/usr/bin/java -Xmx8000000000 -Xss4m -jar ./plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata ./data -tc ../../../trunk/examples/toolchains/AutomizerCInline.xml -s ../../../trunk/examples/settings/default/automizer/svcomp-Overflow-32bit-Automizer_Default.epf -i ../sv-benchmarks/c/ldv-linux-3.12-rc1/linux-3.12-rc1.tar.xz-144_2a-drivers--media--usb--gspca--gspca_main.ko-entry_point.cil.out.i -------------------------------------------------------------------------------- This is Ultimate 0.2.2-dev-05d3305-m [2022-10-16 13:00:26,833 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-10-16 13:00:26,837 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-10-16 13:00:26,893 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-10-16 13:00:26,893 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-10-16 13:00:26,898 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-10-16 13:00:26,901 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-10-16 13:00:26,923 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-10-16 13:00:26,925 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-10-16 13:00:26,931 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-10-16 13:00:26,932 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-10-16 13:00:26,934 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-10-16 13:00:26,934 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-10-16 13:00:26,935 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-10-16 13:00:26,937 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-10-16 13:00:26,938 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-10-16 13:00:26,939 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-10-16 13:00:26,940 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-10-16 13:00:26,942 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-10-16 13:00:26,944 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-10-16 13:00:26,946 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-10-16 13:00:26,947 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-10-16 13:00:26,948 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-10-16 13:00:26,949 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-10-16 13:00:26,953 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-10-16 13:00:26,954 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-10-16 13:00:26,954 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-10-16 13:00:26,955 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-10-16 13:00:26,956 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-10-16 13:00:26,957 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-10-16 13:00:26,957 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-10-16 13:00:26,958 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-10-16 13:00:26,959 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-10-16 13:00:26,960 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-10-16 13:00:26,961 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-10-16 13:00:26,961 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-10-16 13:00:26,962 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-10-16 13:00:26,963 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-10-16 13:00:26,963 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-10-16 13:00:26,964 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-10-16 13:00:26,965 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-10-16 13:00:26,966 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/settings/default/automizer/svcomp-Overflow-32bit-Automizer_Default.epf [2022-10-16 13:00:26,993 INFO L113 SettingsManager]: Loading preferences was successful [2022-10-16 13:00:26,993 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-10-16 13:00:26,994 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-10-16 13:00:26,994 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-10-16 13:00:26,995 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-10-16 13:00:26,995 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-10-16 13:00:26,996 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-10-16 13:00:26,996 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-10-16 13:00:26,997 INFO L138 SettingsManager]: * Use SBE=true [2022-10-16 13:00:26,997 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-10-16 13:00:26,997 INFO L138 SettingsManager]: * sizeof long=4 [2022-10-16 13:00:26,997 INFO L138 SettingsManager]: * Check unreachability of error function in SV-COMP mode=false [2022-10-16 13:00:26,998 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-10-16 13:00:26,998 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-10-16 13:00:26,998 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-10-16 13:00:26,998 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-10-16 13:00:26,999 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-10-16 13:00:26,999 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-10-16 13:00:26,999 INFO L138 SettingsManager]: * Check absence of signed integer overflows=true [2022-10-16 13:00:26,999 INFO L138 SettingsManager]: * sizeof long double=12 [2022-10-16 13:00:27,000 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-10-16 13:00:27,000 INFO L138 SettingsManager]: * Use constant arrays=true [2022-10-16 13:00:27,000 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-10-16 13:00:27,001 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-10-16 13:00:27,001 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-10-16 13:00:27,001 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-10-16 13:00:27,001 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-10-16 13:00:27,002 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-10-16 13:00:27,002 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-10-16 13:00:27,002 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-10-16 13:00:27,002 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-10-16 13:00:27,003 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-10-16 13:00:27,003 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-10-16 13:00:27,003 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release [2022-10-16 13:00:27,337 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-10-16 13:00:27,366 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-10-16 13:00:27,370 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-10-16 13:00:27,372 INFO L271 PluginConnector]: Initializing CDTParser... [2022-10-16 13:00:27,373 INFO L275 PluginConnector]: CDTParser initialized [2022-10-16 13:00:27,374 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/ldv-linux-3.12-rc1/linux-3.12-rc1.tar.xz-144_2a-drivers--media--usb--gspca--gspca_main.ko-entry_point.cil.out.i [2022-10-16 13:00:27,446 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/5f40013a3/c47240dfb97747c8ba23b9b4286915af/FLAGf39683a65 [2022-10-16 13:00:28,476 INFO L306 CDTParser]: Found 1 translation units. [2022-10-16 13:00:28,477 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.12-rc1/linux-3.12-rc1.tar.xz-144_2a-drivers--media--usb--gspca--gspca_main.ko-entry_point.cil.out.i [2022-10-16 13:00:28,516 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/5f40013a3/c47240dfb97747c8ba23b9b4286915af/FLAGf39683a65 [2022-10-16 13:00:28,878 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/5f40013a3/c47240dfb97747c8ba23b9b4286915af [2022-10-16 13:00:28,881 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-10-16 13:00:28,886 INFO L131 ToolchainWalker]: Walking toolchain with 5 elements. [2022-10-16 13:00:28,888 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-10-16 13:00:28,888 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-10-16 13:00:28,892 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-10-16 13:00:28,893 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 16.10 01:00:28" (1/1) ... [2022-10-16 13:00:28,894 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@37ada365 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 01:00:28, skipping insertion in model container [2022-10-16 13:00:28,894 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 16.10 01:00:28" (1/1) ... [2022-10-16 13:00:28,901 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-10-16 13:00:29,051 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-10-16 13:00:29,633 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name match at C: (*match)(struct device * , struct v4l2_async_subdev * ) [4482] [2022-10-16 13:00:30,182 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.12-rc1/linux-3.12-rc1.tar.xz-144_2a-drivers--media--usb--gspca--gspca_main.ko-entry_point.cil.out.i[155153,155166] [2022-10-16 13:00:31,050 WARN L611 FunctionHandler]: implicit declaration of function ldv_xmalloc [2022-10-16 13:00:31,084 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-10-16 13:00:31,168 INFO L203 MainTranslator]: Completed pre-run [2022-10-16 13:00:31,353 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name match at C: (*match)(struct device * , struct v4l2_async_subdev * ) [4482] [2022-10-16 13:00:31,438 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.12-rc1/linux-3.12-rc1.tar.xz-144_2a-drivers--media--usb--gspca--gspca_main.ko-entry_point.cil.out.i[155153,155166] [2022-10-16 13:00:31,893 WARN L611 FunctionHandler]: implicit declaration of function ldv_xmalloc [2022-10-16 13:00:31,905 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-10-16 13:00:32,045 INFO L208 MainTranslator]: Completed translation [2022-10-16 13:00:32,045 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 01:00:32 WrapperNode [2022-10-16 13:00:32,045 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-10-16 13:00:32,047 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-10-16 13:00:32,047 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-10-16 13:00:32,047 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-10-16 13:00:32,056 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 01:00:32" (1/1) ... [2022-10-16 13:00:32,205 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 01:00:32" (1/1) ... [2022-10-16 13:00:32,397 INFO L138 Inliner]: procedures = 242, calls = 2936, calls flagged for inlining = 95, calls inlined = 71, statements flattened = 4124 [2022-10-16 13:00:32,397 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-10-16 13:00:32,398 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-10-16 13:00:32,398 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-10-16 13:00:32,399 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-10-16 13:00:32,409 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 01:00:32" (1/1) ... [2022-10-16 13:00:32,410 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 01:00:32" (1/1) ... [2022-10-16 13:00:32,462 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 01:00:32" (1/1) ... [2022-10-16 13:00:32,463 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 01:00:32" (1/1) ... [2022-10-16 13:00:32,597 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 01:00:32" (1/1) ... [2022-10-16 13:00:32,620 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 01:00:32" (1/1) ... [2022-10-16 13:00:32,730 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 01:00:32" (1/1) ... [2022-10-16 13:00:32,755 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 01:00:32" (1/1) ... [2022-10-16 13:00:32,797 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-10-16 13:00:32,799 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-10-16 13:00:32,803 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-10-16 13:00:32,803 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-10-16 13:00:32,804 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 01:00:32" (1/1) ... [2022-10-16 13:00:32,812 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-10-16 13:00:32,826 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-10-16 13:00:32,849 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-10-16 13:00:32,874 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-10-16 13:00:32,930 INFO L130 BoogieDeclarations]: Found specification of procedure atomic_set [2022-10-16 13:00:32,930 INFO L138 BoogieDeclarations]: Found implementation of procedure atomic_set [2022-10-16 13:00:32,931 INFO L130 BoogieDeclarations]: Found specification of procedure wxh_to_mode [2022-10-16 13:00:32,931 INFO L138 BoogieDeclarations]: Found implementation of procedure wxh_to_mode [2022-10-16 13:00:32,931 INFO L130 BoogieDeclarations]: Found specification of procedure PDEBUG_MODE [2022-10-16 13:00:32,931 INFO L138 BoogieDeclarations]: Found implementation of procedure PDEBUG_MODE [2022-10-16 13:00:32,931 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$ [2022-10-16 13:00:32,931 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$ [2022-10-16 13:00:32,932 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop [2022-10-16 13:00:32,932 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop [2022-10-16 13:00:32,932 INFO L130 BoogieDeclarations]: Found specification of procedure usb_set_interface [2022-10-16 13:00:32,932 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_set_interface [2022-10-16 13:00:32,933 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_submit_urb [2022-10-16 13:00:32,933 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_submit_urb [2022-10-16 13:00:32,933 INFO L130 BoogieDeclarations]: Found specification of procedure frame_free [2022-10-16 13:00:32,933 INFO L138 BoogieDeclarations]: Found implementation of procedure frame_free [2022-10-16 13:00:32,933 INFO L130 BoogieDeclarations]: Found specification of procedure alt_xfer [2022-10-16 13:00:32,934 INFO L138 BoogieDeclarations]: Found implementation of procedure alt_xfer [2022-10-16 13:00:32,934 INFO L130 BoogieDeclarations]: Found specification of procedure vidioc_streamon [2022-10-16 13:00:32,934 INFO L138 BoogieDeclarations]: Found implementation of procedure vidioc_streamon [2022-10-16 13:00:32,934 INFO L130 BoogieDeclarations]: Found specification of procedure get_current [2022-10-16 13:00:32,934 INFO L138 BoogieDeclarations]: Found implementation of procedure get_current [2022-10-16 13:00:32,934 INFO L130 BoogieDeclarations]: Found specification of procedure dev_mmap [2022-10-16 13:00:32,935 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_mmap [2022-10-16 13:00:32,935 INFO L130 BoogieDeclarations]: Found specification of procedure usb_make_path [2022-10-16 13:00:32,935 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_make_path [2022-10-16 13:00:32,935 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_malloc [2022-10-16 13:00:32,935 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_malloc [2022-10-16 13:00:32,935 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_alloc_urb [2022-10-16 13:00:32,935 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_alloc_urb [2022-10-16 13:00:32,936 INFO L130 BoogieDeclarations]: Found specification of procedure vidioc_streamoff [2022-10-16 13:00:32,936 INFO L138 BoogieDeclarations]: Found implementation of procedure vidioc_streamoff [2022-10-16 13:00:32,936 INFO L130 BoogieDeclarations]: Found specification of procedure gspca_init_transfer [2022-10-16 13:00:32,936 INFO L138 BoogieDeclarations]: Found implementation of procedure gspca_init_transfer [2022-10-16 13:00:32,936 INFO L130 BoogieDeclarations]: Found specification of procedure dev_poll [2022-10-16 13:00:32,936 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_poll [2022-10-16 13:00:32,936 INFO L130 BoogieDeclarations]: Found specification of procedure mutex_lock_interruptible_nested [2022-10-16 13:00:32,937 INFO L138 BoogieDeclarations]: Found implementation of procedure mutex_lock_interruptible_nested [2022-10-16 13:00:32,937 INFO L130 BoogieDeclarations]: Found specification of procedure vidioc_reqbufs [2022-10-16 13:00:32,937 INFO L138 BoogieDeclarations]: Found implementation of procedure vidioc_reqbufs [2022-10-16 13:00:32,937 INFO L130 BoogieDeclarations]: Found specification of procedure frame_ready_nolock [2022-10-16 13:00:32,937 INFO L138 BoogieDeclarations]: Found implementation of procedure frame_ready_nolock [2022-10-16 13:00:32,937 INFO L130 BoogieDeclarations]: Found specification of procedure mutex_unlock [2022-10-16 13:00:32,938 INFO L138 BoogieDeclarations]: Found implementation of procedure mutex_unlock [2022-10-16 13:00:32,938 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_error [2022-10-16 13:00:32,938 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_error [2022-10-16 13:00:32,938 INFO L130 BoogieDeclarations]: Found specification of procedure frame_ready [2022-10-16 13:00:32,938 INFO L138 BoogieDeclarations]: Found implementation of procedure frame_ready [2022-10-16 13:00:32,939 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_dir_in [2022-10-16 13:00:32,939 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_dir_in [2022-10-16 13:00:32,939 INFO L130 BoogieDeclarations]: Found specification of procedure atomic_read [2022-10-16 13:00:32,940 INFO L138 BoogieDeclarations]: Found implementation of procedure atomic_read [2022-10-16 13:00:32,940 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memset [2022-10-16 13:00:32,940 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memset [2022-10-16 13:00:32,941 INFO L130 BoogieDeclarations]: Found specification of procedure assume_abort_if_not [2022-10-16 13:00:32,941 INFO L138 BoogieDeclarations]: Found implementation of procedure assume_abort_if_not [2022-10-16 13:00:32,941 INFO L130 BoogieDeclarations]: Found specification of procedure gspca_set_alt0 [2022-10-16 13:00:32,941 INFO L138 BoogieDeclarations]: Found implementation of procedure gspca_set_alt0 [2022-10-16 13:00:32,941 INFO L130 BoogieDeclarations]: Found specification of procedure bulk_irq [2022-10-16 13:00:32,941 INFO L138 BoogieDeclarations]: Found implementation of procedure bulk_irq [2022-10-16 13:00:32,942 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop___0 [2022-10-16 13:00:32,942 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop___0 [2022-10-16 13:00:32,942 INFO L130 BoogieDeclarations]: Found specification of procedure video_drvdata [2022-10-16 13:00:32,942 INFO L138 BoogieDeclarations]: Found implementation of procedure video_drvdata [2022-10-16 13:00:32,943 INFO L130 BoogieDeclarations]: Found specification of procedure ktime_get [2022-10-16 13:00:32,943 INFO L138 BoogieDeclarations]: Found implementation of procedure ktime_get [2022-10-16 13:00:32,943 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2022-10-16 13:00:32,944 INFO L130 BoogieDeclarations]: Found specification of procedure usb_free_coherent [2022-10-16 13:00:32,944 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_free_coherent [2022-10-16 13:00:32,945 INFO L130 BoogieDeclarations]: Found specification of procedure module_put [2022-10-16 13:00:32,945 INFO L138 BoogieDeclarations]: Found implementation of procedure module_put [2022-10-16 13:00:32,945 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2022-10-16 13:00:32,946 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_submit_urb_12 [2022-10-16 13:00:32,946 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_submit_urb_12 [2022-10-16 13:00:32,946 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_xmalloc [2022-10-16 13:00:32,947 INFO L130 BoogieDeclarations]: Found specification of procedure v4l2_ctrl_handler_free [2022-10-16 13:00:32,947 INFO L138 BoogieDeclarations]: Found implementation of procedure v4l2_ctrl_handler_free [2022-10-16 13:00:32,947 INFO L130 BoogieDeclarations]: Found specification of procedure alloc_and_submit_int_urb [2022-10-16 13:00:32,947 INFO L138 BoogieDeclarations]: Found implementation of procedure alloc_and_submit_int_urb [2022-10-16 13:00:32,947 INFO L130 BoogieDeclarations]: Found specification of procedure strlcpy [2022-10-16 13:00:32,947 INFO L138 BoogieDeclarations]: Found implementation of procedure strlcpy [2022-10-16 13:00:32,948 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~$Pointer$~X~$Pointer$~X~int~TO~int [2022-10-16 13:00:32,948 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~$Pointer$~X~$Pointer$~X~int~TO~int [2022-10-16 13:00:32,948 INFO L130 BoogieDeclarations]: Found specification of procedure usb_ifnum_to_if [2022-10-16 13:00:32,949 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_ifnum_to_if [2022-10-16 13:00:32,949 INFO L130 BoogieDeclarations]: Found specification of procedure int_irq [2022-10-16 13:00:32,949 INFO L138 BoogieDeclarations]: Found implementation of procedure int_irq [2022-10-16 13:00:32,949 INFO L130 BoogieDeclarations]: Found specification of procedure v4l2_ctrl_handler_setup [2022-10-16 13:00:32,950 INFO L138 BoogieDeclarations]: Found implementation of procedure v4l2_ctrl_handler_setup [2022-10-16 13:00:32,951 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2022-10-16 13:00:32,951 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2022-10-16 13:00:32,951 INFO L130 BoogieDeclarations]: Found specification of procedure fill_frame [2022-10-16 13:00:32,951 INFO L138 BoogieDeclarations]: Found implementation of procedure fill_frame [2022-10-16 13:00:32,951 INFO L130 BoogieDeclarations]: Found specification of procedure read_alloc [2022-10-16 13:00:32,952 INFO L138 BoogieDeclarations]: Found implementation of procedure read_alloc [2022-10-16 13:00:32,952 INFO L130 BoogieDeclarations]: Found specification of procedure gspca_stream_off [2022-10-16 13:00:32,952 INFO L138 BoogieDeclarations]: Found implementation of procedure gspca_stream_off [2022-10-16 13:00:32,952 INFO L130 BoogieDeclarations]: Found specification of procedure mutex_lock_nested [2022-10-16 13:00:32,952 INFO L138 BoogieDeclarations]: Found implementation of procedure mutex_lock_nested [2022-10-16 13:00:32,952 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int [2022-10-16 13:00:32,953 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_zalloc [2022-10-16 13:00:32,953 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_zalloc [2022-10-16 13:00:32,953 INFO L130 BoogieDeclarations]: Found specification of procedure isoc_irq [2022-10-16 13:00:32,953 INFO L138 BoogieDeclarations]: Found implementation of procedure isoc_irq [2022-10-16 13:00:32,953 INFO L130 BoogieDeclarations]: Found specification of procedure vidioc_dqbuf [2022-10-16 13:00:32,954 INFO L138 BoogieDeclarations]: Found implementation of procedure vidioc_dqbuf [2022-10-16 13:00:32,954 INFO L130 BoogieDeclarations]: Found specification of procedure gspca_input_create_urb [2022-10-16 13:00:32,954 INFO L138 BoogieDeclarations]: Found implementation of procedure gspca_input_create_urb [2022-10-16 13:00:32,954 INFO L130 BoogieDeclarations]: Found specification of procedure ns_to_timeval [2022-10-16 13:00:32,954 INFO L138 BoogieDeclarations]: Found implementation of procedure ns_to_timeval [2022-10-16 13:00:32,954 INFO L130 BoogieDeclarations]: Found specification of procedure video_ioctl2 [2022-10-16 13:00:32,955 INFO L138 BoogieDeclarations]: Found implementation of procedure video_ioctl2 [2022-10-16 13:00:32,955 INFO L130 BoogieDeclarations]: Found specification of procedure video_device_release_empty [2022-10-16 13:00:32,955 INFO L138 BoogieDeclarations]: Found implementation of procedure video_device_release_empty [2022-10-16 13:00:32,955 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int [2022-10-16 13:00:32,955 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_submit_urb_2 [2022-10-16 13:00:32,957 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_submit_urb_2 [2022-10-16 13:00:32,958 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_submit_urb_8 [2022-10-16 13:00:32,958 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_submit_urb_8 [2022-10-16 13:00:32,959 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_submit_urb_5 [2022-10-16 13:00:32,963 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_submit_urb_5 [2022-10-16 13:00:32,966 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_submit_urb_9 [2022-10-16 13:00:32,967 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_submit_urb_9 [2022-10-16 13:00:32,967 INFO L130 BoogieDeclarations]: Found specification of procedure gspca_input_destroy_urb [2022-10-16 13:00:32,968 INFO L138 BoogieDeclarations]: Found implementation of procedure gspca_input_destroy_urb [2022-10-16 13:00:32,968 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2022-10-16 13:00:32,968 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy [2022-10-16 13:00:32,968 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy [2022-10-16 13:00:32,968 INFO L130 BoogieDeclarations]: Found specification of procedure __create_pipe [2022-10-16 13:00:32,969 INFO L138 BoogieDeclarations]: Found implementation of procedure __create_pipe [2022-10-16 13:00:32,969 INFO L130 BoogieDeclarations]: Found specification of procedure usb_kill_urb [2022-10-16 13:00:32,969 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_kill_urb [2022-10-16 13:00:32,969 INFO L130 BoogieDeclarations]: Found specification of procedure dev_close [2022-10-16 13:00:32,969 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_close [2022-10-16 13:00:32,969 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~$Pointer$~X~$Pointer$~X~int~TO~VOID [2022-10-16 13:00:32,969 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~$Pointer$~X~$Pointer$~X~int~TO~VOID [2022-10-16 13:00:32,969 INFO L130 BoogieDeclarations]: Found specification of procedure kfree [2022-10-16 13:00:32,970 INFO L138 BoogieDeclarations]: Found implementation of procedure kfree [2022-10-16 13:00:32,970 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2022-10-16 13:00:32,970 INFO L130 BoogieDeclarations]: Found specification of procedure copy_to_user [2022-10-16 13:00:32,970 INFO L138 BoogieDeclarations]: Found implementation of procedure copy_to_user [2022-10-16 13:00:32,970 INFO L130 BoogieDeclarations]: Found specification of procedure v4l2_ctrl_subscribe_event [2022-10-16 13:00:32,970 INFO L138 BoogieDeclarations]: Found implementation of procedure v4l2_ctrl_subscribe_event [2022-10-16 13:00:32,970 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2022-10-16 13:00:32,971 INFO L130 BoogieDeclarations]: Found specification of procedure destroy_urbs [2022-10-16 13:00:32,971 INFO L138 BoogieDeclarations]: Found implementation of procedure destroy_urbs [2022-10-16 13:00:32,971 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-10-16 13:00:32,971 INFO L130 BoogieDeclarations]: Found specification of procedure vidioc_s_input [2022-10-16 13:00:32,971 INFO L138 BoogieDeclarations]: Found implementation of procedure vidioc_s_input [2022-10-16 13:00:32,971 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_undef_int [2022-10-16 13:00:32,971 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_undef_int [2022-10-16 13:00:32,972 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2022-10-16 13:00:32,972 INFO L130 BoogieDeclarations]: Found specification of procedure __bad_percpu_size [2022-10-16 13:00:32,972 INFO L130 BoogieDeclarations]: Found specification of procedure try_fmt_vid_cap [2022-10-16 13:00:32,972 INFO L138 BoogieDeclarations]: Found implementation of procedure try_fmt_vid_cap [2022-10-16 13:00:32,972 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~$Pointer$~TO~VOID [2022-10-16 13:00:32,972 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~$Pointer$~TO~VOID [2022-10-16 13:00:32,972 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~$Pointer$~TO~int [2022-10-16 13:00:32,973 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~$Pointer$~TO~int [2022-10-16 13:00:32,973 INFO L130 BoogieDeclarations]: Found specification of procedure usb_alloc_coherent [2022-10-16 13:00:32,973 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_alloc_coherent [2022-10-16 13:00:32,973 INFO L130 BoogieDeclarations]: Found specification of procedure dev_open [2022-10-16 13:00:32,973 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_open [2022-10-16 13:00:32,973 INFO L130 BoogieDeclarations]: Found specification of procedure gspca_vm_close [2022-10-16 13:00:32,973 INFO L138 BoogieDeclarations]: Found implementation of procedure gspca_vm_close [2022-10-16 13:00:32,973 INFO L130 BoogieDeclarations]: Found specification of procedure __wake_up [2022-10-16 13:00:32,974 INFO L138 BoogieDeclarations]: Found implementation of procedure __wake_up [2022-10-16 13:00:32,974 INFO L130 BoogieDeclarations]: Found specification of procedure vidioc_qbuf [2022-10-16 13:00:32,974 INFO L138 BoogieDeclarations]: Found implementation of procedure vidioc_qbuf [2022-10-16 13:00:32,974 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~$Pointer$~X~$Pointer$~TO~int [2022-10-16 13:00:32,974 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~$Pointer$~X~$Pointer$~TO~int [2022-10-16 13:00:32,974 INFO L130 BoogieDeclarations]: Found specification of procedure v4l2_event_unsubscribe [2022-10-16 13:00:32,974 INFO L138 BoogieDeclarations]: Found