining) [2022-11-25 17:18:33,796 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location gspca_init_transferErr3ASSERT_VIOLATIONINTEGER_OVERFLOW (82 of 100 remaining) [2022-11-25 17:18:33,796 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location gspca_init_transferErr4ASSERT_VIOLATIONINTEGER_OVERFLOW (81 of 100 remaining) [2022-11-25 17:18:33,796 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location gspca_init_transferErr5ASSERT_VIOLATIONINTEGER_OVERFLOW (80 of 100 remaining) [2022-11-25 17:18:33,797 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location gspca_init_transferErr6ASSERT_VIOLATIONINTEGER_OVERFLOW (79 of 100 remaining) [2022-11-25 17:18:33,797 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location gspca_init_transferErr7ASSERT_VIOLATIONINTEGER_OVERFLOW (78 of 100 remaining) [2022-11-25 17:18:33,797 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location gspca_init_transferErr8ASSERT_VIOLATIONINTEGER_OVERFLOW (77 of 100 remaining) [2022-11-25 17:18:33,798 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location gspca_init_transferErr9ASSERT_VIOLATIONINTEGER_OVERFLOW (76 of 100 remaining) [2022-11-25 17:18:33,798 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location gspca_init_transferErr10ASSERT_VIOLATIONINTEGER_OVERFLOW (75 of 100 remaining) [2022-11-25 17:18:33,799 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location gspca_init_transferErr11ASSERT_VIOLATIONINTEGER_OVERFLOW (74 of 100 remaining) [2022-11-25 17:18:33,799 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location gspca_init_transferErr12ASSERT_VIOLATIONINTEGER_OVERFLOW (73 of 100 remaining) [2022-11-25 17:18:33,800 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location gspca_init_transferErr13ASSERT_VIOLATIONINTEGER_OVERFLOW (72 of 100 remaining) [2022-11-25 17:18:33,800 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location gspca_init_transferErr14ASSERT_VIOLATIONINTEGER_OVERFLOW (71 of 100 remaining) [2022-11-25 17:18:33,800 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location gspca_init_transferErr15ASSERT_VIOLATIONINTEGER_OVERFLOW (70 of 100 remaining) [2022-11-25 17:18:33,800 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location gspca_init_transferErr16ASSERT_VIOLATIONINTEGER_OVERFLOW (69 of 100 remaining) [2022-11-25 17:18:33,801 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location gspca_init_transferErr17ASSERT_VIOLATIONINTEGER_OVERFLOW (68 of 100 remaining) [2022-11-25 17:18:33,801 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location gspca_init_transferErr18ASSERT_VIOLATIONINTEGER_OVERFLOW (67 of 100 remaining) [2022-11-25 17:18:33,801 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location gspca_init_transferErr19ASSERT_VIOLATIONINTEGER_OVERFLOW (66 of 100 remaining) [2022-11-25 17:18:33,801 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location gspca_init_transferErr20ASSERT_VIOLATIONINTEGER_OVERFLOW (65 of 100 remaining) [2022-11-25 17:18:33,802 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location gspca_init_transferErr21ASSERT_VIOLATIONINTEGER_OVERFLOW (64 of 100 remaining) [2022-11-25 17:18:33,802 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location gspca_init_transferErr22ASSERT_VIOLATIONINTEGER_OVERFLOW (63 of 100 remaining) [2022-11-25 17:18:33,802 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location gspca_init_transferErr23ASSERT_VIOLATIONINTEGER_OVERFLOW (62 of 100 remaining) [2022-11-25 17:18:33,802 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location gspca_init_transferErr24ASSERT_VIOLATIONINTEGER_OVERFLOW (61 of 100 remaining) [2022-11-25 17:18:33,802 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location gspca_init_transferErr25ASSERT_VIOLATIONINTEGER_OVERFLOW (60 of 100 remaining) [2022-11-25 17:18:33,803 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location gspca_init_transferErr26ASSERT_VIOLATIONINTEGER_OVERFLOW (59 of 100 remaining) [2022-11-25 17:18:33,803 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location gspca_init_transferErr27ASSERT_VIOLATIONINTEGER_OVERFLOW (58 of 100 remaining) [2022-11-25 17:18:33,803 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location gspca_init_transferErr28ASSERT_VIOLATIONINTEGER_OVERFLOW (57 of 100 remaining) [2022-11-25 17:18:33,803 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location gspca_init_transferErr29ASSERT_VIOLATIONINTEGER_OVERFLOW (56 of 100 remaining) [2022-11-25 17:18:33,804 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location gspca_init_transferErr30ASSERT_VIOLATIONINTEGER_OVERFLOW (55 of 100 remaining) [2022-11-25 17:18:33,804 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location gspca_init_transferErr31ASSERT_VIOLATIONINTEGER_OVERFLOW (54 of 100 remaining) [2022-11-25 17:18:33,804 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location gspca_init_transferErr32ASSERT_VIOLATIONINTEGER_OVERFLOW (53 of 100 remaining) [2022-11-25 17:18:33,804 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location gspca_init_transferErr33ASSERT_VIOLATIONINTEGER_OVERFLOW (52 of 100 remaining) [2022-11-25 17:18:33,805 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location gspca_init_transferErr34ASSERT_VIOLATIONINTEGER_OVERFLOW (51 of 100 remaining) [2022-11-25 17:18:33,805 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location gspca_init_transferErr35ASSERT_VIOLATIONINTEGER_OVERFLOW (50 of 100 remaining) [2022-11-25 17:18:33,805 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location gspca_init_transferErr36ASSERT_VIOLATIONINTEGER_OVERFLOW (49 of 100 remaining) [2022-11-25 17:18:33,805 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location gspca_init_transferErr37ASSERT_VIOLATIONINTEGER_OVERFLOW (48 of 100 remaining) [2022-11-25 17:18:33,806 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location gspca_init_transferErr38ASSERT_VIOLATIONINTEGER_OVERFLOW (47 of 100 remaining) [2022-11-25 17:18:33,806 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location gspca_init_transferErr39ASSERT_VIOLATIONINTEGER_OVERFLOW (46 of 100 remaining) [2022-11-25 17:18:33,806 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location gspca_init_transferErr40ASSERT_VIOLATIONINTEGER_OVERFLOW (45 of 100 remaining) [2022-11-25 17:18:33,806 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location vidioc_reqbufsErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (44 of 100 remaining) [2022-11-25 17:18:33,807 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location vidioc_reqbufsErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (43 of 100 remaining) [2022-11-25 17:18:33,807 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location vidioc_reqbufsErr2ASSERT_VIOLATIONINTEGER_OVERFLOW (42 of 100 remaining) [2022-11-25 17:18:33,807 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location vidioc_reqbufsErr3ASSERT_VIOLATIONINTEGER_OVERFLOW (41 of 100 remaining) [2022-11-25 17:18:33,807 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location try_fmt_vid_capErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (40 of 100 remaining) [2022-11-25 17:18:33,808 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location try_fmt_vid_capErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (39 of 100 remaining) [2022-11-25 17:18:33,808 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location try_fmt_vid_capErr2ASSERT_VIOLATIONINTEGER_OVERFLOW (38 of 100 remaining) [2022-11-25 17:18:33,808 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location try_fmt_vid_capErr3ASSERT_VIOLATIONINTEGER_OVERFLOW (37 of 100 remaining) [2022-11-25 17:18:33,808 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location gspca_vm_closeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (36 of 100 remaining) [2022-11-25 17:18:33,809 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location gspca_vm_closeErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (35 of 100 remaining) [2022-11-25 17:18:33,809 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location alloc_and_submit_int_urbErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (34 of 100 remaining) [2022-11-25 17:18:33,809 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location alloc_and_submit_int_urbErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (33 of 100 remaining) [2022-11-25 17:18:33,809 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location vidioc_qbufErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (32 of 100 remaining) [2022-11-25 17:18:33,809 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location vidioc_qbufErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (31 of 100 remaining) [2022-11-25 17:18:33,810 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location fill_frameErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (30 of 100 remaining) [2022-11-25 17:18:33,810 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location fill_frameErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (29 of 100 remaining) [2022-11-25 17:18:33,810 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location read_allocErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (28 of 100 remaining) [2022-11-25 17:18:33,810 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location read_allocErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (27 of 100 remaining) [2022-11-25 17:18:33,811 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location gspca_vm_openErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (26 of 100 remaining) [2022-11-25 17:18:33,811 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (25 of 100 remaining) [2022-11-25 17:18:33,811 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (24 of 100 remaining) [2022-11-25 17:18:33,812 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr2ASSERT_VIOLATIONINTEGER_OVERFLOW (23 of 100 remaining) [2022-11-25 17:18:33,813 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr3ASSERT_VIOLATIONINTEGER_OVERFLOW (22 of 100 remaining) [2022-11-25 17:18:33,813 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr4ASSERT_VIOLATIONINTEGER_OVERFLOW (21 of 100 remaining) [2022-11-25 17:18:33,813 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr5ASSERT_VIOLATIONINTEGER_OVERFLOW (20 of 100 remaining) [2022-11-25 17:18:33,813 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr6ASSERT_VIOLATIONINTEGER_OVERFLOW (19 of 100 remaining) [2022-11-25 17:18:33,814 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr7ASSERT_VIOLATIONINTEGER_OVERFLOW (18 of 100 remaining) [2022-11-25 17:18:33,814 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr8ASSERT_VIOLATIONINTEGER_OVERFLOW (17 of 100 remaining) [2022-11-25 17:18:33,814 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr9ASSERT_VIOLATIONINTEGER_OVERFLOW (16 of 100 remaining) [2022-11-25 17:18:33,814 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr10ASSERT_VIOLATIONINTEGER_OVERFLOW (15 of 100 remaining) [2022-11-25 17:18:33,815 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr11ASSERT_VIOLATIONINTEGER_OVERFLOW (14 of 100 remaining) [2022-11-25 17:18:33,815 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr12ASSERT_VIOLATIONINTEGER_OVERFLOW (13 of 100 remaining) [2022-11-25 17:18:33,815 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr13ASSERT_VIOLATIONINTEGER_OVERFLOW (12 of 100 remaining) [2022-11-25 17:18:33,815 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr14ASSERT_VIOLATIONINTEGER_OVERFLOW (11 of 100 remaining) [2022-11-25 17:18:33,816 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr15ASSERT_VIOLATIONINTEGER_OVERFLOW (10 of 100 remaining) [2022-11-25 17:18:33,816 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr16ASSERT_VIOLATIONINTEGER_OVERFLOW (9 of 100 remaining) [2022-11-25 17:18:33,816 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr17ASSERT_VIOLATIONINTEGER_OVERFLOW (8 of 100 remaining) [2022-11-25 17:18:33,816 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr18ASSERT_VIOLATIONINTEGER_OVERFLOW (7 of 100 remaining) [2022-11-25 17:18:33,817 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr19ASSERT_VIOLATIONINTEGER_OVERFLOW (6 of 100 remaining) [2022-11-25 17:18:33,817 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr20ASSERT_VIOLATIONINTEGER_OVERFLOW (5 of 100 remaining) [2022-11-25 17:18:33,817 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr21ASSERT_VIOLATIONINTEGER_OVERFLOW (4 of 100 remaining) [2022-11-25 17:18:33,817 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location vidioc_dqbufErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (3 of 100 remaining) [2022-11-25 17:18:33,818 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location vidioc_dqbufErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (2 of 100 remaining) [2022-11-25 17:18:33,818 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location gspca_input_create_urbErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (1 of 100 remaining) [2022-11-25 17:18:33,818 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location gspca_input_create_urbErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (0 of 100 remaining) [2022-11-25 17:18:33,818 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-11-25 17:18:33,822 INFO L445 BasicCegarLoop]: Path program histogram: [2, 1, 1, 1, 1, 1, 1] [2022-11-25 17:18:33,829 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2022-11-25 17:18:34,153 WARN L421 cessorBacktranslator]: Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) [2022-11-25 