implementation of procedure v4l2_event_unsubscribe [2022-10-16 13:00:32,975 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_free_urb [2022-10-16 13:00:32,975 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_free_urb [2022-10-16 13:00:32,975 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-10-16 13:00:32,975 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~$Pointer$~X~$Pointer$~TO~VOID [2022-10-16 13:00:32,975 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~$Pointer$~X~$Pointer$~TO~VOID [2022-10-16 13:00:32,975 INFO L130 BoogieDeclarations]: Found specification of procedure gspca_vm_open [2022-10-16 13:00:32,975 INFO L138 BoogieDeclarations]: Found implementation of procedure gspca_vm_open [2022-10-16 13:00:32,976 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-10-16 13:00:32,976 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-10-16 13:00:33,725 INFO L235 CfgBuilder]: Building ICFG [2022-10-16 13:00:33,730 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-10-16 13:00:33,960 INFO L769 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_stopFINAL: assume true; [2022-10-16 13:00:35,644 INFO L769 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_stop___0FINAL: assume true; [2022-10-16 13:00:38,017 INFO L276 CfgBuilder]: Performing block encoding [2022-10-16 13:00:38,047 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-10-16 13:00:38,048 INFO L300 CfgBuilder]: Removed 0 assume(true) statements. [2022-10-16 13:00:38,055 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 16.10 01:00:38 BoogieIcfgContainer [2022-10-16 13:00:38,056 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-10-16 13:00:38,060 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-10-16 13:00:38,060 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-10-16 13:00:38,064 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-10-16 13:00:38,065 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 16.10 01:00:28" (1/3) ... [2022-10-16 13:00:38,065 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@1e51ccf0 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 16.10 01:00:38, skipping insertion in model container [2022-10-16 13:00:38,066 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 01:00:32" (2/3) ... [2022-10-16 13:00:38,066 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@1e51ccf0 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 16.10 01:00:38, skipping insertion in model container [2022-10-16 13:00:38,066 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 16.10 01:00:38" (3/3) ... [2022-10-16 13:00:38,068 INFO L112 eAbstractionObserver]: Analyzing ICFG linux-3.12-rc1.tar.xz-144_2a-drivers--media--usb--gspca--gspca_main.ko-entry_point.cil.out.i [2022-10-16 13:00:38,090 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-10-16 13:00:38,091 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 98 error locations. [2022-10-16 13:00:38,240 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-10-16 13:00:38,251 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@625f2cd3, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-10-16 13:00:38,251 INFO L358 AbstractCegarLoop]: Starting to check reachability of 98 error locations. [2022-10-16 13:00:38,265 INFO L276 IsEmpty]: Start isEmpty. Operand has 1618 states, 1152 states have (on average 1.46875) internal successors, (1692), 1277 states have internal predecessors, (1692), 287 states have call successors, (287), 82 states have call predecessors, (287), 80 states have return successors, (280), 274 states have call predecessors, (280), 280 states have call successors, (280) [2022-10-16 13:00:38,308 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 264 [2022-10-16 13:00:38,308 INFO L187 NwaCegarLoop]: Found error trace [2022-10-16 13:00:38,309 INFO L195 NwaCegarLoop]: trace histogram [40, 40, 40, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-16 13:00:38,313 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting gspca_vm_closeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW === [wxh_to_modeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW, wxh_to_modeErr1ASSERT_VIOLATIONINTEGER_OVERFLOW, frame_freeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (and 95 more)] === [2022-10-16 13:00:38,320 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-16 13:00:38,321 INFO L85 PathProgramCache]: Analyzing trace with hash 451998250, now seen corresponding path program 1 times [2022-10-16 13:00:38,332 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-16 13:00:38,337 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [713235071] [2022-10-16 13:00:38,337 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:00:38,338 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-16 13:00:38,931 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:00:39,555 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-16 13:00:39,559 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:00:39,574 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-10-16 13:00:39,577 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:00:39,589 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-10-16 13:00:39,592 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:00:39,604 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-10-16 13:00:39,607 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:00:39,625 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 26 [2022-10-16 13:00:39,628 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:00:39,644 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 32 [2022-10-16 13:00:39,647 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:00:39,660 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 38 [2022-10-16 13:00:39,663 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:00:39,676 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2022-10-16 13:00:39,679 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:00:39,692 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2022-10-16 13:00:39,694 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:00:39,708 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 56 [2022-10-16 13:00:39,711 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:00:39,724 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 62 [2022-10-16 13:00:39,727 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:00:39,741 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 68 [2022-10-16 13:00:39,744 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:00:39,758 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 74 [2022-10-16 13:00:39,762 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:00:39,776 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 80 [2022-10-16 13:00:39,779 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:00:39,792 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 86 [2022-10-16 13:00:39,795 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:00:39,809 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 92 [2022-10-16 13:00:39,812 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:00:39,826 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 98 [2022-10-16 13:00:39,829 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:00:39,843 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 104 [2022-10-16 13:00:39,846 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:00:39,859 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 110 [2022-10-16 13:00:39,863 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:00:39,876 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 116 [2022-10-16 13:00:39,878 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:00:39,891 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 122 [2022-10-16 13:00:39,894 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:00:39,907 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 128 [2022-10-16 13:00:39,910 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:00:39,938 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 134 [2022-10-16 13:00:39,941 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:00:39,953 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 140 [2022-10-16 13:00:39,958 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:00:39,971 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 146 [2022-10-16 13:00:39,974 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:00:39,986 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 152 [2022-10-16 13:00:39,989 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:00:40,001 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 158 [2022-10-16 13:00:40,004 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:00:40,016 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 164 [2022-10-16 13:00:40,019 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:00:40,031 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 170 [2022-10-16 13:00:40,034 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:00:40,047 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 176 [2022-10-16 13:00:40,050 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:00:40,062 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 182 [2022-10-16 13:00:40,065 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:00:40,079 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 188 [2022-10-16 13:00:40,082 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:00:40,097 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 194 [2022-10-16 13:00:40,100 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:00:40,115 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 200 [2022-10-16 13:00:40,119 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:00:40,133 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 206 [2022-10-16 13:00:40,137 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:00:40,149 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 212 [2022-10-16 13:00:40,153 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:00:40,165 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 218 [2022-10-16 13:00:40,168 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:00:40,180 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 224 [2022-10-16 13:00:40,183 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:00:40,197 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 230 [2022-10-16 13:00:40,201 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:00:40,213 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 236 [2022-10-16 13:00:40,216 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:00:40,236 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 243 [2022-10-16 13:00:40,240 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:00:40,297 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 249 [2022-10-16 13:00:40,299 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:00:40,316 INFO L134 CoverageAnalysis]: Checked inductivity of 3124 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3124 trivial. 0 not checked. [2022-10-16 13:00:40,316 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-16 13:00:40,317 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [713235071] [2022-10-16 13:00:40,317 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [713235071] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-16 13:00:40,318 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-16 13:00:40,318 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-10-16 13:00:40,320 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1927638188] [2022-10-16 13:00:40,320 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-16 13:00:40,326 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-10-16 13:00:40,326 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-16 13:00:40,358 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-10-16 13:00:40,359 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-10-16 13:00:40,365 INFO L87 Difference]: Start difference. First operand has 1618 states, 1152 states have (on average 1.46875) internal successors, (1692), 1277 states have internal predecessors, (1692), 287 states have call successors, (287), 82 states have call predecessors, (287), 80 states have return successors, (280), 274 states have call predecessors, (280), 280 states have call successors, (280) Second operand has 5 states, 5 states have (on average 11.6) internal successors, (58), 3 states have internal predecessors, (58), 2 states have call successors, (43), 3 states have call predecessors, (43), 1 states have return successors, (42), 1 states have call predecessors, (42), 1 states have call successors, (42) [2022-10-16 13:00:49,569 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-16 13:00:49,570 INFO L93 Difference]: Finished difference Result 5824 states and 8760 transitions. [2022-10-16 13:00:49,575 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-10-16 13:00:49,577 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 11.6) internal successors, (58), 3 states have internal predecessors, (58), 2 states have call successors, (43), 3 states have call predecessors, (43), 1 states have return successors, (42), 1 states have call predecessors, (42), 1 states have call successors, (42) Word has length 263 [2022-10-16 13:00:49,583 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-16 13:00:49,668 INFO L225 Difference]: With dead ends: 5824 [2022-10-16 13:00:49,668 INFO L226 Difference]: Without dead ends: 4158 [2022-10-16 13:00:49,696 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 92 GetRequests, 86 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2022-10-16 13:00:49,701 INFO L413 NwaCegarLoop]: 2513 mSDtfsCounter, 5305 mSDsluCounter, 3747 mSDsCounter, 0 mSdLazyCounter, 2828 mSolverCounterSat, 1919 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 7.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 5551 SdHoareTripleChecker+Valid, 6260 SdHoareTripleChecker+Invalid, 4747 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 1919 IncrementalHoareTripleChecker+Valid, 2828 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 8.5s IncrementalHoareTripleChecker+Time [2022-10-16 13:00:49,704 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [5551 Valid, 6260 Invalid, 4747 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [1919 Valid, 2828 Invalid, 0 Unknown, 0 Unchecked, 8.5s Time] [2022-10-16 13:00:49,735 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 4158 states. [2022-10-16 13:00:50,124 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 4158 to 2972. [2022-10-16 13:00:50,133 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2972 states, 2217 states have (on average 1.4497068110058637) internal successors, (3214), 2339 states have internal predecessors, (3214), 505 states have call successors, (505), 158 states have call predecessors, (505), 158 states have return successors, (505), 492 states have call predecessors, (505), 505 states have call successors, (505) [2022-10-16 13:00:50,165 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2972 states to 2972 states and 4224 transitions. [2022-10-16 13:00:50,169 INFO L78 Accepts]: Start accepts. Automaton has 2972 states and 4224 transitions. Word has length 263 [2022-10-16 13:00:50,174 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-16 13:00:50,175 INFO L495 AbstractCegarLoop]: Abstraction has 2972 states and 4224 transitions. [2022-10-16 13:00:50,175 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 11.6) internal successors, (58), 3 states have internal predecessors, (58), 2 states have call successors, (43), 3 states have call predecessors, (43), 1 states have return successors, (42), 1 states have call predecessors, (42), 1 states have call successors, (42) [2022-10-16 13:00:50,175 INFO L276 IsEmpty]: Start isEmpty. Operand 2972 states and 4224 transitions. [2022-10-16 13:00:50,186 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 265 [2022-10-16 13:00:50,187 INFO L187 NwaCegarLoop]: Found error trace [2022-10-16 13:00:50,188 INFO L195 NwaCegarLoop]: trace histogram [40, 40, 40, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-16 13:00:50,188 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-10-16 13:00:50,188 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting ULTIMATE.startErr4ASSERT_VIOLATIONINTEGER_OVERFLOW === [wxh_to_modeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW, wxh_to_modeErr1ASSERT_VIOLATIONINTEGER_OVERFLOW, frame_freeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (and 95 more)] === [2022-10-16 13:00:50,189 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-16 13:00:50,189 INFO L85 PathProgramCache]: Analyzing trace with hash 1552660419, now seen corresponding path program 1 times [2022-10-16 13:00:50,194 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-16 13:00:50,197 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [297761104] [2022-10-16 13:00:50,197 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:00:50,198 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-16 13:00:50,384 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:00:50,740 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-16 13:00:50,742 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:00:50,754 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-10-16 13:00:50,756 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:00:50,767 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-10-16 13:00:50,769 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:00:50,779 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-10-16 13:00:50,782 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:00:50,793 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 26 [2022-10-16 13:00:50,796 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:00:50,807 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 32 [2022-10-16 13:00:50,809 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:00:50,820 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 38 [2022-10-16 13:00:50,822 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:00:50,833 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2022-10-16 13:00:50,836 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:00:50,847 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2022-10-16 13:00:50,849 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:00:50,861 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 56 [2022-10-16 13:00:50,863 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:00:50,874 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 62 [2022-10-16 13:00:50,876 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:00:50,887 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 68 [2022-10-16 13:00:50,889 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:00:50,900 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 74 [2022-10-16 13:00:50,903 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:00:50,914 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 80 [2022-10-16 13:00:50,916 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:00:50,927 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 86 [2022-10-16 13:00:50,930 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:00:50,941 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 92 [2022-10-16 13:00:50,943 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:00:50,953 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 98 [2022-10-16 13:00:50,956 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:00:50,965 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 104 [2022-10-16 13:00:50,968 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:00:50,978 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 110 [2022-10-16 13:00:50,980 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:00:50,989 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 116 [2022-10-16 13:00:50,991 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:00:51,002 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 122 [2022-10-16 13:00:51,004 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:00:51,014 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 128 [2022-10-16 13:00:51,016 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:00:51,025 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 134 [2022-10-16 13:00:51,028 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:00:51,040 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 140 [2022-10-16 13:00:51,042 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:00:51,052 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 146 [2022-10-16 13:00:51,054 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:00:51,064 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 152 [2022-10-16 13:00:51,066 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:00:51,075 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 158 [2022-10-16 13:00:51,078 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:00:51,086 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 164 [2022-10-16 13:00:51,089 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:00:51,098 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 170 [2022-10-16 13:00:51,100 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:00:51,110 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 176 [2022-10-16 13:00:51,112 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:00:51,121 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 182 [2022-10-16 13:00:51,123 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:00:51,132 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 188 [2022-10-16 13:00:51,134 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:00:51,143 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 194 [2022-10-16 13:00:51,145 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:00:51,154 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 200 [2022-10-16 13:00:51,157 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:00:51,166 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 206 [2022-10-16 13:00:51,168 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:00:51,176 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 212 [2022-10-16 13:00:51,179 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:00:51,188 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 218 [2022-10-16 13:00:51,191 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:00:51,199 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 224 [2022-10-16 13:00:51,202 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:00:51,211 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 230 [2022-10-16 13:00:51,214 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:00:51,222 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 236 [2022-10-16 13:00:51,225 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:00:51,240 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 243 [2022-10-16 13:00:51,243 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:00:51,252 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 249 [2022-10-16 13:00:51,255 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:00:51,266 INFO L134 CoverageAnalysis]: Checked inductivity of 3124 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3124 trivial. 0 not checked. [2022-10-16 13:00:51,266 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-16 13:00:51,266 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [297761104] [2022-10-16 13:00:51,267 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [297761104] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-16 13:00:51,267 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-16 13:00:51,267 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-10-16 13:00:51,267 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2057835484] [2022-10-16 13:00:51,267 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-16 13:00:51,269 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-10-16 13:00:51,270 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-16 13:00:51,270 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-10-16 13:00:51,270 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-10-16 13:00:51,271 INFO L87 Difference]: Start difference. First operand 2972 states and 4224 transitions. Second operand has 5 states, 5 states have (on average 12.0) internal successors, (60), 3 states have internal predecessors, (60), 1 states have call successors, (42), 2 states have call predecessors, (42), 1 states have return successors, (42), 1 states have call predecessors, (42), 1 states have call successors, (42) [2022-10-16 13:01:00,299 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-16 13:01:00,300 INFO L93 Difference]: Finished difference Result 10873 states and 15909 transitions. [2022-10-16 13:01:00,300 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-10-16 13:01:00,301 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 12.0) internal successors, (60), 3 states have internal predecessors, (60), 1 states have call successors, (42), 2 states have call predecessors, (42), 1 states have return successors, (42), 1 states have call predecessors, (42), 1 states have call successors, (42) Word has length 264 [2022-10-16 13:01:00,301 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-16 13:01:00,362 INFO L225 Difference]: With dead ends: 10873 [2022-10-16 13:01:00,363 INFO L226 Difference]: Without dead ends: 7988 [2022-10-16 13:01:00,378 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 92 GetRequests, 86 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2022-10-16 13:01:00,379 INFO L413 NwaCegarLoop]: 2371 mSDtfsCounter, 5545 mSDsluCounter, 3682 mSDsCounter, 0 mSdLazyCounter, 2771 mSolverCounterSat, 1914 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 7.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 5791 SdHoareTripleChecker+Valid, 6053 SdHoareTripleChecker+Invalid, 4685 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 1914 IncrementalHoareTripleChecker+Valid, 2771 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 8.4s IncrementalHoareTripleChecker+Time [2022-10-16 13:01:00,380 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [5791 Valid, 6053 Invalid, 4685 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [1914 Valid, 2771 Invalid, 0 Unknown, 0 Unchecked, 8.4s Time] [2022-10-16 13:01:00,389 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 7988 states. [2022-10-16 13:01:00,710 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 7988 to 5734. [2022-10-16 13:01:00,727 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5734 states, 4361 states have (on average 1.4531070855308414) internal successors, (6337), 4515 states have internal predecessors, (6337), 965 states have call successors, (965), 316 states have call predecessors, (965), 316 states have return successors, (965), 938 states have call predecessors, (965), 965 states have call successors, (965) [2022-10-16 13:01:00,762 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5734 states to 5734 states and 8267 transitions. [2022-10-16 13:01:00,764 INFO L78 Accepts]: Start accepts. Automaton has 5734 states and 8267 transitions. Word has length 264 [2022-10-16 13:01:00,765 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-16 13:01:00,766 INFO L495 AbstractCegarLoop]: Abstraction has 5734 states and 8267 transitions. [2022-10-16 13:01:00,766 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 12.0) internal successors, (60), 3 states have internal predecessors, (60), 1 states have call successors, (42), 2 states have call predecessors, (42), 1 states have return successors, (42), 1 states have call predecessors, (42), 1 states have call successors, (42) [2022-10-16 13:01:00,766 INFO L276 IsEmpty]: Start isEmpty. Operand 5734 states and 8267 transitions. [2022-10-16 13:01:00,772 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 292 [2022-10-16 13:01:00,773 INFO L187 NwaCegarLoop]: Found error trace [2022-10-16 13:01:00,773 INFO L195 NwaCegarLoop]: trace histogram [40, 40, 40, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-16 13:01:00,774 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-10-16 13:01:00,774 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting ULTIMATE.startErr18ASSERT_VIOLATIONINTEGER_OVERFLOW === [wxh_to_modeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW, wxh_to_modeErr1ASSERT_VIOLATIONINTEGER_OVERFLOW, frame_freeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (and 95 more)] === [2022-10-16 13:01:00,774 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-16 13:01:00,775 INFO L85 PathProgramCache]: Analyzing trace with hash -1677549424, now seen corresponding path program 1 times [2022-10-16 13:01:00,775 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-16 13:01:00,775 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1230000395] [2022-10-16 13:01:00,775 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:01:00,775 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-16 13:01:00,917 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:01,152 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-16 13:01:01,154 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:01,164 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-10-16 13:01:01,166 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:01,175 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-10-16 13:01:01,176 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:01,185 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-10-16 13:01:01,187 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:01,199 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 26 [2022-10-16 13:01:01,201 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:01,210 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 32 [2022-10-16 13:01:01,212 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:01,222 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 38 [2022-10-16 13:01:01,224 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:01,232 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2022-10-16 13:01:01,234 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:01,243 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2022-10-16 13:01:01,245 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:01,254 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 56 [2022-10-16 13:01:01,256 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:01,264 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 62 [2022-10-16 13:01:01,267 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:01,275 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 68 [2022-10-16 13:01:01,277 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:01,286 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 74 [2022-10-16 13:01:01,288 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:01,296 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 80 [2022-10-16 13:01:01,298 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:01,307 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 86 [2022-10-16 13:01:01,309 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:01,317 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 92 [2022-10-16 13:01:01,319 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:01,328 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 98 [2022-10-16 13:01:01,330 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:01,339 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 104 [2022-10-16 13:01:01,341 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:01,350 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 110 [2022-10-16 13:01:01,352 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:01,363 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 116 [2022-10-16 13:01:01,365 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:01,373 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 122 [2022-10-16 13:01:01,376 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:01,385 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 128 [2022-10-16 13:01:01,387 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:01,395 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 134 [2022-10-16 13:01:01,398 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:01,407 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 140 [2022-10-16 13:01:01,409 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:01,417 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 146 [2022-10-16 13:01:01,420 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:01,428 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 152 [2022-10-16 13:01:01,431 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:01,439 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 158 [2022-10-16 13:01:01,442 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:01,450 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 164 [2022-10-16 13:01:01,453 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:01,461 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 170 [2022-10-16 13:01:01,463 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:01,472 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 176 [2022-10-16 13:01:01,475 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:01,483 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 182 [2022-10-16 13:01:01,486 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:01,551 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 188 [2022-10-16 13:01:01,555 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:01,565 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 194 [2022-10-16 13:01:01,569 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:01,581 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 200 [2022-10-16 13:01:01,583 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:01,595 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 206 [2022-10-16 13:01:01,597 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:01,611 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 212 [2022-10-16 13:01:01,613 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:01,622 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 218 [2022-10-16 13:01:01,628 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:01,636 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 224 [2022-10-16 13:01:01,638 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:01,654 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 230 [2022-10-16 13:01:01,657 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:01,667 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 236 [2022-10-16 13:01:01,669 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:01,685 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 243 [2022-10-16 13:01:01,689 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:01,700 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 249 [2022-10-16 13:01:01,705 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:01,720 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 270 [2022-10-16 13:01:01,726 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:01,740 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 13:01:01,741 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:01,750 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-10-16 13:01:01,752 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:01,763 INFO L134 CoverageAnalysis]: Checked inductivity of 3128 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3128 trivial. 0 not checked. [2022-10-16 13:01:01,763 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-16 13:01:01,763 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1230000395] [2022-10-16 13:01:01,763 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1230000395] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-16 13:01:01,764 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-16 13:01:01,764 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-10-16 13:01:01,764 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [406619587] [2022-10-16 13:01:01,764 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-16 13:01:01,765 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-10-16 13:01:01,765 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-16 13:01:01,766 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-10-16 13:01:01,766 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2022-10-16 13:01:01,766 INFO L87 Difference]: Start difference. First operand 5734 states and 8267 transitions. Second operand has 6 states, 6 states have (on average 13.0) internal successors, (78), 3 states have internal predecessors, (78), 2 states have call successors, (45), 3 states have call predecessors, (45), 1 states have return successors, (45), 2 states have call predecessors, (45), 2 states have call successors, (45) [2022-10-16 13:01:10,469 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-16 13:01:10,469 INFO L93 Difference]: Finished difference Result 21454 states and 31801 transitions. [2022-10-16 13:01:10,470 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-10-16 13:01:10,470 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 13.0) internal successors, (78), 3 states have internal predecessors, (78), 2 states have call successors, (45), 3 states have call predecessors, (45), 1 states have return successors, (45), 2 states have call predecessors, (45), 2 states have call successors, (45) Word has length 291 [2022-10-16 13:01:10,471 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-16 13:01:10,593 INFO L225 Difference]: With dead ends: 21454 [2022-10-16 13:01:10,594 INFO L226 Difference]: Without dead ends: 15807 [2022-10-16 13:01:10,626 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 101 GetRequests, 93 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2022-10-16 13:01:10,628 INFO L413 NwaCegarLoop]: 2494 mSDtfsCounter, 6454 mSDsluCounter, 4048 mSDsCounter, 0 mSdLazyCounter, 3099 mSolverCounterSat, 2759 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 6.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 6693 SdHoareTripleChecker+Valid, 6542 SdHoareTripleChecker+Invalid, 5858 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 2759 IncrementalHoareTripleChecker+Valid, 3099 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 7.8s IncrementalHoareTripleChecker+Time [2022-10-16 13:01:10,628 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [6693 Valid, 6542 Invalid, 5858 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [2759 Valid, 3099 Invalid, 0 Unknown, 0 Unchecked, 7.8s Time] [2022-10-16 13:01:10,647 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 15807 states. [2022-10-16 13:01:11,425 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 15807 to 10155. [2022-10-16 13:01:11,469 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10155 states, 7798 states have (on average 1.4499871761990253) internal successors, (11307), 8012 states have internal predecessors, (11307), 1664 states have call successors, (1664), 601 states have call predecessors, (1664), 601 states have return successors, (1664), 1613 states have call predecessors, (1664), 1664 states have call successors, (1664) [2022-10-16 13:01:11,516 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10155 states to 10155 states and 14635 transitions. [2022-10-16 13:01:11,519 INFO L78 Accepts]: Start accepts. Automaton has 10155 states and 14635 transitions. Word has length 291 [2022-10-16 13:01:11,520 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-16 13:01:11,521 INFO L495 AbstractCegarLoop]: Abstraction has 10155 states and 14635 transitions. [2022-10-16 13:01:11,522 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 13.0) internal successors, (78), 3 states have internal predecessors, (78), 2 states have call successors, (45), 3 states have call predecessors, (45), 1 states have return successors, (45), 2 states have call predecessors, (45), 2 states have call successors, (45) [2022-10-16 13:01:11,522 INFO L276 IsEmpty]: Start isEmpty. Operand 10155 states and 14635 transitions. [2022-10-16 13:01:11,527 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 298 [2022-10-16 13:01:11,528 INFO L187 NwaCegarLoop]: Found error trace [2022-10-16 13:01:11,529 INFO L195 NwaCegarLoop]: trace histogram [40, 40, 40, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-16 13:01:11,529 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-10-16 13:01:11,530 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting ULTIMATE.startErr6ASSERT_VIOLATIONINTEGER_OVERFLOW === [wxh_to_modeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW, wxh_to_modeErr1ASSERT_VIOLATIONINTEGER_OVERFLOW, frame_freeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (and 95 more)] === [2022-10-16 13:01:11,530 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-16 13:01:11,530 INFO L85 PathProgramCache]: Analyzing trace with hash 1586347619, now seen corresponding path program 1 times [2022-10-16 13:01:11,531 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-16 13:01:11,531 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1798496833] [2022-10-16 13:01:11,531 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:01:11,531 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-16 13:01:11,657 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:11,873 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-16 13:01:11,875 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:11,883 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-10-16 13:01:11,885 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:11,893 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-10-16 13:01:11,895 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:11,908 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-10-16 13:01:11,909 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:11,920 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 26 [2022-10-16 13:01:11,923 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:11,935 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 32 [2022-10-16 13:01:11,938 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:11,946 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 38 [2022-10-16 13:01:11,948 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:11,956 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2022-10-16 13:01:11,959 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:11,971 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2022-10-16 13:01:11,974 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:11,985 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 56 [2022-10-16 13:01:11,987 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:11,996 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 62 [2022-10-16 13:01:11,999 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:12,011 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 68 [2022-10-16 13:01:12,014 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:12,024 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 74 [2022-10-16 13:01:12,026 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:12,034 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 80 [2022-10-16 13:01:12,037 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:12,050 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 86 [2022-10-16 13:01:12,052 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:12,063 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 92 [2022-10-16 13:01:12,065 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:12,074 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 98 [2022-10-16 13:01:12,077 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:12,090 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 104 [2022-10-16 13:01:12,092 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:12,104 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 110 [2022-10-16 13:01:12,107 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:12,118 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 116 [2022-10-16 13:01:12,123 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:12,135 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 122 [2022-10-16 13:01:12,137 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:12,146 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 128 [2022-10-16 13:01:12,148 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:12,161 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 134 [2022-10-16 13:01:12,164 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:12,174 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 140 [2022-10-16 13:01:12,177 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:12,185 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 146 [2022-10-16 13:01:12,187 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:12,195 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 152 [2022-10-16 13:01:12,198 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:12,207 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 158 [2022-10-16 13:01:12,210 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:12,218 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 164 [2022-10-16 13:01:12,223 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:12,232 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 170 [2022-10-16 13:01:12,235 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:12,243 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 176 [2022-10-16 13:01:12,245 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:12,255 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 182 [2022-10-16 13:01:12,257 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:12,266 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 188 [2022-10-16 13:01:12,270 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:12,279 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 194 [2022-10-16 13:01:12,281 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:12,289 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 200 [2022-10-16 13:01:12,292 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:12,299 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 206 [2022-10-16 13:01:12,302 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:12,310 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 212 [2022-10-16 13:01:12,313 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:12,321 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 218 [2022-10-16 13:01:12,324 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:12,332 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 224 [2022-10-16 13:01:12,334 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:12,343 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 230 [2022-10-16 13:01:12,345 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:12,354 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 236 [2022-10-16 13:01:12,356 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:12,372 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 243 [2022-10-16 13:01:12,375 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:12,383 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 249 [2022-10-16 13:01:12,386 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:12,417 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 264 [2022-10-16 13:01:12,429 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:12,451 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 13:01:12,455 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:12,468 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 13:01:12,469 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:12,479 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-10-16 13:01:12,481 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:12,493 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-10-16 13:01:12,506 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:12,517 INFO L134 CoverageAnalysis]: Checked inductivity of 3128 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3128 trivial. 0 not checked. [2022-10-16 13:01:12,518 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-16 13:01:12,518 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1798496833] [2022-10-16 13:01:12,518 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1798496833] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-16 13:01:12,519 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-16 13:01:12,519 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-10-16 13:01:12,519 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1214110929] [2022-10-16 13:01:12,519 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-16 13:01:12,520 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-10-16 13:01:12,520 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-16 13:01:12,521 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-10-16 13:01:12,521 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2022-10-16 13:01:12,521 INFO L87 Difference]: Start difference. First operand 10155 states and 14635 transitions. Second operand has 7 states, 7 states have (on average 11.428571428571429) internal successors, (80), 3 states have internal predecessors, (80), 2 states have call successors, (47), 5 states have call predecessors, (47), 1 states have return successors, (47), 2 states have call predecessors, (47), 2 states have call successors, (47) [2022-10-16 13:01:31,120 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-16 13:01:31,121 INFO L93 Difference]: Finished difference Result 35013 states and 52131 transitions. [2022-10-16 13:01:31,121 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2022-10-16 13:01:31,122 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 11.428571428571429) internal successors, (80), 3 states have internal predecessors, (80), 2 states have call successors, (47), 5 states have call predecessors, (47), 1 states have return successors, (47), 2 states have call predecessors, (47), 2 states have call successors, (47) Word has length 297 [2022-10-16 13:01:31,122 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-16 13:01:31,254 INFO L225 Difference]: With dead ends: 35013 [2022-10-16 13:01:31,254 INFO L226 Difference]: Without dead ends: 24952 [2022-10-16 13:01:31,308 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 105 GetRequests, 95 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 12 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=49, Invalid=83, Unknown=0, NotChecked=0, Total=132 [2022-10-16 13:01:31,310 INFO L413 NwaCegarLoop]: 4172 mSDtfsCounter, 3653 mSDsluCounter, 9133 mSDsCounter, 0 mSdLazyCounter, 6519 mSolverCounterSat, 1291 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 15.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 3976 SdHoareTripleChecker+Valid, 13305 SdHoareTripleChecker+Invalid, 7810 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 1291 IncrementalHoareTripleChecker+Valid, 6519 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 16.9s IncrementalHoareTripleChecker+Time [2022-10-16 13:01:31,310 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [3976 Valid, 13305 Invalid, 7810 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [1291 Valid, 6519 Invalid, 0 Unknown, 0 Unchecked, 16.9s Time] [2022-10-16 13:01:31,340 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 24952 states. [2022-10-16 13:01:32,926 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 24952 to 15519. [2022-10-16 13:01:32,949 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15519 states, 11994 states have (on average 1.4518926129731533) internal successors, (17414), 12272 states have internal predecessors, (17414), 2520 states have call successors, (2520), 913 states have call predecessors, (2520), 913 states have return successors, (2520), 2441 states have call predecessors, (2520), 2520 states have call successors, (2520) [2022-10-16 13:01:33,013 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15519 states to 15519 states and 22454 transitions. [2022-10-16 13:01:33,020 INFO L78 Accepts]: Start accepts. Automaton has 15519 states and 22454 transitions. Word has length 297 [2022-10-16 13:01:33,021 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-16 13:01:33,021 INFO L495 AbstractCegarLoop]: Abstraction has 15519 states and 22454 transitions. [2022-10-16 13:01:33,022 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 11.428571428571429) internal successors, (80), 3 states have internal predecessors, (80), 2 states have call successors, (47), 5 states have call predecessors, (47), 1 states have return successors, (47), 2 states have call predecessors, (47), 2 states have call successors, (47) [2022-10-16 13:01:33,022 INFO L276 IsEmpty]: Start isEmpty. Operand 15519 states and 22454 transitions. [2022-10-16 13:01:33,028 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 326 [2022-10-16 13:01:33,028 INFO L187 NwaCegarLoop]: Found error trace [2022-10-16 13:01:33,028 INFO L195 NwaCegarLoop]: trace histogram [48, 48, 48, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-16 13:01:33,028 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-10-16 13:01:33,029 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting gspca_vm_closeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW === [wxh_to_modeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW, wxh_to_modeErr1ASSERT_VIOLATIONINTEGER_OVERFLOW, frame_freeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (and 95 more)] === [2022-10-16 13:01:33,029 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-16 13:01:33,029 INFO L85 PathProgramCache]: Analyzing trace with hash -1356252033, now seen corresponding path program 1 times [2022-10-16 13:01:33,029 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-16 13:01:33,030 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1013123571] [2022-10-16 13:01:33,030 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:01:33,030 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-16 13:01:33,149 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:33,599 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-16 13:01:33,601 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:33,609 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-10-16 13:01:33,611 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:33,620 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-10-16 13:01:33,621 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:33,629 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-10-16 13:01:33,631 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:33,639 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 26 [2022-10-16 13:01:33,641 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:33,648 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 32 [2022-10-16 13:01:33,650 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:33,659 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 38 [2022-10-16 13:01:33,661 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:33,669 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2022-10-16 13:01:33,671 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:33,679 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2022-10-16 13:01:33,681 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:33,689 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 56 [2022-10-16 13:01:33,691 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:33,699 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 62 [2022-10-16 13:01:33,701 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:33,709 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 68 [2022-10-16 13:01:33,711 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:33,719 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 74 [2022-10-16 13:01:33,721 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:33,729 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 80 [2022-10-16 13:01:33,731 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:33,739 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 86 [2022-10-16 13:01:33,741 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:33,749 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 92 [2022-10-16 13:01:33,751 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:33,760 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 98 [2022-10-16 13:01:33,762 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:33,770 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 104 [2022-10-16 13:01:33,772 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:33,780 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 110 [2022-10-16 13:01:33,783 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:33,791 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 116 [2022-10-16 13:01:33,793 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:33,801 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 122 [2022-10-16 13:01:33,803 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:33,812 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 128 [2022-10-16 13:01:33,814 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:33,822 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 134 [2022-10-16 13:01:33,824 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:33,832 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 140 [2022-10-16 13:01:33,834 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:33,842 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 146 [2022-10-16 13:01:33,844 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:33,853 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 152 [2022-10-16 13:01:33,855 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:33,863 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 158 [2022-10-16 13:01:33,866 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:33,874 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 164 [2022-10-16 13:01:33,877 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:33,934 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 170 [2022-10-16 13:01:33,936 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:33,945 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 176 [2022-10-16 13:01:33,947 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:33,956 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 182 [2022-10-16 13:01:33,958 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:33,967 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 188 [2022-10-16 13:01:33,970 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:33,979 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 194 [2022-10-16 13:01:33,981 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:33,991 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 200 [2022-10-16 13:01:33,993 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:34,002 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 206 [2022-10-16 13:01:34,005 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:34,014 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 212 [2022-10-16 13:01:34,016 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:34,025 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 218 [2022-10-16 13:01:34,029 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:34,040 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 224 [2022-10-16 13:01:34,042 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:34,051 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 230 [2022-10-16 13:01:34,053 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:34,063 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 236 [2022-10-16 13:01:34,065 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:34,081 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 243 [2022-10-16 13:01:34,083 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:34,092 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 249 [2022-10-16 13:01:34,096 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:34,106 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 265 [2022-10-16 13:01:34,108 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:34,117 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 271 [2022-10-16 13:01:34,120 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:34,130 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 277 [2022-10-16 13:01:34,132 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:34,142 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 283 [2022-10-16 13:01:34,144 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:34,152 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 289 [2022-10-16 13:01:34,155 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:34,164 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 295 [2022-10-16 13:01:34,166 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:34,175 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 302 [2022-10-16 13:01:34,177 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:34,186 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 309 [2022-10-16 13:01:34,190 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:34,207 INFO L134 CoverageAnalysis]: Checked inductivity of 4518 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 4516 trivial. 