17:18:34,165 WARN L421 cessorBacktranslator]: Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) [2022-11-25 17:18:34,687 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 25.11 05:18:34 BoogieIcfgContainer [2022-11-25 17:18:34,687 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-11-25 17:18:34,688 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-11-25 17:18:34,688 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-11-25 17:18:34,689 INFO L275 PluginConnector]: Witness Printer initialized [2022-11-25 17:18:34,689 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 25.11 05:16:57" (3/4) ... [2022-11-25 17:18:34,691 INFO L131 WitnessPrinter]: Generating witness for reachability counterexample [2022-11-25 17:18:34,767 WARN L421 cessorBacktranslator]: Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) [2022-11-25 17:18:34,769 WARN L421 cessorBacktranslator]: Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) [2022-11-25 17:18:35,454 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3f2e6758-78a2-4da1-8efb-5651a54164f0/bin/uautomizer-ZsLfNo2U6R/witness.graphml [2022-11-25 17:18:35,455 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-11-25 17:18:35,455 INFO L158 Benchmark]: Toolchain (without parser) took 107390.44ms. Allocated memory was 186.6MB in the beginning and 5.3GB in the end (delta: 5.2GB). Free memory was 148.3MB in the beginning and 4.6GB in the end (delta: -4.4GB). Peak memory consumption was 912.1MB. Max. memory is 16.1GB. [2022-11-25 17:18:35,456 INFO L158 Benchmark]: CDTParser took 0.23ms. Allocated memory is still 136.3MB. Free memory was 105.0MB in the beginning and 104.8MB in the end (delta: 165.2kB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-11-25 17:18:35,456 INFO L158 Benchmark]: CACSL2BoogieTranslator took 3172.56ms. Allocated memory was 186.6MB in the beginning and 262.1MB in the end (delta: 75.5MB). Free memory was 148.3MB in the beginning and 127.5MB in the end (delta: 20.8MB). Peak memory consumption was 116.6MB. Max. memory is 16.1GB. [2022-11-25 17:18:35,456 INFO L158 Benchmark]: Boogie Procedure Inliner took 358.53ms. Allocated memory is still 262.1MB. Free memory was 127.5MB in the beginning and 179.4MB in the end (delta: -51.9MB). Peak memory consumption was 43.6MB. Max. memory is 16.1GB. [2022-11-25 17:18:35,462 INFO L158 Benchmark]: Boogie Preprocessor took 330.20ms. Allocated memory is still 262.1MB. Free memory was 179.4MB in the beginning and 150.0MB in the end (delta: 29.4MB). Peak memory consumption was 29.4MB. Max. memory is 16.1GB. [2022-11-25 17:18:35,462 INFO L158 Benchmark]: RCFGBuilder took 5657.82ms. Allocated memory was 262.1MB in the beginning and 411.0MB in the end (delta: 148.9MB). Free memory was 150.0MB in the beginning and 197.6MB in the end (delta: -47.6MB). Peak memory consumption was 135.0MB. Max. memory is 16.1GB. [2022-11-25 17:18:35,463 INFO L158 Benchmark]: TraceAbstraction took 97096.53ms. Allocated memory was 411.0MB in the beginning and 4.4GB in the end (delta: 4.0GB). Free memory was 197.6MB in the beginning and 3.6GB in the end (delta: -3.4GB). Peak memory consumption was 745.7MB. Max. memory is 16.1GB. [2022-11-25 17:18:35,464 INFO L158 Benchmark]: Witness Printer took 766.69ms. Allocated memory was 4.4GB in the beginning and 5.3GB in the end (delta: 931.1MB). Free memory was 3.6GB in the beginning and 4.6GB in the end (delta: -973.1MB). Peak memory consumption was 119.5MB. Max. memory is 16.1GB. [2022-11-25 17:18:35,467 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.23ms. Allocated memory is still 136.3MB. Free memory was 105.0MB in the beginning and 104.8MB in the end (delta: 165.2kB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 3172.56ms. Allocated memory was 186.6MB in the beginning and 262.1MB in the end (delta: 75.5MB). Free memory was 148.3MB in the beginning and 127.5MB in the end (delta: 20.8MB). Peak memory consumption was 116.6MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 358.53ms. Allocated memory is still 262.1MB. Free memory was 127.5MB in the beginning and 179.4MB in the end (delta: -51.9MB). Peak memory consumption was 43.6MB. Max. memory is 16.1GB. * Boogie Preprocessor took 330.20ms. Allocated memory is still 262.1MB. Free memory was 179.4MB in the beginning and 150.0MB in the end (delta: 29.4MB). Peak memory consumption was 29.4MB. Max. memory is 16.1GB. * RCFGBuilder took 5657.82ms. Allocated memory was 262.1MB in the beginning and 411.0MB in the end (delta: 148.9MB). Free memory was 150.0MB in the beginning and 197.6MB in the end (delta: -47.6MB). Peak memory consumption was 135.0MB. Max. memory is 16.1GB. * TraceAbstraction took 97096.53ms. Allocated memory was 411.0MB in the beginning and 4.4GB in the end (delta: 4.0GB). Free memory was 197.6MB in the beginning and 3.6GB in the end (delta: -3.4GB). Peak memory consumption was 745.7MB. Max. memory is 16.1GB. * Witness Printer took 766.69ms. Allocated memory was 4.4GB in the beginning and 5.3GB in the end (delta: 931.1MB). Free memory was 3.6GB in the beginning and 4.6GB in the end (delta: -973.1MB). Peak memory consumption was 119.5MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.boogie.preprocessor: - GenericResult: Unfinished Backtranslation Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) - GenericResult: Unfinished Backtranslation Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) - GenericResult: Unfinished Backtranslation Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) - GenericResult: Unfinished Backtranslation Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResult: Unfinished Backtranslation The program execution was not completely translated back. - GenericResult: Unfinished Backtranslation The program execution was not completely translated back. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - CounterExampleResult [Line: 5489]: integer overflow possible integer overflow possible We found a FailurePath: [L5320] struct v4l2_buffer *dev_ioctl_ops_group4 ; [L5321] struct v4l2_fh *dev_ioctl_ops_group5 ; [L5322] struct file *dev_fops_group0 ; [L5323] int LDV_IN_INTERRUPT = 1; [L5324] struct v4l2_event_subscription *dev_ioctl_ops_group1 ; [L5325] struct vm_area_struct *gspca_vm_ops_group0 ; [L5326] int ldv_state_variable_0 ; [L5327] int ldv_state_variable_3 ; [L5328] int ldv_state_variable_2 ; [L5329] int ref_cnt ; [L5330] struct v4l2_streamparm *dev_ioctl_ops_group2 ; [L5331] struct file *dev_ioctl_ops_group3 ; [L5332] int ldv_state_variable_1 ; [L5333] int ldv_state_variable_4 ; [L5334] struct v4l2_format *dev_ioctl_ops_group0 ; [L5438] int gspca_debug ; [L5507-L5508] static struct vm_operations_struct const gspca_vm_ops = {& gspca_vm_open, & gspca_vm_close, 0, 0, 0, 0, 0, 0, 0}; [L7817-L7819] static struct v4l2_file_operations dev_fops = {& __this_module, & dev_read, 0, & dev_poll, 0, & video_ioctl2, 0, 0, & dev_mmap, & dev_open, & dev_close}; [L7820-L7830] static struct v4l2_ioctl_ops const dev_ioctl_ops = {& vidioc_querycap, 0, 0, & vidioc_enum_fmt_vid_cap, 0, 0, 0, 0, & vidioc_g_fmt_vid_cap, 0, 0, 0, 0, 0, 0, 0, 0, 0, & vidioc_s_fmt_vid_cap, 0, 0, 0, 0, 0, 0, 0, 0, 0, & vidioc_try_fmt_vid_cap, 0, 0, 0, 0, 0, 0, 0, 0, 0, & vidioc_reqbufs, & vidioc_querybuf, & vidioc_qbuf, 0, & vidioc_dqbuf, 0, 0, 0, 0, 0, & vidioc_streamon, & vidioc_streamoff, 0, 0, 0, & vidioc_enum_input, & vidioc_g_input, & vidioc_s_input, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, & vidioc_g_jpegcomp, & vidioc_s_jpegcomp, 0, 0, 0, 0, 0, & vidioc_g_parm, & vidioc_s_parm, 0, 0, 0, 0, 0, 0, 0, 0, & vidioc_g_register, & vidioc_s_register, & vidioc_g_chip_info, & vidioc_enum_framesizes, & vidioc_enum_frameintervals, 0, 0, 0, 0, 0, & v4l2_ctrl_subscribe_event, & v4l2_event_unsubscribe, 0}; [L7831-L7904] static struct video_device const gspca_template = {{{0, 0}, 0, 0U, 0, 0U, 0U, 0UL, 0U, (unsigned short)0, (unsigned short)0, (unsigned short)0, (unsigned short)0, 0, 0, 0, 0, 0, 0, {.alsa = {0U, 0U, 0U}}}, (struct v4l2_file_operations const *)(& dev_fops), {0, 0, {0, {0, 0}, 0, 0, 0, 0, {{0}}, {{{0L}, {0, 0}, 0, {0, {0, 0}, 0, 0, 0UL}}, {{0, 0}, 0UL, 0, 0, 0UL, 0, 0, 0, {(char)0, (char)0, (char)0, (char)0, (char)0, (char)0, (char)0, (char)0, (char)0, (char)0, (char)0, (char)0, (char)0, (char)0, (char)0, (char)0}, {0, {0, 0}, 0, 0, 0UL}}, 0, 0}, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0}, 0, 0, {{0}, {{{{{0U}}, 0U, 0U, 0, {0, {0, 0}, 0, 0, 0UL}}}}, {0, 0}, 0, 0, 0, {0, {0, 0}, 0, 0, 0UL}}, 0, 0, 0, {{0}, (unsigned char)0, (unsigned char)0, (_Bool)0, (_Bool)0, (_Bool)0, (_Bool)0, {{{{{0U}}, 0U, 0U, 0, {0, {0, 0}, 0, 0, 0UL}}}}, {0, 0}, {0U, {{{{{{0U}}, 0U, 0U, 0, {0, {0, 0}, 0, 0, 0UL}}}}, {0, 0}}}, 0, (_Bool)0, (_Bool)0, {{0, 0}, 0UL, 0, 0, 0UL, 0, 0, 0, {(char)0, (char)0, (char)0, (char)0, (char)0, (char)0, (char)0, (char)0, (char)0, (char)0, (char)0, (char)0, (char)0, (char)0, (char)0, (char)0}, {0, {0, 0}, 0, 0, 0UL}}, 0UL, {{0L}, {0, 0}, 0, {0, {0, 0}, 0, 0, 0UL}}, {{{{{{0U}}, 0U, 0U, 0, {0, {0, 0}, 0, 0, 0UL}}}}, {0, 0}}, {0}, {0}, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0, 0, 0, 0, 0UL, 0UL, 0UL, 0UL, 0, 0}, 0, 0, 0, 0ULL, 0, {0, 0}, 0, {0, 0}, 0, {0}, 0U, 0U, {{{{{0U}}, 0U, 0U, 0, {0, {0, 0}, 0, 0, 0UL}}}}, {0, 0}, {0, {0, 0}, {{0}}}, 0, 0, 0, 0, (_Bool)0, (_Bool)0}, 0, 0, 0, 0, 0, 0, {'g', 's', 'p', 'c', 'a', ' ', 'm', 'a', 'i', 'n', ' ', 'd', 'r', 'i', 'v', 'e', 'r', '\000'}, 0, 0, 0, (unsigned short)0, 0UL, 0, {{{{{0U}}, 0U, 0U, 0, {0, {0, 0}, 0, 0, 0UL}}}}, {0, 0}, 0, 0ULL, & video_device_release_empty, & dev_ioctl_ops, {0UL, 0UL, 0UL}, {0UL, 0UL, 0UL}, 0}; [L8183] int ldv_retval_0 ; [L8185] int ldv_retval_1 ; [L9098] int INTERF_STATE = 0; [L9099] int SERIAL_STATE = 0; [L9100] void *usb_intfdata = 0; [L9101] struct urb *usb_urb = 0; [L9102] struct usb_device *usb_dev = 0; [L9103] int dev_counter = 0; [L9104] int completeFnIntCounter = 0; [L9105] int completeFnBulkCounter = 0; [L9106] void (*completeFnInt)(struct urb * ) ; [L9107] void (*completeFnBulk)(struct urb * ) ; VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8232] struct video_device *ldvarg0 ; [L8233] void *tmp ; [L8234] unsigned long ldvarg1 ; [L8235] unsigned long tmp___0 ; [L8236] struct vm_area_struct *ldvarg7 ; [L8237] void *tmp___1 ; [L8238] loff_t *ldvarg4 ; [L8239] void *tmp___2 ; [L8240] struct poll_table_struct *ldvarg3 ; [L8241] void *tmp___3 ; [L8242] size_t ldvarg5 ; [L8243] size_t tmp___4 ; [L8244] unsigned int ldvarg2 ; [L8245] unsigned int tmp___5 ; [L8246] char *ldvarg6 ; [L8247] void *tmp___6 ; [L8248] struct v4l2_jpegcompression *ldvarg18 ; [L8249] void *tmp___7 ; [L8250] void *ldvarg11 ; [L8251] void *tmp___8 ; [L8252] void *ldvarg32 ; [L8253] void *tmp___9 ; [L8254] void *ldvarg23 ; [L8255] void *tmp___10 ; [L8256] void *ldvarg43 ; [L8257] void *tmp___11 ; [L8258] void *ldvarg42 ; [L8259] void *tmp___12 ; [L8260] unsigned int ldvarg12 ; [L8261] unsigned int tmp___13 ; [L8262] struct v4l2_fmtdesc *ldvarg37 ; [L8263] void *tmp___14 ; [L8264] void *ldvarg29 ; [L8265] void *tmp___15 ; [L8266] struct v4l2_requestbuffers *ldvarg44 ; [L8267] void *tmp___16 ; [L8268] struct v4l2_frmivalenum *ldvarg24 ; [L8269] void *tmp___17 ; [L8270] void *ldvarg35 ; [L8271] void *tmp___18 ; [L8272] void *ldvarg38 ; [L8273] void *tmp___19 ; [L8274] void *ldvarg33 ; [L8275] void *tmp___20 ; [L8276] void *ldvarg16 ; [L8277] void *tmp___21 ; [L8278] void *ldvarg14 ; [L8279] void *tmp___22 ; [L8280] struct v4l2_dbg_chip_info *ldvarg34 ; [L8281] void *tmp___23 ; [L8282] struct v4l2_frmsizeenum *ldvarg28 ; [L8283] void *tmp___24 ; [L8284] enum v4l2_buf_type ldvarg39 ; [L8285] struct v4l2_jpegcompression *ldvarg20 ; [L8286] void *tmp___25 ; [L8287] unsigned int *ldvarg31 ; [L8288] void *tmp___26 ; [L8289] void *ldvarg41 ; [L8290] void *tmp___27 ; [L8291] enum v4l2_buf_type ldvarg8 ; [L8292] void *ldvarg13 ; [L8293] void *tmp___28 ; [L8294] struct v4l2_dbg_register *ldvarg10 ; [L8295] void *tmp___29 ; [L8296] void *ldvarg36 ; [L8297] void *tmp___30 ; [L8298] void *ldvarg40 ; [L8299] void *tmp___31 ; [L8300] void *ldvarg9 ; [L8301] void *tmp___32 ; [L8302] void *ldvarg45 ; [L8303] void *tmp___33 ; [L8304] struct v4l2_capability *ldvarg26 ; [L8305] void *tmp___34 ; [L8306] void *ldvarg27 ; [L8307] void *tmp___35 ; [L8308] struct v4l2_input *ldvarg15 ; [L8309] void *tmp___36 ; [L8310] void *ldvarg30 ; [L8311] void *tmp___37 ; [L8312] void *ldvarg21 ; [L8313] void *tmp___38 ; [L8314] void *ldvarg17 ; [L8315] void *tmp___39 ; [L8316] void *ldvarg25 ; [L8317] void *tmp___40 ; [L8318] struct v4l2_dbg_register *ldvarg22 ; [L8319] void *tmp___41 ; [L8320] void *ldvarg19 ; [L8321] void *tmp___42 ; [L8322] int tmp___43 ; [L8323] int tmp___44 ; [L8324] int tmp___45 ; [L8325] int tmp___46 ; [L8326] int tmp___47 ; [L8327] int tmp___48 ; VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg39={90:0}, ldvarg8={91:0}, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8329] CALL, EXPR ldv_zalloc(1800UL) VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=1800, \result={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=1800, tmp___0=1, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8329] RET, EXPR ldv_zalloc(1800UL) VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(1800UL)={0:0}, ldvarg39={90:0}, ldvarg8={91:0}, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8329] tmp = ldv_zalloc(1800UL) [L8330] ldvarg0 = (struct video_device *)tmp [L8331] tmp___0 = __VERIFIER_nondet_ulong() [L8332] ldvarg1 = tmp___0 VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=20485, ldvarg39={90:0}, ldvarg8={91:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=20485, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8333] CALL, EXPR ldv_zalloc(184UL) VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=184, \result={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=184, tmp___0=1, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8333] RET, EXPR ldv_zalloc(184UL) VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(184UL)={0:0}, ldvarg0={0:0}, ldvarg1=20485, ldvarg39={90:0}, ldvarg8={91:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=20485, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8333] tmp___1 = ldv_zalloc(184UL) [L8334] ldvarg7 = (struct vm_area_struct *)tmp___1 VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=20485, ldvarg39={90:0}, ldvarg7={0:0}, ldvarg8={91:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=20485, tmp___1={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8335] CALL, EXPR ldv_zalloc(8UL) VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=8, \result={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=8, tmp___0=1, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8335] RET, EXPR ldv_zalloc(8UL) VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(8UL)={0:0}, ldvarg0={0:0}, ldvarg1=20485, ldvarg39={90:0}, ldvarg7={0:0}, ldvarg8={91:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=20485, tmp___1={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8335] tmp___2 = ldv_zalloc(8UL) [L8336] ldvarg4 = (loff_t *)tmp___2 VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=20485, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=20485, tmp___1={0:0}, tmp___2={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8337] CALL, EXPR ldv_zalloc(16UL) VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=16, \result={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=16, tmp___0=1, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8337] RET, EXPR ldv_zalloc(16UL) VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(16UL)={0:0}, ldvarg0={0:0}, ldvarg1=20485, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=20485, tmp___1={0:0}, tmp___2={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8337] tmp___3 = ldv_zalloc(16UL) [L8338] ldvarg3 = (struct poll_table_struct *)tmp___3 [L8339] tmp___4 = __VERIFIER_nondet_size_t() [L8340] ldvarg5 = tmp___4 [L8341] tmp___5 = __VERIFIER_nondet_uint() [L8342] ldvarg2 = tmp___5 VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=20485, ldvarg2=20486, ldvarg3={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg5=0, ldvarg7={0:0}, ldvarg8={91:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=20485, tmp___1={0:0}, tmp___2={0:0}, tmp___3={0:0}, tmp___4=0, tmp___5=20486, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8343] CALL, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=1, \result={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=1, tmp___0=1, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8343] RET, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(1UL)={0:0}, ldvarg0={0:0}, ldvarg1=20485, ldvarg2=20486, ldvarg3={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg5=0, ldvarg7={0:0}, ldvarg8={91:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=20485, tmp___1={0:0}, tmp___2={0:0}, tmp___3={0:0}, tmp___4=0, tmp___5=20486, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8343] tmp___6 = ldv_zalloc(1UL) [L8344] ldvarg6 = (char *)tmp___6 VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=20485, ldvarg2=20486, ldvarg3={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=20485, tmp___1={0:0}, tmp___2={0:0}, tmp___3={0:0}, tmp___4=0, tmp___5=20486, tmp___6={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8345] CALL, EXPR ldv_zalloc(140UL) VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=140, \result={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=140, tmp___0=1, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8345] RET, EXPR ldv_zalloc(140UL) VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(140UL)={0:0}, ldvarg0={0:0}, ldvarg1=20485, ldvarg2=20486, ldvarg3={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=20485, tmp___1={0:0}, tmp___2={0:0}, tmp___3={0:0}, tmp___4=0, tmp___5=20486, tmp___6={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8345] tmp___7 = ldv_zalloc(140UL) [L8346] ldvarg18 = (struct v4l2_jpegcompression *)tmp___7 VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=20485, ldvarg18={0:0}, ldvarg2=20486, ldvarg3={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=20485, tmp___1={0:0}, tmp___2={0:0}, tmp___3={0:0}, tmp___4=0, tmp___5=20486, tmp___6={0:0}, tmp___7={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8347] CALL, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=1, \result={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=1, tmp___0=1, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8347] RET, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(1UL)={0:0}, ldvarg0={0:0}, ldvarg1=20485, ldvarg18={0:0}, ldvarg2=20486, ldvarg3={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=20485, tmp___1={0:0}, tmp___2={0:0}, tmp___3={0:0}, tmp___4=0, tmp___5=20486, tmp___6={0:0}, tmp___7={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8347] tmp___8 = ldv_zalloc(1UL) [L8348] ldvarg11 = tmp___8 VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=20485, ldvarg11={0:0}, ldvarg18={0:0}, ldvarg2=20486, ldvarg3={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=20485, tmp___1={0:0}, tmp___2={0:0}, tmp___3={0:0}, tmp___4=0, tmp___5=20486, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8349] CALL, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=1, \result={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=1, tmp___0=1, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8349] RET, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(1UL)={0:0}, ldvarg0={0:0}, ldvarg1=20485, ldvarg11={0:0}, ldvarg18={0:0}, ldvarg2=20486, ldvarg3={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=20485, tmp___1={0:0}, tmp___2={0:0}, tmp___3={0:0}, tmp___4=0, tmp___5=20486, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8349] tmp___9 = ldv_zalloc(1UL) [L8350] ldvarg32 = tmp___9 VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=20485, ldvarg11={0:0}, ldvarg18={0:0}, ldvarg2=20486, ldvarg3={0:0}, ldvarg32={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=20485, tmp___1={0:0}, tmp___2={0:0}, tmp___3={0:0}, tmp___4=0, tmp___5=20486, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8351] CALL, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=1, \result={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=1, tmp___0=1, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8351] RET, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(1UL)={0:0}, ldvarg0={0:0}, ldvarg1=20485, ldvarg11={0:0}, ldvarg18={0:0}, ldvarg2=20486, ldvarg3={0:0}, ldvarg32={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=20485, tmp___1={0:0}, tmp___2={0:0}, tmp___3={0:0}, tmp___4=0, tmp___5=20486, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8351] tmp___10 = ldv_zalloc(1UL) [L8352] ldvarg23 = tmp___10 VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=20485, ldvarg11={0:0}, ldvarg18={0:0}, ldvarg2=20486, ldvarg23={0:0}, ldvarg3={0:0}, ldvarg32={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=20485, tmp___1={0:0}, tmp___10={0:0}, tmp___2={0:0}, tmp___3={0:0}, tmp___4=0, tmp___5=20486, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8353] CALL, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=1, \result={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=1, tmp___0=1, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8353] RET, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(1UL)={0:0}, ldvarg0={0:0}, ldvarg1=20485, ldvarg11={0:0}, ldvarg18={0:0}, ldvarg2=20486, ldvarg23={0:0}, ldvarg3={0:0}, ldvarg32={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=20485, tmp___1={0:0}, tmp___10={0:0}, tmp___2={0:0}, tmp___3={0:0}, tmp___4=0, tmp___5=20486, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8353] tmp___11 = ldv_zalloc(1UL) [L8354] ldvarg43 = tmp___11 VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=20485, ldvarg11={0:0}, ldvarg18={0:0}, ldvarg2=20486, ldvarg23={0:0}, ldvarg3={0:0}, ldvarg32={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg43={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=20485, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___2={0:0}, tmp___3={0:0}, tmp___4=0, tmp___5=20486, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8355] CALL, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=1, \result={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=1, tmp___0=1, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8355] RET, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(1UL)={0:0}, ldvarg0={0:0}, ldvarg1=20485, ldvarg11={0:0}, ldvarg18={0:0}, ldvarg2=20486, ldvarg23={0:0}, ldvarg3={0:0}, ldvarg32={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg43={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=20485, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___2={0:0}, tmp___3={0:0}, tmp___4=0, tmp___5=20486, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8355] tmp___12 = ldv_zalloc(1UL) [L8356] ldvarg42 = tmp___12 [L8357] tmp___13 = __VERIFIER_nondet_uint() [L8358] ldvarg12 = tmp___13 VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=20485, ldvarg11={0:0}, ldvarg12=20482, ldvarg18={0:0}, ldvarg2=20486, ldvarg23={0:0}, ldvarg3={0:0}, ldvarg32={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=20485, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=20482, tmp___2={0:0}, tmp___3={0:0}, tmp___4=0, tmp___5=20486, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8359] CALL, EXPR ldv_zalloc(64UL) VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=64, \result={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=64, tmp___0=1, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8359] RET, EXPR ldv_zalloc(64UL) VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(64UL)={0:0}, ldvarg0={0:0}, ldvarg1=20485, ldvarg11={0:0}, ldvarg12=20482, ldvarg18={0:0}, ldvarg2=20486, ldvarg23={0:0}, ldvarg3={0:0}, ldvarg32={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=20485, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=20482, tmp___2={0:0}, tmp___3={0:0}, tmp___4=0, tmp___5=20486, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8359] tmp___14 = ldv_zalloc(64UL) [L8360] ldvarg37 = (struct v4l2_fmtdesc *)tmp___14 VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=20485, ldvarg11={0:0}, ldvarg12=20482, ldvarg18={0:0}, ldvarg2=20486, ldvarg23={0:0}, ldvarg3={0:0}, ldvarg32={0:0}, ldvarg37={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=20485, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=20482, tmp___14={0:0}, tmp___2={0:0}, tmp___3={0:0}, tmp___4=0, tmp___5=20486, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8361] CALL, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=1, \result={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=1, tmp___0=1, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8361] RET, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(1UL)={0:0}, ldvarg0={0:0}, ldvarg1=20485, ldvarg11={0:0}, ldvarg12=20482, ldvarg18={0:0}, ldvarg2=20486, ldvarg23={0:0}, ldvarg3={0:0}, ldvarg32={0:0}, ldvarg37={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=20485, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=20482, tmp___14={0:0}, tmp___2={0:0}, tmp___3={0:0}, tmp___4=0, tmp___5=20486, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8361] tmp___15 = ldv_zalloc(1UL) [L8362] ldvarg29 = tmp___15 VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=20485, ldvarg11={0:0}, ldvarg12=20482, ldvarg18={0:0}, ldvarg2=20486, ldvarg23={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg32={0:0}, ldvarg37={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=20485, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=20482, tmp___14={0:0}, tmp___15={0:0}, tmp___2={0:0}, tmp___3={0:0}, tmp___4=0, tmp___5=20486, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8363] CALL, EXPR ldv_zalloc(20UL) VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=20, \result={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=20, tmp___0=1, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8363] RET, EXPR ldv_zalloc(20UL) VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(20UL)={0:0}, ldvarg0={0:0}, ldvarg1=20485, ldvarg11={0:0}, ldvarg12=20482, ldvarg18={0:0}, ldvarg2=20486, ldvarg23={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg32={0:0}, ldvarg37={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=20485, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=20482, tmp___14={0:0}, tmp___15={0:0}, tmp___2={0:0}, tmp___3={0:0}, tmp___4=0, tmp___5=20486, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8363] tmp___16 = ldv_zalloc(20UL) [L8364] ldvarg44 = (struct v4l2_requestbuffers *)tmp___16 VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=20485, ldvarg11={0:0}, ldvarg12=20482, ldvarg18={0:0}, ldvarg2=20486, ldvarg23={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg32={0:0}, ldvarg37={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=20485, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=20482, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___2={0:0}, tmp___3={0:0}, tmp___4=0, tmp___5=20486, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8365] CALL, EXPR