0 not checked. [2022-10-16 13:01:34,207 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-16 13:01:34,207 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1013123571] [2022-10-16 13:01:34,207 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1013123571] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-16 13:01:34,208 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-16 13:01:34,208 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-10-16 13:01:34,208 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2052326807] [2022-10-16 13:01:34,208 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-16 13:01:34,209 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-10-16 13:01:34,209 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-16 13:01:34,210 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-10-16 13:01:34,210 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-10-16 13:01:34,210 INFO L87 Difference]: Start difference. First operand 15519 states and 22454 transitions. Second operand has 5 states, 5 states have (on average 16.0) internal successors, (80), 3 states have internal predecessors, (80), 3 states have call successors, (51), 3 states have call predecessors, (51), 1 states have return successors, (50), 2 states have call predecessors, (50), 2 states have call successors, (50) [2022-10-16 13:01:43,490 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-16 13:01:43,490 INFO L93 Difference]: Finished difference Result 48264 states and 71243 transitions. [2022-10-16 13:01:43,491 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-10-16 13:01:43,491 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 16.0) internal successors, (80), 3 states have internal predecessors, (80), 3 states have call successors, (51), 3 states have call predecessors, (51), 1 states have return successors, (50), 2 states have call predecessors, (50), 2 states have call successors, (50) Word has length 325 [2022-10-16 13:01:43,492 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-16 13:01:43,646 INFO L225 Difference]: With dead ends: 48264 [2022-10-16 13:01:43,646 INFO L226 Difference]: Without dead ends: 32847 [2022-10-16 13:01:43,708 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 108 GetRequests, 102 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2022-10-16 13:01:43,709 INFO L413 NwaCegarLoop]: 2614 mSDtfsCounter, 5087 mSDsluCounter, 4028 mSDsCounter, 0 mSdLazyCounter, 2935 mSolverCounterSat, 1827 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 6.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 5292 SdHoareTripleChecker+Valid, 6642 SdHoareTripleChecker+Invalid, 4762 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1827 IncrementalHoareTripleChecker+Valid, 2935 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 7.2s IncrementalHoareTripleChecker+Time [2022-10-16 13:01:43,710 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [5292 Valid, 6642 Invalid, 4762 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1827 Valid, 2935 Invalid, 0 Unknown, 0 Unchecked, 7.2s Time] [2022-10-16 13:01:43,743 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 32847 states. [2022-10-16 13:01:45,501 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 32847 to 23168. [2022-10-16 13:01:45,531 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 23168 states, 17960 states have (on average 1.4516703786191536) internal successors, (26072), 18332 states have internal predecessors, (26072), 3750 states have call successors, (3750), 1366 states have call predecessors, (3750), 1366 states have return successors, (3750), 3631 states have call predecessors, (3750), 3750 states have call successors, (3750) [2022-10-16 13:01:45,636 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 23168 states to 23168 states and 33572 transitions. [2022-10-16 13:01:45,643 INFO L78 Accepts]: Start accepts. Automaton has 23168 states and 33572 transitions. Word has length 325 [2022-10-16 13:01:45,644 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-16 13:01:45,644 INFO L495 AbstractCegarLoop]: Abstraction has 23168 states and 33572 transitions. [2022-10-16 13:01:45,644 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 16.0) internal successors, (80), 3 states have internal predecessors, (80), 3 states have call successors, (51), 3 states have call predecessors, (51), 1 states have return successors, (50), 2 states have call predecessors, (50), 2 states have call successors, (50) [2022-10-16 13:01:45,644 INFO L276 IsEmpty]: Start isEmpty. Operand 23168 states and 33572 transitions. [2022-10-16 13:01:45,650 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 327 [2022-10-16 13:01:45,651 INFO L187 NwaCegarLoop]: Found error trace [2022-10-16 13:01:45,651 INFO L195 NwaCegarLoop]: trace histogram [48, 48, 48, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-16 13:01:45,651 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-10-16 13:01:45,651 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting gspca_vm_openErr0ASSERT_VIOLATIONINTEGER_OVERFLOW === [wxh_to_modeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW, wxh_to_modeErr1ASSERT_VIOLATIONINTEGER_OVERFLOW, frame_freeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (and 95 more)] === [2022-10-16 13:01:45,652 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-16 13:01:45,652 INFO L85 PathProgramCache]: Analyzing trace with hash 1154401073, now seen corresponding path program 1 times [2022-10-16 13:01:45,652 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-16 13:01:45,652 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [287853025] [2022-10-16 13:01:45,652 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:01:45,653 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-16 13:01:45,964 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:46,808 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-16 13:01:46,811 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:46,824 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-10-16 13:01:46,826 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:46,834 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-10-16 13:01:46,836 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:46,844 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-10-16 13:01:46,846 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:46,857 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 26 [2022-10-16 13:01:46,859 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:46,868 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 32 [2022-10-16 13:01:46,870 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:46,880 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 38 [2022-10-16 13:01:46,882 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:46,890 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2022-10-16 13:01:46,892 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:46,903 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2022-10-16 13:01:46,905 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:46,914 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 56 [2022-10-16 13:01:46,916 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:46,924 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 62 [2022-10-16 13:01:46,926 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:46,934 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 68 [2022-10-16 13:01:46,936 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:46,945 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 74 [2022-10-16 13:01:46,947 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:46,961 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 80 [2022-10-16 13:01:46,963 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:46,973 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 86 [2022-10-16 13:01:46,975 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:46,984 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 92 [2022-10-16 13:01:46,986 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:46,996 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 98 [2022-10-16 13:01:47,000 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:47,013 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 104 [2022-10-16 13:01:47,016 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:47,032 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 110 [2022-10-16 13:01:47,034 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:47,042 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 116 [2022-10-16 13:01:47,044 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:47,053 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 122 [2022-10-16 13:01:47,056 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:47,065 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 128 [2022-10-16 13:01:47,068 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:47,076 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 134 [2022-10-16 13:01:47,078 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:47,088 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 140 [2022-10-16 13:01:47,094 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:47,108 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 146 [2022-10-16 13:01:47,110 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:47,120 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 152 [2022-10-16 13:01:47,122 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:47,131 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 158 [2022-10-16 13:01:47,135 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:47,144 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 164 [2022-10-16 13:01:47,147 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:47,155 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 170 [2022-10-16 13:01:47,158 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:47,166 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 176 [2022-10-16 13:01:47,168 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:47,177 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 182 [2022-10-16 13:01:47,179 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:47,188 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 188 [2022-10-16 13:01:47,191 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:47,198 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 194 [2022-10-16 13:01:47,201 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:47,210 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 200 [2022-10-16 13:01:47,213 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:47,221 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 206 [2022-10-16 13:01:47,224 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:47,232 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 212 [2022-10-16 13:01:47,234 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:47,243 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 218 [2022-10-16 13:01:47,245 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:47,254 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 224 [2022-10-16 13:01:47,259 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:47,267 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 230 [2022-10-16 13:01:47,272 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:47,280 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 236 [2022-10-16 13:01:47,282 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:47,296 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 243 [2022-10-16 13:01:47,309 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:47,408 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 249 [2022-10-16 13:01:47,411 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:47,422 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 265 [2022-10-16 13:01:47,425 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:47,435 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 271 [2022-10-16 13:01:47,437 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:47,446 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 277 [2022-10-16 13:01:47,449 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:47,457 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 283 [2022-10-16 13:01:47,460 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:47,469 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 289 [2022-10-16 13:01:47,472 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:47,480 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 295 [2022-10-16 13:01:47,483 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:47,492 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 302 [2022-10-16 13:01:47,495 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:47,504 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 309 [2022-10-16 13:01:47,508 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:47,519 INFO L134 CoverageAnalysis]: Checked inductivity of 4518 backedges. 0 proven. 3 refuted. 0 times theorem prover too weak. 4515 trivial. 0 not checked. [2022-10-16 13:01:47,519 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-16 13:01:47,519 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [287853025] [2022-10-16 13:01:47,519 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [287853025] provided 0 perfect and 1 imperfect interpolant sequences [2022-10-16 13:01:47,520 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [733704288] [2022-10-16 13:01:47,520 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:01:47,520 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-10-16 13:01:47,520 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-10-16 13:01:47,523 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-10-16 13:01:47,531 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-10-16 13:01:48,583 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:48,600 INFO L263 TraceCheckSpWp]: Trace formula consists of 3627 conjuncts, 5 conjunts are in the unsatisfiable core [2022-10-16 13:01:48,626 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-10-16 13:01:48,730 INFO L134 CoverageAnalysis]: Checked inductivity of 4518 backedges. 1284 proven. 0 refuted. 0 times theorem prover too weak. 3234 trivial. 0 not checked. [2022-10-16 13:01:48,730 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-10-16 13:01:48,730 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [733704288] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-16 13:01:48,731 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-10-16 13:01:48,731 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [6] total 7 [2022-10-16 13:01:48,731 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [911046691] [2022-10-16 13:01:48,732 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-16 13:01:48,733 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-10-16 13:01:48,733 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-16 13:01:48,733 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-10-16 13:01:48,734 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=12, Invalid=30, Unknown=0, NotChecked=0, Total=42 [2022-10-16 13:01:48,734 INFO L87 Difference]: Start difference. First operand 23168 states and 33572 transitions. Second operand has 4 states, 4 states have (on average 21.5) internal successors, (86), 4 states have internal predecessors, (86), 2 states have call successors, (51), 2 states have call predecessors, (51), 3 states have return successors, (50), 2 states have call predecessors, (50), 2 states have call successors, (50) [2022-10-16 13:01:50,682 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-16 13:01:50,685 INFO L93 Difference]: Finished difference Result 46298 states and 67241 transitions. [2022-10-16 13:01:50,685 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-10-16 13:01:50,686 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 21.5) internal successors, (86), 4 states have internal predecessors, (86), 2 states have call successors, (51), 2 states have call predecessors, (51), 3 states have return successors, (50), 2 states have call predecessors, (50), 2 states have call successors, (50) Word has length 326 [2022-10-16 13:01:50,686 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-16 13:01:50,796 INFO L225 Difference]: With dead ends: 46298 [2022-10-16 13:01:50,797 INFO L226 Difference]: Without dead ends: 23187 [2022-10-16 13:01:50,987 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 429 GetRequests, 422 SyntacticMatches, 1 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=39, Unknown=0, NotChecked=0, Total=56 [2022-10-16 13:01:50,989 INFO L413 NwaCegarLoop]: 2188 mSDtfsCounter, 2 mSDsluCounter, 4370 mSDsCounter, 0 mSdLazyCounter, 11 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2 SdHoareTripleChecker+Valid, 6558 SdHoareTripleChecker+Invalid, 15 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 11 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-10-16 13:01:50,990 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [2 Valid, 6558 Invalid, 15 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 11 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-10-16 13:01:51,012 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 23187 states. [2022-10-16 13:01:52,857 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 23187 to 23187. [2022-10-16 13:01:52,881 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 23187 states, 17979 states have (on average 1.4511930585683297) internal successors, (26091), 18351 states have internal predecessors, (26091), 3750 states have call successors, (3750), 1366 states have call predecessors, (3750), 1366 states have return successors, (3750), 3631 states have call predecessors, (3750), 3750 states have call successors, (3750) [2022-10-16 13:01:53,009 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 23187 states to 23187 states and 33591 transitions. [2022-10-16 13:01:53,017 INFO L78 Accepts]: Start accepts. Automaton has 23187 states and 33591 transitions. Word has length 326 [2022-10-16 13:01:53,020 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-16 13:01:53,020 INFO L495 AbstractCegarLoop]: Abstraction has 23187 states and 33591 transitions. [2022-10-16 13:01:53,020 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 21.5) internal successors, (86), 4 states have internal predecessors, (86), 2 states have call successors, (51), 2 states have call predecessors, (51), 3 states have return successors, (50), 2 states have call predecessors, (50), 2 states have call successors, (50) [2022-10-16 13:01:53,020 INFO L276 IsEmpty]: Start isEmpty. Operand 23187 states and 33591 transitions. [2022-10-16 13:01:53,027 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 329 [2022-10-16 13:01:53,027 INFO L187 NwaCegarLoop]: Found error trace [2022-10-16 13:01:53,028 INFO L195 NwaCegarLoop]: trace histogram [48, 48, 48, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-16 13:01:53,071 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-10-16 13:01:53,242 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable5 [2022-10-16 13:01:53,242 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting gspca_vm_openErr0ASSERT_VIOLATIONINTEGER_OVERFLOW === [wxh_to_modeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW, wxh_to_modeErr1ASSERT_VIOLATIONINTEGER_OVERFLOW, frame_freeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (and 95 more)] === [2022-10-16 13:01:53,243 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-16 13:01:53,243 INFO L85 PathProgramCache]: Analyzing trace with hash 54085197, now seen corresponding path program 1 times [2022-10-16 13:01:53,243 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-16 13:01:53,244 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1803562048] [2022-10-16 13:01:53,244 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:01:53,244 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-16 13:01:53,441 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:54,424 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-16 13:01:54,426 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:54,435 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-10-16 13:01:54,437 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:54,446 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-10-16 13:01:54,448 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:54,458 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-10-16 13:01:54,460 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:54,469 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 26 [2022-10-16 13:01:54,471 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:54,480 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 32 [2022-10-16 13:01:54,482 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:54,490 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 38 [2022-10-16 13:01:54,492 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:54,502 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2022-10-16 13:01:54,504 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:54,513 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2022-10-16 13:01:54,515 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:54,524 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 56 [2022-10-16 13:01:54,527 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:54,536 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 62 [2022-10-16 13:01:54,538 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:54,547 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 68 [2022-10-16 13:01:54,549 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:54,558 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 74 [2022-10-16 13:01:54,560 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:54,568 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 80 [2022-10-16 13:01:54,570 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:54,579 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 86 [2022-10-16 13:01:54,581 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:54,590 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 92 [2022-10-16 13:01:54,592 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:54,601 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 98 [2022-10-16 13:01:54,603 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:54,614 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 104 [2022-10-16 13:01:54,616 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:54,625 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 110 [2022-10-16 13:01:54,627 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:54,636 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 116 [2022-10-16 13:01:54,638 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:54,646 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 122 [2022-10-16 13:01:54,648 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:54,658 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 128 [2022-10-16 13:01:54,660 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:54,669 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 134 [2022-10-16 13:01:54,672 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:54,681 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 140 [2022-10-16 13:01:54,683 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:54,693 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 146 [2022-10-16 13:01:54,695 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:54,704 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 152 [2022-10-16 13:01:54,707 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:54,716 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 158 [2022-10-16 13:01:54,718 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:54,727 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 164 [2022-10-16 13:01:54,729 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:54,737 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 170 [2022-10-16 13:01:54,739 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:54,748 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 176 [2022-10-16 13:01:54,750 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:54,759 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 182 [2022-10-16 13:01:54,762 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:54,771 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 188 [2022-10-16 13:01:54,775 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:54,785 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 194 [2022-10-16 13:01:54,787 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:54,796 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 200 [2022-10-16 13:01:54,799 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:54,808 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 206 [2022-10-16 13:01:54,811 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:54,820 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 212 [2022-10-16 13:01:54,823 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:54,832 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 218 [2022-10-16 13:01:54,834 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:54,844 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 224 [2022-10-16 13:01:54,847 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:54,855 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 230 [2022-10-16 13:01:54,858 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:54,868 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 236 [2022-10-16 13:01:54,871 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:54,888 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 243 [2022-10-16 13:01:54,904 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:55,057 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 250 [2022-10-16 13:01:55,061 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:55,074 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 267 [2022-10-16 13:01:55,077 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:55,087 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 273 [2022-10-16 13:01:55,090 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:55,102 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 279 [2022-10-16 13:01:55,105 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:55,116 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 285 [2022-10-16 13:01:55,119 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:55,130 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 291 [2022-10-16 13:01:55,133 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:55,143 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 297 [2022-10-16 13:01:55,147 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:55,158 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 304 [2022-10-16 13:01:55,162 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:55,172 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 311 [2022-10-16 13:01:55,175 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:55,282 INFO L134 CoverageAnalysis]: Checked inductivity of 4523 backedges. 0 proven. 7 refuted. 0 times theorem prover too weak. 4516 trivial. 0 not checked. [2022-10-16 13:01:55,282 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-16 13:01:55,282 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1803562048] [2022-10-16 13:01:55,283 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1803562048] provided 0 perfect and 1 imperfect interpolant sequences [2022-10-16 13:01:55,283 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [773170653] [2022-10-16 13:01:55,283 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:01:55,283 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-10-16 13:01:55,283 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-10-16 13:01:55,285 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-10-16 13:01:55,314 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-10-16 13:01:56,130 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:01:56,148 INFO L263 TraceCheckSpWp]: Trace formula consists of 3657 conjuncts, 7 conjunts are in the unsatisfiable core [2022-10-16 13:01:56,160 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-10-16 13:01:56,235 INFO L134 CoverageAnalysis]: Checked inductivity of 4523 backedges. 1287 proven. 1 refuted. 0 times theorem prover too weak. 3235 trivial. 0 not checked. [2022-10-16 13:01:56,235 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-10-16 13:01:56,475 INFO L134 CoverageAnalysis]: Checked inductivity of 4523 backedges. 0 proven. 7 refuted. 0 times theorem prover too weak. 4516 trivial. 0 not checked. [2022-10-16 13:01:56,476 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [773170653] provided 0 perfect and 2 imperfect interpolant sequences [2022-10-16 13:01:56,476 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-10-16 13:01:56,476 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [7, 5, 5] total 12 [2022-10-16 13:01:56,476 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [714544848] [2022-10-16 13:01:56,477 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-10-16 13:01:56,478 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 12 states [2022-10-16 13:01:56,478 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-16 13:01:56,479 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2022-10-16 13:01:56,479 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=35, Invalid=97, Unknown=0, NotChecked=0, Total=132 [2022-10-16 13:01:56,480 INFO L87 Difference]: Start difference. First operand 23187 states and 33591 transitions. Second operand has 12 states, 12 states have (on average 8.5) internal successors, (102), 10 states have internal predecessors, (102), 2 states have call successors, (110), 4 states have call predecessors, (110), 5 states have return successors, (61), 2 states have call predecessors, (61), 2 states have call successors, (61) [2022-10-16 13:02:06,671 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-16 13:02:06,671 INFO L93 Difference]: Finished difference Result 55840 states and 82514 transitions. [2022-10-16 13:02:06,672 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-10-16 13:02:06,673 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 8.5) internal successors, (102), 10 states have internal predecessors, (102), 2 states have call successors, (110), 4 states have call predecessors, (110), 5 states have return successors, (61), 2 states have call predecessors, (61), 2 states have call successors, (61) Word has length 328 [2022-10-16 13:02:06,673 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-16 13:02:06,838 INFO L225 Difference]: With dead ends: 55840 [2022-10-16 13:02:06,839 INFO L226 Difference]: Without dead ends: 32708 [2022-10-16 13:02:06,913 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 767 GetRequests, 748 SyntacticMatches, 1 SemanticMatches, 18 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 19 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=107, Invalid=273, Unknown=0, NotChecked=0, Total=380 [2022-10-16 13:02:06,915 INFO L413 NwaCegarLoop]: 2243 mSDtfsCounter, 1567 mSDsluCounter, 7401 mSDsCounter, 0 mSdLazyCounter, 3724 mSolverCounterSat, 807 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 6.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1613 SdHoareTripleChecker+Valid, 9644 SdHoareTripleChecker+Invalid, 4531 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 807 IncrementalHoareTripleChecker+Valid, 3724 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 7.5s IncrementalHoareTripleChecker+Time [2022-10-16 13:02:06,915 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1613 Valid, 9644 Invalid, 4531 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [807 Valid, 3724 Invalid, 0 Unknown, 0 Unchecked, 7.5s Time] [2022-10-16 13:02:06,951 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 32708 states. [2022-10-16 13:02:08,814 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 32708 to 23208. [2022-10-16 13:02:08,831 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 23208 states, 18000 states have (on average 1.4506666666666668) internal successors, (26112), 18372 states have internal predecessors, (26112), 3750 states have call successors, (3750), 1366 states have call predecessors, (3750), 1366 states have return successors, (3750), 3631 states have call predecessors, (3750), 3750 states have call successors, (3750) [2022-10-16 13:02:08,907 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 23208 states to 23208 states and 33612 transitions. [2022-10-16 13:02:08,915 INFO L78 Accepts]: Start accepts. Automaton has 23208 states and 33612 transitions. Word has length 328 [2022-10-16 13:02:08,916 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-16 13:02:08,916 INFO L495 AbstractCegarLoop]: Abstraction has 23208 states and 33612 transitions. [2022-10-16 13:02:08,916 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 12 states, 12 states have (on average 8.5) internal successors, (102), 10 states have internal predecessors, (102), 2 states have call successors, (110), 4 states have call predecessors, (110), 5 states have return successors, (61), 2 states have call predecessors, (61), 2 states have call successors, (61) [2022-10-16 13:02:08,916 INFO L276 IsEmpty]: Start isEmpty. Operand 23208 states and 33612 transitions. [2022-10-16 13:02:08,922 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 335 [2022-10-16 13:02:08,923 INFO L187 NwaCegarLoop]: Found error trace [2022-10-16 13:02:08,923 INFO L195 NwaCegarLoop]: trace histogram [48, 48, 48, 8, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-16 13:02:08,965 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-10-16 13:02:09,136 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable6 [2022-10-16 13:02:09,136 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting gspca_vm_openErr0ASSERT_VIOLATIONINTEGER_OVERFLOW === [wxh_to_modeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW, wxh_to_modeErr1ASSERT_VIOLATIONINTEGER_OVERFLOW, frame_freeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (and 95 more)] === [2022-10-16 13:02:09,137 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-16 13:02:09,137 INFO L85 PathProgramCache]: Analyzing trace with hash -574373711, now seen corresponding path program 2 times [2022-10-16 13:02:09,137 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-16 13:02:09,137 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2087337832] [2022-10-16 13:02:09,137 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:02:09,138 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-16 13:02:10,013 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-10-16 13:02:10,013 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-10-16 13:02:10,940 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-10-16 13:02:11,686 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2022-10-16 13:02:11,686 INFO L359 BasicCegarLoop]: Counterexample is feasible [2022-10-16 13:02:11,688 INFO L805 garLoopResultBuilder]: Registering result UNSAFE for location gspca_vm_openErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (97 of 98 remaining) [2022-10-16 13:02:11,690 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location wxh_to_modeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (96 of 98 remaining) [2022-10-16 13:02:11,690 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location wxh_to_modeErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (95 of 98 remaining) [2022-10-16 13:02:11,691 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location frame_freeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (94 of 98 remaining) [2022-10-16 13:02:11,691 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location frame_freeErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (93 of 98 remaining) [2022-10-16 13:02:11,691 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location alt_xferErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (92 of 98 remaining) [2022-10-16 13:02:11,691 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location alt_xferErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (91 of 98 remaining) [2022-10-16 13:02:11,691 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location dev_mmapErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (90 of 98 remaining) [2022-10-16 13:02:11,692 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location dev_mmapErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (89 of 98 remaining) [2022-10-16 13:02:11,692 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location __create_pipeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (88 of 98 remaining) [2022-10-16 13:02:11,692 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location __create_pipeErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (87 of 98 remaining) [2022-10-16 13:02:11,692 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location vidioc_streamoffErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (86 of 98 remaining) [2022-10-16 13:02:11,693 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location vidioc_streamoffErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (85 of 98 remaining) [2022-10-16 13:02:11,693 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location gspca_init_transferErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (84 of 98 remaining) [2022-10-16 13:02:11,694 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location gspca_init_transferErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (83 of 98 remaining) [2022-10-16 13:02:11,694 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location gspca_init_transferErr2ASSERT_VIOLATIONINTEGER_OVERFLOW (82 of 98 remaining) [2022-10-16 13:02:11,694 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location gspca_init_transferErr3ASSERT_VIOLATIONINTEGER_OVERFLOW (81 of 98 remaining) [2022-10-16 13:02:11,694 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location gspca_init_transferErr4ASSERT_VIOLATIONINTEGER_OVERFLOW (80 of 98 remaining) [2022-10-16 13:02:11,694 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location gspca_init_transferErr5ASSERT_VIOLATIONINTEGER_OVERFLOW (79 of 98 remaining) [2022-10-16 13:02:11,695 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location gspca_init_transferErr6ASSERT_VIOLATIONINTEGER_OVERFLOW (78 of 98 remaining) [2022-10-16 13:02:11,695 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location gspca_init_transferErr7ASSERT_VIOLATIONINTEGER_OVERFLOW (77 of 98 remaining) [2022-10-16 13:02:11,695 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location gspca_init_transferErr8ASSERT_VIOLATIONINTEGER_OVERFLOW (76 of 98 remaining) [2022-10-16 13:02:11,695 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location gspca_init_transferErr9ASSERT_VIOLATIONINTEGER_OVERFLOW (75 of 98 remaining) [2022-10-16 13:02:11,695 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location gspca_init_transferErr10ASSERT_VIOLATIONINTEGER_OVERFLOW (74 of 98 remaining) [2022-10-16 13:02:11,695 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location gspca_init_transferErr11ASSERT_VIOLATIONINTEGER_OVERFLOW (73 of 98 remaining) [2022-10-16 13:02:11,695 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location gspca_init_transferErr12ASSERT_VIOLATIONINTEGER_OVERFLOW (72 of 98 remaining) [2022-10-16 13:02:11,696 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location gspca_init_transferErr13ASSERT_VIOLATIONINTEGER_OVERFLOW (71 of 98 remaining) [2022-10-16 13:02:11,697 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location gspca_init_transferErr14ASSERT_VIOLATIONINTEGER_OVERFLOW (70 of 98 remaining) [2022-10-16 13:02:11,697 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location gspca_init_transferErr15ASSERT_VIOLATIONINTEGER_OVERFLOW (69 of 98 remaining) [2022-10-16 13:02:11,697 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location gspca_init_transferErr16ASSERT_VIOLATIONINTEGER_OVERFLOW (68 of 98 remaining) [2022-10-16 13:02:11,697 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location gspca_init_transferErr17ASSERT_VIOLATIONINTEGER_OVERFLOW (67 of 98 remaining) [2022-10-16 13:02:11,697 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location gspca_init_transferErr18ASSERT_VIOLATIONINTEGER_OVERFLOW (66 of 98 remaining) [2022-10-16 13:02:11,698 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location gspca_init_transferErr19ASSERT_VIOLATIONINTEGER_OVERFLOW (65 of 98 remaining) [2022-10-16 13:02:11,698 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location gspca_init_transferErr20ASSERT_VIOLATIONINTEGER_OVERFLOW (64 of 98 remaining) [2022-10-16 13:02:11,698 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location gspca_init_transferErr21ASSERT_VIOLATIONINTEGER_OVERFLOW (63 of 98 remaining) [2022-10-16 13:02:11,698 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location gspca_init_transferErr22ASSERT_VIOLATIONINTEGER_OVERFLOW (62 of 98 remaining) [2022-10-16 13:02:11,698 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location gspca_init_transferErr23ASSERT_VIOLATIONINTEGER_OVERFLOW (61 of 98 remaining) [2022-10-16 13:02:11,698 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location gspca_init_transferErr24ASSERT_VIOLATIONINTEGER_OVERFLOW (60 of 98 remaining) [2022-10-16 13:02:11,699 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location gspca_init_transferErr25ASSERT_VIOLATIONINTEGER_OVERFLOW (59 of 98 remaining) [2022-10-16 13:02:11,699 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location gspca_init_transferErr26ASSERT_VIOLATIONINTEGER_OVERFLOW (58 of 98 remaining) [2022-10-16 13:02:11,699 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location gspca_init_transferErr27ASSERT_VIOLATIONINTEGER_OVERFLOW (57 of 98 remaining) [2022-10-16 13:02:11,699 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location gspca_init_transferErr28ASSERT_VIOLATIONINTEGER_OVERFLOW (56 of 98 remaining) [2022-10-16 13:02:11,699 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location gspca_init_transferErr29ASSERT_VIOLATIONINTEGER_OVERFLOW (55 of 98 remaining) [2022-10-16 13:02:11,700 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location gspca_init_transferErr30ASSERT_VIOLATIONINTEGER_OVERFLOW (54 of 98 remaining) [2022-10-16 13:02:11,700 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location gspca_init_transferErr31ASSERT_VIOLATIONINTEGER_OVERFLOW (53 of 98 remaining) [2022-10-16 13:02:11,700 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location gspca_init_transferErr32ASSERT_VIOLATIONINTEGER_OVERFLOW (52 of 98 remaining) [2022-10-16 13:02:11,700 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location gspca_init_transferErr33ASSERT_VIOLATIONINTEGER_OVERFLOW (51 of 98 remaining) [2022-10-16 13:02:11,700 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location gspca_init_transferErr34ASSERT_VIOLATIONINTEGER_OVERFLOW (50 of 98 remaining) [2022-10-16 13:02:11,700 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location gspca_init_transferErr35ASSERT_VIOLATIONINTEGER_OVERFLOW (49 of 98 remaining) [2022-10-16 13:02:11,701 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location gspca_init_transferErr36ASSERT_VIOLATIONINTEGER_OVERFLOW (48 of 98 remaining) [2022-10-16 13:02:11,701 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location gspca_init_transferErr37ASSERT_VIOLATIONINTEGER_OVERFLOW (47 of 98 remaining) [2022-10-16 13:02:11,701 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location gspca_init_transferErr38ASSERT_VIOLATIONINTEGER_OVERFLOW (46 of 98 remaining) [2022-10-16 13:02:11,701 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location gspca_init_transferErr39ASSERT_VIOLATIONINTEGER_OVERFLOW (45 of 98 remaining) [2022-10-16 13:02:11,701 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location vidioc_reqbufsErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (44 of 98 remaining) [2022-10-16 13:02:11,701 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location vidioc_reqbufsErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (43 of 98 remaining) [2022-10-16 13:02:11,702 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location vidioc_reqbufsErr2ASSERT_VIOLATIONINTEGER_OVERFLOW (42 of 98 remaining) [2022-10-16 13:02:11,702 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location vidioc_reqbufsErr3ASSERT_VIOLATIONINTEGER_OVERFLOW (41 of 98 remaining) [2022-10-16 13:02:11,702 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location try_fmt_vid_capErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (40 of 98 remaining) [2022-10-16 13:02:11,702 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location try_fmt_vid_capErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (39 of 98 remaining) [2022-10-16 13:02:11,702 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location try_fmt_vid_capErr2ASSERT_VIOLATIONINTEGER_OVERFLOW (38 of 98 remaining) [2022-10-16 13:02:11,702 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location try_fmt_vid_capErr3ASSERT_VIOLATIONINTEGER_OVERFLOW (37 of 98 remaining) [2022-10-16 13:02:11,703 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location gspca_vm_closeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (36 of 98 remaining) [2022-10-16 13:02:11,703 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location gspca_vm_closeErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (35 of 98 remaining) [2022-10-16 13:02:11,703 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location alloc_and_submit_int_urbErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (34 of 98 remaining) [2022-10-16 13:02:11,703 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location alloc_and_submit_int_urbErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (33 of 98 remaining) [2022-10-16 13:02:11,703 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location vidioc_qbufErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (32 of 98 remaining) [2022-10-16 13:02:11,703 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location vidioc_qbufErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (31 of 98 remaining) [2022-10-16 13:02:11,704 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location fill_frameErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (30 of 98 remaining) [2022-10-16 13:02:11,704 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location fill_frameErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (29 of 98 remaining) [2022-10-16 13:02:11,704 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location read_allocErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (28 of 98 remaining) [2022-10-16 13:02:11,704 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location read_allocErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (27 of 98 remaining) [2022-10-16 13:02:11,704 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location gspca_vm_openErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (26 of 98 remaining) [2022-10-16 13:02:11,704 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (25 of 98 remaining) [2022-10-16 13:02:11,705 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (24 of 98 remaining) [2022-10-16 13:02:11,705 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr2ASSERT_VIOLATIONINTEGER_OVERFLOW (23 of 98 remaining) [2022-10-16 13:02:11,705 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr3ASSERT_VIOLATIONINTEGER_OVERFLOW (22 of 98 remaining) [2022-10-16 13:02:11,705 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr4ASSERT_VIOLATIONINTEGER_OVERFLOW (21 of 98 remaining) [2022-10-16 13:02:11,705 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr5ASSERT_VIOLATIONINTEGER_OVERFLOW (20 of 98 remaining) [2022-10-16 13:02:11,705 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr6ASSERT_VIOLATIONINTEGER_OVERFLOW (19 of 98 remaining) [2022-10-16 13:02:11,706 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr7ASSERT_VIOLATIONINTEGER_OVERFLOW (18 of 98 remaining) [2022-10-16 13:02:11,706 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr8ASSERT_VIOLATIONINTEGER_OVERFLOW (17 of 98 remaining) [2022-10-16 13:02:11,706 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr9ASSERT_VIOLATIONINTEGER_OVERFLOW (16 of 98 remaining) [2022-10-16 13:02:11,706 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr10ASSERT_VIOLATIONINTEGER_OVERFLOW (15 of 98 remaining) [2022-10-16 13:02:11,706 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr11ASSERT_VIOLATIONINTEGER_OVERFLOW (14 of 98 remaining) [2022-10-16 13:02:11,706 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr12ASSERT_VIOLATIONINTEGER_OVERFLOW (13 of 98 remaining) [2022-10-16 13:02:11,707 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr13ASSERT_VIOLATIONINTEGER_OVERFLOW (12 of 98 remaining) [2022-10-16 13:02:11,708 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr14ASSERT_VIOLATIONINTEGER_OVERFLOW (11 of 98 remaining) [2022-10-16 13:02:11,708 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr15ASSERT_VIOLATIONINTEGER_OVERFLOW (10 of 98 remaining) [2022-10-16 13:02:11,708 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr16ASSERT_VIOLATIONINTEGER_OVERFLOW (9 of 98 remaining) [2022-10-16 13:02:11,708 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr17ASSERT_VIOLATIONINTEGER_OVERFLOW (8 of 98 remaining) [2022-10-16 13:02:11,708 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr18ASSERT_VIOLATIONINTEGER_OVERFLOW (7 of 98 remaining) [2022-10-16 13:02:11,709 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr19ASSERT_VIOLATIONINTEGER_OVERFLOW (6 of 98 remaining) [2022-10-16 13:02:11,709 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr20ASSERT_VIOLATIONINTEGER_OVERFLOW (5 of 98 remaining) [2022-10-16 13:02:11,709 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr21ASSERT_VIOLATIONINTEGER_OVERFLOW (4 of 98 remaining) [2022-10-16 13:02:11,709 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location vidioc_dqbufErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (3 of 98 remaining) [2022-10-16 13:02:11,709 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location vidioc_dqbufErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (2 of 98 remaining) [2022-10-16 13:02:11,709 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location gspca_input_create_urbErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (1 of 98 remaining) [2022-10-16 13:02:11,710 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location gspca_input_create_urbErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (0 of 98 remaining) [2022-10-16 13:02:11,710 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-10-16 13:02:11,714 INFO L444 BasicCegarLoop]: Path program histogram: [2, 1, 1, 1, 1, 1, 1] [2022-10-16 13:02:11,724 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2022-10-16 13:02:11,842 WARN L418 cessorBacktranslator]: Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) [2022-10-16 13:02:11,855 WARN L418 cessorBacktranslator]: Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) [2022-10-16 13:02:12,426 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 16.10 01:02:12 BoogieIcfgContainer [2022-10-16 13:02:12,427 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-10-16 13:02:12,427 INFO L158 Benchmark]: Toolchain (without parser) took 103545.09ms. Allocated memory was 161.5MB in the beginning and 2.8GB in the end (delta: 2.6GB). Free memory was 123.7MB in the beginning and 1.9GB in the end (delta: -1.7GB). Peak memory consumption was 931.2MB. Max. memory is 8.0GB. [2022-10-16 13:02:12,428 INFO L158 Benchmark]: CDTParser took 0.20ms. Allocated memory is still 161.5MB. Free memory was 132.2MB in the beginning and 132.1MB in the end (delta: 73.5kB). There was no memory consumed. Max. memory is 8.0GB. [2022-10-16 13:02:12,428 INFO L158 Benchmark]: CACSL2BoogieTranslator took 3158.06ms. Allocated memory was 161.5MB in the beginning and 197.1MB in the end (delta: 35.7MB). Free memory was 123.4MB in the beginning and 124.3MB in the end (delta: -874.5kB). Peak memory consumption was 117.3MB. Max. memory is 8.0GB. [2022-10-16 13:02:12,428 INFO L158 Benchmark]: Boogie Procedure Inliner took 350.85ms. Allocated memory is still 197.1MB. Free memory was 124.3MB in the beginning and 98.1MB in the end (delta: 26.2MB). Peak memory consumption was 26.2MB. Max. memory is 8.0GB. [2022-10-16 13:02:12,429 INFO L158 Benchmark]: Boogie Preprocessor took 399.38ms. Allocated memory was 197.1MB in the beginning and 306.2MB in the end (delta: 109.1MB). Free memory was 98.1MB in the beginning and 224.7MB in the end (delta: -126.7MB). Peak memory consumption was 42.4MB. Max. memory is 8.0GB. [2022-10-16 13:02:12,429 INFO L158 Benchmark]: RCFGBuilder took 5256.30ms. Allocated memory was 306.2MB in the beginning and 489.7MB in the end (delta: 183.5MB). Free memory was 224.7MB in the beginning and 312.1MB in the end (delta: -87.4MB). Peak memory consumption was 112.6MB. Max. memory is 8.0GB. [2022-10-16 13:02:12,430 INFO L158 Benchmark]: TraceAbstraction took 94366.52ms. Allocated memory was 489.7MB in the beginning and 2.8GB in the end (delta: 2.3GB). Free memory was 311.6MB in the beginning and 1.9GB in the end (delta: -1.6GB). Peak memory consumption was 789.9MB. Max. memory is 8.0GB. [2022-10-16 13:02:12,433 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.20ms. Allocated memory is still 161.5MB. Free memory was 132.2MB in the beginning and 132.1MB in the end (delta: 73.5kB). There was no memory consumed. Max. memory is 8.0GB. * CACSL2BoogieTranslator took 3158.06ms. Allocated memory was 161.5MB in the beginning and 197.1MB in the end (delta: 35.7MB). Free memory was 123.4MB in the beginning and 124.3MB in the end (delta: -874.5kB). Peak memory consumption was 117.3MB. Max. memory is 8.0GB. * Boogie Procedure Inliner took 350.85ms. Allocated memory is still 197.1MB. Free memory was 124.3MB in the beginning and 98.1MB in the end (delta: 26.2MB). Peak memory consumption was 26.2MB. Max. memory is 8.0GB. * Boogie Preprocessor took 399.38ms. Allocated memory was 197.1MB in the beginning and 306.2MB in the end (delta: 109.1MB). Free memory was 98.1MB in the beginning and 224.7MB in the end (delta: -126.7MB). Peak memory consumption was 42.4MB. Max. memory is 8.0GB. * RCFGBuilder took 5256.30ms. Allocated memory was 306.2MB in the beginning and 489.7MB in the end (delta: 183.5MB). Free memory was 224.7MB in the beginning and 312.1MB in the end (delta: -87.4MB). Peak memory consumption was 112.6MB. Max. memory is 8.0GB. * TraceAbstraction took 94366.52ms. Allocated memory was 489.7MB in the beginning and 2.8GB in the end (delta: 2.3GB). Free memory was 311.6MB in the beginning and 1.9GB in the end (delta: -1.6GB). Peak memory consumption was 789.9MB. Max. memory is 8.0GB. * Results from de.uni_freiburg.informatik.ultimate.boogie.preprocessor: - GenericResult: Unfinished Backtranslation Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) - GenericResult: Unfinished Backtranslation Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResult: Unfinished Backtranslation The program execution was not completely translated back. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - CounterExampleResult [Line: 5489]: integer overflow possible integer overflow possible We found a FailurePath: [L5320] struct v4l2_buffer *dev_ioctl_ops_group4 ; [L5321] struct v4l2_fh *dev_ioctl_ops_group5 ; [L5322] struct file *dev_fops_group0 ; [L5323] int LDV_IN_INTERRUPT = 1; [L5324] struct v4l2_event_subscription *dev_ioctl_ops_group1 ; [L5325] struct vm_area_struct *gspca_vm_ops_group0 ; [L5326] int ldv_state_variable_0 ; [L5327] int ldv_state_variable_3 ; [L5328] int ldv_state_variable_2 ; [L5329] int ref_cnt ; [L5330] struct v4l2_streamparm *dev_ioctl_ops_group2 ; [L5331] struct file *dev_ioctl_ops_group3 ; [L5332] int ldv_state_variable_1 ; [L5333] int ldv_state_variable_4 ; [L5334] struct v4l2_format *dev_ioctl_ops_group0 ; [L5438] int gspca_debug ; [L5507-L5508] static struct vm_operations_struct const gspca_vm_ops = {& gspca_vm_open, & gspca_vm_close, 0, 0, 0, 0, 0, 0, 0}; [L7817-L7819] static struct v4l2_file_operations dev_fops = {& __this_module, & dev_read, 0, & dev_poll, 0, & video_ioctl2, 0, 0, & dev_mmap, & dev_open, & dev_close}; [L7820-L7830] static struct v4l2_ioctl_ops const dev_ioctl_ops = {& vidioc_querycap, 0, 0, & vidioc_enum_fmt_vid_cap, 0, 0, 0, 0, & vidioc_g_fmt_vid_cap, 0, 0, 0, 0, 0, 0, 0, 0, 0, & vidioc_s_fmt_vid_cap, 0, 0, 0, 0, 0, 0, 0, 0, 0, & vidioc_try_fmt_vid_cap, 0, 0, 0, 0, 0, 0, 0, 0, 0, & vidioc_reqbufs, & vidioc_querybuf, & vidioc_qbuf, 0, & vidioc_dqbuf, 0, 0, 0, 0, 0, & vidioc_streamon, & vidioc_streamoff, 0, 0, 0, & vidioc_enum_input, & vidioc_g_input, & vidioc_s_input, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, & vidioc_g_jpegcomp, & vidioc_s_jpegcomp, 0, 0, 0, 0, 0, & vidioc_g_parm, & vidioc_s_parm, 0, 0, 0, 0, 0, 0, 0, 0, & vidioc_g_register, & vidioc_s_register, & vidioc_g_chip_info, & vidioc_enum_framesizes, & vidioc_enum_frameintervals, 0, 0, 0, 0, 0, & v4l2_ctrl_subscribe_event, & v4l2_event_unsubscribe, 0}; [L7831-L7904] static struct video_device const gspca_template = {{{0, 0}, 0, 0U, 0, 0U, 0U, 0UL, 0U, (unsigned short)0, (unsigned short)0, (unsigned short)0, (unsigned short)0, 0, 0, 0, 0, 0, 0, {.alsa = {0U, 0U, 0U}}}, (struct v4l2_file_operations const *)(& dev_fops), {0, 0, {0, {0, 0}, 0, 0, 0, 0, {{0}}, {{{0L}, {0, 0}, 0, {0, {0, 0}, 0, 0, 0UL}}, {{0, 0}, 0UL, 0, 0, 0UL, 0, 0, 0, {(char)0, (char)0, (char)0, (char)0, (char)0, (char)0, (char)0, (char)0, (char)0, (char)0, (char)0, (char)0, (char)0, (char)0, (char)0, (char)0}, {0, {0, 0}, 0, 0, 0UL}}, 0, 0}, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0}, 0, 0, {{0}, {{{{{0U}}, 0U, 0U, 0, {0, {0, 0}, 0, 0, 0UL}}}}, {0, 0}, 0, 0, 0, {0, {0, 0}, 0, 0, 0UL}}, 0, 0, 0, {{0}, (unsigned char)0, (unsigned char)0, (_Bool)0, (_Bool)0, (_Bool)0, (_Bool)0, {{{{{0U}}, 0U, 0U, 0, {0, {0, 0}, 0, 0, 0UL}}}}, {0, 0}, {0U, {{{{{{0U}}, 0U, 0U, 0, {0, {0, 0}, 0, 0, 0UL}}}}, {0, 0}}}, 0, (_Bool)0, (_Bool)0, {{0, 0}, 0UL, 0, 0, 0UL, 0, 0, 0, {(char)0, (char)0, (char)0, (char)0, (char)0, (char)0, (char)0, (char)0, (char)0, (char)0, (char)0, (char)0, (char)0, (char)0, (char)0, (char)0}, {0, {0, 0}, 0, 0, 0UL}}, 0UL, {{0L}, {0, 0}, 0, {0, {0, 0}, 0, 0, 0UL}}, {{{{{{0U}}, 0U, 0U, 0, {0, {0, 0}, 0, 0, 0UL}}}}, {0, 0}}, {0}, {0}, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0, 0, 0, 0, 0UL, 0UL, 0UL, 0UL, 0, 0}, 0, 0, 0, 0ULL, 0, {0, 0}, 0, {0, 0}, 0, {0}, 0U, 0U, {{{{{0U}}, 0U, 0U, 0, {0, {0, 0}, 0, 0, 0UL}}}}, {0, 0}, {0, {0, 0}, {{0}}}, 0, 0, 0, 0, (_Bool)0, (_Bool)0}, 0, 0, 0, 0, 0, 0, {'g', 's', 'p', 'c', 'a', ' ', 'm', 'a', 'i', 'n', ' ', 'd', 'r', 'i', 'v', 'e', 'r', '\000'}, 0, 0, 0, (unsigned short)0, 0UL, 0, {{{{{0U}}, 0U, 0U, 0, {0, {0, 0}, 0, 0, 0UL}}}}, {0, 0}, 0, 0ULL, & video_device_release_empty, & dev_ioctl_ops, {0UL, 0UL, 0UL}, {0UL, 0UL, 0UL}, 0}; [L8183] int ldv_retval_0 ; [L8185] int ldv_retval_1 ; [L9098] int INTERF_STATE = 0; [L9099] int SERIAL_STATE = 0; [L9100] void *usb_intfdata = 0; [L9101] struct urb *usb_urb = 0; [L9102] struct usb_device *usb_dev = 0; [L9103] int dev_counter = 0; [L9104] int completeFnIntCounter = 0; [L9105] int completeFnBulkCounter = 0; [L9106] void (*completeFnInt)(struct urb * ) ; [L9107] void (*completeFnBulk)(struct urb * ) ; VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8232] struct video_device *ldvarg0 ; [L8233] void *tmp ; [L8234] unsigned long ldvarg1 ; [L8235] unsigned long tmp___0 ; [L8236] struct vm_area_struct *ldvarg7 ; [L8237] void *tmp___1 ; [L8238] loff_t *ldvarg4 ; [L8239] void *tmp___2 ; [L8240] struct poll_table_struct *ldvarg3 ; [L8241] void *tmp___3 ; [L8242] size_t ldvarg5 ; [L8243] size_t tmp___4 ; [L8244] unsigned int ldvarg2 ; [L8245] unsigned int tmp___5 ; [L8246] char *ldvarg6 ; [L8247] void *tmp___6 ; [L8248] struct v4l2_jpegcompression *ldvarg18 ; [L8249] void *tmp___7 ; [L8250] void *ldvarg11 ; [L8251] void *tmp___8 ; [L8252] void *ldvarg32 ; [L8253] void *tmp___9 ; [L8254] void *ldvarg23 ; [L8255] void *tmp___10 ; [L8256] void *ldvarg43 ; [L8257] void *tmp___11 ; [L8258] void *ldvarg42 ; [L8259] void *tmp___12 ; [L8260] unsigned int ldvarg12 ; [L8261] unsigned int tmp___13 ; [L8262] struct v4l2_fmtdesc *ldvarg37 ; [L8263] void *tmp___14 ; [L8264] void *ldvarg29 ; [L8265] void *tmp___15 ; [L8266] struct v4l2_requestbuffers *ldvarg44 ; [L8267] void *tmp___16 ; [L8268] struct v4l2_frmivalenum *ldvarg24 ; [L8269] void *tmp___17 ; [L8270] void *ldvarg35 ; [L8271] void *tmp___18 ; [L8272] void *ldvarg38 ; [L8273] void *tmp___19 ; [L8274] void *ldvarg33 ; [L8275] void *tmp___20 ; [L8276] void *ldvarg16 ; [L8277] void *tmp___21 ; [L8278] void *ldvarg14 ; [L8279] void *tmp___22 ; [L8280] struct v4l2_dbg_chip_info *ldvarg34 ; [L8281] void *tmp___23 ; [L8282] struct v4l2_frmsizeenum *ldvarg28 ; [L8283] void *tmp___24 ; [L8284] enum v4l2_buf_type ldvarg39 ; [L8285] struct v4l2_jpegcompression *ldvarg20 ; [L8286] void *tmp___25 ; [L8287] unsigned int *ldvarg31 ; [L8288] void *tmp___26 ; [L8289] void *ldvarg41 ; [L8290] void *tmp___27 ; [L8291] enum v4l2_buf_type ldvarg8 ; [L8292] void *ldvarg13 ; [L8293] void *tmp___28 ; [L8294] struct v4l2_dbg_register *ldvarg10 ; [L8295] void *tmp___29 ; [L8296] void *ldvarg36 ; [L8297] void *tmp___30 ; [L8298] void *ldvarg40 ; [L8299] void *tmp___31 ; [L8300] void *ldvarg9 ; [L8301] void *tmp___32 ; [L8302] void *ldvarg45 ; [L8303] void *tmp___33 ; [L8304] struct v4l2_capability *ldvarg26 ; [L8305] void *tmp___34 ; [L8306] void *ldvarg27 ; [L8307] void *tmp___35 ; [L8308] struct v4l2_input *ldvarg15 ; [L8309] void *tmp___36 ; [L8310] void *ldvarg30 ; [L8311] void *tmp___37 ; [L8312] void *ldvarg21 ; [L8313] void *tmp___38 ; [L8314] void *ldvarg17 ; [L8315] void *tmp___39 ; [L8316] void *ldvarg25 ; [L8317] void *tmp___40 ; [L8318] struct v4l2_dbg_register *ldvarg22 ; [L8319] void *tmp___41 ; [L8320] void *ldvarg19 ; [L8321] void *tmp___42 ; [L8322] int tmp___43 ; [L8323] int tmp___44 ; [L8324] int tmp___45 ; [L8325] int tmp___46 ; [L8326] int tmp___47 ; [L8327] int tmp___48 ; VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg39={94:0}, ldvarg8={95:0}, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8329] CALL, EXPR ldv_zalloc(1800UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=1800, \result={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=1800, tmp___0=-2, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8329] RET, EXPR ldv_zalloc(1800UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(1800UL)={0:0}, ldvarg39={94:0}, ldvarg8={95:0}, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8329] tmp = ldv_zalloc(1800UL) [L8330] ldvarg0 = (struct video_device *)tmp [L8331] tmp___0 = __VERIFIER_nondet_ulong() [L8332] ldvarg1 = tmp___0 VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg39={94:0}, ldvarg8={95:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8333] CALL, EXPR ldv_zalloc(184UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=184, \result={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=184, tmp___0=-3, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8333] RET, EXPR ldv_zalloc(184UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(184UL)={0:0}, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg39={94:0}, ldvarg8={95:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8333] tmp___1 = ldv_zalloc(184UL) [L8334] ldvarg7 = (struct vm_area_struct *)tmp___1 VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg39={94:0}, ldvarg7={0:0}, ldvarg8={95:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8335] CALL, EXPR ldv_zalloc(8UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=8, \result={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=8, tmp___0=-4, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8335] RET, EXPR ldv_zalloc(8UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(8UL)={0:0}, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg39={94:0}, ldvarg7={0:0}, ldvarg8={95:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8335] tmp___2 = ldv_zalloc(8UL) [L8336] ldvarg4 = (loff_t *)tmp___2 VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___2={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8337] CALL, EXPR ldv_zalloc(16UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=16, \result={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=16, tmp___0=-5, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8337] RET, EXPR ldv_zalloc(16UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(16UL)={0:0}, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___2={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8337] tmp___3 = ldv_zalloc(16UL) [L8338] ldvarg3 = (struct poll_table_struct *)tmp___3 [L8339] tmp___4 = __VERIFIER_nondet_size_t() [L8340] ldvarg5 = tmp___4 [L8341] tmp___5 = __VERIFIER_nondet_uint() [L8342] ldvarg2 = tmp___5 VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg2=2147483648, ldvarg3={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg5=0, ldvarg7={0:0}, ldvarg8={95:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___2={0:0}, tmp___3={0:0}, tmp___4=0, tmp___5=2147483648, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8343] CALL, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=1, \result={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=1, tmp___0=-6, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8343] RET, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(1UL)={0:0}, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg2=2147483648, ldvarg3={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg5=0, ldvarg7={0:0}, ldvarg8={95:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___2={0:0}, tmp___3={0:0}, tmp___4=0, tmp___5=2147483648, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8343] tmp___6 = ldv_zalloc(1UL) [L8344] ldvarg6 = (char *)tmp___6 VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg2=2147483648, ldvarg3={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___2={0:0}, tmp___3={0:0}, tmp___4=0, tmp___5=2147483648, tmp___6={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8345] CALL, EXPR ldv_zalloc(140UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=140, \result={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=140, tmp___0=-7, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8345] RET, EXPR ldv_zalloc(140UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(140UL)={0:0}, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg2=2147483648, ldvarg3={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___2={0:0}, tmp___3={0:0}, tmp___4=0, tmp___5=2147483648, tmp___6={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8345] tmp___7 = ldv_zalloc(140UL) [L8346] ldvarg18 = (struct v4l2_jpegcompression *)tmp___7 VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg18={0:0}, ldvarg2=2147483648, ldvarg3={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___2={0:0}, tmp___3={0:0}, tmp___4=0, tmp___5=2147483648, tmp___6={0:0}, tmp___7={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8347] CALL, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=1, \result={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=1, tmp___0=-8, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8347] RET, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(1UL)={0:0}, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg18={0:0}, ldvarg2=2147483648, ldvarg3={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___2={0:0}, tmp___3={0:0}, tmp___4=0, tmp___5=2147483648, tmp___6={0:0}, tmp___7={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8347] tmp___8 = ldv_zalloc(1UL) [L8348] ldvarg11 = tmp___8 VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg11={0:0}, ldvarg18={0:0}, ldvarg2=2147483648, ldvarg3={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___2={0:0}, tmp___3={0:0}, tmp___4=0, tmp___5=2147483648, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8349] CALL, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=1, \result={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=1, tmp___0=-9, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8349] RET, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(1UL)={0:0}, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg11={0:0}, ldvarg18={0:0}, ldvarg2=2147483648, ldvarg3={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___2={0:0}, tmp___3={0:0}, tmp___4=0, tmp___5=2147483648, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8349] tmp___9 = ldv_zalloc(1UL) [L8350] ldvarg32 = tmp___9 VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg11={0:0}, ldvarg18={0:0}, ldvarg2=2147483648, ldvarg3={0:0}, ldvarg32={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___2={0:0}, tmp___3={0:0}, tmp___4=0, tmp___5=2147483648, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8351] CALL, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=1, \result={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=1, tmp___0=-10, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8351] RET, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(1UL)={0:0}, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg11={0:0}, ldvarg18={0:0}, ldvarg2=2147483648, ldvarg3={0:0}, ldvarg32={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___2={0:0}, tmp___3={0:0}, tmp___4=0, tmp___5=2147483648, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8351] tmp___10 = ldv_zalloc(1UL) [L8352] ldvarg23 = tmp___10 VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg11={0:0}, ldvarg18={0:0}, ldvarg2=2147483648, ldvarg23={0:0}, ldvarg3={0:0}, ldvarg32={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___10={0:0}, tmp___2={0:0}, tmp___3={0:0}, tmp___4=0, tmp___5=2147483648, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8353] CALL, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=1, \result={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=1, tmp___0=-11, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8353] RET, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(1UL)={0:0}, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg11={0:0}, ldvarg18={0:0}, ldvarg2=2147483648, ldvarg23={0:0}, ldvarg3={0:0}, ldvarg32={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___10={0:0}, tmp___2={0:0}, tmp___3={0:0}, tmp___4=0, tmp___5=2147483648, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8353] tmp___11 = ldv_zalloc(1UL) [L8354] ldvarg43 = tmp___11 VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg11={0:0}, ldvarg18={0:0}, ldvarg2=2147483648, ldvarg23={0:0}, ldvarg3={0:0}, ldvarg32={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg43={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___2={0:0}, tmp___3={0:0}, tmp___4=0, tmp___5=2147483648, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8355] CALL, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=1, \result={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=1, tmp___0=-12, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8355] RET, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(1UL)={0:0}, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg11={0:0}, ldvarg18={0:0}, ldvarg2=2147483648, ldvarg23={0:0}, ldvarg3={0:0}, ldvarg32={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg43={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___2={0:0}, tmp___3={0:0}, tmp___4=0, tmp___5=2147483648, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8355] tmp___12 = ldv_zalloc(1UL) [L8356] ldvarg42 = tmp___12 [L8357] tmp___13 = __VERIFIER_nondet_uint() [L8358] ldvarg12 = tmp___13 VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg11={0:0}, ldvarg12=2147483650, ldvarg18={0:0}, ldvarg2=2147483648, ldvarg23={0:0}, ldvarg3={0:0}, ldvarg32={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=2147483650, tmp___2={0:0}, tmp___3={0:0}, tmp___4=0, tmp___5=2147483648, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8359] CALL, EXPR ldv_zalloc(64UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=64, \result={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=64, tmp___0=-13, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8359] RET, EXPR ldv_zalloc(64UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(64UL)={0:0}, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg11={0:0}, ldvarg12=2147483650, ldvarg18={0:0}, ldvarg2=2147483648, ldvarg23={0:0}, ldvarg3={0:0}, ldvarg32={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=2147483650, tmp___2={0:0}, tmp___3={0:0}, tmp___4=0, tmp___5=2147483648, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8359] tmp___14 = ldv_zalloc(64UL) [L8360] ldvarg37 = (struct v4l2_fmtdesc *)tmp___14 VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg11={0:0}, ldvarg12=2147483650, ldvarg18={0:0}, ldvarg2=2147483648, ldvarg23={0:0}, ldvarg3={0:0}, ldvarg32={0:0}, ldvarg37={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=2147483650, tmp___14={0:0}, tmp___2={0:0}, tmp___3={0:0}, tmp___4=0, tmp___5=2147483648, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8361] CALL, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=1, \result={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=1, tmp___0=-14, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8361] RET, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(1UL)={0:0}, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg11={0:0}, ldvarg12=2147483650, ldvarg18={0:0}, ldvarg2=2147483648, ldvarg23={0:0}, ldvarg3={0:0}, ldvarg32={0:0}, ldvarg37={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=2147483650, tmp___14={0:0}, tmp___2={0:0}, tmp___3={0:0}, tmp___4=0, tmp___5=2147483648, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8361] tmp___15 = ldv_zalloc(1UL) [L8362] ldvarg29 = tmp___15 VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg11={0:0}, ldvarg12=2147483650, ldvarg18={0:0}, ldvarg2=2147483648, ldvarg23={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg32={0:0}, ldvarg37={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=2147483650, tmp___14={0:0}, tmp___15={0:0}, tmp___2={0:0}, tmp___3={0:0}, tmp___4=0, tmp___5=2147483648, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8363] CALL, EXPR ldv_zalloc(20UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=20, \result={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=20, tmp___0=-15, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8363] RET, EXPR ldv_zalloc(20UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(20UL)={0:0}, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg11={0:0}, ldvarg12=2147483650, ldvarg18={0:0}, ldvarg2=2147483648, ldvarg23={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg32={0:0}, ldvarg37={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=2147483650, tmp___14={0:0}, tmp___15={0:0}, tmp___2={0:0}, tmp___3={0:0}, tmp___4=0, tmp___5=2147483648, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8363] tmp___16 = ldv_zalloc(20UL) [L8364] ldvarg44 = (struct v4l2_requestbuffers *)tmp___16 VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg11={0:0}, ldvarg12=2147483650, ldvarg18={0:0}, ldvarg2=2147483648, ldvarg23={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg32={0:0}, ldvarg37={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=2147483650, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___2={0:0}, tmp___3={0:0}, tmp___4=0, tmp___5=2147483648, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8365] CALL, EXPR ldv_zalloc(52UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=52, \result={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=52, tmp___0=-16, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8365] RET, EXPR ldv_zalloc(52UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(52UL)={0:0}, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg11={0:0}, ldvarg12=2147483650, ldvarg18={0:0}, ldvarg2=2147483648, ldvarg23={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg32={0:0}, ldvarg37={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=2147483650, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___2={0:0}, tmp___3={0:0}, tmp___4=0, tmp___5=2147483648, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8365] tmp___17 = ldv_zalloc(52UL) [L8366] ldvarg24 = (struct v4l2_frmivalenum *)tmp___17 VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg11={0:0}, ldvarg12=2147483650, ldvarg18={0:0}, ldvarg2=2147483648, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg32={0:0}, ldvarg37={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=2147483650, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___2={0:0}, tmp___3={0:0}, tmp___4=0, tmp___5=2147483648, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8367] CALL, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=1, \result={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=1, tmp___0=-17, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8367] RET, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(1UL)={0:0}, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg11={0:0}, ldvarg12=2147483650, ldvarg18={0:0}, ldvarg2=2147483648, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg32={0:0}, ldvarg37={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=2147483650, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___2={0:0}, tmp___3={0:0}, tmp___4=0, tmp___5=2147483648, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8367] tmp___18 = ldv_zalloc(1UL) [L8368] ldvarg35 = tmp___18 VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg11={0:0}, ldvarg12=2147483650, ldvarg18={0:0}, ldvarg2=2147483648, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg32={0:0}, ldvarg35={0:0}, ldvarg37={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=2147483650, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___2={0:0}, tmp___3={0:0}, tmp___4=0, tmp___5=2147483648, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8369] CALL, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=1, \result={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=1, tmp___0=-18, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8369] RET, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(1UL)={0:0}, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg11={0:0}, ldvarg12=2147483650, ldvarg18={0:0}, ldvarg2=2147483648, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg32={0:0}, ldvarg35={0:0}, ldvarg37={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=2147483650, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___2={0:0}, tmp___3={0:0}, tmp___4=0, tmp___5=2147483648, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8369] tmp___19 = ldv_zalloc(1UL) [L8370] ldvarg38 = tmp___19 VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg11={0:0}, ldvarg12=2147483650, ldvarg18={0:0}, ldvarg2=2147483648, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg32={0:0}, ldvarg35={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=2147483650, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___3={0:0}, tmp___4=0, tmp___5=2147483648, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8371] CALL, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=1, \result={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=1, tmp___0=-19, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8371] RET, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(1UL)={0:0}, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg11={0:0}, ldvarg12=2147483650, ldvarg18={0:0}, ldvarg2=2147483648, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg32={0:0}, ldvarg35={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=2147483650, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___3={0:0}, tmp___4=0, tmp___5=2147483648, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8371] tmp___20 = ldv_zalloc(1UL) [L8372] ldvarg33 = tmp___20 VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg11={0:0}, ldvarg12=2147483650, ldvarg18={0:0}, ldvarg2=2147483648, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg35={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=2147483650, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___3={0:0}, tmp___4=0, tmp___5=2147483648, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8373] CALL, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=1, \result={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=1, tmp___0=-20, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8373] RET, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(1UL)={0:0}, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg11={0:0}, ldvarg12=2147483650, ldvarg18={0:0}, ldvarg2=2147483648, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg35={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=2147483650, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___3={0:0}, tmp___4=0, tmp___5=2147483648, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8373] tmp___21 = ldv_zalloc(1UL) [L8374] ldvarg16 = tmp___21 VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg11={0:0}, ldvarg12=2147483650, ldvarg16={0:0}, ldvarg18={0:0}, ldvarg2=2147483648, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg35={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=2147483650, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___3={0:0}, tmp___4=0, tmp___5=2147483648, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8375] CALL, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=1, \result={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=1, tmp___0=-21, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8375] RET, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(1UL)={0:0}, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg11={0:0}, ldvarg12=2147483650, ldvarg16={0:0}, ldvarg18={0:0}, ldvarg2=2147483648, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg35={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=2147483650, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___3={0:0}, tmp___4=0, tmp___5=2147483648, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8375] tmp___22 = ldv_zalloc(1UL) [L8376] ldvarg14 = tmp___22 VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg11={0:0}, ldvarg12=2147483650, ldvarg14={0:0}, ldvarg16={0:0}, ldvarg18={0:0}, ldvarg2=2147483648, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg35={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=2147483650, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___3={0:0}, tmp___4=0, tmp___5=2147483648, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8377] CALL, EXPR ldv_zalloc(200UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=200, \result={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=200, tmp___0=-22, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8377] RET, EXPR