ldv_zalloc(52UL) VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=52, \result={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=52, tmp___0=1, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8365] RET, EXPR ldv_zalloc(52UL) VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(52UL)={0:0}, ldvarg0={0:0}, ldvarg1=20485, ldvarg11={0:0}, ldvarg12=20482, ldvarg18={0:0}, ldvarg2=20486, ldvarg23={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg32={0:0}, ldvarg37={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=20485, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=20482, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___2={0:0}, tmp___3={0:0}, tmp___4=0, tmp___5=20486, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8365] tmp___17 = ldv_zalloc(52UL) [L8366] ldvarg24 = (struct v4l2_frmivalenum *)tmp___17 VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=20485, ldvarg11={0:0}, ldvarg12=20482, ldvarg18={0:0}, ldvarg2=20486, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg32={0:0}, ldvarg37={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=20485, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=20482, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___2={0:0}, tmp___3={0:0}, tmp___4=0, tmp___5=20486, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8367] CALL, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=1, \result={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=1, tmp___0=1, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8367] RET, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(1UL)={0:0}, ldvarg0={0:0}, ldvarg1=20485, ldvarg11={0:0}, ldvarg12=20482, ldvarg18={0:0}, ldvarg2=20486, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg32={0:0}, ldvarg37={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=20485, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=20482, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___2={0:0}, tmp___3={0:0}, tmp___4=0, tmp___5=20486, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8367] tmp___18 = ldv_zalloc(1UL) [L8368] ldvarg35 = tmp___18 VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=20485, ldvarg11={0:0}, ldvarg12=20482, ldvarg18={0:0}, ldvarg2=20486, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg32={0:0}, ldvarg35={0:0}, ldvarg37={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=20485, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=20482, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___2={0:0}, tmp___3={0:0}, tmp___4=0, tmp___5=20486, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8369] CALL, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=1, \result={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=1, tmp___0=1, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8369] RET, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(1UL)={0:0}, ldvarg0={0:0}, ldvarg1=20485, ldvarg11={0:0}, ldvarg12=20482, ldvarg18={0:0}, ldvarg2=20486, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg32={0:0}, ldvarg35={0:0}, ldvarg37={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=20485, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=20482, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___2={0:0}, tmp___3={0:0}, tmp___4=0, tmp___5=20486, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8369] tmp___19 = ldv_zalloc(1UL) [L8370] ldvarg38 = tmp___19 VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=20485, ldvarg11={0:0}, ldvarg12=20482, ldvarg18={0:0}, ldvarg2=20486, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg32={0:0}, ldvarg35={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=20485, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=20482, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___3={0:0}, tmp___4=0, tmp___5=20486, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8371] CALL, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=1, \result={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=1, tmp___0=1, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8371] RET, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(1UL)={0:0}, ldvarg0={0:0}, ldvarg1=20485, ldvarg11={0:0}, ldvarg12=20482, ldvarg18={0:0}, ldvarg2=20486, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg32={0:0}, ldvarg35={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=20485, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=20482, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___3={0:0}, tmp___4=0, tmp___5=20486, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8371] tmp___20 = ldv_zalloc(1UL) [L8372] ldvarg33 = tmp___20 VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=20485, ldvarg11={0:0}, ldvarg12=20482, ldvarg18={0:0}, ldvarg2=20486, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg35={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=20485, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=20482, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___3={0:0}, tmp___4=0, tmp___5=20486, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8373] CALL, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=1, \result={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=1, tmp___0=1, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8373] RET, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(1UL)={0:0}, ldvarg0={0:0}, ldvarg1=20485, ldvarg11={0:0}, ldvarg12=20482, ldvarg18={0:0}, ldvarg2=20486, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg35={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=20485, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=20482, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___3={0:0}, tmp___4=0, tmp___5=20486, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8373] tmp___21 = ldv_zalloc(1UL) [L8374] ldvarg16 = tmp___21 VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=20485, ldvarg11={0:0}, ldvarg12=20482, ldvarg16={0:0}, ldvarg18={0:0}, ldvarg2=20486, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg35={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=20485, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=20482, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___3={0:0}, tmp___4=0, tmp___5=20486, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8375] CALL, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=1, \result={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=1, tmp___0=1, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8375] RET, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(1UL)={0:0}, ldvarg0={0:0}, ldvarg1=20485, ldvarg11={0:0}, ldvarg12=20482, ldvarg16={0:0}, ldvarg18={0:0}, ldvarg2=20486, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg35={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=20485, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=20482, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___3={0:0}, tmp___4=0, tmp___5=20486, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8375] tmp___22 = ldv_zalloc(1UL) [L8376] ldvarg14 = tmp___22 VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=20485, ldvarg11={0:0}, ldvarg12=20482, ldvarg14={0:0}, ldvarg16={0:0}, ldvarg18={0:0}, ldvarg2=20486, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg35={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=20485, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=20482, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___3={0:0}, tmp___4=0, tmp___5=20486, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8377] CALL, EXPR ldv_zalloc(200UL) VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=200, \result={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=200, tmp___0=1, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8377] RET, EXPR ldv_zalloc(200UL) VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(200UL)={0:0}, ldvarg0={0:0}, ldvarg1=20485, ldvarg11={0:0}, ldvarg12=20482, ldvarg14={0:0}, ldvarg16={0:0}, ldvarg18={0:0}, ldvarg2=20486, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg35={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=20485, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=20482, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___3={0:0}, tmp___4=0, tmp___5=20486, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8377] tmp___23 = ldv_zalloc(200UL) [L8378] ldvarg34 = (struct v4l2_dbg_chip_info *)tmp___23 VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=20485, ldvarg11={0:0}, ldvarg12=20482, ldvarg14={0:0}, ldvarg16={0:0}, ldvarg18={0:0}, ldvarg2=20486, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=20485, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=20482, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___3={0:0}, tmp___4=0, tmp___5=20486, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8379] CALL, EXPR ldv_zalloc(44UL) VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=44, \result={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=44, tmp___0=1, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8379] RET, EXPR ldv_zalloc(44UL) VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(44UL)={0:0}, ldvarg0={0:0}, ldvarg1=20485, ldvarg11={0:0}, ldvarg12=20482, ldvarg14={0:0}, ldvarg16={0:0}, ldvarg18={0:0}, ldvarg2=20486, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=20485, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=20482, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___3={0:0}, tmp___4=0, tmp___5=20486, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8379] tmp___24 = ldv_zalloc(44UL) [L8380] ldvarg28 = (struct v4l2_frmsizeenum *)tmp___24 VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=20485, ldvarg11={0:0}, ldvarg12=20482, ldvarg14={0:0}, ldvarg16={0:0}, ldvarg18={0:0}, ldvarg2=20486, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=20485, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=20482, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___3={0:0}, tmp___4=0, tmp___5=20486, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8381] CALL, EXPR ldv_zalloc(140UL) VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=140, \result={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=140, tmp___0=1, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8381] RET, EXPR ldv_zalloc(140UL) VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(140UL)={0:0}, ldvarg0={0:0}, ldvarg1=20485, ldvarg11={0:0}, ldvarg12=20482, ldvarg14={0:0}, ldvarg16={0:0}, ldvarg18={0:0}, ldvarg2=20486, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=20485, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=20482, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___3={0:0}, tmp___4=0, tmp___5=20486, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8381] tmp___25 = ldv_zalloc(140UL) [L8382] ldvarg20 = (struct v4l2_jpegcompression *)tmp___25 VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=20485, ldvarg11={0:0}, ldvarg12=20482, ldvarg14={0:0}, ldvarg16={0:0}, ldvarg18={0:0}, ldvarg2=20486, ldvarg20={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=20485, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=20482, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___3={0:0}, tmp___4=0, tmp___5=20486, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8383] CALL, EXPR ldv_zalloc(4UL) VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=4, \result={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=4, tmp___0=1, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8383] RET, EXPR ldv_zalloc(4UL) VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(4UL)={0:0}, ldvarg0={0:0}, ldvarg1=20485, ldvarg11={0:0}, ldvarg12=20482, ldvarg14={0:0}, ldvarg16={0:0}, ldvarg18={0:0}, ldvarg2=20486, ldvarg20={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=20485, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=20482, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___3={0:0}, tmp___4=0, tmp___5=20486, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8383] tmp___26 = ldv_zalloc(4UL) [L8384] ldvarg31 = (unsigned int *)tmp___26 VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=20485, ldvarg11={0:0}, ldvarg12=20482, ldvarg14={0:0}, ldvarg16={0:0}, ldvarg18={0:0}, ldvarg2=20486, ldvarg20={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=20485, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=20482, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___3={0:0}, tmp___4=0, tmp___5=20486, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8385] CALL, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=1, \result={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=1, tmp___0=1, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8385] RET, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(1UL)={0:0}, ldvarg0={0:0}, ldvarg1=20485, ldvarg11={0:0}, ldvarg12=20482, ldvarg14={0:0}, ldvarg16={0:0}, ldvarg18={0:0}, ldvarg2=20486, ldvarg20={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=20485, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=20482, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___3={0:0}, tmp___4=0, tmp___5=20486, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8385] tmp___27 = ldv_zalloc(1UL) [L8386] ldvarg41 = tmp___27 VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=20485, ldvarg11={0:0}, ldvarg12=20482, ldvarg14={0:0}, ldvarg16={0:0}, ldvarg18={0:0}, ldvarg2=20486, ldvarg20={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=20485, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=20482, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___3={0:0}, tmp___4=0, tmp___5=20486, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8387] CALL, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=1, \result={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=1, tmp___0=1, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8387] RET, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(1UL)={0:0}, ldvarg0={0:0}, ldvarg1=20485, ldvarg11={0:0}, ldvarg12=20482, ldvarg14={0:0}, ldvarg16={0:0}, ldvarg18={0:0}, ldvarg2=20486, ldvarg20={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=20485, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=20482, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___3={0:0}, tmp___4=0, tmp___5=20486, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8387] tmp___28 = ldv_zalloc(1UL) [L8388] ldvarg13 = tmp___28 VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=20485, ldvarg11={0:0}, ldvarg12=20482, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg16={0:0}, ldvarg18={0:0}, ldvarg2=20486, ldvarg20={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=20485, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=20482, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___3={0:0}, tmp___4=0, tmp___5=20486, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8389] CALL, EXPR ldv_zalloc(56UL) VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=56, \result={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=56, tmp___0=1, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8389] RET, EXPR ldv_zalloc(56UL) VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(56UL)={0:0}, ldvarg0={0:0}, ldvarg1=20485, ldvarg11={0:0}, ldvarg12=20482, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg16={0:0}, ldvarg18={0:0}, ldvarg2=20486, ldvarg20={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=20485, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=20482, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___3={0:0}, tmp___4=0, tmp___5=20486, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8389] tmp___29 = ldv_zalloc(56UL) [L8390] ldvarg10 = (struct v4l2_dbg_register *)tmp___29 VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=20485, ldvarg10={0:0}, ldvarg11={0:0}, ldvarg12=20482, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg16={0:0}, ldvarg18={0:0}, ldvarg2=20486, ldvarg20={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=20485, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=20482, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___29={0:0}, tmp___3={0:0}, tmp___4=0, tmp___5=20486, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8391] CALL, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=1, \result={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=1, tmp___0=1, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8391] RET, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(1UL)={0:0}, ldvarg0={0:0}, ldvarg1=20485, ldvarg10={0:0}, ldvarg11={0:0}, ldvarg12=20482, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg16={0:0}, ldvarg18={0:0}, ldvarg2=20486, ldvarg20={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=20485, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=20482, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___29={0:0}, tmp___3={0:0}, tmp___4=0, tmp___5=20486, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8391] tmp___30 = ldv_zalloc(1UL) [L8392] ldvarg36 = tmp___30 VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=20485, ldvarg10={0:0}, ldvarg11={0:0}, ldvarg12=20482, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg16={0:0}, ldvarg18={0:0}, ldvarg2=20486, ldvarg20={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg36={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=20485, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=20482, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___29={0:0}, tmp___3={0:0}, tmp___30={0:0}, tmp___4=0, tmp___5=20486, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8393] CALL, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=1, \result={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=1, tmp___0=1, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8393] RET, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(1UL)={0:0}, ldvarg0={0:0}, ldvarg1=20485, ldvarg10={0:0}, ldvarg11={0:0}, ldvarg12=20482, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg16={0:0}, ldvarg18={0:0}, ldvarg2=20486, ldvarg20={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg36={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=20485, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=20482, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___29={0:0}, tmp___3={0:0}, tmp___30={0:0}, tmp___4=0, tmp___5=20486, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8393] tmp___31 = ldv_zalloc(1UL) [L8394] ldvarg40 = tmp___31 VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=20485, ldvarg10={0:0}, ldvarg11={0:0}, ldvarg12=20482, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg16={0:0}, ldvarg18={0:0}, ldvarg2=20486, ldvarg20={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg36={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg40={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=20485, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=20482, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___29={0:0}, tmp___3={0:0}, tmp___30={0:0}, tmp___31={0:0}, tmp___4=0, tmp___5=20486, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8395] CALL, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=1, \result={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=1, tmp___0=1, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8395] RET, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(1UL)={0:0}, ldvarg0={0:0}, ldvarg1=20485, ldvarg10={0:0}, ldvarg11={0:0}, ldvarg12=20482, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg16={0:0}, ldvarg18={0:0}, ldvarg2=20486, ldvarg20={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg36={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg40={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=20485, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=20482, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___29={0:0}, tmp___3={0:0}, tmp___30={0:0}, tmp___31={0:0}, tmp___4=0, tmp___5=20486, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8395] tmp___32 = ldv_zalloc(1UL) [L8396] ldvarg9 = tmp___32 VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=20485, ldvarg10={0:0}, ldvarg11={0:0}, ldvarg12=20482, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg16={0:0}, ldvarg18={0:0}, ldvarg2=20486, ldvarg20={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg36={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg40={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ldvarg9={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=20485, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=20482, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___29={0:0}, tmp___3={0:0}, tmp___30={0:0}, tmp___31={0:0}, tmp___32={0:0}, tmp___4=0, tmp___5=20486, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8397] CALL, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=1, \result={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=1, tmp___0=1, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8397] RET, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(1UL)={0:0}, ldvarg0={0:0}, ldvarg1=20485, ldvarg10={0:0}, ldvarg11={0:0}, ldvarg12=20482, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg16={0:0}, ldvarg18={0:0}, ldvarg2=20486, ldvarg20={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg36={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg40={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ldvarg9={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=20485, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=20482, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___29={0:0}, tmp___3={0:0}, tmp___30={0:0}, tmp___31={0:0}, tmp___32={0:0}, tmp___4=0, tmp___5=20486, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8397] tmp___33 = ldv_zalloc(1UL) [L8398] ldvarg45 = tmp___33 VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=20485, ldvarg10={0:0}, ldvarg11={0:0}, ldvarg12=20482, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg16={0:0}, ldvarg18={0:0}, ldvarg2=20486, ldvarg20={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg36={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg40={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg45={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ldvarg9={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=20485, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=20482, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___29={0:0}, tmp___3={0:0}, tmp___30={0:0}, tmp___31={0:0}, tmp___32={0:0}, tmp___33={0:0}, tmp___4=0, tmp___5=20486, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8399] CALL, EXPR ldv_zalloc(104UL) VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=104, \result={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=104, tmp___0=1, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8399] RET, EXPR ldv_zalloc(104UL) VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(104UL)={0:0}, ldvarg0={0:0}, ldvarg1=20485, ldvarg10={0:0}, ldvarg11={0:0}, ldvarg12=20482, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg16={0:0}, ldvarg18={0:0}, ldvarg2=20486, ldvarg20={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg36={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg40={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg45={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ldvarg9={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=20485, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=20482, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___29={0:0}, tmp___3={0:0}, tmp___30={0:0}, tmp___31={0:0}, tmp___32={0:0}, tmp___33={0:0}, tmp___4=0, tmp___5=20486, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8399] tmp___34 = ldv_zalloc(104UL) [L8400] ldvarg26 = (struct v4l2_capability *)tmp___34 VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=20485, ldvarg10={0:0}, ldvarg11={0:0}, ldvarg12=20482, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg16={0:0}, ldvarg18={0:0}, ldvarg2=20486, ldvarg20={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg26={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg36={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg40={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg45={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ldvarg9={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=20485, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=20482, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___29={0:0}, tmp___3={0:0}, tmp___30={0:0}, tmp___31={0:0}, tmp___32={0:0}, tmp___33={0:0}, tmp___34={0:0}, tmp___4=0, tmp___5=20486, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8401] CALL, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=1, \result={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=1, tmp___0=1, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8401] RET, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(1UL)={0:0}, ldvarg0={0:0}, ldvarg1=20485, ldvarg10={0:0}, ldvarg11={0:0}, ldvarg12=20482, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg16={0:0}, ldvarg18={0:0}, ldvarg2=20486, ldvarg20={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg26={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg36={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg40={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg45={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ldvarg9={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=20485, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=20482, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___29={0:0}, tmp___3={0:0}, tmp___30={0:0}, tmp___31={0:0}, tmp___32={0:0}, tmp___33={0:0}, tmp___34={0:0}, tmp___4=0, tmp___5=20486, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8401] tmp___35 = ldv_zalloc(1UL) [L8402] ldvarg27 = tmp___35 VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=20485, ldvarg10={0:0}, ldvarg11={0:0}, ldvarg12=20482, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg16={0:0}, ldvarg18={0:0}, ldvarg2=20486, ldvarg20={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg26={0:0}, ldvarg27={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg36={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg40={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg45={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ldvarg9={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=20485, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=20482, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___29={0:0}, tmp___3={0:0}, tmp___30={0:0}, tmp___31={0:0}, tmp___32={0:0}, tmp___33={0:0}, tmp___34={0:0}, tmp___35={0:0}, tmp___4=0, tmp___5=20486, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8403] CALL, EXPR ldv_zalloc(80UL) VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=80, \result={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=80, tmp___0=1, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8403] RET, EXPR ldv_zalloc(80UL) VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(80UL)={0:0}, ldvarg0={0:0}, ldvarg1=20485, ldvarg10={0:0}, ldvarg11={0:0}, ldvarg12=20482, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg16={0:0}, ldvarg18={0:0}, ldvarg2=20486, ldvarg20={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg26={0:0}, ldvarg27={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg36={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg40={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg45={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ldvarg9={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=20485, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=20482, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___29={0:0}, tmp___3={0:0}, tmp___30={0:0}, tmp___31={0:0}, tmp___32={0:0}, tmp___33={0:0}, tmp___34={0:0}, tmp___35={0:0}, tmp___4=0, tmp___5=20486, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8403] tmp___36 = ldv_zalloc(80UL) [L8404] ldvarg15 = (struct v4l2_input *)tmp___36 VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=20485, ldvarg10={0:0}, ldvarg11={0:0}, ldvarg12=20482, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg15={0:0}, ldvarg16={0:0}, ldvarg18={0:0}, ldvarg2=20486, ldvarg20={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg26={0:0}, ldvarg27={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg36={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg40={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg45={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ldvarg9={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=20485, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=20482, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___29={0:0}, tmp___3={0:0}, tmp___30={0:0}, tmp___31={0:0}, tmp___32={0:0}, tmp___33={0:0}, tmp___34={0:0}, tmp___35={0:0}, tmp___36={0:0}, tmp___4=0, tmp___5=20486, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8405] CALL, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=1, \result={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=1, tmp___0=1, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8405] RET, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(1UL)={0:0}, ldvarg0={0:0}, ldvarg1=20485, ldvarg10={0:0}, ldvarg11={0:0}, ldvarg12=20482, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg15={0:0}, ldvarg16={0:0}, ldvarg18={0:0}, ldvarg2=20486, ldvarg20={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg26={0:0}, ldvarg27={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg36={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg40={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg45={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ldvarg9={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=20485, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=20482, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___29={0:0}, tmp___3={0:0}, tmp___30={0:0}, tmp___31={0:0}, tmp___32={0:0}, tmp___33={0:0}, tmp___34={0:0}, tmp___35={0:0}, tmp___36={0:0}, tmp___4=0, tmp___5=20486, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8405] tmp___37 = ldv_zalloc(1UL) [L8406] ldvarg30 = tmp___37 VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=20485, ldvarg10={0:0}, ldvarg11={0:0}, ldvarg12=20482, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg15={0:0}, ldvarg16={0:0}, ldvarg18={0:0}, ldvarg2=20486, ldvarg20={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg26={0:0}, ldvarg27={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg30={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg36={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg40={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg45={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ldvarg9={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=20485, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=20482, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___29={0:0}, tmp___3={0:0}, tmp___30={0:0}, tmp___31={0:0}, tmp___32={0:0}, tmp___33={0:0}, tmp___34={0:0}, tmp___35={0:0}, tmp___36={0:0}, tmp___37={0:0}, tmp___4=0, tmp___5=20486, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8407] CALL, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=1, \result={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=1, tmp___0=1, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8407] RET, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(1UL)={0:0}, ldvarg0={0:0}, ldvarg1=20485, ldvarg10={0:0}, ldvarg11={0:0}, ldvarg12=20482, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg15={0:0}, ldvarg16={0:0}, ldvarg18={0:0}, ldvarg2=20486, ldvarg20={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg26={0:0}, ldvarg27={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg30={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg36={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg40={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg45={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ldvarg9={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=20485, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=20482, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___29={0:0}, tmp___3={0:0}, tmp___30={0:0}, tmp___31={0:0}, tmp___32={0:0}, tmp___33={0:0}, tmp___34={0:0}, tmp___35={0:0}, tmp___36={0:0}, tmp___37={0:0}, tmp___4=0, tmp___5=20486, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8407] tmp___38 = ldv_zalloc(1UL) [L8408] ldvarg21 = tmp___38 VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=20485, ldvarg10={0:0}, ldvarg11={0:0}, ldvarg12=20482, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg15={0:0}, ldvarg16={0:0}, ldvarg18={0:0}, ldvarg2=20486, ldvarg20={0:0}, ldvarg21={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg26={0:0}, ldvarg27={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg30={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg36={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg40={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg45={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ldvarg9={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=20485, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=20482, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___29={0:0}, tmp___3={0:0}, tmp___30={0:0}, tmp___31={0:0}, tmp___32={0:0}, tmp___33={0:0}, tmp___34={0:0}, tmp___35={0:0}, tmp___36={0:0}, tmp___37={0:0}, tmp___38={0:0}, tmp___4=0, tmp___5=20486, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8409] CALL, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=1, \result={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=1, tmp___0=1, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8409] RET, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(1UL)={0:0}, ldvarg0={0:0}, ldvarg1=20485, ldvarg10={0:0}, ldvarg11={0:0}, ldvarg12=20482, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg15={0:0}, ldvarg16={0:0}, ldvarg18={0:0}, ldvarg2=20486, ldvarg20={0:0}, ldvarg21={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg26={0:0}, ldvarg27={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg30={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg36={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg40={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg45={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ldvarg9={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=20485, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=20482, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___29={0:0}, tmp___3={0:0}, tmp___30={0:0}, tmp___31={0:0}, tmp___32={0:0}, tmp___33={0:0}, tmp___34={0:0}, tmp___35={0:0}, tmp___36={0:0}, tmp___37={0:0}, tmp___38={0:0}, tmp___4=0, tmp___5=20486, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8409] tmp___39 = ldv_zalloc(1UL) [L8410] ldvarg17 = tmp___39 VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=20485, ldvarg10={0:0}, ldvarg11={0:0}, ldvarg12=20482, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg15={0:0}, ldvarg16={0:0}, ldvarg17={0:0}, ldvarg18={0:0}, ldvarg2=20486, ldvarg20={0:0}, ldvarg21={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg26={0:0}, ldvarg27={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg30={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg36={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg40={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg45={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ldvarg9={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=20485, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=20482, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___29={0:0}, tmp___3={0:0}, tmp___30={0:0}, tmp___31={0:0}, tmp___32={0:0}, tmp___33={0:0}, tmp___34={0:0}, tmp___35={0:0}, tmp___36={0:0}, tmp___37={0:0}, tmp___38={0:0}, tmp___39={0:0}, tmp___4=0, tmp___5=20486, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8411] CALL, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=1, \result={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=1, tmp___0=1, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8411] RET, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(1UL)={0:0}, ldvarg0={0:0}, ldvarg1=20485, ldvarg10={0:0}, ldvarg11={0:0}, ldvarg12=20482, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg15={0:0}, ldvarg16={0:0}, ldvarg17={0:0}, ldvarg18={0:0}, ldvarg2=20486, ldvarg20={0:0}, ldvarg21={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg26={0:0}, ldvarg27={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg30={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg36={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg40={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg45={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ldvarg9={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=20485, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=20482, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___29={0:0}, tmp___3={0:0}, tmp___30={0:0}, tmp___31={0:0}, tmp___32={0:0}, tmp___33={0:0}, tmp___34={0:0}, tmp___35={0:0}, tmp___36={0:0}, tmp___37={0:0}, tmp___38={0:0}, tmp___39={0:0}, tmp___4=0, tmp___5=20486, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8411] tmp___40 = ldv_zalloc(1UL) [L8412] ldvarg25 = tmp___40 VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=20485, ldvarg10={0:0}, ldvarg11={0:0}, ldvarg12=20482, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg15={0:0}, ldvarg16={0:0}, ldvarg17={0:0}, ldvarg18={0:0}, ldvarg2=20486, ldvarg20={0:0}, ldvarg21={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg25={0:0}, ldvarg26={0:0}, ldvarg27={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg30={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg36={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg40={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg45={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ldvarg9={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=20485, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=20482, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___29={0:0}, tmp___3={0:0}, tmp___30={0:0}, tmp___31={0:0}, tmp___32={0:0}, tmp___33={0:0}, tmp___34={0:0}, tmp___35={0:0}, tmp___36={0:0}, tmp___37={0:0}, tmp___38={0:0}, tmp___39={0:0}, tmp___4=0, tmp___40={0:0}, tmp___5=20486, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8413] CALL, EXPR ldv_zalloc(56UL) VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=56, \result={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=56, tmp___0=1, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8413] RET, EXPR ldv_zalloc(56UL) VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(56UL)={0:0}, ldvarg0={0:0}, ldvarg1=20485, ldvarg10={0:0}, ldvarg11={0:0}, ldvarg12=20482, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg15={0:0}, ldvarg16={0:0}, ldvarg17={0:0}, ldvarg18={0:0}, ldvarg2=20486, ldvarg20={0:0}, ldvarg21={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg25={0:0}, ldvarg26={0:0}, ldvarg27={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg30={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg36={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg40={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg45={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ldvarg9={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=20485, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=20482, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___29={0:0}, tmp___3={0:0}, tmp___30={0:0}, tmp___31={0:0}, tmp___32={0:0}, tmp___33={0:0}, tmp___34={0:0}, tmp___35={0:0}, tmp___36={0:0}, tmp___37={0:0}, tmp___38={0:0}, tmp___39={0:0}, tmp___4=0, tmp___40={0:0}, tmp___5=20486, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8413] tmp___41 = ldv_zalloc(56UL) [L8414] ldvarg22 = (struct v4l2_dbg_register *)tmp___41 VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=20485, ldvarg10={0:0}, ldvarg11={0:0}, ldvarg12=20482, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg15={0:0}, ldvarg16={0:0}, ldvarg17={0:0}, ldvarg18={0:0}, ldvarg2=20486, ldvarg20={0:0}, ldvarg21={0:0}, ldvarg22={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg25={0:0}, ldvarg26={0:0}, ldvarg27={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg30={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg36={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg40={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg45={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ldvarg9={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=20485, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=20482, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___29={0:0}, tmp___3={0:0}, tmp___30={0:0}, tmp___31={0:0}, tmp___32={0:0}, tmp___33={0:0}, tmp___34={0:0}, tmp___35={0:0}, tmp___36={0:0}, tmp___37={0:0}, tmp___38={0:0}, tmp___39={0:0}, tmp___4=0, tmp___40={0:0}, tmp___41={0:0}, tmp___5=20486, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8415] CALL, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=1, \result={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=1, tmp___0=1, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8415] RET, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(1UL)={0:0}, ldvarg0={0:0}, ldvarg1=20485, ldvarg10={0:0}, ldvarg11={0:0}, ldvarg12=20482, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg15={0:0}, ldvarg16={0:0}, ldvarg17={0:0}, ldvarg18={0:0}, ldvarg2=20486, ldvarg20={0:0}, ldvarg21={0:0}, ldvarg22={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg25={0:0}, ldvarg26={0:0}, ldvarg27={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg30={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg36={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg40={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg45={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ldvarg9={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=20485, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=20482, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___29={0:0}, tmp___3={0:0}, tmp___30={0:0}, tmp___31={0:0}, tmp___32={0:0}, tmp___33={0:0}, tmp___34={0:0}, tmp___35={0:0}, tmp___36={0:0}, tmp___37={0:0}, tmp___38={0:0}, tmp___39={0:0}, tmp___4=0, tmp___40={0:0}, tmp___41={0:0}, tmp___5=20486, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8415] tmp___42 = ldv_zalloc(1UL) [L8416] ldvarg19 = tmp___42 [L8417] FCALL ldv_initialize() [L8418] FCALL memset((void *)(& ldvarg39), 0, 4UL) VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=20485, ldvarg10={0:0}, ldvarg11={0:0}, ldvarg12=20482, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg15={0:0}, ldvarg16={0:0}, ldvarg17={0:0}, ldvarg18={0:0}, ldvarg19={0:0}, ldvarg2=20486, ldvarg20={0:0}, ldvarg21={0:0}, ldvarg22={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg25={0:0}, ldvarg26={0:0}, ldvarg27={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg30={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg36={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg40={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg45={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ldvarg9={0:0}, memset((void *)(& ldvarg39), 0, 4UL)={90:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=20485, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=20482, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___29={0:0}, tmp___3={0:0}, tmp___30={0:0}, tmp___31={0:0}, tmp___32={0:0}, tmp___33={0:0}, tmp___34={0:0}, tmp___35={0:0}, tmp___36={0:0}, tmp___37={0:0}, tmp___38={0:0}, tmp___39={0:0}, tmp___4=0, tmp___40={0:0}, tmp___41={0:0}, tmp___42={0:0}, tmp___5=20486, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8419] FCALL memset((void *)(& ldvarg8), 0, 4UL) VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=20485, ldvarg10={0:0}, ldvarg11={0:0}, ldvarg12=20482, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg15={0:0}, ldvarg16={0:0}, ldvarg17={0:0}, ldvarg18={0:0}, ldvarg19={0:0}, ldvarg2=20486, ldvarg20={0:0}, ldvarg21={0:0}, ldvarg22={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg25={0:0}, ldvarg26={0:0}, ldvarg27={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg30={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg36={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg40={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg45={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ldvarg9={0:0}, memset((void *)(& ldvarg8), 0, 4UL)={91:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=20485, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=20482, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___29={0:0}, tmp___3={0:0}, tmp___30={0:0}, tmp___31={0:0}, tmp___32={0:0}, tmp___33={0:0}, tmp___34={0:0}, tmp___35={0:0}, tmp___36={0:0}, tmp___37={0:0}, tmp___38={0:0}, tmp___39={0:0}, tmp___4=0, tmp___40={0:0}, tmp___41={0:0}, tmp___42={0:0}, tmp___5=20486, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8420] ldv_state_variable_4 = 0 [L8421] ldv_state_variable_1 = 0 [L8422] ref_cnt = 0 [L8423] ldv_state_variable_0 = 1 [L8424] ldv_state_variable_3 = 0 [L8425] ldv_state_variable_2 = 0 VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=20485, ldvarg10={0:0}, ldvarg11={0:0}, ldvarg12=20482, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg15={0:0}, ldvarg16={0:0}, ldvarg17={0:0}, ldvarg18={0:0}, ldvarg19={0:0}, ldvarg2=20486, ldvarg20={0:0}, ldvarg21={0:0}, ldvarg22={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg25={0:0}, ldvarg26={0:0}, ldvarg27={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg30={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg36={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg40={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg45={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ldvarg9={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=20485, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=20482, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___29={0:0}, tmp___3={0:0}, tmp___30={0:0}, tmp___31={0:0}, tmp___32={0:0}, tmp___33={0:0}, tmp___34={0:0}, tmp___35={0:0}, tmp___36={0:0}, tmp___37={0:0}, tmp___38={0:0}, tmp___39={0:0}, tmp___4=0, tmp___40={0:0}, tmp___41={0:0}, tmp___42={0:0}, tmp___5=20486, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8427] tmp___43 = __VERIFIER_nondet_int() [L8429] case 0: [L8455] case 1: [L8482] case 2: VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=20485, ldvarg10={0:0}, ldvarg11={0:0}, ldvarg12=20482, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg15={0:0}, ldvarg16={0:0}, ldvarg17={0:0}, ldvarg18={0:0}, ldvarg19={0:0}, ldvarg2=20486, ldvarg20={0:0}, ldvarg21={0:0}, ldvarg22={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg25={0:0}, ldvarg26={0:0}, ldvarg27={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg30={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg36={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg40={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg45={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ldvarg9={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=20485, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=20482, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___29={0:0}, tmp___3={0:0}, tmp___30={0:0}, tmp___31={0:0}, tmp___32={0:0}, tmp___33={0:0}, tmp___34={0:0}, tmp___35={0:0}, tmp___36={0:0}, tmp___37={0:0}, tmp___38={0:0}, tmp___39={0:0}, tmp___4=0, tmp___40={0:0}, tmp___41={0:0}, tmp___42={0:0}, tmp___43=2, tmp___5=20486, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8483] COND TRUE ldv_state_variable_0 != 0 [L8484] tmp___46 = __VERIFIER_nondet_int() [L8486] case 0: [L8494] case 1: VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=20485, ldvarg10={0:0}, ldvarg11={0:0}, ldvarg12=20482, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg15={0:0}, ldvarg16={0:0}, ldvarg17={0:0}, ldvarg18={0:0}, ldvarg19={0:0}, ldvarg2=20486, ldvarg20={0:0}, ldvarg21={0:0}, ldvarg22={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg25={0:0}, ldvarg26={0:0}, ldvarg27={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg30={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg36={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg40={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg45={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ldvarg9={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=20485, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=20482, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___29={0:0}, tmp___3={0:0}, tmp___30={0:0}, tmp___31={0:0}, tmp___32={0:0}, tmp___33={0:0}, tmp___34={0:0}, tmp___35={0:0}, tmp___36={0:0}, tmp___37={0:0}, tmp___38={0:0}, tmp___39={0:0}, tmp___4=0, tmp___40={0:0}, tmp___41={0:0}, tmp___42={0:0}, tmp___43=2, tmp___46=1, tmp___5=20486, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8495] COND TRUE ldv_state_variable_0 == 1 [L8496] CALL, EXPR gspca_init() [L8174] return (0); VAL [={0:0}, ={0:0}, \result=0, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8496] RET, EXPR gspca_init() [L8496] ldv_retval_0 = gspca_init() [L8497] COND TRUE ldv_retval_0 == 0 [L8498] ldv_state_variable_0 = 3 [L8499] ldv_state_variable_2 = 1 [L8500] CALL ldv_initialize_v4l2_ioctl_ops_2() [L8208] void *tmp ; [L8209] void *tmp___0 ; [L8210] void *tmp___1 ; [L8211] void *tmp___2 ; [L8212] void *tmp___3 ; [L8213] void *tmp___4 ; VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8215] CALL, EXPR ldv_zalloc(360UL) VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=360, \result={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=360, tmp___0=1, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8215] RET, EXPR ldv_zalloc(360UL) VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(360UL)={0:0}, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8215] tmp = ldv_zalloc(360UL) [L8216] dev_ioctl_ops_group3 = (struct file *)tmp VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8217] CALL, EXPR ldv_zalloc(208UL) VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=208, \result={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=208, tmp___0=1, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8217] RET, EXPR ldv_zalloc(208UL) VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(208UL)={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8217] tmp___0 = ldv_zalloc(208UL) [L8218] dev_ioctl_ops_group0 = (struct v4l2_format *)tmp___0 VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8219] CALL, EXPR ldv_zalloc(32UL) VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=32, \result={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=32, tmp___0=1, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8219] RET, EXPR ldv_zalloc(32UL) VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(32UL)={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8219] tmp___1 = ldv_zalloc(32UL) [L8220] dev_ioctl_ops_group1 = (struct v4l2_event_subscription *)tmp___1 VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0={0:0}, tmp___1={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8221] CALL, EXPR ldv_zalloc(168UL) VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=168, \result={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=168, tmp___0=1, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8221] RET, EXPR ldv_zalloc(168UL) VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(168UL)={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0={0:0}, tmp___1={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8221] tmp___2 = ldv_zalloc(168UL) [L8222] dev_ioctl_ops_group5 = (struct v4l2_fh *)tmp___2 VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8223] CALL, EXPR ldv_zalloc(88UL) VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=88, \result={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=88, tmp___0=1, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8223] RET, EXPR ldv_zalloc(88UL) VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(88UL)={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8223] tmp___3 = ldv_zalloc(88UL) [L8224] dev_ioctl_ops_group4 = (struct v4l2_buffer *)tmp___3 VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8225] CALL, EXPR ldv_zalloc(204UL) VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=204, \result={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=204, tmp___0=1, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8225] RET, EXPR ldv_zalloc(204UL) VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(204UL)={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8225] tmp___4 = ldv_zalloc(204UL) [L8226] dev_ioctl_ops_group2 = (struct v4l2_streamparm *)tmp___4 VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8500] RET ldv_initialize_v4l2_ioctl_ops_2() [L8501] ldv_state_variable_3 = 1 [L8502] CALL ldv_initialize_v4l2_file_operations_3() [L8190] void *tmp ; VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8192] CALL, EXPR ldv_zalloc(360UL) VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=360, \result={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=360, tmp___0=1, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8192] RET, EXPR ldv_zalloc(360UL) VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, ldv_zalloc(360UL)={0:0}, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8192] tmp = ldv_zalloc(360UL) [L8193] dev_fops_group0 = (struct file *)tmp VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8502] RET ldv_initialize_v4l2_file_operations_3() [L8503] ldv_state_variable_1 = 1 [L8504] ldv_state_variable_4 = 1 [L8505] CALL ldv_initialize_vm_operations_struct_4() [L8199] void *tmp ; VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8201] CALL, EXPR ldv_zalloc(184UL) VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=184, \result={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ref_cnt=0, SERIAL_STATE=0, size=184, tmp___0=1, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8201] RET, EXPR ldv_zalloc(184UL) VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_zalloc(184UL)={0:0}, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8201] tmp = ldv_zalloc(184UL) [L8202] gspca_vm_ops_group0 = (struct vm_area_struct *)tmp VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8505] RET ldv_initialize_vm_operations_struct_4() [L8508] COND FALSE !