ldv_zalloc(200UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(200UL)={0:0}, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg11={0:0}, ldvarg12=2147483650, ldvarg14={0:0}, ldvarg16={0:0}, ldvarg18={0:0}, ldvarg2=2147483648, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg35={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=2147483650, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___3={0:0}, tmp___4=0, tmp___5=2147483648, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8377] tmp___23 = ldv_zalloc(200UL) [L8378] ldvarg34 = (struct v4l2_dbg_chip_info *)tmp___23 VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg11={0:0}, ldvarg12=2147483650, ldvarg14={0:0}, ldvarg16={0:0}, ldvarg18={0:0}, ldvarg2=2147483648, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=2147483650, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___3={0:0}, tmp___4=0, tmp___5=2147483648, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8379] CALL, EXPR ldv_zalloc(44UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=44, \result={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=44, tmp___0=-23, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8379] RET, EXPR ldv_zalloc(44UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(44UL)={0:0}, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg11={0:0}, ldvarg12=2147483650, ldvarg14={0:0}, ldvarg16={0:0}, ldvarg18={0:0}, ldvarg2=2147483648, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=2147483650, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___3={0:0}, tmp___4=0, tmp___5=2147483648, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8379] tmp___24 = ldv_zalloc(44UL) [L8380] ldvarg28 = (struct v4l2_frmsizeenum *)tmp___24 VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg11={0:0}, ldvarg12=2147483650, ldvarg14={0:0}, ldvarg16={0:0}, ldvarg18={0:0}, ldvarg2=2147483648, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=2147483650, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___3={0:0}, tmp___4=0, tmp___5=2147483648, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8381] CALL, EXPR ldv_zalloc(140UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=140, \result={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=140, tmp___0=-24, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8381] RET, EXPR ldv_zalloc(140UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(140UL)={0:0}, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg11={0:0}, ldvarg12=2147483650, ldvarg14={0:0}, ldvarg16={0:0}, ldvarg18={0:0}, ldvarg2=2147483648, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=2147483650, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___3={0:0}, tmp___4=0, tmp___5=2147483648, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8381] tmp___25 = ldv_zalloc(140UL) [L8382] ldvarg20 = (struct v4l2_jpegcompression *)tmp___25 VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg11={0:0}, ldvarg12=2147483650, ldvarg14={0:0}, ldvarg16={0:0}, ldvarg18={0:0}, ldvarg2=2147483648, ldvarg20={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=2147483650, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___3={0:0}, tmp___4=0, tmp___5=2147483648, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8383] CALL, EXPR ldv_zalloc(4UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=4, \result={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=4, tmp___0=-25, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8383] RET, EXPR ldv_zalloc(4UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(4UL)={0:0}, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg11={0:0}, ldvarg12=2147483650, ldvarg14={0:0}, ldvarg16={0:0}, ldvarg18={0:0}, ldvarg2=2147483648, ldvarg20={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=2147483650, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___3={0:0}, tmp___4=0, tmp___5=2147483648, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8383] tmp___26 = ldv_zalloc(4UL) [L8384] ldvarg31 = (unsigned int *)tmp___26 VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg11={0:0}, ldvarg12=2147483650, ldvarg14={0:0}, ldvarg16={0:0}, ldvarg18={0:0}, ldvarg2=2147483648, ldvarg20={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=2147483650, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___3={0:0}, tmp___4=0, tmp___5=2147483648, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8385] CALL, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=1, \result={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=1, tmp___0=-26, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8385] RET, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(1UL)={0:0}, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg11={0:0}, ldvarg12=2147483650, ldvarg14={0:0}, ldvarg16={0:0}, ldvarg18={0:0}, ldvarg2=2147483648, ldvarg20={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=2147483650, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___3={0:0}, tmp___4=0, tmp___5=2147483648, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8385] tmp___27 = ldv_zalloc(1UL) [L8386] ldvarg41 = tmp___27 VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg11={0:0}, ldvarg12=2147483650, ldvarg14={0:0}, ldvarg16={0:0}, ldvarg18={0:0}, ldvarg2=2147483648, ldvarg20={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=2147483650, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___3={0:0}, tmp___4=0, tmp___5=2147483648, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8387] CALL, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=1, \result={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=1, tmp___0=-27, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8387] RET, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(1UL)={0:0}, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg11={0:0}, ldvarg12=2147483650, ldvarg14={0:0}, ldvarg16={0:0}, ldvarg18={0:0}, ldvarg2=2147483648, ldvarg20={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=2147483650, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___3={0:0}, tmp___4=0, tmp___5=2147483648, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8387] tmp___28 = ldv_zalloc(1UL) [L8388] ldvarg13 = tmp___28 VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg11={0:0}, ldvarg12=2147483650, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg16={0:0}, ldvarg18={0:0}, ldvarg2=2147483648, ldvarg20={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=2147483650, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___3={0:0}, tmp___4=0, tmp___5=2147483648, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8389] CALL, EXPR ldv_zalloc(56UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=56, \result={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=56, tmp___0=-28, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8389] RET, EXPR ldv_zalloc(56UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(56UL)={0:0}, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg11={0:0}, ldvarg12=2147483650, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg16={0:0}, ldvarg18={0:0}, ldvarg2=2147483648, ldvarg20={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=2147483650, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___3={0:0}, tmp___4=0, tmp___5=2147483648, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8389] tmp___29 = ldv_zalloc(56UL) [L8390] ldvarg10 = (struct v4l2_dbg_register *)tmp___29 VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg10={0:0}, ldvarg11={0:0}, ldvarg12=2147483650, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg16={0:0}, ldvarg18={0:0}, ldvarg2=2147483648, ldvarg20={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=2147483650, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___29={0:0}, tmp___3={0:0}, tmp___4=0, tmp___5=2147483648, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8391] CALL, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=1, \result={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=1, tmp___0=-29, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8391] RET, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(1UL)={0:0}, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg10={0:0}, ldvarg11={0:0}, ldvarg12=2147483650, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg16={0:0}, ldvarg18={0:0}, ldvarg2=2147483648, ldvarg20={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=2147483650, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___29={0:0}, tmp___3={0:0}, tmp___4=0, tmp___5=2147483648, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8391] tmp___30 = ldv_zalloc(1UL) [L8392] ldvarg36 = tmp___30 VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg10={0:0}, ldvarg11={0:0}, ldvarg12=2147483650, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg16={0:0}, ldvarg18={0:0}, ldvarg2=2147483648, ldvarg20={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg36={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=2147483650, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___29={0:0}, tmp___3={0:0}, tmp___30={0:0}, tmp___4=0, tmp___5=2147483648, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8393] CALL, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=1, \result={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=1, tmp___0=-30, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8393] RET, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(1UL)={0:0}, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg10={0:0}, ldvarg11={0:0}, ldvarg12=2147483650, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg16={0:0}, ldvarg18={0:0}, ldvarg2=2147483648, ldvarg20={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg36={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=2147483650, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___29={0:0}, tmp___3={0:0}, tmp___30={0:0}, tmp___4=0, tmp___5=2147483648, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8393] tmp___31 = ldv_zalloc(1UL) [L8394] ldvarg40 = tmp___31 VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg10={0:0}, ldvarg11={0:0}, ldvarg12=2147483650, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg16={0:0}, ldvarg18={0:0}, ldvarg2=2147483648, ldvarg20={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg36={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg40={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=2147483650, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___29={0:0}, tmp___3={0:0}, tmp___30={0:0}, tmp___31={0:0}, tmp___4=0, tmp___5=2147483648, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8395] CALL, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=1, \result={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=1, tmp___0=-31, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8395] RET, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(1UL)={0:0}, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg10={0:0}, ldvarg11={0:0}, ldvarg12=2147483650, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg16={0:0}, ldvarg18={0:0}, ldvarg2=2147483648, ldvarg20={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg36={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg40={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=2147483650, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___29={0:0}, tmp___3={0:0}, tmp___30={0:0}, tmp___31={0:0}, tmp___4=0, tmp___5=2147483648, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8395] tmp___32 = ldv_zalloc(1UL) [L8396] ldvarg9 = tmp___32 VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg10={0:0}, ldvarg11={0:0}, ldvarg12=2147483650, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg16={0:0}, ldvarg18={0:0}, ldvarg2=2147483648, ldvarg20={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg36={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg40={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ldvarg9={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=2147483650, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___29={0:0}, tmp___3={0:0}, tmp___30={0:0}, tmp___31={0:0}, tmp___32={0:0}, tmp___4=0, tmp___5=2147483648, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8397] CALL, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=1, \result={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=1, tmp___0=-32, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8397] RET, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(1UL)={0:0}, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg10={0:0}, ldvarg11={0:0}, ldvarg12=2147483650, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg16={0:0}, ldvarg18={0:0}, ldvarg2=2147483648, ldvarg20={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg36={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg40={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ldvarg9={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=2147483650, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___29={0:0}, tmp___3={0:0}, tmp___30={0:0}, tmp___31={0:0}, tmp___32={0:0}, tmp___4=0, tmp___5=2147483648, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8397] tmp___33 = ldv_zalloc(1UL) [L8398] ldvarg45 = tmp___33 VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg10={0:0}, ldvarg11={0:0}, ldvarg12=2147483650, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg16={0:0}, ldvarg18={0:0}, ldvarg2=2147483648, ldvarg20={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg36={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg40={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg45={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ldvarg9={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=2147483650, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___29={0:0}, tmp___3={0:0}, tmp___30={0:0}, tmp___31={0:0}, tmp___32={0:0}, tmp___33={0:0}, tmp___4=0, tmp___5=2147483648, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8399] CALL, EXPR ldv_zalloc(104UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=104, \result={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=104, tmp___0=-33, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8399] RET, EXPR ldv_zalloc(104UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(104UL)={0:0}, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg10={0:0}, ldvarg11={0:0}, ldvarg12=2147483650, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg16={0:0}, ldvarg18={0:0}, ldvarg2=2147483648, ldvarg20={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg36={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg40={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg45={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ldvarg9={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=2147483650, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___29={0:0}, tmp___3={0:0}, tmp___30={0:0}, tmp___31={0:0}, tmp___32={0:0}, tmp___33={0:0}, tmp___4=0, tmp___5=2147483648, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8399] tmp___34 = ldv_zalloc(104UL) [L8400] ldvarg26 = (struct v4l2_capability *)tmp___34 VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg10={0:0}, ldvarg11={0:0}, ldvarg12=2147483650, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg16={0:0}, ldvarg18={0:0}, ldvarg2=2147483648, ldvarg20={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg26={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg36={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg40={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg45={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ldvarg9={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=2147483650, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___29={0:0}, tmp___3={0:0}, tmp___30={0:0}, tmp___31={0:0}, tmp___32={0:0}, tmp___33={0:0}, tmp___34={0:0}, tmp___4=0, tmp___5=2147483648, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8401] CALL, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=1, \result={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=1, tmp___0=-34, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8401] RET, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(1UL)={0:0}, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg10={0:0}, ldvarg11={0:0}, ldvarg12=2147483650, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg16={0:0}, ldvarg18={0:0}, ldvarg2=2147483648, ldvarg20={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg26={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg36={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg40={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg45={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ldvarg9={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=2147483650, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___29={0:0}, tmp___3={0:0}, tmp___30={0:0}, tmp___31={0:0}, tmp___32={0:0}, tmp___33={0:0}, tmp___34={0:0}, tmp___4=0, tmp___5=2147483648, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8401] tmp___35 = ldv_zalloc(1UL) [L8402] ldvarg27 = tmp___35 VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg10={0:0}, ldvarg11={0:0}, ldvarg12=2147483650, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg16={0:0}, ldvarg18={0:0}, ldvarg2=2147483648, ldvarg20={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg26={0:0}, ldvarg27={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg36={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg40={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg45={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ldvarg9={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=2147483650, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___29={0:0}, tmp___3={0:0}, tmp___30={0:0}, tmp___31={0:0}, tmp___32={0:0}, tmp___33={0:0}, tmp___34={0:0}, tmp___35={0:0}, tmp___4=0, tmp___5=2147483648, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8403] CALL, EXPR ldv_zalloc(80UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=80, \result={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=80, tmp___0=-35, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8403] RET, EXPR ldv_zalloc(80UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(80UL)={0:0}, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg10={0:0}, ldvarg11={0:0}, ldvarg12=2147483650, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg16={0:0}, ldvarg18={0:0}, ldvarg2=2147483648, ldvarg20={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg26={0:0}, ldvarg27={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg36={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg40={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg45={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ldvarg9={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=2147483650, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___29={0:0}, tmp___3={0:0}, tmp___30={0:0}, tmp___31={0:0}, tmp___32={0:0}, tmp___33={0:0}, tmp___34={0:0}, tmp___35={0:0}, tmp___4=0, tmp___5=2147483648, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8403] tmp___36 = ldv_zalloc(80UL) [L8404] ldvarg15 = (struct v4l2_input *)tmp___36 VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg10={0:0}, ldvarg11={0:0}, ldvarg12=2147483650, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg15={0:0}, ldvarg16={0:0}, ldvarg18={0:0}, ldvarg2=2147483648, ldvarg20={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg26={0:0}, ldvarg27={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg36={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg40={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg45={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ldvarg9={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=2147483650, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___29={0:0}, tmp___3={0:0}, tmp___30={0:0}, tmp___31={0:0}, tmp___32={0:0}, tmp___33={0:0}, tmp___34={0:0}, tmp___35={0:0}, tmp___36={0:0}, tmp___4=0, tmp___5=2147483648, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8405] CALL, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=1, \result={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=1, tmp___0=-36, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8405] RET, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(1UL)={0:0}, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg10={0:0}, ldvarg11={0:0}, ldvarg12=2147483650, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg15={0:0}, ldvarg16={0:0}, ldvarg18={0:0}, ldvarg2=2147483648, ldvarg20={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg26={0:0}, ldvarg27={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg36={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg40={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg45={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ldvarg9={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=2147483650, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___29={0:0}, tmp___3={0:0}, tmp___30={0:0}, tmp___31={0:0}, tmp___32={0:0}, tmp___33={0:0}, tmp___34={0:0}, tmp___35={0:0}, tmp___36={0:0}, tmp___4=0, tmp___5=2147483648, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8405] tmp___37 = ldv_zalloc(1UL) [L8406] ldvarg30 = tmp___37 VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg10={0:0}, ldvarg11={0:0}, ldvarg12=2147483650, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg15={0:0}, ldvarg16={0:0}, ldvarg18={0:0}, ldvarg2=2147483648, ldvarg20={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg26={0:0}, ldvarg27={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg30={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg36={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg40={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg45={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ldvarg9={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=2147483650, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___29={0:0}, tmp___3={0:0}, tmp___30={0:0}, tmp___31={0:0}, tmp___32={0:0}, tmp___33={0:0}, tmp___34={0:0}, tmp___35={0:0}, tmp___36={0:0}, tmp___37={0:0}, tmp___4=0, tmp___5=2147483648, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8407] CALL, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=1, \result={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=1, tmp___0=-37, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8407] RET, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(1UL)={0:0}, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg10={0:0}, ldvarg11={0:0}, ldvarg12=2147483650, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg15={0:0}, ldvarg16={0:0}, ldvarg18={0:0}, ldvarg2=2147483648, ldvarg20={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg26={0:0}, ldvarg27={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg30={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg36={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg40={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg45={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ldvarg9={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=2147483650, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___29={0:0}, tmp___3={0:0}, tmp___30={0:0}, tmp___31={0:0}, tmp___32={0:0}, tmp___33={0:0}, tmp___34={0:0}, tmp___35={0:0}, tmp___36={0:0}, tmp___37={0:0}, tmp___4=0, tmp___5=2147483648, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8407] tmp___38 = ldv_zalloc(1UL) [L8408] ldvarg21 = tmp___38 VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg10={0:0}, ldvarg11={0:0}, ldvarg12=2147483650, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg15={0:0}, ldvarg16={0:0}, ldvarg18={0:0}, ldvarg2=2147483648, ldvarg20={0:0}, ldvarg21={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg26={0:0}, ldvarg27={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg30={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg36={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg40={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg45={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ldvarg9={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=2147483650, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___29={0:0}, tmp___3={0:0}, tmp___30={0:0}, tmp___31={0:0}, tmp___32={0:0}, tmp___33={0:0}, tmp___34={0:0}, tmp___35={0:0}, tmp___36={0:0}, tmp___37={0:0}, tmp___38={0:0}, tmp___4=0, tmp___5=2147483648, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8409] CALL, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=1, \result={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=1, tmp___0=-38, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8409] RET, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(1UL)={0:0}, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg10={0:0}, ldvarg11={0:0}, ldvarg12=2147483650, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg15={0:0}, ldvarg16={0:0}, ldvarg18={0:0}, ldvarg2=2147483648, ldvarg20={0:0}, ldvarg21={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg26={0:0}, ldvarg27={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg30={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg36={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg40={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg45={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ldvarg9={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=2147483650, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___29={0:0}, tmp___3={0:0}, tmp___30={0:0}, tmp___31={0:0}, tmp___32={0:0}, tmp___33={0:0}, tmp___34={0:0}, tmp___35={0:0}, tmp___36={0:0}, tmp___37={0:0}, tmp___38={0:0}, tmp___4=0, tmp___5=2147483648, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8409] tmp___39 = ldv_zalloc(1UL) [L8410] ldvarg17 = tmp___39 VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg10={0:0}, ldvarg11={0:0}, ldvarg12=2147483650, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg15={0:0}, ldvarg16={0:0}, ldvarg17={0:0}, ldvarg18={0:0}, ldvarg2=2147483648, ldvarg20={0:0}, ldvarg21={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg26={0:0}, ldvarg27={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg30={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg36={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg40={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg45={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ldvarg9={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=2147483650, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___29={0:0}, tmp___3={0:0}, tmp___30={0:0}, tmp___31={0:0}, tmp___32={0:0}, tmp___33={0:0}, tmp___34={0:0}, tmp___35={0:0}, tmp___36={0:0}, tmp___37={0:0}, tmp___38={0:0}, tmp___39={0:0}, tmp___4=0, tmp___5=2147483648, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8411] CALL, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=1, \result={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=1, tmp___0=-39, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8411] RET, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(1UL)={0:0}, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg10={0:0}, ldvarg11={0:0}, ldvarg12=2147483650, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg15={0:0}, ldvarg16={0:0}, ldvarg17={0:0}, ldvarg18={0:0}, ldvarg2=2147483648, ldvarg20={0:0}, ldvarg21={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg26={0:0}, ldvarg27={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg30={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg36={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg40={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg45={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ldvarg9={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=2147483650, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___29={0:0}, tmp___3={0:0}, tmp___30={0:0}, tmp___31={0:0}, tmp___32={0:0}, tmp___33={0:0}, tmp___34={0:0}, tmp___35={0:0}, tmp___36={0:0}, tmp___37={0:0}, tmp___38={0:0}, tmp___39={0:0}, tmp___4=0, tmp___5=2147483648, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8411] tmp___40 = ldv_zalloc(1UL) [L8412] ldvarg25 = tmp___40 VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg10={0:0}, ldvarg11={0:0}, ldvarg12=2147483650, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg15={0:0}, ldvarg16={0:0}, ldvarg17={0:0}, ldvarg18={0:0}, ldvarg2=2147483648, ldvarg20={0:0}, ldvarg21={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg25={0:0}, ldvarg26={0:0}, ldvarg27={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg30={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg36={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg40={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg45={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ldvarg9={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=2147483650, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___29={0:0}, tmp___3={0:0}, tmp___30={0:0}, tmp___31={0:0}, tmp___32={0:0}, tmp___33={0:0}, tmp___34={0:0}, tmp___35={0:0}, tmp___36={0:0}, tmp___37={0:0}, tmp___38={0:0}, tmp___39={0:0}, tmp___4=0, tmp___40={0:0}, tmp___5=2147483648, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8413] CALL, EXPR ldv_zalloc(56UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=56, \result={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=56, tmp___0=-40, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8413] RET, EXPR ldv_zalloc(56UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(56UL)={0:0}, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg10={0:0}, ldvarg11={0:0}, ldvarg12=2147483650, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg15={0:0}, ldvarg16={0:0}, ldvarg17={0:0}, ldvarg18={0:0}, ldvarg2=2147483648, ldvarg20={0:0}, ldvarg21={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg25={0:0}, ldvarg26={0:0}, ldvarg27={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg30={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg36={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg40={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg45={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ldvarg9={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=2147483650, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___29={0:0}, tmp___3={0:0}, tmp___30={0:0}, tmp___31={0:0}, tmp___32={0:0}, tmp___33={0:0}, tmp___34={0:0}, tmp___35={0:0}, tmp___36={0:0}, tmp___37={0:0}, tmp___38={0:0}, tmp___39={0:0}, tmp___4=0, tmp___40={0:0}, tmp___5=2147483648, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8413] tmp___41 = ldv_zalloc(56UL) [L8414] ldvarg22 = (struct v4l2_dbg_register *)tmp___41 VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg10={0:0}, ldvarg11={0:0}, ldvarg12=2147483650, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg15={0:0}, ldvarg16={0:0}, ldvarg17={0:0}, ldvarg18={0:0}, ldvarg2=2147483648, ldvarg20={0:0}, ldvarg21={0:0}, ldvarg22={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg25={0:0}, ldvarg26={0:0}, ldvarg27={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg30={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg36={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg40={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg45={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ldvarg9={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=2147483650, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___29={0:0}, tmp___3={0:0}, tmp___30={0:0}, tmp___31={0:0}, tmp___32={0:0}, tmp___33={0:0}, tmp___34={0:0}, tmp___35={0:0}, tmp___36={0:0}, tmp___37={0:0}, tmp___38={0:0}, tmp___39={0:0}, tmp___4=0, tmp___40={0:0}, tmp___41={0:0}, tmp___5=2147483648, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8415] CALL, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=1, \result={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=1, tmp___0=-41, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8415] RET, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(1UL)={0:0}, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg10={0:0}, ldvarg11={0:0}, ldvarg12=2147483650, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg15={0:0}, ldvarg16={0:0}, ldvarg17={0:0}, ldvarg18={0:0}, ldvarg2=2147483648, ldvarg20={0:0}, ldvarg21={0:0}, ldvarg22={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg25={0:0}, ldvarg26={0:0}, ldvarg27={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg30={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg36={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg40={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg45={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ldvarg9={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=2147483650, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___29={0:0}, tmp___3={0:0}, tmp___30={0:0}, tmp___31={0:0}, tmp___32={0:0}, tmp___33={0:0}, tmp___34={0:0}, tmp___35={0:0}, tmp___36={0:0}, tmp___37={0:0}, tmp___38={0:0}, tmp___39={0:0}, tmp___4=0, tmp___40={0:0}, tmp___41={0:0}, tmp___5=2147483648, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8415] tmp___42 = ldv_zalloc(1UL) [L8416] ldvarg19 = tmp___42 [L8417] FCALL ldv_initialize() [L8418] FCALL memset((void *)(& ldvarg39), 0, 4UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg10={0:0}, ldvarg11={0:0}, ldvarg12=2147483650, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg15={0:0}, ldvarg16={0:0}, ldvarg17={0:0}, ldvarg18={0:0}, ldvarg19={0:0}, ldvarg2=2147483648, ldvarg20={0:0}, ldvarg21={0:0}, ldvarg22={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg25={0:0}, ldvarg26={0:0}, ldvarg27={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg30={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg36={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg40={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg45={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ldvarg9={0:0}, memset((void *)(& ldvarg39), 0, 4UL)={94:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=2147483650, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___29={0:0}, tmp___3={0:0}, tmp___30={0:0}, tmp___31={0:0}, tmp___32={0:0}, tmp___33={0:0}, tmp___34={0:0}, tmp___35={0:0}, tmp___36={0:0}, tmp___37={0:0}, tmp___38={0:0}, tmp___39={0:0}, tmp___4=0, tmp___40={0:0}, tmp___41={0:0}, tmp___42={0:0}, tmp___5=2147483648, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8419] FCALL memset((void *)(& ldvarg8), 0, 4UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg10={0:0}, ldvarg11={0:0}, ldvarg12=2147483650, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg15={0:0}, ldvarg16={0:0}, ldvarg17={0:0}, ldvarg18={0:0}, ldvarg19={0:0}, ldvarg2=2147483648, ldvarg20={0:0}, ldvarg21={0:0}, ldvarg22={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg25={0:0}, ldvarg26={0:0}, ldvarg27={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg30={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg36={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg40={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg45={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ldvarg9={0:0}, memset((void *)(& ldvarg8), 0, 4UL)={95:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=2147483650, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___29={0:0}, tmp___3={0:0}, tmp___30={0:0}, tmp___31={0:0}, tmp___32={0:0}, tmp___33={0:0}, tmp___34={0:0}, tmp___35={0:0}, tmp___36={0:0}, tmp___37={0:0}, tmp___38={0:0}, tmp___39={0:0}, tmp___4=0, tmp___40={0:0}, tmp___41={0:0}, tmp___42={0:0}, tmp___5=2147483648, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8420] ldv_state_variable_4 = 0 [L8421] ldv_state_variable_1 = 0 [L8422] ref_cnt = 0 [L8423] ldv_state_variable_0 = 1 [L8424] ldv_state_variable_3 = 0 [L8425] ldv_state_variable_2 = 0 VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg10={0:0}, ldvarg11={0:0}, ldvarg12=2147483650, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg15={0:0}, ldvarg16={0:0}, ldvarg17={0:0}, ldvarg18={0:0}, ldvarg19={0:0}, ldvarg2=2147483648, ldvarg20={0:0}, ldvarg21={0:0}, ldvarg22={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg25={0:0}, ldvarg26={0:0}, ldvarg27={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg30={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg36={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg40={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg45={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ldvarg9={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=2147483650, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___29={0:0}, tmp___3={0:0}, tmp___30={0:0}, tmp___31={0:0}, tmp___32={0:0}, tmp___33={0:0}, tmp___34={0:0}, tmp___35={0:0}, tmp___36={0:0}, tmp___37={0:0}, tmp___38={0:0}, tmp___39={0:0}, tmp___4=0, tmp___40={0:0}, tmp___41={0:0}, tmp___42={0:0}, tmp___5=2147483648, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8427] tmp___43 = __VERIFIER_nondet_int() [L8429] case 0: [L8455] case 1: [L8482] case 2: VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg10={0:0}, ldvarg11={0:0}, ldvarg12=2147483650, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg15={0:0}, ldvarg16={0:0}, ldvarg17={0:0}, ldvarg18={0:0}, ldvarg19={0:0}, ldvarg2=2147483648, ldvarg20={0:0}, ldvarg21={0:0}, ldvarg22={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg25={0:0}, ldvarg26={0:0}, ldvarg27={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg30={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg36={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg40={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg45={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ldvarg9={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=2147483650, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___29={0:0}, tmp___3={0:0}, tmp___30={0:0}, tmp___31={0:0}, tmp___32={0:0}, tmp___33={0:0}, tmp___34={0:0}, tmp___35={0:0}, tmp___36={0:0}, tmp___37={0:0}, tmp___38={0:0}, tmp___39={0:0}, tmp___4=0, tmp___40={0:0}, tmp___41={0:0}, tmp___42={0:0}, tmp___43=2, tmp___5=2147483648, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8483] COND TRUE ldv_state_variable_0 != 0 [L8484] tmp___46 = __VERIFIER_nondet_int() [L8486] case 0: [L8494] case 1: VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg10={0:0}, ldvarg11={0:0}, ldvarg12=2147483650, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg15={0:0}, ldvarg16={0:0}, ldvarg17={0:0}, ldvarg18={0:0}, ldvarg19={0:0}, ldvarg2=2147483648, ldvarg20={0:0}, ldvarg21={0:0}, ldvarg22={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg25={0:0}, ldvarg26={0:0}, ldvarg27={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg30={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg36={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg40={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg45={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ldvarg9={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=2147483650, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___29={0:0}, tmp___3={0:0}, tmp___30={0:0}, tmp___31={0:0}, tmp___32={0:0}, tmp___33={0:0}, tmp___34={0:0}, tmp___35={0:0}, tmp___36={0:0}, tmp___37={0:0}, tmp___38={0:0}, tmp___39={0:0}, tmp___4=0, tmp___40={0:0}, tmp___41={0:0}, tmp___42={0:0}, tmp___43=2, tmp___46=1, tmp___5=2147483648, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8495] COND TRUE ldv_state_variable_0 == 1 [L8496] CALL, EXPR gspca_init() [L8174] return (0); VAL [={0:0}, ={0:0}, \result=0, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8496] RET, EXPR gspca_init() [L8496] ldv_retval_0 = gspca_init() [L8497] COND TRUE ldv_retval_0 == 0 [L8498] ldv_state_variable_0 = 3 [L8499] ldv_state_variable_2 = 1 [L8500] CALL ldv_initialize_v4l2_ioctl_ops_2() [L8208] void *tmp ; [L8209] void *tmp___0 ; [L8210] void *tmp___1 ; [L8211] void *tmp___2 ; [L8212] void *tmp___3 ; [L8213] void *tmp___4 ; VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8215] CALL, EXPR ldv_zalloc(360UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=360, \result={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=360, tmp___0=-42, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8215] RET, EXPR ldv_zalloc(360UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(360UL)={0:0}, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8215] tmp = ldv_zalloc(360UL) [L8216] dev_ioctl_ops_group3 = (struct file *)tmp VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8217] CALL, EXPR ldv_zalloc(208UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=208, \result={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=208, tmp___0=-43, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8217] RET, EXPR ldv_zalloc(208UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(208UL)={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8217] tmp___0 = ldv_zalloc(208UL) [L8218] dev_ioctl_ops_group0 = (struct v4l2_format *)tmp___0 VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8219] CALL, EXPR ldv_zalloc(32UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=32, \result={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=32, tmp___0=-44, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8219] RET, EXPR ldv_zalloc(32UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(32UL)={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8219] tmp___1 = ldv_zalloc(32UL) [L8220] dev_ioctl_ops_group1 = (struct v4l2_event_subscription *)tmp___1 VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0={0:0}, tmp___1={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8221] CALL, EXPR ldv_zalloc(168UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=168, \result={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=168, tmp___0=-45, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8221] RET, EXPR ldv_zalloc(168UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(168UL)={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0={0:0}, tmp___1={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8221] tmp___2 = ldv_zalloc(168UL) [L8222] dev_ioctl_ops_group5 = (struct v4l2_fh *)tmp___2 VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8223] CALL, EXPR ldv_zalloc(88UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=88, \result={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=88, tmp___0=-46, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8223] RET, EXPR ldv_zalloc(88UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(88UL)={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8223] tmp___3 = ldv_zalloc(88UL) [L8224] dev_ioctl_ops_group4 = (struct v4l2_buffer *)tmp___3 VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8225] CALL, EXPR ldv_zalloc(204UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=204, \result={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=204, tmp___0=-47, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8225] RET, EXPR ldv_zalloc(204UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(204UL)={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8225] tmp___4 = ldv_zalloc(204UL) [L8226] dev_ioctl_ops_group2 = (struct v4l2_streamparm *)tmp___4 VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8500] RET ldv_initialize_v4l2_ioctl_ops_2() [L8501] ldv_state_variable_3 = 1 [L8502] CALL ldv_initialize_v4l2_file_operations_3() [L8190] void *tmp ; VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8192] CALL, EXPR ldv_zalloc(360UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=360, \result={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=360, tmp___0=-48, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8192] RET, EXPR ldv_zalloc(360UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, ldv_zalloc(360UL)={0:0}, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8192] tmp = ldv_zalloc(360UL) [L8193] dev_fops_group0 = (struct file *)tmp VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8502] RET ldv_initialize_v4l2_file_operations_3() [L8503] ldv_state_variable_1 = 1 [L8504] ldv_state_variable_4 = 1 [L8505] CALL ldv_initialize_vm_operations_struct_4() [L8199] void *tmp ; VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8201] CALL, EXPR ldv_zalloc(184UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=184, \result={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ref_cnt=0, SERIAL_STATE=0, size=184, tmp___0=-49, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8201] RET, EXPR ldv_zalloc(184UL) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_zalloc(184UL)={0:0}, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8201] tmp = ldv_zalloc(184UL) [L8202] gspca_vm_ops_group0 = (struct vm_area_struct *)tmp VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8505] RET ldv_initialize_vm_operations_struct_4() [L8508] COND FALSE !(ldv_retval_0 != 0) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg10={0:0}, ldvarg11={0:0}, ldvarg12=2147483650, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg15={0:0}, ldvarg16={0:0}, ldvarg17={0:0}, ldvarg18={0:0}, ldvarg19={0:0}, ldvarg2=2147483648, ldvarg20={0:0}, ldvarg21={0:0}, ldvarg22={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg25={0:0}, ldvarg26={0:0}, ldvarg27={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg30={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg36={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg40={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg45={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ldvarg9={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=2147483650, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___29={0:0}, tmp___3={0:0}, tmp___30={0:0}, tmp___31={0:0}, tmp___32={0:0}, tmp___33={0:0}, tmp___34={0:0}, tmp___35={0:0}, tmp___36={0:0}, tmp___37={0:0}, tmp___38={0:0}, tmp___39={0:0}, tmp___4=0, tmp___40={0:0}, tmp___41={0:0}, tmp___42={0:0}, tmp___43=2, tmp___46=1, tmp___5=2147483648, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8427] tmp___43 = __VERIFIER_nondet_int() [L8429] case 0: VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg10={0:0}, ldvarg11={0:0}, ldvarg12=2147483650, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg15={0:0}, ldvarg16={0:0}, ldvarg17={0:0}, ldvarg18={0:0}, ldvarg19={0:0}, ldvarg2=2147483648, ldvarg20={0:0}, ldvarg21={0:0}, ldvarg22={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg25={0:0}, ldvarg26={0:0}, ldvarg27={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg30={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg36={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg40={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg45={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ldvarg9={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=2147483650, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___29={0:0}, tmp___3={0:0}, tmp___30={0:0}, tmp___31={0:0}, tmp___32={0:0}, tmp___33={0:0}, tmp___34={0:0}, tmp___35={0:0}, tmp___36={0:0}, tmp___37={0:0}, tmp___38={0:0}, tmp___39={0:0}, tmp___4=0, tmp___40={0:0}, tmp___41={0:0}, tmp___42={0:0}, tmp___43=0, tmp___46=1, tmp___5=2147483648, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8430] COND TRUE ldv_state_variable_4 != 0 [L8431] tmp___44 = __VERIFIER_nondet_int() [L8433] case 0: [L8440] case 1: VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg10={0:0}, ldvarg11={0:0}, ldvarg12=2147483650, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg15={0:0}, ldvarg16={0:0}, ldvarg17={0:0}, ldvarg18={0:0}, ldvarg19={0:0}, ldvarg2=2147483648, ldvarg20={0:0}, ldvarg21={0:0}, ldvarg22={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg25={0:0}, ldvarg26={0:0}, ldvarg27={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg30={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg36={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg40={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg45={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ldvarg9={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=2147483650, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___29={0:0}, tmp___3={0:0}, tmp___30={0:0}, tmp___31={0:0}, tmp___32={0:0}, tmp___33={0:0}, tmp___34={0:0}, tmp___35={0:0}, tmp___36={0:0}, tmp___37={0:0}, tmp___38={0:0}, tmp___39={0:0}, tmp___4=0, tmp___40={0:0}, tmp___41={0:0}, tmp___42={0:0}, tmp___43=0, tmp___44=1, tmp___46=1, tmp___5=2147483648, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8441] COND TRUE ldv_state_variable_4 == 1 VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldvarg0={0:0}, ldvarg1=2147483651, ldvarg10={0:0}, ldvarg11={0:0}, ldvarg12=2147483650, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg15={0:0}, ldvarg16={0:0}, ldvarg17={0:0}, ldvarg18={0:0}, ldvarg19={0:0}, ldvarg2=2147483648, ldvarg20={0:0}, ldvarg21={0:0}, ldvarg22={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg25={0:0}, ldvarg26={0:0}, ldvarg27={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg30={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg36={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={94:0}, ldvarg4={0:0}, ldvarg40={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg45={0:0}, ldvarg5=0, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={95:0}, ldvarg9={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2147483651, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=2147483650, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___29={0:0}, tmp___3={0:0}, tmp___30={0:0}, tmp___31={0:0}, tmp___32={0:0}, tmp___33={0:0}, tmp___34={0:0}, tmp___35={0:0}, tmp___36={0:0}, tmp___37={0:0}, tmp___38={0:0}, tmp___39={0:0}, tmp___4=0, tmp___40={0:0}, tmp___41={0:0}, tmp___42={0:0}, tmp___43=0, tmp___44=1, tmp___46=1, tmp___5=2147483648, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8442] CALL gspca_vm_open(gspca_vm_ops_group0) VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vma={0:0}] [L5486] struct gspca_frame *frame ; [L5488] EXPR vma->vm_private_data [L5488] frame = (struct gspca_frame *)vma->vm_private_data [L5489] EXPR frame->vma_use_count VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, frame={2147483652:-54}, frame->vma_use_count=2147483647, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vma={0:0}, vma={0:0}] [L5489] frame->vma_use_count + 1 VAL [={0:0}, ={0:0}, __this_module={2147483649:2147483653}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={89:0}, dev_fops_group0={0:0}, dev_ioctl_ops={90:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, frame={2147483652:-54}, frame->vma_use_count=2147483647, gspca_debug=0, gspca_template={91:0}, gspca_vm_ops={88:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vma={0:0}, vma={0:0}] - UnprovableResult [Line: 6508]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6508]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 5977]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 5977]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6084]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6084]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7299]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7299]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 5199]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 5199]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7167]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7167]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6356]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6356]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6159]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6159]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6159]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6159]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6160]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6160]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6165]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6165]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6177]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6177]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6193]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6193]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6202]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6202]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6215]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6215]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6374]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6374]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6240]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6240]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6240]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6240]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6249]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6249]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6297]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6297]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6297]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6297]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6304]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6304]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6305]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6305]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6317]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6317]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6439]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6439]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6473]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6473]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7021]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7021]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 5950]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 5950]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6526]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6526]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6534]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6534]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 5499]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 5499]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 9162]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 9162]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7592]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7592]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 5745]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 5745]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7650]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7650]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 5489]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8444]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8444]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8463]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8463]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8471]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8471]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8543]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8543]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7759]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7759]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7775]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7775]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8571]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8571]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6617]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6617]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6625]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6625]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6633]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6633]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6780]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6780]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7494]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7494]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 5667]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 5667]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - StatisticsResult: Ultimate Automizer benchmark data CFG has 83 procedures, 1620 locations, 98 error locations. Started 1 CEGAR loops. OverallTime: 93.5s, OverallIterations: 8, TraceHistogramMax: 48, PathProgramHistogramMax: 2, EmptinessCheckTime: 0.1s, AutomataDifference: 68.3s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 28918 SdHoareTripleChecker+Valid, 56.4s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 27613 mSDsluCounter, 55004 SdHoareTripleChecker+Invalid, 50.6s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 36409 mSDsCounter, 10521 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 21887 IncrementalHoareTripleChecker+Invalid, 32408 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 10521 mSolverCounterUnsat, 18595 mSDtfsCounter, 21887 mSolverCounterSat, 0.4s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 1694 GetRequests, 1632 SyntacticMatches, 2 SemanticMatches, 60 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 45 ImplicationChecksByTransitivity, 0.8s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=23208occurred in iteration=7, InterpolantAutomatonStates: 58, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 9.3s AutomataMinimizationTime, 7 MinimizatonAttempts, 37704 StatesRemovedByMinimization, 6 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: 0.6s SsaConstructionTime, 2.6s SatisfiabilityAnalysisTime, 8.8s InterpolantComputationTime, 3082 NumberOfCodeBlocks, 3082 NumberOfCodeBlocksAsserted, 10 NumberOfCheckSat, 3066 ConstructedInterpolants, 0 QuantifiedInterpolants, 6200 SizeOfPredicates, 2 NumberOfNonLiveVariables, 7284 ConjunctsInSsa, 12 ConjunctsInUnsatCore, 10 InterpolantComputations, 6 PerfectInterpolantSequences, 39609/39627 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate proved your program to be incorrect! [2022-10-16 13:02:12,569 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request...