(ldv_retval_0 != 0) VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldvarg0={0:0}, ldvarg1=20485, ldvarg10={0:0}, ldvarg11={0:0}, ldvarg12=20482, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg15={0:0}, ldvarg16={0:0}, ldvarg17={0:0}, ldvarg18={0:0}, ldvarg19={0:0}, ldvarg2=20486, ldvarg20={0:0}, ldvarg21={0:0}, ldvarg22={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg25={0:0}, ldvarg26={0:0}, ldvarg27={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg30={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg36={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg40={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg45={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ldvarg9={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=20485, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=20482, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___29={0:0}, tmp___3={0:0}, tmp___30={0:0}, tmp___31={0:0}, tmp___32={0:0}, tmp___33={0:0}, tmp___34={0:0}, tmp___35={0:0}, tmp___36={0:0}, tmp___37={0:0}, tmp___38={0:0}, tmp___39={0:0}, tmp___4=0, tmp___40={0:0}, tmp___41={0:0}, tmp___42={0:0}, tmp___43=2, tmp___46=1, tmp___5=20486, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8427] tmp___43 = __VERIFIER_nondet_int() [L8429] case 0: VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldvarg0={0:0}, ldvarg1=20485, ldvarg10={0:0}, ldvarg11={0:0}, ldvarg12=20482, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg15={0:0}, ldvarg16={0:0}, ldvarg17={0:0}, ldvarg18={0:0}, ldvarg19={0:0}, ldvarg2=20486, ldvarg20={0:0}, ldvarg21={0:0}, ldvarg22={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg25={0:0}, ldvarg26={0:0}, ldvarg27={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg30={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg36={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg40={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg45={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ldvarg9={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=20485, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=20482, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___29={0:0}, tmp___3={0:0}, tmp___30={0:0}, tmp___31={0:0}, tmp___32={0:0}, tmp___33={0:0}, tmp___34={0:0}, tmp___35={0:0}, tmp___36={0:0}, tmp___37={0:0}, tmp___38={0:0}, tmp___39={0:0}, tmp___4=0, tmp___40={0:0}, tmp___41={0:0}, tmp___42={0:0}, tmp___43=0, tmp___46=1, tmp___5=20486, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8430] COND TRUE ldv_state_variable_4 != 0 [L8431] tmp___44 = __VERIFIER_nondet_int() [L8433] case 0: [L8440] case 1: VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldvarg0={0:0}, ldvarg1=20485, ldvarg10={0:0}, ldvarg11={0:0}, ldvarg12=20482, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg15={0:0}, ldvarg16={0:0}, ldvarg17={0:0}, ldvarg18={0:0}, ldvarg19={0:0}, ldvarg2=20486, ldvarg20={0:0}, ldvarg21={0:0}, ldvarg22={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg25={0:0}, ldvarg26={0:0}, ldvarg27={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg30={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg36={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg40={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg45={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ldvarg9={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=20485, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=20482, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___29={0:0}, tmp___3={0:0}, tmp___30={0:0}, tmp___31={0:0}, tmp___32={0:0}, tmp___33={0:0}, tmp___34={0:0}, tmp___35={0:0}, tmp___36={0:0}, tmp___37={0:0}, tmp___38={0:0}, tmp___39={0:0}, tmp___4=0, tmp___40={0:0}, tmp___41={0:0}, tmp___42={0:0}, tmp___43=0, tmp___44=1, tmp___46=1, tmp___5=20486, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8441] COND TRUE ldv_state_variable_4 == 1 VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldvarg0={0:0}, ldvarg1=20485, ldvarg10={0:0}, ldvarg11={0:0}, ldvarg12=20482, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg15={0:0}, ldvarg16={0:0}, ldvarg17={0:0}, ldvarg18={0:0}, ldvarg19={0:0}, ldvarg2=20486, ldvarg20={0:0}, ldvarg21={0:0}, ldvarg22={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg25={0:0}, ldvarg26={0:0}, ldvarg27={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg30={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg36={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg40={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg45={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ldvarg9={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=20485, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=20482, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___29={0:0}, tmp___3={0:0}, tmp___30={0:0}, tmp___31={0:0}, tmp___32={0:0}, tmp___33={0:0}, tmp___34={0:0}, tmp___35={0:0}, tmp___36={0:0}, tmp___37={0:0}, tmp___38={0:0}, tmp___39={0:0}, tmp___4=0, tmp___40={0:0}, tmp___41={0:0}, tmp___42={0:0}, tmp___43=0, tmp___44=1, tmp___46=1, tmp___5=20486, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8442] CALL gspca_vm_open(gspca_vm_ops_group0) VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vma={0:0}] [L5486] struct gspca_frame *frame ; [L5488] EXPR vma->vm_private_data [L5488] frame = (struct gspca_frame *)vma->vm_private_data [L5489] EXPR frame->vma_use_count VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, frame={20483:-10}, frame->vma_use_count=-2147483650, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vma={0:0}, vma={0:0}] [L5489] frame->vma_use_count + 1 VAL [={0:0}, ={0:0}, __this_module={20484:20487}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, frame={20483:-10}, frame->vma_use_count=-2147483650, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vma={0:0}, vma={0:0}] - UnprovableResult [Line: 6508]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6508]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 5977]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 5977]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6084]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6084]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7299]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7299]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 5199]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 5199]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 5199]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7167]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7167]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6356]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6356]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6159]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6159]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6159]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6159]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6160]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6160]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6165]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6165]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6177]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6177]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6193]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6193]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6202]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6202]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6215]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6215]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6374]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6374]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6240]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6240]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6240]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6240]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6249]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6249]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6297]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6297]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6297]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6297]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6297]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6304]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6304]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6305]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6305]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6317]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6317]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6439]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6439]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6473]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6473]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7021]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7021]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 5950]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 5950]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6526]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6526]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6534]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6534]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 5499]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 5499]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 9162]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 9162]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7592]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7592]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 5745]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 5745]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7650]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7650]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 5489]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8444]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8444]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8463]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8463]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8471]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8471]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8543]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8543]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7759]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7759]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7775]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7775]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8571]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8571]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6617]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6617]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6625]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6625]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6633]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6633]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6780]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6780]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7494]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7494]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 5667]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 5667]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - StatisticsResult: Ultimate Automizer benchmark data CFG has 83 procedures, 1613 locations, 100 error locations. Started 1 CEGAR loops. OverallTime: 96.1s, OverallIterations: 8, TraceHistogramMax: 48, PathProgramHistogramMax: 2, EmptinessCheckTime: 0.1s, AutomataDifference: 72.0s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 30095 SdHoareTripleChecker+Valid, 61.6s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 28839 mSDsluCounter, 52439 SdHoareTripleChecker+Invalid, 55.1s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 36001 mSDsCounter, 10999 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 22585 IncrementalHoareTripleChecker+Invalid, 33584 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 10999 mSolverCounterUnsat, 16438 mSDtfsCounter, 22585 mSolverCounterSat, 0.6s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 1698 GetRequests, 1633 SyntacticMatches, 2 SemanticMatches, 63 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 54 ImplicationChecksByTransitivity, 1.0s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=23078occurred in iteration=7, InterpolantAutomatonStates: 60, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 8.0s AutomataMinimizationTime, 7 MinimizatonAttempts, 36394 StatesRemovedByMinimization, 6 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: 0.5s SsaConstructionTime, 2.6s SatisfiabilityAnalysisTime, 9.7s InterpolantComputationTime, 3084 NumberOfCodeBlocks, 3084 NumberOfCodeBlocksAsserted, 10 NumberOfCheckSat, 3068 ConstructedInterpolants, 0 QuantifiedInterpolants, 6173 SizeOfPredicates, 2 NumberOfNonLiveVariables, 7300 ConjunctsInSsa, 18 ConjunctsInUnsatCore, 10 InterpolantComputations, 6 PerfectInterpolantSequences, 39609/39627 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate proved your program to be incorrect! [2022-11-25 17:18:35,590 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3f2e6758-78a2-4da1-8efb-5651a54164f0/bin/uautomizer-ZsLfNo2U6R/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Writing human readable error path to file UltimateCounterExample.errorpath Result: FALSE(OVERFLOW)